last executing test programs: 19.722150553s ago: executing program 0 (id=1619): unshare(0x22020400) (async) unshare(0x22020400) unshare(0x2c060000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8001, 0x5, @empty, 0xfffffff8}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) (async) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r2, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) (async) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r4, &(0x7f0000000180)="af", 0x1, 0x840, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x3c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000a0000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e140589a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e140589a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000540)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xda1}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000580)="3e6ad33aa8b9fbec67480362a67ef8cb1555a2e105f1988e09e07eb7f6dec28554051c0a42c86df46611c5abc08e53ca4a5642777b0115359787bd32e31c0d2b1829e7654f462043beff95332804e0464fe67592d2602d25cca94199e2c083743ef63862a8", 0x65}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000000700000000300000000000000029000000360000006703000000000000c20400000002c910fe880000000000000000000000000001280000000000000029000000360000002c01000000000000000100000100040109000000000000001400000000000000290000000b0000000000e54da115e0145ac59b44f132b100020000000010010000000000002900000037000000881e0000000000000401090502000200010000dceff7467c8b23afb6d2522558dc6c67ad99f3e7267c8cc626e5ac4e4248da8a476dc52966b1f07e974b64368bba1c8a674740eca31738974b495015adaaead78ac73e78b1fd1e5b9f3bc0a1c3c81a3be0b01c0d90418b20bedcb5acf45670262fdd0088b72516bd593e260d569d4ac9e7aec76d5df1fedf6846a7e94014a29d8e3527526735393186dda3c778e59cc2d932453c6d4a72cb5353d2814b61f47d352b2f2e15600cfa1576131b183df3b4b83b653e48e7e53ac5acac9b57635b022a81bb07b6dbcbc8f92304d379e4b97b59f0138278808c8f215e0dc97cc20400000459050200090000000000001400000000000000290000004300000000040000000000001400000000000000290000000800000015000000000000005800000000000000290000003700001107000000000000010100040106c910ff010000000000000000000000000001040104c9100000000000000000000000000000000105020001080134c204000000060b029c6100001400000000000000290000000b000000fffffffa00000000"], 0x238}, 0x4000) (async) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000540)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xda1}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000580)="3e6ad33aa8b9fbec67480362a67ef8cb1555a2e105f1988e09e07eb7f6dec28554051c0a42c86df46611c5abc08e53ca4a5642777b0115359787bd32e31c0d2b1829e7654f462043beff95332804e0464fe67592d2602d25cca94199e2c083743ef63862a8", 0x65}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000000700000000300000000000000029000000360000006703000000000000c20400000002c910fe880000000000000000000000000001280000000000000029000000360000002c01000000000000000100000100040109000000000000001400000000000000290000000b0000000000e54da115e0145ac59b44f132b100020000000010010000000000002900000037000000881e0000000000000401090502000200010000dceff7467c8b23afb6d2522558dc6c67ad99f3e7267c8cc626e5ac4e4248da8a476dc52966b1f07e974b64368bba1c8a674740eca31738974b495015adaaead78ac73e78b1fd1e5b9f3bc0a1c3c81a3be0b01c0d90418b20bedcb5acf45670262fdd0088b72516bd593e260d569d4ac9e7aec76d5df1fedf6846a7e94014a29d8e3527526735393186dda3c778e59cc2d932453c6d4a72cb5353d2814b61f47d352b2f2e15600cfa1576131b183df3b4b83b653e48e7e53ac5acac9b57635b022a81bb07b6dbcbc8f92304d379e4b97b59f0138278808c8f215e0dc97cc20400000459050200090000000000001400000000000000290000004300000000040000000000001400000000000000290000000800000015000000000000005800000000000000290000003700001107000000000000010100040106c910ff010000000000000000000000000001040104c9100000000000000000000000000000000105020001080134c204000000060b029c6100001400000000000000290000000b000000fffffffa00000000"], 0x238}, 0x4000) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0xd410, 0xf69aa1672a50ebb1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40881}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x3c2392026b23f4e4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c0, 0x128, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x42}, 0xff000000, 0xff, 'pimreg\x00', 'tunl0\x00', {0x7f}, {0xff}, 0x6c, 0x2, 0x28}, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x2, 0xfffffffa, 0x51ea, 'syz1\x00', 'syz1\x00', {0x8000}}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x9, 0x1]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="46bb8fb869ec", 0x50b2, 0x5, [0x4, 0x31, 0x12, 0x24, 0xf, 0x22, 0x38, 0x14, 0x1a, 0x33, 0x21, 0x11, 0xd, 0x25, 0x12, 0x1], 0x1, 0xd59, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 19.592558013s ago: executing program 0 (id=1622): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x40000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0xd07, 0x4, [0x10, 0x4, 0x3, 0x7ff]}, &(0x7f0000000180)=0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="9e9afabe0c3de234", 0x8}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="200000000000000084000000020000003e004100020000000400000279f1b92ee1e8bfea1295fe57c9e3da0668f98857ed8954b1b3c18f0b83d030c763330c7ef5295ebea26e1b269b0a1880824f7fd6d12bf92de4b252fbc4eb091ea01a13f94d07c52e3803290557310979b70a7a3d2b111400898d1618bfba2ad4e087430b99176e91bd27000000007bc746cd00639aaa2c2f2b8c1a7dcf27f86e4570ad72ec4e3c0f98b6136a195b57f3272d7703334cb91a0b1435bcdf3671422ea6d5f0c3b71e421a036e57f7a97aaf9282f194c1d67185ef187f8abb973b9b51cabf2bd4900f4817803918355513b2d5", @ANYRES32=r1], 0x20, 0x4048800}, 0x20040010) 19.399415429s ago: executing program 3 (id=1625): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) pipe(&(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100003053bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800c0001006d6163766c616e001000028004000580080003000300000008000500", @ANYRES32=r1, @ANYBLOB="2e1f872fcba08ca3e0dae3aba051b8d11df566531a491b35677598467e4a3f45a3d61284fa57bd15e9847e249cb1bb44971ea37b30d75b3769fbb5405aea4e23a8bb295aae9b82eb94b624ce584c92e0ddeef0120d1d7ef7f2"], 0x48}}, 0x800) 19.334368052s ago: executing program 3 (id=1626): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000100)=0x9, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000340)={'veth1_to_bridge\x00', @broadcast}) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x6}], 0x1c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, '\x00', 0x0, r0, 0x3, 0x4, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r5}, &(0x7f00000000c0), &(0x7f00000006c0)}, 0x20) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x22, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x627c, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x18de}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @generic={0xe, 0x9, 0x8, 0xa05}, @ldst={0x0, 0x2, 0x6, 0x5, 0xa, 0xffffffffffffffff, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, r6}, 0x94) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x3, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x825d}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4804}, 0x4008850) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff3}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) 18.55916791s ago: executing program 0 (id=1632): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000081ddd497000a20000000000a03000000000000000000040000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffff12510000000b0a0101000000000000000007f7ffff0800020073797a31000000000900010073797a3000000000140000001000010000000000000000000084000a923e44"], 0xc0}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000081ddd497000a20000000000a03000000000000000000040000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffff12510000000b0a0101000000000000000007f7ffff0800020073797a31000000000900010073797a3000000000140000001000010000000000000000000084000a923e44"], 0xc0}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}]}, &(0x7f0000000180)=0x10) close(0x3) socket(0x2, 0x80805, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) socket(0x11, 0x800000003, 0x0) (async) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r9, r10, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r11, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r11, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r11, 0x0, 0x0}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r8, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xf}, @TCA_CODEL_TARGET={0x8, 0x1, 0xd}]}}]}, 0x4c}, 0x1, 0x7a00}, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r0}) 18.558522683s ago: executing program 4 (id=1633): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000600)="12df0751087e8e2ce81e19f0cc559a38f4cf5ed097c8d3420200000053c2a54dca62dc094a6eba9e55c3bfdecf2d40dbbf8eb736f5e77231d426a2ded7f9ee4f541b56e43fb0ae2d3f5ff3783f11f14b19df215f9f3fdca551500406489c683544f5d91d95fafc4cc655ec65efdc86206cfe724fb84d10a54d64c7bb541aef652a", 0x81, 0x20000000, &(0x7f0000000400)={0xa, 0x4e20, 0x973f, @private1, 0x6}, 0x1c) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) shutdown(r2, 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x8}}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x38099, 0x10a0}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x7ff7d}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200088c1}, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000300)="70e5d55b8256785fb3d276630342983ddbfef6e2a4d108af2f") sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r6, 0x1f4d2000) r7 = socket$key(0xf, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x598, 0x298, 0x3d8, 0x1c8, 0x0, 0xd0, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f00000000c0), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, [0xffffff00, 0xffffffff, 0xff000000, 0xff], [0xffffff00, 0xff000000, 0x0, 0xff000000], 'veth1_virt_wifi\x00', 'pim6reg\x00', {}, {0xff}, 0x67, 0xf0, 0x4, 0x6}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x10}}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @local}, [0xffffff, 0xff000000], [0xff000000, 0x0, 0xff000000, 0xff], 'dvmrp0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x73, 0x9, 0x6, 0x59}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x11, 0x9, 0x9}}}, {{@ipv6={@remote, @private0, [0xffffff00, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xff, 0xffffffff, 0xffffffff], 'sit0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x0, 0xc, 0x6, 0x4f}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0xc}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xf}, @empty, [0x0, 0xff0000ff, 0xffffffff, 0xff000000], [0xffffffff, 0xffffffff, 0xffffffff, 0xff000000], 'batadv_slave_1\x00', 'veth1_vlan\x00', {}, {}, 0x6c, 0x6, 0x2, 0x4}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x22, 0x10, 0xba06}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1d, 0x3d, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) sendmsg$key(r7, 0x0, 0x0) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x89f, 0x8, 0x1]}}, 0x5c) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x27) 18.506227415s ago: executing program 3 (id=1634): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0x1b8, 0x1b8, 0xf8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x1, 0xd}}, @common=@unspec=@connmark={{0x30}, {0x0, 0x2}}]}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0xff, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {0xff}, 0x2f, 0x1, 0x9}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xb}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x400, 0x452c}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x144}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00&\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0xf83, 0x7}, 0x1c) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@RTA_MARK={0x8, 0x1c, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004880}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendto$packet(r7, &(0x7f00000004c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r9, 0x1, 0x85, 0x6, @broadcast}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000003a000b0026747000ffdbdf2512"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8010) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x68e}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x54}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @random="4ef1adb02bd2", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6403a6", 0x0, 0x32, 0x0, @empty, @mcast2}}}}, 0x0) 18.339629066s ago: executing program 1 (id=1635): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x0, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x0, 0x29, &(0x7f0000000000), &(0x7f0000000140)="6718f44bcd5b10dd1112ba5e7c342cf58979e555cbf1b2af0d06407fb246d5b337292f40bda092f081"}, 0x50) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x20010, r0, 0xe49fe000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x4, &(0x7f0000001c00)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0xa, 0xfe00}]}, &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x90) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{0x1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r3, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) writev(r5, &(0x7f0000003500)=[{&(0x7f00000035c0)="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", 0x1001}, {&(0x7f0000000080)="4326cf937e13", 0x6}, {0x0, 0x5c}, {&(0x7f0000001240)="d35c", 0x2}], 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0xd, &(0x7f0000000ac0)=@raw=[@alu={0x7, 0x1, 0x9, 0x6, 0x85a828be1976910a, 0x100, 0x1}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}], &(0x7f0000000b80)='GPL\x00', 0x7, 0xf9, &(0x7f0000000bc0)=""/249, 0x41100, 0x41, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000cc0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000d80)=[r3, r5], &(0x7f0000000dc0)=[{0x3, 0x5, 0x8, 0x6}], 0x10, 0x3d6}, 0x94) pipe(&(0x7f0000000580)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000980)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r7, 0x0, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x11}, @val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x40d0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000240)=0xc) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000f40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000200}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40840}, 0x10004000) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_delrule={0x28, 0x21, 0x105, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0xffffffffffffffff, r8}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x10, &(0x7f00000009c0)=0x4, 0x4) bind$packet(r2, &(0x7f0000000000)={0x11, 0xf, 0x0, 0x1, 0x9, 0x6, @multicast}, 0x14) socket$nl_rdma(0x10, 0x3, 0x14) r9 = socket$isdn_base(0x22, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0xe1, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r11, 0x80001000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x23, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xa}, @printk={@lli}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @generic={0x2, 0xc, 0x4, 0xf317, 0x1ff}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfa24}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xe, 0x7fff, 0x9}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000f80)=[r11, 0xffffffffffffffff, r5, r4], &(0x7f0000000680)=[{0x1, 0x1, 0xd, 0x3}, {0x2, 0x2, 0x7, 0xb}, {0x0, 0x1, 0xa, 0xb}, {0x4, 0x3, 0x3, 0x8}, {0x3, 0x5, 0x8, 0xc}, {0x1, 0x2, 0x8, 0x2}, {0x4, 0x5, 0x8, 0x7}], 0x10, 0x9cc000}, 0x94) 18.199384156s ago: executing program 1 (id=1636): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) shutdown(r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000500)=[{0x50, 0x8, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newsa={0xf0, 0x10, 0x713, 0x70bd26, 0x25dfdbfe, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@mcast2, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0x0, 0x8, 0xa, 0xffff, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x7b}}, 0xf0}, 0x1, 0x0, 0x0, 0xd0}, 0x20004000) 18.152992172s ago: executing program 1 (id=1637): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) accept4(r2, &(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x0, 0x80400) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRESHEX=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) sendmsg$unix(r10, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bind$vsock_stream(r7, &(0x7f0000000940), 0x10) listen(r7, 0x0) r12 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r12, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10) writev(r12, &(0x7f00000002c0), 0x0) shutdown(r12, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f00000000c0)={r13, 0x10}, &(0x7f0000000100)=0x8) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="100a2bbd7000fbdbdf250100000004000b002800000008000700ac1414aa0800040003000000"], 0x2c}}, 0x4000) 18.094800499s ago: executing program 0 (id=1638): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b02"], 0x0, 0x4a}, 0x20) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%-5lx \x00'}, 0x20) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x8) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x7d4165c9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r6, 0x4008744b, &(0x7f0000000000)={0x80fb, 0x1}) listen(r5, 0x7d4165c9) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x6}, 0x94) listen(r4, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @remote, 0xc}}, 0x0, 0x0, 0x402, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55b7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d5cf492f6c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r8, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) unshare(0x6a040000) 18.039288226s ago: executing program 3 (id=1639): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, &(0x7f0000000040)={0x2c, 0x0, r1, 0x1}, 0x10) socket$inet(0xa, 0x801, 0x84) r3 = socket$kcm(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x3d}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x81, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r6 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r7) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r10}, 0xc) r11 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/time_for_children\x00') r12 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r13 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="000828bd7000ffdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r11, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r12, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r13, @ANYBLOB="41412acb1e0c0928dc373803c667aa27f6b43348f6713e3ec28a4a7755800fc0f8fdf86bb92b978dac066cb50ecd6b6a15b83b47941429c98dfd8f799e4fd4000000000000000000"], 0x52}, 0x1, 0x0, 0x0, 0x1}, 0x8404d) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 17.959153746s ago: executing program 1 (id=1640): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r0, 0x618f, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="760729bd7000ffdbdf25130000000e0001006e6574646576da6173696d0000000f0002006e657464657673696d300000080003000000000008000b0006000000060011000c000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b0009000000060011000080"], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17.626493148s ago: executing program 4 (id=1641): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x9, &(0x7f0000000000)=0x1000, 0x4) getsockopt$inet6_tcp_int(r3, 0x6, 0x9, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYRES64=r2, @ANYRES8=0x0, @ANYRESOCT=r1, @ANYBLOB="443f3ff1904997720b94681a3f5c0b71a55399af7293da15e862dbfd0660394b6b17d042c482240ae21cc48bb42738cc51926af42f33e084961b6ee9d09edc9bf96a1de44cfca110b2b6b1befcecc6d35eff23b5ca394a3705577343cb1789c5e8b85f04f814f0fd1cb0032a934634b28337f3abe5cd985fab93265f0d998d68812539b8d6c1451a559341f79c494d96b861f541eb85d9fb2cebad1fe93ad152501109a96ac3020d42b85273820881dc131fcfa4d7c909ac2a8eb6cc0a64aa3b1a9af9fca74aa8a72726b05e62f4aad5dcb2ab11b97bd8b26746e220979f56dcccfca0b7880a5178a44edf96dc3e"], 0x50}}, 0x800) 17.531367817s ago: executing program 4 (id=1642): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x40000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0xd07, 0x4, [0x10, 0x4, 0x3, 0x7ff]}, &(0x7f0000000180)=0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="9e9afabe0c3de234", 0x8}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="200000000000000084000000020000003e004100020000000400000279f1b92ee1e8bfea1295fe57c9e3da0668f98857ed8954b1b3c18f0b83d030c763330c7ef5295ebea26e1b269b0a1880824f7fd6d12bf92de4b252fbc4eb091ea01a13f94d07c52e3803290557310979b70a7a3d2b111400898d1618bfba2ad4e087430b99176e91bd27000000007bc746cd00639aaa2c2f2b8c1a7dcf27f86e4570ad72ec4e3c0f98b6136a195b57f3272d7703334cb91a0b1435bcdf3671422ea6d5f0c3b71e421a036e57f7a97aaf9282f194c1d67185ef187f8abb973b9b51cabf2bd4900f4817803918355513b2d5", @ANYRES32=r1], 0x20, 0x4048800}, 0x20040010) 17.089285202s ago: executing program 3 (id=1643): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/68, 0x228000, 0x1000, 0x800, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x100000, 0x53) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000280)={0x0, 0x200000, 0x1800, 0x7, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="000000000000000066080000ce0001011800000000000000000000000000000095289200002078c308b8795d2500000000002020207b1af8ff01000000bfa10000000000000701000000ffffff04000000000000009500"/97], &(0x7f0000000000)='GPL\x00', 0x2, 0xffffffffffffffa6, 0x0, 0x41b249afdd601dac}, 0x94) 17.033977646s ago: executing program 0 (id=1644): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@null) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x1, 0x368d59c2, 0x26094, r0, 0x4, '\x00', 0x0, r0, 0x4, 0x5, 0x3}, 0x50) 16.594924742s ago: executing program 4 (id=1646): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xffffedc7fff, 0x800, 0x5, 0x5}, 0x20) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x12, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 16.432891863s ago: executing program 4 (id=1647): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e65746465767369e5743118265ca2177c17d26d00004d8e0002006e657464657673696d30000008008b7480bf3b4ae4ace6ea9a170f2ef5121e0bbebacc059bc6c48910b2579f908a0d400109577ecdca7ede836154", @ANYRES32=0x0, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x30) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x24005800}, 0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x470d0, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x31d}}]}]}]}, 0x5c}}, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40100000}, 0x36, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8004) 16.416642885s ago: executing program 3 (id=1648): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r3], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) r4 = socket(0x2, 0x80805, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r5, 0x1}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000003460200bfa30000000000001702000000feffff7a0af0ff14ffffff79a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f00850000003f0000009c600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b04000000f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81ec8439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcb9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b506bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccd50523d3360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f6b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670594acec7a9da17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc6cb0d4a14281e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b6198366283c531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f674eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc8557f9a2e15483dbafb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cf352fb5a376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d895a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a2047b7ba57a5d1fe58a00c6855ada17dcbb20a2f03164292a1e4e53e4140224ba82b599de2604398b860906dccd87c1bf0e8d0cce2e34589ef2bd3672907b7604034d4697fa3f957622eaa59df5c02b307bceaf138b419ce49f4850328069ed4d5559babf388329d6605f74dc1c21c9f0f1aa9826ba2936f14affb0b06d0aeb1054b2d044cafe64979590000000000000000000000784de836bec51a9db6533248165f79bf47b13d6d2c83a7442632f60f9eb0cc4fa54e08e5e349cc3afdff6f3175a80c4015d380ee0880a8a822d0a630a864c823392420ec93fab6d4d98a53c8b75221a9576e8204169fa1046355a0342539527e882e7fcaf062f0733fc0fb97"], &(0x7f0000000340)='GPL\x00', 0x0, 0xfffffe22, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x16) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x6a, 0x5, 0x20000000, 0x9) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000228bd7000fedbdf25010000000c0005000400000000000000280007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r6, @ANYBLOB="b9921c686643c73fe104764b91b4e731b208000100bcafe946c3c86eb7ec7e33dda4edc461e8509a22deb95e50494e93d73cbbb085f9a7", @ANYRES32=r7, @ANYBLOB="0c00060003000000000000000800010000000000"], 0x5c}}, 0x4000000) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.234663661s ago: executing program 4 (id=1649): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @vsock={0x28, 0x0, 0x2711, @my=0x0}, @llc={0x1a, 0x310, 0xf9, 0x3, 0x4, 0x3a, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, @llc={0x1a, 0x339, 0x7, 0x4, 0x34, 0x3, @broadcast}, 0x119f, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)='ip6gretap0\x00', 0x81, 0x6, 0x5}) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r1, 0x29, 0x2e, &(0x7f0000000100)="503a3ea3bfcddc1aba9711a2ba14f346bc17dd20c979f492bf9538812de7db490bb30b14ad4af2ec7c3bb49b39d170af5627256f0b34c99f3006ccd198daa25b9d1defe562d8c442968d26bda736b57caa72f49238e9b742d996c0f64319c23c53c382e244f31dfc361052569de2213b0837a7cfa8f8d045a1bcd9ca31f6dbbb94ede89361fb6eef8426478bc2c9ae84080a1b8fe138cca8f97b71d5b2", 0x9d) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0xbd, @remote, 0x3}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@generic={0x3, 0xf, 0x1, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x18a1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x800, 0xe9, &(0x7f00000002c0)=""/233, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x10, 0x1, 0x2}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000440)=[{0x0, 0x2, 0xa, 0x5}, {0x1, 0x1, 0x3, 0xb}, {0x4, 0x3, 0x5, 0x3}, {0x3, 0x1, 0x6}, {0x1, 0x5, 0x4, 0x6}, {0x4, 0x5, 0x0, 0xc}, {0x5, 0x1, 0x8, 0x8}, {0x1, 0x4, 0x7, 0xa}, {0x1, 0x5, 0x2, 0x1}, {0x5, 0x5, 0xd, 0x3}], 0x10, 0xe}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000005c0)=r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000600)={0x0, 0x1, 0x30}, &(0x7f0000000640)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000680)={r4, @in6={{0xa, 0x4e21, 0x4, @mcast2, 0x6}}}, &(0x7f0000000740)=0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r5) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f00000007c0)=0x4, 0x4) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000800)='blkio.bfq.empty_time\x00', 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000840)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000880)={0x0, 0x4c, "9e281527d2bd9362299448175ecbecc6502ad70991c83d64e65ef755f71e52512fe477d6efa8aa04a7529876ac759ea5f4495dd75363041c45803371161c3ec459457fcd1ece94f89da38401"}, &(0x7f0000000900)=0x54) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000940)=@assoc_value={r7}, &(0x7f0000000980)=0x8) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000009c0)) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40040000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0xc8c4) r8 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000b00)={{0x67, @remote, 0x4e24, 0x4, 'lblcr\x00', 0x0, 0x7, 0x6d}, {@rand_addr=0x64010100, 0x4e21, 0x2, 0x9, 0x3e, 0x6}}, 0x44) r9 = gettid() syz_open_procfs$namespace(r9, &(0x7f0000000b80)='ns/mnt\x00') write$rfkill(r6, &(0x7f0000000bc0)={0xd, 0x2, 0x1, 0x1, 0x1}, 0x8) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x60, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x75}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netdevsim0\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xf}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004810}, 0x20008000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000dc0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "446f5253b3655b"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000001dc0)={{r10, 0x80000001, 0x8001, 0x7, 0x101, 0x2, 0x8, 0xfffffffc, 0x5, 0xa, 0x5, 0x2, 0x7ff, 0x47c, 0x8000}, 0x10, [0x0, 0x0]}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000001e40)={r4, @in={{0x2, 0x4e21, @remote}}, 0x3, 0x33}, 0x90) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x74, 0x0, 0x200, 0x70bd28, 0x8001, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xd7376911a032ea45}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xa}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6040}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4044094) 16.212709066s ago: executing program 0 (id=1651): pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r2, &(0x7f0000000340)="fb594d798ffc4fc19e99d1fceaacd01d22f2296b4111c8b325c8c6a4260bbe18c0a6dbf4c71405ec5d79333f55191019736e82", 0x33, 0x20008040, 0x0, 0x0) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x295b1cc39ae76ea0, @remote}, 0x8, {0x2, 0x4e20, @empty}, 'bridge0\x00'}) splice(r2, 0x0, r1, 0x0, 0x8a, 0xa) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) 15.950666225s ago: executing program 2 (id=1652): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x41, 0x3, 0xa10, 0x0, 0x19, 0x0, 0x0, 0x0, 0x978, 0x1f0, 0x1f0, 0x978, 0x1f0, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x42}, @dev, 0xff000000, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00', {}, {}, 0x73, 0x0, 0x40}, 0x0, 0x878, 0x898, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@u32={{0x7e0}, {[{[{}, {0x9, 0x2}, {0x59, 0x3}, {0x7fffffff, 0x1}, {0x74000000, 0x2}, {0xe0, 0x1}, {0x0, 0x2}, {0x100, 0x2}, {0x6}, {0x9, 0x3}, {0x8ee}], [{0x9, 0x1ff}, {0x6729, 0x4}, {0x4, 0x5}, {0xffffffff, 0x2}, {0x9, 0x9}, {0x2, 0x200}, {0x6, 0x291}, {0x8, 0x1}, {0x5, 0x4}, {0x7, 0x53}, {0xf, 0x1}], 0x5, 0x3}, {[{0x100, 0x3}, {0x9, 0x3}, {0xd}, {0x8, 0x3}, {0xfffff801, 0x3}, {0x3b21aa46, 0x2}, {0x2}, {0x1, 0x2}, {0x6, 0x2}, {0x9, 0x2}, {0x800, 0x2}], [{0xffffffdb, 0x5}, {0x4, 0x7}, {0x2, 0x64}, {0x9, 0x10000}, {0x3ff, 0x7}, {0x1}, {0x10001, 0x3}, {0x48, 0xffff}, {0x5, 0xb}, {0xb3b5, 0x3784}, {0xfffffffd, 0x29}], 0xb, 0x7}, {[{0x12a}, {0xd4, 0x2}, {0x80000000, 0x2}, {0x4, 0x2}, {0x8, 0x3}, {0x3b84}, {0x2, 0x3}, {0x9}, {0x2, 0x3}, {0x6}, {0x1, 0x3}], [{0xfaa, 0x2}, {0xfffffff9, 0x800}, {0x3, 0xa}, {0x816, 0x200}, {0x13}, {0x5d3, 0x5}, {0x5, 0x9}, {0x2, 0x4}, {0x7, 0x200}, {0x8, 0x135}, {0xc5}], 0x7, 0x9}, {[{0x7, 0x1}, {0xaf8f, 0x1}, {0x10001, 0x2}, {0x800, 0x3}, {0xb3, 0x1}, {0x924}, {0x4, 0x1}, {}, {0x81, 0x1}, {0x40, 0x2}, {0x101, 0x1}], [{0x2, 0x9}, {0x2, 0xa}, {0x8, 0x3}, {0x1, 0x8}, {0x5, 0x7}, {0x1, 0x1}, {0xd04, 0x280000}, {0x5}, {0x8, 0xb71}, {0xd, 0x9}, {0x1, 0x40}], 0x1, 0x9}, {[{0x6}, {0x2, 0x2}, {0x9, 0x3}, {0x1, 0x2}, {0x400, 0x1}, {0x7, 0x2}, {0x1, 0x2}, {0x4, 0x1}, {0x4753, 0x2}, {0x9, 0x3}, {0xec4, 0x3}], [{0x3, 0xfff}, {0x3, 0x655}, {0x8000, 0xd}, {0x2, 0x2}, {0x4, 0x3}, {0x3, 0x2}, {0xb, 0x3c11f007}, {0x2, 0x80}, {0x7, 0x5}, {0x26e, 0x10}, {0x2, 0x7}], 0x9, 0xb}, {[{0x5}, {0x80, 0x2}, {0x1}, {0x8, 0x1}, {0xfff}, {0x8}, {0x4, 0x2}, {0x8}, {0x8001, 0x2}, {0xffffffff, 0x2}, {0x7, 0x1}], [{0x81, 0x800}, {0x225d5607, 0x8}, {0x72}, {0xc, 0x3}, {0x4, 0x3}, {0x7, 0x10001}, {0xc8c5, 0x100}, {0x4, 0xff}, {0x8001, 0x8001}, {0xf55, 0x40}, {0x7f, 0x3104}], 0x8, 0xb}, {[{0x9, 0x3}, {0x2, 0x1}, {0x3}, {0xc0000000, 0x1}, {0x6}, {0x3, 0x3}, {0x3e06, 0x1}, {0x0, 0x2}, {}, {0xff, 0x2}, {0xffff8001, 0x1}], [{0x10001}, {0xc5, 0x2}, {0x9a8a, 0x7fffffff}, {0x8, 0x1}, {0x0, 0x2}, {0xf, 0x9}, {0x0, 0xffff8000}, {0x1000, 0x9}, {0x6, 0x3}, {0x48bb, 0xfffff800}, {0x8, 0x1}], 0x6, 0x6}, {[{0x0, 0x2}, {0x6, 0x1}, {0x2, 0x2}, {0x2}, {0x4, 0x3}, {0xc843, 0x2}, {0x3, 0x3}, {0x9, 0x3}, {0x3, 0x1}, {0x4, 0x3}, {0x7fffffff, 0x2}], [{0x5be, 0x7ff}, {0x7, 0x8f}, {0x1, 0x6}, {0x2, 0x9}, {0x1, 0xeb}, {0x2, 0x1}, {0x9, 0x101}, {0x32, 0x7a}, {0xff, 0xf}, {0x927, 0x80000001}, {0x1ff, 0x9}], 0x9, 0x6}, {[{0x7, 0x3}, {0x2000000, 0x1}, {0x9, 0x1}, {0x51c6, 0x3}, {0x1fc7d189, 0x3}, {0x400, 0x2}, {0x3, 0x2}, {0x0, 0x1}, {0x4}, {0x9, 0x3}, {0x8, 0x3}], [{0x2, 0x6}, {0x3}, {0x9, 0x8d3}, {0x7f, 0x10}, {0xfffffc00, 0x7fff}, {0x53, 0x8000}, {0x5, 0x7}, {0x8, 0x8}, {0x5, 0xffff0000}, {0x1, 0x1}, {0x6, 0x8}], 0x7}, {[{0xe1, 0x2}, {0xc0, 0x3}, {0x8, 0x2}, {0x6, 0x1}, {0x7f, 0x1}, {0x200000, 0x3}, {0x8, 0x3}, {0x2, 0x3}, {0x1, 0x3}, {0x0, 0x1}, {0xb2}], [{0xcde7, 0x7}, {0x4, 0x63}, {0x5, 0x1}, {0x2, 0x1000}, {0x101, 0x8001}, {0x3, 0x9}, {0x1, 0x5954}, {0x8, 0x6}, {0x80000000, 0x5}, {0x40, 0x24b3}, {0xffffa468, 0x6}], 0x3, 0x9}, {[{0x7, 0x1}, {0xffffffff, 0x1}, {0x9, 0x3}, {0x7f, 0x2}, {0x2}, {0x4}, {0x70}, {0x5, 0x1}, {0x7fff, 0x2}, {0xe6e6, 0x2}, {0x5}], [{0xe53e, 0x9b}, {0x36, 0x4}, {0x8, 0x1}, {0x5, 0x5}, {0x4, 0x1}, {0x1000, 0x6}, {0x6, 0x10001}, {0x10000, 0x7fffffff}, {0x5, 0x1}, {0x9, 0x2}, {0x2, 0xa8f}], 0x5, 0x4}], 0xff, 0x1}}, @common=@inet=@socket1={{0x28}, 0xc}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa70) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="3500000000000000000000001c0e0000000000000009000000005e860f1c8cd5754baa54309149329d7513eda300052abd9d09cf10024de12dde68f45a12378962f2bd0a5604ff94d2e746385428c5e141be09360744722a7751588f6f9814bd807f57bf2faae338213cc3836dc54cd5b77a3bd4bff613dc2020ddc25c66c35dafc6244a3c16fa9f42c6fa562eb7b3ef910318a6f4781b0cccbac1465e130e4e580ec8fcf0890bcadd39ed490f1846627e4bf6261bb59fe8cb8ffd3a3abe4978507cb8d6db38c0cd9b3fa915796a922a5b6a2be5374f0939ace4ca5b91c01edaa19447aead57b632a59633ec0b79fb8da9da15788b918c33b976e92081a8b423739879e9fb3590387f2800580000000000000000005398295057858dac1e7813eaa0ae5119b0f5f7b592038035bdc3f2bc716e2207c489bb80c2782240bcbdf2492aafd7a7bb3b3ee53dbc290db1f4597a04463702c1eefeab6294f62a0f7399dde6ddee689810b8ec37d7bb56e35f9cfe8f21c6290d02ce0847c61261a6ad3d287646528934753911644a4fdc6b35980a4aa3af0191f302e89dafbd313c56", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r7, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r9 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x5, {0x4}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0xff000000, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) setsockopt$inet_mreq(r10, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}}}, 0x24}}, 0x0) 15.943083844s ago: executing program 1 (id=1653): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) (async) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0xf3a, 0x0) (async) write(r4, &(0x7f0000000340)="f9", 0x1) (async) read$alg(r3, &(0x7f00000001c0)=""/82, 0x74) (async) write(r0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4000) 15.847353629s ago: executing program 1 (id=1654): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8000400) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, 0x0, &(0x7f0000000100)) recvmmsg(r1, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, &(0x7f00000036c0)) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r3, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x8000400) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, 0x0, &(0x7f0000000100)) (async) recvmmsg(r1, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, &(0x7f00000036c0)) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r3, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) (async) 15.770193823s ago: executing program 2 (id=1655): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000140)={0x18, 0x0, {0x2, @remote, 'lo\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) close(0x4) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x40000, 0x0, 0x0) close(0xffffffffffffffff) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x7c}}, 0x24040084) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000000)={@mcast2, r6}, 0x14) socket(0x15, 0x5, 0x0) recvfrom(r1, &(0x7f0000001a80)=""/4058, 0xfda, 0xc0020467, 0x0, 0x0) 15.614757555s ago: executing program 2 (id=1656): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2e, &(0x7f0000000000)=0x21ea, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) r1 = socket$inet6(0xa, 0x6, 0xffffffff) connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x50003}, 0x1c) sendmmsg(r1, 0x0, 0x0, 0xffe0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f0000000040), 0x4) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000300)={@multicast1, @multicast1, r5}, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, 0x0, 0xe821651e0a1b45fc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xb, 0x0, 0x0, 0xadb5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) 15.503449776s ago: executing program 2 (id=1657): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000130001002cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB='G'], 0xfffffffffffffd2b}, 0x1, 0x0, 0x0, 0x80640d0}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000130001002cbd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB='G'], 0xfffffffffffffd2b}, 0x1, 0x0, 0x0, 0x80640d0}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) (async) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) 15.503014098s ago: executing program 2 (id=1658): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000380)={0x8, 0xfbfe, @loopback}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000440)="080001007c10514a", 0x2a}, {0x0}], 0x2}, 0x20008890) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="dbaa00fe1001000071101a0000080000950000000000000085a2a43fdf4a94270357d59112af57f5542f4149e2280a643c23ae0d15f8d246b7410e1f49ab06642ba2a597ca11a9f2aedd6b49c8296ed1ed2f5809fe76b1ddc5315f979f8471c685d2ab240c3be6"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90) 15.478258004s ago: executing program 2 (id=1659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) socket$nl_rdma(0x10, 0x3, 0x14) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f0000000140)=0x6e) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000180)={{}, [@rose, @netrom, @null, @default, @bcast, @default, @default]}, &(0x7f0000000200)=0x48, 0x800) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000400)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYRES64=r2], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r5, &(0x7f0000000000)={0x33, 0x2, 0x2, 0x0, 0x1}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c0003801d000380140001007465616d300000000000000000000000080007"], 0xd8}}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES16=r8, @ANYRES64=r7, @ANYRES32], 0x38}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r9) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r10, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {0x0, 0x4107}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0x10448) 1.17437528s ago: executing program 32 (id=1651): pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r2, &(0x7f0000000340)="fb594d798ffc4fc19e99d1fceaacd01d22f2296b4111c8b325c8c6a4260bbe18c0a6dbf4c71405ec5d79333f55191019736e82", 0x33, 0x20008040, 0x0, 0x0) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x295b1cc39ae76ea0, @remote}, 0x8, {0x2, 0x4e20, @empty}, 'bridge0\x00'}) splice(r2, 0x0, r1, 0x0, 0x8a, 0xa) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) 1.139551893s ago: executing program 33 (id=1648): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r3], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) r4 = socket(0x2, 0x80805, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r5, 0x1}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0xfffffe22, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x16) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x6a, 0x5, 0x20000000, 0x9) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000228bd7000fedbdf25010000000c0005000400000000000000280007800c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r6, @ANYBLOB="b9921c686643c73fe104764b91b4e731b208000100bcafe946c3c86eb7ec7e33dda4edc461e8509a22deb95e50494e93d73cbbb085f9a7", @ANYRES32=r7, @ANYBLOB="0c00060003000000000000000800010000000000"], 0x5c}}, 0x4000000) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.094655696s ago: executing program 34 (id=1649): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @vsock={0x28, 0x0, 0x2711, @my=0x0}, @llc={0x1a, 0x310, 0xf9, 0x3, 0x4, 0x3a, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, @llc={0x1a, 0x339, 0x7, 0x4, 0x34, 0x3, @broadcast}, 0x119f, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)='ip6gretap0\x00', 0x81, 0x6, 0x5}) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r1, 0x29, 0x2e, &(0x7f0000000100)="503a3ea3bfcddc1aba9711a2ba14f346bc17dd20c979f492bf9538812de7db490bb30b14ad4af2ec7c3bb49b39d170af5627256f0b34c99f3006ccd198daa25b9d1defe562d8c442968d26bda736b57caa72f49238e9b742d996c0f64319c23c53c382e244f31dfc361052569de2213b0837a7cfa8f8d045a1bcd9ca31f6dbbb94ede89361fb6eef8426478bc2c9ae84080a1b8fe138cca8f97b71d5b2", 0x9d) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0xbd, @remote, 0x3}, 0x1c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@generic={0x3, 0xf, 0x1, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x18a1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x800, 0xe9, &(0x7f00000002c0)=""/233, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x10, 0x1, 0x2}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000440)=[{0x0, 0x2, 0xa, 0x5}, {0x1, 0x1, 0x3, 0xb}, {0x4, 0x3, 0x5, 0x3}, {0x3, 0x1, 0x6}, {0x1, 0x5, 0x4, 0x6}, {0x4, 0x5, 0x0, 0xc}, {0x5, 0x1, 0x8, 0x8}, {0x1, 0x4, 0x7, 0xa}, {0x1, 0x5, 0x2, 0x1}, {0x5, 0x5, 0xd, 0x3}], 0x10, 0xe}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000005c0)=r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000600)={0x0, 0x1, 0x30}, &(0x7f0000000640)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000680)={r4, @in6={{0xa, 0x4e21, 0x4, @mcast2, 0x6}}}, &(0x7f0000000740)=0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r5) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f00000007c0)=0x4, 0x4) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000800)='blkio.bfq.empty_time\x00', 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000840)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000880)={0x0, 0x4c, "9e281527d2bd9362299448175ecbecc6502ad70991c83d64e65ef755f71e52512fe477d6efa8aa04a7529876ac759ea5f4495dd75363041c45803371161c3ec459457fcd1ece94f89da38401"}, &(0x7f0000000900)=0x54) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000940)=@assoc_value={r7}, &(0x7f0000000980)=0x8) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000009c0)) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40040000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x9, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0xc8c4) r8 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000b00)={{0x67, @remote, 0x4e24, 0x4, 'lblcr\x00', 0x0, 0x7, 0x6d}, {@rand_addr=0x64010100, 0x4e21, 0x2, 0x9, 0x3e, 0x6}}, 0x44) r9 = gettid() syz_open_procfs$namespace(r9, &(0x7f0000000b80)='ns/mnt\x00') write$rfkill(r6, &(0x7f0000000bc0)={0xd, 0x2, 0x1, 0x1, 0x1}, 0x8) getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x60, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x75}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netdevsim0\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xf}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004810}, 0x20008000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000dc0)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "446f5253b3655b"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r6, 0xc0709411, &(0x7f0000001dc0)={{r10, 0x80000001, 0x8001, 0x7, 0x101, 0x2, 0x8, 0xfffffffc, 0x5, 0xa, 0x5, 0x2, 0x7ff, 0x47c, 0x8000}, 0x10, [0x0, 0x0]}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000001e40)={r4, @in={{0x2, 0x4e21, @remote}}, 0x3, 0x33}, 0x90) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x74, 0x0, 0x200, 0x70bd28, 0x8001, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xd7376911a032ea45}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xa}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6040}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x4044094) 54.905924ms ago: executing program 35 (id=1654): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8000400) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, 0x0, &(0x7f0000000100)) recvmmsg(r1, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, &(0x7f00000036c0)) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r3, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x8000400) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, 0x0, &(0x7f0000000100)) (async) recvmmsg(r1, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, &(0x7f00000036c0)) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r3, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) (async) 0s ago: executing program 36 (id=1659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) socket$nl_rdma(0x10, 0x3, 0x14) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f0000000140)=0x6e) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000180)={{}, [@rose, @netrom, @null, @default, @bcast, @default, @default]}, &(0x7f0000000200)=0x48, 0x800) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000400)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYRES64=r2], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r5, &(0x7f0000000000)={0x33, 0x2, 0x2, 0x0, 0x1}, 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c0003801d000380140001007465616d300000000000000000000000080007"], 0xd8}}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES16=r8, @ANYRES64=r7, @ANYRES32], 0x38}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r9) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r10, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {0x0, 0x4107}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0x10448) kernel console output (not intermixed with test programs): m3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.518312][ T8179] siw: device registration error -23 [ 201.551590][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 201.551629][ T5830] Bluetooth: hci2: command 0x0401 tx timeout [ 201.557847][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 201.775191][ T8201] tipc: Enabling of bearer rejected, failed to enable media [ 202.067989][ T8211] netlink: 'syz.3.520': attribute type 12 has an invalid length. [ 202.082330][ T8217] __nla_validate_parse: 2 callbacks suppressed [ 202.082351][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'. [ 202.239563][ T8223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.522'. [ 202.521906][ T1339] tipc: Subscription rejected, illegal request [ 202.550159][ T8232] netlink: 'syz.0.524': attribute type 12 has an invalid length. [ 202.567276][ T8232] netlink: 'syz.0.524': attribute type 29 has an invalid length. [ 202.585397][ T8232] netlink: 148 bytes leftover after parsing attributes in process `syz.0.524'. [ 202.602227][ T8232] netlink: 'syz.0.524': attribute type 2 has an invalid length. [ 202.636352][ T8232] netlink: 23 bytes leftover after parsing attributes in process `syz.0.524'. [ 202.918650][ T8244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.525'. [ 203.115871][ T8242] sctp: [Deprecated]: syz.0.525 (pid 8242) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.115871][ T8242] Use struct sctp_sack_info instead [ 203.205776][ T8249] vxcan1 speed is unknown, defaulting to 1000 [ 203.771839][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.532'. [ 203.800993][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.532'. [ 203.993106][ T8280] netlink: 44 bytes leftover after parsing attributes in process `syz.1.533'. [ 203.994164][ T8282] sctp: [Deprecated]: syz.4.536 (pid 8282) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.994164][ T8282] Use struct sctp_sack_info instead [ 204.251805][ T8293] syz_tun: entered allmulticast mode [ 204.273782][ T8292] syz_tun: left allmulticast mode [ 204.306335][ T8264] vxcan1 speed is unknown, defaulting to 1000 [ 204.441058][ T8249] lo speed is unknown, defaulting to 1000 [ 204.973379][ T8308] trusted_key: syz.4.543 sent an empty control message without MSG_MORE. [ 205.052394][ T8306] netlink: 'syz.0.544': attribute type 13 has an invalid length. [ 205.146973][ T8306] gretap0: refused to change device tx_queue_len [ 205.153356][ T8306] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 205.195717][ T5885] lo speed is unknown, defaulting to 1000 [ 205.201634][ T5885] syz1: Port: 1 Link DOWN [ 205.207049][ T8264] lo speed is unknown, defaulting to 1000 [ 205.207538][ T8312] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 205.428912][ T8316] team0: entered promiscuous mode [ 205.435779][ T8316] team_slave_0: entered promiscuous mode [ 205.454876][ T8316] team_slave_1: entered promiscuous mode [ 205.465794][ T8316] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 205.666514][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.548'. [ 205.748536][ T8330] netlink: 'syz.0.550': attribute type 9 has an invalid length. [ 205.756817][ T8330] netlink: 'syz.0.550': attribute type 7 has an invalid length. [ 205.764607][ T8330] netlink: 'syz.0.550': attribute type 8 has an invalid length. [ 205.779572][ T8330] netlink: 28 bytes leftover after parsing attributes in process `syz.0.550'. [ 206.124949][ T8332] netlink: 'syz.0.552': attribute type 1 has an invalid length. [ 206.229717][ T8332] 8021q: adding VLAN 0 to HW filter on device bond3 [ 206.315220][ T8344] vxcan1 speed is unknown, defaulting to 1000 [ 206.336123][ T8348] syz_tun: entered allmulticast mode [ 206.348067][ T8347] syz_tun: left allmulticast mode [ 206.677972][ T8350] bond4: Removing last arp target with arp_interval on [ 206.698393][ T8350] bond4: entered promiscuous mode [ 206.703462][ T8350] bond4: entered allmulticast mode [ 206.709921][ T8350] 8021q: adding VLAN 0 to HW filter on device bond4 [ 207.265317][ T8369] x_tables: ip_tables: ah match: only valid for protocol 51 [ 207.462748][ T8383] __nla_validate_parse: 3 callbacks suppressed [ 207.462766][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.561'. [ 207.748767][ T8393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.562'. [ 207.779044][ T8390] sctp: [Deprecated]: syz.2.564 (pid 8390) Use of struct sctp_assoc_value in delayed_ack socket option. [ 207.779044][ T8390] Use struct sctp_sack_info instead [ 207.809244][ T8392] vxcan1 speed is unknown, defaulting to 1000 [ 208.070317][ T8403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.566'. [ 208.558310][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.569'. [ 208.858103][ T8387] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 209.013652][ T8437] netlink: 'syz.0.572': attribute type 3 has an invalid length. [ 209.022998][ T8438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.574'. [ 209.186509][ T8441] batadv1: entered promiscuous mode [ 209.635601][ T8460] netlink: 'syz.2.580': attribute type 10 has an invalid length. [ 209.647221][ T8460] netlink: 40 bytes leftover after parsing attributes in process `syz.2.580'. [ 209.733623][ T8460] team0: Port device geneve0 added [ 209.922316][ T8463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.581'. [ 209.944081][ T8473] syzkaller0: entered promiscuous mode [ 209.958391][ T8473] syzkaller0: entered allmulticast mode [ 210.302334][ T8490] netlink: 68 bytes leftover after parsing attributes in process `syz.4.585'. [ 210.327453][ T8493] lo speed is unknown, defaulting to 1000 [ 210.333966][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 210.341609][ T8493] lo speed is unknown, defaulting to 1000 [ 210.364436][ T8493] lo speed is unknown, defaulting to 1000 [ 210.399499][ T8493] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 210.446514][ T8493] lo speed is unknown, defaulting to 1000 [ 210.448145][ T8498] tipc: Enabled bearer , priority 0 [ 210.460590][ T8498] syzkaller0: entered promiscuous mode [ 210.467113][ T8498] syzkaller0: entered allmulticast mode [ 210.474497][ T8493] lo speed is unknown, defaulting to 1000 [ 210.496187][ T8499] tipc: Resetting bearer [ 210.526876][ T8497] tipc: Resetting bearer [ 210.559294][ T8497] tipc: Disabling bearer [ 210.595280][ T8493] lo speed is unknown, defaulting to 1000 [ 210.640070][ T8493] lo speed is unknown, defaulting to 1000 [ 210.667040][ T8493] lo speed is unknown, defaulting to 1000 [ 210.821379][ T8516] netlink: 'syz.2.592': attribute type 1 has an invalid length. [ 211.308242][ T8525] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 211.331195][ T8525] bond5 (unregistering): Released all slaves [ 211.416057][ T8533] tipc: Enabling of bearer rejected, failed to enable media [ 211.437318][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.596'. [ 211.476792][ T24] IPVS: starting estimator thread 0... [ 211.496423][ T8530] vxcan1 speed is unknown, defaulting to 1000 [ 211.587659][ T8540] IPVS: using max 24 ests per chain, 57600 per kthread [ 211.809184][ T8549] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.816503][ T8549] IPv6: NLM_F_CREATE should be set when creating new route [ 211.823763][ T8549] IPv6: NLM_F_CREATE should be set when creating new route [ 211.831136][ T8549] IPv6: NLM_F_CREATE should be set when creating new route [ 211.879325][ T8549] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.082296][ T8552] syzkaller0: entered promiscuous mode [ 212.101578][ T8552] syzkaller0: entered allmulticast mode [ 212.169846][ T8558] tipc: Resetting bearer [ 212.744821][ T8575] netlink: 216 bytes leftover after parsing attributes in process `syz.4.605'. [ 212.786854][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.606'. [ 213.813906][ T8562] : renamed from bond_slave_0 (while UP) [ 213.828351][ T8530] lo speed is unknown, defaulting to 1000 [ 213.904252][ T8581] netlink: 32 bytes leftover after parsing attributes in process `syz.4.607'. [ 213.929861][ T8582] netlink: 32 bytes leftover after parsing attributes in process `syz.4.607'. [ 214.056243][ T8585] netlink: 'syz.2.608': attribute type 10 has an invalid length. [ 214.190222][ T8592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.232888][ T8585] team0: Device veth1_macvtap failed to register rx_handler [ 214.482288][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.612'. [ 214.791809][ T8619] netlink: 4308 bytes leftover after parsing attributes in process `syz.0.615'. [ 215.605820][ T8646] nbd: must specify at least one socket [ 215.620933][ T8647] nbd: must specify at least one socket [ 215.777262][ T8653] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 215.799976][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.626'. [ 215.857336][ T8650] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.865147][ T8650] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.902611][ T8650] batman_adv: batadv0: Interface deactivated: dummy0 [ 216.126166][ T8650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.158792][ T8650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.185044][ T5145] Bluetooth: hci2: command 0x0401 tx timeout [ 216.185045][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 216.387591][ T8650] batman_adv: batadv0: Interface deactivated: gretap1 [ 216.437587][ T8650] macvlan2: left promiscuous mode [ 216.443477][ T8650] batadv1: left promiscuous mode [ 216.458437][ T8663] netlink: 'syz.0.629': attribute type 1 has an invalid length. [ 216.486092][ T6855] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.518306][ T6855] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.550949][ T6855] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.567059][ T6855] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.648386][ T8688] netlink: 16 bytes leftover after parsing attributes in process `syz.3.630'. [ 216.777845][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 216.788294][ T8696] netlink: 'syz.0.631': attribute type 1 has an invalid length. [ 216.801436][ T8694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.633'. [ 216.872623][ T8698] vxcan1 speed is unknown, defaulting to 1000 [ 217.238691][ T8710] veth3: entered promiscuous mode [ 217.908545][ T8698] lo speed is unknown, defaulting to 1000 [ 218.082410][ T8735] __nla_validate_parse: 2 callbacks suppressed [ 218.082428][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 218.381602][ T8735] syz.0.642 (8735) used greatest stack depth: 17832 bytes left [ 218.481187][ T8757] tipc: Started in network mode [ 218.495824][ T8757] tipc: Node identity 6e0d37fea6a4, cluster identity 4711 [ 218.513302][ T8757] tipc: Enabled bearer , priority 0 [ 218.556854][ T8757] syzkaller0: entered promiscuous mode [ 218.594878][ T8757] syzkaller0: entered allmulticast mode [ 218.660091][ T8757] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 218.771038][ T8766] tipc: Resetting bearer [ 218.799027][ T8756] tipc: Resetting bearer [ 218.836207][ T8756] tipc: Disabling bearer [ 219.524926][ T8795] nbd0: detected capacity change from 0 to 127 [ 219.537664][ T51] block nbd0: Receive control failed (result -104) [ 219.646804][ T8811] netlink: 16 bytes leftover after parsing attributes in process `syz.2.665'. [ 219.657489][ T8811] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.665'. [ 219.864407][ T8827] syz.4.664 (8827) used obsolete PPPIOCDETACH ioctl [ 219.907372][ T8825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.664'. [ 221.021904][ T8852] netlink: 68 bytes leftover after parsing attributes in process `syz.1.677'. [ 221.038924][ T8856] netlink: 'syz.4.678': attribute type 2 has an invalid length. [ 221.071801][ T8856] !©9: entered promiscuous mode [ 221.090343][ T8856] netlink: 'syz.4.678': attribute type 2 has an invalid length. [ 221.114980][ T8856] !©9: left promiscuous mode [ 221.341271][ T8868] netlink: 40 bytes leftover after parsing attributes in process `syz.0.683'. [ 221.378296][ T8868] raw_sendmsg: syz.0.683 forgot to set AF_INET. Fix it! [ 221.534568][ T8874] vxcan1 speed is unknown, defaulting to 1000 [ 221.722980][ T8886] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 221.884862][ T8889] netlink: 172 bytes leftover after parsing attributes in process `syz.4.687'. [ 221.907801][ T8889] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 222.195976][ T8896] vxcan1 speed is unknown, defaulting to 1000 [ 222.463916][ T8874] lo speed is unknown, defaulting to 1000 [ 223.042856][ T8896] lo speed is unknown, defaulting to 1000 [ 223.192017][ T8922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.695'. [ 223.514913][ T8915] netlink: 'syz.3.695': attribute type 5 has an invalid length. [ 223.535705][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.695'. [ 223.609767][ T8935] netlink: 'syz.4.698': attribute type 10 has an invalid length. [ 223.685886][ T8935] netlink: 40 bytes leftover after parsing attributes in process `syz.4.698'. [ 223.724991][ T8935] batadv0: entered promiscuous mode [ 223.730490][ T8935] batadv0: entered allmulticast mode [ 223.744571][ T8935] bridge0: port 3(batadv0) entered blocking state [ 223.756906][ T8935] bridge0: port 3(batadv0) entered disabled state [ 224.015252][ T6855] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 224.024842][ T6855] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 224.098760][ T8945] netlink: 'syz.1.702': attribute type 1 has an invalid length. [ 224.192647][ T8945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.702'. [ 224.940360][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.708'. [ 224.967231][ T8966] vxcan1 speed is unknown, defaulting to 1000 [ 225.016121][ T8972] team0 (unregistering): Port device team_slave_0 removed [ 225.050160][ T8975] netlink: 'syz.4.708': attribute type 9 has an invalid length. [ 225.061545][ T8972] team0 (unregistering): Port device team_slave_1 removed [ 225.445821][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 225.789568][ T8991] netlink: 72 bytes leftover after parsing attributes in process `syz.1.712'. [ 225.827337][ T8991] netlink: 72 bytes leftover after parsing attributes in process `syz.1.712'. [ 225.862171][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 226.151313][ T8966] lo speed is unknown, defaulting to 1000 [ 226.162280][ T9005] tipc: Enabled bearer , priority 0 [ 226.180536][ T9005] syzkaller0: entered promiscuous mode [ 226.193401][ T9005] syzkaller0: entered allmulticast mode [ 226.356586][ T9005] tipc: Resetting bearer [ 226.411914][ T9013] netlink: 12 bytes leftover after parsing attributes in process `syz.1.715'. [ 226.517173][ T9003] tipc: Resetting bearer [ 226.524307][ T8988] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 226.626201][ T9003] tipc: Disabling bearer [ 227.069085][ T9026] syzkaller0: entered promiscuous mode [ 227.081932][ T9026] syzkaller0: entered allmulticast mode [ 227.111614][ T9031] IPv6: NLM_F_REPLACE set, but no existing node found! [ 227.173468][ T9026] tipc: Enabled bearer , priority 0 [ 227.215886][ T9024] tipc: Resetting bearer [ 227.298933][ T9039] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 227.326511][ T9024] tipc: Disabling bearer [ 227.861925][ T9068] netlink: 'syz.2.734': attribute type 11 has an invalid length. [ 228.261366][ T9089] xt_bpf: check failed: parse error [ 228.567458][ T9105] __nla_validate_parse: 2 callbacks suppressed [ 228.567475][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.743'. [ 228.806369][ T9114] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 228.888473][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'. [ 228.918345][ T8676] lo speed is unknown, defaulting to 1000 [ 228.928159][ T8676] syz2: Port: 1 Link DOWN [ 228.933014][ T9117] netlink: 'syz.1.746': attribute type 13 has an invalid length. [ 228.951527][ T9117] gretap0: refused to change device tx_queue_len [ 228.959901][ T9117] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 228.978779][ T8676] lo speed is unknown, defaulting to 1000 [ 228.985624][ T8676] syz2: Port: 1 Link ACTIVE [ 229.009897][ T9117] netlink: 'syz.1.746': attribute type 3 has an invalid length. [ 229.180272][ T5885] IPVS: starting estimator thread 0... [ 229.199708][ T9127] vxcan1: entered promiscuous mode [ 229.294805][ T9128] IPVS: using max 33 ests per chain, 79200 per kthread [ 229.382826][ T9132] bridge_slave_1: entered allmulticast mode [ 229.425844][ T9132] netlink: 44 bytes leftover after parsing attributes in process `syz.1.752'. [ 229.454976][ T9132] netlink: 44 bytes leftover after parsing attributes in process `syz.1.752'. [ 229.480188][ T9141] tipc: New replicast peer: 255.255.255.255 [ 229.503096][ T9141] tipc: Enabled bearer , priority 10 [ 229.572633][ T9144] netlink: 52 bytes leftover after parsing attributes in process `syz.0.756'. [ 229.629589][ T9146] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 230.089702][ T9170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.764'. [ 230.212189][ T9170] team0: entered promiscuous mode [ 230.219898][ T9170] team0: entered allmulticast mode [ 230.298431][ T9176] syzkaller1: entered promiscuous mode [ 230.303948][ T9176] syzkaller1: entered allmulticast mode [ 230.614943][ T5885] tipc: Node number set to 1186753035 [ 230.657470][ T9191] syzkaller0: entered promiscuous mode [ 230.663250][ T9191] syzkaller0: entered allmulticast mode [ 230.743014][ T9192] vxcan1 speed is unknown, defaulting to 1000 [ 230.820069][ T9198] batman_adv: batadv0: Adding interface: vlan3 [ 230.836380][ T9198] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.899840][ T9198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.984935][ T9198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.004878][ T9198] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 231.131617][ T9216] syzkaller0: entered promiscuous mode [ 231.137341][ T9216] syzkaller0: entered allmulticast mode [ 231.348836][ T9224] netlink: 40 bytes leftover after parsing attributes in process `syz.1.777'. [ 231.430129][ T9227] netlink: 'syz.2.778': attribute type 1 has an invalid length. [ 231.658826][ T9227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.886604][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.778'. [ 231.968988][ T9229] bond1: (slave veth3): Enslaving as an active interface with a down link [ 231.987493][ T9227] vlan0: entered allmulticast mode [ 231.992785][ T9227] veth1: entered allmulticast mode [ 231.998922][ T9227] veth1: entered promiscuous mode [ 232.005166][ T9227] veth1: left promiscuous mode [ 232.013106][ T9227] bond1: (slave vlan0): making interface the new active one [ 232.021658][ T9227] veth1: entered promiscuous mode [ 232.027553][ T9227] vlan0: entered promiscuous mode [ 232.035117][ T9227] bond1: (slave vlan0): Enslaving as an active interface with an up link [ 232.096563][ T9192] lo speed is unknown, defaulting to 1000 [ 232.709215][ T9273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.790'. [ 233.088234][ T9287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.794'. [ 233.740090][ T9308] netlink: 'syz.2.799': attribute type 1 has an invalid length. [ 233.780441][ T9306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.798'. [ 233.812029][ T9308] 8021q: adding VLAN 0 to HW filter on device bond2 [ 233.857213][ T9308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.799'. [ 233.873002][ T9315] netlink: 'syz.3.800': attribute type 142 has an invalid length. [ 233.893857][ T9313] bond2: (slave veth5): Enslaving as an active interface with a down link [ 233.982580][ T9319] netlink: 'syz.1.801': attribute type 12 has an invalid length. [ 234.012602][ T9311] netlink: 'syz.3.800': attribute type 12 has an invalid length. [ 234.058422][ T9320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.799'. [ 234.144605][ T9321] netlink: 'syz.1.801': attribute type 4 has an invalid length. [ 234.180934][ T9306] vxcan1 speed is unknown, defaulting to 1000 [ 234.293056][ T5885] lo speed is unknown, defaulting to 1000 [ 234.293095][ T9327] netlink: 20 bytes leftover after parsing attributes in process `syz.0.802'. [ 234.302837][ T5885] syz2: Port: 1 Link DOWN [ 234.657475][ T9337] tipc: Started in network mode [ 234.699315][ T9337] tipc: Node identity , cluster identity 4711 [ 234.716263][ T9337] tipc: Failed to set node id, please configure manually [ 234.733833][ T9337] tipc: Enabling of bearer rejected, failed to enable media [ 234.826852][ T9342] batadv1: entered promiscuous mode [ 235.026798][ T9346] vxcan1 speed is unknown, defaulting to 1000 [ 235.042760][ T9350] netlink: 5 bytes leftover after parsing attributes in process `syz.2.809'. [ 235.072009][ T9351] netlink: 5 bytes leftover after parsing attributes in process `syz.2.809'. [ 235.375841][ T9355] syzkaller0: entered promiscuous mode [ 235.382159][ T9355] syzkaller0: entered allmulticast mode [ 235.492214][ T9364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.814'. [ 235.659147][ T9306] lo speed is unknown, defaulting to 1000 [ 235.860994][ T9346] lo speed is unknown, defaulting to 1000 [ 236.370930][ T9391] netlink: 'syz.4.821': attribute type 1 has an invalid length. [ 236.490993][ T9391] bond1: (slave gretap2): making interface the new active one [ 236.499717][ T9391] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 236.511948][ T9391] netlink: 28 bytes leftover after parsing attributes in process `syz.4.821'. [ 236.857363][ T9393] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.893464][ T9393] bond1: (slave bond2): Enslaving as a backup interface with an up link [ 236.935005][ T9391] 8021q: adding VLAN 0 to HW filter on device bond1 [ 237.033500][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'. [ 237.372700][ T9413] syzkaller0: entered promiscuous mode [ 237.381679][ T9413] syzkaller0: entered allmulticast mode [ 237.493842][ T9421] syzkaller0: entered promiscuous mode [ 237.499921][ T9421] syzkaller0: entered allmulticast mode [ 238.168238][ T9439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.833'. [ 238.737543][ T9459] syzkaller0: entered promiscuous mode [ 238.743225][ T9459] syzkaller0: entered allmulticast mode [ 238.841686][ T9462] __nla_validate_parse: 1 callbacks suppressed [ 238.841704][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'. [ 238.876989][ T9464] netlink: 56 bytes leftover after parsing attributes in process `syz.2.842'. [ 238.877126][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'. [ 239.021727][ T9469] netlink: 100 bytes leftover after parsing attributes in process `syz.2.845'. [ 239.315840][ T9489] batadv_slave_0: Caught tx_queue_len zero misconfig [ 239.616213][ T9510] netlink: 60 bytes leftover after parsing attributes in process `syz.2.856'. [ 239.649140][ T9517] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.656496][ T9517] IPv6: NLM_F_CREATE should be set when creating new route [ 239.663749][ T9517] IPv6: NLM_F_CREATE should be set when creating new route [ 239.672008][ T9508] syzkaller0: entered promiscuous mode [ 239.678304][ T9508] syzkaller0: entered allmulticast mode [ 239.704606][ T9517] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.735141][ T9519] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 239.828474][ T9523] IPVS: Scheduler module ip_vs_ not found [ 239.907365][ T9527] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.914713][ T9527] IPv6: NLM_F_CREATE should be set when creating new route [ 239.922098][ T9527] IPv6: NLM_F_CREATE should be set when creating new route [ 240.239477][ T9535] tipc: Enabled bearer , priority 0 [ 240.258000][ T9535] syzkaller0: entered promiscuous mode [ 240.290741][ T9535] syzkaller0: entered allmulticast mode [ 240.344063][ T9535] tipc: Resetting bearer [ 240.462842][ T9549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.867'. [ 240.589330][ T9552] netlink: 7 bytes leftover after parsing attributes in process `syz.3.868'. [ 240.606008][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.869'. [ 240.611604][ T9557] syzkaller0: entered promiscuous mode [ 240.629332][ T9558] netlink: 28 bytes leftover after parsing attributes in process `syz.1.871'. [ 240.634044][ T9557] syzkaller0: entered allmulticast mode [ 240.648247][ T9555] FAULT_INJECTION: forcing a failure. [ 240.648247][ T9555] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 240.652878][ T9558] netlink: 'syz.1.871': attribute type 7 has an invalid length. [ 240.663245][ T9555] CPU: 0 UID: 0 PID: 9555 Comm: syz.2.869 Not tainted syzkaller #0 PREEMPT(full) [ 240.663276][ T9555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 240.663295][ T9555] Call Trace: [ 240.663302][ T9555] [ 240.663309][ T9555] dump_stack_lvl+0x189/0x250 [ 240.663352][ T9555] ? __pfx____ratelimit+0x10/0x10 [ 240.663373][ T9555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.663398][ T9555] ? __pfx__printk+0x10/0x10 [ 240.663417][ T9555] ? __might_fault+0xb0/0x130 [ 240.663454][ T9555] should_fail_ex+0x414/0x560 [ 240.663487][ T9555] _copy_from_user+0x2d/0xb0 [ 240.663512][ T9555] ___sys_sendmsg+0x158/0x2a0 [ 240.663538][ T9555] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.663596][ T9555] ? __fget_files+0x2a/0x420 [ 240.663613][ T9555] ? __fget_files+0x3a0/0x420 [ 240.663640][ T9555] __x64_sys_sendmsg+0x19b/0x260 [ 240.663666][ T9555] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 240.663698][ T9555] ? __pfx_ksys_write+0x10/0x10 [ 240.663727][ T9555] ? do_syscall_64+0xbe/0xfa0 [ 240.663753][ T9555] do_syscall_64+0xfa/0xfa0 [ 240.663772][ T9555] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.663793][ T9555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.663812][ T9555] ? clear_bhb_loop+0x60/0xb0 [ 240.663834][ T9555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.663851][ T9555] RIP: 0033:0x7fd0ea58f749 [ 240.663875][ T9555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.663891][ T9555] RSP: 002b:00007fd0eb4c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.663918][ T9555] RAX: ffffffffffffffda RBX: 00007fd0ea7e5fa0 RCX: 00007fd0ea58f749 [ 240.663931][ T9555] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000007 [ 240.663942][ T9555] RBP: 00007fd0eb4c1090 R08: 0000000000000000 R09: 0000000000000000 [ 240.663954][ T9555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.663965][ T9555] R13: 00007fd0ea7e6038 R14: 00007fd0ea7e5fa0 R15: 00007ffc2b18ee78 [ 240.663996][ T9555] [ 240.871173][ T9558] netlink: 'syz.1.871': attribute type 8 has an invalid length. [ 240.897251][ T9568] syzkaller0: entered promiscuous mode [ 240.900704][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 240.903775][ T9568] syzkaller0: entered allmulticast mode [ 241.029772][ T9577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 241.037077][ T9577] IPv6: NLM_F_CREATE should be set when creating new route [ 241.069271][ T9576] batman_adv: batadv0: Removing interface: dummy0 [ 241.081317][ T9576] bridge0: port 3(batadv0) entered disabled state [ 241.096541][ T9576] bridge_slave_0: left allmulticast mode [ 241.102377][ T9576] bridge_slave_0: left promiscuous mode [ 241.112016][ T9576] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.124148][ T9576] bridge_slave_1: left allmulticast mode [ 241.130858][ T9576] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.164580][ T9576] bond0: (slave bond_slave_0): Releasing backup interface [ 241.182881][ T9576] bond0: (slave bond_slave_1): Releasing backup interface [ 241.194021][ T9576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.205801][ T9576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.213836][ T9576] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 241.240503][ T9580] team0: Failed to send options change via netlink (err -105) [ 241.248305][ T9580] team0: Mode changed to "loadbalance" [ 241.299029][ T9576] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 241.667660][ T9606] FAULT_INJECTION: forcing a failure. [ 241.667660][ T9606] name failslab, interval 1, probability 0, space 0, times 1 [ 241.708236][ T9606] CPU: 1 UID: 0 PID: 9606 Comm: syz.4.883 Not tainted syzkaller #0 PREEMPT(full) [ 241.708263][ T9606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.708275][ T9606] Call Trace: [ 241.708283][ T9606] [ 241.708292][ T9606] dump_stack_lvl+0x189/0x250 [ 241.708323][ T9606] ? __pfx____ratelimit+0x10/0x10 [ 241.708344][ T9606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.708370][ T9606] ? __pfx__printk+0x10/0x10 [ 241.708392][ T9606] ? __pfx___might_resched+0x10/0x10 [ 241.708414][ T9606] ? fs_reclaim_acquire+0x7d/0x100 [ 241.708437][ T9606] should_fail_ex+0x414/0x560 [ 241.708471][ T9606] should_failslab+0xa8/0x100 [ 241.708492][ T9606] kmem_cache_alloc_node_noprof+0x77/0x710 [ 241.708517][ T9606] ? __alloc_skb+0x255/0x430 [ 241.708536][ T9606] ? napi_skb_cache_get+0x4a5/0x790 [ 241.708555][ T9606] ? napi_skb_cache_get+0x151/0x790 [ 241.708578][ T9606] __alloc_skb+0x255/0x430 [ 241.708601][ T9606] ? __pfx___alloc_skb+0x10/0x10 [ 241.708624][ T9606] ? netlink_autobind+0xdb/0x300 [ 241.708646][ T9606] ? netlink_autobind+0x2c2/0x300 [ 241.708675][ T9606] netlink_sendmsg+0x5c6/0xb30 [ 241.708707][ T9606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.708734][ T9606] ? aa_sock_msg_perm+0xf1/0x1d0 [ 241.708764][ T9606] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 241.708783][ T9606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.708807][ T9606] __sock_sendmsg+0x21c/0x270 [ 241.708839][ T9606] ____sys_sendmsg+0x505/0x830 [ 241.708868][ T9606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.708900][ T9606] ? import_iovec+0x74/0xa0 [ 241.708934][ T9606] ___sys_sendmsg+0x21f/0x2a0 [ 241.708960][ T9606] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.709020][ T9606] ? __fget_files+0x2a/0x420 [ 241.709037][ T9606] ? __fget_files+0x3a0/0x420 [ 241.709066][ T9606] __x64_sys_sendmsg+0x19b/0x260 [ 241.709092][ T9606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.709125][ T9606] ? __pfx_ksys_write+0x10/0x10 [ 241.709156][ T9606] ? do_syscall_64+0xbe/0xfa0 [ 241.709182][ T9606] do_syscall_64+0xfa/0xfa0 [ 241.709202][ T9606] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.709225][ T9606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.709244][ T9606] ? clear_bhb_loop+0x60/0xb0 [ 241.709267][ T9606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.709285][ T9606] RIP: 0033:0x7f6e74b8f749 [ 241.709302][ T9606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.709318][ T9606] RSP: 002b:00007f6e7597d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.709339][ T9606] RAX: ffffffffffffffda RBX: 00007f6e74de5fa0 RCX: 00007f6e74b8f749 [ 241.709354][ T9606] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000007 [ 241.709366][ T9606] RBP: 00007f6e7597d090 R08: 0000000000000000 R09: 0000000000000000 [ 241.709377][ T9606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.709389][ T9606] R13: 00007f6e74de6038 R14: 00007f6e74de5fa0 R15: 00007ffd41ccd508 [ 241.709421][ T9606] [ 242.013439][ T9607] vxcan1 speed is unknown, defaulting to 1000 [ 242.528973][ T9613] netlink: 'syz.1.884': attribute type 6 has an invalid length. [ 242.534398][ T9631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.906902][ T5885] hid-generic 0005:00FF:5508.0002: unknown main item tag 0x0 [ 242.959320][ T5885] hid-generic 0005:00FF:5508.0002: hidraw0: BLUETOOTH HID v0.06 Device [syz1] on aa:aa:aa:aa:aa:aa [ 243.334239][ T9607] lo speed is unknown, defaulting to 1000 [ 243.360862][ T9666] netlink: 'syz.2.899': attribute type 13 has an invalid length. [ 243.640352][ T9672] syzkaller0: entered promiscuous mode [ 243.650540][ T9672] syzkaller0: entered allmulticast mode [ 243.791320][ T9676] netlink: 'syz.3.902': attribute type 13 has an invalid length. [ 243.812541][ T9676] netlink: 'syz.3.902': attribute type 11 has an invalid length. [ 243.826406][ T6863] vlan0: left promiscuous mode [ 244.072884][ T9688] vxcan1 speed is unknown, defaulting to 1000 [ 244.837155][ T9714] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 245.048130][ T9687] vxcan1 speed is unknown, defaulting to 1000 [ 245.106305][ T9717] __nla_validate_parse: 8 callbacks suppressed [ 245.106324][ T9717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.913'. [ 245.359927][ T9728] netlink: 52 bytes leftover after parsing attributes in process `syz.1.915'. [ 245.603434][ T9735] netlink: 'syz.1.918': attribute type 16 has an invalid length. [ 245.611813][ T9735] netlink: 'syz.1.918': attribute type 17 has an invalid length. [ 245.759370][ T9735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.777064][ T9735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.851302][ T9688] lo speed is unknown, defaulting to 1000 [ 245.857564][ T9736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.918'. [ 245.871964][ T9687] lo speed is unknown, defaulting to 1000 [ 245.873797][ T6863] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.907119][ T6863] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.950264][ T6863] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.968834][ T6863] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.977696][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 246.220782][ T9742] tipc: Enabled bearer , priority 0 [ 246.302095][ T9746] syzkaller0: entered promiscuous mode [ 246.358853][ T9746] syzkaller0: entered allmulticast mode [ 246.459189][ T9742] tipc: Resetting bearer [ 246.506078][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.922'. [ 246.914500][ T9739] tipc: Resetting bearer [ 247.014286][ T9739] tipc: Disabling bearer [ 247.486075][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 247.558072][ T9776] netlink: 20 bytes leftover after parsing attributes in process `syz.0.929'. [ 247.643646][ T9782] netlink: 20 bytes leftover after parsing attributes in process `syz.3.930'. [ 247.747860][ T9773] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.784612][ T9773] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 28192 - 0 [ 248.021629][ T9773] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.033023][ T9773] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 28192 - 0 [ 248.108672][ T6832] udevd[6832]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 248.167926][ T9792] netlink: 20 bytes leftover after parsing attributes in process `syz.4.932'. [ 248.223885][ T9773] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.239891][ T9773] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 28192 - 0 [ 248.351583][ T9794] 8021q: adding VLAN 0 to HW filter on device bond4 [ 248.370696][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.933'. [ 248.419834][ T9802] netlink: 'syz.3.935': attribute type 9 has an invalid length. [ 248.487937][ T9773] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.503138][ T9773] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 28192 - 0 [ 248.666932][ T9806] vxcan1 speed is unknown, defaulting to 1000 [ 248.691438][ T1339] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 28192 - 0 [ 248.700675][ T1339] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 248.735259][ T6855] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 28192 - 0 [ 248.744152][ T6855] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 248.782999][ T6841] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 28192 - 0 [ 248.803371][ T6841] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 248.846677][ T6841] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 28192 - 0 [ 248.872861][ T6841] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 249.152072][ T9820] sctp: [Deprecated]: syz.3.941 (pid 9820) Use of struct sctp_assoc_value in delayed_ack socket option. [ 249.152072][ T9820] Use struct sctp_sack_info instead [ 249.261946][ T9817] vxcan1 speed is unknown, defaulting to 1000 [ 249.481331][ T9835] tipc: Enabling of bearer rejected, already enabled [ 249.520815][ T9838] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 249.550532][ T9838] netlink: 'syz.2.945': attribute type 10 has an invalid length. [ 249.580361][ T9838] team0: Failed to send options change via netlink (err -105) [ 249.595067][ T9838] team0: Port device dummy0 added [ 249.607153][ T9838] netlink: 'syz.2.945': attribute type 10 has an invalid length. [ 249.668175][ T9838] team0: Failed to send options change via netlink (err -105) [ 249.677851][ T9838] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 249.690808][ T9838] team0: Port device dummy0 removed [ 249.732684][ T9838] .`: (slave dummy0): Enslaving as an active interface with an up link [ 249.765483][ T9842] tipc: Enabling of bearer rejected, already enabled [ 249.930324][ T9849] syzkaller0: entered promiscuous mode [ 249.944942][ T9849] syzkaller0: entered allmulticast mode [ 250.030365][ T56] block nbd0: Possible stuck request ffff88802551e000: control (read@0,1024B). Runtime 30 seconds [ 250.042736][ T56] block nbd0: Possible stuck request ffff88802551e1c0: control (read@1024,1024B). Runtime 30 seconds [ 250.055081][ T56] block nbd0: Possible stuck request ffff88802551e380: control (read@2048,1024B). Runtime 30 seconds [ 250.067676][ T56] block nbd0: Possible stuck request ffff88802551e540: control (read@3072,1024B). Runtime 30 seconds [ 250.094368][ T9806] lo speed is unknown, defaulting to 1000 [ 250.375020][ T9865] syz_tun: entered allmulticast mode [ 250.412993][ T9817] lo speed is unknown, defaulting to 1000 [ 250.440809][ T9865] dvmrp8: entered allmulticast mode [ 250.643537][ T9864] syz_tun: left allmulticast mode [ 250.842498][ T9882] __nla_validate_parse: 5 callbacks suppressed [ 250.842516][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.959'. [ 250.935558][ T9884] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 251.182574][ T9898] netlink: 32 bytes leftover after parsing attributes in process `syz.3.962'. [ 251.487570][ T30] audit: type=1800 audit(1764240656.179:2): pid=9897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.962" name="cgroup.controllers" dev="tmpfs" ino=832 res=0 errno=0 [ 252.238870][ T9942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.971'. [ 252.248865][ T9942] syzkaller0: entered promiscuous mode [ 252.254358][ T9942] syzkaller0: entered allmulticast mode [ 252.263380][ T9942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.971'. [ 252.273735][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.972'. [ 252.417406][ T9945] macvtap1: entered promiscuous mode [ 252.498384][ T9945] erspan0: entered promiscuous mode [ 252.898595][ T9955] @ÿ: renamed from veth0_vlan (while UP) [ 253.057700][ T9962] netlink: 'syz.0.976': attribute type 4 has an invalid length. [ 253.158554][ T9964] vxcan1 speed is unknown, defaulting to 1000 [ 253.500804][ T9981] netlink: 'syz.3.979': attribute type 8 has an invalid length. [ 253.901471][ T9978] vxcan1 speed is unknown, defaulting to 1000 [ 254.401469][T10003] netlink: 'syz.1.981': attribute type 1 has an invalid length. [ 254.518449][T10003] bond1: entered promiscuous mode [ 254.545096][T10003] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.596313][T10005] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.611128][T10005] bond1: (slave bond2): making interface the new active one [ 254.618849][T10005] bond2: entered promiscuous mode [ 254.625242][T10005] bond1: (slave bond2): Enslaving as an active interface with an up link [ 254.640593][ T9981] vxcan1 speed is unknown, defaulting to 1000 [ 254.699458][T10012] æÿîÿ: entered promiscuous mode [ 254.771034][ T9964] lo speed is unknown, defaulting to 1000 [ 254.960003][T10022] syzkaller0: entered promiscuous mode [ 254.970852][T10022] syzkaller0: entered allmulticast mode [ 255.388169][ T9992] vxcan1 speed is unknown, defaulting to 1000 [ 255.399343][T10043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.987'. [ 255.412746][T10043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.987'. [ 255.666701][T10056] nbd2: detected capacity change from 0 to 63 [ 255.703379][T10056] block nbd2: NBD_DISCONNECT [ 255.716397][T10056] block nbd2: Disconnected due to user request. [ 255.744876][T10056] block nbd2: shutting down sockets [ 255.758845][ T30] audit: type=1800 audit(1764240660.439:3): pid=10063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.989" name="1" dev="tmpfs" ino=1141 res=0 errno=0 [ 255.765008][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.788380][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 255.798426][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.804791][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.813713][ C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.822910][ C0] Buffer I/O error on dev nbd2, logical block 1, async page read [ 255.831773][ C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.840877][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 255.848725][ C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.857823][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 255.876580][ T6832] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.918530][ T6832] Buffer I/O error on dev nbd2, logical block 0, async page read [ 255.932707][T10068] tipc: Enabled bearer , priority 0 [ 255.951137][ T6832] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 255.981484][ T6832] Buffer I/O error on dev nbd2, logical block 1, async page read [ 255.993477][T10072] tipc: Enabling of bearer rejected, already enabled [ 256.010160][ T6832] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 256.020158][ T9978] lo speed is unknown, defaulting to 1000 [ 256.049835][ T6832] Buffer I/O error on dev nbd2, logical block 2, async page read [ 256.070248][ T6832] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 256.101543][ T6832] Buffer I/O error on dev nbd2, logical block 3, async page read [ 256.124068][ T6832] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 256.153950][ T6832] Buffer I/O error on dev nbd2, logical block 0, async page read [ 256.170448][ T6832] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 256.205129][ T6832] Buffer I/O error on dev nbd2, logical block 1, async page read [ 256.242400][ T6832] ldm_validate_partition_table(): Disk read failed. [ 256.273858][ T6832] Dev nbd2: unable to read RDB block 0 [ 256.291558][ T6832] nbd2: unable to read partition table [ 256.347127][T10072] tipc: Disabling bearer [ 256.385798][ T6832] ldm_validate_partition_table(): Disk read failed. [ 256.394379][ T6832] Dev nbd2: unable to read RDB block 0 [ 256.421229][ T6832] nbd2: unable to read partition table [ 256.445108][T10077] 8021q: VLANs not supported on wpan0 [ 256.593402][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.994'. [ 256.612844][T10088] pim6reg1: entered promiscuous mode [ 256.618612][T10088] pim6reg1: entered allmulticast mode [ 256.809730][T10094] syzkaller0: entered promiscuous mode [ 256.825028][T10094] syzkaller0: entered allmulticast mode [ 257.040515][ T9992] lo speed is unknown, defaulting to 1000 [ 257.194834][ T9981] lo speed is unknown, defaulting to 1000 [ 257.260599][T10106] nbd1: detected capacity change from 0 to 3 [ 257.276744][ T51] block nbd1: Receive control failed (result -32) [ 257.307255][ T6832] block nbd1: Dead connection, failed to find a fallback [ 257.848621][T10115] vxcan1 speed is unknown, defaulting to 1000 [ 258.155675][T10138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1004'. [ 258.657264][T10147] syzkaller0: entered promiscuous mode [ 258.676819][T10147] syzkaller0: entered allmulticast mode [ 258.692668][T10149] netlink: 'syz.2.1007': attribute type 13 has an invalid length. [ 258.767545][T10150] netlink: 'syz.2.1007': attribute type 10 has an invalid length. [ 258.922864][T10149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.938855][T10149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.225807][T10149] hsr0: left allmulticast mode [ 259.230624][T10149] hsr_slave_0: left allmulticast mode [ 259.398814][T10150] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.408109][T10150] .`: (slave team0): Enslaving as an active interface with an up link [ 259.446917][T10115] lo speed is unknown, defaulting to 1000 [ 259.452746][ T6841] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.474875][ T6841] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.524269][ T6841] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.554443][ T6841] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.559392][T10159] netlink: 'syz.2.1009': attribute type 1 has an invalid length. [ 259.634532][T10159] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 259.660671][T10168] netlink: 'syz.4.1010': attribute type 10 has an invalid length. [ 259.798730][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'. [ 259.812845][T10168] batadv0: left promiscuous mode [ 259.819896][T10168] batadv0: left allmulticast mode [ 259.839047][T10168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.046210][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1015'. [ 260.058710][T10187] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1016'. [ 260.075660][T10188] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 260.088484][T10187] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1016'. [ 260.169661][T10194] netlink: 'syz.2.1017': attribute type 1 has an invalid length. [ 260.288712][T10200] bridge_slave_0: left allmulticast mode [ 260.301463][T10200] bridge_slave_0: left promiscuous mode [ 260.317066][T10200] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.079542][T10200] bond0: (slave bridge_slave_1): Releasing backup interface [ 263.103849][T10200] bridge_slave_1: left promiscuous mode [ 263.124304][T10200] bond0: (slave 30): Releasing backup interface [ 263.140537][T10200] : left promiscuous mode [ 263.177607][T10200] bond0: (slave bond_slave_1): Releasing backup interface [ 263.190592][T10200] bond_slave_1: left promiscuous mode [ 263.209454][T10200] team0: Port device team_slave_0 removed [ 263.224617][T10200] team0: Port device team_slave_1 removed [ 263.231809][T10200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.243357][T10200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.249726][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1021'. [ 263.261530][T10200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.270505][T10200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.279268][T10200] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 263.328127][T10215] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1021'. [ 263.337184][T10215] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1021'. [ 263.346694][T10215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1021'. [ 263.399898][T10215] delete_channel: no stack [ 263.546525][T10224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1023'. [ 263.667109][T10234] netlink: 'syz.4.1027': attribute type 1 has an invalid length. [ 263.711478][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1026'. [ 263.782274][T10234] bond5: entered promiscuous mode [ 263.790929][T10234] 8021q: adding VLAN 0 to HW filter on device bond5 [ 263.821774][T10242] siw: device registration error -23 [ 263.848629][T10242] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1030'. [ 264.159598][T10264] netlink: 'syz.1.1037': attribute type 83 has an invalid length. [ 264.358403][T10273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'. [ 264.469130][T10283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1042'. [ 264.482872][T10283] macvlan2: entered promiscuous mode [ 264.488480][T10283] bond0: entered promiscuous mode [ 264.493621][T10283] bond_slave_0: entered promiscuous mode [ 264.499773][T10283] bond_slave_1: entered promiscuous mode [ 264.508356][T10283] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 264.997132][T10291] vxcan1 speed is unknown, defaulting to 1000 [ 265.415754][T10304] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1048'. [ 265.465209][T10304] netlink: 'syz.2.1048': attribute type 9 has an invalid length. [ 265.533116][T10304] netlink: 'syz.2.1048': attribute type 5 has an invalid length. [ 265.557424][T10306] netlink: 'syz.0.1049': attribute type 27 has an invalid length. [ 265.659896][T10304] batman_adv: batadv0: Adding interface: vxlan0 [ 265.684985][T10304] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.745523][T10304] batman_adv: batadv0: Interface activated: vxlan0 [ 265.763957][ T6841] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.883841][T10306] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.891659][T10306] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.231214][T10306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.285992][T10306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.532304][T10306] erspan1: left allmulticast mode [ 266.544594][T10306] geneve2: left promiscuous mode [ 266.556258][T10306] geneve2: left allmulticast mode [ 266.566614][T10306] bond4: left promiscuous mode [ 266.571585][T10306] bond4: left allmulticast mode [ 266.578540][T10306] bond0: left promiscuous mode [ 266.583519][T10306] bond_slave_0: left promiscuous mode [ 266.589848][T10306] bond_slave_1: left promiscuous mode [ 266.595940][T10306] macvlan2: left promiscuous mode [ 266.643724][T10308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 266.660708][ T6841] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.678443][ T6841] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.697937][ T6841] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.727635][ T6841] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 28192 - 0 [ 266.758481][ T6841] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 266.807304][ T6841] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 28192 - 0 [ 266.816095][ T6841] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 266.846357][ T6841] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 28192 - 0 [ 266.872576][ T6841] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 266.885901][ T6841] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 28192 - 0 [ 266.895106][ T6841] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 267.163223][T10291] lo speed is unknown, defaulting to 1000 [ 268.185883][T10363] syzkaller0: entered promiscuous mode [ 268.191528][T10363] syzkaller0: entered allmulticast mode [ 268.239588][T10361] vxcan1 speed is unknown, defaulting to 1000 [ 268.360777][T10367] __nla_validate_parse: 6 callbacks suppressed [ 268.360795][T10367] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1065'. [ 268.653219][T10371] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1067'. [ 268.670520][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1067'. [ 268.700645][T10373] x_tables: ip_tables: ah match: only valid for protocol 51 [ 268.715055][T10371] : entered promiscuous mode [ 268.727259][T10373] netlink: 'syz.4.1068': attribute type 13 has an invalid length. [ 268.872282][T10364] vxcan1 speed is unknown, defaulting to 1000 [ 269.456646][T10401] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 269.511493][T10402] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 269.567724][T10361] lo speed is unknown, defaulting to 1000 [ 269.899956][T10406] syzkaller0: entered promiscuous mode [ 269.914424][T10406] syzkaller0: entered allmulticast mode [ 269.946417][T10408] team0: Caught tx_queue_len zero misconfig [ 269.975662][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1079'. [ 270.110015][T10411] syzkaller0: entered promiscuous mode [ 270.131131][T10411] syzkaller0: entered allmulticast mode [ 270.241947][T10364] lo speed is unknown, defaulting to 1000 [ 270.614465][T10422] bridge0: left allmulticast mode [ 271.286233][T10422] vlan2: left promiscuous mode [ 271.291165][T10422] bond0: left promiscuous mode [ 271.307585][T10422] tipc: Resetting bearer [ 271.314017][T10422] syzkaller0: left promiscuous mode [ 271.319546][T10422] syzkaller0: left allmulticast mode [ 271.369996][T10151] vxcan1 speed is unknown, defaulting to 1000 [ 271.385154][T10151] syz0: Port: 1 Link DOWN [ 271.412461][T10433] bond6: entered promiscuous mode [ 271.417794][T10433] bond6: entered allmulticast mode [ 271.423530][T10433] 8021q: adding VLAN 0 to HW filter on device bond6 [ 271.551380][T10433] bond6 (unregistering): Released all slaves [ 271.567715][ T8683] syz1: Port: 1 Link DOWN [ 271.572386][ T1339] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.583455][ T1339] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.606185][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 271.639356][ T1339] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.755374][ T1339] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.035529][T10454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1091'. [ 272.200547][T10460] vxcan1 speed is unknown, defaulting to 1000 [ 272.270069][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1095'. [ 272.372443][T10464] syzkaller0: entered promiscuous mode [ 272.384855][T10464] syzkaller0: entered allmulticast mode [ 272.609539][T10473] geneve2: entered promiscuous mode [ 272.629913][ T6862] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.646099][ T6862] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.686909][ T6862] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.703637][ T6862] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.876277][T10484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1101'. [ 273.176745][T10490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1102'. [ 273.446012][ T30] audit: type=1800 audit(1764240678.139:4): pid=10502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1107" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=1245 res=0 errno=0 [ 273.675893][T10508] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1108'. [ 274.604243][T10460] lo speed is unknown, defaulting to 1000 [ 274.847251][T10517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1114'. [ 274.857117][T10521] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 274.928844][T10520] vxcan1 speed is unknown, defaulting to 1000 [ 275.157382][T10535] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1116'. [ 275.174959][T10535] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1116'. [ 275.275365][T10535] 8021q: adding VLAN 0 to HW filter on device bond2 [ 275.659073][T10520] lo speed is unknown, defaulting to 1000 [ 275.676377][T10563] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 276.395906][T10584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1126'. [ 276.633996][T10589] netlink: 'syz.0.1128': attribute type 29 has an invalid length. [ 276.664311][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1128'. [ 276.762957][T10591] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1128'. [ 276.764892][T10595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1130'. [ 277.018572][T10605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1131'. [ 277.064498][T10607] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.144359][T10607] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.227377][T10607] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.309659][T10611] can: request_module (can-proto-5) failed. [ 277.328374][T10607] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.343031][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1136'. [ 277.469694][ T6841] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.520044][ T6855] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.531087][T10633] x_tables: duplicate underflow at hook 1 [ 277.534887][ T6855] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.548546][ T6855] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.776613][T10646] bond6: option lacp_active: invalid value (8) [ 277.787917][T10646] bond6 (unregistering): Released all slaves [ 277.860609][T10651] IPVS: length: 141 != 8 [ 277.919685][T10646] xt_limit: Overflow, try lower: 268435456/134217728 [ 278.015392][T10662] netlink: 'syz.2.1149': attribute type 1 has an invalid length. [ 278.099346][T10662] bond3: entered promiscuous mode [ 278.104425][T10662] bond3: entered allmulticast mode [ 278.302720][T10661] vxcan1 speed is unknown, defaulting to 1000 [ 278.379138][T10662] bond3: left promiscuous mode [ 278.383958][T10662] bond3: left allmulticast mode [ 278.415430][T10662] 8021q: adding VLAN 0 to HW filter on device bond3 [ 278.433388][T10676] vlan2: entered allmulticast mode [ 278.446542][T10676] dummy0: entered allmulticast mode [ 278.492748][T10681] syzkaller0: entered promiscuous mode [ 278.500277][T10681] syzkaller0: entered allmulticast mode [ 278.907429][T10687] __nla_validate_parse: 13 callbacks suppressed [ 278.907449][T10687] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1154'. [ 279.152036][T10696] vxcan1 speed is unknown, defaulting to 1000 [ 279.205800][T10702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1161'. [ 279.256678][T10702] openvswitch: netlink: Flow actions attr not present in new flow. [ 279.383742][T10661] lo speed is unknown, defaulting to 1000 [ 279.816657][T10721] vxcan1 speed is unknown, defaulting to 1000 [ 279.922956][T10725] syzkaller1: entered promiscuous mode [ 279.965199][T10725] syzkaller1: entered allmulticast mode [ 280.121009][ T56] block nbd0: Possible stuck request ffff88802551e000: control (read@0,1024B). Runtime 60 seconds [ 280.132180][ T56] block nbd0: Possible stuck request ffff88802551e1c0: control (read@1024,1024B). Runtime 60 seconds [ 280.143148][ T56] block nbd0: Possible stuck request ffff88802551e380: control (read@2048,1024B). Runtime 60 seconds [ 280.154078][ T56] block nbd0: Possible stuck request ffff88802551e540: control (read@3072,1024B). Runtime 60 seconds [ 280.602929][T10756] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1169'. [ 280.871657][T10696] lo speed is unknown, defaulting to 1000 [ 280.930947][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1172'. [ 281.032537][T10765] IPVS: set_ctl: invalid protocol: 92 100.1.1.2:20000 [ 281.366872][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1175'. [ 281.377165][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1175'. [ 281.387756][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1175'. [ 281.420058][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1175'. [ 281.471938][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1175'. [ 281.585118][T10721] lo speed is unknown, defaulting to 1000 [ 281.875187][T10805] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1179'. [ 281.913083][T10805] netlink: 'syz.0.1179': attribute type 1 has an invalid length. [ 282.271839][T10802] vxcan1 speed is unknown, defaulting to 1000 [ 282.511110][T10822] bond3 (unregistering): Released all slaves [ 283.499899][T10802] lo speed is unknown, defaulting to 1000 [ 284.231384][T10893] bond4: entered promiscuous mode [ 284.243097][T10893] bond4: entered allmulticast mode [ 284.249726][T10893] 8021q: adding VLAN 0 to HW filter on device bond4 [ 284.283156][T10905] __nla_validate_parse: 5 callbacks suppressed [ 284.283174][T10905] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.1201'. [ 284.305198][T10905] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 284.329325][T10912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1203'. [ 284.375328][T10912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1203'. [ 284.409310][T10910] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1202'. [ 284.734365][T10926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.756576][T10926] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.790915][T10926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.824256][ T5925] lo speed is unknown, defaulting to 1000 [ 284.833242][T10919] syzkaller1: entered promiscuous mode [ 284.838941][T10919] syzkaller1: entered allmulticast mode [ 284.844956][ T5925] syz2: Port: 1 Link ACTIVE [ 284.908486][T10936] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1207'. [ 284.936018][T10936] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1207'. [ 284.980136][T10939] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 285.051583][T10944] syzkaller1: entered promiscuous mode [ 285.069586][T10944] syzkaller1: entered allmulticast mode [ 285.199617][T10951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1214'. [ 285.218891][T10951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1214'. [ 285.328637][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1217'. [ 285.525259][T10975] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 285.541985][T10975] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1219'. [ 285.588459][T10975] vlan4: entered allmulticast mode [ 285.593713][T10975] erspan0: entered allmulticast mode [ 285.638509][T10971] vxcan1 speed is unknown, defaulting to 1000 [ 286.504991][T11012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.525648][T11014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.875162][T11020] syzkaller1: entered promiscuous mode [ 286.901069][T11020] syzkaller1: entered allmulticast mode [ 287.109159][T10971] lo speed is unknown, defaulting to 1000 [ 287.254809][T11035] ieee802154 phy0 wpan0: encryption failed: -22 [ 287.473879][T11048] netlink: 'syz.1.1238': attribute type 6 has an invalid length. [ 287.572151][T11050] syzkaller0: entered promiscuous mode [ 287.578794][T11050] syzkaller0: entered allmulticast mode [ 288.057663][T11065] syzkaller0: entered promiscuous mode [ 288.073527][T11065] syzkaller0: entered allmulticast mode [ 288.656749][T11077] tipc: Enabling of bearer rejected, already enabled [ 288.774058][T11092] macvlan3: entered promiscuous mode [ 288.815890][T11092] macvlan3: entered allmulticast mode [ 289.002066][T11107] netlink: 'syz.3.1256': attribute type 12 has an invalid length. [ 289.027904][T11109] team0: Caught tx_queue_len zero misconfig [ 289.121457][T11122] veth0_to_team: entered promiscuous mode [ 289.262188][T11126] vxcan1 speed is unknown, defaulting to 1000 [ 289.566002][T11131] __nla_validate_parse: 9 callbacks suppressed [ 289.566021][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1260'. [ 290.347418][ T5914] hid-generic 0005:00FF:5508.0003: unknown main item tag 0x0 [ 290.370307][ T5914] hid-generic 0005:00FF:5508.0003: hidraw0: BLUETOOTH HID v0.06 Device [syz1] on aa:aa:aa:aa:aa:aa [ 290.512389][T11159] netlink: 'syz.4.1268': attribute type 29 has an invalid length. [ 290.546463][T11159] netlink: 'syz.4.1268': attribute type 29 has an invalid length. [ 291.265805][T11159] netlink: 'syz.4.1268': attribute type 29 has an invalid length. [ 291.312577][T11159] netlink: 'syz.4.1268': attribute type 29 has an invalid length. [ 291.320945][T11126] lo speed is unknown, defaulting to 1000 [ 291.320983][T11159] netlink: 'syz.4.1268': attribute type 29 has an invalid length. [ 291.335022][T11159] netlink: 'syz.4.1268': attribute type 29 has an invalid length. [ 291.343260][T11159] netlink: 'syz.4.1268': attribute type 29 has an invalid length. [ 291.489411][T11167] xt_TPROXY: Can be used only with -p tcp or -p udp [ 291.502641][T11173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1271'. [ 291.523314][T11172] bond7: option mode: invalid value (254) [ 291.530455][T11173] netlink: 'syz.4.1271': attribute type 2 has an invalid length. [ 291.544411][T11172] bond7 (unregistering): Released all slaves [ 291.675813][T11166] vxcan1 speed is unknown, defaulting to 1000 [ 291.879580][T11195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1277'. [ 291.954936][T11183] vxcan1 speed is unknown, defaulting to 1000 [ 292.080890][T11201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1278'. [ 292.144352][T11201] bond0: (slave bond_slave_1): Releasing backup interface [ 292.305534][T11200] vxcan1 speed is unknown, defaulting to 1000 [ 292.697297][T11166] lo speed is unknown, defaulting to 1000 [ 293.149448][T11216] tipc: Started in network mode [ 293.154567][T11216] tipc: Node identity 7, cluster identity 4711 [ 293.161006][T11216] tipc: Node number set to 7 [ 293.249459][T11215] vxcan1 speed is unknown, defaulting to 1000 [ 293.256714][T11200] lo speed is unknown, defaulting to 1000 [ 293.269733][T11183] lo speed is unknown, defaulting to 1000 [ 293.836398][T11222] tipc: Enabled bearer , priority 0 [ 293.971156][T11222] syzkaller0: entered promiscuous mode [ 293.983211][T11222] syzkaller0: entered allmulticast mode [ 293.989676][T11222] tipc: Resetting bearer [ 294.114838][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 294.252957][T11215] lo speed is unknown, defaulting to 1000 [ 294.585107][T11220] tipc: Resetting bearer [ 295.811245][T11220] tipc: Disabling bearer [ 296.517564][T11234] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1288'. [ 296.564963][T11238] vxcan1 speed is unknown, defaulting to 1000 [ 296.627969][T11246] sctp: [Deprecated]: syz.3.1292 (pid 11246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.627969][T11246] Use struct sctp_sack_info instead [ 296.737629][T11252] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1294'. [ 296.755710][T11252] ip6tnl0: Caught tx_queue_len zero misconfig [ 296.761836][T11252] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1294'. [ 296.824262][T11254] netlink: 'syz.3.1294': attribute type 49 has an invalid length. [ 296.929286][T11255] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1290'. [ 297.110667][T11270] netlink: 264 bytes leftover after parsing attributes in process `syz.0.1299'. [ 297.206777][T11265] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1297'. [ 297.286767][T11277] vxcan1 speed is unknown, defaulting to 1000 [ 297.335909][T11285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1300'. [ 297.377099][T11238] lo speed is unknown, defaulting to 1000 [ 297.596227][T11279] vxcan1 speed is unknown, defaulting to 1000 [ 298.163633][T11298] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1304'. [ 298.241146][T11302] syzkaller0: entered promiscuous mode [ 298.265211][T11302] syzkaller0: entered allmulticast mode [ 298.272575][T11277] lo speed is unknown, defaulting to 1000 [ 298.690796][T11317] vxcan1 speed is unknown, defaulting to 1000 [ 298.693932][T11279] lo speed is unknown, defaulting to 1000 [ 299.420394][T11325] vxcan1 speed is unknown, defaulting to 1000 [ 299.798377][T11322] vxcan1 speed is unknown, defaulting to 1000 [ 299.811679][T11337] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 300.343865][T11350] syzkaller0: entered promiscuous mode [ 300.354828][T11350] syzkaller0: entered allmulticast mode [ 300.443025][T11317] lo speed is unknown, defaulting to 1000 [ 300.467434][T11353] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1317'. [ 301.007642][T11322] lo speed is unknown, defaulting to 1000 [ 301.120051][T11358] veth1_to_bond: entered allmulticast mode [ 301.127642][T11358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1320'. [ 301.163252][T11358] .`: (slave bond_slave_1): Releasing backup interface [ 301.237311][T11358] veth1_to_bond (unregistering): left allmulticast mode [ 301.361591][T11364] netlink: 'syz.4.1321': attribute type 1 has an invalid length. [ 301.608622][T11325] lo speed is unknown, defaulting to 1000 [ 301.977793][T11367] netlink: 'syz.4.1322': attribute type 1 has an invalid length. [ 302.237526][T11367] 8021q: adding VLAN 0 to HW filter on device bond6 [ 302.320258][T11368] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 302.333020][T11368] bond6: (slave batadv2): making interface the new active one [ 302.346418][T11368] bond6: (slave batadv2): Enslaving as an active interface with an up link [ 302.468396][T11378] netlink: 428 bytes leftover after parsing attributes in process `syz.4.1325'. [ 302.892237][T11393] netlink: 'syz.3.1330': attribute type 1 has an invalid length. [ 302.945988][T11393] 8021q: adding VLAN 0 to HW filter on device bond3 [ 303.010194][T11390] syzkaller0: entered promiscuous mode [ 303.021057][T11390] syzkaller0: entered allmulticast mode [ 303.263782][T11393] bond3: (slave veth7): Enslaving as an active interface with an up link [ 303.753834][T11415] vxcan1 speed is unknown, defaulting to 1000 [ 303.787769][T11428] ip6tnl0: Caught tx_queue_len zero misconfig [ 303.924229][T11429] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1337'. [ 303.936312][T11429] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1337'. [ 304.231874][T11446] syzkaller0: entered promiscuous mode [ 304.247709][T11446] syzkaller0: entered allmulticast mode [ 304.256605][T11446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1342'. [ 304.299103][T11447] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1338'. [ 304.386074][T11415] lo speed is unknown, defaulting to 1000 [ 304.926172][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1344'. [ 304.935383][T11453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1344'. [ 304.944269][T11453] netlink: 'syz.0.1344': attribute type 1 has an invalid length. [ 304.953483][T11453] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1344'. [ 304.994810][T11453] block nbd2: Unsupported socket: should be TCP or UNIX. [ 305.024075][T11455] xt_l2tp: v2 doesn't support IP mode [ 305.140783][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1347'. [ 305.347097][T11471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1351'. [ 305.657878][T11494] vxcan1 speed is unknown, defaulting to 1000 [ 305.899363][T11506] ªªªªªª: renamed from wg2 [ 306.149041][T11512] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.250664][T11503] vxcan1 speed is unknown, defaulting to 1000 [ 306.341610][T11512] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.506195][T11512] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.748372][T11532] bridge_slave_1: left allmulticast mode [ 306.757385][T11532] bridge_slave_1: left promiscuous mode [ 306.763218][T11532] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.777636][T11532] bridge_slave_0: left allmulticast mode [ 306.784137][T11532] bridge_slave_0: left promiscuous mode [ 306.804153][T11532] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.980788][T11512] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.006571][T11494] lo speed is unknown, defaulting to 1000 [ 307.262877][ T1339] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.300902][ T6862] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.327357][ T1339] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.372054][T11503] lo speed is unknown, defaulting to 1000 [ 307.453207][ T6862] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.768301][T11559] pim6reg1: entered promiscuous mode [ 307.773657][T11559] pim6reg1: entered allmulticast mode [ 307.789580][T11556] syzkaller0: entered promiscuous mode [ 307.795813][T11556] syzkaller0: entered allmulticast mode [ 308.027276][T11562] batadv1: entered promiscuous mode [ 308.178322][T11563] vxcan1 speed is unknown, defaulting to 1000 [ 308.445738][T11575] __nla_validate_parse: 6 callbacks suppressed [ 308.446673][T11575] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1378'. [ 308.509983][T11575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1378'. [ 308.523155][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1377'. [ 308.524293][T11578] netlink: 'syz.0.1379': attribute type 33 has an invalid length. [ 308.552719][T11578] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1379'. [ 308.584949][T11578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1379'. [ 309.053121][T11603] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4. [ 309.135434][T11607] netlink: 'syz.4.1385': attribute type 4 has an invalid length. [ 309.157665][T11607] netlink: 'syz.4.1385': attribute type 4 has an invalid length. [ 309.179947][T11563] lo speed is unknown, defaulting to 1000 [ 309.273798][T11613] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 309.363081][T11617] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1388'. [ 309.981917][T11625] smc: removing ib device syz0 [ 310.045847][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1392'. [ 310.185027][ T56] block nbd0: Possible stuck request ffff88802551e000: control (read@0,1024B). Runtime 90 seconds [ 310.196174][ T56] block nbd0: Possible stuck request ffff88802551e1c0: control (read@1024,1024B). Runtime 90 seconds [ 310.214898][ T56] block nbd0: Possible stuck request ffff88802551e380: control (read@2048,1024B). Runtime 90 seconds [ 310.226561][ T56] block nbd0: Possible stuck request ffff88802551e540: control (read@3072,1024B). Runtime 90 seconds [ 310.278753][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1395'. [ 310.801812][T11659] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 310.929151][T11662] netlink: 'syz.3.1401': attribute type 1 has an invalid length. [ 311.208229][T11664] 8021q: adding VLAN 0 to HW filter on device bond5 [ 311.239991][T11664] bond4: (slave bond5): making interface the new active one [ 311.249045][T11664] bond4: (slave bond5): Enslaving as an active interface with an up link [ 311.348752][T11668] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 311.668968][T11682] netlink: 'syz.2.1406': attribute type 1 has an invalid length. [ 311.895869][T11699] tipc: Resetting bearer [ 312.033987][ T6862] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.075361][ T6862] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.083756][ T6862] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.133274][ T6862] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.169930][T11712] netlink: 'syz.0.1413': attribute type 10 has an invalid length. [ 312.277258][T11717] IPVS: Unknown mcast interface: dvmrp1 [ 312.496365][T11725] netlink: 'syz.0.1417': attribute type 1 has an invalid length. [ 312.592688][T11732] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1420'. [ 312.607261][T11734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1420'. [ 312.740334][T11742] IPv6: sit1: Disabled Multicast RS [ 313.207687][T11749] lo speed is unknown, defaulting to 1000 [ 313.506852][T11774] netlink: 'syz.3.1430': attribute type 1 has an invalid length. [ 313.514773][T11774] __nla_validate_parse: 3 callbacks suppressed [ 313.514851][T11774] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1430'. [ 313.896920][T11786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1435'. [ 313.919699][T11786] tipc: Enabling of bearer rejected, media not registered [ 314.040018][T11789] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1437'. [ 314.444467][ T51] Bluetooth: hci4: link tx timeout [ 314.452010][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 314.558595][T11807] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1443'. [ 314.583549][T11807] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1443'. [ 314.708058][T11791] lo speed is unknown, defaulting to 1000 [ 314.872363][T11819] bond0: Unable to set down delay as MII monitoring is disabled [ 315.051882][T11826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1448'. [ 315.121463][T11826] bond3: entered promiscuous mode [ 315.132471][T11826] 8021q: adding VLAN 0 to HW filter on device bond3 [ 315.157422][T11828] 8021q: adding VLAN 0 to HW filter on device bond4 [ 315.165583][T11828] bond4: entered promiscuous mode [ 315.171100][T11828] bond3: (slave bond4): Enslaving as an active interface with an up link [ 315.224301][T11796] lo speed is unknown, defaulting to 1000 [ 316.504937][ T5145] Bluetooth: hci4: command 0x0405 tx timeout [ 317.227695][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.234067][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.066305][T11850] netlink: 'syz.4.1455': attribute type 9 has an invalid length. [ 318.084895][T11850] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1455'. [ 318.104563][T11850] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1455'. [ 318.104963][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1457'. [ 318.161903][T11855] netlink: 'syz.0.1457': attribute type 1 has an invalid length. [ 318.184914][T11855] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1457'. [ 318.251732][T11858] FAULT_INJECTION: forcing a failure. [ 318.251732][T11858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.306743][T11858] CPU: 0 UID: 0 PID: 11858 Comm: syz.3.1458 Not tainted syzkaller #0 PREEMPT(full) [ 318.306772][T11858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 318.306785][T11858] Call Trace: [ 318.306792][T11858] [ 318.306801][T11858] dump_stack_lvl+0x189/0x250 [ 318.306831][T11858] ? __pfx____ratelimit+0x10/0x10 [ 318.306853][T11858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.306879][T11858] ? __pfx__printk+0x10/0x10 [ 318.306899][T11858] ? __might_fault+0xb0/0x130 [ 318.306938][T11858] should_fail_ex+0x414/0x560 [ 318.306974][T11858] _copy_from_user+0x2d/0xb0 [ 318.307000][T11858] ___sys_recvmsg+0x12e/0x510 [ 318.307031][T11858] ? __pfx____sys_recvmsg+0x10/0x10 [ 318.307089][T11858] ? __might_fault+0xb0/0x130 [ 318.307121][T11858] do_recvmmsg+0x307/0x770 [ 318.307155][T11858] ? __pfx_do_recvmmsg+0x10/0x10 [ 318.307191][T11858] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 318.307235][T11858] __x64_sys_recvmmsg+0x190/0x240 [ 318.307264][T11858] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 318.307293][T11858] ? do_syscall_64+0xbe/0xfa0 [ 318.307320][T11858] do_syscall_64+0xfa/0xfa0 [ 318.307341][T11858] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.307363][T11858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.307382][T11858] ? clear_bhb_loop+0x60/0xb0 [ 318.307406][T11858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.307431][T11858] RIP: 0033:0x7ffade78f749 [ 318.307448][T11858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.307470][T11858] RSP: 002b:00007ffadf64b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 318.307491][T11858] RAX: ffffffffffffffda RBX: 00007ffade9e5fa0 RCX: 00007ffade78f749 [ 318.307506][T11858] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000003 [ 318.307518][T11858] RBP: 00007ffadf64b090 R08: 0000000000000000 R09: 0000000000000000 [ 318.307531][T11858] R10: 0000000000000406 R11: 0000000000000246 R12: 0000000000000001 [ 318.307542][T11858] R13: 00007ffade9e6038 R14: 00007ffade9e5fa0 R15: 00007ffed8fda328 [ 318.307576][T11858] [ 318.579305][T11834] lo speed is unknown, defaulting to 1000 [ 318.955055][T11877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1462'. [ 318.965255][T11877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1462'. [ 319.484464][T11892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1468'. [ 319.584448][T11894] veth7: entered promiscuous mode [ 319.642422][T11899] IPVS: length: 132 != 8 [ 319.652287][T11895] veth9: entered promiscuous mode [ 319.659062][T11903] netlink: 'syz.4.1472': attribute type 3 has an invalid length. [ 319.667120][T11904] netlink: 340 bytes leftover after parsing attributes in process `syz.4.1472'. [ 319.768353][T11911] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1473'. [ 319.852829][T11915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1474'. [ 319.915881][T11919] netlink: 'syz.0.1474': attribute type 1 has an invalid length. [ 319.923647][T11919] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1474'. [ 319.976963][T11921] tipc: Enabling of bearer rejected, already enabled [ 320.101505][T11930] netlink: 'syz.1.1479': attribute type 1 has an invalid length. [ 320.536182][T11951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1485'. [ 320.597167][T11951] veth0: entered promiscuous mode [ 320.612695][T11951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1485'. [ 320.631357][T11951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1485'. [ 320.691524][T11951] veth0 (unregistering): left promiscuous mode [ 321.281067][T11989] netlink: 'syz.3.1497': attribute type 1 has an invalid length. [ 321.773427][T12011] x_tables: ip_tables: osf match: only valid for protocol 6 [ 321.781819][T12012] x_tables: ip_tables: osf match: only valid for protocol 6 [ 321.908308][T12023] netlink: 'syz.2.1504': attribute type 10 has an invalid length. [ 323.015685][T12064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 323.051191][T12064] tipc: Enabling of bearer rejected, failed to enable media [ 323.268068][T12073] Cannot find map_set index 0 as target [ 324.405109][T12127] netlink: 'syz.3.1528': attribute type 1 has an invalid length. [ 324.412878][T12127] __nla_validate_parse: 5 callbacks suppressed [ 324.412893][T12127] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1528'. [ 324.661164][T12139] netlink: 'syz.1.1531': attribute type 9 has an invalid length. [ 324.681947][T12139] netlink: 'syz.1.1531': attribute type 11 has an invalid length. [ 324.714055][T12139] netlink: 'syz.1.1531': attribute type 12 has an invalid length. [ 324.735445][T12139] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.1531'. [ 324.757778][T12139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1531'. [ 325.209950][T12154] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1532'. [ 325.254509][T12151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1532'. [ 325.270452][T12156] IPv6: addrconf: prefix option has invalid lifetime [ 325.311793][T12157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1535'. [ 325.425186][T12164] netlink: 'syz.0.1537': attribute type 39 has an invalid length. [ 325.842241][T12182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1543'. [ 325.852259][T12150] lo speed is unknown, defaulting to 1000 [ 326.271468][T12194] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 326.383680][T12198] nbd: must specify at least one socket [ 326.925999][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1552'. [ 327.108778][T12212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.274514][T12191] lo speed is unknown, defaulting to 1000 [ 327.771559][T12255] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1560'. [ 327.803734][T12246] bond0: Caught tx_queue_len zero misconfig [ 328.049081][T12276] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1566'. [ 328.282810][T12256] lo speed is unknown, defaulting to 1000 [ 328.336946][T12282] smc: adding net device geneve0 with user defined pnetid SYZ0 [ 328.355421][T12282] geneve0: entered promiscuous mode [ 328.360721][T12282] geneve0: entered allmulticast mode [ 329.007677][T12285] lo speed is unknown, defaulting to 1000 [ 329.162469][T12284] lo speed is unknown, defaulting to 1000 [ 329.168744][T12302] bond0: Caught tx_queue_len zero misconfig [ 329.273835][T12306] lo: entered allmulticast mode [ 329.343425][T12306] lo: left allmulticast mode [ 329.375097][T12306] openvswitch: netlink: Unknown key attributes 2 [ 329.625351][T12319] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1574'. [ 329.920225][T12331] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 330.106955][T12334] netlink: 'syz.4.1576': attribute type 3 has an invalid length. [ 330.115887][T12328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1576'. [ 330.124890][T12328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1576'. [ 330.466612][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1581'. [ 330.559367][T12359] tc_dump_action: action bad kind [ 330.947992][T12383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1591'. [ 330.961977][T12383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1591'. [ 331.165921][T12395] syzkaller0: entered promiscuous mode [ 331.171512][T12395] syzkaller0: entered allmulticast mode [ 331.205629][T12395] macsec1: entered promiscuous mode [ 331.227150][T12405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1596'. [ 331.269114][T12407] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1592'. [ 331.280980][T12405] veth1: entered promiscuous mode [ 331.330862][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1596'. [ 331.520916][T12407] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1592'. [ 331.916512][T12435] netlink: 'syz.4.1605': attribute type 33 has an invalid length. [ 331.976657][T12438] batadv_slave_1: entered promiscuous mode [ 332.067767][T12445] tipc: Enabling of bearer rejected, already enabled [ 332.147177][T12453] netlink: 'syz.1.1607': attribute type 16 has an invalid length. [ 332.155250][T12453] netlink: 'syz.1.1607': attribute type 17 has an invalid length. [ 332.261901][T12458] IPv6: NLM_F_REPLACE set, but no existing node found! [ 332.317121][ T8683] lo speed is unknown, defaulting to 1000 [ 332.322897][ T8683] syz2: Port: 1 Link DOWN [ 332.666917][T12482] x_tables: duplicate underflow at hook 3 [ 333.450238][T12511] batadv_slave_0: entered promiscuous mode [ 333.457907][T12511] batadv_slave_0: entered allmulticast mode [ 333.513252][ T5195] udevd[5195]: worker [7028] /devices/virtual/block/nbd0 is taking a long time [ 333.543188][ T5195] udevd[5195]: worker [6832] /devices/virtual/block/nbd1 is taking a long time [ 333.577609][T12519] netlink: 'syz.4.1630': attribute type 1 has an invalid length. [ 333.613322][T12519] 8021q: adding VLAN 0 to HW filter on device bond7 [ 333.653422][T12519] bond7: (slave veth7): Enslaving as an active interface with an up link [ 333.815439][T12527] netlink: 'syz.0.1632': attribute type 11 has an invalid length. [ 333.816337][T12528] netlink: 'syz.0.1632': attribute type 11 has an invalid length. [ 333.846894][T12530] x_tables: duplicate underflow at hook 1 [ 333.874867][T12532] x_tables: ip_tables: osf match: only valid for protocol 6 [ 333.894396][T12529] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.066566][T12539] netlink: 'syz.3.1634': attribute type 28 has an invalid length. [ 334.216576][T12529] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.290734][T12522] lo speed is unknown, defaulting to 1000 [ 334.346342][T12529] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.447818][T12529] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.837096][T12545] lo speed is unknown, defaulting to 1000 [ 334.943373][ T6863] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 334.965524][ T6863] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.014856][ T6850] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.023841][T12552] lo speed is unknown, defaulting to 1000 [ 335.125427][ T6850] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.459200][T12570] tipc: Enabled bearer , priority 0 [ 335.533389][T12571] syzkaller0: entered promiscuous mode [ 335.563632][T12571] syzkaller0: entered allmulticast mode [ 335.611861][T12570] tipc: Resetting bearer [ 335.626061][T12570] __nla_validate_parse: 15 callbacks suppressed [ 335.626082][T12570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1644'. [ 335.724186][T12569] tipc: Resetting bearer [ 335.737743][T12578] netlink: 'syz.2.1645': attribute type 11 has an invalid length. [ 335.794895][T12578] netlink: 'syz.2.1645': attribute type 11 has an invalid length. [ 335.800333][T12569] tipc: Disabling bearer [ 335.845210][T12578] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1645'. [ 335.930520][T12584] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 336.068218][T12586] netlink: 'syz.3.1648': attribute type 3 has an invalid length. [ 336.109765][T12586] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1648'. [ 336.187959][T12588] syzkaller0: entered promiscuous mode [ 336.193487][T12588] syzkaller0: entered allmulticast mode [ 336.228966][T12595] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20004 [ 336.385703][T12599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1652'. [ 336.414139][T12599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1652'. [ 336.837071][T12622] wg1 speed is unknown, defaulting to 1000 [ 336.843056][T12622] wg1 speed is unknown, defaulting to 1000 [ 336.850920][T12622] wg1 speed is unknown, defaulting to 1000 [ 336.864431][T12622] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 336.886781][T12622] wg1 speed is unknown, defaulting to 1000 [ 336.897164][T12622] wg1 speed is unknown, defaulting to 1000 [ 336.897922][T12623] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1659'. [ 336.906492][T12622] wg1 speed is unknown, defaulting to 1000 [ 336.920306][T12622] wg1 speed is unknown, defaulting to 1000 [ 336.927564][T12622] wg1 speed is unknown, defaulting to 1000 [ 340.266118][ T56] block nbd0: Possible stuck request ffff88802551e000: control (read@0,1024B). Runtime 120 seconds [ 340.277097][ T56] block nbd0: Possible stuck request ffff88802551e1c0: control (read@1024,1024B). Runtime 120 seconds [ 340.288277][ T56] block nbd0: Possible stuck request ffff88802551e380: control (read@2048,1024B). Runtime 120 seconds [ 340.299465][ T56] block nbd0: Possible stuck request ffff88802551e540: control (read@3072,1024B). Runtime 120 seconds [ 351.495198][ T5145] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 351.504472][ T5145] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 351.512959][ T5145] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 351.525833][ T5145] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 351.533575][ T5145] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 351.650146][ T5145] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 351.659858][ T5145] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 351.670409][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 351.670741][ T5145] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 351.687046][ T5145] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 351.694983][ T5837] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 351.702766][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 351.710532][ T5145] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 351.719678][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 351.727154][ T5145] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 351.846366][T12658] lo speed is unknown, defaulting to 1000 [ 351.853976][T12658] wg1 speed is unknown, defaulting to 1000 [ 352.047912][T12658] chnl_net:caif_netlink_parms(): no params data found [ 352.081019][T12660] lo speed is unknown, defaulting to 1000 [ 352.110983][T12660] wg1 speed is unknown, defaulting to 1000 [ 352.212965][T12658] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.244029][T12658] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.265087][T12658] bridge_slave_0: entered allmulticast mode [ 352.283286][T12658] bridge_slave_0: entered promiscuous mode [ 352.323421][T12658] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.345183][T12658] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.352463][T12658] bridge_slave_1: entered allmulticast mode [ 352.374908][T12658] bridge_slave_1: entered promiscuous mode [ 352.462353][T12661] lo speed is unknown, defaulting to 1000 [ 352.479265][T12658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.505450][T12661] wg1 speed is unknown, defaulting to 1000 [ 352.541672][T12658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.670592][T12658] team0: Port device team_slave_0 added [ 352.722009][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 352.732596][T12658] team0: Port device team_slave_1 added [ 352.746720][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 352.754942][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 352.763019][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 352.770873][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 352.895835][ T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 352.908349][T12658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.915434][T12658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.916598][ T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 352.941798][T12658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.951281][ T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 352.971838][ T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 352.975906][T12658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.979647][ T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 352.986731][T12658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.019184][T12658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.165308][T12660] chnl_net:caif_netlink_parms(): no params data found [ 353.213614][T12658] hsr_slave_0: entered promiscuous mode [ 353.220593][T12658] hsr_slave_1: entered promiscuous mode [ 353.230204][T12658] debugfs: 'hsr0' already exists in 'hsr' [ 353.236719][T12658] Cannot create hsr debugfs directory [ 353.261546][T12661] chnl_net:caif_netlink_parms(): no params data found [ 353.447585][T12673] lo speed is unknown, defaulting to 1000 [ 353.492122][T12660] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.499551][T12660] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.506849][T12660] bridge_slave_0: entered allmulticast mode [ 353.514875][T12660] bridge_slave_0: entered promiscuous mode [ 353.523314][T12673] wg1 speed is unknown, defaulting to 1000 [ 353.543605][T12660] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.550942][T12660] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.558377][T12660] bridge_slave_1: entered allmulticast mode [ 353.566392][T12660] bridge_slave_1: entered promiscuous mode [ 353.624842][ T51] Bluetooth: hci5: command tx timeout [ 353.690824][T12660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.701718][T12677] lo speed is unknown, defaulting to 1000 [ 353.703902][T12660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.724833][T12661] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.732027][T12661] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.739348][T12661] bridge_slave_0: entered allmulticast mode [ 353.746846][T12661] bridge_slave_0: entered promiscuous mode [ 353.760789][T12661] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.768017][T12661] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.775391][T12661] bridge_slave_1: entered allmulticast mode [ 353.783045][T12661] bridge_slave_1: entered promiscuous mode [ 353.789251][ T51] Bluetooth: hci7: command tx timeout [ 353.796097][ T51] Bluetooth: hci6: command tx timeout [ 353.805778][T12677] wg1 speed is unknown, defaulting to 1000 [ 353.858454][T12660] team0: Port device team_slave_0 added [ 353.908433][T12660] team0: Port device team_slave_1 added [ 353.930644][T12661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.943564][T12661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.983049][T12660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.990225][T12660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.016514][T12660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.069449][T12660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.076600][T12660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.102849][T12660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.125865][T12661] team0: Port device team_slave_0 added [ 354.134452][T12661] team0: Port device team_slave_1 added [ 354.248042][T12661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.255247][T12661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.281563][T12661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.294062][T12661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.301349][T12661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.327528][T12661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.344199][T12660] hsr_slave_0: entered promiscuous mode [ 354.351783][T12660] hsr_slave_1: entered promiscuous mode [ 354.358047][T12660] debugfs: 'hsr0' already exists in 'hsr' [ 354.363789][T12660] Cannot create hsr debugfs directory [ 354.523544][T12661] hsr_slave_0: entered promiscuous mode [ 354.529982][T12661] hsr_slave_1: entered promiscuous mode [ 354.536660][T12661] debugfs: 'hsr0' already exists in 'hsr' [ 354.542407][T12661] Cannot create hsr debugfs directory [ 354.548333][T12673] chnl_net:caif_netlink_parms(): no params data found [ 354.819772][T12677] chnl_net:caif_netlink_parms(): no params data found [ 354.831993][ T5835] Bluetooth: hci8: command tx timeout [ 354.871858][T12673] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.879202][T12673] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.886713][T12673] bridge_slave_0: entered allmulticast mode [ 354.893891][T12673] bridge_slave_0: entered promiscuous mode [ 354.902201][T12673] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.909627][T12673] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.917119][T12673] bridge_slave_1: entered allmulticast mode [ 354.924267][T12673] bridge_slave_1: entered promiscuous mode [ 355.024184][T12673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.036865][T12673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.064986][ T5835] Bluetooth: hci9: command tx timeout [ 355.125879][T12673] team0: Port device team_slave_0 added [ 355.145755][T12673] team0: Port device team_slave_1 added [ 355.160715][T12677] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.168016][T12677] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.175378][T12677] bridge_slave_0: entered allmulticast mode [ 355.182422][T12677] bridge_slave_0: entered promiscuous mode [ 355.210503][T12677] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.218009][T12677] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.225615][T12677] bridge_slave_1: entered allmulticast mode [ 355.232663][T12677] bridge_slave_1: entered promiscuous mode [ 355.253861][T12673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.260951][T12673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.287000][T12673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.320559][T12673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.327715][T12673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.354278][T12673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.380728][T12677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.409765][T12677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.482657][T12677] team0: Port device team_slave_0 added [ 355.495680][T12673] hsr_slave_0: entered promiscuous mode [ 355.502215][T12673] hsr_slave_1: entered promiscuous mode [ 355.508871][T12673] debugfs: 'hsr0' already exists in 'hsr' [ 355.514626][T12673] Cannot create hsr debugfs directory [ 355.522879][T12677] team0: Port device team_slave_1 added [ 355.563901][T12677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.571247][T12677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.597874][T12677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.630306][T12677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.637313][T12677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.663402][T12677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.705368][ T5835] Bluetooth: hci5: command tx timeout [ 355.756775][T12677] hsr_slave_0: entered promiscuous mode [ 355.763153][T12677] hsr_slave_1: entered promiscuous mode [ 355.769779][T12677] debugfs: 'hsr0' already exists in 'hsr' [ 355.775551][T12677] Cannot create hsr debugfs directory [ 355.865523][ T5835] Bluetooth: hci6: command tx timeout [ 355.870970][ T5835] Bluetooth: hci7: command tx timeout [ 356.904953][ T5835] Bluetooth: hci8: command tx timeout [ 357.144882][ T5835] Bluetooth: hci9: command tx timeout [ 357.784909][ T5835] Bluetooth: hci5: command tx timeout [ 357.945069][ T5835] Bluetooth: hci7: command tx timeout [ 357.945400][ T51] Bluetooth: hci6: command tx timeout [ 358.985122][ T51] Bluetooth: hci8: command tx timeout [ 359.224927][ T51] Bluetooth: hci9: command tx timeout [ 359.865197][ T51] Bluetooth: hci5: command tx timeout [ 360.024986][ T51] Bluetooth: hci6: command tx timeout [ 360.025019][ T5835] Bluetooth: hci7: command tx timeout [ 361.065134][ T5835] Bluetooth: hci8: command tx timeout [ 361.304999][ T5835] Bluetooth: hci9: command tx timeout [ 370.354962][ T56] block nbd0: Possible stuck request ffff88802551e000: control (read@0,1024B). Runtime 150 seconds [ 370.366060][ T56] block nbd0: Possible stuck request ffff88802551e1c0: control (read@1024,1024B). Runtime 150 seconds [ 370.377090][ T56] block nbd0: Possible stuck request ffff88802551e380: control (read@2048,1024B). Runtime 150 seconds [ 370.388247][ T56] block nbd0: Possible stuck request ffff88802551e540: control (read@3072,1024B). Runtime 150 seconds [ 378.667356][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.673674][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 400.426923][ T56] block nbd0: Possible stuck request ffff88802551e000: control (read@0,1024B). Runtime 180 seconds [ 400.437751][ T56] block nbd0: Possible stuck request ffff88802551e1c0: control (read@1024,1024B). Runtime 180 seconds [ 400.448753][ T56] block nbd0: Possible stuck request ffff88802551e380: control (read@2048,1024B). Runtime 180 seconds [ 400.459816][ T56] block nbd0: Possible stuck request ffff88802551e540: control (read@3072,1024B). Runtime 180 seconds [ 401.052595][ T5195] udevd[5195]: worker [7028] /devices/virtual/block/nbd0 timeout; kill it [ 401.061363][ T5195] udevd[5195]: seq 14625 '/devices/virtual/block/nbd0' killed [ 412.089704][ T51] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 412.102025][ T51] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 412.111489][ T51] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 412.119889][ T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 412.128048][ T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 412.229384][ T51] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 412.246137][ T51] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 412.254154][ T51] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 412.262472][ T51] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 412.274909][ T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 412.289159][ T5837] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 412.312466][ T5835] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 412.321377][ T5835] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 412.334259][ T5835] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 412.342762][ T5835] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 412.461611][T12707] lo speed is unknown, defaulting to 1000 [ 412.469295][T12707] wg1 speed is unknown, defaulting to 1000 [ 412.668710][T12709] lo speed is unknown, defaulting to 1000 [ 412.676509][T12709] wg1 speed is unknown, defaulting to 1000 [ 412.696878][T12707] chnl_net:caif_netlink_parms(): no params data found [ 412.908091][T12711] lo speed is unknown, defaulting to 1000 [ 412.957687][T12711] wg1 speed is unknown, defaulting to 1000 [ 412.981442][T12707] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.996930][T12707] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.004226][T12707] bridge_slave_0: entered allmulticast mode [ 413.026809][T12707] bridge_slave_0: entered promiscuous mode [ 413.046601][T12707] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.053765][T12707] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.075291][T12707] bridge_slave_1: entered allmulticast mode [ 413.092334][T12707] bridge_slave_1: entered promiscuous mode [ 413.197477][ T5835] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 413.211508][ T5835] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 413.223015][ T5835] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 413.236809][ T5835] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 413.252509][ T5835] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 413.286480][T12707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.342176][T12707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.353677][ T5835] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 413.363414][ T5835] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 413.373442][ T5835] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 413.387780][ T5835] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 413.398629][ T5835] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 413.446055][T12707] team0: Port device team_slave_0 added [ 413.474295][T12707] team0: Port device team_slave_1 added [ 413.558860][T12709] chnl_net:caif_netlink_parms(): no params data found [ 413.592730][T12707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.599841][T12707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.626045][T12707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.670917][T12707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.677995][T12707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.704475][T12707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.763320][T12722] lo speed is unknown, defaulting to 1000 [ 413.817777][T12722] wg1 speed is unknown, defaulting to 1000 [ 413.855076][T12709] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.862273][T12709] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.878287][T12709] bridge_slave_0: entered allmulticast mode [ 413.887566][T12709] bridge_slave_0: entered promiscuous mode [ 413.896654][T12709] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.903797][T12709] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.913816][T12709] bridge_slave_1: entered allmulticast mode [ 413.922064][T12709] bridge_slave_1: entered promiscuous mode [ 413.975456][T12711] chnl_net:caif_netlink_parms(): no params data found [ 414.027552][T12707] hsr_slave_0: entered promiscuous mode [ 414.033984][T12707] hsr_slave_1: entered promiscuous mode [ 414.040411][T12707] debugfs: 'hsr0' already exists in 'hsr' [ 414.046446][T12707] Cannot create hsr debugfs directory [ 414.087073][T12709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.099796][T12709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.114880][T12725] lo speed is unknown, defaulting to 1000 [ 414.152607][T12725] wg1 speed is unknown, defaulting to 1000 [ 414.184948][ T51] Bluetooth: hci10: command tx timeout [ 414.210963][T12709] team0: Port device team_slave_0 added [ 414.224585][T12709] team0: Port device team_slave_1 added [ 414.344925][ T51] Bluetooth: hci11: command tx timeout [ 414.368535][T12711] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.375933][T12711] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.383188][T12711] bridge_slave_0: entered allmulticast mode [ 414.390880][T12711] bridge_slave_0: entered promiscuous mode [ 414.405100][T12711] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.412246][T12711] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.419611][T12711] bridge_slave_1: entered allmulticast mode [ 414.427430][T12711] bridge_slave_1: entered promiscuous mode [ 414.434978][ T51] Bluetooth: hci12: command tx timeout [ 414.436341][T12709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.447783][T12709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.473855][T12709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.491117][T12709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.498467][T12709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.524786][T12709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.618492][T12711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.631904][T12711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.749968][T12711] team0: Port device team_slave_0 added [ 414.766771][T12709] hsr_slave_0: entered promiscuous mode [ 414.773171][T12709] hsr_slave_1: entered promiscuous mode [ 414.779433][T12709] debugfs: 'hsr0' already exists in 'hsr' [ 414.785203][T12709] Cannot create hsr debugfs directory [ 414.791017][T12722] chnl_net:caif_netlink_parms(): no params data found [ 414.814565][T12711] team0: Port device team_slave_1 added [ 414.908405][T12711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.915503][T12711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.941825][T12711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.999998][T12711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.007310][T12711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.034087][T12711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.185657][T12722] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.193613][T12722] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.201222][T12722] bridge_slave_0: entered allmulticast mode [ 415.208655][T12722] bridge_slave_0: entered promiscuous mode [ 415.222109][T12722] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.229517][T12722] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.237115][T12722] bridge_slave_1: entered allmulticast mode [ 415.244217][T12722] bridge_slave_1: entered promiscuous mode [ 415.277170][T12725] chnl_net:caif_netlink_parms(): no params data found [ 415.304639][T12711] hsr_slave_0: entered promiscuous mode [ 415.306990][ T51] Bluetooth: hci13: command tx timeout [ 415.316073][T12711] hsr_slave_1: entered promiscuous mode [ 415.322975][T12711] debugfs: 'hsr0' already exists in 'hsr' [ 415.330211][T12711] Cannot create hsr debugfs directory [ 415.392832][T12722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.406598][T12722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.475013][ T51] Bluetooth: hci14: command tx timeout [ 415.508579][T12722] team0: Port device team_slave_0 added [ 415.555812][T12722] team0: Port device team_slave_1 added [ 415.628060][T12725] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.635832][T12725] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.643098][T12725] bridge_slave_0: entered allmulticast mode [ 415.650740][T12725] bridge_slave_0: entered promiscuous mode [ 415.674909][T12722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.681874][T12722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.708083][T12722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.719228][T12725] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.726703][T12725] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.733979][T12725] bridge_slave_1: entered allmulticast mode [ 415.741133][T12725] bridge_slave_1: entered promiscuous mode [ 415.754385][T12722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.761944][T12722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.788614][T12722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.876585][T12725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.910836][T12725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.008446][T12725] team0: Port device team_slave_0 added [ 416.020631][T12722] hsr_slave_0: entered promiscuous mode [ 416.028315][T12722] hsr_slave_1: entered promiscuous mode [ 416.034768][T12722] debugfs: 'hsr0' already exists in 'hsr' [ 416.040507][T12722] Cannot create hsr debugfs directory [ 416.050862][T12725] team0: Port device team_slave_1 added [ 416.110117][T12725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.117872][T12725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.145691][T12725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.177254][T12725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.184246][T12725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.210587][T12725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.264839][ T51] Bluetooth: hci10: command tx timeout [ 416.320825][T12725] hsr_slave_0: entered promiscuous mode [ 416.327324][T12725] hsr_slave_1: entered promiscuous mode [ 416.333466][T12725] debugfs: 'hsr0' already exists in 'hsr' [ 416.339215][T12725] Cannot create hsr debugfs directory [ 416.425178][ T51] Bluetooth: hci11: command tx timeout [ 416.505915][ T51] Bluetooth: hci12: command tx timeout [ 417.384951][ T51] Bluetooth: hci13: command tx timeout [ 417.555062][ T51] Bluetooth: hci14: command tx timeout [ 418.344958][ T51] Bluetooth: hci10: command tx timeout [ 418.504946][ T51] Bluetooth: hci11: command tx timeout [ 418.585233][ T51] Bluetooth: hci12: command tx timeout [ 419.465043][ T51] Bluetooth: hci13: command tx timeout [ 419.625014][ T51] Bluetooth: hci14: command tx timeout [ 420.265035][ T31] INFO: task udevd:6832 blocked for more than 143 seconds. [ 420.272586][ T31] Not tainted syzkaller #0 [ 420.277651][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 420.286446][ T31] task:udevd state:D stack:21448 pid:6832 tgid:6832 ppid:5195 task_flags:0x400140 flags:0x00080001 [ 420.298561][ T31] Call Trace: [ 420.301858][ T31] [ 420.304847][ T31] __schedule+0x1798/0x4cc0 [ 420.309362][ T31] ? blk_mq_flush_plug_list+0x41f/0x550 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 420.314980][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 420.321178][ T31] ? __lock_acquire+0xab9/0xd20 [ 420.326207][ T31] ? __pfx___schedule+0x10/0x10 [ 420.331099][ T31] ? schedule+0x91/0x360 [ 420.335628][ T31] schedule+0x165/0x360 [ 420.339802][ T31] schedule_timeout+0x12b/0x270 [ 420.354842][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 420.360272][ T31] ? __pfx_process_timeout+0x10/0x10 [ 420.366103][ T31] ? prepare_to_wait_event+0x437/0x480 [ 420.371596][ T31] nbd_queue_rq+0x662/0xf10 [ 420.376154][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 420.381186][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 420.387436][ T31] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 420.393067][ T31] ? sbitmap_find_bit+0x47f/0x520 [ 420.398284][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 420.404287][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 420.410392][ T31] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 420.416897][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 420.425482][ T51] Bluetooth: hci10: command tx timeout [ 420.444953][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 420.450314][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 420.481503][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 420.487374][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 420.492529][ T31] blk_mq_dispatch_list+0xd0c/0xe00 [ 420.498012][ T31] ? bdev_count_inflight+0x1cf/0x210 [ 420.503594][ T31] ? blk_mq_dispatch_list+0x220/0xe00 [ 420.509448][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 420.515450][ T31] ? rcu_is_watching+0x15/0xb0 [ 420.520224][ T31] blk_mq_flush_plug_list+0x469/0x550 [ 420.525678][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 420.530911][ T31] ? blk_mq_submit_bio+0x1a65/0x25b0 [ 420.536293][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 420.542230][ T31] __blk_flush_plug+0x3d3/0x4b0 [ 420.547219][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 420.552630][ T31] __submit_bio+0x2d3/0x5a0 [ 420.557352][ T31] ? __pfx___submit_bio+0x10/0x10 [ 420.562381][ T31] ? blk_cgroup_bio_start+0x59d/0x640 [ 420.568008][ T31] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 420.573638][ T31] ? bio_associate_blkg+0x6d/0x230 [ 420.578777][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 420.585058][ T31] ? submit_bio_noacct+0xe0c/0x1b80 [ 420.590292][ T31] block_read_full_folio+0x599/0x830 [ 420.594889][ T51] Bluetooth: hci11: command tx timeout [ 420.595681][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 420.606454][ T31] filemap_read_folio+0x117/0x380 [ 420.611465][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 420.616958][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 420.622490][ T31] ? filemap_add_folio+0x35f/0x540 [ 420.627785][ T31] do_read_cache_folio+0x350/0x590 [ 420.632915][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 420.638516][ T31] read_part_sector+0xb6/0x2b0 [ 420.643277][ T31] adfspart_check_ICS+0xa4/0xa50 [ 420.648249][ T31] ? snprintf+0xda/0x120 [ 420.652502][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 420.658460][ T31] bdev_disk_changed+0x75f/0x14b0 [ 420.663505][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 420.669144][ T51] Bluetooth: hci12: command tx timeout [ 420.675117][ T31] ? wait_on_inode+0xc0/0x230 [ 420.679838][ T31] blkdev_get_whole+0x380/0x510 [ 420.684771][ T31] bdev_open+0x31e/0xd30 [ 420.689044][ T31] blkdev_open+0x457/0x600 [ 420.693500][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 420.698710][ T31] do_dentry_open+0x953/0x13f0 [ 420.703492][ T31] vfs_open+0x3b/0x340 [ 420.707693][ T31] ? path_openat+0x2ecd/0x3830 [ 420.712453][ T31] path_openat+0x2ee5/0x3830 [ 420.717121][ T31] ? __pfx_path_openat+0x10/0x10 [ 420.722059][ T31] do_filp_open+0x1fa/0x410 [ 420.726576][ T31] ? __lock_acquire+0xab9/0xd20 [ 420.731410][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 420.736558][ T31] ? _raw_spin_unlock+0x28/0x50 [ 420.741412][ T31] ? alloc_fd+0x64c/0x6c0 [ 420.745862][ T31] do_sys_openat2+0x121/0x1c0 [ 420.750529][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 420.755734][ T31] __x64_sys_openat+0x138/0x170 [ 420.760574][ T31] do_syscall_64+0xfa/0xfa0 [ 420.765139][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.771210][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 420.777419][ T31] ? clear_bhb_loop+0x60/0xb0 [ 420.782100][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.788105][ T31] RIP: 0033:0x7fe8654a7407 [ 420.792509][ T31] RSP: 002b:00007ffc0702e770 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 420.800984][ T31] RAX: ffffffffffffffda RBX: 00007fe865c42880 RCX: 00007fe8654a7407 [ 420.808989][ T31] RDX: 00000000000a0800 RSI: 000055cdd9eb6d20 RDI: ffffffffffffff9c [ 420.817067][ T31] RBP: 000055cdd9eb6910 R08: 0000000000000000 R09: 0000000000000000 [ 420.825284][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055cdd9ec9e20 [ 420.833278][ T31] R13: 000055cdd9ec4190 R14: 0000000000000000 R15: 000055cdd9ec9e20 [ 420.841345][ T31] [ 420.844458][ T31] [ 420.844458][ T31] Showing all locks held in the system: [ 420.852737][ T31] 1 lock held by khungtaskd/31: [ 420.857598][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 420.867541][ T31] 2 locks held by getty/5587: [ 420.872211][ T31] #0: ffff888033fd70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 420.882038][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 420.892253][ T31] 3 locks held by udevd/6832: [ 420.897024][ T31] #0: ffff888143312358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 420.906513][ T31] #1: ffff888024e5ff90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 420.916094][ T31] #2: ffff8880255ce178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 420.925113][ T31] 1 lock held by udevd/7028: [ 420.929689][ T31] #0: ffff888143310358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 420.939060][ T31] 6 locks held by syz.3.1648/12586: [ 420.944267][ T31] #0: ffffffff8f332670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 420.952514][ T31] #1: ffffffff8f332488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 420.961607][ T31] #2: ffff888025442270 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x375/0x1a50 [ 420.972002][ T31] #3: ffff888024f041e8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 420.981434][ T31] #4: ffff888024f03b88 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 420.993699][ T31] #5: ffff888024f03bc0 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 421.006182][ T31] 2 locks held by syz.4.1649/12593: [ 421.011362][ T31] #0: ffffffff8f332670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.019558][ T31] #1: ffffffff8f332488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.028546][ T31] 2 locks held by syz.0.1651/12592: [ 421.033816][ T31] #0: ffffffff8f332670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.042080][ T31] #1: ffffffff8f332488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.051067][ T31] 2 locks held by syz.1.1654/12604: [ 421.056265][ T31] #0: ffffffff8f332670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.064431][ T31] #1: ffffffff8f332488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.073498][ T31] 2 locks held by syz.2.1659/12622: [ 421.078734][ T31] #0: ffffffff8f332670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.086983][ T31] #1: ffffffff8f332488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.095989][ T31] 2 locks held by syz.2.1659/12623: [ 421.101175][ T31] #0: ffffffff8f332670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.109376][ T31] #1: ffffffff8f332488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.118440][ T31] 2 locks held by syz-executor/12658: [ 421.123790][ T31] #0: ffffffff8f332670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.132026][ T31] #1: ffffffff8f332488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.141071][ T31] 2 locks held by syz-executor/12660: [ 421.146616][ T31] #0: ffffffff8f332670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.154857][ T31] #1: ffffffff8f332488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.163810][ T31] 2 locks held by syz-executor/12661: [ 421.169183][ T31] #0: ffffffff8f332670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.177388][ T31] #1: ffffffff8f332488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.186410][ T31] 2 locks held by syz-executor/12673: [ 421.191777][ T31] #0: ffffffff8f332670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.199999][ T31] #1: ffffffff8f332488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.209034][ T31] 2 locks held by syz-executor/12677: [ 421.214389][ T31] #0: ffffffff8f332670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.222588][ T31] #1: ffffffff8f332488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.231825][ T31] 2 locks held by syz-executor/12707: [ 421.237235][ T31] #0: ffffffff8f332670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.245440][ T31] #1: ffffffff8f332488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.254389][ T31] 2 locks held by syz-executor/12709: [ 421.259817][ T31] #0: ffffffff8f332670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.268015][ T31] #1: ffffffff8f332488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.276996][ T31] 2 locks held by syz-executor/12711: [ 421.282344][ T31] #0: ffffffff8f332670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.290565][ T31] #1: ffffffff8f332488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.299562][ T31] 2 locks held by syz-executor/12722: [ 421.305206][ T31] #0: ffffffff8f332670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.313431][ T31] #1: ffffffff8f332488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.322553][ T31] 2 locks held by syz-executor/12725: [ 421.327956][ T31] #0: ffffffff8f332670 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 421.336256][ T31] #1: ffffffff8f332488 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 421.345261][ T31] [ 421.347582][ T31] ============================================= [ 421.347582][ T31] [ 421.356045][ T31] NMI backtrace for cpu 1 [ 421.356066][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 421.356087][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 421.356099][ T31] Call Trace: [ 421.356107][ T31] [ 421.356115][ T31] dump_stack_lvl+0x189/0x250 [ 421.356154][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.356181][ T31] ? __pfx__printk+0x10/0x10 [ 421.356214][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 421.356246][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 421.356277][ T31] ? __pfx__printk+0x10/0x10 [ 421.356302][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 421.356335][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 421.356366][ T31] watchdog+0xf60/0xfa0 [ 421.356392][ T31] ? watchdog+0x1e2/0xfa0 [ 421.356418][ T31] kthread+0x711/0x8a0 [ 421.356447][ T31] ? __pfx_watchdog+0x10/0x10 [ 421.356465][ T31] ? __pfx_kthread+0x10/0x10 [ 421.356493][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 421.356513][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.356533][ T31] ? __pfx_kthread+0x10/0x10 [ 421.356560][ T31] ret_from_fork+0x4bc/0x870 [ 421.356583][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 421.356611][ T31] ? __switch_to_asm+0x39/0x70 [ 421.356626][ T31] ? __switch_to_asm+0x33/0x70 [ 421.356641][ T31] ? __pfx_kthread+0x10/0x10 [ 421.356668][ T31] ret_from_fork_asm+0x1a/0x30 [ 421.356703][ T31] [ 421.356710][ T31] Sending NMI from CPU 1 to CPUs 0: [ 421.501593][ C0] NMI backtrace for cpu 0 [ 421.501627][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 421.501646][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 421.501657][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 421.501681][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 91 20 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 421.501696][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 421.501712][ C0] RAX: 38f02d044542b800 RBX: ffffffff81967b47 RCX: 38f02d044542b800 [ 421.501724][ C0] RDX: 0000000000000001 RSI: ffffffff8d711843 RDI: ffffffff8bbf08e0 [ 421.501736][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 421.501749][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7d0470 [ 421.501762][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 421.501773][ C0] FS: 0000000000000000(0000) GS:ffff888126135000(0000) knlGS:0000000000000000 [ 421.501787][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 421.501798][ C0] CR2: 000055ba2b533f40 CR3: 0000000033450000 CR4: 00000000003526f0 [ 421.501813][ C0] Call Trace: [ 421.501821][ C0] [ 421.501828][ C0] default_idle+0x13/0x20 [ 421.501850][ C0] default_idle_call+0x73/0xb0 [ 421.501873][ C0] do_idle+0x1e7/0x510 [ 421.501896][ C0] ? __pfx_do_idle+0x10/0x10 [ 421.501921][ C0] cpu_startup_entry+0x44/0x60 [ 421.501938][ C0] rest_init+0x2de/0x300 [ 421.501962][ C0] start_kernel+0x3ae/0x410 [ 421.501980][ C0] x86_64_start_reservations+0x24/0x30 [ 421.502002][ C0] x86_64_start_kernel+0x143/0x1c0 [ 421.502024][ C0] common_startup_64+0x13e/0x147 [ 421.502054][ C0] [ 421.680369][ T51] Bluetooth: hci13: command tx timeout [ 421.704887][ T51] Bluetooth: hci14: command tx timeout