last executing test programs: 20.95732232s ago: executing program 3 (id=3237): r0 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r3], 0x24}}, 0x4000000) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2, 0xe, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x2, @local}}, @sadb_address={0x3, 0x6}, @sadb_x_policy={0x8, 0x12, 0x4, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in6=@dev={0xfe, 0x80, '\x00', 0x3d}}}]}, 0x80}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) bind$packet(r6, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="27738d50c7f5"}, 0x14) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@ipv6_deladdrlabel={0x48, 0x49, 0x8, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0x78, 0x0, r1, 0x6}, [@IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x4008400) socket$inet6(0xa, 0x80003, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="06000000040000000400000001"], 0x50) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_tracing={0x1a, 0x26, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x10, '\x00', r1, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x31b5, 0xffffffffffffffff, 0xa, &(0x7f0000000700)=[r7, r7], &(0x7f0000000740)=[{0x5, 0x4, 0x6, 0x9}, {0x1, 0x4, 0x0, 0x2}, {0x4, 0x2, 0x5, 0xc}, {0x1, 0x2, 0x1, 0x9}, {0x4, 0x1, 0x7, 0x5}, {0x1, 0x3, 0xe, 0x2}, {0x7fff, 0x4, 0x0, 0x6}, {0x3, 0x4, 0x7, 0x4}, {0x4, 0x3, 0xe, 0x8}, {0x2, 0x3, 0x5, 0x2}], 0x10, 0x3}, 0x94) r9 = socket(0x1e, 0x1, 0x0) setsockopt$inet_tcp_buf(r9, 0x10f, 0x35, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095", @ANYRESDEC=r7], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r11, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/16}, {&(0x7f0000002180)=""/4096}, {&(0x7f0000000a40)=""/248}, {&(0x7f0000000b40)=""/190}], 0x0, &(0x7f0000000c40)=""/114}, 0x800}, {{&(0x7f0000000cc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x0, &(0x7f00000032c0)=[{&(0x7f0000000d40)=""/189}, {&(0x7f0000003180)=""/176}, {&(0x7f0000003240)=""/90}]}, 0x2}], 0xf00, 0x0, 0x0) shutdown(r11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r7], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r12}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610444000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='rpcgss_update_slack\x00', r10, 0x0, 0xfffffffffffffff7}, 0x18) 20.611045773s ago: executing program 3 (id=3241): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000580), 0x2, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES8=r1, @ANYBLOB="010329bd7000fcdbdf2524"], 0x20}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r6 = accept4(r2, 0x0, 0x0, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'macvlan1\x00', 0x3}, 0x18) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000940)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x14, 0xc, &(0x7f0000000680)=ANY=[@ANYRES8=r10, @ANYRESOCT=r4, @ANYRES32=r7, @ANYRES8=r3, @ANYRES16=r5, @ANYRESHEX=0x0, @ANYRESHEX=r5, @ANYRESHEX=0x0, @ANYRES8=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r11}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000711239000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r13, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r13, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r13, &(0x7f0000007fc0), 0x800001d, 0x1c) 19.672636428s ago: executing program 3 (id=3247): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000004c0)=r3, 0x4) sendmsg$NFT_MSG_GETGEN(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400889c}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r5, @ANYBLOB="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"], 0x184}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r6}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @broadcast}}, [0x1, 0xffffffff, 0x8000000000000001, 0x100, 0x7, 0x7, 0x2, 0x93, 0x6, 0x9, 0x400, 0x9, 0x4, 0x9, 0x5]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000240)={r8, 0x72, "9a42f70fcb7e183b9fb6eba56499d8296aeb7535b2b858e3b5bf460e7fa791ba80d9b6af86ee104fff5f5244f109624684962b9223311fe1b2d3d0e6a175271b2cdcc2f2ae77a6758405e4730e7e5d8e6709f367bbb0a4f5da4ee3fcce4d9d9353ce00a7c6a2f15f3d71f88a093652f40b3f"}, &(0x7f0000000480)=0x7a) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r11, 0x89a2, &(0x7f0000000200)='bridge0\x00') r12 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r12, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x8010) shutdown(r12, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r12, 0x84, 0x22, &(0x7f00000002c0)={0x0, 0x4, 0x6, 0x800}, &(0x7f0000000340)=0x10) ioctl$sock_SIOCBRDELBR(r10, 0x89a3, &(0x7f0000000200)='bridge0\x00') 19.035366477s ago: executing program 3 (id=3255): socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x4908d13283d17e5f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3001a}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e27}}, @FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x68, 0x10, 0x400, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x7, 0x5}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}}, {0x8, 0x1b, [0x6, 0x0]}}]}]}, 0x68}}, 0x4040) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) 18.484324872s ago: executing program 4 (id=3263): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eeb1948bf42bc7fc2cb274849c9524154fa24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a8684853abf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000400000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f500000010000000000944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a808000000000000000562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844892f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b57"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYBLOB="1e"], 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r0}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000a8ba0000090000000010000001200000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300008bb50505000000000000000b000000007885befa32b46199d66ea14ab49583fc2e0581eeb834a1ffe1d26fae0e96d90588a2ba88886d1e619ca6e86b196e47bd04bc207c7f138d22058000"], 0x50) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) close(r0) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, 0xffffffffffffffff, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r7}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r7, @ANYBLOB='\b\x00'/20, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0200000005000000030000000000007b49010008000000000000"], 0x50) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r3}, 0x8) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000008000000ffff000000000000a886d93f", @ANYRES32=r4, @ANYBLOB='\t\x00'/20, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0400000000000000000000000300000000000000", @ANYRES32=r8, @ANYBLOB, @ANYRES32=r9, @ANYBLOB="38a76c679a9ec11f89"], 0x50) 18.441660154s ago: executing program 1 (id=3264): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$sock(r0, &(0x7f0000000340)={&(0x7f0000000000)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="e57d3b781402581eb57548d47b89215021524a0ec70a119041b73c809eab9e6b88d197cf070b8312e239a1d2de2305ba3dbf7b343c42e405cf0b7d3dab042bee854e8ede9dcec3c285ba5c91b7c018a76db888a487d25b751cf03dfcb67ac3a5", 0x60}, {&(0x7f0000000100)="61fa6f57025059615265f1c9e027ee316caa", 0x12}, {&(0x7f0000000140)="f62bd38f42609288e4b43bb0f10011114b153838e5abbf91d345f265c2d7da45998144e2faf0543b13e0e824296d5edaf3d6eb86a13b0d605a10ed9e10c42b421b570a1ff56c83cda264fecd6329fa7940972227035948a005507ccfcf81568d1106ea603f5772e322db1df911e252bdfea93c280f573bc27bb9719a6bfb0079a7cd250dbe10839c8864db1a37c90a9f8378d229c8dd80bd74a7cd600e36233e0509de08ba57", 0xa6}, {&(0x7f0000000200)="fb5ded9f0b4ff922cca5", 0xa}], 0x4, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0x80000001}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xf7}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0xa8}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000003c0)={'vlan0\x00', 0x2}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000400)={0x4, @local, 0x4e24, 0x4, 'sh\x00', 0x0, 0x4, 0x6e}, 0x2c) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000440)={'mangle\x00', 0x0, [0x3, 0xfffffff0, 0x4, 0x8, 0x5]}, &(0x7f00000004c0)=0x54) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000500)={0xfffffffd, {{0x2, 0x4e20, @broadcast}}}, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=@newchain={0x5c, 0x64, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0xe}, {0x3, 0xffe0}, {0xc}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x80}}, @TCA_RATE={0x6, 0x5, {0x9, 0x60}}, @TCA_RATE={0x6, 0x5, {0x80, 0x64}}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}, @TCA_RATE={0x6, 0x5, {0x6, 0x1c}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r5) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000780)=""/116, &(0x7f0000000800)=0x74) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f00000008c0)={'broute\x00', 0x0, 0x0, 0x0, [0x81, 0x9ec4, 0x5, 0x7, 0x7, 0xe056f5e], 0x2, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) close(r1) sendto(r3, &(0x7f0000000980)="14e4bd26f0b67997572c8ee7fae3273ccae3b971f2c3af61c5a872e7b6d94a071c3744758d7212cd3142b3416e027259358afbd3ddb28a9712fae92e8990c8b35d7c534d2efcd95707299b8d8bedb2debae58f2a4bf70228865e106e6a69589936c19e94426106b30349a8d89bc2174869c6d0fa27e96d4dba63713475f030818c80612d18a1f732a6662cff1b4a74be04", 0x91, 0x8000, &(0x7f0000000a40)=@rc={0x1f, @any, 0xc}, 0x80) r7 = socket$alg(0x26, 0x5, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r7, 0x4004662b, &(0x7f0000000ac0)=0x1) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000b00)={r2}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000b40)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r7, 0x5000943f, &(0x7f0000000d40)={{r9}, r10, 0x0, @unused=[0x7, 0x95d, 0xd35, 0x4], @subvolid=0x10001}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@bloom_filter={0x1e, 0x1ff, 0x5, 0x81, 0x9002, 0x1, 0x1, '\x00', r4, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x1, @value=r6}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001dc0)={0x3, 0x4, 0x4, 0xa, 0x0, r11, 0x9ad7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000001e40)=0x3, 0x4) recvfrom$l2tp6(r9, &(0x7f0000001e80)=""/193, 0xc1, 0x40000021, &(0x7f0000001f80)={0xa, 0x0, 0x0, @dev}, 0x20) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001fc0)={{{@in=@private, @in6=@mcast2}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000020c0)=0xe8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, &(0x7f0000002200)={0x0, 0x41, "cbd7ea4af944b21f8fc4e6ca250c3c03d1c91bf79e54ef0a6e571a25bb967c1b035a26f08e1c6b7afbce1c401244e370b3a8661c24bffb4d1d6a6c8bfff767d79d"}, &(0x7f0000002280)=0x49) 18.309974464s ago: executing program 4 (id=3265): r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) r2 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={r1, 0xffffffffffffffff, r2}, 0xc) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'rose0\x00', {0x2, 0x4e23, @multicast1}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1b0, r4, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x42}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x36}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x13}, @NL80211_ATTR_IE={0x16b, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @measure_req={0x26, 0xd3, {0x2, 0x1, 0x0, "20e612ae079ecbac095b95d23fd5863aae6a06979953bb2eee2917d58e4cce023e4c90d0fee5022265b331b6f0df7e53a36462d405fbad16184750f46dfdeb56fffd8fd40cf3d1a12a7e055f60eccf31b58e20f047c3b3224ec47a846f623720dc5444a11b1a7c4cb471131f3c71c81eadd34433e76d4404a1b2f49f68cb7cb7ab9b56870438742d7de4b68398183fb0c79fbaeb340146de0eb52335e8c93b26eb75049ec7ead627c8521a7057b0012102bf8ece26cc88fd49b76137d054ff0beac1cd36ce022481b3ca845164457605"}}, @mic={0x8c, 0x18, {0x54f, "2dbaaf35eba2", @long="010f43e4ea2c61dc65da6f48b7bccae6"}}, @mesh_id={0x72, 0x6}, @preq={0x82, 0x3b, {{0x0, 0x1}, 0xfb, 0x1, 0x40, @broadcast, 0x3, @void, 0x10000, 0xd, 0x3, [{{0x1}, @device_a, 0x644}, {{0x1}, @device_b, 0x9}, {{0x1}, @device_a, 0x5}]}}, @channel_switch={0x25, 0x3, {0x5, 0x6c, 0x9}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x6, 0x9}}, @link_id={0x65, 0x12, {@random="1e471864458f", @broadcast}}, @channel_switch={0x25, 0x3, {0x1, 0x7c, 0x4}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x68}}]}, @NL80211_ATTR_IE={0x7, 0x2a, [@challenge={0x10, 0x1, 0xe3}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x40040}, 0x48804) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x1c) connect$inet6(r5, &(0x7f0000000400)={0xa, 0x4e22, 0x8, @private2, 0x8}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000480)={0x0, 0xffff}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000500)={r7, 0x7}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x134, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x1f}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8000, 0x3e}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xec, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x8, 0x12, 0x0, 0x1, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, @NL80211_WOWLAN_TRIG_NET_DETECT={0xd8, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x400}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xb4, 0x84, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="c9d2087989df"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x21, 0x1, @random="b5a032943ec70bffeb97447962426995231a0afc253afedd24695ea1e2"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x1000}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0x1000}, @NL80211_BAND_LC={0x8, 0x5, 0xffffffff}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4f2}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xffffffcc}]}]}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xb, 0xd}}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x4c000) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000780)={r7, 0x40, "32a8cc4de682c5ad36f31f7f844346d8e402989026332168ae29440ff3e002778c02263829acc5dc65536e4ce8e415901e8b0d445aa2ed201daf3d8a9f3563cf"}, &(0x7f0000000800)=0x48) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000840)={0x8, 0x8, 0x5, 0x9, r10}, 0x10) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000880)={r6, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) ioctl$FS_IOC_FSGETXATTR(r9, 0x801c581f, &(0x7f00000008c0)={0x6540, 0x100, 0x3, 0x7, 0x6}) sendmsg$inet6(r5, &(0x7f0000001f00)={&(0x7f0000000900)={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000001e40)=[{&(0x7f0000000940)="004aa47821b517d777734ba53548cc7d856ff39e15a3dc2507d8779805c3370eaca8ba715a5e1386b604a29c3abcccc631d2ad46540716c6ff35416a9065bb361ebc7af1ef3751f3a49d3a5ba505e8e7b73536", 0x53}, {&(0x7f00000009c0)="faed55f05c674cad2e797cba0faaec7c226f859f27a187290281a981340bcbc9323715430956c895d8e20cfe208c43c50c227e0c4cc1ff228f1a051e04a130cc214979f8b4d2826e1edd457db45f1a686ff79931c80b83485732a946adbe94af7a91ce27ef6cfce78365a5d317c59a098a45ecd555b7c17f334acbea19c825b30bc50ef99740d4b58d1ccdea1ff1b044322f91b79efa23ca243bee325b32ab9e70097b0b3b24e17f63664f495a63e14e", 0xb0}, {&(0x7f0000000a80)="af439588daa2f36e68bdb2ec1f3fb8e4b8c61f32842451e37e74c0daf2a4d909f46433fdd6cee7f444ad699b4cfa4d0710cf41f2448c4a2130d9e72ee3c35101520e512657ee2706c79d19376cca5642e523b8d047b5d5da81a80a6b07b6ec38ff44c6b7ac3d4f51f2e1a319fb218bd6d93ef2c67fa7d5c0f7ef9c16cd2532e6ca41ae82e2d93346bba5dcc0e7431c45861a2340e8f931804650ad6d7eb2a30f272ea8f201f261231e61b7f8aa8fa31902e0f24f933b383420d3b0e5ccd92756aa8c42db", 0xc4}, {&(0x7f0000000b80)="7b35f2a2d2de632c330cf204f54c1f69ad9ae8087b9c04888e544d93d2ef2599ce076c56cc8676871dda15d63ab60e16c52ed42c31f9c22032d9c06f3473afbafcf925309ca686911f2638b484ad3c74c0386c973e38c3ab6ba8f9afc088dbdf7f8d4696b0040f", 0x67}, {&(0x7f0000000c00)="4a78335e61a69dc320cf9fdd306a636ebf7c6789a403db30665bf0a4e48592da1cdaf85baaef72aa40bfcf4f4442ca8d8a58019cc43a45ce1fbead482cbec4b0974a8aefbbe9f70b643b012c82d890787579af9245d9a86e3d44a32c9325672834d1143e18f7efc0ad941312dae8b97fe1bf2929cfb166b76c495d686b08936b8e7a55207a6f1b33c84e331a1a144241a3671b5214e4b9682c9e791804ee6a600154d8b42bdc669bc23668de00e2397fcdf22685662487b23b18d59ce67e804327cf01f1cd6b17836787be3c7d10b9e5e5991e92e8b75c72ec68dcac8b91472146bc57b7d8558e13bf", 0xe9}, {&(0x7f0000000d00)="eb726674defa33b7f7075ed901924b49fed1a502e8ce644da5a9c99f7ef7dbe234a1c54de36e43", 0x27}, {&(0x7f0000000d40)="d8f8f5cc6e0fe6ac759f93a1fccbf0f44d369448aa62aea835d670a5b59a4f1957305c2ddf0f0729fb91adbddc25eea7b8ba8ff9b0522136b229e3952158d7b02ea574ff88fc7989e85fba68be3bdd67", 0x50}, {&(0x7f0000000dc0)="6c27677e9578757a5b2902651ebf8ddae501de691ccddc38b206deffaa330fc1d7511454a407d8324626926fcb61fdd6e14955a6f0ed813369e7c327d4dca905426b9f4aebb9ac0e8336b1e771970b77831dacfa45", 0x55}, {&(0x7f0000000e40)="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", 0x1000}], 0x9}, 0x20004880) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f80), r3) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000002100)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000020c0)={&(0x7f0000001fc0)={0xfc, r12, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0xde, 0x5b, "de2e19e871ab889defdbb57cf24fc708295bd732d56dfc98c5e9f8e4b8110cf7bed75b870901f9b1031d83c82ef752799620fb633ec420a5d127ddd4927fdc0cb53b63366cdfb66e1ca8372dc5867bbd3a30090aa3ff6a89eeb978e9bb5099aa2de5fc8383875b04048a5c5af679f462140c3a999c5da5c6e399e199ba9ea366a3de98452d82638d6faf535cea92507cfa65fae0d34010bc9d20981e1f69ebe4afc6ab5f1ca5626062f1ed400ca62ceb4259d3deeea7be3c6dcbd278cab26c7addbc8692feb71f896791335d016fa935dd5f90c0e17c453e77c8"}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24000}, 0x8040) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000002140)={0x0, @in6={{0xa, 0x4e24, 0x0, @local, 0x4}}}, &(0x7f0000002200)=0x84) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000002240)={'team0\x00', 0x0}) r14 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r14, &(0x7f00000023c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002380)={&(0x7f00000022c0)=@newqdisc={0xa8, 0x24, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0xf, 0xfff2}, {0x9, 0xffe0}, {0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa3800}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x5, 0x1, 0x9, 0x0, 0x8, 0xf, 0x6}}, {0x10, 0x2, [0x5387, 0x4, 0x3, 0xf, 0x8, 0xbb]}}, {{0x1c, 0x1, {0x0, 0xf, 0x8, 0x80000000, 0x1, 0x0, 0x7fc0000, 0x2}}, {0x8, 0x2, [0x1ff, 0x5]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x40) r15 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r15, &(0x7f0000002400)="8539017db02533", 0x7, 0x4040, &(0x7f0000002440)={0x11, 0xf8, r6, 0x1, 0x1}, 0x14) 18.308305159s ago: executing program 2 (id=3266): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@ipv6_newaddrlabel={0x38, 0x48, 0xb, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x78, 0x0, 0x0, 0x5}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x1c, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, 0x45, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x8000, 0x9}}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000e4000000000000000000c7ff528f3b658ee1000000"], 0x50) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000140)={0x8000000000000001, 0x8, '\x00', 0x1, &(0x7f0000000100)=[0x0]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x4) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x7, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000540)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000780)=0x18) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r8) sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0x190, r10, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffc0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000084}, 0x20004000) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000218}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x845}, 0x20004014) read(r7, &(0x7f0000000000)=""/7, 0x7) socket$l2tp(0x2, 0x2, 0x73) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r11) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x28, r12, 0x1, 0x70bd29, 0x21dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, &(0x7f0000000200)) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a0000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.304518053s ago: executing program 1 (id=3267): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80000) write(r2, &(0x7f0000000340)="13001f040d5700f9", 0x8) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000040)=0x1d76, &(0x7f00000001c0)=0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$netrom(r0, &(0x7f0000000280)={{0x3, @bcast}, [@bcast, @default, @remote, @rose, @bcast, @rose, @default, @null]}, &(0x7f0000000300)=0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000400), 0x4) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1c, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0xffffffffffffff41, 0x0, &(0x7f0000000380)="f6161ff7348ad62ceef1044386dd78bb3fb7dbfc8180ca8395ccfda2ff01b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x208, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d8, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x4000001}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0xffff, 0x0, 0xf, 0x4, 0x7, 0x10000, 0x4, 0xce, 0x7ff, 0x7, 0x2d, 0x1, 0x1, 0x5, 0x6}}, @TCA_GRED_DPS={0x10, 0x3, {0x1, 0x9, 0x0, 0x6}}, @TCA_GRED_DPS={0x10, 0x3, {0x7, 0xd, 0x0, 0x8}}, @TCA_GRED_PARMS={0x38, 0x1, {0x3, 0xffffffff, 0x8, 0x0, 0x8, 0x98, 0x800, 0xe5, 0x5, 0x3e, 0x1b, 0x1e, 0xc, 0x1, 0x2, 0xb75}}, @TCA_GRED_PARMS={0x38, 0x1, {0x3, 0x9, 0x2, 0x3, 0x0, 0x2, 0x6, 0x9, 0x5, 0x1, 0xd, 0x19, 0x7, 0x2, 0x0, 0x4}}]}}]}, 0x208}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r11, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x43}, 0x94) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000200)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]}) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 18.123868136s ago: executing program 4 (id=3268): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_emit_ethernet(0xbe, &(0x7f0000000400)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x6c, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xc, "0800b28c590300000052"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "c5b9eeadbfa35b"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 18.119444739s ago: executing program 1 (id=3269): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYRESOCT=r2], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e2400000400060008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x283a0012}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8848}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x1) 17.962819208s ago: executing program 3 (id=3270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000000209040400000000000000000500000640000000040000054039cea627c3a60000000e0000000000000015004631d98dec"], 0x30}, 0x1, 0x0, 0x0, 0x80000}, 0x40000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0x1000007, 0x5, 0xf, 0x2, 0x9, 0x0, 0xff, 0x4, 0xf, 0x2, 0xf42, 0x8, 0x7, 0x0, 0x0, [0x8002, 0x10001]}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000000)='O', 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0xfffffffffffffee2) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="3800000001020101000000000000000002000006240001800c0002800500010001000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20008040) 17.902216701s ago: executing program 1 (id=3271): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="750a0000000000006115c80000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e20, 0x9, 0x4e23, 0x7, 0x2, 0x80, 0x20, 0x87}, {0x2, 0x6, 0x1, 0x4, 0x4, 0x0, 0x1}, {0x2f37, 0x0, 0xc73, 0xffffffffffffffd8}, 0x1, 0x6e6bb9, 0x1, 0x1, 0x1, 0x1}, {{@in6=@private2, 0x4d3, 0xff}, 0xa, @in6=@mcast1, 0x0, 0x3, 0x0, 0x0, 0x3, 0x8, 0x8}}, 0xe8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r3, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="f1e626bd7000fbdbdf251300000008000300", @ANYRES32=r5, @ANYBLOB="04001300060012000400000006001000fd0000000a000600080211000000000044008100050002"], 0x80}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="7961fd08ffff240000007e00000008000300", @ANYRES32=r5, @ANYBLOB="0c0099006c910000140000006ba2e73f7b634e"], 0x28}}, 0x4000054) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xfffffffffffffe93, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0xf, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x6, 0x8, 0x22}, 0x50) socket(0x1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1d, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000b4001000d500000000000000"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x50}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r7 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000b80)=@in6={0xa, 0x4e23, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000100)="e6", 0x1}, {&(0x7f0000000a40)="2754f41875ff36e775a8f8365ef954a12a8d4cb2fe3b5f25927fd50f48df63ef0705c300d8273c1ffc4386c348ede69157744196dc4dff3d7372206e87a2fe49244a95ea1b3ca21d9d5b4ef8ad8d87c85991cc409ac521965fc5df1af1ec2e9bea5de57f78b1e4e61f02aa68470b177e94a2e687d84a9c3e9bd678005045629fc1066a23f43d67d25071e2efe7d1df913e98fa2eeb041e04cacdf9eddb2b0703ca2cc19788ae66c5c1c82bbd4b14d8272d40d9bf96acb931473b1b163db71160641604183112764451000b50e78084697c79cca82ffcb88f6fc044ab8f", 0xdd}, {&(0x7f0000000840)="6ceb6ba32293eff936017f1d38c355cdd25919ca55d1cf7693c7c6ce12931c2e95cfe011caaf1db193f98061439405f70b684970968d471d1ab90317aa730722bbe889efe6cf491f70b8ae9ea1b9103ecd4931cf6b872f5449d4d200a40ad0e18e0b11de59f935ae1047f961b90a0e", 0x6f}], 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa001cfe002000000000000000847b00000800000020010000000000000000002000000000"], 0x38, 0x4855}, 0x24000052) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000fc0)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x0, 0x1d0, 0x1d0, 0x2c8, 0x0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000340)="a9", &(0x7f0000000200)=""/31}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000feffff7f00000000feffffff611051000000000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 17.806126309s ago: executing program 4 (id=3272): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000780)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6455d759004800fffc01000000f8ff000000000000000000200100000000000000000000000000028903000000000000c910ff0100000000000000000000000000010708000000020008000000000000010000000000000021020401ab105200fe8000000000000000000000000000aab992e4e7f35453f0d179f3119767f94b"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000340)="8fc8bf70342c6d1600bae5de9614410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99e4be38c9c2661a892682d81d9b9022ea90797fb45a74a588fdabe42", 0x47}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000580)="c7bace4ebe91b42a7bf8f86453e0ec420e051dc8", 0x14}, {0x0}, {&(0x7f0000000840)="3ce6c498bfc50136f2c47c20cf1a66c10fd74dd25b683183546aeadab27363e9811872eca5570c55b4ec97197dd48b3d35142a2c28aae0f19fef2b33cf00e949f96f5c28da936bdcd3b340fca079ce748c6a885a3215ac5f2986d52a4b43424aad79c75dceb42e20b00c69d6b7b2f9b883e52e876d68c646df1b6d2b0f4f193e07d9728d8f43f603e3a78208c00586c54ed3a7c425d97e5fac11191a502e9b71d96db04ec23392ec7c098407695230f9ade8dac3579f3bdb7bb0a47765f560f6e06bcceb648c46bf2ea0ffc6f97f4781f45d7be5bb90a5d4b125a418755713413652981685d34b368ebc45276a8dc7de2875093f", 0xf4}, {&(0x7f0000000500)="1ee1cc0000367b27c56f6e0000000000000000dbb09a9c2da5000000", 0x1c}, {&(0x7f0000000140)="3c077982452f1e1497d128b4a4dcff3bc1fc253498237a078ed7328b2e629de0e7f73cafe0f99f9228b71a18a0e7f778e6f12663bff64f428a5687d2fb4b40744f7d77ca26cf1015484ec237c4f8ef7316bdfc1e348cf8fab1eeffa008941bad6860044a95b5c85738c5362234cd3dbac729479c04f46240a61f272cbecfd482e95d0b7ea4ca3bef58f6708c29325c27dfedff00b0d0eba695efdc505190e991df78b19b1115acdcf8e8a42af7c3bfc5201c", 0xb2}], 0x5}}], 0x3fffffffffffde2, 0x488c4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040), 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000240)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000000090102000000000000000005000002090001000000030c0004800800144000000000100002000c0002800500010011000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0xc000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000440)=ANY=[], 0xdc}}, 0x8004) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x44001) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x20, 0x6044}, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e22, @private=0xa0100fc}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000000)={r8, 0x3, 0x2}, 0x8) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x20, 0x7, 0x80, 0x2, 0x78f7, 0xc0, 0x5}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0xffffffffffffff30, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000600000000000000006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) 17.730053788s ago: executing program 1 (id=3273): r0 = socket(0x2, 0x3, 0xff) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x4018, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x20, 0x10, 0x8, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40100}}, 0x20}}, 0x0) 17.60639473s ago: executing program 3 (id=3274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000007c0)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf254f00000008000300", @ANYRES32=r2, @ANYBLOB='H\x00z'], 0xbc}, 0x1, 0x0, 0x0, 0x40010}, 0x4040880) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (rerun: 64) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r6) socket$kcm(0x10, 0x2, 0x4) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x10, 0x2b, 0x1, @dev={0xfe, 0x80, '\x00', 0x25}, @local, {[@dstopts={0x2c, 0x0, '\x00', [@padn, @pad1]}]}}}}}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x280) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="020300021000000000000000000000000300060000000000020000000000000000000000000000000200010000000000000009007fffffff03000500330000000200000064010102000000000000000002000800080001003400000000000000040004"], 0x80}, 0x1, 0x7}, 0x4044000) (async) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "b341af", 0x18, 0x0, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@dstopts={0x6c, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x800}, @calipso={0x7, 0x8, {0x1, 0x0, 0xe, 0xc2}}]}]}}}}}, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000004001b0000000c00228059fe0080040000800600210030"], 0x28}}, 0x0) 17.602081878s ago: executing program 1 (id=3275): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4f, 0x39}}}}, [""]}, 0x20}}, 0x7) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000240)={@initdev, 0x0}, &(0x7f0000000280)=0x14) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xe5, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000005c0)={0x0, @multicast1, @multicast2}, &(0x7f0000000600)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x7, 0x1, 0x5, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x7, 0x1, 0xe1}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x120, r3, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x8c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x7, 0x33, 0x40, 0x800, 0x1, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0xe}, 0x50) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000940)) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x42, '\x00', r5, r0, 0x2, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xffff7c66}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a40)='GPL\x00', 0x3, 0xe5, &(0x7f0000000a80)=""/229, 0x40f00, 0x9, '\x00', r7, 0x1a, r0, 0x8, &(0x7f0000000b80)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000bc0)={0x5, 0x0, 0x5, 0xfffffffe}, 0x10, 0x58c, 0xffffffffffffffff, 0x1, &(0x7f0000000c80)=[r9, r8, r8, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x5, 0x1, 0xf, 0x6}], 0x10, 0x349}, 0x94) (async) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x28, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x8001) (async) recvfrom$llc(r0, &(0x7f0000000ec0)=""/8, 0x8, 0x40, &(0x7f0000000f00)={0x1a, 0x304, 0x9, 0x1, 0x9, 0xff, @broadcast}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r10, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, r11, 0x501, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '\xb0@]'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4010) (async) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000001080)=0x80000, 0x4) (async) getsockopt(r0, 0x10000, 0x5, &(0x7f00000010c0)=""/4096, &(0x7f00000020c0)=0x1000) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000002100)=[@in6={0xa, 0x4e21, 0x3, @local, 0x7}, @in6={0xa, 0x4e22, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e22, 0xfffff070, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}], 0x64) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002180)={{{@in=@multicast2, @in6=@initdev}}, {{@in=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000002280)=0xe8) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r9, 0x8008f511, &(0x7f00000022c0)) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002340), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000002400)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x20, r12, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x20}}, 0x800) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r13, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x1c, r1, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x0) 17.474328618s ago: executing program 2 (id=3276): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) 17.386019577s ago: executing program 2 (id=3277): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffd, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000180)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r1, &(0x7f0000000180), 0x0}, 0x20) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000009c0)={0x0, 0x2, 0xf000}, &(0x7f0000000a00)=0x8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4048010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x18) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) close(r0) 17.252969495s ago: executing program 2 (id=3279): unshare(0x22020600) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x12) r0 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000140)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x10000003, 0x1000000004, 0x100000001]}, &(0x7f0000000080)=0x25) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280), &(0x7f0000000340)=0x4) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000001, 0x110, r1, 0x2000) pipe(&(0x7f0000000740)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0100000000001300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000200000000000056b7b24ed116f51eff240000000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$l2tp(0x0, r4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x40000c0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(0xffffffffffffffff, 0x6dfd) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000000000008000", @ANYBLOB="056f1381cdd5", @ANYRESOCT=r5], 0x48}, 0x1, 0x0, 0x0, 0x20008810}, 0x20000000) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r3}, 0xc) 17.082274099s ago: executing program 2 (id=3280): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000540)={r6, r5, 0x0, r5}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) ppoll(0x0, 0xffffffffffffff35, 0x0, &(0x7f0000000040)={[0xfe9]}, 0x8) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10) r9 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r9, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 16.885629006s ago: executing program 4 (id=3281): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000060000000000000000000000711033000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x20}}], 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x70bd2a, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_TOS={0x5, 0x49, 0x4}]}}]}, 0x44}}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$inet6(r0, &(0x7f0000003a00), 0x0, 0xc0c0) sendmsg(r1, &(0x7f0000000140)={&(0x7f00000001c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000240)="922822d16a1407be7a2830370b763f70157a3bdbf4ac632b1fe6281d338bb7d72d734eda32eb5ffb56601ae42e0c9b6dda80de3d9486ac81aa5375c4b87304efe00c9a76eaaae8c7fc44981de63bf41dcac65d2bd0c85a27bbaeeb218cdcb3a874b50f81a27ae3d6c1f76e751c084f24f3a270ee90eb623d4ef7d4b06386712e5cafb63c49d1cabdd2f4194befc9f11836acf93d5111c22d71cfeca483986f6f56a09e8906fe157d06d91774672a65108393ac291fa2d68dcef91f356cabc1d2895827421c106ae0e6afa4b7df25a83a56676ce94776342436426a87a82a15d1e45e1177d8dc30a80950ca2203be182d7b086397", 0xf4}, {&(0x7f0000000400)="7d839a5f47b3e3555f3716fa7ca3f621a31921a2bc3f6766373a35e990f6a1c400e4ed3e1db45b4b761b1e9bf9bbc90ae2bb8f7dbfd3d5cc9c6dc5fcbf28f31d394027a1813fc67b5ee303ae7b3597264a943cc6e1bff0c3db83053b36419170fefe76c6ed86cb56c9b354a386fc00d3a7efe417b387070d84a13c055b30461bb5de43c203687035aa071e9e763579f4809a202184e6fc9528813965f5d4f45940c6d8fb5ab573ba95108356ef6515ee31036b74c059e9a6ce8c0f54b66a4007b082e34a6f408bd8", 0xc8}], 0x2, &(0x7f0000001b00)=ANY=[@ANYBLOB="f000000000000000060000000a000000a46091902631349955487285187e4592d1dce05e07cc80216628e93a2a2a8e8a61678087ff573390e7f09a6ea524c61806f7c70bd33b76fb81ed36470f0b1ed828423f52e3be029f1d252d9e6ce50a5ce221747cf2c3f539b00dec0f2e70d870f75d4c399961bf285b91d54f3d8c0bd8995ca8cfaba71e09e5683f76afff0e97f84bbbac64b8ffe933258254f77d3ab4e45503a5d7a64b494feb272faed163c53c6c43ef2f98335f2bf28d17024b3e3ede3bf7f01638478f427115f928f11004dd102ae55c32fde2fb9ed310e4d9f7ebec75341baf509fbcbc55845ef6e2950050000000000000002900000007000000aadfee8c019c0d911a839b90f6314e17c8a8f159667890b0cc11e098cfee6125aaa28ceeb6c2470d011048cc7003fe57273c8bd0074836aa0788d99b0000000010100000000000001100000004000000fefab8081e101b55490eeecab1e30c4f2c288a8b7334f2de4c894fe6567d7bb7e0aab19a669500ce6c8004d4d1564b0bb2973888e1653a39295de74f5696d69bed41dcbb5db0713eefd164e29f71404a240514640b674842e78769039ebe63e363f62f62b52907af208d4c47241037e4a1ec1f8aed36ce470f4934d9664d632caf3c588adfe8ea613d42e7820bd7d6200ada4c01f4af3f2b64c98299b67a67b88b62c113d96092ca232c8fda99f2a4c9bac66f7b7051f1e10fbbbbcc4a4c7cadec7344d9fff4ab278b672b8ff7a11409aa91325788f7c13d4c03f60c6bf4c2d6ae3ab7eaaf56ce48e2e1c0cac310d4b358708f3b763da0655c3e1dff38e5867a02cbbb8bdec9016dcc7452426c96389768cc86c75cd47b5c5cfa90d114212397289b9833c97633da39f7408d3992535a5c413c42c198c99923b5f289ec509bdedc8e789790ade65ba052462179812460fc55c263d0b5e40225df6bd387c43858511ccc203747de44c3d4bdb012aadd3b0ba5368246742ba7cd46baebb30a1a94c7c2619b7db02b07f81c364307d625d3240c88912340a813bccf1736bf97e2aeba67831cac9bce4811cd08f849b689ffb0d71e6d7892607bfd49afe3d2172c58ae0fca1552169d3a31fae2ea7a1caf42e958b7330998270b537ef5439143e053e8e589226dc03f517fbe19f0345c05c6b4bf659c46e253b04480b4d0ae9c08bfa0cda4aaebc7dd5d21b1c37cf51a7b300b8727293a0581c1aa775340cf6e334628834f22585205ca7325a2812b7a99b348f4ad79cb99649500e399cd7bf0559b685d51840e319cc8f04af27e59f498d289e3175132e88b2aaa784a1d002743235bb45de074eb0a2e1013aa1cb694136581dca7405529252acd13bb142d8e61bde6bd409d1746429828d11b8b42fe15cd2bff4b4201b7ea5564df6b8dd9dd71121501c8e642957e97e521b2b7a8ffe207b4cecb8e83f5ddb5cf7bd1a7b6ad99edf6e039d496804181094a90d4f40afccd44cd9ab84b205eac8465d34837de495e7f42e3961cf4f9654d3a01001a6863eb2e34e67dd2adeca41b0158d06b9c14912975d33efdd8ac77dcd35b4ec25266c2860f4814fcdca9ed18dc7d0ec872c868a34f60271ee52d0d29d6064be1e478ddd75adad81a1a8f52cd69320d76ed5148eeffde5dcf99e24677c1ae5ddd50a4ae0bf798c8c2af96f9070e4a2a63df6f9a9e446ef51a3456589efcbbb6b339beabefe17cb9b4f0476728a1e5be3eda2c3c011a1071b689045e220ea1f5a781e9bdfe22ff0136e1e0664e1a5a08dcddddf15ba397dbefe8128aa7ab01e40efe3e6e67d765989b2697a47750f43a7be058342380ee02d56139a18a8d2be45194e8a5932c627f48c2280fc7c33644de0f9ec390a5691868772856c8baa9db1f5cb16e6b08d307d7c408b6346570c098fd161e52b1509319a0f5fe7223faa186f49bc56847e34bd05e54aac18bb72e65efab15d251249b2b9917dae8fbc7f82a78b5b2c05b836abf45f1808c1e19988ec23860c3617d4899596b0e11e75a666a7bb30507539c253f234a26c72b915cf9e610447bb0a2848fa00cb8aaca8b4045df107a22c66ea9fb9cf600d0f23c8b25e77fe62f3f03d40cbababb8dca221139d78e7430ae93db0a1a1e0542bcdb1ce6fd1d511b50a70e32d2aad1b14099b4fd74b066d572f5cac47b12bd03f1c8010c51219923c5b7da84a654a8b8216dabce8f46da10cbc0432cfa8c07b445a15972b251ce62d3ca7ac68b5b50e0e34f7842f3dccac3dbe76bd053cc8d35334782b8906fc76f33ee159c555cedd8e61c18c07a05caec1d3fd488f756c57943cbb04e20e191a5a11b7acb12df5df4525fac3861bdf0e36d0970bc89459b40bc43fed673d635f4a4f19f5eb9aa3fbb8d1f3400f2ad6695aade4ff586fd871069b7c5037f0cdd7bda929afdec9a26fa237954af60a89754c4c59e60388e259528d954b30d47b4ca83ed8c8e29a91fd6d63e1e6f9dc557410a171eef9c0c8725bfd899ff8a207c740e0b6375ec6195c6f019b86d8bab2949b4186abdc9cbb1e0fb6bfc946c0f4eab446810fe1ad4b1b9bea87c3bcafd117ba07f6ccacb0e7c499ee0ab86fbcb47f4203c77cc3159af15563b49db5b7050f162d4005ba7f1a96b3beb2b5620e5386d5ab7d754e3dd743836185581f7ffd69fd4cc8a3c34fad33dcd2198f919ae284bdb201535c298e053a5271c4437c674be0820643cf321a7212b963dbbd6244d964d8572e7e4df0d55e997625b88e1423dc7abc8636670dfa42c4eb73217100018e63df8efeb8470aa0a0b3eb99e4475245f2662f852975cb2b251df445b757be8785ff038771376205c2103cc68bf080f4dedacd280aa353ef06ecce1a7fe88b8be52b1775aab1e6f7f264215b39028d010344b86bf1329c1584d139f7dcf26d9eb38a80bca81767c6c3cb0dca4e7311419ed64acf41ba5a4f649ce63bab12c507f748b2784879b476caf1983146ffbf588fc4791eb369c6bf0732146f8ad8ba0997007d20578a2e904f0e89f0686baab63247b5367a0e066013824a7a390239b57ae503090ddb2f5aa78ef273ff3bff40c1f4d0fc2ca4d26f5fe9acf960629488882e7ef9744028a70a3d93198a0e7297eb855c5b37215419d6c50f3ca5051752cdd481ebf5348c6c1450f3238e2fc1e57bac6ef46b1fdb376bb5a5f9b30ea1640d9f275d7b08cae115e8940014b59e8f2e81c797d135332645bf877a39db3ac00ec4b667dbf65c25d256fbe8e0e9432970d483775e1bb87264429c222900c0362ab313721e60d4c3bacfd74471423eb9f8a98e099ef169f55c0efbd2358b2b402a67c8d5614f27be214b96b2811f236689d6428330cac5a1f06aea3a391e30a00eb7134f380fc8d85a9e0adf121f63fb9042dd09eb7599e54018455ae5531fe147422962818599f0e7d73efa4b40cc31ac4791c3e0d2750d555feeaf387e8df3083eb7e6971dfa3613ed9f53fe6f78b1d88de8ee141af3e769bf9f916d00e41e1560d38a327aa4b59f3ed47f3a1ef2642b6197c18939015e7593e28e1602dd83e6df088882604a2da9200922510eef237a516e6977fd1b7444f1a60654fe1a66e64cf01598b683dcac6b68059e5db7b57c950b2d65c649111155886cf8f267a708ffd34bbe58cc69364fdc80697b46b29c5a384cf7d98bf9d1af159eac3fd9c4a8fc210f40f1073c0598d587d2b67ffa2af78fc378b53e3eaaef6616ab1c9b1891914bed3517b2b80611b6134cb62f43e4c7131471c4254da99485e7c17fbe277610ff7521433c5da05dd283de0694bec782017b2cdbd50e8dde02ea0d1048b38a6ebfda3da549400eed8135aef7d70dc7815d7b405dcd0168384d1a3ca8691fc255be306842ab42e5f3bff7fd17b72665da974d9848eab847d9a90d8163d46d592e7aa5acb883b8ed7817e1ba0543af78c7db252d54dfaa1756196984e5877751e94ae2a9a09415a1e81b2014c795f5fc42a83736ecd06a91aba80d1aa5b07599fe810051e2225d620479068ccad7e34367e44e5b9990281eec499f9f1adf5451b3b7b345b2baa1e275bf3a543acef8567094024474274ceb9d130f631d768ecee15f6bc9d4eb108596d8570fee360bfd2508aa08fd9a270aa233df140cec49f7083921854687d01d80d9072a0029a6c1042a8e768b48985c9c30180ef956cf26806762ca4499f65a248094093076d289ccf1e0a5034739aae927ca43efa7e5b4dac0858b092627af73075f39a0a409529f5fa9a60227fb5b2b4ea55b1cf90e689f3d28d32239d29f86c3f45e4d9570a4eaf26b7811c5e918dc27506048085bee30ae6233279af387a6ba17d90da750053ac76efdad880dd54179882108e5ab56cfcceab1eba26f99761ad21c0d19dbe721c01a396340a7f154828f196a4eceb25bf066aea5c74958180e9a9e8e4e59a5c02d2fa051370fa3887c04386e91a54546863cc8c840c3b843a2a16d1ac2f323da0eb52202f5fc661df3c14967854f0bd070c702d556d076d732ad5a6acf88a43f55310b0140697f232f7546f3d4d2a2e2136b8f7dc75e21222402de8ef371b6b653e028087334e5b03b3ba094591863d5ba270867bb5d5b610c747063239cacd7ff3259a056dfbc255ad8dee7c82a1a421480ece25fd8493dbf2cabffcbc0807a0a6a04a820c7a0a260d104a6f11fef54c52000b151c4d69a01c6483745cfdd3babeeb00028f32bd4c0e6c0421d69a5c36b3fa1a8e07df19549769fe82f4b75fe1d55239ca3ea4942839c35f07a630a51d76cc2cd1c2e1019464c946d09b7868d712dcb7e5fde9f7181838015f59032f0a2c6c04476d8e7bea880dbce648df7ed8dcd199932e26f5050bd571d805ce1a4da60a7546067f0ef26c1c839cf114c5bf29af3c5b332ef3e5d73a005ec2b5336f457dfa6caa2eb34318710450dc26306122dc5031908dbbe073b19e6a0463d7c7fc324a28eb60f9f3020816cbd2a94e6097488e1706460953c74e9088e893e44d08b1c257aac747945be25f2bee250f7ecd4ae9eae8aec31366a018b797adcd1456a3357fb0cbdfe5455a5e01d0aaa9dc126f7e627c8763333fa87644b7009056d1141d9944ba9403a949398e697dab326e0876d6f33611d46d1d9cb711f4dfcbd4f7e88a6250a3769a6849cb8e7e824ffa4455661d78549895a913775facb0a5fa07458424c2a6146d989c169cb4dc4c83fa8bc08dc587a227cba60e9678eb1bf13c3e80c51bc737e3deacad00d24a766cd7217dc558dbb5af540068364d1697ba2fc2ad556bb5b3285d231bb2171e963bd20206a72e68de59e91d348219c61bb3420baff7f16df8f40a2af25bc16ae3382988b72f59d324c9a9b40e55169ea170485d94aff97801a7378cdeb217b41a05008d373abde987c243d197465a8a4e804dd11d3843b276cd70e5a93ed4097085dc1eeb5466dca72d4c8d97cb9d299d01ac74eb5e3fdc11c02d25f9e65c22d964a0391a1ed79586cd6845f597701e51d2b98b8250fd5d1ee4b88caeb5074132cce00d05d8ccf0c0da1ddca5c96238413afb47e599dbc4620499cbea12bce364a014954c643d163e7d6c1b91cefc95b29fbcc4ca6421edc16586d24d3e3c9561e81d0e0161c6b02b0029af482669aa5c5224bc1f66bd71f4edb1b35a6c66584304bf76303cd1563ec1e5446cfa31effa68d466302d9c3473b4cbc223039d676c252988122f06e3b500b61fd87dcac357a9415a5f12fb603f404c45a6221bd5c850ada390c3a2df4f3ba8964e94e686fa98ff6d3766ee0101f9c794aebd76bbac2ad17e62aaf42326276cdbea0d159c05a3cf050a4b4d5adeaf4317604119fdc1e58fc37b316893a46051b60d8ccaa92b8a27f8e4e1656cf0682d93341aa7efec9bbca473311311c4bffc6f245c831c97d5025fbdd1b7b2351b391fac4f733e4bb0b85dc46cfd0e040b7bde82eba212b578bdaed906f941bf87b6fa840f792f04ba1592b70076f55bde023de4411e086a59d0a87151053c4a9449f53ec6a8b8a5a1a88ada97bb55069d012813061d0b534a49449bf2e2e5c4d75dfce120d67e72f5f394f3f6b43f5b3e5ad9599beeb858a964a94e2ef63dc794ad6420aac7412f2fcbbf20b8edb0109341b47cf438b38ff8125af9fc795508ad5fc34966b27dc2cd9b061466cecc5aeb17fb17c884926eef3681765317ec1731525e36ac78f9d42e2b8734641e72238863526d76e0bb6e0943247374a9693bdbec3069e0000000000000000101000006000000ed2e343ac5da8ea5f5703a6dd9dcb7e48ade34a5a6adf965f4a174f4edb423ad5edf81a9d1eb4a79103ff725a4bc04480fcf323074c4de0d7c7755b2d7ccb19b7f0e27cdac92f52ecb01be4697e3b55e95da136bb1f3ec8250d54b67d6803d41c6176871efbfa1ffe9f3a0e98d24b65b1e59a068eb3bcfea81ab67df96a8d908206330f3eecadeb6881d2fb9bef915e476a5e211a718953150a075b7650b14de223df144f58a8955239353ecea26dd2ae29dc2479b20e34d7bb74e6e4296cb53b717edf1cbbd7a55ade6000000000000c00000000000000000000000030000003afeb42ff0b8987848b07d37cdedce502adb016fd0a316898b9930c55db26fce0a74884ba90c1badd3e71553f8a5e3713bc450ac3b7daf994fc620a3cce6f5c9e882514a522041b9cf84d1da0ab24b1090b4c3956b97717afe39027d8c0e2399091305483af6cebba0d52498ec6f21e83e008e8839069e4d96b9311e8ce83cbb02c63ae41a67be62bac9f7c62254d7838f0e76081a25d7ab24a738ef77e151871e3e32df4a9aacfeadf922c4600000008000000000000000170100000800000016b99ca11ac7a7192b77fd440dbb4332c271bf6f0b3f54a71ff6e9379e9ca9711e28b6115128b787e683bc3242fac53cdec781e132307f9fea5aa23defa0c601920a3578b0178f74e9d3ec94f8c8a2da2b26c2e8f1f680dbff06d6ec6d87991c41c676a7bafe619a32000000000000005800000000000000010000000900000087e0d5f1f3234bfead3bdba11e75a6d0606b5ba505a7bba176ce6e0819b5aeb694ecfdb7fef0e0b006e3b84156c22f239bbdf23c04a9463c2cbc6a99c3f9af635774a1150000000081a557fa7e3088746aaa8f19c45f485597cff98a237268b7421f42c050bab2423194925a4943cae45a59f5ac40e26b382129ef74c5be6d2b0f0e798acaa5261d04e553bf5912e26c8773e710489e66f8d769912876a524bb1c359aaec903"], 0x13c8}, 0x1) 16.664235253s ago: executing program 2 (id=3282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x5, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x5, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) socket$unix(0x1, 0x5, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r9, &(0x7f0000000240)=[{&(0x7f00000003c0)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaeb", 0x22}, {&(0x7f0000000100)="b700"/12, 0xc}, {&(0x7f0000000400)="17a8a6c41e58e8b6cdb8040db329c064116e4c4cbb04627dfddbd514be6688ff", 0x20}], 0x3) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16.66305926s ago: executing program 4 (id=3283): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x549c}}, @volatile={0x9}, @func={0x4, 0x0, 0x0, 0xc, 0x5}, @float={0x2, 0x0, 0x0, 0x10, 0x10}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x5, 0x1}]}, {0x0, [0x30]}}, &(0x7f0000000540)=""/251, 0x67, 0xfb, 0x0, 0x8000, 0x10000}, 0x28) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000ac0)=0x10) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18, 0xe000}, 0x5}], 0x1, 0x0) connect$rxrpc(r1, &(0x7f0000000280)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3, @private=0xa010101}}, 0x24) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="8a25ffeb2dc61c000000200057020025bd7000fddbdf250a10140403000001120000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1b, &(0x7f0000000780)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xcd2, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xd}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x1}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd4}}], 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1b, &(0x7f0000000780)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xcd2, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xd}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x1}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd4}}], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x23, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10000}, {}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x2, 0x0, 0x0, 0x0, 0xa, 0x8, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x27}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query, @call={0x85, 0x0, 0x0, 0x88}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x4, 0xb, 0x5, 0x10a, r3, 0x1, '\x00', 0x0, r2, 0x0, 0x2, 0x0, 0xc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) unshare(0x26020480) (async) unshare(0x26020480) socket$kcm(0x2d, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r7}, 0x18) socket$kcm(0x10, 0x2, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r9 = socket(0x5, 0x80805, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x2, [@typedef={0x1, 0x0, 0x0, 0x8, 0x200}, @enum64={0x7, 0x7, 0x0, 0x13, 0x0, 0xa, [{0x4, 0x2, 0x4f}, {0xb, 0xe, 0xfffffffd}, {0xf, 0x5, 0x1}, {0xf, 0x4, 0x6}, {0x10, 0x5b10, 0xffff3aa0}, {0xe, 0x166d, 0x9}, {0x6, 0x10000, 0x3}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x92}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x2, [@typedef={0x1, 0x0, 0x0, 0x8, 0x200}, @enum64={0x7, 0x7, 0x0, 0x13, 0x0, 0xa, [{0x4, 0x2, 0x4f}, {0xb, 0xe, 0xfffffffd}, {0xf, 0x5, 0x1}, {0xf, 0x4, 0x6}, {0x10, 0x5b10, 0xffff3aa0}, {0xe, 0x166d, 0x9}, {0x6, 0x10000, 0x3}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x92}, 0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000100)={r10}, &(0x7f00000002c0)=0x8) 16.53832041s ago: executing program 32 (id=3283): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x549c}}, @volatile={0x9}, @func={0x4, 0x0, 0x0, 0xc, 0x5}, @float={0x2, 0x0, 0x0, 0x10, 0x10}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x5, 0x1}]}, {0x0, [0x30]}}, &(0x7f0000000540)=""/251, 0x67, 0xfb, 0x0, 0x8000, 0x10000}, 0x28) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000ac0)=0x10) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18, 0xe000}, 0x5}], 0x1, 0x0) connect$rxrpc(r1, &(0x7f0000000280)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3, @private=0xa010101}}, 0x24) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="8a25ffeb2dc61c000000200057020025bd7000fddbdf250a10140403000001120000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1b, &(0x7f0000000780)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xcd2, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xd}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x1}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd4}}], 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1b, &(0x7f0000000780)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xcd2, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xd}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x1}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd4}}], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x23, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10000}, {}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0x2, 0x0, 0x0, 0x0, 0xa, 0x8, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x27}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query, @call={0x85, 0x0, 0x0, 0x88}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x4, 0xb, 0x5, 0x10a, r3, 0x1, '\x00', 0x0, r2, 0x0, 0x2, 0x0, 0xc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) unshare(0x26020480) (async) unshare(0x26020480) socket$kcm(0x2d, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r7}, 0x18) socket$kcm(0x10, 0x2, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r9 = socket(0x5, 0x80805, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x2, [@typedef={0x1, 0x0, 0x0, 0x8, 0x200}, @enum64={0x7, 0x7, 0x0, 0x13, 0x0, 0xa, [{0x4, 0x2, 0x4f}, {0xb, 0xe, 0xfffffffd}, {0xf, 0x5, 0x1}, {0xf, 0x4, 0x6}, {0x10, 0x5b10, 0xffff3aa0}, {0xe, 0x166d, 0x9}, {0x6, 0x10000, 0x3}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x92}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x2, [@typedef={0x1, 0x0, 0x0, 0x8, 0x200}, @enum64={0x7, 0x7, 0x0, 0x13, 0x0, 0xa, [{0x4, 0x2, 0x4f}, {0xb, 0xe, 0xfffffffd}, {0xf, 0x5, 0x1}, {0xf, 0x4, 0x6}, {0x10, 0x5b10, 0xffff3aa0}, {0xe, 0x166d, 0x9}, {0x6, 0x10000, 0x3}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x92}, 0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000100)={r10}, &(0x7f00000002c0)=0x8) 15.726706014s ago: executing program 0 (id=3288): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0x80}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 15.556756976s ago: executing program 0 (id=3289): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0xc00, 0x6, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x1e}}}}, [@NL80211_ATTR_TESTDATA={0x3d, 0x45, "56377c69ada8b5674c277d93af8ca6061a10a7edd8298551915339901b1f4d50e842c00ca455979d319af02aecb90699429aedcb5ca784935d"}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048080}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@typedef={0x3, 0x0, 0x0, 0x8, 0x2}, @enum={0x8}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x2e, 0x5f, 0x5f, 0x2e, 0x5f]}}, 0x0, 0x3a, 0x0, 0x1, 0x4ceff6ba}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0xc00, 0x6, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x6, 0x1e}}}}, [@NL80211_ATTR_TESTDATA={0x3d, 0x45, "56377c69ada8b5674c277d93af8ca6061a10a7edd8298551915339901b1f4d50e842c00ca455979d319af02aecb90699429aedcb5ca784935d"}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048080}, 0x4000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@typedef={0x3, 0x0, 0x0, 0x8, 0x2}, @enum={0x8}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x2e, 0x5f, 0x5f, 0x2e, 0x5f]}}, 0x0, 0x3a, 0x0, 0x1, 0x4ceff6ba}, 0x28) (async) 15.540602479s ago: executing program 0 (id=3290): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e3000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async, rerun: 32) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x2) (rerun: 32) ioctl$TUNGETVNETLE(r3, 0x40047452, &(0x7f0000001200)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40, 0x0, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bbfb000000a705251e6382949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c040) (async) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000000)=0x5b6273f3) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6erspan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008b80)={&(0x7f0000008a40)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000000000300000d00000000010000e30200000000000000030000000700000001000000003000"], &(0x7f0000008b40)=""/8, 0x3f, 0x8, 0x1, 0x3}, 0x28) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="321f07a6f6c5dc00457f51c0225aff00", @ANYRES32=r6, @ANYBLOB="08001d0001000080140012800b0001006d6163736563000004000280"], 0x44}, 0x1, 0x0, 0x0, 0x2404d808}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) 15.355217692s ago: executing program 0 (id=3291): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000036c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x10) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/91, 0x5b}], 0x1}, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'vcan0\x00'}) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, 0x41424344}, 0x4, 0xffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x2, 0x2e, 0x3c, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote, {[@timestamp_addr={0x44, 0xc, 0x9d, 0x1, 0x9, [{@broadcast, 0x898}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x4, 0x91, 0x1, 0x1}]}}, {{0x4e24, 0x4e23, 0x41424344, r2, 0x1, 0x0, 0x5, 0x8, 0xfffd, 0x0, 0x57}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000140)={@local, @dev, @void, {@llc={0x4, {@llc={0xfc, 0xf0, "d2", "e32f9637e8b425a05e47d69743243565ff8962f9029cb16725bcd8751ef46055694b64973f838f1e3f12019166e69831450d5bb744808e52f825160aa6cf39dc365ff97eb4aef7fa6889d106a356b0dd5114212979a5e17a43d76aac3a1d02d0f5ddf2460b3a08ba0a"}}}}}, 0x0) 15.226523712s ago: executing program 0 (id=3292): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xffff, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="e372f3ec986c672df2826128194a", 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 15.208431098s ago: executing program 0 (id=3293): unshare(0x24060400) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x16c5, 0xffffffffffffffff, 0x0, 0x500}, 0x38) unshare(0x200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xa0000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x10, 0xb}, {0x5, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x5f, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000a0}, 0x4028040) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.125158941s ago: executing program 33 (id=3275): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r1, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4f, 0x39}}}}, [""]}, 0x20}}, 0x7) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000240)={@initdev, 0x0}, &(0x7f0000000280)=0x14) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xe5, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000005c0)={0x0, @multicast1, @multicast2}, &(0x7f0000000600)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x2f, 0x9, 0x7, 0x1, 0x5, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x7, 0x1, 0xe1}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x120, r3, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x8c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x7, 0x33, 0x40, 0x800, 0x1, 0x9, '\x00', r4, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0xe}, 0x50) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000940)) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x42, '\x00', r5, r0, 0x2, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xffff7c66}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a40)='GPL\x00', 0x3, 0xe5, &(0x7f0000000a80)=""/229, 0x40f00, 0x9, '\x00', r7, 0x1a, r0, 0x8, &(0x7f0000000b80)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000bc0)={0x5, 0x0, 0x5, 0xfffffffe}, 0x10, 0x58c, 0xffffffffffffffff, 0x1, &(0x7f0000000c80)=[r9, r8, r8, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x5, 0x1, 0xf, 0x6}], 0x10, 0x349}, 0x94) (async) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x28, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x8001) (async) recvfrom$llc(r0, &(0x7f0000000ec0)=""/8, 0x8, 0x40, &(0x7f0000000f00)={0x1a, 0x304, 0x9, 0x1, 0x9, 0xff, @broadcast}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r10, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, r11, 0x501, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '\xb0@]'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4010) (async) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000001080)=0x80000, 0x4) (async) getsockopt(r0, 0x10000, 0x5, &(0x7f00000010c0)=""/4096, &(0x7f00000020c0)=0x1000) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000002100)=[@in6={0xa, 0x4e21, 0x3, @local, 0x7}, @in6={0xa, 0x4e22, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e22, 0xfffff070, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}], 0x64) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002180)={{{@in=@multicast2, @in6=@initdev}}, {{@in=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000002280)=0xe8) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r9, 0x8008f511, &(0x7f00000022c0)) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002340), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000002400)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x20, r12, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}]}, 0x20}}, 0x800) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r13, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x1c, r1, 0x10, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x0) 2.081799785s ago: executing program 34 (id=3274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000007c0)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf254f00000008000300", @ANYRES32=r2, @ANYBLOB='H\x00z'], 0xbc}, 0x1, 0x0, 0x0, 0x40010}, 0x4040880) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (rerun: 64) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r6) socket$kcm(0x10, 0x2, 0x4) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x10, 0x2b, 0x1, @dev={0xfe, 0x80, '\x00', 0x25}, @local, {[@dstopts={0x2c, 0x0, '\x00', [@padn, @pad1]}]}}}}}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x280) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000001140)=ANY=[@ANYBLOB="020300021000000000000000000000000300060000000000020000000000000000000000000000000200010000000000000009007fffffff03000500330000000200000064010102000000000000000002000800080001003400000000000000040004"], 0x80}, 0x1, 0x7}, 0x4044000) (async) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "b341af", 0x18, 0x0, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@dstopts={0x6c, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x800}, @calipso={0x7, 0x8, {0x1, 0x0, 0xe, 0xc2}}]}]}}}}}, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000004001b0000000c00228059fe0080040000800600210030"], 0x28}}, 0x0) 1.028008907s ago: executing program 35 (id=3282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x5, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x5, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) socket$unix(0x1, 0x5, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r9, &(0x7f0000000240)=[{&(0x7f00000003c0)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaeb", 0x22}, {&(0x7f0000000100)="b700"/12, 0xc}, {&(0x7f0000000400)="17a8a6c41e58e8b6cdb8040db329c064116e4c4cbb04627dfddbd514be6688ff", 0x20}], 0x3) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 36 (id=3293): unshare(0x24060400) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x16c5, 0xffffffffffffffff, 0x0, 0x500}, 0x38) unshare(0x200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xa0000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x10, 0xb}, {0x5, 0xa858712265c6c23}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x5f, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000a0}, 0x4028040) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): 000000398 R09: 0000000000000000 [ 507.879524][T16096] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 507.879536][T16096] R13: 00007f1c7ebe6128 R14: 00007f1c7ebe6090 R15: 00007ffe4f87eb58 [ 507.879572][T16096] [ 507.881870][T16096] Mem-Info: [ 507.926270][T16117] sctp: [Deprecated]: syz.2.2580 (pid 16117) Use of int in maxseg socket option. [ 507.926270][T16117] Use struct sctp_assoc_value instead [ 507.937240][T16096] active_anon:9171 inactive_anon:0 isolated_anon:0 [ 507.937240][T16096] active_file:3082 inactive_file:40014 isolated_file:0 [ 507.937240][T16096] unevictable:768 dirty:149 writeback:0 [ 507.937240][T16096] slab_reclaimable:12271 slab_unreclaimable:178750 [ 507.937240][T16096] mapped:29166 shmem:1363 pagetables:995 [ 507.937240][T16096] sec_pagetables:0 bounce:0 [ 507.937240][T16096] kernel_misc_reclaimable:0 [ 507.937240][T16096] free:1215351 free_pcp:15694 free_cma:0 [ 508.036751][T16117] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2580'. [ 508.051849][T16096] Node 0 active_anon:36684kB inactive_anon:0kB active_file:12328kB inactive_file:159856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116764kB dirty:596kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13344kB pagetables:3856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 508.387277][T16132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2584'. [ 508.397704][T16096] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 508.435845][T16096] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 508.446156][T16130] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2584'. [ 508.489330][T16096] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 508.526846][T16096] Node 0 DMA32 free:956036kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37300kB inactive_anon:0kB active_file:12328kB inactive_file:159856kB unevictable:1536kB writepending:384kB zspages:0kB present:3129332kB managed:2565192kB mlocked:0kB bounce:0kB free_pcp:41156kB local_pcp:21420kB free_cma:0kB [ 508.638720][T16096] lowmem_reserve[]: 0 0 0 0 0 [ 508.657476][T16096] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 508.695688][T16096] lowmem_reserve[]: 0 0 0 0 0 [ 508.700618][T16096] Node 1 Normal free:3890416kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20176kB local_pcp:11592kB free_cma:0kB [ 508.737210][T16096] lowmem_reserve[]: 0 0 0 0 0 [ 508.742015][T16096] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 508.755644][T16149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2587'. [ 508.781257][T16096] Node 0 DMA32: 1349*4kB (UM) 831*8kB (UME) 582*16kB (UM) 642*32kB (UM) 464*64kB (UM) 126*128kB (UME) 65*256kB (UME) 42*512kB (UME) 19*1024kB (UM) 4*2048kB (UME) 196*4096kB (UM) = 956332kB [ 508.810219][T16151] netlink: 'syz.0.2588': attribute type 5 has an invalid length. [ 508.887153][T16096] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 508.912157][T16096] Node 1 Normal: 94*4kB (UE) 47*8kB (UME) 46*16kB (UME) 89*32kB (UME) 28*64kB (UME) 10*128kB (UME) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3890416kB [ 508.941804][T16158] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2590'. [ 509.003073][T16096] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 509.011543][T16161] wg1 speed is unknown, defaulting to 1000 [ 509.014223][T16096] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 509.068016][T16096] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 509.097640][T16096] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 509.131660][T16096] 44457 total pagecache pages [ 509.144183][T16096] 0 pages in swap cache [ 509.191415][T16096] Free swap = 124996kB [ 509.205714][T16096] Total swap = 124996kB [ 509.210028][T16096] 2097051 pages RAM [ 509.225762][T16096] 0 pages HighMem/MovableOnly [ 509.240452][T16096] 424111 pages reserved [ 509.248579][T16096] 0 pages cma reserved [ 509.290846][T16164] wg1 speed is unknown, defaulting to 1000 [ 509.448373][T16173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2594'. [ 509.529731][T16188] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 509.666617][T16197] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2595'. [ 509.852171][T16208] veth1_to_bond: entered promiscuous mode [ 510.192098][T16218] wg1 speed is unknown, defaulting to 1000 [ 510.238563][T16215] wg1 speed is unknown, defaulting to 1000 [ 510.565677][T16239] tc_dump_action: action bad kind [ 510.671530][T16239] veth0_to_bridge: entered promiscuous mode [ 511.281179][T16263] tipc: Enabling of bearer rejected, failed to enable media [ 511.351683][T16260] wg1 speed is unknown, defaulting to 1000 [ 511.470001][T16264] wg1 speed is unknown, defaulting to 1000 [ 511.549693][T16280] netlink: 'syz.0.2614': attribute type 1 has an invalid length. [ 511.696708][T16280] 8021q: adding VLAN 0 to HW filter on device bond6 [ 511.765946][T16284] bond6: (slave gretap2): making interface the new active one [ 511.809072][T16284] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 511.945691][T16301] __nla_validate_parse: 4 callbacks suppressed [ 511.945711][T16301] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2619'. [ 511.991405][T16303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2619'. [ 512.222493][T16304] wg1 speed is unknown, defaulting to 1000 [ 512.401106][T16323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2624'. [ 512.719252][T16327] smc: net device geneve0 applied user defined pnetid SYZ0 [ 512.789776][T16329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.828296][T16329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 513.013267][ T57] block nbd1: Possible stuck request ffff888024d67000: control (read@0,1024B). Runtime 360 seconds [ 513.024169][ T57] block nbd1: Possible stuck request ffff888024d671c0: control (read@1024,1024B). Runtime 360 seconds [ 513.035251][ T57] block nbd1: Possible stuck request ffff888024d67380: control (read@2048,1024B). Runtime 360 seconds [ 513.047352][ T57] block nbd1: Possible stuck request ffff888024d67540: control (read@3072,1024B). Runtime 360 seconds [ 513.073744][T16342] netlink: 'syz.3.2630': attribute type 1 has an invalid length. [ 513.134836][T16342] gretap2: entered allmulticast mode [ 513.143822][T16342] bond8: (slave gretap2): making interface the new active one [ 513.152297][T16342] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 513.309721][T16355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2636'. [ 513.373682][T16363] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2638'. [ 513.382359][T16358] netlink: 'syz.0.2634': attribute type 15 has an invalid length. [ 513.414288][T16355] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 513.426542][T16355] bond9: (slave vxcan1): Error -95 calling set_mac_address [ 513.438242][T16367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2637'. [ 513.472877][T16367] delete_channel: no stack [ 513.934874][T16402] tipc: Enabled bearer , priority 0 [ 513.949419][T16402] syzkaller0: entered promiscuous mode [ 513.955695][T16402] syzkaller0: entered allmulticast mode [ 513.958841][T16400] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2645'. [ 513.969796][T16402] tipc: Resetting bearer [ 514.052987][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 514.069165][T16413] wg1 speed is unknown, defaulting to 1000 [ 514.651708][T16426] wg1 speed is unknown, defaulting to 1000 [ 514.788703][T16420] wg1 speed is unknown, defaulting to 1000 [ 514.854448][T16436] netlink: 'syz.3.2654': attribute type 13 has an invalid length. [ 514.872874][T16436] netlink: 14589 bytes leftover after parsing attributes in process `syz.3.2654'. [ 515.269155][T16447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2657'. [ 515.595884][T16450] team0 (unregistering): Port device team_slave_0 removed [ 515.605904][T16450] team0 (unregistering): Port device team_slave_1 removed [ 515.636473][T16451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2659'. [ 515.658279][T16453] syzkaller1: entered promiscuous mode [ 515.664381][T16453] syzkaller1: entered allmulticast mode [ 515.797007][ T71] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.826294][ T71] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.835942][ T71] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.844700][ T71] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.288720][T16485] SET target dimension over the limit! [ 516.690301][T16483] wg1 speed is unknown, defaulting to 1000 [ 516.925573][T16501] netlink: 'syz.2.2668': attribute type 10 has an invalid length. [ 517.793439][T16549] __nla_validate_parse: 8 callbacks suppressed [ 517.793461][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2677'. [ 517.821592][T16551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2678'. [ 517.871218][T16554] syzkaller0: entered promiscuous mode [ 517.884480][T16555] netlink: 308 bytes leftover after parsing attributes in process `syz.3.2677'. [ 517.934118][T16554] syzkaller0: entered allmulticast mode [ 517.958253][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2677'. [ 518.241153][T16572] netlink: 'syz.1.2680': attribute type 13 has an invalid length. [ 518.252131][T16572] netlink: 'syz.1.2680': attribute type 17 has an invalid length. [ 518.297203][T16572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 518.458530][T16572] wg1 speed is unknown, defaulting to 1000 [ 518.662513][T16590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.700582][T16593] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2685'. [ 518.742147][T16598] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2687'. [ 518.836126][T16602] netlink: 'syz.3.2685': attribute type 29 has an invalid length. [ 518.865480][T16593] netlink: 'syz.3.2685': attribute type 29 has an invalid length. [ 518.913738][T16604] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2688'. [ 518.993412][T16604] 8021q: VLANs not supported on ipvlan1 [ 519.051464][T16604] macsec1: entered promiscuous mode [ 519.057499][T16604] macsec1: entered allmulticast mode [ 519.210928][T16606] wg1 speed is unknown, defaulting to 1000 [ 519.841940][T16631] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2695'. [ 519.900219][T16633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2695'. [ 520.139597][T16653] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2701'. [ 520.615208][T16679] netlink: 'syz.2.2707': attribute type 1 has an invalid length. [ 520.808622][T16694] veth15: entered promiscuous mode [ 521.721139][T16739] can: request_module (can-proto-5) failed. [ 521.921057][T16756] netlink: 'syz.3.2725': attribute type 4 has an invalid length. [ 522.647127][T16784] netlink: 'syz.1.2735': attribute type 4 has an invalid length. [ 522.964267][T16793] tipc: Enabled bearer , priority 0 [ 522.987934][T16793] syzkaller0: entered promiscuous mode [ 522.993685][T16793] syzkaller0: entered allmulticast mode [ 523.039342][T16793] tipc: Resetting bearer [ 523.085547][T16792] wg1 speed is unknown, defaulting to 1000 [ 523.455290][T16822] __nla_validate_parse: 11 callbacks suppressed [ 523.455313][T16822] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2744'. [ 523.620795][T16828] IPVS: nq: FWM 3 0x00000003 - no destination available [ 523.630101][T16824] wg1 speed is unknown, defaulting to 1000 [ 523.844321][T16782] tipc: Resetting bearer [ 523.885064][T16782] tipc: Disabling bearer [ 524.136929][T16850] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.288769][T16850] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.340667][T16850] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.409410][T16850] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.605334][ T50] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.643674][ T50] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.702969][ T50] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.715983][ T50] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.937016][T16892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2762'. [ 524.946549][T16889] batadv_slave_0: entered allmulticast mode [ 524.996418][T16892] IPVS: set_ctl: invalid protocol: 26 172.20.20.28:20004 [ 525.078214][T16900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2765'. [ 525.099625][T16900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2765'. [ 525.213241][T16905] gtp1: entered promiscuous mode [ 525.799312][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 525.820539][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 525.833501][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 525.865629][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 525.874861][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 526.007314][T11396] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.030503][T11396] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 526.066383][T16919] wg1 speed is unknown, defaulting to 1000 [ 526.131253][T11396] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.142847][T16932] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 526.154394][T11396] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 526.266285][T11396] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.279479][T11396] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 526.421567][T11396] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.442106][T11396] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 526.525873][T16947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2779'. [ 526.716124][T16953] IPv6: sit2: Disabled Multicast RS [ 526.861109][T11371] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.918538][ T50] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.954913][T16965] nbd: couldn't find device at index 0 [ 526.976738][ T1090] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.995938][T16919] chnl_net:caif_netlink_parms(): no params data found [ 527.051192][ T1090] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.062189][T16973] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2785'. [ 527.182441][T16983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2788'. [ 527.198302][T16981] netlink: 'syz.1.2789': attribute type 12 has an invalid length. [ 527.207101][T11396] bridge_slave_1: left allmulticast mode [ 527.213493][T11396] bridge_slave_1: left promiscuous mode [ 527.220811][T11396] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.252137][T11396] bridge_slave_0: left allmulticast mode [ 527.259420][T16985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2786'. [ 527.263632][T11396] bridge_slave_0: left promiscuous mode [ 527.273156][T16986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2785'. [ 527.285098][T11396] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.328962][T16991] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2786'. [ 527.344023][T11396] tipc: Resetting bearer [ 527.412522][T11396] bond3 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 527.422266][T11396] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 527.430968][T11396] bond3 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 3a:39:68:60:71:b4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 527.764507][T11396] bond8 (unregistering): (slave gretap2): Releasing active interface [ 527.963540][ T5846] Bluetooth: hci5: command tx timeout [ 528.145902][T11396] tipc: Disabling bearer [ 528.197261][T11396] bond0 (unregistering): Released all slaves [ 528.212901][T11396] bond1 (unregistering): Released all slaves [ 528.319337][T11396] bond2 (unregistering): Released all slaves [ 528.443376][T11396] bond3 (unregistering): (slave veth5): Releasing backup interface [ 528.452836][T11396] bond3 (unregistering): Released all slaves [ 528.470913][T11396] bond4 (unregistering): Released all slaves [ 528.489667][T11396] bond5 (unregistering): Released all slaves [ 528.647053][T11396] bond6 (unregistering): Released all slaves [ 528.773649][T11396] bond7 (unregistering): (slave veth9): Releasing active interface [ 528.783241][T11396] bond7 (unregistering): (slave veth11): Releasing active interface [ 528.792000][T11396] bond7 (unregistering): Released all slaves [ 528.806336][T11396] bond8 (unregistering): Released all slaves [ 528.820147][T11396] bond9 (unregistering): Released all slaves [ 529.126228][T17000] bond0: (slave 30): Releasing backup interface [ 529.135227][T17000] bond0: (slave bond_slave_1): Releasing backup interface [ 529.144898][T17000] bond2: (slave veth5): Releasing active interface [ 529.198434][T11396] 9: left promiscuous mode [ 529.231107][T17012] IPVS: Error connecting to the multicast addr [ 529.255690][T17014] tipc: Enabled bearer , priority 0 [ 529.415834][T11396] tipc: Disabling bearer [ 529.433969][T11396] tipc: Left network mode [ 529.547741][T17015] syzkaller0: entered promiscuous mode [ 529.554630][T11396] IPVS: stopping master sync thread 5992 ... [ 529.567044][T17015] syzkaller0: entered allmulticast mode [ 529.575801][T17015] tipc: Resetting bearer [ 529.582329][T16919] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.596870][T17036] __nla_validate_parse: 1 callbacks suppressed [ 529.596890][T17036] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2801'. [ 529.600521][T16919] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.620277][T16919] bridge_slave_0: entered allmulticast mode [ 529.629191][T16919] bridge_slave_0: entered promiscuous mode [ 529.629497][T17042] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2801'. [ 529.641161][T16919] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.652131][T16919] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.659756][T16919] bridge_slave_1: entered allmulticast mode [ 529.668085][T16919] bridge_slave_1: entered promiscuous mode [ 529.700670][T17009] tipc: Resetting bearer [ 530.056977][ T5846] Bluetooth: hci5: command tx timeout [ 531.797425][T17009] tipc: Disabling bearer [ 532.006679][T16919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.046546][T16919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.073165][T17044] wg1 speed is unknown, defaulting to 1000 [ 532.123041][ T5846] Bluetooth: hci5: command tx timeout [ 532.324360][T16919] team0: Port device team_slave_0 added [ 532.348536][T16919] team0: Port device team_slave_1 added [ 532.470343][T17071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2809'. [ 532.527441][T11396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.547669][T11396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.662295][T11396] pim6reg (unregistering): left allmulticast mode [ 532.742298][T17082] netlink: 'syz.2.2812': attribute type 6 has an invalid length. [ 533.407859][T16919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.415160][T16919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.441491][T16919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.461643][T16919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.468769][T16919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 533.496166][T16919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.508154][T17071] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 533.674403][T17091] dvmrp1: entered allmulticast mode [ 533.749285][T17094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2815'. [ 533.768937][T17091] IPVS: Scheduler module ip_vs_sip not found [ 533.775618][T17095] IPVS: length: 8 != 391372625184 [ 533.844715][T16919] hsr_slave_0: entered promiscuous mode [ 533.852029][T16919] hsr_slave_1: entered promiscuous mode [ 533.896438][T11396] IPVS: stop unused estimator thread 0... [ 533.985157][T17104] netlink: 'syz.4.2819': attribute type 2 has an invalid length. [ 534.007803][T17102] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2818'. [ 534.058247][T17105] C: renamed from team_slave_0 [ 534.066656][T17105] netlink: 'syz.0.2818': attribute type 2 has an invalid length. [ 534.075870][T17105] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2818'. [ 534.085082][T17105] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 534.107294][T17108] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2819'. [ 534.202813][ T5846] Bluetooth: hci5: command tx timeout [ 534.227375][T16919] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.328270][T17118] netlink: 'syz.1.2825': attribute type 1 has an invalid length. [ 534.375575][T17118] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 534.396871][T17118] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 534.437226][T16919] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.482514][T17119] bond5: (slave bridge5): Enslaving as an active interface with a down link [ 534.561842][T16919] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.661933][T16919] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.099188][T16919] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 535.143003][T16919] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 535.178187][T16919] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 535.215933][T16919] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 535.239342][T17166] wg1 speed is unknown, defaulting to 1000 [ 535.384075][T17181] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2837'. [ 535.541824][T17186] netlink: 'syz.2.2838': attribute type 3 has an invalid length. [ 535.564280][T17186] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2838'. [ 535.586420][T17186] netlink: 'syz.2.2838': attribute type 2 has an invalid length. [ 535.658390][T17190] x_tables: duplicate underflow at hook 1 [ 535.718904][T17186] 9: entered promiscuous mode [ 535.870185][T16919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.949994][T16919] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.031386][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.038645][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.156030][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.163300][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.211604][T17215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2842'. [ 536.300695][T17220] netlink: 'syz.2.2845': attribute type 10 has an invalid length. [ 536.337859][T17220] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 536.351228][T17220] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 536.621556][T16919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.671008][T16919] veth0_vlan: entered promiscuous mode [ 536.683935][T16919] veth1_vlan: entered promiscuous mode [ 536.717184][T16919] veth0_macvtap: entered promiscuous mode [ 536.728391][T16919] veth1_macvtap: entered promiscuous mode [ 536.749089][T16919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.762208][T16919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.778821][T11374] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.788251][T11374] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.797119][T11374] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.807988][T11371] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.971645][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.995833][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.042356][T11371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.065853][T11371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.080815][T17237] vlan2: entered promiscuous mode [ 537.086855][T17237] ip6gretap0: entered promiscuous mode [ 537.194910][T17239] wg1 speed is unknown, defaulting to 1000 [ 537.607168][T17263] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2854'. [ 538.539254][T17303] tipc: Enabled bearer , priority 0 [ 538.550020][T17305] netlink: 'syz.1.2863': attribute type 11 has an invalid length. [ 538.562211][T17305] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2863'. [ 538.579727][T17308] tipc: Enabling of bearer rejected, already enabled [ 538.592090][T17303] syzkaller0: entered promiscuous mode [ 538.592516][T17306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2865'. [ 538.612924][T17303] syzkaller0: entered allmulticast mode [ 538.639180][T17311] tipc: Resetting bearer [ 538.649139][T17312] netlink: 'syz.3.2866': attribute type 21 has an invalid length. [ 538.662006][T17302] tipc: Resetting bearer [ 538.700629][T17302] tipc: Disabling bearer [ 538.768970][T17312] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2866'. [ 538.876247][T17320] netlink: 'syz.4.2868': attribute type 11 has an invalid length. [ 538.895455][T17320] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2868'. [ 538.930819][T17326] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2871'. [ 539.022920][T17324] wg1 speed is unknown, defaulting to 1000 [ 539.496988][T17360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2880'. [ 540.022942][T17394] netlink: 'syz.1.2888': attribute type 10 has an invalid length. [ 540.163122][T17400] netlink: 'syz.3.2892': attribute type 1 has an invalid length. [ 540.192918][T17401] netlink: 'syz.3.2892': attribute type 1 has an invalid length. [ 540.417673][T17401] kthread_run failed with err -4 [ 540.847310][T17411] wg1 speed is unknown, defaulting to 1000 [ 541.220153][T17433] __nla_validate_parse: 6 callbacks suppressed [ 541.220174][T17433] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2900'. [ 541.280028][T17436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2899'. [ 541.391036][T17439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2901'. [ 541.533564][T17447] tipc: Enabling of bearer rejected, failed to enable media [ 541.592381][T17453] tipc: Failed to remove unknown binding: 66,1,1/0:109161392/109161394 [ 541.717324][T17453] tipc: Failed to remove unknown binding: 66,1,1/0:109161392/109161394 [ 541.797869][T17453] tipc: Failed to remove unknown binding: 66,1,1/0:109161392/109161394 [ 541.843985][T17454] netlink: 'syz.0.2905': attribute type 10 has an invalid length. [ 541.973295][T17454] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.983187][T17454] team0: entered promiscuous mode [ 541.989278][T17454] C: entered promiscuous mode [ 542.033824][T17454] Àÿ: entered promiscuous mode [ 542.059406][T17454] bond0: (slave team0): Enslaving as an active interface with a down link [ 542.550535][T17479] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 542.572043][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 542.591818][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 542.600713][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 542.605863][T17477] wg1 speed is unknown, defaulting to 1000 [ 542.609659][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 542.623513][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 542.826727][T17498] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2915'. [ 542.892079][T17498] netlink: 'syz.3.2915': attribute type 1 has an invalid length. [ 542.906911][T17498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2915'. [ 542.916475][T17488] wg1 speed is unknown, defaulting to 1000 [ 542.982529][T17503] vlan2: entered allmulticast mode [ 542.991952][T17503] bridge0: entered allmulticast mode [ 543.001795][ T30] audit: type=1800 audit(1761534211.630:5): pid=17506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2917" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2955 res=0 errno=0 [ 543.061258][T17507] geneve2: entered promiscuous mode [ 543.082893][ T57] block nbd1: Possible stuck request ffff888024d67000: control (read@0,1024B). Runtime 390 seconds [ 543.093896][ T57] block nbd1: Possible stuck request ffff888024d671c0: control (read@1024,1024B). Runtime 390 seconds [ 543.105091][ T57] block nbd1: Possible stuck request ffff888024d67380: control (read@2048,1024B). Runtime 390 seconds [ 543.113245][T17507] geneve2: entered allmulticast mode [ 543.116186][ T57] block nbd1: Possible stuck request ffff888024d67540: control (read@3072,1024B). Runtime 390 seconds [ 543.597222][T17533] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2926'. [ 543.860761][T17488] chnl_net:caif_netlink_parms(): no params data found [ 544.291244][T17488] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.299054][T17488] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.306582][T17488] bridge_slave_0: entered allmulticast mode [ 544.314975][T17488] bridge_slave_0: entered promiscuous mode [ 544.328452][T17488] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.341701][T17488] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.350559][T17578] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 544.359735][T17488] bridge_slave_1: entered allmulticast mode [ 544.371447][T17488] bridge_slave_1: entered promiscuous mode [ 544.386939][T17567] wg1 speed is unknown, defaulting to 1000 [ 544.542086][T17586] bond7: Removing last ns target with arp_interval on [ 544.631511][T17488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.644090][T17594] tipc: Started in network mode [ 544.649264][T17594] tipc: Node identity 764a55c2b74, cluster identity 4711 [ 544.661063][T17594] tipc: Enabled bearer , priority 0 [ 544.694417][ T5834] Bluetooth: hci0: command tx timeout [ 544.719288][T17488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.742302][T17598] netlink: 'syz.4.2943': attribute type 1 has an invalid length. [ 544.752934][T17588] syzkaller0: entered promiscuous mode [ 544.759758][T17588] syzkaller0: entered allmulticast mode [ 544.769747][T17598] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 544.911324][T17605] xt_policy: output policy not valid in PREROUTING and INPUT [ 545.007196][T17488] team0: Port device team_slave_0 added [ 545.016023][T17593] tipc: Resetting bearer [ 545.031026][T17587] tipc: Resetting bearer [ 545.111151][T17587] tipc: Disabling bearer [ 545.135861][T17488] team0: Port device team_slave_1 added [ 545.153891][T17613] netlink: 'syz.2.2946': attribute type 3 has an invalid length. [ 545.161683][T17613] netlink: 'syz.2.2946': attribute type 1 has an invalid length. [ 545.170921][T17613] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2946'. [ 545.223798][T17617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2948'. [ 545.253994][T17488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.266929][T17488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.294437][T17488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.315798][T17621] 8021q: VLANs not supported on ip6_vti0 [ 545.332120][T17488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.341734][T17488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.400491][T17488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.436964][T17620] 8021q: VLANs not supported on ip6_vti0 [ 545.703248][T17488] hsr_slave_0: entered promiscuous mode [ 545.722193][T17488] hsr_slave_1: entered promiscuous mode [ 545.739571][T17488] debugfs: 'hsr0' already exists in 'hsr' [ 545.752989][T17488] Cannot create hsr debugfs directory [ 545.993498][T17651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2955'. [ 546.048031][T17651] macvtap1: entered promiscuous mode [ 546.053572][T17651] veth1_to_team: entered promiscuous mode [ 546.060456][T17651] macvtap1: entered allmulticast mode [ 546.067299][T17651] veth1_to_team: entered allmulticast mode [ 546.175366][T17661] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2958'. [ 546.182842][T17669] netlink: 'syz.4.2960': attribute type 32 has an invalid length. [ 546.229042][T17669] __nla_validate_parse: 1 callbacks suppressed [ 546.229062][T17669] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2960'. [ 546.410065][T17676] wg1 speed is unknown, defaulting to 1000 [ 546.555059][T17683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2963'. [ 546.650944][T17691] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 546.765207][ T5834] Bluetooth: hci0: command tx timeout [ 546.872138][T17691] netlink: 'syz.4.2963': attribute type 3 has an invalid length. [ 546.926644][T17691] netlink: 'syz.4.2963': attribute type 1 has an invalid length. [ 546.950855][T17691] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.2963'. [ 546.981174][T17488] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 547.011097][T17488] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 547.051901][T17488] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 547.242264][T17488] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 547.471771][T17734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2974'. [ 547.494234][T17734] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.536832][T17734] bridge_slave_1 (unregistering): left allmulticast mode [ 547.545905][T17734] bridge_slave_1 (unregistering): left promiscuous mode [ 547.553044][T17734] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.589787][T17488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.621383][T17488] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.635422][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.642668][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.666064][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.673285][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.978241][T17488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.049269][T17488] veth0_vlan: entered promiscuous mode [ 548.063924][T17488] veth1_vlan: entered promiscuous mode [ 548.111211][T17752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2977'. [ 548.126427][T17488] veth0_macvtap: entered promiscuous mode [ 548.137227][T17488] veth1_macvtap: entered promiscuous mode [ 548.164023][T17488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.191954][T17488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.210872][T17752] wg1 speed is unknown, defaulting to 1000 [ 548.222195][ T1090] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.266800][ T1090] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.280825][ T1090] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.321424][ T1090] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.337265][T17757] netlink: 'syz.4.2979': attribute type 13 has an invalid length. [ 548.347201][T17757] netlink: 'syz.4.2979': attribute type 17 has an invalid length. [ 548.409331][T11396] bond0: (slave wlan1): interface is now down [ 548.419053][T17757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.421127][T11396] bond0: (slave team0): interface is now down [ 548.435232][T17757] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 548.454294][T11390] bond0: (slave wlan1): interface is now down [ 548.461263][T11390] bond0: (slave team0): interface is now down [ 548.496050][T11390] bond0: now running without any active interface! [ 548.709210][T11374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.742692][T11374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.833909][T11371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.844379][ T5834] Bluetooth: hci0: command tx timeout [ 548.867708][T11371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.963175][T17788] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 549.010400][T17788] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 549.030058][T17788] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 549.050160][T17788] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 549.077557][T17788] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 549.106739][T17788] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 549.164479][T17788] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 549.176229][T17788] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 549.204938][T17788] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 549.325656][T17798] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 549.338222][T17798] bond1 (unregistering): Released all slaves [ 549.435958][T17803] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2991'. [ 549.444343][T17801] tipc: Enabled bearer , priority 0 [ 549.460330][T17801] syzkaller0: entered promiscuous mode [ 549.468184][T17801] syzkaller0: entered allmulticast mode [ 549.476215][T17803] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2991'. [ 549.490176][T17803] netlink: 'syz.0.2991': attribute type 13 has an invalid length. [ 549.502361][T17798] tipc: Started in network mode [ 549.507831][T17798] tipc: Node identity 7218694c6607, cluster identity 4711 [ 549.515531][T17798] tipc: Enabled bearer , priority 0 [ 549.607288][T17803] veth1_to_team: left allmulticast mode [ 549.613422][T17803] veth1_to_team: left promiscuous mode [ 549.626894][T17801] tipc: Resetting bearer [ 549.635584][T17798] syzkaller0: entered promiscuous mode [ 549.641379][T17798] syzkaller0: entered allmulticast mode [ 549.651226][ T50] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.661558][ T50] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.678568][T17800] tipc: Resetting bearer [ 549.713539][T17800] tipc: Disabling bearer [ 549.730024][ T50] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.749224][T17798] tipc: Resetting bearer [ 549.778777][T17797] tipc: Resetting bearer [ 549.813062][T17797] tipc: Disabling bearer [ 549.829213][T17819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2994'. [ 549.833671][ T50] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 549.927037][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2994'. [ 550.031116][T17828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2996'. [ 550.681290][T17849] netlink: 'syz.1.3003': attribute type 5 has an invalid length. [ 550.811154][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 550.821366][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 550.831387][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 550.844939][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 550.859423][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 550.904459][T17858] pim6reg1: entered promiscuous mode [ 550.909911][T17858] pim6reg1: entered allmulticast mode [ 550.922828][ T5846] Bluetooth: hci0: command tx timeout [ 550.980842][T17853] wg1 speed is unknown, defaulting to 1000 [ 551.378671][T17853] chnl_net:caif_netlink_parms(): no params data found [ 551.512955][T17853] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.520440][T17853] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.527985][T17853] bridge_slave_0: entered allmulticast mode [ 551.536840][T17853] bridge_slave_0: entered promiscuous mode [ 551.547674][T17853] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.555834][T17853] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.563340][T17853] bridge_slave_1: entered allmulticast mode [ 551.571648][T17853] bridge_slave_1: entered promiscuous mode [ 551.623399][T17853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.637674][T17853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.720064][T17853] team0: Port device team_slave_0 added [ 551.748238][T17853] team0: Port device team_slave_1 added [ 551.806267][T17853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.823349][T17853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.883400][T17853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.906768][T17853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.922905][T17853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.952722][T17853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.107087][T17853] hsr_slave_0: entered promiscuous mode [ 552.114675][T17853] hsr_slave_1: entered promiscuous mode [ 552.121237][T17853] debugfs: 'hsr0' already exists in 'hsr' [ 552.127308][T17853] Cannot create hsr debugfs directory [ 552.256640][T17888] wg1 speed is unknown, defaulting to 1000 [ 552.647215][T17853] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 552.722429][T17900] ip6gretap1: entered allmulticast mode [ 552.831724][T17853] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 552.922858][ T5846] Bluetooth: hci3: command tx timeout [ 552.989450][T17909] tipc: Enabled bearer , priority 0 [ 553.039394][T17853] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 553.075655][T17908] syzkaller0: entered promiscuous mode [ 553.082446][T17908] syzkaller0: entered allmulticast mode [ 553.105544][T17907] __nla_validate_parse: 2 callbacks suppressed [ 553.105566][T17907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3017'. [ 553.187704][T17853] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 553.221341][T17907] tipc: Resetting bearer [ 553.264842][T17907] tipc: Disabling bearer [ 553.464809][T17853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 553.488205][T17853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 553.508472][T17853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 553.542549][T17853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 553.715664][T17917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3019'. [ 553.781993][T17922] bond_slave_0: entered promiscuous mode [ 553.793089][T17922] vlan2: entered promiscuous mode [ 553.800077][T17922] bond0: entered promiscuous mode [ 553.805904][T17922] bond_slave_1: entered promiscuous mode [ 554.077706][T17926] can: request_module (can-proto-5) failed. [ 554.087189][T17853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.131535][T17853] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.162512][T11390] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.169769][T11390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.202529][T11396] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.209769][T11396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.768807][T17853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.016404][ T5846] Bluetooth: hci3: command tx timeout [ 555.271276][T17853] veth0_vlan: entered promiscuous mode [ 555.285270][T17853] veth1_vlan: entered promiscuous mode [ 555.325065][T17853] veth0_macvtap: entered promiscuous mode [ 555.349485][T17853] veth1_macvtap: entered promiscuous mode [ 555.427678][T17853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.454842][T17853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.480863][T11374] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.493542][T17973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3029'. [ 555.501241][T11374] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.526110][T11374] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.540375][T11374] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.571094][T17975] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3031'. [ 555.735720][T11371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.756795][T11371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.841484][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.851276][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.040142][T17988] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2997'. [ 556.189261][T17990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3035'. [ 556.519894][T17999] netlink: 'syz.1.3038': attribute type 5 has an invalid length. [ 556.538750][T17999] netlink: 'syz.1.3038': attribute type 5 has an invalid length. [ 556.550338][T18000] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3037'. [ 556.754698][T17997] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.762758][T17997] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.956910][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 556.978550][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 556.987771][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 556.997835][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 557.006682][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 557.063529][T17997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.080609][T17997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.088457][ T5846] Bluetooth: hci3: command tx timeout [ 557.249043][T18010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3041'. [ 557.299178][T11396] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.320718][T11396] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.336204][T11396] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.407574][T18017] svc: failed to register nfsdv3 RPC service (errno 111). [ 557.426160][T11396] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.431523][T18017] svc: failed to register nfsaclv3 RPC service (errno 512). [ 557.487429][T18006] wg1 speed is unknown, defaulting to 1000 [ 557.575932][T18029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3045'. [ 557.787253][T18041] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 557.809718][T18041] bond1 (unregistering): Released all slaves [ 557.961683][T18045] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 557.977036][T18045] bond1 (unregistering): Released all slaves [ 558.067717][T18046] pim6reg: entered allmulticast mode [ 558.227292][T18006] chnl_net:caif_netlink_parms(): no params data found [ 558.599131][T18095] SET target dimension over the limit! [ 558.644722][T18087] bond7 (unregistering): Released all slaves [ 558.658876][T18099] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3061'. [ 558.672261][T18099] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3061'. [ 558.685166][T18099] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3061'. [ 558.778604][T18095] 8021q: adding VLAN 0 to HW filter on device bond1 [ 558.811891][T18106] bridge_slave_0: left allmulticast mode [ 558.818297][T18106] bridge_slave_0: left promiscuous mode [ 558.824673][T18106] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.839094][T18106] bond0: (slave bond_slave_0): Releasing backup interface [ 558.861884][T18106] bond0: (slave bond_slave_1): Releasing backup interface [ 558.891373][T18106] team0: Port device team_slave_0 removed [ 558.905020][T18106] team0: Port device team_slave_1 removed [ 558.912121][T18106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.920308][T18106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.933562][T18106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.941730][T18106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.953232][T18106] net_ratelimit: 58 callbacks suppressed [ 558.953251][T18106] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 559.083115][ T5846] Bluetooth: hci4: command tx timeout [ 559.149848][T18119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.173230][ T5846] Bluetooth: hci3: command tx timeout [ 559.204780][T18125] syzkaller0: entered promiscuous mode [ 559.214806][T18125] syzkaller0: entered allmulticast mode [ 559.227506][T18006] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.245039][T18006] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.263139][T18006] bridge_slave_0: entered allmulticast mode [ 559.276034][T18006] bridge_slave_0: entered promiscuous mode [ 559.295472][T18006] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.303156][T18006] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.310519][T18006] bridge_slave_1: entered allmulticast mode [ 559.318747][T18006] bridge_slave_1: entered promiscuous mode [ 559.328773][T18134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3065'. [ 559.386068][T18130] wg1 speed is unknown, defaulting to 1000 [ 559.395857][T18006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.406330][T18137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3067'. [ 559.411173][T18006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.523537][T18139] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3068'. [ 559.570749][T18006] team0: Port device team_slave_0 added [ 559.581266][T18006] team0: Port device team_slave_1 added [ 559.661619][T18006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.669349][T18006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.696297][T18006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.721548][T18006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.739685][T18006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.767361][T18006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.960172][T18159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3072'. [ 560.021039][T18006] hsr_slave_0: entered promiscuous mode [ 560.028472][T18006] hsr_slave_1: entered promiscuous mode [ 560.035759][T18006] debugfs: 'hsr0' already exists in 'hsr' [ 560.041740][T18006] Cannot create hsr debugfs directory [ 560.226312][T18162] wg1 speed is unknown, defaulting to 1000 [ 560.283926][T18163] wg1 speed is unknown, defaulting to 1000 [ 560.603052][T18182] netlink: 'syz.0.3079': attribute type 21 has an invalid length. [ 560.669659][T18182] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3079'. [ 560.893951][T18191] netlink: 'syz.4.3080': attribute type 12 has an invalid length. [ 561.163129][ T5846] Bluetooth: hci4: command tx timeout [ 561.218981][T18198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3083'. [ 561.795273][T18006] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 561.869609][T18006] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 561.903077][T18209] wg1 speed is unknown, defaulting to 1000 [ 561.910021][T18006] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 561.936538][T18006] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 562.005566][T18206] wg1 speed is unknown, defaulting to 1000 [ 562.038793][T18216] vxcan3: entered allmulticast mode [ 562.470635][T18227] netlink: 'syz.3.3089': attribute type 13 has an invalid length. [ 562.470762][T18228] netlink: 'syz.3.3089': attribute type 13 has an invalid length. [ 562.483351][T18227] netlink: 'syz.3.3089': attribute type 17 has an invalid length. [ 562.558935][T18228] netlink: 'syz.3.3089': attribute type 17 has an invalid length. [ 562.710540][T18227] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 562.782159][T18228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 563.112540][T18250] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3092'. [ 563.254507][ T5846] Bluetooth: hci4: command tx timeout [ 563.267156][T18006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.298751][T18006] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.353531][T13254] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.360777][T13254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.405734][T13254] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.413055][T13254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.785308][T18273] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20003 [ 563.796543][T18275] wg1 speed is unknown, defaulting to 1000 [ 563.938079][T18278] wg1 speed is unknown, defaulting to 1000 [ 564.014453][T18006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.310942][T18006] veth0_vlan: entered promiscuous mode [ 564.328662][T18298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3103'. [ 564.388197][T18006] veth1_vlan: entered promiscuous mode [ 564.471104][T18006] veth0_macvtap: entered promiscuous mode [ 564.483835][T18006] veth1_macvtap: entered promiscuous mode [ 564.506844][T18006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.548389][T18006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.572173][T11371] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.585542][T11371] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.615027][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.627253][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.785879][T18314] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3107'. [ 564.917261][T11390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.939877][T11390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.075707][T11371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.093765][T11371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.202452][T18326] netlink: 'syz.0.3112': attribute type 7 has an invalid length. [ 565.232302][T18328] sctp_getsockopt_maxseg: 55 callbacks suppressed [ 565.232324][T18328] sctp: [Deprecated]: syz.0.3112 (pid 18328) Use of int in maxseg socket option. [ 565.232324][T18328] Use struct sctp_assoc_value instead [ 565.261953][T18326] netlink: 'syz.0.3112': attribute type 8 has an invalid length. [ 565.272074][T18326] netlink: 'syz.0.3112': attribute type 5 has an invalid length. [ 565.324282][ T5846] Bluetooth: hci4: command tx timeout [ 565.542537][T18334] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 565.638288][T18337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3114'. [ 565.650378][T18337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3114'. [ 565.967523][T18343] netlink: 'syz.4.3117': attribute type 10 has an invalid length. [ 565.977548][T18343] batman_adv: batadv0: Adding interface: netdevsim0 [ 565.994756][T18343] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.045770][T18343] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 566.475120][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 566.484818][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 566.500845][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 566.511963][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 566.529279][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 566.728162][T18357] wg1 speed is unknown, defaulting to 1000 [ 566.940272][T18383] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3128'. [ 567.152462][T18383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.161769][T18383] bond_slave_0: left promiscuous mode [ 567.175966][T18383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.185461][T18383] bond_slave_1: left promiscuous mode [ 567.191449][T18383] bond0 (unregistering): Released all slaves [ 567.373638][T18403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3132'. [ 567.470308][T18357] chnl_net:caif_netlink_parms(): no params data found [ 567.579814][T18411] netlink: 'syz.2.3135': attribute type 15 has an invalid length. [ 567.592704][T18405] tipc: Started in network mode [ 567.597893][T18405] tipc: Node identity 7a03efd69c3f, cluster identity 4711 [ 567.608409][T18405] tipc: Enabled bearer , priority 0 [ 567.627535][T18405] syzkaller0: entered promiscuous mode [ 567.633803][T18405] syzkaller0: entered allmulticast mode [ 567.652185][T18415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3135'. [ 567.741751][T18415] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.749609][T18415] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.805312][T18415] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 567.905374][T18357] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.923066][T18357] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.930783][T18357] bridge_slave_0: entered allmulticast mode [ 567.956116][T18357] bridge_slave_0: entered promiscuous mode [ 567.970613][T18404] tipc: Resetting bearer [ 567.992394][T18404] tipc: Disabling bearer [ 568.017900][T18357] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.026954][T18357] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.036019][T18357] bridge_slave_1: entered allmulticast mode [ 568.046900][T18357] bridge_slave_1: entered promiscuous mode [ 568.082201][T18434] netlink: 'syz.1.3139': attribute type 12 has an invalid length. [ 568.091181][T18434] netlink: 'syz.1.3139': attribute type 29 has an invalid length. [ 568.099771][T18434] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3139'. [ 568.109819][T18434] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3139'. [ 568.128241][T18430] wg1 speed is unknown, defaulting to 1000 [ 568.189263][T18438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3140'. [ 568.248010][T18357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.334639][T18357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.394613][T18445] netlink: 'syz.4.3142': attribute type 9 has an invalid length. [ 568.403267][T18445] netlink: 'syz.4.3142': attribute type 6 has an invalid length. [ 568.498017][T18357] team0: Port device team_slave_0 added [ 568.520761][T18357] team0: Port device team_slave_1 added [ 568.605135][ T5846] Bluetooth: hci2: command tx timeout [ 568.638295][T18357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.653164][T18357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.680014][T18357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.704117][T18357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.711773][T18357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.738434][T18357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.832358][T18457] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 568.871316][T18357] hsr_slave_0: entered promiscuous mode [ 568.887211][T18357] hsr_slave_1: entered promiscuous mode [ 568.894313][T18357] debugfs: 'hsr0' already exists in 'hsr' [ 568.900171][T18357] Cannot create hsr debugfs directory [ 569.087316][T18469] team_slave_0: entered promiscuous mode [ 569.093122][T18469] team_slave_1: entered promiscuous mode [ 569.433684][T18488] __nla_validate_parse: 3 callbacks suppressed [ 569.433708][T18488] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3153'. [ 570.408561][T18516] veth0_virt_wifi: entered promiscuous mode [ 570.417599][T18516] vlan2: entered promiscuous mode [ 570.423401][T18511] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3157'. [ 570.441165][T18511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3157'. [ 570.655525][T18357] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 570.683122][ T5846] Bluetooth: hci2: command tx timeout [ 570.688376][T18357] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 570.734184][T18357] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 570.779946][T18357] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 570.873227][T18536] ipvlan2: entered promiscuous mode [ 570.935247][T18536] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 571.147304][T18529] wg1 speed is unknown, defaulting to 1000 [ 571.271077][T18552] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 571.362500][T18539] wg1 speed is unknown, defaulting to 1000 [ 571.870462][T18357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.972341][T18567] wg1 speed is unknown, defaulting to 1000 [ 572.012982][T18357] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.088791][T11374] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.096102][T11374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.104368][T18574] netlink: 'syz.1.3170': attribute type 7 has an invalid length. [ 572.138472][T11374] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.145829][T11374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.145994][T18574] netlink: 'syz.1.3170': attribute type 8 has an invalid length. [ 572.434041][T18581] batadv1: entered promiscuous mode [ 572.465186][T18581] batadv1: entered allmulticast mode [ 572.492852][T18581] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 572.553937][T18592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3172'. [ 572.597738][T18592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3172'. [ 572.763472][ T5846] Bluetooth: hci2: command tx timeout [ 572.951713][T18609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3176'. [ 573.176339][ T57] block nbd1: Possible stuck request ffff888024d67000: control (read@0,1024B). Runtime 420 seconds [ 573.187508][ T57] block nbd1: Possible stuck request ffff888024d671c0: control (read@1024,1024B). Runtime 420 seconds [ 573.206415][ T57] block nbd1: Possible stuck request ffff888024d67380: control (read@2048,1024B). Runtime 420 seconds [ 573.217530][ T57] block nbd1: Possible stuck request ffff888024d67540: control (read@3072,1024B). Runtime 420 seconds [ 573.382354][T18357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.407957][T18625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3181'. [ 573.430565][T18625] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3181'. [ 573.514411][T18625] geneve2: entered promiscuous mode [ 573.519877][T18625] geneve2: entered allmulticast mode [ 573.549767][T18630] pim6reg1: entered allmulticast mode [ 573.631497][T18357] veth0_vlan: entered promiscuous mode [ 573.768683][T18641] netlink: 'syz.1.3184': attribute type 39 has an invalid length. [ 573.796173][T18357] veth1_vlan: entered promiscuous mode [ 573.950148][T18357] veth0_macvtap: entered promiscuous mode [ 573.996169][T18357] veth1_macvtap: entered promiscuous mode [ 574.104944][T18357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.147323][T18656] wg1 speed is unknown, defaulting to 1000 [ 574.206178][T18357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.340881][T11374] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.423901][T11374] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.481406][T11374] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.540882][T11374] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.595040][T18682] IPVS: set_ctl: invalid protocol: 136 172.30.0.4:20000 [ 574.831325][T18688] tipc: Enabled bearer , priority 0 [ 574.839386][T18686] syzkaller0: entered promiscuous mode [ 574.845696][ T5846] Bluetooth: hci2: command tx timeout [ 574.851634][T18686] syzkaller0: entered allmulticast mode [ 575.109858][T18691] tipc: Resetting bearer [ 575.149788][T18685] tipc: Resetting bearer [ 575.191729][T18685] tipc: Disabling bearer [ 575.205611][T18694] netlink: 'syz.3.3198': attribute type 29 has an invalid length. [ 575.292198][T18696] netlink: 'syz.3.3198': attribute type 29 has an invalid length. [ 575.343587][T11396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.351471][T11396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.398881][T13254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.427629][T13254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.848799][T18716] netlink: 'syz.2.3202': attribute type 12 has an invalid length. [ 575.942415][T18724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3203'. [ 576.136614][T18726] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.147134][T18733] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 576.215813][T18736] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode [ 576.240208][T18736] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 576.503774][T18726] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.667036][T18726] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.695621][T18748] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 576.719024][T18748] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 576.731645][T18748] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 576.960057][T18726] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.018890][T18760] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 577.069101][T18758] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3212'. [ 577.277312][T12766] IPVS: starting estimator thread 0... [ 577.358919][T13254] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.385932][T18775] netlink: 'syz.1.3216': attribute type 13 has an invalid length. [ 577.393115][T18770] IPVS: using max 26 ests per chain, 62400 per kthread [ 577.403293][T18775] netlink: 'syz.1.3216': attribute type 17 has an invalid length. [ 578.023058][T18775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 578.042020][T11374] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.180178][T18789] syzkaller0: entered promiscuous mode [ 578.186326][T18789] syzkaller0: entered allmulticast mode [ 578.196987][T11396] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.205888][ T5846] Bluetooth: hci0: command tx timeout [ 578.235203][T11374] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.282177][T18788] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3221'. [ 580.470443][T18798] wg1 speed is unknown, defaulting to 1000 [ 580.470806][T18807] tipc: Enabled bearer , priority 0 [ 580.486393][T18820] tipc: Resetting bearer [ 580.520939][T18805] tipc: Disabling bearer [ 580.648427][T18837] netlink: 'syz.2.3228': attribute type 1 has an invalid length. [ 580.720080][T18841] netlink: 'syz.2.3228': attribute type 1 has an invalid length. [ 581.041697][T18846] wg1 speed is unknown, defaulting to 1000 [ 581.135214][T18858] netlink: 'syz.0.3234': attribute type 1 has an invalid length. [ 581.195933][T18858] netlink: 'syz.0.3234': attribute type 2 has an invalid length. [ 581.229940][T18861] netlink: 'syz.0.3234': attribute type 1 has an invalid length. [ 581.242481][T18861] netlink: 'syz.0.3234': attribute type 2 has an invalid length. [ 581.548337][T18874] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 581.558592][T12762] IPVS: starting estimator thread 0... [ 581.595440][T18884] netlink: 'syz.2.3242': attribute type 1 has an invalid length. [ 581.605958][T18885] netlink: 'syz.1.3239': attribute type 13 has an invalid length. [ 581.619764][T18884] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 581.662803][T18876] IPVS: using max 26 ests per chain, 62400 per kthread [ 581.729878][T18894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3244'. [ 581.740265][T18894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3244'. [ 581.934801][T18885] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.942650][T18885] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.965672][T18885] team_slave_0: left promiscuous mode [ 581.971749][T18885] team_slave_1: left promiscuous mode [ 582.092970][T18885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.114886][T18885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.443648][T11396] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.478012][T11396] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.519026][T11396] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.573706][T11396] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.621581][T18909] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3247'. [ 582.638180][T18909] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3247'. [ 582.713585][T18909] bridge0: port 1(erspan0) entered blocking state [ 582.733357][T18909] bridge0: port 1(erspan0) entered disabled state [ 582.740066][T18909] erspan0: entered allmulticast mode [ 582.774574][T18909] erspan0: entered promiscuous mode [ 582.829826][T18909] bridge0: port 1(erspan0) entered blocking state [ 582.836801][T18909] bridge0: port 1(erspan0) entered forwarding state [ 582.904317][T18922] erspan0: left allmulticast mode [ 582.911959][T18922] erspan0: left promiscuous mode [ 582.930267][T18922] bridge0: port 1(erspan0) entered disabled state [ 583.199295][T18940] netlink: 'syz.2.3256': attribute type 4 has an invalid length. [ 583.214589][T18940] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3256'. [ 583.297959][T18938] wg1 speed is unknown, defaulting to 1000 [ 583.389457][T18941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.410485][T18947] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 583.445417][T18947] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3258'. [ 583.807780][T18969] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3266'. [ 583.851573][T18969] batadv2: entered promiscuous mode [ 583.858302][T18969] batadv2: entered allmulticast mode [ 583.880426][T18971] netlink: 'syz.1.3267': attribute type 21 has an invalid length. [ 584.018198][T18980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3269'. [ 584.255286][T18986] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3271'. [ 584.300396][T18986] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 584.331933][T18990] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3272'. [ 584.652661][ C1] vcan0: j1939_tp_rxtimer: 0xffff888069ddf000: rx timeout, send abort [ 584.663407][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888069ddf000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 585.365398][T19019] syzkaller0: entered promiscuous mode [ 585.371125][T19019] syzkaller0: entered allmulticast mode [ 585.712255][T19022] wg1 speed is unknown, defaulting to 1000 [ 585.803760][T19024] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 585.860564][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 585.870416][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 585.886227][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 585.896607][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 585.905266][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 586.022779][T19028] wg1 speed is unknown, defaulting to 1000 [ 586.243160][T19028] chnl_net:caif_netlink_parms(): no params data found [ 586.388800][T19028] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.396854][T19028] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.405027][T19028] bridge_slave_0: entered allmulticast mode [ 586.413467][T19028] bridge_slave_0: entered promiscuous mode [ 586.423720][T19028] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.431037][T19028] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.438722][T19028] bridge_slave_1: entered allmulticast mode [ 586.449588][T19028] bridge_slave_1: entered promiscuous mode [ 586.506215][T19028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.521999][T19028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.585416][T19028] team0: Port device team_slave_0 added [ 586.606652][T19028] team0: Port device team_slave_1 added [ 586.653532][T19028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.660627][T19028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.693374][T19028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.706520][T19028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.713621][T19028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.740279][T19028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.814859][T19028] hsr_slave_0: entered promiscuous mode [ 586.821919][T19028] hsr_slave_1: entered promiscuous mode [ 586.828839][T19028] debugfs: 'hsr0' already exists in 'hsr' [ 586.835249][T19028] Cannot create hsr debugfs directory [ 586.969618][T19058] __nla_validate_parse: 67 callbacks suppressed [ 586.969638][T19058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3293'. [ 587.701056][ T1090] batman_adv: batadv0: Removing interface: netdevsim0 [ 587.780338][T11390] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.799127][T11374] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.819441][T11374] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.834970][T11390] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.843994][ T1090] bridge_slave_1: left allmulticast mode [ 587.849667][ T1090] bridge_slave_1: left promiscuous mode [ 587.855676][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.865304][ T1090] bridge_slave_0: left allmulticast mode [ 587.870980][ T1090] bridge_slave_0: left promiscuous mode [ 587.876930][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.963395][ T5846] Bluetooth: hci1: command tx timeout [ 588.197452][ T1090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.208618][ T1090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.218616][ T1090] bond0 (unregistering): Released all slaves [ 588.271149][ T1090] tipc: Left network mode [ 588.421071][ T1090] hsr_slave_0: left promiscuous mode [ 588.427485][ T1090] hsr_slave_1: left promiscuous mode [ 588.434016][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.441869][ T1090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.839199][ T1090] team0 (unregistering): Port device team_slave_1 removed [ 588.881360][ T1090] team0 (unregistering): Port device team_slave_0 removed [ 589.526072][ T1090] IPVS: stop unused estimator thread 0... [ 590.042997][ T5846] Bluetooth: hci1: command tx timeout [ 592.122979][ T5846] Bluetooth: hci1: command tx timeout [ 594.202974][ T5846] Bluetooth: hci1: command tx timeout [ 600.297892][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 600.308564][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 600.317541][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 600.327448][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 600.336567][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 600.345460][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 600.345967][T19064] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 600.356745][T19065] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 600.373198][T19065] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 600.382946][T19065] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 600.402995][T19061] wg1 speed is unknown, defaulting to 1000 [ 600.468667][T19063] wg1 speed is unknown, defaulting to 1000 [ 600.646790][T19061] chnl_net:caif_netlink_parms(): no params data found [ 600.745231][T19063] chnl_net:caif_netlink_parms(): no params data found [ 600.801716][T19061] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.809159][T19061] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.816911][T19061] bridge_slave_0: entered allmulticast mode [ 600.825287][T19061] bridge_slave_0: entered promiscuous mode [ 600.853073][T19061] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.860292][T19061] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.867902][T19061] bridge_slave_1: entered allmulticast mode [ 600.875412][T19061] bridge_slave_1: entered promiscuous mode [ 600.927762][T19061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.954978][T19061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.991104][T19063] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.998563][T19063] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.007097][T19063] bridge_slave_0: entered allmulticast mode [ 601.016277][T19063] bridge_slave_0: entered promiscuous mode [ 601.025885][T19063] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.033605][T19063] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.040925][T19063] bridge_slave_1: entered allmulticast mode [ 601.054761][T19063] bridge_slave_1: entered promiscuous mode [ 601.089637][T19061] team0: Port device team_slave_0 added [ 601.141436][T19061] team0: Port device team_slave_1 added [ 601.152415][T19063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.204276][T19063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.216336][T19061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.223926][T19061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.250649][T19061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.283090][T19061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.290087][T19061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.317176][T19061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.350142][T19063] team0: Port device team_slave_0 added [ 601.368379][T19063] team0: Port device team_slave_1 added [ 601.424394][ T5847] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 601.434868][ T5847] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 601.443945][ T5847] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 601.459792][ T5847] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 601.468187][ T5847] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 601.479200][T19063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.487584][T19063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.514025][T19063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.531651][T19061] hsr_slave_0: entered promiscuous mode [ 601.538353][T19061] hsr_slave_1: entered promiscuous mode [ 601.545017][T19061] debugfs: 'hsr0' already exists in 'hsr' [ 601.551044][T19061] Cannot create hsr debugfs directory [ 601.577073][T19063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.584273][T19063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.610688][T19063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.708429][T19080] wg1 speed is unknown, defaulting to 1000 [ 601.716944][T19063] hsr_slave_0: entered promiscuous mode [ 601.726772][T19063] hsr_slave_1: entered promiscuous mode [ 601.734116][T19063] debugfs: 'hsr0' already exists in 'hsr' [ 601.739872][T19063] Cannot create hsr debugfs directory [ 602.200963][T19080] chnl_net:caif_netlink_parms(): no params data found [ 602.384912][T19080] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.392505][T19080] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.400177][T19080] bridge_slave_0: entered allmulticast mode [ 602.408861][T19080] bridge_slave_0: entered promiscuous mode [ 602.418608][T19080] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.426049][T19080] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.433572][T19080] bridge_slave_1: entered allmulticast mode [ 602.442349][T19065] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 602.442913][ T5846] Bluetooth: hci3: command tx timeout [ 602.452173][T19065] Bluetooth: hci6: command tx timeout [ 602.458154][T19080] bridge_slave_1: entered promiscuous mode [ 602.465276][ T5846] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 602.475607][ T5846] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 602.484942][ T5846] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 602.493788][ T5846] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 602.526082][T19080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.539149][T19080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.581197][T19080] team0: Port device team_slave_0 added [ 602.591022][T19080] team0: Port device team_slave_1 added [ 602.635789][T19080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.642889][T19080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.669587][T19080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.680759][T19089] wg1 speed is unknown, defaulting to 1000 [ 602.682874][T19080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.693865][T19080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 602.720127][T19080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.822160][T19080] hsr_slave_0: entered promiscuous mode [ 602.829108][T19080] hsr_slave_1: entered promiscuous mode [ 602.835997][T19080] debugfs: 'hsr0' already exists in 'hsr' [ 602.841743][T19080] Cannot create hsr debugfs directory [ 603.086229][T19089] chnl_net:caif_netlink_parms(): no params data found [ 603.207967][T19089] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.215397][T19089] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.222911][T19089] bridge_slave_0: entered allmulticast mode [ 603.230384][T19089] bridge_slave_0: entered promiscuous mode [ 603.239228][T19089] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.247684][T19089] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.248522][ T57] block nbd1: Possible stuck request ffff888024d67000: control (read@0,1024B). Runtime 450 seconds [ 603.257189][T19089] bridge_slave_1: entered allmulticast mode [ 603.267380][ T57] block nbd1: Possible stuck request ffff888024d671c0: control (read@1024,1024B). Runtime 450 seconds [ 603.277108][T19089] bridge_slave_1: entered promiscuous mode [ 603.284426][ T57] block nbd1: Possible stuck request ffff888024d67380: control (read@2048,1024B). Runtime 450 seconds [ 603.300885][ T57] block nbd1: Possible stuck request ffff888024d67540: control (read@3072,1024B). Runtime 450 seconds [ 603.337333][T19089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.350091][T19089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.389099][T19089] team0: Port device team_slave_0 added [ 603.398276][T19089] team0: Port device team_slave_1 added [ 603.430901][T19089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.438510][T19089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.465523][T19089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.478006][T19089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.485422][ T5846] Bluetooth: hci7: command tx timeout [ 603.491091][T19089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.517428][T19089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.570365][T19089] hsr_slave_0: entered promiscuous mode [ 603.577119][T19089] hsr_slave_1: entered promiscuous mode [ 603.584466][T19089] debugfs: 'hsr0' already exists in 'hsr' [ 603.590271][T19089] Cannot create hsr debugfs directory [ 604.524316][ T5846] Bluetooth: hci3: command tx timeout [ 604.524606][ T5847] Bluetooth: hci8: command tx timeout [ 604.529808][ T5846] Bluetooth: hci6: command tx timeout [ 605.563196][ T5846] Bluetooth: hci7: command tx timeout [ 606.603006][T19065] Bluetooth: hci3: command tx timeout [ 606.603780][ T5846] Bluetooth: hci6: command tx timeout [ 606.608548][ T5847] Bluetooth: hci8: command tx timeout [ 607.643198][ T5847] Bluetooth: hci7: command tx timeout [ 608.683076][ T5846] Bluetooth: hci8: command tx timeout [ 608.683080][ T5847] Bluetooth: hci6: command tx timeout [ 608.683126][ T5846] Bluetooth: hci3: command tx timeout [ 609.723075][ T5846] Bluetooth: hci7: command tx timeout [ 610.762922][ T5846] Bluetooth: hci8: command tx timeout [ 633.323321][ T57] block nbd1: Possible stuck request ffff888024d67000: control (read@0,1024B). Runtime 480 seconds [ 633.334303][ T57] block nbd1: Possible stuck request ffff888024d671c0: control (read@1024,1024B). Runtime 480 seconds [ 633.345363][ T57] block nbd1: Possible stuck request ffff888024d67380: control (read@2048,1024B). Runtime 480 seconds [ 633.356563][ T57] block nbd1: Possible stuck request ffff888024d67540: control (read@3072,1024B). Runtime 480 seconds [ 646.719905][ T5847] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 646.729085][ T5847] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 646.737537][ T5847] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 646.747038][ T5847] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 646.754877][ T5847] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 646.792387][T19098] wg1 speed is unknown, defaulting to 1000 [ 646.936476][T19098] chnl_net:caif_netlink_parms(): no params data found [ 647.017173][T19098] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.024585][T19098] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.031882][T19098] bridge_slave_0: entered allmulticast mode [ 647.040122][T19098] bridge_slave_0: entered promiscuous mode [ 647.048410][T19098] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.055677][T19098] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.063077][T19098] bridge_slave_1: entered allmulticast mode [ 647.070510][T19098] bridge_slave_1: entered promiscuous mode [ 647.108162][T19098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.121025][T19098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.159342][T19098] team0: Port device team_slave_0 added [ 647.169467][T19098] team0: Port device team_slave_1 added [ 647.201445][T19098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.208930][T19098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.235554][T19098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.248155][T19098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.255543][T19098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.281947][T19098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.330758][T19098] hsr_slave_0: entered promiscuous mode [ 647.341504][T19098] hsr_slave_1: entered promiscuous mode [ 647.348156][T19098] debugfs: 'hsr0' already exists in 'hsr' [ 647.354349][T19098] Cannot create hsr debugfs directory [ 648.203485][ T5847] Bluetooth: hci5: command 0x0406 tx timeout [ 648.843287][ T5846] Bluetooth: hci9: command tx timeout [ 650.923022][ T5846] Bluetooth: hci9: command tx timeout [ 651.694375][T11374] dvmrp0 (unregistering): left allmulticast mode [ 651.995187][T11374] bond5 (unregistering): (slave bridge5): Releasing active interface [ 652.047657][T11374] bond0 (unregistering): Released all slaves [ 652.165458][T11374] bond1 (unregistering): Released all slaves [ 652.276783][T11374] bond2 (unregistering): Released all slaves [ 652.386589][T11374] bond3 (unregistering): Released all slaves [ 652.400667][T11374] bond4 (unregistering): Released all slaves [ 652.416943][T11374] bond5 (unregistering): Released all slaves [ 652.528561][T11374] !: left promiscuous mode [ 652.603306][T11374] tipc: Left network mode [ 653.007156][ T5846] Bluetooth: hci9: command tx timeout [ 653.526715][T11374] IPVS: stop unused estimator thread 0... [ 655.083082][ T5846] Bluetooth: hci9: command tx timeout [ 660.834052][ T5847] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 660.850322][ T5847] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 660.859016][ T5847] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 660.868348][ T5847] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 660.869951][T19064] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 660.885548][ T5847] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 660.886933][T19064] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 660.903105][ T5847] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 660.915862][ T5847] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 660.925359][ T5847] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 660.944698][T19108] wg1 speed is unknown, defaulting to 1000 [ 660.983286][T19110] wg1 speed is unknown, defaulting to 1000 [ 661.205478][T19108] chnl_net:caif_netlink_parms(): no params data found [ 661.276320][T19110] chnl_net:caif_netlink_parms(): no params data found [ 661.347963][T19108] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.355463][T19108] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.363303][T19108] bridge_slave_0: entered allmulticast mode [ 661.370707][T19108] bridge_slave_0: entered promiscuous mode [ 661.385033][T19108] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.392259][T19108] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.399734][T19108] bridge_slave_1: entered allmulticast mode [ 661.407448][T19108] bridge_slave_1: entered promiscuous mode [ 661.469491][T19108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.497348][T19108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.507152][T19110] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.515650][T19110] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.524262][T19110] bridge_slave_0: entered allmulticast mode [ 661.534443][T19110] bridge_slave_0: entered promiscuous mode [ 661.543727][T19110] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.550929][T19110] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.558798][T19110] bridge_slave_1: entered allmulticast mode [ 661.569727][T19110] bridge_slave_1: entered promiscuous mode [ 661.659213][T19110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.673218][T19108] team0: Port device team_slave_0 added [ 661.681647][T19110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.696619][T19108] team0: Port device team_slave_1 added [ 661.779497][T19110] team0: Port device team_slave_0 added [ 661.787677][T19108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.796071][T19108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.822807][T19108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.838042][T19110] team0: Port device team_slave_1 added [ 661.845950][T19108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.853664][T19108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.880066][T19108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.919900][T19065] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 661.930046][T19065] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 661.939452][T19065] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 661.948854][T19065] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 661.955765][T19110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.958568][T19065] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 661.965868][T19110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.996917][T19110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.024117][T19110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.031153][T19110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.058469][T19110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.098376][T19108] hsr_slave_0: entered promiscuous mode [ 662.105181][T19108] hsr_slave_1: entered promiscuous mode [ 662.111559][T19108] debugfs: 'hsr0' already exists in 'hsr' [ 662.117627][T19108] Cannot create hsr debugfs directory [ 662.215597][T19125] wg1 speed is unknown, defaulting to 1000 [ 662.223995][T19110] hsr_slave_0: entered promiscuous mode [ 662.230767][T19110] hsr_slave_1: entered promiscuous mode [ 662.237550][T19110] debugfs: 'hsr0' already exists in 'hsr' [ 662.244182][T19110] Cannot create hsr debugfs directory [ 662.662221][T19125] chnl_net:caif_netlink_parms(): no params data found [ 662.881423][T19125] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.888875][T19125] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.896829][T19125] bridge_slave_0: entered allmulticast mode [ 662.905069][T19125] bridge_slave_0: entered promiscuous mode [ 662.914551][T19125] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.923815][ T5847] Bluetooth: hci10: command tx timeout [ 662.935189][T19125] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.942812][T19125] bridge_slave_1: entered allmulticast mode [ 662.950797][T19125] bridge_slave_1: entered promiscuous mode [ 662.954490][T19065] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 662.967624][T19065] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 662.976559][T19065] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 662.987044][T19065] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 662.996528][T19065] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 663.005146][ T5846] Bluetooth: hci11: command tx timeout [ 663.038251][T19125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.051974][T19125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.099015][T19125] team0: Port device team_slave_0 added [ 663.118561][T19125] team0: Port device team_slave_1 added [ 663.160818][T19125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.170111][T19125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.196487][T19125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.209851][T19125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.218102][T19125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.244581][T19125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.255963][T19134] wg1 speed is unknown, defaulting to 1000 [ 663.358661][T19125] hsr_slave_0: entered promiscuous mode [ 663.365903][T19125] hsr_slave_1: entered promiscuous mode [ 663.373579][T19125] debugfs: 'hsr0' already exists in 'hsr' [ 663.379388][T19125] Cannot create hsr debugfs directory [ 663.416004][ T57] block nbd1: Possible stuck request ffff888024d67000: control (read@0,1024B). Runtime 510 seconds [ 663.427101][ T57] block nbd1: Possible stuck request ffff888024d671c0: control (read@1024,1024B). Runtime 510 seconds [ 663.438482][ T57] block nbd1: Possible stuck request ffff888024d67380: control (read@2048,1024B). Runtime 510 seconds [ 663.450198][ T57] block nbd1: Possible stuck request ffff888024d67540: control (read@3072,1024B). Runtime 510 seconds [ 663.746173][T19134] chnl_net:caif_netlink_parms(): no params data found [ 663.861030][T19134] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.868824][T19134] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.876356][T19134] bridge_slave_0: entered allmulticast mode [ 663.885859][T19134] bridge_slave_0: entered promiscuous mode [ 663.904505][T19134] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.911754][T19134] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.920361][T19134] bridge_slave_1: entered allmulticast mode [ 663.928393][T19134] bridge_slave_1: entered promiscuous mode [ 663.977685][T19134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.990815][T19134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.033475][T19134] team0: Port device team_slave_0 added [ 664.042499][T19134] team0: Port device team_slave_1 added [ 664.043979][T19065] Bluetooth: hci12: command tx timeout [ 664.086862][T19134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.094718][T19134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.121573][T19134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.135774][T19134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.142902][T19134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.169063][T19134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.248650][T19134] hsr_slave_0: entered promiscuous mode [ 664.255433][T19134] hsr_slave_1: entered promiscuous mode [ 664.261763][T19134] debugfs: 'hsr0' already exists in 'hsr' [ 664.267967][T19134] Cannot create hsr debugfs directory [ 665.004024][T19065] Bluetooth: hci10: command tx timeout [ 665.083140][T19065] Bluetooth: hci13: command tx timeout [ 665.092779][T19065] Bluetooth: hci11: command tx timeout [ 666.124905][T19065] Bluetooth: hci12: command tx timeout [ 667.083061][T19065] Bluetooth: hci10: command tx timeout [ 667.163383][T19065] Bluetooth: hci13: command tx timeout [ 667.163392][ T5846] Bluetooth: hci11: command tx timeout [ 668.203351][ T5846] Bluetooth: hci12: command tx timeout [ 669.163153][T19065] Bluetooth: hci10: command tx timeout [ 669.243351][ T5846] Bluetooth: hci11: command tx timeout [ 669.244937][T19065] Bluetooth: hci13: command tx timeout [ 670.283165][T19065] Bluetooth: hci12: command tx timeout [ 671.322893][T19065] Bluetooth: hci13: command tx timeout [ 693.483286][ T57] block nbd1: Possible stuck request ffff888024d67000: control (read@0,1024B). Runtime 540 seconds [ 693.494100][ T57] block nbd1: Possible stuck request ffff888024d671c0: control (read@1024,1024B). Runtime 540 seconds [ 693.505116][ T57] block nbd1: Possible stuck request ffff888024d67380: control (read@2048,1024B). Runtime 540 seconds [ 693.516178][ T57] block nbd1: Possible stuck request ffff888024d67540: control (read@3072,1024B). Runtime 540 seconds [ 704.527024][T19065] Bluetooth: hci2: command 0x0406 tx timeout [ 707.277343][T19065] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 707.285947][T19065] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 707.295222][T19065] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 707.305310][T19065] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 707.313397][T19065] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 707.346068][T19143] wg1 speed is unknown, defaulting to 1000 [ 707.498755][T19143] chnl_net:caif_netlink_parms(): no params data found [ 707.592149][T19143] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.599912][T19143] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.607767][T19143] bridge_slave_0: entered allmulticast mode [ 707.616629][T19143] bridge_slave_0: entered promiscuous mode [ 707.624906][T19143] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.632139][T19143] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.639834][T19143] bridge_slave_1: entered allmulticast mode [ 707.647410][T19143] bridge_slave_1: entered promiscuous mode [ 707.688483][T19143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.700884][T19143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.741516][T19143] team0: Port device team_slave_0 added [ 707.750545][T19143] team0: Port device team_slave_1 added [ 707.781476][T19143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.788703][T19143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.815433][T19143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.828066][T19143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.835349][T19143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.862189][T19143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.915337][T19143] hsr_slave_0: entered promiscuous mode [ 707.922009][T19143] hsr_slave_1: entered promiscuous mode [ 707.928825][T19143] debugfs: 'hsr0' already exists in 'hsr' [ 707.934640][T19143] Cannot create hsr debugfs directory [ 709.402900][T19065] Bluetooth: hci14: command tx timeout [ 709.642929][T19065] Bluetooth: hci1: command 0x0406 tx timeout [ 711.482884][ T5846] Bluetooth: hci14: command tx timeout [ 713.562858][ T5846] Bluetooth: hci14: command tx timeout [ 715.642834][ T5846] Bluetooth: hci14: command tx timeout [ 721.444631][T19065] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 721.455258][T19065] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 721.455289][T19064] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 721.464459][T19065] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 721.475978][T19064] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 721.480529][T19065] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 721.488600][T19064] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 721.493764][T19065] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 721.501910][T19064] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 721.515393][T19064] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 721.550617][T19153] wg1 speed is unknown, defaulting to 1000 [ 721.595801][T19155] wg1 speed is unknown, defaulting to 1000 [ 721.820138][T19153] chnl_net:caif_netlink_parms(): no params data found [ 721.896894][T19155] chnl_net:caif_netlink_parms(): no params data found [ 721.973210][T19153] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.980445][T19153] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.988381][T19153] bridge_slave_0: entered allmulticast mode [ 721.996013][T19153] bridge_slave_0: entered promiscuous mode [ 722.009775][T19153] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.017171][T19153] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.024974][T19153] bridge_slave_1: entered allmulticast mode [ 722.032428][T19153] bridge_slave_1: entered promiscuous mode [ 722.117040][T19153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.157846][T19153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.187001][T19155] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.195000][T19155] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.208975][T19155] bridge_slave_0: entered allmulticast mode [ 722.217329][T19155] bridge_slave_0: entered promiscuous mode [ 722.245298][T19155] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.254552][T19155] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.261978][T19155] bridge_slave_1: entered allmulticast mode [ 722.270307][T19155] bridge_slave_1: entered promiscuous mode [ 722.281093][T19153] team0: Port device team_slave_0 added [ 722.310568][T19153] team0: Port device team_slave_1 added [ 722.358954][T19155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.381492][T19155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.441547][ T5847] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 722.453660][ T5847] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 722.459522][T19153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.469166][ T5847] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 722.469210][T19153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.479678][ T5847] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 722.503299][T19153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.511590][ T5847] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 722.526117][T19155] team0: Port device team_slave_0 added [ 722.543592][T19155] team0: Port device team_slave_1 added [ 722.550136][T19153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.557756][T19153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.584306][T19153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.635500][T19155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.642487][T19155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.669938][T19155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.685487][T19155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.692482][T19155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.719222][T19155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.781927][T19153] hsr_slave_0: entered promiscuous mode [ 722.788769][T19153] hsr_slave_1: entered promiscuous mode [ 722.795882][T19153] debugfs: 'hsr0' already exists in 'hsr' [ 722.801627][T19153] Cannot create hsr debugfs directory [ 722.807698][T19170] wg1 speed is unknown, defaulting to 1000 [ 722.899475][T19155] hsr_slave_0: entered promiscuous mode [ 722.907138][T19155] hsr_slave_1: entered promiscuous mode [ 722.914527][T19155] debugfs: 'hsr0' already exists in 'hsr' [ 722.920275][T19155] Cannot create hsr debugfs directory [ 723.372487][T19170] chnl_net:caif_netlink_parms(): no params data found [ 723.448139][ T5834] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 723.458606][ T5834] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 723.470645][ T5834] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 723.480049][ T5834] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 723.488516][ T5834] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 723.553343][T19170] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.562482][T19170] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.570763][T19170] bridge_slave_0: entered allmulticast mode [ 723.577238][T19172] Bluetooth: hci15: command tx timeout [ 723.578102][ T57] block nbd1: Possible stuck request ffff888024d67000: control (read@0,1024B). Runtime 570 seconds [ 723.585594][T19172] Bluetooth: hci16: command tx timeout [ 723.601412][ T57] block nbd1: Possible stuck request ffff888024d671c0: control (read@1024,1024B). Runtime 570 seconds [ 723.611170][T19170] bridge_slave_0: entered promiscuous mode [ 723.612721][ T57] block nbd1: Possible stuck request ffff888024d67380: control (read@2048,1024B). Runtime 570 seconds [ 723.622426][T19170] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.631217][ T57] block nbd1: Possible stuck request ffff888024d67540: control (read@3072,1024B). Runtime 570 seconds [ 723.636991][T19170] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.656389][T19170] bridge_slave_1: entered allmulticast mode [ 723.664972][T19170] bridge_slave_1: entered promiscuous mode [ 723.717750][T19170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.731751][T19170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.775435][T19170] team0: Port device team_slave_0 added [ 723.791365][T19170] team0: Port device team_slave_1 added [ 723.826197][T19177] wg1 speed is unknown, defaulting to 1000 [ 723.855522][T19170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.863383][T19170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.890404][T19170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.932973][T19170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.939978][T19170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.966395][T19170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.072179][T19170] hsr_slave_0: entered promiscuous mode [ 724.079557][T19170] hsr_slave_1: entered promiscuous mode [ 724.086629][T19170] debugfs: 'hsr0' already exists in 'hsr' [ 724.093185][T19170] Cannot create hsr debugfs directory [ 724.348284][T19177] chnl_net:caif_netlink_parms(): no params data found [ 724.479634][T19177] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.487157][T19177] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.494556][T19177] bridge_slave_0: entered allmulticast mode [ 724.502982][T19177] bridge_slave_0: entered promiscuous mode [ 724.521375][T19177] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.534612][T19177] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.541993][T19177] bridge_slave_1: entered allmulticast mode [ 724.550461][T19177] bridge_slave_1: entered promiscuous mode [ 724.594192][T19177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.603897][T19172] Bluetooth: hci17: command tx timeout [ 724.614214][T19177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.661834][T19177] team0: Port device team_slave_0 added [ 724.670441][T19177] team0: Port device team_slave_1 added [ 724.706346][T19177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.714169][T19177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.740376][T19177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.753999][T19177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.761009][T19177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.787839][T19177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.845845][T19177] hsr_slave_0: entered promiscuous mode [ 724.853254][T19177] hsr_slave_1: entered promiscuous mode [ 724.859860][T19177] debugfs: 'hsr0' already exists in 'hsr' [ 724.866131][T19177] Cannot create hsr debugfs directory [ 725.003077][T19172] Bluetooth: hci6: command 0x0406 tx timeout [ 725.009294][ T5834] Bluetooth: hci8: command 0x0406 tx timeout [ 725.018227][ T5834] Bluetooth: hci7: command 0x0406 tx timeout [ 725.024429][T19172] Bluetooth: hci3: command 0x0406 tx timeout [ 725.563005][T19064] Bluetooth: hci18: command tx timeout [ 725.642956][T19065] Bluetooth: hci15: command tx timeout [ 725.645047][T19064] Bluetooth: hci16: command tx timeout [ 726.683031][T19064] Bluetooth: hci17: command tx timeout [ 727.643054][T19064] Bluetooth: hci18: command tx timeout [ 727.722883][T19064] Bluetooth: hci15: command tx timeout [ 727.732835][T19064] Bluetooth: hci16: command tx timeout [ 728.762984][T19064] Bluetooth: hci17: command tx timeout [ 729.722956][T19064] Bluetooth: hci18: command tx timeout [ 729.802885][T19064] Bluetooth: hci16: command tx timeout [ 729.803033][T19065] Bluetooth: hci15: command tx timeout [ 730.843042][T19065] Bluetooth: hci17: command tx timeout [ 731.243062][ T31] INFO: task syz.3.3274:19002 blocked for more than 143 seconds. [ 731.250881][ T31] Not tainted syzkaller #0 [ 731.256131][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 731.265511][ T31] task:syz.3.3274 state:D stack:27016 pid:19002 tgid:18994 ppid:16919 task_flags:0x400040 flags:0x00080002 [ 731.277623][ T31] Call Trace: [ 731.280922][ T31] [ 731.284131][ T31] __schedule+0x1798/0x4cc0 [ 731.288662][ T31] ? __lock_acquire+0xab9/0xd20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 731.293669][ T31] ? __lock_acquire+0xab9/0xd20 [ 731.298697][ T31] ? __pfx___schedule+0x10/0x10 [ 731.304601][ T31] ? schedule+0x91/0x360 [ 731.309091][ T31] schedule+0x165/0x360 [ 731.313479][ T31] schedule_preempt_disabled+0x13/0x30 [ 731.319016][ T31] __mutex_lock+0x7e6/0x1350 [ 731.323800][ T31] ? __mutex_lock+0x5bb/0x1350 [ 731.328614][ T31] ? genl_rcv_msg+0x10d/0x790 [ 731.333509][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 731.338613][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 731.344453][ T31] ? radix_tree_lookup+0x240/0x290 [ 731.349709][ T31] genl_rcv_msg+0x10d/0x790 [ 731.354512][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 731.359595][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 731.365613][ T31] ? __asan_memcpy+0x40/0x70 [ 731.370275][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 731.375978][ T31] netlink_rcv_skb+0x208/0x470 [ 731.380801][ T31] ? __lock_acquire+0xab9/0xd20 [ 731.385850][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 731.390937][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 731.396666][ T31] ? down_read+0x1ad/0x2e0 [ 731.401156][ T31] genl_rcv+0x28/0x40 [ 731.405464][ T31] netlink_unicast+0x82f/0x9e0 [ 731.410293][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 731.415969][ T31] ? netlink_sendmsg+0x642/0xb30 [ 731.420947][ T31] ? skb_put+0x11b/0x210 [ 731.425398][ T31] netlink_sendmsg+0x805/0xb30 [ 731.430224][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 731.435704][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 731.440703][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 731.446205][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 731.451552][ T31] __sock_sendmsg+0x21c/0x270 [ 731.456536][ T31] __sys_sendto+0x3bd/0x520 [ 731.461139][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 731.467105][ T31] ? __lock_acquire+0xab9/0xd20 [ 731.472059][ T31] ? fd_install+0x97/0x540 [ 731.476787][ T31] ? fd_install+0x30d/0x540 [ 731.481361][ T31] __x64_sys_sendto+0xde/0x100 [ 731.507933][ T31] do_syscall_64+0xfa/0xfa0 [ 731.523033][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 731.528325][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.543084][ T31] ? clear_bhb_loop+0x60/0xb0 [ 731.547871][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.553887][ T31] RIP: 0033:0x7f8697590e5c [ 731.558342][ T31] RSP: 002b:00007f869840dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 731.573812][ T31] RAX: ffffffffffffffda RBX: 00007f869840dfc0 RCX: 00007f8697590e5c [ 731.581873][ T31] RDX: 0000000000000020 RSI: 00007f869840e010 RDI: 0000000000000049 [ 731.590159][ T31] RBP: 0000000000000000 R08: 00007f869840df14 R09: 000000000000000c [ 731.598302][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000049 [ 731.606502][ T31] R13: 00007f869840df68 R14: 00007f869840e010 R15: 0000000000000000 [ 731.614801][ T31] [ 731.617860][ T31] INFO: task syz.1.3275:18998 blocked for more than 143 seconds. [ 731.625643][ T31] Not tainted syzkaller #0 [ 731.630580][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 731.639443][ T31] task:syz.1.3275 state:D stack:26024 pid:18998 tgid:18997 ppid:17488 task_flags:0x480140 flags:0x00080002 [ 731.652146][ T31] Call Trace: [ 731.655619][ T31] [ 731.658580][ T31] __schedule+0x1798/0x4cc0 [ 731.663168][ T31] ? __lock_acquire+0xab9/0xd20 [ 731.668579][ T31] ? __lock_acquire+0xab9/0xd20 [ 731.673620][ T31] ? __pfx___schedule+0x10/0x10 [ 731.678528][ T31] ? schedule+0x91/0x360 [ 731.682877][ T31] schedule+0x165/0x360 [ 731.687078][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 731.692738][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 731.698831][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 731.705108][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 731.711040][ T31] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 731.717458][ T31] nbd_set_size+0x47e/0x6a0 [ 731.721999][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 731.727515][ T31] ? nla_memcpy+0x5b/0xc0 [ 731.731910][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 731.737015][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 731.742493][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 731.748568][ T31] ? bpf_lsm_capable+0x9/0x20 [ 731.753375][ T31] ? security_capable+0x7e/0x2e0 [ 731.758329][ T31] ? radix_tree_lookup+0x240/0x290 [ 731.763544][ T31] nbd_genl_reconfigure+0x414/0x1a50 [ 731.768898][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 731.775572][ T31] ? rcu_is_watching+0x15/0xb0 [ 731.780450][ T31] ? __nla_parse+0x40/0x60 [ 731.784992][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 731.791347][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 731.797058][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 731.803545][ T31] ? stack_trace_save+0x9c/0xe0 [ 731.805111][T19065] Bluetooth: hci18: command tx timeout [ 731.808444][ T31] genl_rcv_msg+0x60e/0x790 [ 731.818749][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 731.823920][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 731.829737][ T31] netlink_rcv_skb+0x208/0x470 [ 731.834763][ T31] ? __lock_acquire+0xab9/0xd20 [ 731.839630][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 731.844765][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 731.850095][ T31] ? down_read+0x1ad/0x2e0 [ 731.854781][ T31] genl_rcv+0x28/0x40 [ 731.858794][ T31] netlink_unicast+0x82f/0x9e0 [ 731.863664][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 731.869003][ T31] ? netlink_sendmsg+0x642/0xb30 [ 731.874735][ T31] netlink_sendmsg+0x805/0xb30 [ 731.879590][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 731.887813][ T31] ? __lock_acquire+0xab9/0xd20 [ 731.893258][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 731.898339][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 731.903782][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 731.909108][ T31] __sock_sendmsg+0x21c/0x270 [ 731.913947][ T31] ____sys_sendmsg+0x505/0x830 [ 731.918739][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 731.924095][ T31] ? import_iovec+0x74/0xa0 [ 731.928712][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 731.934020][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 731.939409][ T31] ? __fget_files+0x2a/0x420 [ 731.944221][ T31] ? __fget_files+0x3a0/0x420 [ 731.948936][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 731.954476][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 731.959999][ T31] ? do_syscall_64+0xbe/0xfa0 [ 731.965141][ T31] do_syscall_64+0xfa/0xfa0 [ 731.969671][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 731.975818][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.981946][ T31] ? clear_bhb_loop+0x60/0xb0 [ 731.986722][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.992943][ T31] RIP: 0033:0x7f19bbd8efc9 [ 731.997405][ T31] RSP: 002b:00007f19bcbed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 732.006044][ T31] RAX: ffffffffffffffda RBX: 00007f19bbfe5fa0 RCX: 00007f19bbd8efc9 [ 732.014188][ T31] RDX: 0000000000004010 RSI: 0000200000001040 RDI: 0000000000000005 [ 732.022178][ T31] RBP: 00007f19bbe11f91 R08: 0000000000000000 R09: 0000000000000000 [ 732.030248][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.038354][ T31] R13: 00007f19bbfe6038 R14: 00007f19bbfe5fa0 R15: 00007ffeb21ff8a8 [ 732.047075][ T31] [ 732.050196][ T31] INFO: task syz.2.3282:19018 blocked for more than 144 seconds. [ 732.058337][ T31] Not tainted syzkaller #0 [ 732.063383][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 732.072074][ T31] task:syz.2.3282 state:D stack:24024 pid:19018 tgid:19017 ppid:18006 task_flags:0x400140 flags:0x00080002 [ 732.084701][ T31] Call Trace: [ 732.088028][ T31] [ 732.090974][ T31] __schedule+0x1798/0x4cc0 [ 732.095565][ T31] ? __lock_acquire+0xab9/0xd20 [ 732.100450][ T31] ? __lock_acquire+0xab9/0xd20 [ 732.105543][ T31] ? __pfx___schedule+0x10/0x10 [ 732.110456][ T31] ? schedule+0x91/0x360 [ 732.114760][ T31] schedule+0x165/0x360 [ 732.118944][ T31] schedule_preempt_disabled+0x13/0x30 [ 732.124628][ T31] __mutex_lock+0x7e6/0x1350 [ 732.129245][ T31] ? __mutex_lock+0x5bb/0x1350 [ 732.134095][ T31] ? genl_rcv_msg+0x10d/0x790 [ 732.138794][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 732.143974][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 732.149394][ T31] ? radix_tree_lookup+0x240/0x290 [ 732.154616][ T31] genl_rcv_msg+0x10d/0x790 [ 732.159147][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 732.164431][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 732.169513][ T31] ? __asan_memcpy+0x40/0x70 [ 732.174491][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 732.180552][ T31] netlink_rcv_skb+0x208/0x470 [ 732.185536][ T31] ? __lock_acquire+0xab9/0xd20 [ 732.190451][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 732.195545][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 732.200885][ T31] ? down_read+0x1ad/0x2e0 [ 732.205628][ T31] genl_rcv+0x28/0x40 [ 732.209679][ T31] netlink_unicast+0x82f/0x9e0 [ 732.214638][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 732.219965][ T31] ? netlink_sendmsg+0x642/0xb30 [ 732.225095][ T31] ? skb_put+0x11b/0x210 [ 732.229963][ T31] netlink_sendmsg+0x805/0xb30 [ 732.234971][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 732.240286][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 732.245443][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 732.250762][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 732.256380][ T31] __sock_sendmsg+0x21c/0x270 [ 732.261197][ T31] __sys_sendto+0x3bd/0x520 [ 732.265984][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 732.271070][ T31] ? count_memcg_event_mm+0x21/0x260 [ 732.276679][ T31] ? exc_page_fault+0x82/0x100 [ 732.282054][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 732.288403][ T31] __x64_sys_sendto+0xde/0x100 [ 732.293355][ T31] do_syscall_64+0xfa/0xfa0 [ 732.297934][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 732.303335][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.309435][ T31] ? clear_bhb_loop+0x60/0xb0 [ 732.314306][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.320232][ T31] RIP: 0033:0x7fdd8bf90e5c [ 732.324885][ T31] RSP: 002b:00007fdd8cf0bec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 732.333469][ T31] RAX: ffffffffffffffda RBX: 00007fdd8cf0bfc0 RCX: 00007fdd8bf90e5c [ 732.341491][ T31] RDX: 0000000000000020 RSI: 00007fdd8cf0c010 RDI: 0000000000000007 [ 732.349635][ T31] RBP: 0000000000000000 R08: 00007fdd8cf0bf14 R09: 000000000000000c [ 732.357709][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 732.366161][ T31] R13: 00007fdd8cf0bf68 R14: 00007fdd8cf0c010 R15: 0000000000000000 [ 732.374446][ T31] [ 732.377509][ T31] INFO: task syz-executor:19028 blocked for more than 144 seconds. [ 732.386194][ T31] Not tainted syzkaller #0 [ 732.391176][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 732.400407][ T31] task:syz-executor state:D stack:22280 pid:19028 tgid:19028 ppid:1 task_flags:0x400140 flags:0x00080002 [ 732.412751][ T31] Call Trace: [ 732.416073][ T31] [ 732.419065][ T31] __schedule+0x1798/0x4cc0 [ 732.423671][ T31] ? __lock_acquire+0xab9/0xd20 [ 732.428540][ T31] ? __lock_acquire+0xab9/0xd20 [ 732.433511][ T31] ? __pfx___schedule+0x10/0x10 [ 732.438413][ T31] ? schedule+0x91/0x360 [ 732.443425][ T31] schedule+0x165/0x360 [ 732.447731][ T31] schedule_preempt_disabled+0x13/0x30 [ 732.453275][ T31] __mutex_lock+0x7e6/0x1350 [ 732.457907][ T31] ? __mutex_lock+0x5bb/0x1350 [ 732.462816][ T31] ? genl_rcv_msg+0x10d/0x790 [ 732.467544][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 732.472686][ T31] ? stack_trace_save+0x9c/0xe0 [ 732.477576][ T31] ? radix_tree_lookup+0x240/0x290 [ 732.482971][ T31] genl_rcv_msg+0x10d/0x790 [ 732.487990][ T31] ? __lock_acquire+0xab9/0xd20 [ 732.493229][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 732.498392][ T31] netlink_rcv_skb+0x208/0x470 [ 732.503390][ T31] ? __lock_acquire+0xab9/0xd20 [ 732.508288][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 732.513532][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 732.518911][ T31] ? down_read+0x1ad/0x2e0 [ 732.523917][ T31] genl_rcv+0x28/0x40 [ 732.527945][ T31] netlink_unicast+0x82f/0x9e0 [ 732.532888][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 732.538407][ T31] ? netlink_sendmsg+0x642/0xb30 [ 732.543591][ T31] ? skb_put+0x11b/0x210 [ 732.547896][ T31] netlink_sendmsg+0x805/0xb30 [ 732.552905][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 732.558230][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 732.563367][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 732.568677][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 732.574136][ T31] __sock_sendmsg+0x21c/0x270 [ 732.578840][ T31] __sys_sendto+0x3bd/0x520 [ 732.583499][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 732.589201][ T31] ? __lock_acquire+0xab9/0xd20 [ 732.594254][ T31] ? fd_install+0x97/0x540 [ 732.598729][ T31] ? fd_install+0x30d/0x540 [ 732.603622][ T31] __x64_sys_sendto+0xde/0x100 [ 732.608445][ T31] do_syscall_64+0xfa/0xfa0 [ 732.613153][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.619264][ T31] ? asm_sysvec_call_function_single+0x1a/0x20 [ 732.625581][ T31] ? clear_bhb_loop+0x60/0xb0 [ 732.630284][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.636298][ T31] RIP: 0033:0x7f02d3b90e5c [ 732.640729][ T31] RSP: 002b:00007fff6da66cc0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 732.649322][ T31] RAX: ffffffffffffffda RBX: 00007f02d4914620 RCX: 00007f02d3b90e5c [ 732.657724][ T31] RDX: 0000000000000020 RSI: 00007f02d4914670 RDI: 0000000000000005 [ 732.665998][ T31] RBP: 0000000000000000 R08: 00007fff6da66d14 R09: 000000000000000c [ 732.674124][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 732.682123][ T31] R13: 00007fff6da66d68 R14: 00007f02d4914670 R15: 0000000000000000 [ 732.690313][ T31] [ 732.693913][ T31] INFO: task syz.0.3293:19057 blocked for more than 144 seconds. [ 732.701675][ T31] Not tainted syzkaller #0 [ 732.707041][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 732.716028][ T31] task:syz.0.3293 state:D stack:27112 pid:19057 tgid:19056 ppid:18357 task_flags:0x400140 flags:0x00080002 [ 732.728186][ T31] Call Trace: [ 732.731501][ T31] [ 732.734789][ T31] __schedule+0x1798/0x4cc0 [ 732.739379][ T31] ? __lock_acquire+0xab9/0xd20 [ 732.744387][ T31] ? __lock_acquire+0xab9/0xd20 [ 732.749251][ T31] ? __pfx___schedule+0x10/0x10 [ 732.754161][ T31] ? schedule+0x91/0x360 [ 732.758419][ T31] schedule+0x165/0x360 [ 732.762996][ T31] schedule_preempt_disabled+0x13/0x30 [ 732.768498][ T31] __mutex_lock+0x7e6/0x1350 [ 732.773235][ T31] ? __mutex_lock+0x5bb/0x1350 [ 732.778045][ T31] ? genl_rcv_msg+0x10d/0x790 [ 732.782798][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 732.787872][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 732.793285][ T31] ? radix_tree_lookup+0x240/0x290 [ 732.799161][ T31] genl_rcv_msg+0x10d/0x790 [ 732.803898][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 732.808967][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 732.814192][ T31] ? __asan_memcpy+0x40/0x70 [ 732.818801][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 732.824216][ T31] netlink_rcv_skb+0x208/0x470 [ 732.828998][ T31] ? __lock_acquire+0xab9/0xd20 [ 732.833904][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 732.838939][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 732.844648][ T31] ? down_read+0x1ad/0x2e0 [ 732.849479][ T31] genl_rcv+0x28/0x40 [ 732.853669][ T31] netlink_unicast+0x82f/0x9e0 [ 732.858505][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 732.863895][ T31] ? netlink_sendmsg+0x642/0xb30 [ 732.868855][ T31] ? skb_put+0x11b/0x210 [ 732.873280][ T31] netlink_sendmsg+0x805/0xb30 [ 732.878170][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 732.883519][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 732.888482][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 732.893851][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 732.899744][ T31] __sock_sendmsg+0x21c/0x270 [ 732.904505][ T31] __sys_sendto+0x3bd/0x520 [ 732.909035][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 732.914152][ T31] ? count_memcg_event_mm+0x21/0x260 [ 732.919506][ T31] ? exc_page_fault+0x82/0x100 [ 732.924719][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 732.930057][ T31] __x64_sys_sendto+0xde/0x100 [ 732.935033][ T31] do_syscall_64+0xfa/0xfa0 [ 732.939574][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 732.944966][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.951141][ T31] ? clear_bhb_loop+0x60/0xb0 [ 732.955894][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.961812][ T31] RIP: 0033:0x7fbc2f390e5c [ 732.966299][ T31] RSP: 002b:00007fbc30184ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 732.974956][ T31] RAX: ffffffffffffffda RBX: 00007fbc30184fc0 RCX: 00007fbc2f390e5c [ 732.983015][ T31] RDX: 0000000000000020 RSI: 00007fbc30185010 RDI: 0000000000000004 [ 732.991019][ T31] RBP: 0000000000000000 R08: 00007fbc30184f14 R09: 000000000000000c [ 732.999635][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 733.008282][ T31] R13: 00007fbc30184f68 R14: 00007fbc30185010 R15: 0000000000000000 [ 733.016381][ T31] [ 733.019480][ T31] [ 733.019480][ T31] Showing all locks held in the system: [ 733.027496][ T31] 1 lock held by khungtaskd/31: [ 733.032458][ T31] #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 733.042419][ T31] 2 locks held by getty/5586: [ 733.047382][ T31] #0: ffff88814d4da0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 733.057223][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 733.067509][ T31] 1 lock held by udevd/5849: [ 733.072161][ T31] #0: ffff888024d03358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 733.081527][ T31] 2 locks held by syz.3.3274/19002: [ 733.087095][ T31] #0: ffffffff8f330df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 733.095436][ T31] #1: ffffffff8f330c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 733.105010][ T31] 6 locks held by syz.1.3275/18998: [ 733.110242][ T31] #0: ffffffff8f330df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 733.118534][ T31] #1: ffffffff8f330c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 733.127590][ T31] #2: ffff888024cfa270 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x375/0x1a50 [ 733.138055][ T31] #3: ffff888142fec1e8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 733.147546][ T31] #4: ffff888142febb88 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 733.159864][ T31] #5: ffff888142febbc0 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 733.173031][ T31] 2 locks held by syz.2.3282/19018: [ 733.178451][ T31] #0: ffffffff8f330df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 733.186815][ T31] #1: ffffffff8f330c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 733.195910][ T31] 2 locks held by syz-executor/19028: [ 733.201303][ T31] #0: ffffffff8f330df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 733.210015][ T31] #1: ffffffff8f330c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 733.219132][ T31] 2 locks held by syz.0.3293/19057: [ 733.224385][ T31] #0: ffffffff8f330df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 733.232675][ T31] #1: ffffffff8f330c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 733.241712][ T31] 2 locks held by syz-executor/19061: [ 733.247328][ T31] #0: ffffffff8f330df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 733.255621][ T31] #1: ffffffff8f330c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 733.264932][ T31] 2 locks held by syz-executor/19063: [ 733.270329][ T31] #0: ffffffff8f330df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 733.278591][ T31] #1: ffffffff8f330c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 733.287666][ T31] 2 locks held by syz-executor/19080: [ 733.293120][ T31] #0: ffffffff8f330df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 733.301375][ T31] #1: ffffffff8f330c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 733.310956][ T31] 2 locks held by syz-executor/19089: [ 733.316428][ T31] #0: ffffffff8f330df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 733.324937][ T31] #1: ffffffff8f330c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 733.334008][ T31] 2 locks held by syz-executor/19098: [ 733.339417][ T31] #0: ffffffff8f330df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 733.347668][ T31] #1: ffffffff8f330c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 733.356730][ T31] 2 locks held by syz-executor/19108: [ 733.362105][ T31] #0: ffffffff8f330df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 733.370382][ T31] #1: ffffffff8f330c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 733.379563][ T31] 2 locks held by syz-executor/19110: [ 733.385031][ T31] #0: ffffffff8f330df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 733.393319][ T31] #1: ffffffff8f330c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 733.402354][ T31] 2 locks held by syz-executor/19125: [ 733.408416][ T31] #0: ffffffff8f330df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 733.416754][ T31] #1: ffffffff8f330c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 733.425945][ T31] 2 locks held by syz-executor/19134: [ 733.431343][ T31] #0: ffffffff8f330df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 733.439628][ T31] #1: ffffffff8f330c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 733.448716][ T31] 2 locks held by syz-executor/19143: [ 733.454221][ T31] #0: ffffffff8f330df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 733.462559][ T31] #1: ffffffff8f330c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 733.471610][ T31] 2 locks held by syz-executor/19153: [ 733.477086][ T31] #0: ffffffff8f330df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 733.485834][ T31] #1: ffffffff8f330c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 733.494901][ T31] 2 locks held by syz-executor/19155: [ 733.500393][ T31] #0: ffffffff8f330df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 733.508767][ T31] #1: ffffffff8f330c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 733.518419][ T31] 2 locks held by syz-executor/19170: [ 733.523918][ T31] #0: ffffffff8f330df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 733.532123][ T31] #1: ffffffff8f330c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 733.541219][ T31] 2 locks held by syz-executor/19177: [ 733.546691][ T31] #0: ffffffff8f330df0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 733.555103][ T31] #1: ffffffff8f330c08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 733.564377][ T31] [ 733.566730][ T31] ============================================= [ 733.566730][ T31] [ 733.575815][ T31] NMI backtrace for cpu 0 [ 733.575830][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 733.575846][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 733.575856][ T31] Call Trace: [ 733.575861][ T31] [ 733.575868][ T31] dump_stack_lvl+0x189/0x250 [ 733.575895][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 733.575917][ T31] ? __pfx__printk+0x10/0x10 [ 733.575941][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 733.575968][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 733.575994][ T31] ? __pfx__printk+0x10/0x10 [ 733.576013][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 733.576040][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 733.576066][ T31] watchdog+0xf60/0xfa0 [ 733.576085][ T31] ? watchdog+0x1e2/0xfa0 [ 733.576104][ T31] kthread+0x711/0x8a0 [ 733.576126][ T31] ? __pfx_watchdog+0x10/0x10 [ 733.576141][ T31] ? __pfx_kthread+0x10/0x10 [ 733.576162][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 733.576179][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 733.576196][ T31] ? __pfx_kthread+0x10/0x10 [ 733.576217][ T31] ret_from_fork+0x4bc/0x870 [ 733.576235][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 733.576256][ T31] ? __switch_to_asm+0x39/0x70 [ 733.576268][ T31] ? __switch_to_asm+0x33/0x70 [ 733.576279][ T31] ? __pfx_kthread+0x10/0x10 [ 733.576300][ T31] ret_from_fork_asm+0x1a/0x30 [ 733.576326][ T31] [ 733.576331][ T31] Sending NMI from CPU 0 to CPUs 1: [ 733.724108][ C1] NMI backtrace for cpu 1 [ 733.724127][ C1] CPU: 1 UID: 0 PID: 1090 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 733.724148][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 733.724161][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 733.724196][ C1] RIP: 0010:lock_release+0xaf/0x3e0 [ 733.724216][ C1] Code: 0b 00 00 00 0f 85 1e 02 00 00 49 81 3e 40 b3 31 93 0f 84 11 02 00 00 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 48 8b 5c 24 20 48 c7 c7 e4 fe 71 8d e8 e4 a8 a8 09 65 ff 05 ed dc d0 10 c7 44 [ 733.724232][ C1] RSP: 0018:ffffc90003a8f7f8 EFLAGS: 00000206 [ 733.724247][ C1] RAX: 0000000000000000 RBX: 0000000000000206 RCX: 580dee3eee083500 [ 733.724260][ C1] RDX: 0000000000000000 RSI: ffffffff8bbf0440 RDI: ffffffff8bbf0400 [ 733.724272][ C1] RBP: ffffc90003a8f9b0 R08: 0000000000000000 R09: ffffffff8b0f6040 [ 733.724287][ C1] R10: dffffc0000000000 R11: ffffed10060d2917 R12: ffff88802fb3cc80 [ 733.724301][ C1] R13: ffffffff8b0f6040 R14: ffffffff8df3d2e0 R15: ffff888026533c80 [ 733.724315][ C1] FS: 0000000000000000(0000) GS:ffff888126240000(0000) knlGS:0000000000000000 [ 733.724330][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 733.724342][ C1] CR2: 000055bcd8c16000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 733.724358][ C1] Call Trace: [ 733.724365][ C1] [ 733.724379][ C1] batadv_iv_ogm_schedule+0x715/0xf00 [ 733.724414][ C1] ? batadv_iv_ogm_schedule+0x430/0xf00 [ 733.724435][ C1] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 733.724457][ C1] ? __lock_acquire+0xab9/0xd20 [ 733.724481][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x6c6/0x7e0 [ 733.724509][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 733.724528][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 733.724548][ C1] process_scheduled_works+0xae1/0x17b0 [ 733.724586][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 733.724614][ C1] worker_thread+0x8a0/0xda0 [ 733.724649][ C1] kthread+0x711/0x8a0 [ 733.724673][ C1] ? __pfx_worker_thread+0x10/0x10 [ 733.724696][ C1] ? __pfx_kthread+0x10/0x10 [ 733.724720][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 733.724741][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 733.724762][ C1] ? __pfx_kthread+0x10/0x10 [ 733.724789][ C1] ret_from_fork+0x4bc/0x870 [ 733.724809][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 733.724831][ C1] ? __switch_to_asm+0x39/0x70 [ 733.724846][ C1] ? __switch_to_asm+0x33/0x70 [ 733.724860][ C1] ? __pfx_kthread+0x10/0x10 [ 733.724883][ C1] ret_from_fork_asm+0x1a/0x30 [ 733.724911][ C1]