last executing test programs: 39.524276604s ago: executing program 3 (id=3362): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a704000055c0da3f740200001d00000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000cf4900000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 38.757267129s ago: executing program 3 (id=3363): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30c) 37.510419095s ago: executing program 3 (id=3372): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @any, 0x0, 0x2}, 0xe) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @random="e19d74de7dc1", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0400", 0x38, 0x6, 0x0, @remote, @local, {[], {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x0, 0xffff, 0x0, 0x6, {[@md5sig={0x1d, 0x12, "fb6ba0cd8f4e22c7624e2ada29619d18"}, @md5sig={0x13, 0x12, "3fb3be65a54fd336b0e78572bf7b439c"}]}}}}}}}}, 0x0) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x800) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) bind$packet(r3, &(0x7f0000000200)={0x11, 0xf5, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) connect$unix(r2, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 36.958243385s ago: executing program 3 (id=3376): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000001000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a31000000002c000000020a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a01020000000000000000010000000c00024000faff00000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31"], 0xc8}}, 0x0) socket$unix(0x1, 0x0, 0x0) close(0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000100)=0x7, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000000206010100cadec917f5d4f89d3240000000000000000500100005000100070000000900020073797a31000000001400078008001240fffff7fe080013400000ffff050004000000000010000300686173683a69702c6d616300100003006269"], 0x64}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) close(0x4) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f00000005c0)=[{&(0x7f0000000800)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r6, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3ff, 0x2f}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x3) r7 = socket(0x14, 0x6, 0x5) bind$inet(r7, 0x0, 0x0) socket(0x10, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x0, 0x0, r5, 0x5, '\x00', 0x0, r5, 0x2, 0x1, 0x5}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e000000040000000400000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='GPL\x00', 0x9, 0xd4, &(0x7f0000000640)=""/212, 0x41000, 0x40, '\x00', r8, 0x0, r5, 0x8, &(0x7f0000000740)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0xa, 0x9, 0xffff}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000008c0)=[r5, r5, r9, r5, r10], &(0x7f0000000900)=[{0x0, 0x5, 0x0, 0x3}, {0x1, 0x2, 0x6, 0x2}, {0x0, 0x0, 0x0, 0x7}, {0x3, 0x4, 0xe, 0x3}, {0x5, 0x3, 0xc, 0xa}, {0x0, 0x1, 0xd, 0x3}], 0x10, 0x2}, 0x94) 35.782147553s ago: executing program 3 (id=3383): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x20}, 0x0) 35.341974362s ago: executing program 3 (id=3386): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES64], 0x40}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2c020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0xffffffff, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007911b8000000000005000000000001009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf4e) writev(0xffffffffffffffff, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x7f, 0x0, 0x0, 0xbf1, 0x0, 0xffff7ffffffffffa, 0x8}, 0x0, 0x0, 0x0, 0x0) 28.049521183s ago: executing program 4 (id=3418): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r1, 0xc0189436, &(0x7f0000000080)) socket(0xa, 0x5, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x18) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0xcaa1, 0x401, @mcast1, 0x40800d}, 0x1c) socket(0xa, 0x3, 0x3a) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, 0x0, &(0x7f0000000180)) epoll_create(0x2) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'macvlan1\x00', &(0x7f00000000c0)=@ethtool_flash={0x33, 0x4, './file0\x00'}}) 24.94679259s ago: executing program 0 (id=3433): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000001a1a00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="400000041400030007000000000000000000000001000000"], 0x30}}, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f0000000000)=0x26) 24.745487189s ago: executing program 0 (id=3435): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={r2, 0x2, 0x7ff}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x150, r4, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf40}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4d483ce6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc8c5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x88}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x24000014}, 0x8000) 24.466712028s ago: executing program 2 (id=3436): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0x3, 0x6}, 0x6) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="e0000000100001002dbd7000fddbdf257874732874776f6669732829"], 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80) (async, rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001000410025bd70e0f9dbdf2500000006746182215bf83a1d4f8f04cf40fac9114037c11d9aeaf9350a41ed69cdca314fa005", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d0008000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async, rerun: 64) unshare(0xe040400) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r9 = socket(0x2b, 0x1, 0x0) listen(r9, 0x0) ppoll(&(0x7f0000000280)=[{r9, 0xa0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000080)=0x6f89c659e9b3087f) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="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"], 0x58}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES32=r4, @ANYRES64=r3, @ANYRES16=r8], 0x5c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000000) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000080)={'wlan1\x00', @random='\x00\x00]\x00N\v'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r12, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 24.123695169s ago: executing program 2 (id=3438): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002040)=@newlink={0x30, 0x10, 0x439, 0x0, 0x2, {0x0, 0x0, 0xe403, r3, 0x400}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8800) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x25}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}}, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000005c0), 0xa7c, r5}, 0x38) (async) r6 = socket(0x28, 0x5, 0x0) (async) r7 = socket(0x28, 0x805, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r7, 0x7) (async) accept4$unix(r7, 0x0, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x4c, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x30}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20084}, 0x854) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 23.654652512s ago: executing program 0 (id=3439): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x3, 0x3, 0x14, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x700, 0x1aa1fa57, 0x59f}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x20, 0x10, 0xffc, 0x7ff, {{0x5, 0x4, 0x1, 0x3, 0x14, 0x65, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100}}}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000006800e9782cbd7000ffdbdf250a00000004000000080005", @ANYRES32, @ANYBLOB="1400"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 23.653860109s ago: executing program 2 (id=3440): r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x2, 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, &(0x7f0000000080)={0x67723542, 0x1, 0x81, 0x8000, 0x2, 0x0, 0xe4}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4}, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r5, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1b}, @NL80211_ATTR_PMKID={0x14, 0x55, "7f6f8f805ff99078d592ea45b116822e"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0x7, 0x34, @random="a70316"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="ef8fb1d1afe6"}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000006, 0x4000010, r4, 0x4fc53000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r5, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x72}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20002000}, 0x40) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$OCFS2_IOC_REFLINK(r9, 0x40186f04, &(0x7f0000000500)={&(0x7f0000000480)='nl80211\x00', &(0x7f00000004c0)='*:^\x92\':*,.\x00', 0x8001}) socketpair(0x8, 0x6, 0x800, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r6) sendmsg$NL80211_CMD_LEAVE_IBSS(r11, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r12, 0x415, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xa001}, 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000700)={0x0, 0xfffffff9, 0x0, 0x576f}, 0x10) bind$packet(r10, &(0x7f0000000740)={0x11, 0x19, 0x0, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r11) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r7, &(0x7f0000000b40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000800)={0x2a4, r13, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x67}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x886c}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_FRAME={0x3e, 0x33, @mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xb1}, @broadcast, @device_b, @initial, {0x1, 0x80}}, 0x80, 0x2f, @default, @void, @val={0x2d, 0x1a, {0x1080, 0x2, 0x1, 0x0, {0xe0, 0x40, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1, 0x9, 0xd5}}}}, @NL80211_ATTR_FRAME={0x1eb, 0x33, @mgmt_frame=@action={{{}, {}, @broadcast, @broadcast, @initial, {0x1, 0x3}}, @mesh_hwmp_psel={0xd, 0x1, {@val={0x82, 0x5c, {{0x1, 0x1, 0x1}, 0x1, 0x2, 0x7, @device_a, 0x0, @void, 0x7, 0x8000, 0x6, [{{0x1}, @broadcast, 0xfffffc00}, {{0x1, 0x0, 0x1}, @broadcast, 0x134}, {{0x0, 0x0, 0x1}, @device_b, 0x101}, {{0x1, 0x0, 0x1}, @broadcast, 0xfffffffd}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @broadcast, 0x5}]}}, @val={0x83, 0x25, {{0x0, 0x1}, 0x7f, 0x81, @device_b, 0x1, @value=@device_b, 0x4, 0x0, @device_b, 0x6}}, @val={0x84, 0x12f, {0xe8, 0x13, [{{}, @device_b, 0x2}, {{}, @device_a, 0x4, @void, 0x2c}, {{}, @device_a, 0x0, @void, 0x4}, {{0x0, 0x1}, @device_a, 0xfffff97b, @value=@broadcast, 0x17}, {{0x0, 0x1}, @device_b, 0x2, @value, 0x34}, {{0x0, 0x1}, @device_a, 0x2, @value=@broadcast, 0x22}, {{0x0, 0x1}, @device_a, 0x5, @value=@broadcast, 0x26}, {{}, @device_b, 0x1f45, @void, 0x20}, {{0x0, 0x1}, @device_a, 0x6, @value, 0x15}, {{0x0, 0x1}, @device_b, 0x2a, @value, 0x38}, {{}, @device_b, 0x6, @void, 0x1e}, {{0x0, 0x1}, @broadcast, 0x101, @value, 0x34}, {{}, @broadcast, 0xfffffff7, @void, 0x19}, {{}, @device_a, 0x10, @void, 0x32}, {{}, @device_a, 0x604f, @void, 0x26}, {{0x0, 0x1}, @broadcast, 0x400, @value=@broadcast, 0x41}, {{}, @device_a, 0x7fffffff, @void, 0x36}, {{0x0, 0x1}, @broadcast, 0x5, @value, 0x32}, {{}, @device_b, 0x9, @void, 0x3d}]}}, @val={0x7e, 0x15, {{0x0, 0x9}, 0x7, 0x0, @device_b, 0x18, 0x6a, 0x8}}}}}}, @NL80211_ATTR_FRAME={0x34, 0x33, @mgmt_frame=@disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @from_mac=@device_b, {0x7, 0x9}, @value=@ver_80211n={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x15, @val={0x8c, 0x10, {0x6a2, "83502921802f", @short="5591270cbf692897"}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x4000801}, 0x41) getsockopt$inet6_mreq(r11, 0x29, 0x14, &(0x7f0000000b80)={@ipv4={""/10, ""/2, @broadcast}, 0x0}, &(0x7f0000000bc0)=0x14) r15 = getuid() setsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000c00)={{{@in6=@local, @in6=@mcast1, 0x4e23, 0x1, 0x4e22, 0x1, 0x0, 0x80, 0x0, 0x32, r14, r15}, {0x6, 0x7, 0x8, 0x9, 0x2688, 0xffffffffffffffa3, 0x9, 0x4}, {0x6, 0x3, 0x4, 0x66}, 0x8, 0x0, 0x1, 0x0, 0x3, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d5, 0x15}, 0x2, @in6=@loopback, 0x0, 0x0, 0x1, 0x40, 0xe77c, 0x5, 0x1}}, 0xe8) 23.590205416s ago: executing program 4 (id=3441): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x2, [@const={0xe}, @var={0xd, 0x0, 0x0, 0xe, 0x1}, @union={0xd, 0x5, 0x0, 0x5, 0x1, 0x0, [{0xc, 0x2, 0x9}, {0x5, 0x5, 0x9}, {0x9, 0x0, 0x7}, {0xd, 0x0, 0xfffffff9}, {0xc, 0x0, 0x2cc}]}]}}, &(0x7f0000000100)=""/141, 0x7e, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000f00)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008044}, 0xc004) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r7) syz_emit_ethernet(0x2e, &(0x7f0000000400)={@broadcast, @broadcast, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @multicast, @private=0xa010101, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, &(0x7f0000000440)={0x1, 0x2, [0xcf1, 0x9c4, 0x38, 0xccf]}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x4c, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x4c, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040010}, 0x84) r11 = socket$igmp6(0xa, 0x3, 0x2) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r11, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 23.446872321s ago: executing program 2 (id=3442): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) unshare(0x22020600) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4000084) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2000c040) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="a50a00000500000061112400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x4040040) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x700, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8c}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}}, 0x6843) 20.462307716s ago: executing program 0 (id=3444): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, r1, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000845) 20.407158563s ago: executing program 2 (id=3445): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000080)=0x3ff, 0x4) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) read$nci(r1, &(0x7f0000000200)=""/100, 0x64) read$nci(r1, 0x0, 0x0) write$nci(r1, &(0x7f0000000a00)=ANY=[@ANYBLOB="61050dfa02058002090604060106d5c03dbbb933e5ba963f1ed9eaa5c51a17489a54ed3ff1ef06b8208f15e4e6bcab33ae941c57dea77229d9d810e2bb"], 0xe4) r5 = socket(0x10, 0x3, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) recvmmsg$unix(r5, &(0x7f0000002a00)=[{{0xfffffffffffffffe, 0x0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/143, 0x8f}, {&(0x7f0000001980)=""/234, 0xea}, {&(0x7f0000000280)=""/154, 0x9a}, {&(0x7f0000000340)=""/248, 0xf8}, {&(0x7f0000000200)=""/44, 0x2c}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/189, 0xbd}, {&(0x7f0000001680)=""/155, 0x9b}], 0x8, &(0x7f0000001800)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}], 0x1, 0x2022, &(0x7f0000002b80)={0x77359400}) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x2, 0x1}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000190001002cbd70000029000000140e14e639000100000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write(r5, &(0x7f0000000240)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendto$inet6(r6, &(0x7f00000004c0)="f635e877f34197db819f6c54f350a3f5a03ee0cb68f784569b28981aa0f74c2ce4cd794241c7d738ea", 0x29, 0x0, &(0x7f0000000540)={0xa, 0x4e23, 0x0, @loopback, 0x4bf}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006300000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) sendmsg$NL80211_CMD_TESTMODE(r5, &(0x7f0000000a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000001a80)=ANY=[@ANYBLOB="d8020000", @ANYRES16=r8, @ANYBLOB="020423bd424b9f1e80c92557044d0fa3117000ffdbdf251d97508f08000300", @ANYRES32=r11, @ANYBLOB="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"], 0x2d8}, 0x1, 0x0, 0x0, 0x2004808c}, 0x6004) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) 20.166184778s ago: executing program 4 (id=3446): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0xfffff1de, 0x2000000, 0x0, 0xfffffffffffffefc, &(0x7f0000000440)}, 0x28) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000600)="27031600160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4) (async) socket$packet(0x11, 0x3, 0x300) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000002c0)={'bridge_slave_0\x00', @remote}) (async) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) (async) write$nci(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="410301001830752d01336611fc35851431cf092ab6f8719807cb7d015622d1718f"], 0x4) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xfdef) 19.508492059s ago: executing program 0 (id=3448): r0 = socket(0x840000000002, 0x3, 0xff) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074974}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xf, 0xffff}, {0xc, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x0) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000004c0)="974501000024491fbb000000eaf38f56120b55000000000000000000", 0x1c}], 0x1, &(0x7f0000000480)=[@ip_ttl={{0x14, 0x0, 0x2, 0xd}}], 0x18}, 0x4000000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f00000000c0)={0x7, 'team_slave_0\x00', {0x6af2}}) recvfrom$phonet(r0, &(0x7f0000000000)=""/109, 0x6d, 0x2000, &(0x7f0000000080)={0x23, 0x86}, 0x10) 19.253101948s ago: executing program 4 (id=3449): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, 0x0, &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xc}, 0x94) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10100, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r3, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) r5 = socket(0xa, 0x3, 0x3a) recvmmsg(r5, &(0x7f0000007bc0)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x22, 0x0) bind$bt_hci(r5, &(0x7f00000005c0)={0x1f, 0x4}, 0x17) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) socketpair(0x1f, 0x5, 0x3, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000180), &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x2000c090}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newrule={0x4c, 0x18, 0x20, 0x0, 0x0, {0xa, 0x14}, [@FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x1000}, @FRA_SRC={0x14, 0x2, @empty}]}, 0x4c}}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b0400000000000000e402000009400004803c0001800b00010065787468647200002c000280050002008300000008000740000000170800064000000001050002000000000008000340fffffffd0900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x2400c001}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x20, 0x1e, 0x2, 0x70bd2b, 0x25dfdbfe, {0x7}, [@typed={0x5, 0x2a, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x11}]}, 0x20}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) bind$l2tp(r10, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, 0x10) 19.110331143s ago: executing program 2 (id=3450): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002240)=ANY=[@ANYBLOB="3000000000100042603ea212800c00078000"/32, @ANYRES32=0x0, @ANYBLOB="0c00018006000600800a0000"], 0x30}, 0x1, 0x0, 0x0, 0x4040051}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000480)={0x3, {{0xa, 0x4, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r4, 0x29, 0x10000000000030, &(0x7f0000000840)=""/156, &(0x7f0000002280)=0x9c) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x30, r3, 0x121, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4014) sendmsg$NBD_CMD_CONNECT(r2, 0x0, 0x4008044) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xfffffef1}, {&(0x7f0000000700)="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", 0x116}], 0x3, &(0x7f0000000380)=[@assoc={0x18}], 0x18}], 0x1, 0x40800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040027bd7000ffdbdf25020000000c00030005000000000000000c0002000100000000000000280007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32=r9, @ANYBLOB="08000100000000000c0002000fd9000000000000beefa5af32af469887dfd2c71d0a002f73ad038a305183615df2ced24ef056042c7e33087c772d7e5269ffc628d3af113207e7c22c6186f9c9c29e38153b3e12251fb2ce25"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r10, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x20028810}, 0x2004014) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) 18.875316463s ago: executing program 0 (id=3452): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty, 0x3}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}}, 0x5c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x4, &(0x7f0000000200)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x1, 0x3, 0x0, 0x9, 0x4, 0x1, 0xffffffffffffffff}, @ldst={0x0, 0x1, 0x2, 0x9, 0x3, 0x40, 0xfffffffffffffff0}, @generic={0x61, 0xc, 0x9, 0x2, 0x8}], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xe6, &(0x7f0000000440)=""/230, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x4, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000600)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000640)=[{0x0, 0x2, 0xa, 0xb}, {0x3, 0x4, 0x0, 0x1}, {0x3, 0x4, 0x8, 0xb}, {0x0, 0x3, 0xe, 0x8}, {0x3, 0x5, 0xa, 0x8}, {0x4, 0x10000, 0x7}, {0x0, 0x1, 0xc, 0x6}], 0x10, 0x7}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000017c0), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000017c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001800)={0x24, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000002800)={{r0, &(0x7f0000000780)='}\x8e,\x00', 0x200, &(0x7f00000007c0)={@align=0xc1d2, {0x1, 0x6ce, 0x10, 0x3}}, 0x8, &(0x7f0000000800)={@_ha_fsid}, &(0x7f0000000840)=0xe}, 0x4, &(0x7f0000002780)=[{0x2, 0x1, &(0x7f0000000880)='veth0_to_bridge\x00', &(0x7f00000008c0)="d484098b6bf7bd1c199fa389454cd8ea37fe664f05a08b292a05a123679304f95cfa136c51f588885e66a7392c63ad683f90acc7d5252bd8d8e30a28c3abea4fc34820bb7e0699b90027aed441a8024967a3f9518fc5c374be17a780f7791516145e468a5a4704f14cb73c5684dbeb82525ca50d3a8ef361989db278e1351ffa6e4ba0d29f0a255cbd63fda425c0de24", 0x90, 0x2}, {0x2, 0x5, &(0x7f0000000980)='veth0_to_bridge\x00', &(0x7f0000001580)="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", 0x1000, 0x30}, {0x3, 0x4, &(0x7f0000002580)='cake\x00', &(0x7f00000025c0)="3e486911d3d72c259f42b339bd17062ec2ab0f6aa481a21966fe0630fb4464f7baf6428687bacfb29ed258e56667b0ac10a4556bf6d3ed26e32783d79f550276112305e6c2a74fcb33597121310736dc4ef86ee638d9335af390d711cecbeec94341bed8c2f8bf233a3414ee6d6de1c68fd3aaf1eb3ec7451630a40d1af07072a74c54ed372f849e8d95022391050158b5ca08d869440b1042645a15dc7712a086694d78b0c205ca6b20934916385d5809116fe7e76f57", 0xb7, 0x8}, {0x2, 0x8, &(0x7f0000002680)='\f\x00', &(0x7f00000026c0)="efdac9a9531e54acc5da81850aabd14d0685f70f599c4c261533b93359f5fe562e225869a2cc0b1c9a6c42dba8c3cbd364950a09f92aef6e513776b3ddcfd2155b6aa780ad8c11f67bf668e39c8f3c5885f1e2efc6335fa13d67d47424e124bcb24418336dcc6628fa4dddaa8f7a52da50cbba1b63e1f97d0747c69b3bb3100d28185c201a7225a5a508d53a3111f0ff7ce0decf120b4877d6c0b319e29a69eb", 0xa0, 0x2a}]}) sendmsg$nl_route(r2, &(0x7f0000002a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002a40)={&(0x7f0000002880)=@dellink={0x184, 0x11, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x408, 0x800}, [@IFLA_TXQLEN={0x8, 0xd, 0x6}, @IFLA_EVENT={0x8, 0x2c, 0x2}, @IFLA_GROUP={0x8, 0x1b, 0xffff}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_XDP={0x4c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r8}]}, @IFLA_VF_PORTS={0xc8, 0x18, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2104cc02c4cbbbdf29afb3dea43b669a"}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_PROFILE={0x9, 0x2, 'TIPC\x00'}, @IFLA_PORT_PROFILE={0x9, 0x2, 'cake\x00'}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9879f3e2861ab9963f4ce2b81b289265"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3a729e459042bc437dc6db2c25833e03"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d3c3afde94b9c1a059b1bfee3a26879c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b8600ee90841ea9055866c5f9d711dd5"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9b3bc59b149d37703493592d70502d59"}]}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x78d35}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x87}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000c0}, 0x4d) (async) sendmsg$nl_route(r2, &(0x7f0000002a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002a40)={&(0x7f0000002880)=@dellink={0x184, 0x11, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x408, 0x800}, [@IFLA_TXQLEN={0x8, 0xd, 0x6}, @IFLA_EVENT={0x8, 0x2c, 0x2}, @IFLA_GROUP={0x8, 0x1b, 0xffff}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_XDP={0x4c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r8}]}, @IFLA_VF_PORTS={0xc8, 0x18, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2104cc02c4cbbbdf29afb3dea43b669a"}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_PROFILE={0x9, 0x2, 'TIPC\x00'}, @IFLA_PORT_PROFILE={0x9, 0x2, 'cake\x00'}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9879f3e2861ab9963f4ce2b81b289265"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3a729e459042bc437dc6db2c25833e03"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d3c3afde94b9c1a059b1bfee3a26879c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b8600ee90841ea9055866c5f9d711dd5"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9b3bc59b149d37703493592d70502d59"}]}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x78d35}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x87}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000c0}, 0x4d) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000010c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r11, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x17, 0x3, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r11, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x17, 0x3, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRESOCT=r1, @ANYBLOB="00000000000000003400128009000100626f6e640000000024000280050001000400000008001e0000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) (async) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRESOCT=r1, @ANYBLOB="00000000000000003400128009000100626f6e640000000024000280050001000400000008001e0000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) 18.253719427s ago: executing program 4 (id=3454): socket$kcm(0xa, 0x7, 0x0) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) r2 = epoll_create1(0x0) r3 = socket(0x1d, 0x2, 0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1a000, r3, &(0x7f0000000000)={0x10000000}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a800800", @ANYRES16=r4], 0x44}}, 0x2000800) 16.970486035s ago: executing program 4 (id=3456): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x88a00, 0x0) r0 = socket(0xa, 0x3, 0x3a) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) socket$inet6(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000844) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000580)={&(0x7f0000000140), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x13, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_USERDATA={0x1e, 0x8, "8774835a82d6ca8a2fced1935482d91fa8b927ed55c31c215e28"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004004}, 0x81) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000c9c8fb473a5cf131f547e0545a315473bc1dcd4a8b8262efe2455a3dce10b01bc93d1e30f080bc8207c1166c01e15b685ffec99bc84b0ac1752a7c6818d6627c0e791de64ada18827bcdcf58deb6f78ec66a1cca5c617481076e30638f24b94de36968cada26d961ddfa69a9bca19b76a7a1fcbb3b972a847478e5c2f8ad915cd04324efcbc5922ac0b2b6b914bac2f27077f5cff7aa013cb134", @ANYRES16=r0, @ANYBLOB="030300000000000000011100000008000300", @ANYRES8=r1, @ANYBLOB], 0x1c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 16.716009824s ago: executing program 1 (id=3458): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) listen(r1, 0x3) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x65}]}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x25, 0x0, 0x0) 16.518034708s ago: executing program 1 (id=3459): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xc, 0x810, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x1b, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000000)='GPL\x00', 0xb, 0xfed, &(0x7f0000000780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8040d}, 0x94) 16.421306632s ago: executing program 1 (id=3460): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="29000000140005b79ad5670e14d1144fa94f86dca606a40e06fff024bb000000000000000040000000988ed4750b82df54bce231cc070000006d333d5ec9ddf4c45ee6307c1592e1b0875d85ae38f724157a08f8fe67747deb5992c8daf9fbe01f4e73630d2c82cfa98129fd765168c43a6610806f4bad87855fa3e41218170e17d41ee750139aa7f39d614417c47c2153d6308ba729b7dbc2f61a4959d9945ea27bdad25feb86033b19b51908d59e4dab55c29a2d1d798fc8dd782c070eb3959d47930cf06846a96aab610ae075e8c91f", 0xd1) 16.280661953s ago: executing program 1 (id=3461): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080), 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x110}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x207) (async) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x207) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000007b40)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2d659, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000007ac0)=[{0x5, 0x5, 0x4, 0x2}], 0x10, 0xd}, 0x94) r4 = socket$inet_sctp(0x2, 0x5, 0x84) unshare(0x2c020400) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000) (async) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x87f64000) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000), 0x20000328) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x9, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000100)=0xffff0080) 16.064882834s ago: executing program 1 (id=3462): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008c00000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendto(r0, &(0x7f0000000380)="038d20580caa93b9c7c1440c56e7813429a0ad5559cfe206efb9b0a27b976de14afc50a8af43ee4e8bd1900548e93732eaf7bede54b23a1d2b02b35be767f9d92e21cba056a952ceacec5fc59f711ddfea35f6b2aa7406d556ef7d80273684558c8b125faa2840019c2a97be927b0d29d3b66dff243d5321648d77", 0x7b, 0x44001, &(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x2, 0x0, 0x1, {0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}}, 0x80) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) close(0x4) (rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="68000000000701fbcac01ba919995900010000010c00064000000000000000020c000340000000000000000508000540000000020900010073797a3000000000080005400000000308000540000000010c000240"], 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x6a040000) (async, rerun: 64) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) (async, rerun: 32) recvfrom(r4, &(0x7f0000000200)=""/29, 0x1d, 0x140, 0x0, 0x0) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=@base={0x16, 0x0, 0xb4, 0x7f}, 0x50) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @generic={0x79, 0x0, 0x0, 0x151}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000001c0)={0x0, 0x1, 0xc, 0x0, 0x2}, 0xc) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000000)=0x7, 0x2) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYRESDEC=r5, @ANYRES16=r8, @ANYBLOB="05032bbd7000ffdbdf250100000004000280040003009a1c8c4ccd59ba885662328dd1142b7d67061ed643b1775ed2fcfa76d4ca0049c8fa0893dc80133ebd4edf03b51346c0939b860a149830e22e93070cee87b7f3e0eb84841e75136ed385a4d6ee9487f3cf19f90045c48700b4c99983fb3116f167a7006cc0e4552229323b0957b7770b80ae8f1f539fffc1ec30085064f7dc2b748af64af2eb259f720f56716b251a6c7f53986de3ec34882dedcaa04b61a6ce9a53c49773dbb30be8707d11cd5b91538f9053e9a2c5d002bb381c05f0dcbc0d74e8ebabfe8a130df5d693d5392840909f0699ccc7fbf650e93dc91e47c44b5c71a15d84c6c6ac18deb9e32bd10d9587938c3ed75d1f5be1a7edcaf05dc10d9a9635ba64c67c90ec977116d848e57ee115bcc9d30eade23b6296b1173e943d5f409365df23496d2d37500d0b757f764d85d2728bf326ea685120d72894c23c4e76c20667db1b1be262ceaeb4b7a59071153b4b81d543959960dc4e3e182b63e1099e14d2ffd64b6a59c7a36f1137d46ede3a82e5db6c972250860e163695582e02ab4f569d7edf66345362c752a64f962000edc6b2ce3a78e79e6c1ce3cf881997a36d015d52e5ffac43103059b543b8535031e31efd88adca923d7aaa7772d39448b1b500"/490], 0x1c}, 0x1, 0x0, 0x0, 0x40008d4}, 0x0) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000540)=0x5, 0x4) 15.974523071s ago: executing program 1 (id=3463): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000100000000fcdbdf252d00000008002f00adc8000008002f00000000000a00ab500000616e30000000"], 0x30}}, 0x20048840) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000d40)=[{0x0}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000900), 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004200010a00000000000000000a0099"], 0x14}}, 0x0) bind$alg(r6, 0x0, 0x0) r8 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad00000000000000", 0x8) recvmmsg(r8, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee0, 0x8031, 0xffffffffffffffff, 0x8c761000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYRESDEC=r1, @ANYBLOB="0000000000000000300012800b000100697036746e6c00002000028014000300fe8000000000000000000000000000aa050009002900000008000400000001"], 0x58}, 0x1, 0x0, 0x0, 0x48844}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid_for_children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180200007500000000260000009500"/32], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) r10 = socket(0x10, 0x3, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESDEC=r11, @ANYBLOB="280025bd7000fedbdf250100000000000000000018001700008000000000057564703a73797a3900000000000000383f879f6f325d25ca985639493525acc0092f04a791dbd5d7663b02814c59ee63555d9730f0a27681d9d90d0a632bf33003b7a0f448d639c24af5ed8eea746e7ac8de4de485420b000000800000000003d818fb846de21a16978d288e184d7b6194e6060de715a1c3fe3b9fa354c26a897076dbb9bd16754d13aa5c3e7371b1d186e435d93f6c99f15d4d1116d165056ca7b104b8138f35b16eb90279aa917ff73e1a4cfeb033f3ac43c798af247afa1c74a27c3957ee14f52290ca9be5d8e40d"], 0x34}}, 0x40000) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r11, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x1, 0x3ff, @l2={'eth', 0x3a, 'macsec0\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200010100000000e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="000000000040ead008001d00c3"], 0x28}}, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x0, 0x0) 3.524720681s ago: executing program 32 (id=3452): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty, 0x3}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}}, 0x5c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x4, &(0x7f0000000200)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x1, 0x3, 0x0, 0x9, 0x4, 0x1, 0xffffffffffffffff}, @ldst={0x0, 0x1, 0x2, 0x9, 0x3, 0x40, 0xfffffffffffffff0}, @generic={0x61, 0xc, 0x9, 0x2, 0x8}], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xe6, &(0x7f0000000440)=""/230, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x4, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000600)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000640)=[{0x0, 0x2, 0xa, 0xb}, {0x3, 0x4, 0x0, 0x1}, {0x3, 0x4, 0x8, 0xb}, {0x0, 0x3, 0xe, 0x8}, {0x3, 0x5, 0xa, 0x8}, {0x4, 0x10000, 0x7}, {0x0, 0x1, 0xc, 0x6}], 0x10, 0x7}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000017c0), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000017c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001800)={0x24, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000002800)={{r0, &(0x7f0000000780)='}\x8e,\x00', 0x200, &(0x7f00000007c0)={@align=0xc1d2, {0x1, 0x6ce, 0x10, 0x3}}, 0x8, &(0x7f0000000800)={@_ha_fsid}, &(0x7f0000000840)=0xe}, 0x4, &(0x7f0000002780)=[{0x2, 0x1, &(0x7f0000000880)='veth0_to_bridge\x00', &(0x7f00000008c0)="d484098b6bf7bd1c199fa389454cd8ea37fe664f05a08b292a05a123679304f95cfa136c51f588885e66a7392c63ad683f90acc7d5252bd8d8e30a28c3abea4fc34820bb7e0699b90027aed441a8024967a3f9518fc5c374be17a780f7791516145e468a5a4704f14cb73c5684dbeb82525ca50d3a8ef361989db278e1351ffa6e4ba0d29f0a255cbd63fda425c0de24", 0x90, 0x2}, {0x2, 0x5, &(0x7f0000000980)='veth0_to_bridge\x00', &(0x7f0000001580)="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", 0x1000, 0x30}, {0x3, 0x4, &(0x7f0000002580)='cake\x00', &(0x7f00000025c0)="3e486911d3d72c259f42b339bd17062ec2ab0f6aa481a21966fe0630fb4464f7baf6428687bacfb29ed258e56667b0ac10a4556bf6d3ed26e32783d79f550276112305e6c2a74fcb33597121310736dc4ef86ee638d9335af390d711cecbeec94341bed8c2f8bf233a3414ee6d6de1c68fd3aaf1eb3ec7451630a40d1af07072a74c54ed372f849e8d95022391050158b5ca08d869440b1042645a15dc7712a086694d78b0c205ca6b20934916385d5809116fe7e76f57", 0xb7, 0x8}, {0x2, 0x8, &(0x7f0000002680)='\f\x00', &(0x7f00000026c0)="efdac9a9531e54acc5da81850aabd14d0685f70f599c4c261533b93359f5fe562e225869a2cc0b1c9a6c42dba8c3cbd364950a09f92aef6e513776b3ddcfd2155b6aa780ad8c11f67bf668e39c8f3c5885f1e2efc6335fa13d67d47424e124bcb24418336dcc6628fa4dddaa8f7a52da50cbba1b63e1f97d0747c69b3bb3100d28185c201a7225a5a508d53a3111f0ff7ce0decf120b4877d6c0b319e29a69eb", 0xa0, 0x2a}]}) sendmsg$nl_route(r2, &(0x7f0000002a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002a40)={&(0x7f0000002880)=@dellink={0x184, 0x11, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x408, 0x800}, [@IFLA_TXQLEN={0x8, 0xd, 0x6}, @IFLA_EVENT={0x8, 0x2c, 0x2}, @IFLA_GROUP={0x8, 0x1b, 0xffff}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_XDP={0x4c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r8}]}, @IFLA_VF_PORTS={0xc8, 0x18, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2104cc02c4cbbbdf29afb3dea43b669a"}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_PROFILE={0x9, 0x2, 'TIPC\x00'}, @IFLA_PORT_PROFILE={0x9, 0x2, 'cake\x00'}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9879f3e2861ab9963f4ce2b81b289265"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3a729e459042bc437dc6db2c25833e03"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d3c3afde94b9c1a059b1bfee3a26879c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b8600ee90841ea9055866c5f9d711dd5"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9b3bc59b149d37703493592d70502d59"}]}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x78d35}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x87}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000c0}, 0x4d) (async) sendmsg$nl_route(r2, &(0x7f0000002a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002a40)={&(0x7f0000002880)=@dellink={0x184, 0x11, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x408, 0x800}, [@IFLA_TXQLEN={0x8, 0xd, 0x6}, @IFLA_EVENT={0x8, 0x2c, 0x2}, @IFLA_GROUP={0x8, 0x1b, 0xffff}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_XDP={0x4c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r8}]}, @IFLA_VF_PORTS={0xc8, 0x18, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2104cc02c4cbbbdf29afb3dea43b669a"}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_PROFILE={0x9, 0x2, 'TIPC\x00'}, @IFLA_PORT_PROFILE={0x9, 0x2, 'cake\x00'}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9879f3e2861ab9963f4ce2b81b289265"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3a729e459042bc437dc6db2c25833e03"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d3c3afde94b9c1a059b1bfee3a26879c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b8600ee90841ea9055866c5f9d711dd5"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9b3bc59b149d37703493592d70502d59"}]}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x78d35}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x87}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000c0}, 0x4d) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000010c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r11, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x17, 0x3, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r11, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x17, 0x3, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRESOCT=r1, @ANYBLOB="00000000000000003400128009000100626f6e640000000024000280050001000400000008001e0000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) (async) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRESOCT=r1, @ANYBLOB="00000000000000003400128009000100626f6e640000000024000280050001000400000008001e0000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) 3.420884941s ago: executing program 33 (id=3450): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002240)=ANY=[@ANYBLOB="3000000000100042603ea212800c00078000"/32, @ANYRES32=0x0, @ANYBLOB="0c00018006000600800a0000"], 0x30}, 0x1, 0x0, 0x0, 0x4040051}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000480)={0x3, {{0xa, 0x4, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r4, 0x29, 0x10000000000030, &(0x7f0000000840)=""/156, &(0x7f0000002280)=0x9c) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x30, r3, 0x121, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4014) sendmsg$NBD_CMD_CONNECT(r2, 0x0, 0x4008044) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xfffffef1}, {&(0x7f0000000700)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da98847fa6d197b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f10737fff413ec95f3f00b74ee0b29ece9b69f72fb4c2aa6c7dfa87c9fe2aee84bb3a92701c9023dd4d8cf3ca1472c5e575437195e2c6e7be4309e7e13c09dc61faa43311c1fa08644f", 0x116}], 0x3, &(0x7f0000000380)=[@assoc={0x18}], 0x18}], 0x1, 0x40800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00'}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040027bd7000ffdbdf25020000000c00030005000000000000000c0002000100000000000000280007800c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32=r8, @ANYBLOB="0c00018008000100", @ANYRES32=r9, @ANYBLOB="08000100000000000c0002000fd9000000000000beefa5af32af469887dfd2c71d0a002f73ad038a305183615df2ced24ef056042c7e33087c772d7e5269ffc628d3af113207e7c22c6186f9c9c29e38153b3e12251fb2ce25"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r10, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x20028810}, 0x2004014) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) 1.475489331s ago: executing program 34 (id=3456): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x88a00, 0x0) r0 = socket(0xa, 0x3, 0x3a) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) socket$inet6(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000844) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000580)={&(0x7f0000000140), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x13, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_USERDATA={0x1e, 0x8, "8774835a82d6ca8a2fced1935482d91fa8b927ed55c31c215e28"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004004}, 0x81) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000c9c8fb473a5cf131f547e0545a315473bc1dcd4a8b8262efe2455a3dce10b01bc93d1e30f080bc8207c1166c01e15b685ffec99bc84b0ac1752a7c6818d6627c0e791de64ada18827bcdcf58deb6f78ec66a1cca5c617481076e30638f24b94de36968cada26d961ddfa69a9bca19b76a7a1fcbb3b972a847478e5c2f8ad915cd04324efcbc5922ac0b2b6b914bac2f27077f5cff7aa013cb134", @ANYRES16=r0, @ANYBLOB="030300000000000000011100000008000300", @ANYRES8=r1, @ANYBLOB], 0x1c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 0s ago: executing program 35 (id=3463): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000100000000fcdbdf252d00000008002f00adc8000008002f00000000000a00ab500000616e30000000"], 0x30}}, 0x20048840) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000d40)=[{0x0}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000900), 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000004200010a00000000000000000a0099"], 0x14}}, 0x0) bind$alg(r6, 0x0, 0x0) r8 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad00000000000000", 0x8) recvmmsg(r8, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee0, 0x8031, 0xffffffffffffffff, 0x8c761000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYRESDEC=r1, @ANYBLOB="0000000000000000300012800b000100697036746e6c00002000028014000300fe8000000000000000000000000000aa050009002900000008000400000001"], 0x58}, 0x1, 0x0, 0x0, 0x48844}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid_for_children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180200007500000000260000009500"/32], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) r10 = socket(0x10, 0x3, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESDEC=r11, @ANYBLOB="280025bd7000fedbdf250100000000000000000018001700008000000000057564703a73797a3900000000000000383f879f6f325d25ca985639493525acc0092f04a791dbd5d7663b02814c59ee63555d9730f0a27681d9d90d0a632bf33003b7a0f448d639c24af5ed8eea746e7ac8de4de485420b000000800000000003d818fb846de21a16978d288e184d7b6194e6060de715a1c3fe3b9fa354c26a897076dbb9bd16754d13aa5c3e7371b1d186e435d93f6c99f15d4d1116d165056ca7b104b8138f35b16eb90279aa917ff73e1a4cfeb033f3ac43c798af247afa1c74a27c3957ee14f52290ca9be5d8e40d"], 0x34}}, 0x40000) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r11, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x1, 0x3ff, @l2={'eth', 0x3a, 'macsec0\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200010100000000e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="000000000040ead008001d00c3"], 0x28}}, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x0, 0x0) kernel console output (not intermixed with test programs): 428.850151][T17584] bridge19: entered promiscuous mode [ 428.864095][T17584] bond16: (slave bridge19): Enslaving as an active interface with an up link [ 428.925743][T17587] 8021q: adding VLAN 0 to HW filter on device bond14 [ 428.933424][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 428.933734][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 429.228939][T17612] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 429.261800][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 429.341083][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 429.361731][ T5638] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 429.382550][ T5638] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 429.391880][ T5638] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 429.407505][ T5638] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 429.419238][ T5638] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 429.775427][T17622] syzkaller0: entered promiscuous mode [ 429.793806][T17622] syzkaller0: entered allmulticast mode [ 429.975967][T17649] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2958'. [ 431.494065][ T5638] Bluetooth: hci5: command tx timeout [ 432.320582][T17649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 432.341772][T17650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 432.357984][T17653] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 432.762916][T17614] lo speed is unknown, defaulting to 1000 [ 433.077201][T17692] IPVS: set_ctl: invalid protocol: 29 172.20.20.10:20002 [ 433.085092][T17694] xt_SECMARK: invalid mode: 4 [ 433.119545][T17694] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2967'. [ 433.505226][T17714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2973'. [ 433.517676][T17714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2973'. [ 433.571810][ T5638] Bluetooth: hci5: command tx timeout [ 433.636161][T17712] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2972'. [ 433.684182][T17721] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2976'. [ 434.021590][T17741] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.2981'. [ 434.061056][T17741] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 434.079916][T17741] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2981'. [ 434.144127][T17614] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.152233][T17614] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.159605][T17614] bridge_slave_0: entered allmulticast mode [ 434.167908][T17614] bridge_slave_0: entered promiscuous mode [ 434.180993][T17752] xt_SECMARK: invalid mode: 4 [ 434.194300][T17754] veth0_to_bridge: entered promiscuous mode [ 434.202475][T17754] macvtap0: entered allmulticast mode [ 434.208051][T17754] veth0_to_bridge: entered allmulticast mode [ 434.217117][T17754] veth0_to_bridge: left allmulticast mode [ 434.224276][T17754] veth0_to_bridge: left promiscuous mode [ 434.266725][T17614] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.274401][T17614] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.281953][T17614] bridge_slave_1: entered allmulticast mode [ 434.289627][T17614] bridge_slave_1: entered promiscuous mode [ 434.326443][T17755] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2984'. [ 434.338882][T17614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.353941][T17614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.397661][T17614] team0: Port device team_slave_0 added [ 434.406217][T17614] team0: Port device team_slave_1 added [ 434.435977][T17614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.443035][T17614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.469769][T17614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.482641][T17614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.489625][T17614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.515914][T17614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.567154][T17614] hsr_slave_0: entered promiscuous mode [ 434.574157][T17614] hsr_slave_1: entered promiscuous mode [ 434.580421][T17614] debugfs: 'hsr0' already exists in 'hsr' [ 434.586404][T17614] Cannot create hsr debugfs directory [ 434.811965][T17614] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.824382][T17614] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 434.834479][T17614] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 434.845551][T17614] netdevsim netdevsim2 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 434.863860][T17761] netlink: 'syz.1.2986': attribute type 13 has an invalid length. [ 434.883036][T17761] netlink: 'syz.1.2986': attribute type 17 has an invalid length. [ 435.131675][T17760] team_slave_0: left promiscuous mode [ 435.148672][T17760] team_slave_1: left promiscuous mode [ 435.652135][ T5638] Bluetooth: hci5: command tx timeout [ 436.198747][T17761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.207512][T17761] 8021q: adding VLAN 0 to HW filter on device ` [ 436.270532][T17761] veth1_vlan: left promiscuous mode [ 436.278432][T17761] veth0_vlan: left promiscuous mode [ 436.285973][T17761] veth0_vlan: entered promiscuous mode [ 436.296975][T17761] veth1_vlan: entered promiscuous mode [ 436.310018][T17761] veth1_macvtap: left promiscuous mode [ 436.317349][T17761] veth0_macvtap: left promiscuous mode [ 436.325259][T17761] veth0_macvtap: entered promiscuous mode [ 436.334009][T17761] veth1_macvtap: entered promiscuous mode [ 436.350435][T17761] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 436.358478][T17761] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 436.374518][T17761] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.386187][T17761] 8021q: adding VLAN 0 to HW filter on device bond2 [ 436.394450][T17761] 8021q: adding VLAN 0 to HW filter on device team1 [ 436.402303][T17761] 8021q: adding VLAN 0 to HW filter on device team2 [ 436.438570][T17761] 8021q: adding VLAN 0 to HW filter on device bond3 [ 436.459309][T17761] 8021q: adding VLAN 0 to HW filter on device bond4 [ 436.472217][T17761] 8021q: adding VLAN 0 to HW filter on device bond5 [ 436.482540][T17761] 8021q: adding VLAN 0 to HW filter on device bond6 [ 436.516953][T17761] 8021q: adding VLAN 0 to HW filter on device bond7 [ 436.525598][T17761] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.536290][T17761] 8021q: adding VLAN 0 to HW filter on device team3 [ 436.546139][T17761] 8021q: adding VLAN 0 to HW filter on device bond8 [ 436.554377][T17761] 8021q: adding VLAN 0 to HW filter on device bond9 [ 436.564263][T17761] 8021q: adding VLAN 0 to HW filter on device eth0 [ 436.576110][T17761] 8021q: adding VLAN 0 to HW filter on device eth1 [ 436.583938][T17761] 8021q: adding VLAN 0 to HW filter on device eth2 [ 436.592881][T17761] 8021q: adding VLAN 0 to HW filter on device eth3 [ 436.603151][T17761] 8021q: adding VLAN 0 to HW filter on device bond10 [ 436.617898][ T5768] team_slave_0: entered promiscuous mode [ 436.623698][ T5768] team_slave_1: entered promiscuous mode [ 436.673998][ T6192] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.681249][ T6192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.697746][ T6188] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 436.709005][T17766] netlink: 'syz.1.2987': attribute type 32 has an invalid length. [ 436.733934][T17614] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.743916][T17614] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 436.754397][T17614] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 436.766384][T17614] netdevsim netdevsim2 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 436.798517][ T6188] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 436.810190][ T6188] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 436.819402][ T6188] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 436.827415][ T6188] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 436.871790][T17614] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.883016][T17614] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 436.893554][T17614] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 436.904140][T17614] netdevsim netdevsim2 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 437.016025][T17614] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.028333][T17614] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 437.041786][T17745] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 437.055779][T17614] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 437.083475][T17614] netdevsim netdevsim2 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 437.218116][T17768] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2987'. [ 437.476062][T17781] netlink: 15672 bytes leftover after parsing attributes in process `syz.3.2989'. [ 437.619009][T17791] netlink: 'syz.4.2992': attribute type 1 has an invalid length. [ 437.627972][T17791] netlink: 'syz.4.2992': attribute type 2 has an invalid length. [ 437.636057][T17791] netlink: 'syz.4.2992': attribute type 1 has an invalid length. [ 437.644481][T17791] netlink: 'syz.4.2992': attribute type 3 has an invalid length. [ 437.733320][ T5638] Bluetooth: hci5: command tx timeout [ 438.112288][T17798] hmó3)óÿ: entered promiscuous mode [ 438.118247][T17809] ip6tnl0: entered allmulticast mode [ 438.473261][T17817] __nla_validate_parse: 4 callbacks suppressed [ 438.473282][T17817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3000'. [ 438.518714][T17614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 438.574722][T17614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 438.619927][T17614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 438.666986][T17614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 438.706349][T17614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 438.739704][T17614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 438.749075][T17614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 438.774007][T17614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 438.871738][T17841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3003'. [ 439.114062][T17614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.201193][T17614] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.267966][ T6190] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.276222][ T6190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.326820][ T6190] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.335187][ T6190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.358204][T17853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3007'. [ 439.478740][T17858] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3007'. [ 439.564071][T17861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3009'. [ 439.664244][T17861] bond9: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 439.677698][T17861] bond9 (unregistering): Released all slaves [ 440.138510][ T1752] block nbd0: Possible stuck request ffff888091ece000: control (read@0,1024B). Runtime 30 seconds [ 440.397078][T17884] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3015'. [ 440.451126][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 440.456715][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 440.611294][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 440.729500][T17895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3018'. [ 440.977925][T17902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3020'. [ 441.173059][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 441.252695][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 441.587490][T17913] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.739042][T17921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.915672][T17932] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3026'. [ 441.917810][T17614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.003003][T17934] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3027'. [ 442.039278][ T5768] bridge0: entered promiscuous mode [ 442.109502][T17614] veth0_vlan: entered promiscuous mode [ 442.154099][T17614] veth1_vlan: entered promiscuous mode [ 442.282462][T17614] veth0_macvtap: entered promiscuous mode [ 442.306972][T17614] veth1_macvtap: entered promiscuous mode [ 442.357011][T17614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.396106][T17614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.457529][ T6192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.492750][ T6192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.526716][ T6192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.570504][ T6192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.938856][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.964397][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.098257][T17970] netlink: 'syz.3.3037': attribute type 1 has an invalid length. [ 443.120498][T17970] netlink: 'syz.3.3037': attribute type 1 has an invalid length. [ 443.273573][T17976] bond11 (unregistering): Released all slaves [ 443.336851][ T6190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.353476][ T6190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.512487][T17990] __nla_validate_parse: 4 callbacks suppressed [ 443.512509][T17990] netlink: 840 bytes leftover after parsing attributes in process `syz.0.3043'. [ 443.693744][T17997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2949'. [ 444.030352][ T5644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 444.047527][ T5644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 444.066504][ T5644] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 444.082362][ T5644] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 444.092783][ T5644] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 444.196343][T18001] lo speed is unknown, defaulting to 1000 [ 445.473498][T18050] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3057'. [ 445.624741][T18059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3059'. [ 445.661553][T18061] netlink: 'syz.2.3059': attribute type 21 has an invalid length. [ 445.683451][T18060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3059'. [ 445.744680][T18061] netlink: 'syz.2.3059': attribute type 1 has an invalid length. [ 445.763553][T18061] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3059'. [ 445.919590][T18066] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3060'. [ 445.972484][T18055] lo speed is unknown, defaulting to 1000 [ 446.211343][ T5644] Bluetooth: hci3: command tx timeout [ 446.224548][T18068] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3061'. [ 446.262442][T18068] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3061'. [ 446.767504][T18003] lo speed is unknown, defaulting to 1000 [ 446.945872][T18078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3063'. [ 447.314251][T18072] lo speed is unknown, defaulting to 1000 [ 447.811745][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 448.293451][ T5644] Bluetooth: hci3: command tx timeout [ 448.450982][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 448.457099][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 448.562409][T18088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3064'. [ 449.655314][T18003] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.680256][T18003] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.690415][T18003] bridge_slave_0: entered allmulticast mode [ 449.760179][T18003] bridge_slave_0: entered promiscuous mode [ 449.821514][T18003] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.867631][T18003] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.902619][T18003] bridge_slave_1: entered allmulticast mode [ 449.937123][T18003] bridge_slave_1: entered promiscuous mode [ 450.005836][T18105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3069'. [ 450.035076][T18109] netlink: 'syz.4.3068': attribute type 1 has an invalid length. [ 450.090362][T18108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3068'. [ 450.169069][T18109] bond14: entered promiscuous mode [ 450.176635][T18109] 8021q: adding VLAN 0 to HW filter on device bond14 [ 450.196021][T18003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.207709][T18108] bond14: entered allmulticast mode [ 450.222607][T18003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.318862][T18116] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3071'. [ 450.348162][T18109] bond14: (slave bridge11): making interface the new active one [ 450.361830][T18109] bridge11: entered promiscuous mode [ 450.369464][T18116] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3071'. [ 450.379258][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 450.379972][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 450.397831][ T5644] Bluetooth: hci3: command tx timeout [ 450.403772][T18109] bridge11: entered allmulticast mode [ 450.435582][T18109] bond14: (slave bridge11): Enslaving as an active interface with an up link [ 450.504708][T18003] team0: Port device team_slave_0 added [ 450.549352][T18003] team0: Port device team_slave_1 added [ 450.613169][T18121] netlink: 'syz.0.3072': attribute type 10 has an invalid length. [ 450.696786][T18120] netlink: 'syz.0.3072': attribute type 10 has an invalid length. [ 450.748611][T18121] bond0: (slave netdevsim1): Releasing backup interface [ 450.776053][T18003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.800046][T18003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.834068][T18130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3074'. [ 450.843424][T18003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.852206][T18003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.863547][T18003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.894420][T18003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.908371][T18135] netlink: 'syz.4.3074': attribute type 1 has an invalid length. [ 450.934623][T18120] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 450.946403][T18120] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 450.961304][ T6192] bond0: (slave netdevsim1): link status definitely up [ 451.007625][T18139] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 451.155717][T18144] netlink: 'syz.4.3074': attribute type 10 has an invalid length. [ 451.184025][T18144] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3074'. [ 451.325646][T18150] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 451.391483][T18135] 8021q: adding VLAN 0 to HW filter on device bond15 [ 451.527889][T18138] bond15: (slave veth7): Enslaving as an active interface with a down link [ 451.580496][T18142] bond15: (slave dummy0): making interface the new active one [ 451.595148][T18142] bond15: (slave dummy0): Enslaving as an active interface with an up link [ 451.606663][T18144] bond15: (slave dummy0): Releasing active interface [ 451.629576][T18147] bridge15: entered promiscuous mode [ 451.752675][T18156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3078'. [ 451.765178][T18127] lo speed is unknown, defaulting to 1000 [ 451.899452][T18156] 8021q: adding VLAN 0 to HW filter on device bond16 [ 452.120200][T18003] hsr_slave_0: entered promiscuous mode [ 452.163574][T18003] hsr_slave_1: entered promiscuous mode [ 452.183881][T18003] debugfs: 'hsr0' already exists in 'hsr' [ 452.201283][T18003] Cannot create hsr debugfs directory [ 452.453699][ T5638] Bluetooth: hci3: command tx timeout [ 453.047474][T18182] netlink: 'syz.0.3086': attribute type 1 has an invalid length. [ 453.108367][T18184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3086'. [ 453.168027][T18184] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3086'. [ 453.437984][T18187] veth15: entered promiscuous mode [ 453.446735][T18187] bond16: (slave veth15): Enslaving as a backup interface with a down link [ 453.466215][T18189] 8021q: adding VLAN 0 to HW filter on device bond16 [ 453.914217][T18003] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.942090][T18003] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 453.972924][T18003] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 453.991373][T18003] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 454.021560][T18202] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 454.219314][T18211] __nla_validate_parse: 1 callbacks suppressed [ 454.219354][T18211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3091'. [ 454.268909][T18215] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3092'. [ 454.348384][T18003] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.369035][T18003] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 454.389691][T18003] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 454.410617][T18003] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 454.435659][T18222] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3094'. [ 454.530554][T18219] netlink: 'syz.2.3094': attribute type 9 has an invalid length. [ 454.550598][T18219] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3094'. [ 454.736882][T18003] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.765872][T18003] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 454.814302][T18003] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 454.826300][T18003] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 454.860938][T18231] netlink: 'syz.4.3097': attribute type 10 has an invalid length. [ 454.868932][T18231] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3097'. [ 455.190453][T18003] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.217801][T18003] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 455.232123][T18003] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 455.243950][T18003] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 455.348277][T18248] xt_hashlimit: size too large, truncated to 1048576 [ 455.366161][T18240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3100'. [ 455.492363][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 455.595771][T18254] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3102'. [ 455.630105][T18252] netlink: 'syz.2.3102': attribute type 1 has an invalid length. [ 455.685357][T18250] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.699082][T18252] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3102'. [ 455.815832][T18250] bridge_slave_0 (unregistering): left allmulticast mode [ 455.844157][T18250] bridge_slave_0 (unregistering): left promiscuous mode [ 455.860586][T18250] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.403780][T18272] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3104'. [ 457.090112][T18292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3106'. [ 457.123792][T18288] batadv_slave_0: entered promiscuous mode [ 457.154600][T18293] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 457.243134][T18280] lo speed is unknown, defaulting to 1000 [ 457.243176][T18281] batadv_slave_0: left promiscuous mode [ 457.314782][T18003] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 457.396634][T18003] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 457.445592][T18003] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 457.514733][T18003] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 457.548048][T18003] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 457.587406][T18003] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 457.624213][T18003] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 457.680214][T18003] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 457.689281][T18301] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 458.073501][T18003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.279265][T18003] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.358662][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.365878][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.403753][T18328] C: renamed from veth1_to_team (while UP) [ 458.444949][T18328] netlink: 'syz.0.3118': attribute type 8 has an invalid length. [ 458.467058][T18328] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 458.519871][T18335] netlink: 'syz.4.3120': attribute type 4 has an invalid length. [ 458.542301][T18334] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:20000 [ 458.554777][ T6190] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.562015][ T6190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.630026][T18331] lo speed is unknown, defaulting to 1000 [ 458.915341][T18340] IPv6: NLM_F_CREATE should be specified when creating new route [ 459.227929][T18350] __nla_validate_parse: 7 callbacks suppressed [ 459.228413][T18350] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3122'. [ 461.068910][T18003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.284539][T18003] veth0_vlan: entered promiscuous mode [ 461.399368][T18003] veth1_vlan: entered promiscuous mode [ 461.413713][T18397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3132'. [ 461.435580][T18397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3132'. [ 461.452904][T18397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3132'. [ 461.464860][T18397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3132'. [ 461.481477][T18397] netlink: 'syz.0.3132': attribute type 6 has an invalid length. [ 461.562126][T18396] tipc: Started in network mode [ 461.596296][T18396] tipc: Node identity 3a71af6f9643, cluster identity 4711 [ 461.628706][T18396] tipc: Enabled bearer , priority 0 [ 461.664290][T18399] syzkaller0: entered promiscuous mode [ 461.685536][T18399] syzkaller0: entered allmulticast mode [ 461.798208][T18003] veth0_macvtap: entered promiscuous mode [ 461.836863][T18396] tipc: Resetting bearer [ 461.867567][T18003] veth1_macvtap: entered promiscuous mode [ 461.902763][T18393] tipc: Resetting bearer [ 461.982723][T18393] tipc: Disabling bearer [ 462.107484][T18003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.145805][T18003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.228712][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.269940][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.327149][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.363097][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.397992][T18437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3142'. [ 462.404109][T18433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3142'. [ 462.530877][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 462.558961][T18439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3143'. [ 462.581199][T18439] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3143'. [ 462.905130][T18443] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 462.906818][T18447] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3146'. [ 462.988924][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.010355][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.171759][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.191238][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.215632][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.325664][T18458] openvswitch: netlink: Actions may not be safe on all matching packets [ 463.617737][T18432] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 463.694239][T18432] ipt_ECN: cannot use operation on non-tcp rule [ 463.746696][T18451] ipt_ECN: cannot use operation on non-tcp rule [ 464.273859][T18481] netlink: 'syz.3.3156': attribute type 1 has an invalid length. [ 464.293611][T18478] x_tables: duplicate underflow at hook 2 [ 464.315671][ T5644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 464.338748][ T5644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 464.354306][ T5644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 464.362603][ T5644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 464.376533][ T5644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 464.452279][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 464.518636][T18481] bond9: entered promiscuous mode [ 464.529549][T18481] 8021q: adding VLAN 0 to HW filter on device bond9 [ 464.558186][T18487] bridge0: Device is already in use. [ 464.907674][T18492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.938474][T18501] __nla_validate_parse: 2 callbacks suppressed [ 464.938509][T18501] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3160'. [ 464.962502][T18500] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3160'. [ 464.978244][T18500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3160'. [ 464.997465][T18501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3160'. [ 465.052547][T12390] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.064359][T12390] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.083019][T12390] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 465.097125][T12390] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20003 - 0 [ 465.310566][T12390] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.351495][T12390] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.383642][T12390] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 465.422412][T12390] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20003 - 0 [ 465.644150][T12390] bond0: (slave netdevsim1): Releasing backup interface [ 465.743016][T12390] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.781683][T12390] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.810953][T12390] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 465.835467][T12390] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20003 - 0 [ 465.985310][T18530] 8021q: VLANs not supported on syzkaller0 [ 466.127427][T12390] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.144172][T12390] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.158253][T12390] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 466.172301][T12390] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20003 - 0 [ 466.201520][T18530] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 466.210047][T18530] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 466.288990][T18480] lo speed is unknown, defaulting to 1000 [ 466.421781][T18536] netlink: 'syz.1.3171': attribute type 83 has an invalid length. [ 466.451265][ T5644] Bluetooth: hci2: command tx timeout [ 466.910115][T18559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3177'. [ 467.650963][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 467.955680][T18597] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3183'. [ 468.010013][T12390] bond7 (unregistering): (slave ip6gretap1): Releasing active interface [ 468.292052][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 468.453919][T12390] bond9 (unregistering): (slave geneve3): Releasing active interface [ 468.534489][ T5644] Bluetooth: hci2: command tx timeout [ 468.567948][T12390] bond7 (unregistering): (slave bridge4): Releasing active interface [ 468.698533][T12390] bond13 (unregistering): (slave bridge17): Releasing backup interface [ 468.707649][T12390] bridge17 (unregistering): left promiscuous mode [ 468.767913][T12390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.785378][T12390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.796756][T12390] bond0 (unregistering): Released all slaves [ 468.813533][T12390] bond1 (unregistering): (slave bond2): Releasing backup interface [ 468.826027][T12390] bond1 (unregistering): Released all slaves [ 468.853615][T12390] bond2 (unregistering): Released all slaves [ 468.880474][T12390] bond3 (unregistering): (slave veth5): Releasing active interface [ 468.891893][T12390] bond3 (unregistering): (slave veth7): Releasing active interface [ 468.904985][T12390] bond3 (unregistering): Released all slaves [ 468.926600][T12390] bond4 (unregistering): Released all slaves [ 468.958480][T12390] bond5 (unregistering): Released all slaves [ 468.981795][T12390] bond6 (unregistering): Released all slaves [ 469.002548][T12390] bond7 (unregistering): Released all slaves [ 469.034014][T12390] bond8 (unregistering): Released all slaves [ 469.057852][T12390] bond9 (unregistering): Released all slaves [ 469.080382][T12390] bond10 (unregistering): Released all slaves [ 469.110401][T12390] bond11 (unregistering): Released all slaves [ 469.136628][T12390] bond12 (unregistering): Released all slaves [ 469.165415][T12390] bond13 (unregistering): Released all slaves [ 469.196758][T12390] bond14 (unregistering): Released all slaves [ 469.220522][T12390] bond15 (unregistering): Released all slaves [ 469.248783][T12390] bond16 (unregistering): (slave veth15): Releasing backup interface [ 469.261525][T12390] bond16 (unregistering): Released all slaves [ 469.281757][T12390] bond17 (unregistering): Released all slaves [ 469.305997][T18573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3180'. [ 469.346724][T18583] tipc: Enabling of bearer rejected, already enabled [ 469.373846][T18585] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 469.395084][T18585] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 469.460208][T18597] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.472908][T18597] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.549623][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 469.597482][T12390] 5nè: left promiscuous mode [ 469.827417][T18610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3186'. [ 469.858478][ T9038] IPVS: starting estimator thread 0... [ 469.900470][T18608] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 469.977371][T12390] 5nè‹Ò: left promiscuous mode [ 469.982398][T18614] IPVS: using max 33 ests per chain, 79200 per kthread [ 470.183928][T12390] tipc: Left network mode [ 470.232571][ T1752] block nbd0: Possible stuck request ffff888091ece000: control (read@0,1024B). Runtime 60 seconds [ 470.611879][ T5644] Bluetooth: hci2: command tx timeout [ 471.124369][T18647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.137024][T18647] batadv_slave_0: entered promiscuous mode [ 471.156710][T18647] batadv_slave_0: entered allmulticast mode [ 471.796762][T18687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3200'. [ 471.833370][T18678] veth0: entered promiscuous mode [ 471.847927][T18688] dvmrp0: entered allmulticast mode [ 472.125635][T18677] veth0: left promiscuous mode [ 472.446701][T18707] netlink: zone id is out of range [ 472.473017][T18707] netlink: zone id is out of range [ 472.486948][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 472.502459][T18707] netlink: zone id is out of range [ 472.520438][T18707] netlink: zone id is out of range [ 472.571649][T18707] netlink: zone id is out of range [ 472.589145][T18707] netlink: zone id is out of range [ 472.616909][T18707] netlink: zone id is out of range [ 472.637872][T18707] netlink: zone id is out of range [ 472.668777][T18707] netlink: zone id is out of range [ 472.691675][ T5644] Bluetooth: hci2: command tx timeout [ 472.748784][T18712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.774135][T18712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.835127][T18712] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 472.853248][T18480] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.869142][T18480] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.880576][T18480] bridge_slave_0: entered allmulticast mode [ 472.889705][T18480] bridge_slave_0: entered promiscuous mode [ 472.990309][T18480] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.030350][T18480] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.045810][T18480] bridge_slave_1: entered allmulticast mode [ 473.054466][T18480] bridge_slave_1: entered promiscuous mode [ 473.277522][T18726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3208'. [ 473.363240][T18726] ip6tnl2: entered allmulticast mode [ 473.402698][T18480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.437395][T18480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.536728][T18730] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3210'. [ 473.642378][T18730] xt_hashlimit: max too large, truncated to 1048576 [ 473.658758][T18730] xt_hashlimit: overflow, try lower: 2/0 [ 473.752498][T18480] team0: Port device team_slave_0 added [ 473.828368][T18480] team0: Port device team_slave_1 added [ 474.086985][T18741] netlink: 'syz.3.3212': attribute type 12 has an invalid length. [ 474.123845][T18480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.150116][T18480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.196592][T18480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.253026][T18480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.279829][T18480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.345726][T18480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.444951][T18755] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3215'. [ 474.459404][T18755] tc_dump_action: action bad kind [ 474.706997][T18480] hsr_slave_0: entered promiscuous mode [ 474.746673][T18480] hsr_slave_1: entered promiscuous mode [ 474.771834][T18480] debugfs: 'hsr0' already exists in 'hsr' [ 474.790282][T18480] Cannot create hsr debugfs directory [ 475.119657][T18779] Can't find ip_set type hsh:ip,mark [ 475.274855][T18777] gretap0: entered promiscuous mode [ 475.283327][T18777] macvlan2: entered promiscuous mode [ 475.304993][T18777] gretap0: left promiscuous mode [ 475.619687][T18791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3223'. [ 475.661544][T18791] netlink: 'syz.4.3223': attribute type 30 has an invalid length. [ 475.920209][T18791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3223'. [ 475.940496][ T5292] 8021q: adding VLAN 0 to HW filter on device eth3 [ 475.953617][T18798] netlink: 'syz.3.3226': attribute type 1 has an invalid length. [ 475.970203][T18791] netlink: 'syz.4.3223': attribute type 30 has an invalid length. [ 476.058295][T18804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3226'. [ 476.077488][ T1174] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.107562][ T1174] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.142469][T12390] hsr_slave_0: left promiscuous mode [ 476.158970][T12390] hsr_slave_1: left promiscuous mode [ 476.172994][T12390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.196554][T12390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.212449][T12390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.226952][T12390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.271265][T18808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3229'. [ 476.325700][T18809] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3229'. [ 477.256076][ T1174] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.278032][ T1174] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.290027][T18808] 8021q: VLANs not supported on vxcan0 [ 477.698594][T18823] netlink: 'syz.1.3231': attribute type 64 has an invalid length. [ 477.755060][T18823] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3231'. [ 478.390608][T18827] lo speed is unknown, defaulting to 1000 [ 478.738975][T18856] tipc: Enabling of bearer rejected, already enabled [ 478.806646][T12390] IPVS: stop unused estimator thread 0... [ 479.440202][T18869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3239'. [ 479.901864][T18874] veth3: entered allmulticast mode [ 479.955117][T18874] bond1: (slave veth3): Enslaving as an active interface with an up link [ 480.311699][T18879] bond1 (unregistering): (slave veth3): Releasing backup interface [ 480.344316][T18879] bond1 (unregistering): Released all slaves [ 481.285385][T18905] netlink: 'syz.1.3246': attribute type 1 has an invalid length. [ 481.520103][T18907] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 481.533395][T18907] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 481.855885][T18905] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 481.940026][T18915] macvlan2: entered promiscuous mode [ 481.951675][T18915] macvlan2: entered allmulticast mode [ 481.972002][T18915] bond1: entered promiscuous mode [ 481.994180][T18915] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 482.022717][T18915] bond1: left promiscuous mode [ 482.241881][T18480] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 482.271967][T18480] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 482.301704][T18480] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 482.366263][T18480] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 482.396080][T18480] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 482.468887][T18480] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 482.516742][T18480] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 482.593286][T18480] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 482.964518][T18960] nbd: couldn't find a device at index 1 [ 483.079138][T18963] xt_CT: No such helper "syz1" [ 483.273184][T18959] netlink: 428 bytes leftover after parsing attributes in process `syz.2.3253'. [ 483.315192][T18959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3253'. [ 483.480394][T18480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.588635][T18480] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.667849][ T6190] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.676140][ T6190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.710290][T18986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3259'. [ 483.759283][ T6190] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.767527][ T6190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.231625][T18997] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3262'. [ 485.799008][T19019] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.807437][T19019] bridge0: port 2(bridge_slave_1) entered listening state [ 485.816193][T19019] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.824348][T19019] bridge0: port 1(bridge_slave_0) entered listening state [ 486.150110][T19019] ip6tnl2: left allmulticast mode [ 486.195363][T19019] veth3: left allmulticast mode [ 486.220826][T19019] 8021q: adding VLAN 0 to HW filter on device bond1 [ 486.268826][T19056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3270'. [ 486.305455][T19056] netlink: 'syz.3.3270': attribute type 9 has an invalid length. [ 486.388762][T19056] netlink: 'syz.3.3270': attribute type 7 has an invalid length. [ 486.422252][T19049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3270'. [ 486.605003][T18480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.653609][ T4997] udevd[4997]: worker [13817] /devices/virtual/block/nbd0 is taking a long time [ 486.770559][T19068] netlink: 'syz.4.3275': attribute type 1 has an invalid length. [ 486.802564][T19068] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3275'. [ 486.943562][T12394] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 486.988615][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 486.996576][T12394] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 487.591034][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 487.811014][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 487.985747][T18480] veth0_vlan: entered promiscuous mode [ 488.084856][T19112] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3283'. [ 488.118726][T18480] veth1_vlan: entered promiscuous mode [ 488.250897][T19121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3286'. [ 488.628961][T19133] syzkaller1: entered promiscuous mode [ 488.655098][T19133] syzkaller1: entered allmulticast mode [ 488.805672][T18480] veth0_macvtap: entered promiscuous mode [ 488.976098][T19144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3290'. [ 488.988658][T18480] veth1_macvtap: entered promiscuous mode [ 489.202334][T18480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.261519][T18480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.288366][T19152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3292'. [ 489.396091][T19152] bond2: entered promiscuous mode [ 489.413547][T19156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3294'. [ 489.439545][T19152] bond2: entered allmulticast mode [ 489.474851][T19152] 8021q: adding VLAN 0 to HW filter on device bond2 [ 489.826536][T12394] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.859939][T12394] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.926073][T12394] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.972033][T12394] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.495269][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.506515][T19191] lo speed is unknown, defaulting to 1000 [ 490.526459][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.636607][T19199] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 490.795832][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.827027][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.984257][T19201] veth1_vlan: left promiscuous mode [ 491.019370][T19201] veth0_vlan: left promiscuous mode [ 491.045571][T19201] veth0_vlan: entered promiscuous mode [ 491.118099][T19201] veth1_vlan: entered promiscuous mode [ 491.207590][T19201] veth1_macvtap: left promiscuous mode [ 491.278970][T19201] veth0_macvtap: left promiscuous mode [ 491.318857][T19201] veth1_macvtap: entered promiscuous mode [ 491.331114][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 491.421047][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 491.519236][T19201] 8021q: adding VLAN 0 to HW filter on device bond1 [ 491.587108][T19201] 8021q: adding VLAN 0 to HW filter on device bond2 [ 491.639048][T19201] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 491.856823][T19201] syz_tun: entered promiscuous mode [ 492.022432][T19201] net_ratelimit: 338 callbacks suppressed [ 492.022450][T19201] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 492.057841][ T5638] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 492.080776][ T5638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 492.108486][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 492.122727][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 492.135144][ T5638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 492.278487][T19203] tc_dump_action: action bad kind [ 492.295551][ T1164] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.357425][ T1164] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.410831][ T1164] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 492.429253][ T1164] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.466987][ T1164] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.512593][ T1164] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 492.611439][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 492.666477][T19200] lo speed is unknown, defaulting to 1000 [ 492.784155][ T1164] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.806003][T19224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3306'. [ 492.819105][ T1164] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.837302][ T1164] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 492.866447][ T1164] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 492.893843][ T1164] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.925464][ T1164] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 492.957230][T19226] tipc: Enabling of bearer rejected, failed to enable media [ 494.211611][ T5638] Bluetooth: hci0: command tx timeout [ 494.305022][T19214] lo speed is unknown, defaulting to 1000 [ 494.479708][T19262] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 494.480262][T19264] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 495.063657][T19283] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3315'. [ 495.096986][T19285] Bluetooth: MGMT ver 1.23 [ 495.110883][T19284] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3315'. [ 495.383623][T19297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3316'. [ 496.222100][T19214] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.241950][T19214] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.255497][T19214] bridge_slave_0: entered allmulticast mode [ 496.266090][T19214] bridge_slave_0: entered promiscuous mode [ 496.285742][T19214] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.293798][ T5638] Bluetooth: hci0: command tx timeout [ 496.314361][T19214] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.330062][T19214] bridge_slave_1: entered allmulticast mode [ 496.353357][T19214] bridge_slave_1: entered promiscuous mode [ 496.545733][T19339] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3326'. [ 496.663620][T19214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.707639][T19214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.769333][T19214] team0: Port device team_slave_0 added [ 496.784004][T19214] team0: Port device team_slave_1 added [ 496.889945][T19214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.902608][T19214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.929638][T19214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.948142][T19343] syzkaller1: entered promiscuous mode [ 496.961205][T19343] syzkaller1: entered allmulticast mode [ 496.970402][T19214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.005224][T19214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.037719][T19214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.244181][T19214] hsr_slave_0: entered promiscuous mode [ 497.276904][T19214] hsr_slave_1: entered promiscuous mode [ 497.584014][T19360] syzkaller0: entered promiscuous mode [ 497.589853][T19360] syzkaller0: entered allmulticast mode [ 497.629899][T19362] netlink: 'syz.0.3333': attribute type 1 has an invalid length. [ 497.734303][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 497.746497][T19214] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.793838][T19362] macvlan2: entered promiscuous mode [ 497.799674][T19362] macvlan2: entered allmulticast mode [ 497.839161][T19214] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.889784][T19214] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.951618][T19366] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3334'. [ 497.976805][T19214] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.376880][ T5638] Bluetooth: hci0: command tx timeout [ 499.070549][T19318] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 499.357112][T19377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3336'. [ 499.381392][T19377] openvswitch: netlink: Flow actions attr not present in new flow. [ 500.296504][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 500.310464][ T1752] block nbd0: Possible stuck request ffff888091ece000: control (read@0,1024B). Runtime 90 seconds [ 500.456587][ T5638] Bluetooth: hci0: command tx timeout [ 500.935631][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 500.944154][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 501.162699][T19214] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 501.177994][T19214] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 501.188733][T19214] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 501.209915][T19214] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 501.219976][T19369] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 501.220605][T19214] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 501.277792][T19214] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 501.295331][T19370] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 501.395950][T19214] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 501.437596][T19391] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3339'. [ 501.493709][T19214] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 501.769182][T19411] netlink: 'syz.0.3340': attribute type 1 has an invalid length. [ 501.785003][T19410] FAULT_INJECTION: forcing a failure. [ 501.785003][T19410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.820250][T19410] CPU: 0 UID: 0 PID: 19410 Comm: syz.1.3341 Not tainted syzkaller #0 PREEMPT(full) [ 501.820279][T19410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 501.820293][T19410] Call Trace: [ 501.820300][T19410] [ 501.820310][T19410] dump_stack_lvl+0xe8/0x150 [ 501.820343][T19410] should_fail_ex+0x412/0x560 [ 501.820377][T19410] _copy_from_user+0x2d/0xb0 [ 501.820410][T19410] ___sys_sendmsg+0x1c6/0x360 [ 501.820434][T19410] ? __lock_acquire+0x6b5/0x2cf0 [ 501.820463][T19410] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.820533][T19410] ? __fget_files+0x2a/0x420 [ 501.820560][T19410] ? __fget_files+0x3a0/0x420 [ 501.820596][T19410] __x64_sys_sendmsg+0x1bd/0x2a0 [ 501.820623][T19410] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.820654][T19410] ? __pfx_ksys_write+0x10/0x10 [ 501.820693][T19410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.820717][T19410] do_syscall_64+0x15f/0xf80 [ 501.820752][T19410] ? clear_bhb_loop+0x40/0x90 [ 501.820778][T19410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.820799][T19410] RIP: 0033:0x7f804799ce59 [ 501.820819][T19410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.820836][T19410] RSP: 002b:00007f804887d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.820858][T19410] RAX: ffffffffffffffda RBX: 00007f8047c15fa0 RCX: 00007f804799ce59 [ 501.820872][T19410] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 501.820885][T19410] RBP: 00007f804887d090 R08: 0000000000000000 R09: 0000000000000000 [ 501.820898][T19410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.820909][T19410] R13: 00007f8047c16038 R14: 00007f8047c15fa0 R15: 00007ffdb82fb2e8 [ 501.820942][T19410] [ 502.121679][T19400] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.129456][T19400] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.212689][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 502.335163][T19400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.374051][T19400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.786993][T19413] gretap1: entered allmulticast mode [ 502.819535][ T6190] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.847126][ T6190] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.906086][ T6190] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.954119][ T6190] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.195911][T19214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.282707][T19449] netlink: 'syz.3.3350': attribute type 11 has an invalid length. [ 503.313430][T19214] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.339922][T19449] netlink: 'syz.3.3350': attribute type 23 has an invalid length. [ 503.393662][T19449] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3350'. [ 503.410499][T19445] lo speed is unknown, defaulting to 1000 [ 503.455960][ T6190] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.464244][ T6190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.489849][ T6190] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.498102][ T6190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.753333][T19456] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3351'. [ 503.799186][T19456] netlink: 'syz.1.3351': attribute type 1 has an invalid length. [ 503.992904][T19456] 8021q: adding VLAN 0 to HW filter on device bond3 [ 504.077095][T19456] netlink: 'syz.1.3351': attribute type 10 has an invalid length. [ 504.126770][T19456] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3351'. [ 504.142205][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 504.217028][T19462] bond3: (slave veth5): Enslaving as an active interface with a down link [ 504.753056][ T30] audit: type=1804 audit(1779409708.681:12): pid=19484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3357" name="/newroot/57/cgroup.controllers" dev="tmpfs" ino=307 res=1 errno=0 [ 504.839691][ T30] audit: type=1800 audit(1779409708.681:13): pid=19484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3357" name="cgroup.controllers" dev="tmpfs" ino=307 res=0 errno=0 [ 504.918020][ T30] audit: type=1804 audit(1779409708.761:14): pid=19484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3357" name="/newroot/57/cgroup.controllers" dev="tmpfs" ino=307 res=1 errno=0 [ 505.196224][T19490] hsr0: entered promiscuous mode [ 505.385527][T19490] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 506.447087][T19214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.459084][T19489] hsr0: left promiscuous mode [ 506.574745][T19528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3363'. [ 506.710476][T19528] bond10: entered promiscuous mode [ 506.716651][T19528] 8021q: adding VLAN 0 to HW filter on device bond10 [ 506.729613][T19532] FAULT_INJECTION: forcing a failure. [ 506.729613][T19532] name failslab, interval 1, probability 0, space 0, times 0 [ 506.788210][T19532] CPU: 0 UID: 0 PID: 19532 Comm: syz.2.3364 Not tainted syzkaller #0 PREEMPT(full) [ 506.788241][T19532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 506.788254][T19532] Call Trace: [ 506.788262][T19532] [ 506.788271][T19532] dump_stack_lvl+0xe8/0x150 [ 506.788302][T19532] should_fail_ex+0x412/0x560 [ 506.788336][T19532] should_failslab+0xa8/0x100 [ 506.788371][T19532] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 506.788401][T19532] ? __alloc_skb+0x186/0x7d0 [ 506.788430][T19532] ? __alloc_skb+0x1d0/0x7d0 [ 506.788456][T19532] ? __local_bh_enable_ip+0xd0/0x130 [ 506.788484][T19532] __alloc_skb+0x1d0/0x7d0 [ 506.788521][T19532] netlink_sendmsg+0x5d4/0xb40 [ 506.788556][T19532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.788591][T19532] ? aa_sock_msg_perm+0xf1/0x1b0 [ 506.788622][T19532] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 506.788655][T19532] ____sys_sendmsg+0x972/0x9f0 [ 506.788686][T19532] ? __pfx_____sys_sendmsg+0x10/0x10 [ 506.788718][T19532] ? import_iovec+0x73/0xa0 [ 506.788753][T19532] ___sys_sendmsg+0x2a5/0x360 [ 506.788772][T19532] ? __lock_acquire+0x6b5/0x2cf0 [ 506.788800][T19532] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.788859][T19532] ? __fget_files+0x2a/0x420 [ 506.788883][T19532] ? __fget_files+0x3a0/0x420 [ 506.788919][T19532] __x64_sys_sendmsg+0x1bd/0x2a0 [ 506.788944][T19532] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 506.788976][T19532] ? __pfx_ksys_write+0x10/0x10 [ 506.789015][T19532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.789038][T19532] do_syscall_64+0x15f/0xf80 [ 506.789070][T19532] ? clear_bhb_loop+0x40/0x90 [ 506.789096][T19532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.789116][T19532] RIP: 0033:0x7fdb96d9ce59 [ 506.789136][T19532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.789153][T19532] RSP: 002b:00007fdb97c6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.789174][T19532] RAX: ffffffffffffffda RBX: 00007fdb97015fa0 RCX: 00007fdb96d9ce59 [ 506.789193][T19532] RDX: 0000000000004014 RSI: 0000200000000380 RDI: 0000000000000005 [ 506.789206][T19532] RBP: 00007fdb97c6a090 R08: 0000000000000000 R09: 0000000000000000 [ 506.789219][T19532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.789230][T19532] R13: 00007fdb97016038 R14: 00007fdb97015fa0 R15: 00007ffc46441588 [ 506.789264][T19532] [ 507.539281][T19562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3370'. [ 507.806973][T19573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.928396][T19573] netlink: 'syz.0.3373': attribute type 83 has an invalid length. [ 508.240447][T19581] xt_hashlimit: size too large, truncated to 1048576 [ 508.299557][T19587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3376'. [ 508.404870][T19214] veth0_vlan: entered promiscuous mode [ 508.464153][T19214] veth1_vlan: entered promiscuous mode [ 508.623333][T19600] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3376'. [ 508.657926][T19214] veth0_macvtap: entered promiscuous mode [ 508.704138][T19214] veth1_macvtap: entered promiscuous mode [ 508.874346][T19214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.904689][T19603] syzkaller0: entered promiscuous mode [ 508.921795][T19603] syzkaller0: entered allmulticast mode [ 508.945527][T19214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.219731][T12394] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.231915][T12394] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.242743][T12394] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.299064][T12394] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.533171][T19615] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3382'. [ 509.716233][T12390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.731636][T19612] lo speed is unknown, defaulting to 1000 [ 509.755278][T12390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.850000][T12390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.870011][T12390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.574463][T19649] FAULT_INJECTION: forcing a failure. [ 510.574463][T19649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.594655][T19649] CPU: 0 UID: 0 PID: 19649 Comm: syz.0.3388 Not tainted syzkaller #0 PREEMPT(full) [ 510.594683][T19649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 510.594701][T19649] Call Trace: [ 510.594709][T19649] [ 510.594718][T19649] dump_stack_lvl+0xe8/0x150 [ 510.594747][T19649] should_fail_ex+0x412/0x560 [ 510.594780][T19649] _copy_from_iter+0x1d3/0x1670 [ 510.594855][T19649] ? rcu_is_watching+0x15/0xb0 [ 510.594902][T19649] ? __pfx__copy_from_iter+0x10/0x10 [ 510.594939][T19649] ? netlink_sendmsg+0x650/0xb40 [ 510.594960][T19649] ? skb_put+0x11b/0x210 [ 510.594995][T19649] netlink_sendmsg+0x6c0/0xb40 [ 510.595027][T19649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.595053][T19649] ? aa_sock_msg_perm+0xf1/0x1b0 [ 510.595082][T19649] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 510.595113][T19649] ____sys_sendmsg+0x972/0x9f0 [ 510.595134][T19649] ? __might_fault+0xaf/0x130 [ 510.595168][T19649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.595200][T19649] ? import_iovec+0x73/0xa0 [ 510.595234][T19649] ___sys_sendmsg+0x2a5/0x360 [ 510.595253][T19649] ? __lock_acquire+0x6b5/0x2cf0 [ 510.595280][T19649] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.595341][T19649] ? __fget_files+0x2a/0x420 [ 510.595366][T19649] ? __fget_files+0x3a0/0x420 [ 510.595401][T19649] __x64_sys_sendmsg+0x1bd/0x2a0 [ 510.595426][T19649] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.595458][T19649] ? __pfx_ksys_write+0x10/0x10 [ 510.595485][T19649] ? handle_softirqs+0x715/0x840 [ 510.595516][T19649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.595538][T19649] do_syscall_64+0x15f/0xf80 [ 510.595571][T19649] ? clear_bhb_loop+0x40/0x90 [ 510.595596][T19649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.595617][T19649] RIP: 0033:0x7f7e4479ce59 [ 510.595645][T19649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.595662][T19649] RSP: 002b:00007f7e456d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.595685][T19649] RAX: ffffffffffffffda RBX: 00007f7e44a15fa0 RCX: 00007f7e4479ce59 [ 510.595699][T19649] RDX: 0000000000004014 RSI: 0000200000000380 RDI: 0000000000000005 [ 510.595713][T19649] RBP: 00007f7e456d7090 R08: 0000000000000000 R09: 0000000000000000 [ 510.595725][T19649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.595737][T19649] R13: 00007f7e44a16038 R14: 00007f7e44a15fa0 R15: 00007fff59f602a8 [ 510.595771][T19649] [ 511.024657][T19655] netlink: 13 bytes leftover after parsing attributes in process `syz.4.3390'. [ 511.057404][T19653] lo speed is unknown, defaulting to 1000 [ 511.068526][T19654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3389'. [ 511.226604][T19655] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3390'. [ 511.284025][T19660] netlink: 'syz.0.3391': attribute type 8 has an invalid length. [ 511.428977][T19655] nbd2: detected capacity change from 0 to 5 [ 511.477889][T12873] Buffer I/O error on dev nbd2, logical block 1, async page read [ 511.862501][ T5638] block nbd2: Receive control failed (result -104) [ 512.047690][ T5644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 512.068564][ T5644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 512.078226][ T5644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 512.098161][ T5644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 512.106916][ T5644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 512.947227][T19687] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3398'. [ 513.009003][T19689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3398'. [ 513.052588][ T48] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.103219][T19691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3398'. [ 513.125547][ T48] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.159234][ T48] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 513.689912][ T48] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.722883][ T48] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.754563][ T48] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 513.772254][T19710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3402'. [ 513.864017][ T48] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.891842][ T48] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.921011][ T48] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 513.945713][T19712] netlink: 'syz.2.3403': attribute type 1 has an invalid length. [ 513.969897][T19666] lo speed is unknown, defaulting to 1000 [ 513.985085][T19712] netlink: 'syz.2.3403': attribute type 2 has an invalid length. [ 514.094482][ T48] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.123687][ T48] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.146019][ T48] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 514.211658][ T5638] Bluetooth: hci4: command tx timeout [ 514.287361][T19717] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3405'. [ 514.733584][T19724] syzkaller0: entered promiscuous mode [ 514.747702][T19724] syzkaller0: entered allmulticast mode [ 514.809192][T19721] syzkaller1: entered promiscuous mode [ 514.818635][T19721] syzkaller1: entered allmulticast mode [ 515.244829][ T48] veth0_virt_wifi: left allmulticast mode [ 515.251411][ T48] veth0_virt_wifi: left promiscuous mode [ 515.261430][ T48] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 515.310778][ T48] tunl0: left allmulticast mode [ 516.274392][ T48] bond0 (unregistering): (slave wlan0): Releasing backup interface [ 516.292647][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.300916][ C1] bridge0: topology change detected, propagating [ 516.309038][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.316939][ C1] bridge0: topology change detected, propagating [ 516.324790][ T5638] Bluetooth: hci4: command tx timeout [ 516.340341][ T48] bond0 (unregistering): Released all slaves [ 516.356457][ T48] bond1 (unregistering): Released all slaves [ 516.374318][ T48] bond2 (unregistering): Released all slaves [ 516.397553][ T48] bond3 (unregistering): Released all slaves [ 516.426790][ T48] bond5 (unregistering): Released all slaves [ 516.452130][ T48] bond4 (unregistering): (slave bond6): Releasing backup interface [ 516.468871][ T48] bond4 (unregistering): Released all slaves [ 516.496723][ T48] bond6 (unregistering): Released all slaves [ 516.519435][ T48] bond7 (unregistering): (slave bond8): Releasing backup interface [ 516.531141][ T48] bond7 (unregistering): Released all slaves [ 516.567987][ T48] bond8 (unregistering): Released all slaves [ 516.590951][ T48] bond9 (unregistering): Released all slaves [ 516.614221][ T48] bond10 (unregistering): Released all slaves [ 516.795973][T19754] bridge0: port 3(ipvlan2) entered blocking state [ 516.802928][T19754] bridge0: port 3(ipvlan2) entered disabled state [ 516.809705][T19754] ipvlan2: entered allmulticast mode [ 516.815221][T19754] bridge0: entered allmulticast mode [ 516.844749][T19754] ipvlan2: left allmulticast mode [ 516.860445][T19754] bridge0: left allmulticast mode [ 516.944489][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 516.965130][T19762] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3417'. [ 517.054483][ T48] tipc: Disabling bearer [ 517.085436][ T48] tipc: Disabling bearer [ 517.128102][ T48] tipc: Left network mode [ 517.436094][T19771] netlink: 'syz.2.3419': attribute type 10 has an invalid length. [ 517.550130][T19774] netlink: 'syz.2.3419': attribute type 10 has an invalid length. [ 517.629220][T19771] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 517.690091][T19771] team0: Port device netdevsim1 added [ 517.898984][T19774] team0: Port device netdevsim1 removed [ 517.940944][T19774] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 517.974438][T19774] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 518.015464][T19769] lo speed is unknown, defaulting to 1000 [ 518.150154][T19793] netlink: 'syz.0.3422': attribute type 12 has an invalid length. [ 518.193415][T19793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3422'. [ 518.371455][ T5638] Bluetooth: hci4: command tx timeout [ 518.499120][T19793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.220436][T19666] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.269620][T19666] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.303411][T19666] bridge_slave_0: entered allmulticast mode [ 519.342453][T19666] bridge_slave_0: entered promiscuous mode [ 519.449112][T19666] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.491533][T19666] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.516035][T19666] bridge_slave_1: entered allmulticast mode [ 519.529675][T19666] bridge_slave_1: entered promiscuous mode [ 520.207415][T19666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.336787][T19666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.367657][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 520.454385][ T5638] Bluetooth: hci4: command tx timeout [ 520.797349][T19666] team0: Port device team_slave_0 added [ 520.828298][T19666] team0: Port device team_slave_1 added [ 520.836765][T19866] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3436'. [ 521.057595][T19666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.083024][T19666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.120282][T19666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.200085][T19872] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3437'. [ 521.276627][T19870] syzkaller0: entered promiscuous mode [ 521.282433][T19870] syzkaller0: entered allmulticast mode [ 521.292533][T19666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.307487][T19666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.337530][T19666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.732854][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 525.729179][T19666] hsr_slave_0: entered promiscuous mode [ 525.742827][T19666] hsr_slave_1: entered promiscuous mode [ 525.749392][T19666] debugfs: 'hsr0' already exists in 'hsr' [ 525.758030][T19666] Cannot create hsr debugfs directory [ 525.769514][T19943] sctp: [Deprecated]: syz.1.3447 (pid 19943) Use of struct sctp_assoc_value in delayed_ack socket option. [ 525.769514][T19943] Use struct sctp_sack_info instead [ 525.820338][T19950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3448'. [ 525.837135][T19943] sctp: [Deprecated]: syz.1.3447 (pid 19943) Use of struct sctp_assoc_value in delayed_ack socket option. [ 525.837135][T19943] Use struct sctp_sack_info instead [ 526.659414][T19966] pim6reg: entered allmulticast mode [ 526.743597][T19970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3453'. [ 526.936322][ T48] veth1_to_team: left promiscuous mode [ 526.977295][ T48] dummy0: left promiscuous mode [ 527.023429][ T48] hsr_slave_0: left promiscuous mode [ 527.042839][ T48] hsr_slave_1: left promiscuous mode [ 527.141854][ T48] veth1_macvtap: left promiscuous mode [ 527.162771][ T48] veth1_vlan: left promiscuous mode [ 527.177258][ T48] veth0_vlan: left promiscuous mode [ 528.784719][ T48] IPVS: stop unused estimator thread 0... [ 530.371926][ T1752] block nbd0: Possible stuck request ffff888091ece000: control (read@0,1024B). Runtime 120 seconds [ 541.838628][T20029] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 541.861961][T20029] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 541.872849][T20029] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 541.882131][T20029] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 541.890023][T20029] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 541.911160][ T1752] block nbd2: Possible stuck request ffff888027d05080: control (read@0,2048B). Runtime 30 seconds [ 542.009147][T20029] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 542.021142][T20029] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 542.032830][T20029] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 542.041093][T20029] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 542.048814][T20029] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 542.632034][T20028] lo speed is unknown, defaulting to 1000 [ 542.843199][T20032] lo speed is unknown, defaulting to 1000 [ 543.316025][T20028] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.323632][T20028] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.331586][T20028] bridge_slave_0: entered allmulticast mode [ 543.339611][T20028] bridge_slave_0: entered promiscuous mode [ 543.354093][T20028] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.362519][T20028] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.369800][T20028] bridge_slave_1: entered allmulticast mode [ 543.377438][T20028] bridge_slave_1: entered promiscuous mode [ 543.450159][T20028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.463550][T20028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.517911][T20028] team0: Port device team_slave_0 added [ 543.527644][T20028] team0: Port device team_slave_1 added [ 543.566554][T20028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.573936][T20028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.601341][T20028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.632367][T20028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.640396][T20028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.668122][T20028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.810260][T20028] hsr_slave_0: entered promiscuous mode [ 543.820488][T20028] hsr_slave_1: entered promiscuous mode [ 543.827474][T20028] debugfs: 'hsr0' already exists in 'hsr' [ 543.833546][T20028] Cannot create hsr debugfs directory [ 543.971153][ T5638] Bluetooth: hci1: command tx timeout [ 544.072066][T20029] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 544.088686][T20029] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 544.099379][T20029] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 544.110445][T20029] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 544.125689][T20029] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 544.135462][T20029] Bluetooth: hci6: command tx timeout [ 544.427227][T20032] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.437386][T20032] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.445015][T20032] bridge_slave_0: entered allmulticast mode [ 544.453374][T20032] bridge_slave_0: entered promiscuous mode [ 544.476856][T20032] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.484597][T20032] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.492033][T20032] bridge_slave_1: entered allmulticast mode [ 544.500460][T20032] bridge_slave_1: entered promiscuous mode [ 544.573427][T20032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.595190][T20032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.679506][T20032] team0: Port device team_slave_0 added [ 544.689225][T20032] team0: Port device team_slave_1 added [ 544.750752][T20032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.757797][T20032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.789988][T20032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.806008][T20032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.813813][T20032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.842993][T20032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.912477][T20032] hsr_slave_0: entered promiscuous mode [ 544.919284][T20032] hsr_slave_1: entered promiscuous mode [ 544.927851][T20032] debugfs: 'hsr0' already exists in 'hsr' [ 544.933764][T20032] Cannot create hsr debugfs directory [ 544.993167][T20060] lo speed is unknown, defaulting to 1000 [ 545.477156][ T5638] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 545.489482][ T5638] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 545.503197][ T5638] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 545.512837][ T5638] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 545.522637][ T5638] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 546.052232][T20029] Bluetooth: hci1: command tx timeout [ 546.112479][T20060] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.121381][T20060] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.130154][T20060] bridge_slave_0: entered allmulticast mode [ 546.138816][T20060] bridge_slave_0: entered promiscuous mode [ 546.146769][T20076] lo speed is unknown, defaulting to 1000 [ 546.149482][T20060] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.161616][T20060] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.168931][T20060] bridge_slave_1: entered allmulticast mode [ 546.178629][T20060] bridge_slave_1: entered promiscuous mode [ 546.210980][T20029] Bluetooth: hci7: command tx timeout [ 546.218622][T20029] Bluetooth: hci6: command tx timeout [ 546.238683][T20060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.252097][T20060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.350371][T20060] team0: Port device team_slave_0 added [ 546.370191][T20060] team0: Port device team_slave_1 added [ 546.478951][T20060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.486046][T20060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.514635][T20060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.536187][T20060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.543215][T20060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.571692][T20060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.697292][T20060] hsr_slave_0: entered promiscuous mode [ 546.704212][T20060] hsr_slave_1: entered promiscuous mode [ 546.710974][T20060] debugfs: 'hsr0' already exists in 'hsr' [ 546.717149][T20060] Cannot create hsr debugfs directory [ 547.241992][T20076] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.249744][T20076] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.262190][T20076] bridge_slave_0: entered allmulticast mode [ 547.270295][T20076] bridge_slave_0: entered promiscuous mode [ 547.286006][T20076] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.293437][T20076] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.301027][T20076] bridge_slave_1: entered allmulticast mode [ 547.309064][T20076] bridge_slave_1: entered promiscuous mode [ 547.368853][T20076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.384872][T20076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.432731][T20076] team0: Port device team_slave_0 added [ 547.442193][T20076] team0: Port device team_slave_1 added [ 547.479069][T20076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.487840][T20076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.518581][T20076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.536005][T20076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.543397][T20076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.569852][T20076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.580562][T20029] Bluetooth: hci8: command tx timeout [ 547.637516][T20076] hsr_slave_0: entered promiscuous mode [ 547.646510][T20076] hsr_slave_1: entered promiscuous mode [ 547.655330][T20076] debugfs: 'hsr0' already exists in 'hsr' [ 547.661594][T20076] Cannot create hsr debugfs directory [ 548.130833][T20029] Bluetooth: hci1: command tx timeout [ 548.291482][ T5638] Bluetooth: hci7: command tx timeout [ 548.291505][T20029] Bluetooth: hci6: command tx timeout [ 549.650799][T20029] Bluetooth: hci8: command tx timeout [ 550.211181][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 550.219392][T20029] Bluetooth: hci1: command tx timeout [ 550.370969][ T5638] Bluetooth: hci6: command tx timeout [ 550.370984][T20029] Bluetooth: hci7: command tx timeout [ 551.730844][T20029] Bluetooth: hci8: command tx timeout [ 552.450882][T20029] Bluetooth: hci7: command tx timeout [ 552.771383][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 552.779627][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 553.811346][T20029] Bluetooth: hci8: command tx timeout [ 560.454519][ T1752] block nbd0: Possible stuck request ffff888091ece000: control (read@0,1024B). Runtime 150 seconds [ 568.132494][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 571.809943][ T5638] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 571.824364][ T5638] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 571.832657][ T5638] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 571.845086][ T5638] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 571.858755][ T5638] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 571.984148][ T1752] block nbd2: Possible stuck request ffff888027d05080: control (read@0,2048B). Runtime 60 seconds [ 572.285178][T20101] lo speed is unknown, defaulting to 1000 [ 572.839591][T20101] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.846952][T20101] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.855101][T20101] bridge_slave_0: entered allmulticast mode [ 572.863525][T20101] bridge_slave_0: entered promiscuous mode [ 572.872075][T20101] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.880908][T20101] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.888572][T20101] bridge_slave_1: entered allmulticast mode [ 572.896661][T20101] bridge_slave_1: entered promiscuous mode [ 572.944216][T20101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.956915][T20101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.000063][T20101] team0: Port device team_slave_0 added [ 573.008622][T20101] team0: Port device team_slave_1 added [ 573.047168][T20101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.054654][T20101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.080961][T20101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.095738][T20101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.103268][T20101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.129615][T20101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.196817][T20101] hsr_slave_0: entered promiscuous mode [ 573.203894][T20101] hsr_slave_1: entered promiscuous mode [ 573.210424][T20101] debugfs: 'hsr0' already exists in 'hsr' [ 573.217103][T20101] Cannot create hsr debugfs directory [ 573.251739][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 573.261076][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 573.891875][ T5638] Bluetooth: hci9: command tx timeout [ 575.972445][ T5638] Bluetooth: hci9: command tx timeout [ 576.795534][ T4997] udevd[4997]: worker [12873] /devices/virtual/block/nbd2 is taking a long time [ 578.050983][ T5638] Bluetooth: hci9: command tx timeout [ 580.130928][ T5638] Bluetooth: hci9: command tx timeout [ 585.571177][ T5638] Bluetooth: hci3: command 0x0405 tx timeout [ 590.531021][ T1752] block nbd0: Possible stuck request ffff888091ece000: control (read@0,1024B). Runtime 180 seconds [ 591.593380][ T4997] udevd[4997]: worker [13817] /devices/virtual/block/nbd0 timeout; kill it [ 591.602381][ T4997] udevd[4997]: seq 24007 '/devices/virtual/block/nbd0' killed [ 593.742440][ T145] ¾x9ÿ: left allmulticast mode [ 593.747427][ T145] ¾x9ÿ: left promiscuous mode [ 593.753428][ T145] bridge0: port 1(1¾x9ÿ) entered disabled state [ 593.823233][ T145] dvmrp0: left allmulticast mode [ 593.894977][ T145] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 594.289396][ T145] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 594.356103][ T145] bond9 (unregistering): (slave bridge9): Releasing active interface [ 594.387092][ T145] bond14 (unregistering): (slave bridge11): Releasing backup interface [ 594.395662][ T145] bridge11 (unregistering): left promiscuous mode [ 594.402361][ T145] bridge11 (unregistering): left allmulticast mode [ 594.475952][ T145] bond0 (unregistering): left promiscuous mode [ 594.491554][ T145] bond_slave_0: left promiscuous mode [ 594.500257][ T6193] smbdirect: ib_dev[syz1] removed [ 594.506714][ T145] bond_slave_1: left promiscuous mode [ 594.514590][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.525943][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.546686][ T145] bond0 (unregistering): Released all slaves [ 594.563828][ T145] bond1 (unregistering): Released all slaves [ 594.607714][ T145] bond2 (unregistering): Released all slaves [ 594.656625][ T145] bond3 (unregistering): Released all slaves [ 594.684113][ T145] bond4 (unregistering): Released all slaves [ 594.712362][ T145] bond5 (unregistering): (slave lo): Releasing backup interface [ 594.720778][ T145] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 594.738236][ T145] bond5 (unregistering): Released all slaves [ 594.759487][ T145] bond6 (unregistering): Released all slaves [ 594.780530][ T145] bond7 (unregistering): Released all slaves [ 594.810771][ T145] bond8 (unregistering): Released all slaves [ 594.830840][ T145] bond9 (unregistering): Released all slaves [ 594.851243][ T145] bond10 (unregistering): Released all slaves [ 594.872756][ T145] bond11 (unregistering): Released all slaves [ 594.910470][ T145] bond12 (unregistering): Released all slaves [ 594.940047][ T145] bond13 (unregistering): (slave batadv1): Releasing active interface [ 594.948486][ T145] batadv1: left promiscuous mode [ 594.954918][ T145] batadv1: left allmulticast mode [ 594.962700][ T145] bond13 (unregistering): Released all slaves [ 594.988912][ T145] bond14 (unregistering): Released all slaves [ 595.017536][ T145] bond15 (unregistering): (slave veth7): Releasing active interface [ 595.031190][ T145] bond15 (unregistering): Released all slaves [ 595.053607][ T145] bond16 (unregistering): Released all slaves [ 595.286746][ T145] hmó3)óÿ: left promiscuous mode [ 595.393698][ T145] tipc: Left network mode [ 596.179380][ T145] batadv0: left promiscuous mode [ 596.188315][ T145] hsr_slave_0: left promiscuous mode [ 596.195960][ T145] hsr_slave_1: left promiscuous mode [ 596.202213][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.210336][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.246320][ T145] pim6reg (unregistering): left allmulticast mode [ 596.984915][ T145] IPVS: stop unused estimator thread 0... [ 600.938972][T20118] Bluetooth: hci5: command 0x0406 tx timeout [ 600.941015][ T5644] Bluetooth: hci2: command 0x0405 tx timeout [ 601.842471][T20063] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 601.853082][T20063] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 601.862399][T20063] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 601.872445][T20063] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 601.881465][T20063] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 602.053063][ T1752] block nbd2: Possible stuck request ffff888027d05080: control (read@0,2048B). Runtime 90 seconds [ 602.281485][T20120] lo speed is unknown, defaulting to 1000 [ 602.882647][T20029] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 602.899183][T20029] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 602.907290][T20029] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 602.915691][T20029] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 602.923764][T20029] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 603.028472][T20120] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.035870][T20120] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.043583][T20120] bridge_slave_0: entered allmulticast mode [ 603.051830][T20120] bridge_slave_0: entered promiscuous mode [ 603.060990][T20120] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.068245][T20120] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.076363][T20120] bridge_slave_1: entered allmulticast mode [ 603.086306][T20120] bridge_slave_1: entered promiscuous mode [ 603.128106][T20120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.143119][T20120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.192706][T20120] team0: Port device team_slave_0 added [ 603.207088][T20120] team0: Port device team_slave_1 added [ 603.246212][T20120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.254013][T20120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.284951][T20120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.300541][T20120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.308044][T20120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.336047][T20120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.401453][T20120] hsr_slave_0: entered promiscuous mode [ 603.408307][T20120] hsr_slave_1: entered promiscuous mode [ 603.416323][T20120] debugfs: 'hsr0' already exists in 'hsr' [ 603.422454][T20120] Cannot create hsr debugfs directory [ 603.767565][T20138] lo speed is unknown, defaulting to 1000 [ 603.984754][T20063] Bluetooth: hci10: command tx timeout [ 604.436737][T20029] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 604.447734][T20029] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 604.457179][T20029] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 604.468359][T20029] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 604.476614][T20029] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 604.599988][T20138] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.608108][T20138] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.618333][T20138] bridge_slave_0: entered allmulticast mode [ 604.631279][T20138] bridge_slave_0: entered promiscuous mode [ 604.641811][T20138] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.650226][T20138] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.659113][T20138] bridge_slave_1: entered allmulticast mode [ 604.668232][T20138] bridge_slave_1: entered promiscuous mode [ 604.764694][T20138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.781445][T20138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.859701][T20138] team0: Port device team_slave_0 added [ 604.874076][T20138] team0: Port device team_slave_1 added [ 604.920143][T20138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.929582][T20138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.957150][T20138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.974461][T20138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.983483][T20138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.010210][T20138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.025313][T20063] Bluetooth: hci11: command tx timeout [ 605.103278][T20138] hsr_slave_0: entered promiscuous mode [ 605.110435][T20138] hsr_slave_1: entered promiscuous mode [ 605.117242][T20138] debugfs: 'hsr0' already exists in 'hsr' [ 605.123101][T20138] Cannot create hsr debugfs directory [ 605.228048][T20153] lo speed is unknown, defaulting to 1000 [ 605.353732][T20029] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 605.368887][T20029] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 605.377181][T20029] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 605.385372][T20029] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 605.393368][T20029] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 606.050958][T20029] Bluetooth: hci10: command tx timeout [ 606.312825][T20167] lo speed is unknown, defaulting to 1000 [ 606.335918][T20153] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.343374][T20153] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.350893][T20153] bridge_slave_0: entered allmulticast mode [ 606.358894][T20153] bridge_slave_0: entered promiscuous mode [ 606.387722][T20153] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.395340][T20153] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.403085][T20153] bridge_slave_1: entered allmulticast mode [ 606.411205][T20153] bridge_slave_1: entered promiscuous mode [ 606.484399][T20153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.500924][T20153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.531467][T20029] Bluetooth: hci12: command tx timeout [ 606.599825][T20153] team0: Port device team_slave_0 added [ 606.618468][T20153] team0: Port device team_slave_1 added [ 606.726076][T20153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.734642][T20153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.761332][T20153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.789039][T20153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.796179][T20153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.822765][T20153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.935607][T20153] hsr_slave_0: entered promiscuous mode [ 606.944421][T20153] hsr_slave_1: entered promiscuous mode [ 606.951217][T20153] debugfs: 'hsr0' already exists in 'hsr' [ 606.957016][T20153] Cannot create hsr debugfs directory [ 607.090939][T20029] Bluetooth: hci11: command tx timeout [ 607.408111][T20167] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.416193][T20167] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.423691][T20167] bridge_slave_0: entered allmulticast mode [ 607.431896][T20167] bridge_slave_0: entered promiscuous mode [ 607.453751][T20167] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.463407][T20167] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.471005][T20167] bridge_slave_1: entered allmulticast mode [ 607.478677][T20167] bridge_slave_1: entered promiscuous mode [ 607.491364][T20029] Bluetooth: hci13: command tx timeout [ 607.551676][T20167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.565445][T20167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.608341][T20167] team0: Port device team_slave_0 added [ 607.617842][T20167] team0: Port device team_slave_1 added [ 607.675881][T20167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.685522][T20167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.713096][T20167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.727965][T20167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.737725][T20167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.764850][T20167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.903344][T20167] hsr_slave_0: entered promiscuous mode [ 607.910270][T20167] hsr_slave_1: entered promiscuous mode [ 607.917444][T20167] debugfs: 'hsr0' already exists in 'hsr' [ 607.923298][T20167] Cannot create hsr debugfs directory [ 608.131019][T20029] Bluetooth: hci10: command tx timeout [ 608.610730][T20029] Bluetooth: hci12: command tx timeout [ 609.170782][T20029] Bluetooth: hci11: command tx timeout [ 609.572684][T20029] Bluetooth: hci13: command tx timeout [ 610.221251][T20029] Bluetooth: hci10: command tx timeout [ 610.690997][T20029] Bluetooth: hci12: command tx timeout [ 611.260820][T20029] Bluetooth: hci11: command tx timeout [ 611.660909][T20063] Bluetooth: hci13: command tx timeout [ 612.770828][T20063] Bluetooth: hci12: command tx timeout [ 613.731095][T20063] Bluetooth: hci13: command tx timeout [ 619.330930][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 620.613630][ T1752] block nbd0: Possible stuck request ffff888091ece000: control (read@0,1024B). Runtime 210 seconds [ 631.882223][T20029] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 631.898478][T20029] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 631.908125][T20029] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 631.921407][T20029] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 631.929508][T20029] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 632.133129][ T1752] block nbd2: Possible stuck request ffff888027d05080: control (read@0,2048B). Runtime 120 seconds [ 632.346267][T20192] lo speed is unknown, defaulting to 1000 [ 632.888832][T20192] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.896195][T20192] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.903870][T20192] bridge_slave_0: entered allmulticast mode [ 632.912630][T20192] bridge_slave_0: entered promiscuous mode [ 632.921617][T20192] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.928941][T20192] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.936778][T20192] bridge_slave_1: entered allmulticast mode [ 632.944795][T20192] bridge_slave_1: entered promiscuous mode [ 632.989751][T20192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.003573][T20192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.046488][T20192] team0: Port device team_slave_0 added [ 633.055175][T20192] team0: Port device team_slave_1 added [ 633.094590][T20192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.101703][T20192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.128417][T20192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.140897][T20192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.147867][T20192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.174275][T20192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.239416][T20192] hsr_slave_0: entered promiscuous mode [ 633.246488][T20192] hsr_slave_1: entered promiscuous mode [ 633.253413][T20192] debugfs: 'hsr0' already exists in 'hsr' [ 633.259397][T20192] Cannot create hsr debugfs directory [ 633.971626][T20063] Bluetooth: hci14: command tx timeout [ 636.050791][T20063] Bluetooth: hci14: command tx timeout [ 636.771373][T20063] Bluetooth: hci4: command 0x0406 tx timeout [ 638.130963][T20029] Bluetooth: hci14: command tx timeout [ 640.210872][T20029] Bluetooth: hci14: command tx timeout [ 650.693029][ T1752] block nbd0: Possible stuck request ffff888091ece000: control (read@0,1024B). Runtime 240 seconds [ 662.211964][ T1752] block nbd2: Possible stuck request ffff888027d05080: control (read@0,2048B). Runtime 150 seconds [ 662.431608][T20063] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 662.445602][T20063] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 662.462660][T20063] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 662.472926][T20063] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 662.484279][T20063] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 662.954481][T20210] lo speed is unknown, defaulting to 1000 [ 663.127401][T20063] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 663.143223][T20063] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 663.155511][T20063] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 663.174495][T20063] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 663.184005][T20063] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 663.686256][T20210] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.693834][T20210] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.701741][T20210] bridge_slave_0: entered allmulticast mode [ 663.712403][T20210] bridge_slave_0: entered promiscuous mode [ 663.721759][T20210] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.729053][T20210] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.737543][T20210] bridge_slave_1: entered allmulticast mode [ 663.746018][T20210] bridge_slave_1: entered promiscuous mode [ 663.788848][T20210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.803032][T20210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.850465][T20210] team0: Port device team_slave_0 added [ 663.859792][T20210] team0: Port device team_slave_1 added [ 663.901406][T20210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.908450][T20210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.937227][T20210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.952848][T20210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.959897][T20210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.989456][T20210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.064194][T20210] hsr_slave_0: entered promiscuous mode [ 664.072220][T20210] hsr_slave_1: entered promiscuous mode [ 664.079012][T20210] debugfs: 'hsr0' already exists in 'hsr' [ 664.085620][T20210] Cannot create hsr debugfs directory [ 664.284829][T20221] lo speed is unknown, defaulting to 1000 [ 664.541597][T20063] Bluetooth: hci15: command tx timeout [ 664.615174][T20029] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 664.628255][T20029] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 664.638865][T20029] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 664.655678][T20029] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 664.667669][T20029] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 665.256470][T20063] Bluetooth: hci16: command tx timeout [ 665.411416][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 665.480183][T20221] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.501045][T20221] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.518664][T20221] bridge_slave_0: entered allmulticast mode [ 665.534727][T20221] bridge_slave_0: entered promiscuous mode [ 665.556325][T20221] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.573729][T20221] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.591307][T20221] bridge_slave_1: entered allmulticast mode [ 665.611667][T20221] bridge_slave_1: entered promiscuous mode [ 665.688397][T20258] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 665.706017][T20258] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 665.720163][T20258] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 665.728681][T20221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.745772][T20258] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 665.755685][T20258] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 665.777294][T20221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.828651][T20239] lo speed is unknown, defaulting to 1000 [ 665.898841][T20221] team0: Port device team_slave_0 added [ 665.918864][T20221] team0: Port device team_slave_1 added [ 666.038803][T20221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.047548][T20221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.097843][T20221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.117637][T20221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.128520][T20221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.163013][T20221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.327982][T20221] hsr_slave_0: entered promiscuous mode [ 666.339848][T20221] hsr_slave_1: entered promiscuous mode [ 666.353669][T20221] debugfs: 'hsr0' already exists in 'hsr' [ 666.359498][T20221] Cannot create hsr debugfs directory [ 666.610869][ T5638] Bluetooth: hci15: command tx timeout [ 666.688738][T20257] lo speed is unknown, defaulting to 1000 [ 666.771602][ T5638] Bluetooth: hci17: command tx timeout [ 667.331663][ T5638] Bluetooth: hci16: command tx timeout [ 667.428006][T20239] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.436700][T20239] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.446523][T20239] bridge_slave_0: entered allmulticast mode [ 667.459262][T20239] bridge_slave_0: entered promiscuous mode [ 667.473132][T20239] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.481649][T20239] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.489955][T20239] bridge_slave_1: entered allmulticast mode [ 667.505632][T20239] bridge_slave_1: entered promiscuous mode [ 667.513007][ T5638] Bluetooth: hci1: command 0x0406 tx timeout [ 667.513408][T20258] Bluetooth: hci7: command 0x0406 tx timeout [ 667.525589][T20258] Bluetooth: hci6: command 0x0406 tx timeout [ 667.635174][T20239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.675582][T20239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.772195][T20239] team0: Port device team_slave_0 added [ 667.811653][ T5644] Bluetooth: hci18: command tx timeout [ 667.828733][T20239] team0: Port device team_slave_1 added [ 667.896334][T20239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.905580][T20239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.934555][T20239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.959615][T20239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.966877][T20239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.994086][T20239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.057108][T20257] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.064786][T20257] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.072396][T20257] bridge_slave_0: entered allmulticast mode [ 668.080677][T20257] bridge_slave_0: entered promiscuous mode [ 668.105371][T20257] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.115385][T20257] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.123448][T20257] bridge_slave_1: entered allmulticast mode [ 668.132087][T20257] bridge_slave_1: entered promiscuous mode [ 668.184542][T20239] hsr_slave_0: entered promiscuous mode [ 668.191933][T20239] hsr_slave_1: entered promiscuous mode [ 668.198316][T20239] debugfs: 'hsr0' already exists in 'hsr' [ 668.204166][T20239] Cannot create hsr debugfs directory [ 668.241465][T20257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.255959][T20257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.342100][T20257] team0: Port device team_slave_0 added [ 668.369820][T20257] team0: Port device team_slave_1 added [ 668.448482][T20257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.456922][T20257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.486923][T20257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.511675][T20257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.520293][T20257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.549294][T20257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.690988][ T5644] Bluetooth: hci15: command tx timeout [ 668.711958][T20257] hsr_slave_0: entered promiscuous mode [ 668.719173][T20257] hsr_slave_1: entered promiscuous mode [ 668.727846][T20257] debugfs: 'hsr0' already exists in 'hsr' [ 668.733915][T20257] Cannot create hsr debugfs directory [ 668.851223][ T5644] Bluetooth: hci17: command tx timeout [ 669.412377][ T5644] Bluetooth: hci16: command tx timeout [ 669.891057][ T5644] Bluetooth: hci18: command tx timeout [ 670.533617][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 670.772337][ T5644] Bluetooth: hci15: command tx timeout [ 670.931698][ T5644] Bluetooth: hci17: command tx timeout [ 671.491396][ T5644] Bluetooth: hci16: command tx timeout [ 671.981052][ T5644] Bluetooth: hci18: command tx timeout [ 672.610862][ T5644] Bluetooth: hci8: command 0x0406 tx timeout [ 673.020869][T20118] Bluetooth: hci17: command tx timeout [ 673.741673][ T31] INFO: task dhcpcd:5291 blocked for more than 143 seconds. [ 673.749747][ T31] Not tainted syzkaller #0 [ 673.755000][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 673.764818][ T31] task:dhcpcd state:D stack:25160 pid:5291 tgid:5291 ppid:1 task_flags:0x400140 flags:0x00080000 [ 673.777441][ T31] Call Trace: [ 673.780901][ T31] [ 673.783905][ T31] __schedule+0x1821/0x5740 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 673.788549][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 673.794456][ T31] ? __pfx___schedule+0x10/0x10 [ 673.799442][ T31] ? schedule+0x90/0x360 [ 673.804449][ T31] schedule+0x164/0x360 [ 673.808674][ T31] schedule_preempt_disabled+0x13/0x30 [ 673.814644][ T31] __mutex_lock+0x7f7/0x1550 [ 673.819311][ T31] ? kernel_text_address+0xa5/0xe0 [ 673.826693][ T31] ? __mutex_lock+0x608/0x1550 [ 673.831750][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 673.837118][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 673.843800][ T31] ? stack_trace_save+0xa9/0x100 [ 673.848839][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 673.854229][ T31] ? radix_tree_lookup+0x240/0x290 [ 673.859630][ T31] genl_rcv_msg+0x10b/0x7a0 [ 673.864575][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 673.869690][ T31] netlink_rcv_skb+0x232/0x4b0 [ 673.875651][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 673.881059][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 673.886547][ T31] ? down_read+0x270/0x2e0 [ 673.893182][ T31] ? genl_rcv+0xd/0x40 [ 673.897329][ T31] genl_rcv+0x28/0x40 [ 673.901859][ T31] netlink_unicast+0x75c/0x8e0 [ 673.906971][ T31] netlink_sendmsg+0x813/0xb40 [ 673.912241][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 673.917592][ T31] ? __se_sys_ioctl+0x47/0x170 [ 673.928329][ T31] ? do_syscall_64+0x15f/0xf80 [ 673.954755][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 673.988071][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 673.997312][ T31] ____sys_sendmsg+0x972/0x9f0 [ 674.002650][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 674.008211][ T31] ? import_iovec+0x73/0xa0 [ 674.014155][ T31] ___sys_sendmsg+0x2a5/0x360 [ 674.018940][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 674.024678][ T31] ? __rtnl_unlock+0xc8/0xf0 [ 674.029533][ T31] ? __seccomp_filter+0x3e9/0x1ef0 [ 674.035266][ T31] ? __pfx___seccomp_filter+0x10/0x10 [ 674.041062][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 674.046071][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 674.053190][T20118] Bluetooth: hci18: command tx timeout [ 674.069225][ T31] ? __secure_computing+0xe1/0x2a0 [ 674.075525][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.081977][ T31] do_syscall_64+0x15f/0xf80 [ 674.086652][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.093364][ T31] ? clear_bhb_loop+0x40/0x90 [ 674.098131][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.104531][ T31] RIP: 0033:0x7fa426a9e407 [ 674.109419][ T31] RSP: 002b:00007ffcf57e96a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 674.118445][ T31] RAX: ffffffffffffffda RBX: 00007fa426a14780 RCX: 00007fa426a9e407 [ 674.127602][ T31] RDX: 0000000000000000 RSI: 00007ffcf57e9720 RDI: 000000000000000e [ 674.136142][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 674.148287][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055938b6e7e10 [ 674.158139][ T31] R13: 000000000000000e R14: 00007ffcf57fdbe0 R15: 00005593c8b78aa0 [ 674.166530][ T31] [ 674.169748][ T31] INFO: task syz-executor:19666 blocked for more than 143 seconds. [ 674.180044][ T31] Not tainted syzkaller #0 [ 674.185553][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 674.194919][ T31] task:syz-executor state:D stack:22248 pid:19666 tgid:19666 ppid:1 task_flags:0x400140 flags:0x00080002 [ 674.207566][ T31] Call Trace: [ 674.220971][ T31] [ 674.223985][ T31] __schedule+0x1821/0x5740 [ 674.228545][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 674.235347][ T31] ? __pfx___schedule+0x10/0x10 [ 674.240296][ T31] ? schedule+0x90/0x360 [ 674.244912][ T31] schedule+0x164/0x360 [ 674.249147][ T31] schedule_preempt_disabled+0x13/0x30 [ 674.257355][ T31] __mutex_lock+0x7f7/0x1550 [ 674.262201][ T31] ? kernel_text_address+0xa5/0xe0 [ 674.267405][ T31] ? __mutex_lock+0x608/0x1550 [ 674.272357][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 674.277117][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 674.283435][ T31] ? stack_trace_save+0xa9/0x100 [ 674.288465][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 674.297772][ T31] ? radix_tree_lookup+0x240/0x290 [ 674.303287][ T31] genl_rcv_msg+0x10b/0x7a0 [ 674.307880][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 674.313655][ T31] netlink_rcv_skb+0x232/0x4b0 [ 674.318577][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 674.324047][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 674.329504][ T31] ? down_read+0x270/0x2e0 [ 674.335215][ T31] ? genl_rcv+0xd/0x40 [ 674.339365][ T31] genl_rcv+0x28/0x40 [ 674.344390][ T31] netlink_unicast+0x75c/0x8e0 [ 674.349760][ T31] netlink_sendmsg+0x813/0xb40 [ 674.356643][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.362502][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 674.367736][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 674.373730][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.379090][ T31] __sys_sendto+0x672/0x710 [ 674.384098][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 674.389425][ T31] ? fd_install+0x94/0x3d0 [ 674.394316][ T31] ? fd_install+0x306/0x3d0 [ 674.399433][ T31] __x64_sys_sendto+0xde/0x100 [ 674.405303][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.411531][ T31] do_syscall_64+0x15f/0xf80 [ 674.416167][ T31] ? trace_irq_disable+0x3b/0x140 [ 674.421647][ T31] ? clear_bhb_loop+0x40/0x90 [ 674.426386][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.432396][ T31] RIP: 0033:0x7f0f79b5d68e [ 674.436848][ T31] RSP: 002b:00007ffed0216748 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 674.445430][ T31] RAX: ffffffffffffffda RBX: 0000555593cdc500 RCX: 00007f0f79b5d68e [ 674.454344][ T31] RDX: 0000000000000020 RSI: 00007f0f7a944670 RDI: 0000000000000005 [ 674.463681][ T31] RBP: 0000000000000001 R08: 00007ffed02167c4 R09: 000000000000000c [ 674.471898][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 674.480036][ T31] R13: 00007ffed0216818 R14: 00007f0f7a944670 R15: 0000000000000000 [ 674.490275][ T31] [ 674.493864][ T31] INFO: task syz.2.3450:19959 blocked for more than 144 seconds. [ 674.502737][ T31] Not tainted syzkaller #0 [ 674.507737][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 674.518289][ T31] task:syz.2.3450 state:D stack:26328 pid:19959 tgid:19957 ppid:17614 task_flags:0x480140 flags:0x00080002 [ 674.534160][ T31] Call Trace: [ 674.537507][ T31] [ 674.540474][ T31] __schedule+0x1821/0x5740 [ 674.545139][ T31] ? __pfx___schedule+0x10/0x10 [ 674.550024][ T31] ? schedule+0x90/0x360 [ 674.554350][ T31] schedule+0x164/0x360 [ 674.558551][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 674.565453][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 674.571726][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 674.578192][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 674.584546][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 674.591048][ T31] nbd_set_size+0x454/0x680 [ 674.595770][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 674.600978][ T31] ? nla_memcpy+0x5b/0xc0 [ 674.605442][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 674.611175][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 674.617059][ T31] ? rcu_is_watching+0x15/0xb0 [ 674.622034][ T31] ? trace_kmalloc+0x2a/0xf0 [ 674.626690][ T31] ? __nla_parse+0x40/0x60 [ 674.631252][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 674.637627][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 674.644176][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 674.649818][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 674.656067][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 674.661119][ T31] genl_rcv_msg+0x61c/0x7a0 [ 674.666762][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 674.672035][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 674.677823][ T31] netlink_rcv_skb+0x232/0x4b0 [ 674.682682][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 674.687745][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 674.693340][ T31] ? down_read+0x270/0x2e0 [ 674.697832][ T31] ? genl_rcv+0xd/0x40 [ 674.702187][ T31] genl_rcv+0x28/0x40 [ 674.706316][ T31] netlink_unicast+0x75c/0x8e0 [ 674.711304][ T31] netlink_sendmsg+0x813/0xb40 [ 674.716124][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.721720][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 674.726749][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 674.732244][ T31] ____sys_sendmsg+0x972/0x9f0 [ 674.737086][ T31] ? __might_fault+0xaf/0x130 [ 674.741894][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 674.747196][ T31] ? import_iovec+0x73/0xa0 [ 674.752016][ T31] ___sys_sendmsg+0x2a5/0x360 [ 674.756750][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 674.761806][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 674.768367][ T31] ? futex_wake+0x4ac/0x580 [ 674.774575][ T31] ? __fget_files+0x2a/0x420 [ 674.779717][ T31] ? __fget_files+0x3a0/0x420 [ 674.784716][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 674.789732][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 674.795412][ T31] ? rcu_is_watching+0x15/0xb0 [ 674.800239][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.806611][ T31] do_syscall_64+0x15f/0xf80 [ 674.811488][ T31] ? trace_irq_disable+0x3b/0x140 [ 674.816576][ T31] ? clear_bhb_loop+0x40/0x90 [ 674.821446][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.827381][ T31] RIP: 0033:0x7fdb96d9ce59 [ 674.832077][ T31] RSP: 002b:00007fdb97c6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.840662][ T31] RAX: ffffffffffffffda RBX: 00007fdb97015fa0 RCX: 00007fdb96d9ce59 [ 674.848681][ T31] RDX: 0000000000004014 RSI: 0000200000000380 RDI: 0000000000000006 [ 674.857021][ T31] RBP: 00007fdb96e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 674.865570][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.875081][ T31] R13: 00007fdb97016038 R14: 00007fdb97015fa0 R15: 00007ffc46441588 [ 674.883200][ T31] [ 674.886350][ T31] INFO: task syz.0.3452:19965 blocked for more than 144 seconds. [ 674.894919][ T31] Not tainted syzkaller #0 [ 674.899917][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 674.909114][ T31] task:syz.0.3452 state:D stack:28760 pid:19965 tgid:19964 ppid:18480 task_flags:0x400040 flags:0x00080002 [ 674.922777][ T31] Call Trace: [ 674.926129][ T31] [ 674.929140][ T31] __schedule+0x1821/0x5740 [ 674.935330][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 674.940373][ T31] ? __pfx___schedule+0x10/0x10 [ 674.945531][ T31] ? schedule+0x90/0x360 [ 674.949852][ T31] schedule+0x164/0x360 [ 674.954286][ T31] schedule_preempt_disabled+0x13/0x30 [ 674.959911][ T31] __mutex_lock+0x7f7/0x1550 [ 674.966055][ T31] ? kernel_text_address+0xa5/0xe0 [ 674.973225][ T31] ? __mutex_lock+0x608/0x1550 [ 674.978560][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 674.983499][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 674.988592][ T31] ? stack_trace_save+0xa9/0x100 [ 674.993735][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 674.998753][ T31] ? radix_tree_lookup+0x240/0x290 [ 675.004086][ T31] genl_rcv_msg+0x10b/0x7a0 [ 675.008862][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 675.014629][ T31] netlink_rcv_skb+0x232/0x4b0 [ 675.019465][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 675.025606][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 675.031809][ T31] ? down_read+0x270/0x2e0 [ 675.036343][ T31] ? genl_rcv+0xd/0x40 [ 675.040473][ T31] genl_rcv+0x28/0x40 [ 675.044627][ T31] netlink_unicast+0x75c/0x8e0 [ 675.049451][ T31] netlink_sendmsg+0x813/0xb40 [ 675.054489][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.060084][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 675.065509][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 675.071011][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.078955][ T31] __sys_sendto+0x672/0x710 [ 675.084230][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 675.089355][ T31] ? exc_page_fault+0x6a/0xc0 [ 675.095021][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 675.100423][ T31] __x64_sys_sendto+0xde/0x100 [ 675.105602][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.112867][ T31] do_syscall_64+0x15f/0xf80 [ 675.117510][ T31] ? trace_irq_disable+0x3b/0x140 [ 675.122679][ T31] ? clear_bhb_loop+0x40/0x90 [ 675.127423][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.133525][ T31] RIP: 0033:0x7f7e4475d68e [ 675.138038][ T31] RSP: 002b:00007f7e456d5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 675.146743][ T31] RAX: ffffffffffffffda RBX: 00007f7e456d76c0 RCX: 00007f7e4475d68e [ 675.154928][ T31] RDX: 0000000000000020 RSI: 00007f7e456d6000 RDI: 0000000000000004 [ 675.163110][ T31] RBP: 0000000000000000 R08: 00007f7e456d5f04 R09: 000000000000000c [ 675.171475][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 675.181152][ T31] R13: 00007f7e456d5f58 R14: 00007f7e456d6000 R15: 0000000000000000 [ 675.189241][ T31] [ 675.192632][ T31] INFO: task syz.4.3456:19998 blocked for more than 144 seconds. [ 675.200488][ T31] Not tainted syzkaller #0 [ 675.205635][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 675.214503][ T31] task:syz.4.3456 state:D stack:25648 pid:19998 tgid:19997 ppid:19214 task_flags:0x400140 flags:0x00080002 [ 675.226876][ T31] Call Trace: [ 675.230222][ T31] [ 675.233306][ T31] __schedule+0x1821/0x5740 [ 675.237835][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 675.242908][ T31] ? __pfx___schedule+0x10/0x10 [ 675.247800][ T31] ? schedule+0x90/0x360 [ 675.252701][ T31] schedule+0x164/0x360 [ 675.256940][ T31] schedule_preempt_disabled+0x13/0x30 [ 675.265045][ T31] __mutex_lock+0x7f7/0x1550 [ 675.269734][ T31] ? __mutex_lock+0x608/0x1550 [ 675.274933][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 675.280953][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 675.286408][ T31] ? radix_tree_lookup+0x240/0x290 [ 675.291949][ T31] genl_rcv_msg+0x10b/0x7a0 [ 675.296538][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 675.301832][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 675.307364][ T31] netlink_rcv_skb+0x232/0x4b0 [ 675.312263][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 675.317335][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 675.322774][ T31] ? down_read+0x270/0x2e0 [ 675.327317][ T31] ? genl_rcv+0xd/0x40 [ 675.331693][ T31] genl_rcv+0x28/0x40 [ 675.335836][ T31] netlink_unicast+0x75c/0x8e0 [ 675.340818][ T31] netlink_sendmsg+0x813/0xb40 [ 675.345660][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.351070][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 675.356053][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 675.361567][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.366914][ T31] __sys_sendto+0x672/0x710 [ 675.371548][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 675.376671][ T31] ? exc_page_fault+0x6a/0xc0 [ 675.382700][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 675.388074][ T31] __x64_sys_sendto+0xde/0x100 [ 675.393061][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.399539][ T31] do_syscall_64+0x15f/0xf80 [ 675.404351][ T31] ? trace_irq_disable+0x3b/0x140 [ 675.409495][ T31] ? clear_bhb_loop+0x40/0x90 [ 675.416511][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.423895][ T31] RIP: 0033:0x7f626815d68e [ 675.428958][ T31] RSP: 002b:00007f6268febe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 675.437536][ T31] RAX: ffffffffffffffda RBX: 00007f6268fed6c0 RCX: 00007f626815d68e [ 675.445864][ T31] RDX: 0000000000000020 RSI: 00007f6268fec000 RDI: 0000000000000013 [ 675.453967][ T31] RBP: 0000000000000000 R08: 00007f6268febf04 R09: 000000000000000c [ 675.462070][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 [ 675.470077][ T31] R13: 00007f6268febf58 R14: 00007f6268fec000 R15: 0000000000000000 [ 675.478328][ T31] [ 675.482691][ T31] INFO: task syz.4.3456:20002 blocked for more than 145 seconds. [ 675.490972][ T31] Not tainted syzkaller #0 [ 675.495962][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 675.504736][ T31] task:syz.4.3456 state:D stack:27904 pid:20002 tgid:19997 ppid:19214 task_flags:0x400040 flags:0x00080002 [ 675.517361][ T31] Call Trace: [ 675.521187][ T31] [ 675.524218][ T31] __schedule+0x1821/0x5740 [ 675.528788][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 675.533974][ T31] ? __pfx___schedule+0x10/0x10 [ 675.538929][ T31] ? schedule+0x90/0x360 [ 675.543335][ T31] schedule+0x164/0x360 [ 675.547545][ T31] schedule_preempt_disabled+0x13/0x30 [ 675.553265][ T31] __mutex_lock+0x7f7/0x1550 [ 675.557955][ T31] ? __mutex_lock+0x608/0x1550 [ 675.562881][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 675.567602][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 675.573816][ T31] ? radix_tree_lookup+0x240/0x290 [ 675.579707][ T31] genl_rcv_msg+0x10b/0x7a0 [ 675.586562][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 675.592316][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 675.597771][ T31] netlink_rcv_skb+0x232/0x4b0 [ 675.602832][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 675.607940][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 675.613743][ T31] ? down_read+0x270/0x2e0 [ 675.618265][ T31] ? genl_rcv+0xd/0x40 [ 675.622595][ T31] genl_rcv+0x28/0x40 [ 675.626663][ T31] netlink_unicast+0x75c/0x8e0 [ 675.631830][ T31] netlink_sendmsg+0x813/0xb40 [ 675.636668][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.642173][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 675.647206][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 675.657153][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.662966][ T31] __sys_sendto+0x672/0x710 [ 675.667657][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 675.672886][ T31] ? fd_install+0x94/0x3d0 [ 675.678354][ T31] ? fd_install+0x306/0x3d0 [ 675.683577][ T31] __x64_sys_sendto+0xde/0x100 [ 675.689812][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.696154][ T31] do_syscall_64+0x15f/0xf80 [ 675.700861][ T31] ? trace_irq_disable+0x3b/0x140 [ 675.705911][ T31] ? clear_bhb_loop+0x40/0x90 [ 675.710882][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.716831][ T31] RIP: 0033:0x7f626815d68e [ 675.721685][ T31] RSP: 002b:00007f6268fcae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 675.730146][ T31] RAX: ffffffffffffffda RBX: 00007f6268fcc6c0 RCX: 00007f626815d68e [ 675.738302][ T31] RDX: 0000000000000020 RSI: 00007f6268fcb000 RDI: 0000000000000016 [ 675.746547][ T31] RBP: 0000000000000000 R08: 00007f6268fcaf04 R09: 000000000000000c [ 675.754823][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 675.763056][ T31] R13: 00007f6268fcaf58 R14: 00007f6268fcb000 R15: 0000000000000000 [ 675.771425][ T31] [ 675.774560][ T31] INFO: task syz.1.3463:20022 blocked for more than 145 seconds. [ 675.782599][ T31] Not tainted syzkaller #0 [ 675.787580][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 675.798065][ T31] task:syz.1.3463 state:D stack:26200 pid:20022 tgid:20021 ppid:18003 task_flags:0x400140 flags:0x00080002 [ 675.810360][ T31] Call Trace: [ 675.814093][ T31] [ 675.817078][ T31] __schedule+0x1821/0x5740 [ 675.821889][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 675.826949][ T31] ? __pfx___schedule+0x10/0x10 [ 675.832203][ T31] ? schedule+0x90/0x360 [ 675.836533][ T31] schedule+0x164/0x360 [ 675.840811][ T31] schedule_preempt_disabled+0x13/0x30 [ 675.846301][ T31] __mutex_lock+0x7f7/0x1550 [ 675.851107][ T31] ? kernel_text_address+0xa5/0xe0 [ 675.856317][ T31] ? __mutex_lock+0x608/0x1550 [ 675.861220][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 675.865946][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 675.871116][ T31] ? stack_trace_save+0xa9/0x100 [ 675.876105][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 675.881332][ T31] ? radix_tree_lookup+0x240/0x290 [ 675.886520][ T31] genl_rcv_msg+0x10b/0x7a0 [ 675.892837][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 675.897974][ T31] netlink_rcv_skb+0x232/0x4b0 [ 675.902859][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 675.912283][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 675.918348][ T31] ? down_read+0x270/0x2e0 [ 675.922891][ T31] ? genl_rcv+0xd/0x40 [ 675.927007][ T31] genl_rcv+0x28/0x40 [ 675.931215][ T31] netlink_unicast+0x75c/0x8e0 [ 675.936075][ T31] netlink_sendmsg+0x813/0xb40 [ 675.940954][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.946297][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 675.951718][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 675.957375][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.963758][ T31] __sys_sendto+0x672/0x710 [ 675.968684][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 675.976502][ T31] __x64_sys_sendto+0xde/0x100 [ 675.981485][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.987635][ T31] do_syscall_64+0x15f/0xf80 [ 675.992482][ T31] ? trace_irq_disable+0x3b/0x140 [ 675.998614][ T31] ? clear_bhb_loop+0x40/0x90 [ 676.003488][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.009666][ T31] RIP: 0033:0x7f804795d68e [ 676.014563][ T31] RSP: 002b:00007f804887be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 676.023286][ T31] RAX: ffffffffffffffda RBX: 00007f804887d6c0 RCX: 00007f804795d68e [ 676.031387][ T31] RDX: 0000000000000028 RSI: 00007f804887c000 RDI: 0000000000000007 [ 676.039489][ T31] RBP: 0000000000000000 R08: 00007f804887bf04 R09: 000000000000000c [ 676.047699][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 676.057026][ T31] R13: 00007f804887bf58 R14: 00007f804887c000 R15: 0000000000000000 [ 676.065761][ T31] [ 676.068949][ T31] INFO: task syz.1.3463:20023 blocked for more than 145 seconds. [ 676.077692][ T31] Not tainted syzkaller #0 [ 676.083222][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 676.092151][ T31] task:syz.1.3463 state:D stack:25800 pid:20023 tgid:20021 ppid:18003 task_flags:0x400140 flags:0x00080002 [ 676.105490][ T31] Call Trace: [ 676.108932][ T31] [ 676.111978][ T31] __schedule+0x1821/0x5740 [ 676.116531][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 676.121652][ T31] ? __pfx___schedule+0x10/0x10 [ 676.126553][ T31] ? schedule+0x90/0x360 [ 676.131175][ T31] schedule+0x164/0x360 [ 676.136598][ T31] schedule_preempt_disabled+0x13/0x30 [ 676.142217][ T31] __mutex_lock+0x7f7/0x1550 [ 676.146848][ T31] ? __mutex_lock+0x608/0x1550 [ 676.151839][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 676.156597][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 676.162179][ T31] ? radix_tree_lookup+0x240/0x290 [ 676.168675][ T31] genl_rcv_msg+0x10b/0x7a0 [ 676.174521][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 676.179727][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 676.185409][ T31] netlink_rcv_skb+0x232/0x4b0 [ 676.190239][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 676.195427][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 676.202090][ T31] ? down_read+0x270/0x2e0 [ 676.206581][ T31] ? genl_rcv+0xd/0x40 [ 676.210988][ T31] genl_rcv+0x28/0x40 [ 676.215046][ T31] netlink_unicast+0x75c/0x8e0 [ 676.219878][ T31] netlink_sendmsg+0x813/0xb40 [ 676.224807][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.230124][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 676.235311][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 676.240897][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.246224][ T31] __sys_sendto+0x672/0x710 [ 676.250917][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 676.256051][ T31] ? fd_install+0x94/0x3d0 [ 676.260506][ T31] ? fd_install+0x306/0x3d0 [ 676.265485][ T31] __x64_sys_sendto+0xde/0x100 [ 676.270301][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.276696][ T31] do_syscall_64+0x15f/0xf80 [ 676.281814][ T31] ? trace_irq_disable+0x3b/0x140 [ 676.286909][ T31] ? clear_bhb_loop+0x40/0x90 [ 676.292654][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.298621][ T31] RIP: 0033:0x7f804795d68e [ 676.304561][ T31] RSP: 002b:00007f804885ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 676.313284][ T31] RAX: ffffffffffffffda RBX: 00007f804885c6c0 RCX: 00007f804795d68e [ 676.325434][ T31] RDX: 0000000000000020 RSI: 00007f804885b000 RDI: 000000000000000d [ 676.333770][ T31] RBP: 0000000000000000 R08: 00007f804885af04 R09: 000000000000000c [ 676.342113][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 676.350158][ T31] R13: 00007f804885af58 R14: 00007f804885b000 R15: 0000000000000000 [ 676.358919][ T31] [ 676.362391][ T31] [ 676.362391][ T31] Showing all locks held in the system: [ 676.370162][ T31] 1 lock held by khungtaskd/31: [ 676.375831][ T31] #0: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 676.385963][ T31] 2 locks held by dhcpcd/5291: [ 676.390901][ T31] #0: ffffffff8fe41748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.399184][ T31] #1: ffffffff8fe41580 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 676.409335][ T31] 2 locks held by getty/5386: [ 676.415151][ T31] #0: ffff8880368370a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 676.426217][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 676.436806][ T31] 1 lock held by udevd/12873: [ 676.442847][ T31] #0: ffff888027bf6350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 676.453689][ T31] 1 lock held by udevd/13817: [ 676.458877][ T31] #0: ffff8880468b1350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 676.469422][ T31] 2 locks held by syz-executor/19666: [ 676.475057][ T31] #0: ffffffff8fe41748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.483681][ T31] #1: ffffffff8fe41580 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 676.492906][ T31] 6 locks held by syz.2.3450/19959: [ 676.498170][ T31] #0: ffffffff8fe41748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.508270][ T31] #1: ffffffff8fe41580 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 676.517670][ T31] #2: ffff888027c0fa60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 676.528162][ T31] #3: ffff888027be3528 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 676.537929][ T31] #4: ffff888027be2ef0 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 676.550279][ T31] #5: ffff888027be2f28 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 676.563208][ T31] 2 locks held by syz.0.3452/19965: [ 676.568598][ T31] #0: ffffffff8fe41748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.577063][ T31] #1: ffffffff8fe41580 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 676.586251][ T31] 2 locks held by syz.4.3456/19998: [ 676.592021][ T31] #0: ffffffff8fe41748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.601667][ T31] #1: ffffffff8fe41580 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 676.613228][ T31] 2 locks held by syz.4.3456/20002: [ 676.618496][ T31] #0: ffffffff8fe41748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.627153][ T31] #1: ffffffff8fe41580 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 676.637447][ T31] 2 locks held by syz.1.3463/20022: [ 676.643468][ T31] #0: ffffffff8fe41748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.651937][ T31] #1: ffffffff8fe41580 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 676.661138][ T31] 2 locks held by syz.1.3463/20023: [ 676.666472][ T31] #0: ffffffff8fe41748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.675176][ T31] #1: ffffffff8fe41580 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 676.684526][ T31] 2 locks held by syz-executor/20028: [ 676.689972][ T31] #0: ffffffff8fe41748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.698441][ T31] #1: ffffffff8fe41580 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 676.708744][ T31] 2 locks held by syz-executor/20032: [ 676.715718][ T31] #0: ffffffff8fe41748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.724059][ T31] #1: ffffffff8fe41580 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 676.733963][ T31] 2 locks held by syz-executor/20060: [ 676.739404][ T31] #0: ffffffff8fe41748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.747879][ T31] #1: ffffffff8fe41580 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 676.757680][ T31] 2 locks held by syz-executor/20076: [ 676.764267][ T31] #0: ffffffff8fe41748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.772795][ T31] #1: ffffffff8fe41580 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 676.783427][ T31] 2 locks held by syz-executor/20101: [ 676.789344][ T31] #0: ffffffff8fe41748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.798694][ T31] #1: ffffffff8fe41580 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 676.807890][ T31] 2 locks held by syz-executor/20120: [ 676.815676][ T31] #0: ffffffff8fe41748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.824401][ T31] #1: ffffffff8fe41580 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 676.833656][ T31] 2 locks held by syz-executor/20138: [ 676.839079][ T31] #0: ffffffff8fe41748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.847861][ T31] #1: ffffffff8fe41580 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 676.857032][ T31] 2 locks held by syz-executor/20153: [ 676.862979][ T31] #0: ffffffff8fe41748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.871415][ T31] #1: ffffffff8fe41580 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 676.881596][ T31] 2 locks held by syz-executor/20167: [ 676.887586][ T31] #0: ffffffff8fe41748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.896278][ T31] #1: ffffffff8fe41580 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 676.905888][ T31] 2 locks held by syz-executor/20192: [ 676.911441][ T31] #0: ffffffff8fe41748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.920954][ T31] #1: ffffffff8fe41580 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 676.932448][ T31] 2 locks held by syz-executor/20210: [ 676.938640][ T31] #0: ffffffff8fe41748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.947199][ T31] #1: ffffffff8fe41580 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 676.956447][ T31] 2 locks held by syz-executor/20221: [ 676.962342][ T31] #0: ffffffff8fe41748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.971215][ T31] #1: ffffffff8fe41580 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 676.980297][ T31] 2 locks held by syz-executor/20239: [ 676.985932][ T31] #0: ffffffff8fe41748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 676.994387][ T31] #1: ffffffff8fe41580 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 677.004941][ T31] 2 locks held by syz-executor/20257: [ 677.011747][ T31] #0: ffffffff8fe41748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 677.022303][ T31] #1: ffffffff8fe41580 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 677.032399][ T31] [ 677.034791][ T31] ============================================= [ 677.034791][ T31] [ 677.044646][ T31] NMI backtrace for cpu 0 [ 677.044663][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 677.044686][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 677.044698][ T31] Call Trace: [ 677.044707][ T31] [ 677.044716][ T31] dump_stack_lvl+0xe8/0x150 [ 677.044747][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 677.044775][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 677.044829][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 677.044863][ T31] sys_info+0x135/0x170 [ 677.044884][ T31] watchdog+0xfd3/0x1030 [ 677.044923][ T31] ? watchdog+0x1c9/0x1030 [ 677.044959][ T31] kthread+0x389/0x470 [ 677.044987][ T31] ? __pfx_watchdog+0x10/0x10 [ 677.045014][ T31] ? __pfx_kthread+0x10/0x10 [ 677.045044][ T31] ret_from_fork+0x514/0xb70 [ 677.045088][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 677.045110][ T31] ? __switch_to+0xc79/0x1410 [ 677.045144][ T31] ? __pfx_kthread+0x10/0x10 [ 677.045173][ T31] ret_from_fork_asm+0x1a/0x30 [ 677.045215][ T31] [ 677.045233][ T31] Sending NMI from CPU 0 to CPUs 1: [ 677.158231][ C1] NMI backtrace for cpu 1 [ 677.158249][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 677.158269][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 677.158279][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 677.158311][ C1] Code: 6b 7c 02 e9 93 f7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 01 1f 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 677.158327][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 677.158347][ C1] RAX: 0000000002a75dc3 RBX: ffffffff819a958a RCX: 0000000080000001 [ 677.158360][ C1] RDX: 0000000000000001 RSI: ffffffff8dfb0547 RDI: ffffffff8c28afe0 [ 677.158372][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 677.158385][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 677.158397][ C1] R13: 1ffff11003b5c000 R14: 0000000000000001 R15: 1ffff11003b5c000 [ 677.158410][ C1] FS: 0000000000000000(0000) GS:ffff888125379000(0000) knlGS:0000000000000000 [ 677.158424][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 677.158435][ C1] CR2: 000055561e74fee8 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 677.158457][ C1] Call Trace: [ 677.158464][ C1] [ 677.158471][ C1] default_idle+0x9/0x20 [ 677.158488][ C1] default_idle_call+0x72/0xb0 [ 677.158516][ C1] do_idle+0x36a/0x5f0 [ 677.158563][ C1] ? __pfx_do_idle+0x10/0x10 [ 677.158589][ C1] cpu_startup_entry+0x43/0x60 [ 677.158609][ C1] start_secondary+0x101/0x110 [ 677.158625][ C1] common_startup_64+0x13e/0x147 [ 677.158659][ C1] [ 677.322048][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 677.328925][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 677.338042][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 677.348107][ T31] Call Trace: [ 677.351395][ T31] [ 677.354350][ T31] vpanic+0x56c/0xa60 [ 677.358379][ T31] ? __pfx___schedule+0x10/0x10 [ 677.363271][ T31] ? __pfx_vpanic+0x10/0x10 [ 677.367825][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 677.374035][ T31] panic+0xc5/0xd0 [ 677.377777][ T31] ? __pfx_panic+0x10/0x10 [ 677.382229][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 677.387756][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 677.393971][ T31] watchdog+0x102c/0x1030 [ 677.398333][ T31] ? watchdog+0x1c9/0x1030 [ 677.402782][ T31] kthread+0x389/0x470 [ 677.406864][ T31] ? __pfx_watchdog+0x10/0x10 [ 677.411554][ T31] ? __pfx_kthread+0x10/0x10 [ 677.416334][ T31] ret_from_fork+0x514/0xb70 [ 677.420936][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 677.426052][ T31] ? __switch_to+0xc79/0x1410 [ 677.430768][ T31] ? __pfx_kthread+0x10/0x10 [ 677.435753][ T31] ret_from_fork_asm+0x1a/0x30 [ 677.440661][ T31] [ 677.444771][ T31] Kernel Offset: disabled [ 677.449107][ T31] Rebooting in 86400 seconds..