last executing test programs: 33.013968243s ago: executing program 4 (id=3186): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0x4, 0x4) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f00000000c0)=""/189, &(0x7f0000000180)=0xbd) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000001c0)={0x6a6a, 0x2b91, 0x0, 0x4}, 0x8) r1 = epoll_create1(0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40100, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000002c0)={'team_slave_1\x00', @multicast}) write$tun(r2, &(0x7f0000000300)={@val={0x0, 0x88ca}, @val={0x0, 0x3, 0x1000, 0x8, 0x1, 0x4}, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@llc_tr={0x11, {@llc={0xe, 0x6, "f2"}}}}}}, 0x1f) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000380)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) connect$bt_rfcomm(r4, &(0x7f00000003c0)={0x1f, @none, 0x1}, 0xa) r5 = openat$cgroup_ro(r2, &(0x7f0000000400)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f00000004c0)=0x10) ioctl$sock_ifreq(r4, 0x8935, &(0x7f0000000540)={'lo\x00', @ifru_data=&(0x7f0000000500)="edd6635b72b5afa0535ac93e0e35d83e978d2a51a5d246d9a4f883ed70ed1e0c"}) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f00000006c0)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000700)=@updpolicy={0x2e0, 0x19, 0x800, 0x70bd2d, 0x25dfdbfc, {{@in=@rand_addr=0x64010102, @in=@rand_addr=0x64010102, 0x4e21, 0x5, 0x4e21, 0x2, 0xa, 0xa0, 0x80, 0x2c, 0x0, r8}, {0x8, 0x1, 0x1000, 0x4, 0x101, 0xfffffffffffffffc, 0x2, 0x9}, {0x5, 0x1000, 0x0, 0x8}, 0x80000000, 0x6e6bbe, 0x0, 0x0, 0x2}, [@lastused={0xc, 0xf, 0xff}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd2c, 0x100}}, @mark={0xc, 0x15, {0x350759, 0x4}}, @mark={0xc, 0x15, {0x35075c, 0x4}}, @tmpl={0x44, 0x5, [{{@in=@empty, 0x4d5, 0x2b}, 0x2, @in6=@mcast2, 0x3500, 0x0, 0x3, 0xff, 0x1, 0xfffffff2, 0x8e770}]}, @algo_crypt={0xbe, 0x2, {{'ecb(serpent)\x00'}, 0x3b0, "23f15a64d3991f0e1ff1e5b1765e7fee72ed974d22559cc9963173af494bd66dfd1424caa0bdc61a45f620a1434fb80860ebe8a55f190d3a77e734dcc6a276a03e21d11d9146f6eca1c45aef511fff7616ac53b79c43b3e62ce4b757ed959521c467d55c955e78dcb0dce5654fa80b0b6dad3407988d"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xf}, @encap={0x1c, 0x4, {0x3, 0x4e21, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x15}}}, @algo_auth_trunc={0xc1, 0x14, {{'sha512-avx\x00'}, 0x3a8, 0xc0, "4f29ccf649f5eafe9db8e00c148a1d6d2d55baf80757366a7bee4d1d3eb508da5b0d68eb07c0bcf8f3021118fc6ec19de74b496e132489388ebf215a5415473ab7565989e5a34da377c000fd0fdafb4aef345e68e3ca66b5dbe08aa7b5960e676ba57ed93fe3d3254e66b3ef4d75aef9a3a3081699"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4080}, 0x200080d0) openat$cgroup_int(r3, &(0x7f0000000a80)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r9 = socket(0x2b, 0x80000, 0x80000001) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000bc0)={r3, &(0x7f0000000ac0)='\x00', 0x2, &(0x7f0000000b00)={@_ha_fsid={[0xe64, 0x10]}, {0x1, 0x9ae3, 0xcd, 0x7fff}}, 0x9, &(0x7f0000000b40), &(0x7f0000000b80)=0x2}) getsockopt$EBT_SO_GET_INIT_INFO(r10, 0x0, 0x82, &(0x7f0000000c00)={'broute\x00', 0x0, 0x0, 0x0, [0x80, 0x8, 0x8, 0x7, 0xf09, 0x3]}, &(0x7f0000000c80)=0x78) ioctl$SIOCPNADDRESOURCE(r5, 0x89e0, &(0x7f0000000cc0)=0x4) getsockopt$bt_sco_SCO_CONNINFO(r9, 0x11, 0x2, &(0x7f0000000d00)=""/45, &(0x7f0000000d40)=0x2d) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e80)={@map=r5, 0x2c, 0x1, 0x0, &(0x7f0000000d80)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000dc0)=[0x0, 0x0], &(0x7f0000000e00)=[0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r10, 0xe0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000f00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000f40)=[0x0, 0x0, 0x0], &(0x7f0000000f80)=[0x0], 0x0, 0x1c, &(0x7f0000000fc0)=[{}, {}], 0x10, 0x10, &(0x7f0000001000), &(0x7f0000001040), 0x8, 0x50, 0x8, 0x8, &(0x7f0000001080)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ec0)={@ifindex=r7, r10, 0x37, 0x20, r4, @void, @void, @void, @value=r12, r11}, 0x20) close(r4) 31.980141977s ago: executing program 4 (id=3190): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket(0x10, 0x3, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x1, 0x71bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0xe0f}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="1400000053041f0000000000000000000500000a14000000e9030100000000007558d1b59acc2f7a"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000317c41200000000", @ANYRES32, @ANYBLOB="a70e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000200e6ff0300000000000000000000000000000000000000ca6b9a692d004e8a88f632c9febd76f5062a5f40df3458fea2f033af961695685e0743a23bf62fde86412671357c0750465f9059e102e39a74e33d43a4db28f9727783"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000980)={0xffffffffffffffff, &(0x7f0000000880)='.\x00', 0x4042c0, &(0x7f00000008c0)={@align=0x1, {0x7, 0x2, 0x5, 0x2}}, 0x6, &(0x7f0000000900), &(0x7f0000000940)}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x501, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000002000000000b702000014000000b7030000000000008500000093000000bf090000000000005509010000000000950000000000000085000000650000001838000002000000000000000000000018540000100000000000000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000006c0)='syzkaller\x00', 0x3, 0xe4, &(0x7f0000000700)=""/228, 0x41100, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000a80)=[r5, 0xffffffffffffffff], &(0x7f0000000ac0)=[{0x0, 0x3, 0x0, 0x6}, {0x1, 0x2, 0x7, 0xb}, {0x1, 0x3, 0xa, 0xb}], 0x10, 0x217}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710429000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000001ec0)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x400480c1}, 0x44801) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00002cbd7000fbdbdf256300000008000300", @ANYRES32=r9, @ANYBLOB="f43fe1e32ac96eee3089bb04a39dcde8d7187c010a113181cd9374a98aca873fc6b6a9360832ce2e18df1afdc3911563b83fa325de4bd8319fd45eb05b13daae5c3813274583e71e4d8d4b234bb9c5756e1edf374664b31b9ba78c72ff6899d1ebdff375ea0d7da5a5ab1567ed94f6106eed734da83c08386491d87d33a1342b0d8c5c4cf11aedb13f45c1"], 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x20000861) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x51}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x2000d801) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYRES64=r4, @ANYRESOCT=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000cc0)={{{@in=@local, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000800)=0xe8) 24.721227915s ago: executing program 0 (id=3245): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000001700)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000016c0)={&(0x7f00000015c0)={0xe8, r3, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x19}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x11c}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x5, 0xa}}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x80}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x83}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xe0}]}, @NL80211_ATTR_STA_WME={0x34, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xc8}]}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1f}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_MAX_SP={0x5}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x268}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x6}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4044140}, 0x48080) r5 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="1844ab68257d2068f56d57a02a7eae952da77917f3d3bcfd17fa697866339abc453b61dec0b0cc634d93cda9ed0568f89163a15513547104661234827edb11431d00de617faf10b5325091e6ea70bd944773d08f73c872eace457ba5f58ada6d8990441f2d87f6c1bae3f521039cb80523708fe6b91397d87277dd924be366aa9c7651e9c398a161f7d1a747d585013de417ce572a38b47e7a73da49f859b81397bf6664db41e97563541e39d05c03e9304513a9d7da57dcbfafc8315adb5695c8d37428c186f136f81f76cebb70b48a4970b0c55921f6ba846526e173bf568fc59fac1f823a562bb4", 0xe9}], 0x1, 0x0, 0x0, 0x5000000}}, {{0x0, 0x0, &(0x7f00000010c0)=[{0x0, 0x12}, {&(0x7f0000001040)="7824a0dc9ad7f268aac63ae0191537bc82ee3d56e4fb23064596", 0x1a}], 0x2}}], 0x2, 0x10) close(0x4) r6 = gettid() sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)="f7b326a5ae57b84c8f4064a00420f909f9dd541f6ee083f949e0e1a707e31e71710b1baa843d75c5da6a34dec6b53c0c64674f117c9087c2f18951f1f44b189216f30fae90313ee93279f3f77447b53782a3185b7f6910282c5c546770e897876694c6d163e6592d7f571448195480c785f3f226bf90a9446288db00aaf8eb5e4268a149a5594661f3dcab784ca58f68ef053305fb2f7af2893f6d5149a76831537bcac8b5846ad6001c91e0ad0bfeed353f457ef3b85d3ad5923e1e4cddecd74326860a3ea23d778d36", 0xca}], 0x1, &(0x7f0000000600)=[@ip_retopts={{0x168, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0x24, 0x76, 0x3, 0x0, [{@rand_addr=0x64010102, 0x115}, {@remote, 0x6}, {@multicast2, 0x2}, {@rand_addr=0x64010100}]}, @timestamp={0x44, 0x1c, 0x83, 0x0, 0x7, [0xffffff81, 0x6, 0x80000001, 0x1000, 0x80000000, 0x5]}, @timestamp={0x44, 0x28, 0x74, 0x0, 0x5, [0x7b, 0xf, 0x2, 0x7, 0x400, 0x5, 0x1, 0x7fff, 0x8]}, @timestamp_prespec={0x44, 0x2c, 0x1f, 0x3, 0x2, [{@empty, 0x3}, {@empty, 0x8}, {@rand_addr=0x64010102, 0xa9}, {@empty, 0x10001}, {@private=0xa010100, 0x4}]}, @ssrr={0x89, 0xb, 0xe4, [@empty, @remote]}, @timestamp_prespec={0x44, 0x2c, 0x77, 0x3, 0x6, [{@multicast1, 0x2}, {@multicast2, 0x9}, {@rand_addr=0x64010102, 0xf}, {@multicast2, 0x3678}, {@loopback, 0x2}]}, @ssrr={0x89, 0xf, 0x8b, [@empty, @multicast1, @rand_addr=0x64010100]}, @cipso={0x86, 0x7b, 0x3, [{0x1, 0x11, "18d76e529d5e0c1c9e706a3d362ba3"}, {0x6, 0x8, "9d5a57adf9f2"}, {0x2, 0x11, "c67120ef5e22741fcd04571ea1bee5"}, {0x5, 0x7, "aa0d2b93d3"}, {0x6, 0xb, "cf688787424ec13f76"}, {0x0, 0xe, "62b8070d75715416bc212d60"}, {0x2, 0xf, "73fcc5ce3b9f0411326081a991"}, {0x5, 0xa, "c2b85f47ec80f86c"}, {0x0, 0x12, "b7579568e33039a3939d45c6d68d9ea3"}]}, @end]}}}], 0x168}, 0x20048011) syz_open_procfs$namespace(r6, &(0x7f0000000080)='ns/pid_for_children\x00') r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000f00)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x8, 0xe7}, 0x90) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000001740)=0x5d6, 0x4) unshare(0x6a040000) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0x5e, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x40, r11, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x40}}, 0x4000040) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 23.889020056s ago: executing program 2 (id=3252): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000001000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000003800250825bd7000f9dbdf250f000000100007800c00028008003400", @ANYRES32=0x0, @ANYBLOB="6456b1e93d91d4adfb12527469862cd2185f1f5a72bec82ee8c8570fc63d19305bbc678a49e6"], 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x804c050) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="84010000100063d12dbd700000000000ff0100000000000000000000000000010000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000007000000000000005b06000000000000040000000000000000000000000000000b0000000000000000000000000000000500000000009e000000000000000000ffffff7f00000000080600000000000000080000000000000000000000000000000000000000000000000000030000000000000002000000000000000000000048000100636d6163286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0012006d6f727573313238302d6176783200"/316], 0x184}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c20009e000000000000090bdd2209c1d4056400", @ANYRES32=0x0, @ANYBLOB="150c0000000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c0000000506010100000000000000010700f39d00040900030073797a320000000005000100070000000900030073797a320000000005000100070000000900020073797a30000000000900030073797a32000000000900020073797a30000000000900020073797a31731921c0ba292043b92500000000acceebc8d4ff76e81135bdd0614f9dca9f176fa3ee3b90190428b0cbd414e718bd0bdf42eeb736d704dc12cae317e18e654e88f5a47c43ba26c2e3b2d9986d05d85b729e25e6ada15a31cbe8ac0e1bd067d9e313e3f2717fffd21bbcc0570bf5b672cba212032a0a88c8c300de384b812c50169ba9d58b900eed05408468d3b9aeefaa6ce16e1eaa9453991f8db1b38f48e07cc8dfa2b5b5a0d6c22c4b1c2cb7f463b7305f2e5d101590f6dadccc2a40ae0f86235e3bd34aa088e14e888ffc94654fc761744c3a7931525d9e47bbf2ff970ed73888fd702c353b649d64c038e3ed0046899397b3b63f92dc9765ec904a1b3d6118cc1a62145c65d18a6a3b93a9019b778d98540ab17a85117e132778f66d82a84c862f26237387ea4a59554a03758ff5f2c95cafba0792f23e857e4fdc2c68e32d510213ce7e619ce89808803eaa6c4329000246239ec7b5cff1c6da8f50730d60083b0b486f35b6b5b3cf42f96b31432742501a48c729287a0d5d666e1cc924e34b4aa79872e599436ca203245b17388d0c05bc1c7ba1af8654217eb2f021e7a48bd052f29edb87e967215aacb18634ff9a9b39f09925ae8f085200611c1f298c9d9b1fb00a02416a450cf8f5e6f1"], 0x6c}, 0x1, 0x0, 0x0, 0x2000000}, 0x804) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) socket$alg(0x26, 0x5, 0x0) bind$can_raw(r3, &(0x7f0000000080), 0x10) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8004, 0x0, 0x0, 0x1ff], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) socket$unix(0x1, 0x5, 0x0) 23.034380128s ago: executing program 2 (id=3262): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0xffffffffffffffc0}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) 22.76230967s ago: executing program 2 (id=3265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, 0x0, &(0x7f00000017c0)) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r2, 0x5}, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_ORPHAN_MASK, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_INITIAL_QUANTUM={0x0, 0x4, 0x7}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x78}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x5, '\x00', r5, r6, 0x3, 0x0, 0x4}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r0, 0x26, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x180000, 0x0, 0x0}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000006000000000000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100048000009500000000000000cd0a0100000000002500000001000480180000000200048000000000f4ffffffae90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x69}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r10, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r9}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r11, &(0x7f00000003c0), 0x0}, 0x20) (async) ioctl$XFS_IOC_START_COMMIT(r8, 0x80585882, &(0x7f0000000440)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r12) 22.414121891s ago: executing program 2 (id=3268): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x9b}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r3 = accept(r2, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r3) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) readv(r4, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000280)=0x40) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES16=r1], 0x80}}, 0x0) r7 = socket(0xb, 0x2, 0x5) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0xfffffffffffffdd4, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x7}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x2c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) 22.257087609s ago: executing program 1 (id=3269): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xcb7c81791c937a57}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x29}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x80000000}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x8044) 22.151304506s ago: executing program 1 (id=3270): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000500000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) 22.024459865s ago: executing program 1 (id=3271): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, 0x0, 0x0, 0x5}, 0x94) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="600030800500020000000000140004"], 0x7c}}, 0x4000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r6, 0x6, 0xd, &(0x7f0000000080)="52591329205694608c3d950a0ad44ee95ec7920e367c10fdf9721536e8dc0f5d9f54dfa5aa5f165cfc478918bbabd2bc758d5af60b991f0f1f4a2a50899e8b51b9f60184d5520d3e84d07adaaa650c2aa29a5fe99c77e6bf6ed81b32d6ab937a2ed36c2bbcc1605b23c707c9c883bd0ea3de374db82aff915f0168a1b2", 0x7d) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r7, 0x10e, 0x4, 0x0, &(0x7f00000017c0)) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004500002e"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 21.059885586s ago: executing program 1 (id=3274): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x1e4c}}], 0x18, 0x4008000}, 0x28008841) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x11e, 0x1, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000), 0x8) 20.888991184s ago: executing program 0 (id=3275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e008000000008"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000200000003"], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=0x1, @ANYBLOB="030000000800"/18, @ANYRES32, @ANYBLOB="030000000100000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x13, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000040000000000000000000000018110000", @ANYRES32=r5, @ANYRESHEX=r3], &(0x7f00000006c0)='syzkaller\x00', 0x3, 0xe4, &(0x7f0000000700)=""/228, 0x41100, 0x8, '\x00', r6, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000a80), &(0x7f0000000500)=[{0x0, 0x3, 0x0, 0x6}, {0x1, 0x2, 0x7, 0xb}, {0x1, 0x3, 0xa, 0xb}], 0x10, 0x217}, 0x94) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r7 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r1, @ANYBLOB="050427bd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="a8000280380001"], 0xc4}, 0x1, 0x0, 0x0, 0x44090}, 0x2404c080) socket$packet(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r11, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x1c, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 20.887143844s ago: executing program 3 (id=3276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x42, 0x4, 0x398, 0xffffffff, 0x1f8, 0x0, 0x1f8, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'bond0\x00', {}, {}, 0x11, 0x0, 0x58}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0xfffffffd, 0x2, 0x0, 0xe}}, @common=@unspec=@connmark={{0x30}, {0x1, 0x1, 0xfe}}]}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @private=0xa010101, 0x0, 0x0, 'dvmrp0\x00', 'dvmrp1\x00', {0xb25f05e6834eb86f}, {0xff}, 0x1d, 0x1, 0x4e}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'vcan0\x00', {}, 'veth1_virt_wifi\x00', {0xff}, 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x2, 0x1, 0x2}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4044048}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x50, 0x140f, 0x100, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0xf}]}, 0x19}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 20.682876838s ago: executing program 0 (id=3277): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x9, &(0x7f00000001c0)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xb}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10}, 0x94) 20.578418069s ago: executing program 1 (id=3278): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x20}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000240], 0x0, &(0x7f0000000200), &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000040000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x8, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) recvmmsg(r5, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r7, 0x701, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x481}, 0x800) ioctl$IMGETCOUNT(r2, 0x40106183, &(0x7f0000000000)) getpid() syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r2) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000c40)={@local}, &(0x7f0000000c80)=0x14) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 20.453172069s ago: executing program 0 (id=3279): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000240001000000000000000000000000000600030000ff"], 0x24}}, 0x8004) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000020000b7050000080000001c20000000000000bf9800000000000056080000000000008500000038000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38, 0x4a011}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd23, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x35a38, 0x4a011}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040044) 19.958584244s ago: executing program 0 (id=3280): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000e00000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) 19.765700735s ago: executing program 0 (id=3281): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x14, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf, 0x1, "9915487c28dd58bd7ae4cc"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x80) unshare(0x6a040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x6, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) r5 = socket(0x8, 0x4, 0x3) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x40106150, &(0x7f0000001940)={{r1, 0x0, 0x14100, 0x0, 0x4, 0x0, 0x0}, 0x0, 0x0}) ioctl$sock_netrom_SIOCADDRT(r5, 0x6180, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) 19.169050076s ago: executing program 4 (id=3192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r6 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x80, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x5, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r7, 0x20, 0x40, 0xb0, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x5f, 0x0, 0xf9, 0x2f, 0x0, @local, @broadcast}}}}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r9], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$alg(0x26, 0x5, 0x0) r11 = socket(0x14, 0x2, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={@rand_addr=0x64010102, 0x1, 0x0, 0x60, 0x0, [{@private}, {@multicast2}, {@dev}, {}, {@empty}, {}]}}) ioctl$sock_SIOCGIFINDEX(r11, 0x61d0, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r10], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'vlan0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r12, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200", 0x4}], 0x1}, 0x5) 18.973744421s ago: executing program 3 (id=3282): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000003003000000000000000061106c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) (async) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000003003000000000000000061106c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 18.35192114s ago: executing program 3 (id=3283): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}, 0x3}}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x2, 0x1ff, 0x0, 0x0, 0x7, 0x4, 0x3, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xf, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xb7d, 0x794c32ae, 0x1578}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004061}, 0x4890) ioctl$XFS_IOC_FSGROWFSRT(r3, 0x40105870, &(0x7f0000000280)={0x3, 0x1}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f00000001c0)={r8, @in6={{0xa, 0x4e26, 0x3, @private2={0xfc, 0x2, '\x00', 0xc}, 0x10009}}}, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r8, 0x8, 0x3}, &(0x7f0000000300)=0xc) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0xa, r5, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x60000002}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000700)=""/168, 0xa8}], 0x1, &(0x7f0000000d00)=""/63, 0x3f}, 0xcce1}], 0x1, 0x20, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) r10 = socket$netlink(0x10, 0x3, 0x12) write(r10, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000037c2000040042801c0001800600060088480000100007"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 18.094846822s ago: executing program 4 (id=3284): socket(0x1d, 0x2, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466ccfc007a000000ad6e911b51818462b4002c80", 0x2a}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000240), &(0x7f0000000380)=r3}, 0x20) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000680)='@', &(0x7f0000000400)=@tcp6=r4, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r6, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f2, 0x20, 0x70bd27, 0x25dfdbfc, "", ["", "", ""]}, 0x10}}, 0x804) connect$inet(r7, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a8006c00030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xb8) 17.385384515s ago: executing program 4 (id=3285): socketpair(0x2c, 0x2, 0x40000008, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009000700064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x24040000, 0x0, 0x0) 17.385106805s ago: executing program 3 (id=3286): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x20, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x17, '\x00', 0x0, @netfilter, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x4}) socket$nl_route(0x10, 0x3, 0x0) 17.276451622s ago: executing program 1 (id=3287): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="67000200", @ANYRES16=0x0, @ANYBLOB="040029bd7000ffdbdf251900000008000300", @ANYRES32=r3, @ANYBLOB="06006d000000000005001e000600000005001c00ff00000005001c000800000006006d006dff000005006000080000000500600009000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x8050) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008044) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(0x0, r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x1, 0x7ffffffc, 0x6, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0xe, 0xc}, {0x4, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0xc0956febbce12c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x44, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x11a}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20}, 0x40004) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="150000000640"], 0x20) r7 = socket(0x10, 0x803, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x20, 0x800a, 0x0, 0x0, 0xf, 0x3, 0x3, 0xfc, 0x4, 0x9, 0x400, 0x40, 0x6, 0xff, 0x0, 0xfffff301, [0xffffffff, 0xdb]}}) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5128a}}, 0x20}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050c28bd7000ffdbf1253e0000000c00990000000003000000060065000080000000000000b4000000"], 0x30}}, 0x1) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r10, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x41) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r11, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8814}, 0x1) 17.203114523s ago: executing program 3 (id=3288): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="110000004200010a"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a1c000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCADDRT(r3, 0x890b, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @broadcast}, &(0x7f0000000080)=0xc) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000002c0)=""/158, &(0x7f0000000380)=0x9e) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gretap0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x10, 0x8, 0x13e, 0x5, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x64, 0x0, 0xcf, 0x2f, 0x0, @loopback, @multicast2, {[@rr={0x7, 0xb, 0x9f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}]}, @end, @timestamp_prespec={0x44, 0x24, 0xa2, 0x3, 0x0, [{@rand_addr=0x64010100, 0x8}, {@loopback, 0xa}, {@multicast2, 0x7}, {@rand_addr=0x64010101, 0xb4ad}]}, @timestamp={0x44, 0x10, 0x7d, 0x0, 0x7, [0x0, 0x9, 0x3]}, @lsrr={0x83, 0x7, 0x3b, [@remote]}, @timestamp={0x44, 0x8, 0x5a, 0x0, 0x5, [0xec5d]}, @noop]}}}}}) sendmsg$NFT_BATCH(r0, &(0x7f0000001a00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0xd8, 0x6, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x58, 0x7, 0x1, 0x0, "c8043d1786e03bd458df2f1fd739f4d4ff4214952cabc8d292e592652c26b8e758dbad88d6041c8cdca78554546ea5b34e8f07dd1db09f0ac7dcc6096a55f65ca897a1b30505262ba84d6305ceae3b04193224ba"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0xffffffffffffffaf, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8914}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x30, 0x12, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xa}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xb5}]}}, @NFT_MSG_NEWTABLE={0x9c, 0x0, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x7e, 0x6, "45e6aa86e6475877a9e39dbf1d8812fc1b188f01979d9d25e641c8307ef7d9ef629ebd89a2f31bada9e9934ade4ecfe249670820cf4aa4098d86ece9d76dbbe141d7c8593c3ed08b28faa2aa58fabc122d7a290b3af79685b07495a01f084d3b2420a97a9b794249910af630545822842aab391f89f23284a926"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELOBJ={0x64, 0x14, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x43, 0x8, "761f8704438cffe6e3d858041b264516cc8a620513fbeec918d08f069d94371f08b675ada65e969cd60f45e2d277b32318913338bb3b87685bbb34272ff9f0"}]}, @NFT_MSG_NEWSETELEM={0x1318, 0xc, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x12e4, 0x3, 0x0, 0x1, [{0x484, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY={0x32c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xad, 0x1, "e637aebf0bbd12d3bd6214066abf6842aacf988f6512288b94ce15f25c9901452ecb95c8c40ac14ce7dadf21b786d6a054619b253f92cc3571e4ff2baf008d8d2fa68013b1031efbfdd3690957bf79a374153f7d5f2905fa75caa63c3718a93b42acdf7242a839c9960aa0db949204dc43f7c305543a63ee22b6aaf6ee986773edde4842bef0f0c1eb78fa3a5a3e44607e1676990633ddd37a1feef441e9a76f329dc7a62dc276bc82"}, @NFTA_DATA_VALUE={0xac, 0x1, "edea5ed08052be6e8acbbbc54715b9718b6827409f548b8afab9514b6c29704a84b8175686a44e0f9e7e030b8c75c8b81a7dab74761ff9864423a999ef1a7d32af61f7595ac931aadb5557d8e9554c07a26ef5fef9f55aa6830ea88bf0a7b7420bd57c8f4a3c80e044c336a8fab1f0a5b09b21787c2c2530b19d90ea2d825e309ee354b1d791f588b826d73d7ede4028c9bc010a85b889711b04542d6633cfcfd832383306009adb"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x88, 0x1, "0f2e7d1f8d89cdfc858fbb11a6e156300d225aa571886f430a4eb9631909b049a9bcfdf764d4ec98fb827cd169f301cfcdf04f3572bbb5c66f8ffb35bf946762a7a29b6766998caee5c4e7b0e50472c4982b2b9ec4341dc36ff0f831d13ed6fe8153ad7b0ed36b27e4b5a40adb700cf0f28e91bc453829ab176fa5cc27ec25ef01610a07"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xe5, 0x1, "31a37bee321d16b9aa1b4414be58edabae8dcc9fd5cf814c3ff8932b3aff5086ada7717979b60fe0f83fc4126e98edcce57fff3bf3a6860c8fa34c489516cecc7b54b96788826d6790215ec92faf1df7f3e6475baf82debbb2c960c8ba00a011d29057be9b51002585397361064c8dcc23606fc24c311337e234159ef5f84678a62a1a790933fb14e4fd5eff392606d69b29f96684e5932b6bedc711d3e69e5adcf30a2c0b180ae606f30eb331dc712b0c981443e2d1c4f2a8da9f04b730c3f8cfb1f69761c02e83ec66ec22d4f1d50cf34fa698ee4b69d8e6653e0e6ac9ef04a2"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @inner={{0xa}, @void}}, @NFTA_SET_ELEM_USERDATA={0x9c, 0x6, 0x1, 0x0, "ac3a34c90c583970fb1b867ba870d04c21ad9e94157013744ceef013b0c59403d9d44244c57f4535523aae49a8dc77545eb3854f339e2a34c0a45731cf95c6966fa5eb8ec7fe88bcc87cf933a6b8fafdb3ea066cd61e3f2116e68255865a75d2266f246b83e9406a53d1e4bf54cd7705602696ce8a342c85d34eecbe2ba20cf5116b7ac1315172013f979dac803e990d6d6e1adbfb5869ec"}, @NFTA_SET_ELEM_KEY={0x28, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x24, 0x1, "3827e4a3731cf9677256cde58d7fb10d012c86b089925549fe5d6d94f67adc56"}]}, @NFTA_SET_ELEM_KEY_END={0x70, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x4d, 0x1, "3355b10265944a02f51aaef4766619b87548923490d8560fb341efed1a27f9ad7f44543c1365d70bb108f3e59077593acbf10f4582e588da97d94a9496c04d82b8a6fb27f0b3534922c4574a2c19d475e687c56e1b716a5e8bb8ef023a8f370605034941e3908b46a37a3bd593bfc3a26d8cb2f59d06b1ec9cb21c155ffb96b35fda23e72518d906245dddb73cf5a740866ab53d6628643f1885e0"}]}]}, {0x9c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x5c, 0x7, 0x0, 0x1, @masq={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x1dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @ct={{0x7}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0xb8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x99, 0x1, "f074b67050a691b11c93d9ff567cbd3b4308542473f9463d7b62c6a682ac90ae37645cb9bcbf414ea0542dad9f90392a15ecab3b6e65702f616b08bc03959f1798c2d49d6d0fecb7934f33a584190d8b7d779a059b4d4e833363153a1504c7bdf35e9b59776ccc94a21fa2e37a846283730476132798e9ae19d55b1284e326fbfa1ce29f4952c8ffabb6b6dc153eecd4eb18d52cfb"}]}, @NFTA_SET_ELEM_DATA={0xf4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xee, 0x1, "25677dd85a95db868b927f24e576d731b7d9c106a877b6e02b159ee077a69540e59ac233045668ce4fa687ac93aa4c06e79c6670e32d82604dd69559ab7012b67e6b36b8d8a57200db3175457ded49d09554560bce015cffc228f95c387442eaa5eadc70d8bbefc1a2dd2f92ea014b8fabbfa177e999574db8ede4f2704a0086b6141d2c80e9e52c45988748e007e264eea66492a0fe313d8e460df08e7326c6fc4a32adb057e54b0c07198a30f42ee1fe724ce4bf7940f1c8941df39a4363e238e9f09698eec24473bba6a1b4ddb9d69352a6877456e8b43e667ec7c9d3b48fdae0fbd6232f63862ca1"}]}]}, {0x790, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x22c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xf9, 0x1, "1a4b4e4cee2a0adbb1ab44380915331d2d0a07beb933c1454e92dd84c34615db425d9d29076a3d3e5b474b91051a776f82ec51749c15fdafcefdb157d1acae08e3a78666a8f5b7290c6e0fc89b69a59bbeead50bdff88a52f3125c7407e637df01371256a10e1b3cd2cc166f7c4c319272da550352fe0c6fa76325c13e6779084cdddbfacc6114e57e936c0be8c2816a9d755cef0485f4eb741d4cf241668a1e55b4e39d8b512a5d84a2937370587ea7ea8c0e638fde2b3ea73a61294e448bf13bf00b6347b5a588096b131d5803feca7c861c693c945ec5f1345dafff7d6427ed7992ea0b684bfea734a54de8b7949a2e88b8b664"}, @NFTA_DATA_VALUE={0x18, 0x1, "124a910254ef27a3bf36385cf57657368d207696"}, @NFTA_DATA_VALUE={0xe8, 0x1, "d7d823b10cbdc91b2f102d3a10aa501081326dfb046ff2c2b01a01f41889998a1dd934908a2af93f87049dd6ffc4ab0a779b89414d2196cda9dd66e1a4ad2fdd5ed5e33eaa4f876e31aa8a36811dda6247c7d9f97bbfef1f53ed1f7b68a7f683236e69126726c1df8e03b0fda8922da8c5fee8a11da8a3ae87370e5da3e8aafb2861d60e78f0a47f2aad26557ae534aaf44697c8a3af37f48df535ddf72ccc36e29ee34b699404be71df35bb08b98e4d740a71d62e83423030a979989f83ac6179f334ce165ca1907ec9fa14af34ccc121df6bcd0bbf8ea32d5f629a3a5e51634c591492"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xf5}, @NFTA_SET_ELEM_EXPRESSIONS={0x110, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x48, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x17}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_NG_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x21c, 0xb, 0x0, 0x1, [{0x164, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x154, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xf8, 0x3, "2d4bb4177dd7e9a28eaadeb62638989810f383599183ad2fd0654842cad38e0c7bf5a285b2f8f6ccbca7f6066f1176035fa083f78d5ea416030e4f3a220c77197bd1472eb5a2188d317a7f681212bbd08f7a96916dc592f23db2be0122a01b8540f406b88ade0068cf5344a713e10bac3f7a978a0fa5d672320beb944c4cfe87add08ae83f8e50584091881adbc8c2335136244705b21ccc3af5f255da5738b2e0f5d48561fa27a6de30b51a06e942232dc371c06213e7ef7597901893a5afbeb7affdec2e05e80cf40e3fb56915370a0a4be85f14e5d1f14abb32d9d622b89f54a001f9a13eb3d18c4185ce7d9e9e49e2b89699"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0xc, 0x1, 'udplite\x00'}, @NFTA_MATCH_INFO={0x3c, 0x3, "51f28de96329ac434a0ecc4172f5474b2bf6097745ae8b1320d02139413b77c50d04beb5f58d42085f5a6fbff0760d6311a2f5cd59b5322b"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x70, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_DATA={0x58, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x53, 0x1, "916d84752e0c0a043c922cc12674a1b1fe6ecf2afd2614fbec42510e8f433b2c05130c990a7b15b4ed4b6c3a39c701f0c3469253156c90d202fe109dda3d5016d0825a455926d843f7eefbd9fd6e7b"}]}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10}, @NFTA_SET_ELEM_KEY_END={0x180, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x61, 0x1, "7ce60dc854bf961fae2906eb16366786b7aef8ac4d01dc586dd0ce31b7b12fa775b4de35c926d164acd6d24af7f558f9a5def02df4e95976a9950fc5fc347c29eab4fbedb690395ded3a1fdc88e53bd0f70c158f5c4e955f6fb0c64c71"}, @NFTA_DATA_VALUE={0xd1, 0x1, "833fec6b7c921f25dc6c9b870752ede68466ca520b648e06a030d4d37023833b9f8be65eb8e43edc61a34bffa9824bb048e1dd4543316a313a465267143941ec2c28e59d4c536b56baf0e96b28f6830d6e8f1b7733afd5d5861a303643c8cf80ade8f8b906d8f573d394a165362685a7ad1a6cae6f8b22a3e7140a309a4dee5a101f98be4d9895119008220b584947808bc5cfb34df5db07db4e21cb0165898d20e3625a6d1962d9e696ebd98579628f0407dcfaf943b8b8831dc1f4ba10fc93782bad2523091d658e8fd253a2"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_KEY={0x78, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x35, 0x1, "d802a4743369776f5025c78db289610f47fa7869e240e5ffcb03711c1d8bf979d9fcd1870ec1f6fe4af03a6a8bba93d505"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x405}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xff}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x138, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_DATA={0xb8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb3, 0x1, "1ce89b1764c223dfeeaee00fb16242ad6a6d9209c56e50a787f39c342ff09b8393e5a41591a741d9ac5f9c5bc4a2555314db6ce73e488fc89d6f114ca119bcf68d92f769102d191d8bc691167ee37f4fe265ae31b9c2ec8e9605786954b2dc4132ec6ecffd5aeb31066ff11173291134b86e957d835dbed108c73e4e5bb335b230e330a9455e568688ae5efb77ea9aabc55fd8c780a436949163fd8ac300a997d60ae95fdebc9cbbafc844b47d954d"}]}, @NFTA_SET_ELEM_KEY_END={0x4c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x20000000009}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x400000000000000}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfd}]}, {0x30c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @last={{0x9}, @void}}, @NFTA_SET_ELEM_EXPR={0x5c, 0x7, 0x0, 0x1, @meta={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1b}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xf}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x19c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe4, 0x1, "f55fa5b56ff8569433fd983d3ac6e69cf0d09668b055f00c0b64aa163ee12e3107bf2583a5debff454a7997420129cf7b1d5f91cb7210a816eacf7d15d6625b5a27cb299192ed263b1f8329e4dcbe54c2924d507a2aee14fec45685bda9a9d11cc2667c0a44455179fdcc5228ff8deda7ac97e58932d8d2f33e32854c9c605d82ae5451eedda263280e9026bd9438988ab2fe9e5cab0b255972f5e2b782b1a3d54b5c7293fb3be1ba56f66f2c1a71771f5ecd62c0b31cca83b01e0db995b9ddddbb745ba47d660022a056aacedb1cee3361312d46a42a352d77dfdf0c21b89f0"}, @NFTA_DATA_VALUE={0xb2, 0x1, "031bbd0c54fb6c7b9d209a00eb2179eeaaed1b97cbc59e8177e2615fd4968edbb75f841823765a6b9e984f06ac47ce2ceee4262b67a86b53e4716281e6154c2fa4d271b99563d82b6fc537802879358120f2e0c37696cf0c44a367a3e76d46c856c3ef04297a2e1b372d7de0ca0d4d4ee00347e1a278fca3516efb871f4cf23c59a6aec40ce800112e2f75cab12ac14edb2c21883ba4de2bb38ea2be7efbeee131c2b7b31ac7ecccdf207a7c04fb"}]}, @NFTA_SET_ELEM_DATA={0xe8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe4, 0x1, "b4e4d9d5c53f0bda01bea719be5dfe3eadce0f8a7118c60d0dc0542e82b26008705f7e687ccd1d4d9104753a61bcca4453dcaf1d909e5f7d11d12e9bc22e7050b66da8aa618e165f09fff976028fa51bf1c5f94dc755ad810dd4c0fecd72a117b5c7d9d937f2ebc0d7faebd389a572e2c282157e3139aa5a9d1b4593fc5aeaab44471fc0be3b051bd1cab32a5f526db3a1224a55526afe7f1e1da8b7c15971d2d47c29087ba090b613a814bab634050e061d388f6dd0927202ff281605512afc2d8d23953a05a3e21401df1fdc3fe340423e91f0cfa2e249640b58da4ac92f42"}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x156c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000054) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r4}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00'}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_LINK={0x8, 0x1, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x84000) sendmsg$inet6(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001a40)="b56edeace98676bd7a903b8239ded6fca95b4c80752dc90427c1a26f3822cd0a6ac592fdfbd4997506b7f9fbe556", 0x2e}, {&(0x7f0000001a80)="416bf6395e24ef2eaae26fa78c238c7b14", 0x11}], 0x2, &(0x7f0000001b00)=[@rthdr_2292={{0x58, 0x29, 0x39, {0xbc, 0x8, 0x0, 0x5, 0x0, [@mcast2, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @hopopts={{0x28, 0x29, 0x36, {0x3b, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x1}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdrdstopts={{0x50, 0x29, 0x37, {0x2c, 0x6, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x20, {0x1, 0x6, 0x4, 0x6, [0xfffffffffffffff7, 0x7, 0xffffffffffffffff]}}]}}}, @hopopts={{0x180, 0x29, 0x36, {0x3c, 0x2d, '\x00', [@generic={0x3, 0xc4, "25a73cff46b5bb1ea1bcb27639f47ab7171483d72a7323f34952cc68fb1e8b084b0922fe73bd52a49829b393653fff63673a646d0a5d19ddd510ee2479885091f707d3b3cdc8098b530f0205882b85d48460927d919aff35252a54e92e1edd41b8dac5ddda1d03348ff4b5d007e21ceb3d1e5478b4fef7512f31ce7de76bded5bb1bce80ec422a9e521d82ed6c57b17f31fe3b538822897aabbd64207cfa738b0b19d302b6519870143c843729962d6d97586f2586aa7fb23e4820f1fede3b8b01bb8241"}, @generic={0xff, 0x96, "ce22bc8baa3838817aeefd293e16c655ac5946af9f3c6c292378bd7dfd7ecb1a6e6b85e42308c8a3250c3cae1ff95b1c340a6bf4f8a66981c552bd6ac7daf8e3c577ed1977113a7e65d263d6621624480e71a3bf92b4138e3d1b37ad0087d277013bc398b8dab47176bd7aba9e7bdd9092cd22f9a14007501f5ef9fdb24fd165bbc7e282c7a9b6fd32d361659ed93147bf191f21db6a"}, @ra={0x5, 0x2, 0x9}, @pad1, @enc_lim={0x4, 0x1, 0xd3}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7fffffff}}, @dontfrag={{0x14, 0x29, 0x3e, 0x30f2}}, @rthdrdstopts={{0x78, 0x29, 0x37, {0x2b, 0xb, '\x00', [@pad1, @generic={0x6, 0x32, "90efdbb28951a046777efd762be74f60b4a931350c10f16938f55bff34526207c22e4f37c6c53a186445d998cf503ba2c234"}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x200}, @pad1, @enc_lim={0x4, 0x1, 0xc4}, @pad1, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x10, {0x1, 0x2, 0x90, 0xfffe, [0x6]}}]}}}], 0x310}, 0x8000800) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001e80)={0x1b, 0x0, 0x0, 0x40, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002340)=@bpf_lsm={0x1d, 0x1b, &(0x7f00000020c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x0, 0xe, 0x6, 0x2, 0x50, 0x8000000000000003}, @map_fd={0x18, 0x7}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000021c0)='syzkaller\x00', 0xcb, 0x0, 0x0, 0x100, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000002200)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000002240)={0x2, 0xd, 0x5ab, 0x876e}, 0x10, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000002280)=[0x1], &(0x7f00000022c0)=[{0x4, 0x5, 0x1, 0x1}, {0x0, 0x1, 0xb, 0xa}, {0x2, 0x3, 0x6, 0x8}, {0x3, 0x1, 0x4, 0x1}, {0x4, 0x4, 0x3, 0x2}], 0x10, 0xa5}, 0x94) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xe, 0x11, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x81020000}, {0x65, 0x0, 0x0, 0xfaffff7f}}, [@map_fd={0x18, 0x3, 0x1, 0x0, r11}], {{0x7, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002440)=@o_path={&(0x7f0000002400)='./file0\x00', 0x0, 0x8, r1}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002500)=@bpf_tracing={0x1a, 0x13, &(0x7f0000001f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2e26}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001fc0)='GPL\x00', 0x547, 0x6b, &(0x7f0000002000)=""/107, 0x41100, 0x48, '\x00', 0x0, 0x3, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002080)={0x3, 0xc, 0x1, 0x8}, 0x10, 0x260b2, r9, 0x2, &(0x7f0000002480)=[0xffffffffffffffff, r11, r12], &(0x7f00000024c0)=[{0x5, 0x4, 0xa, 0x7}, {0x1, 0x5, 0x4, 0x3}], 0x10, 0x1000}, 0x94) 17.159092846s ago: executing program 4 (id=3289): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="08009f000600000008002600b409000005005201"], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r11, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x8, 0x30}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r9, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24000091) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8, 0x8, 0x4, 0x1, 0x9, 0x0, 0x3, 0x100000000}, &(0x7f00000000c0)={0x8, 0x3, 0x101, 0x3, 0x7, 0x10001, 0x8, 0x7}, &(0x7f00000001c0)={0xfffffffffffffff6, 0x100000000, 0x3ff, 0xfc00000000000000, 0x9, 0x8000000000000001, 0x8, 0xf7}, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000280)={&(0x7f0000000240)={[0x100000000]}, 0x8}) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) ppoll(&(0x7f0000000080)=[{r0, 0x401}], 0x1, 0x0, 0x0, 0x0) 16.980854888s ago: executing program 2 (id=3290): r0 = socket$packet(0x11, 0x3, 0x300) unshare(0x64000600) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b0000000000000000ddffffff7f000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x8650bf77ffef8b55}, {0x85, 0x0, 0x0, 0xaa}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f00000001c0)=0x9, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7}, 0x5}], 0x1, 0x2000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x3a8}}, 0x0) ioctl$XFS_IOC_GETBMAPA(r2, 0xc020582c, &(0x7f0000000300)={0x1, 0xffffffffffffff80, 0x9, 0xe, 0x7f}) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r11, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44891}, 0x44) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_START_SYNC(r9, 0x80089418, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r11, 0x84009422, &(0x7f0000001e00)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r12, 0x50009418, &(0x7f0000000e00)={{r10}, r13, 0x2, @inherit={0x60, &(0x7f0000000300)={0x0, 0x3, 0x1, 0x7485, {0x20, 0x0, 0x9, 0x1, 0xddbc}, [0x7, 0x8c76, 0xb]}}, @devid=r14}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000580)={r14, 0x9, 0x9, 0x1}) r15 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r15, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="d0000000ed0300022abd7000ffdbdf25b309c3362e913f7f9be904c751dfffc9efa89d633dddd00b781dec9da81fb510c6abfd0dffdd173f03ee7c6dec49744615729235a26dd9a7d54c0282e89ef562d5b647d6b2137b4ec153f24455cf9e139ca7ba8bdb1d3cb1385e5709954f1e507102b7c60b3848be5b09e4169011c085bde9d3bf7ce4ad80e6b5384c385685e9ed1fd61c2c374c7036a7d22c05347ed5359cb994b6b09b183005d2835fe7da0fb8da893a34f8b581ee9cc876887fd5015e8528ce70f9f732ebcd249c80d47d9d"], 0xd0}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r16, &(0x7f0000000100)='rdma.current\x00', 0x0, 0x0) 16.947990741s ago: executing program 3 (id=3291): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d4, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xdb}, {0x0, 0x200000000000}, {0x2}, 0x0, 0x0, 0xa, 0x4}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r3 = socket$alg(0x26, 0x5, 0x0) unshare(0x22020400) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x4) shutdown(r4, 0x1) (async) shutdown(r4, 0x1) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) (async) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) r5 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="b19ccccf841132d9ec4cda81a3ef2ca8a18faee1017246ab", 0x18) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="b19ccccf841132d9ec4cda81a3ef2ca8a18faee1017246ab", 0x18) write(r5, 0x0, 0x0) recvmmsg(r5, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000002c00)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x12022, 0x0) (async) recvmmsg(r5, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000002c00)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x12022, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000080000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000001000000000000000000000080000000000100000000002000"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000080000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000001000000000000000000000080000000000100000000002000"], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0x1, 0x58, &(0x7f0000002600)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0x1, 0x58, &(0x7f0000002600)}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x44, r7, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd769}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x44, r7, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd769}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00042abd7000fedbdf25070000000800040000000000140001800600020006000000080009004d000000080005000e00000008000500ffff0000080006000a000000f7ca82c2d513369a760f3b88c8a482e8e85836b93878284419fb3947b97534d2a54e75cdda0071691610497061a7512f1dbb285d27a3818ee34b11362426c1d7886c8a5709c158b5e3b0784cc2a942c97659176d4556fb1a7dd019"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x884) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d70a00"/112], 0xb8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) 15.51344837s ago: executing program 2 (id=3293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x50241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x14, 0x2c, 0x107, 0x70bd2b, 0x0, {0x9, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0x40b, 0x4) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000080)) (async) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYRES8=r3], 0x2a) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) 1.509597659s ago: executing program 32 (id=3287): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="67000200", @ANYRES16=0x0, @ANYBLOB="040029bd7000ffdbdf251900000008000300", @ANYRES32=r3, @ANYBLOB="06006d000000000005001e000600000005001c00ff00000005001c000800000006006d006dff000005006000080000000500600009000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x8050) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008044) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(0x0, r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x2c, 0x24, 0x1, 0x7ffffffc, 0x6, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0xe, 0xc}, {0x4, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0xc0956febbce12c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x44, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x11a}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20}, 0x40004) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="150000000640"], 0x20) r7 = socket(0x10, 0x803, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x20, 0x800a, 0x0, 0x0, 0xf, 0x3, 0x3, 0xfc, 0x4, 0x9, 0x400, 0x40, 0x6, 0xff, 0x0, 0xfffff301, [0xffffffff, 0xdb]}}) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5128a}}, 0x20}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050c28bd7000ffdbf1253e0000000c00990000000003000000060065000080000000000000b4000000"], 0x30}}, 0x1) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r10, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x41) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r11, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8814}, 0x1) 1.461438714s ago: executing program 33 (id=3291): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d4, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xdb}, {0x0, 0x200000000000}, {0x2}, 0x0, 0x0, 0xa, 0x4}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r3 = socket$alg(0x26, 0x5, 0x0) unshare(0x22020400) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x4) shutdown(r4, 0x1) (async) shutdown(r4, 0x1) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) (async) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) r5 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="b19ccccf841132d9ec4cda81a3ef2ca8a18faee1017246ab", 0x18) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="b19ccccf841132d9ec4cda81a3ef2ca8a18faee1017246ab", 0x18) write(r5, 0x0, 0x0) recvmmsg(r5, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000002c00)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x12022, 0x0) (async) recvmmsg(r5, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000002c00)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x12022, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000080000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000001000000000000000000000080000000000100000000002000"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000080000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000001000000000000000000000080000000000100000000002000"], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0x1, 0x58, &(0x7f0000002600)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0x1, 0x58, &(0x7f0000002600)}, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x44, r7, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd769}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x44, r7, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd769}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00042abd7000fedbdf25070000000800040000000000140001800600020006000000080009004d000000080005000e00000008000500ffff0000080006000a000000f7ca82c2d513369a760f3b88c8a482e8e85836b93878284419fb3947b97534d2a54e75cdda0071691610497061a7512f1dbb285d27a3818ee34b11362426c1d7886c8a5709c158b5e3b0784cc2a942c97659176d4556fb1a7dd019"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x884) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa0000000004000000020000a0000000002db7ea6a6026e248e6b634477cc855bec38ca89f8897c65d980624cde39b077283934de6378ad50100e062c2f43128b4167c946f6edaa04ec9963e54e35f7b1722c9c566c943a5192d86ad611ad96d37b6f5db07f62cb296d5c3a07acb5e02382f3866aa2114d42a61a225b4193577c09b34623c72b629048b8b14645a89f33ada62daa890cfcb15a4febd8f5c4f1a761e5aa443d5c53b416e960c3960bd159dcdde8c5a3622754f286ab82aa40e8c48d55aba903f5e375d05f2cb3fbdfd40139615f555e3fca6c3e9417c504e15ad93815a19934b7a8788810f9ae2c8", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d70a00"/112], 0xb8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) 1.420417691s ago: executing program 34 (id=3289): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="08009f000600000008002600b409000005005201"], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x28, r11, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x8, 0x30}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r9, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24000091) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8, 0x8, 0x4, 0x1, 0x9, 0x0, 0x3, 0x100000000}, &(0x7f00000000c0)={0x8, 0x3, 0x101, 0x3, 0x7, 0x10001, 0x8, 0x7}, &(0x7f00000001c0)={0xfffffffffffffff6, 0x100000000, 0x3ff, 0xfc00000000000000, 0x9, 0x8000000000000001, 0x8, 0xf7}, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000280)={&(0x7f0000000240)={[0x100000000]}, 0x8}) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) ppoll(&(0x7f0000000080)=[{r0, 0x401}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 35 (id=3293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x50241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)={0x14, 0x2c, 0x107, 0x70bd2b, 0x0, {0x9, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000000c0)=0x40b, 0x4) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000080)) (async) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYRES8=r3], 0x2a) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) kernel console output (not intermixed with test programs): T18551] x_tables: duplicate underflow at hook 1 [ 449.530757][T18550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3047'. [ 449.549036][T18551] x_tables: duplicate underflow at hook 1 [ 449.561564][T18551] x_tables: duplicate underflow at hook 1 [ 449.563225][ T6581] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 449.588725][T18551] x_tables: duplicate underflow at hook 1 [ 449.595326][T18552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3047'. [ 449.611275][T18551] x_tables: duplicate underflow at hook 1 [ 449.636141][T18551] x_tables: duplicate underflow at hook 1 [ 449.668936][T18551] x_tables: duplicate underflow at hook 1 [ 449.701939][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 449.734139][T18550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3047'. [ 449.816780][T18552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3047'. [ 449.873669][T18550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3047'. [ 449.905547][T18552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3047'. [ 449.958077][T18550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3047'. [ 450.011270][T18574] tunl0: Caught tx_queue_len zero misconfig [ 450.024564][T18552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3047'. [ 450.063085][T18550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3047'. [ 450.090948][T18577] netlink: 'syz.2.3052': attribute type 12 has an invalid length. [ 450.245226][T18274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.303983][T18422] gre0 speed is unknown, defaulting to 1000 [ 450.396270][T18589] netlink: 'syz.4.3056': attribute type 8 has an invalid length. [ 450.430735][T18589] netlink: 'syz.4.3056': attribute type 8 has an invalid length. [ 450.487831][T18274] veth0_vlan: entered promiscuous mode [ 450.567224][T18274] veth1_vlan: entered promiscuous mode [ 450.730436][T18274] veth0_macvtap: entered promiscuous mode [ 450.766766][T18274] veth1_macvtap: entered promiscuous mode [ 450.823553][T18274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.884641][T18274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.937250][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.969030][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.978930][ T6581] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.020029][ T6581] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.136563][T18422] gre0 speed is unknown, defaulting to 1000 [ 451.415254][T18615] netlink: 'syz.4.3062': attribute type 1 has an invalid length. [ 451.479727][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.523267][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.629597][T18627] netlink: 'syz.4.3066': attribute type 8 has an invalid length. [ 451.637951][T18627] netlink: 'syz.4.3066': attribute type 8 has an invalid length. [ 451.655885][T18621] netlink: 'syz.3.3064': attribute type 1 has an invalid length. [ 451.714423][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.733595][ T6581] net_ratelimit: 12 callbacks suppressed [ 451.733616][ T6581] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 451.759010][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.792908][T18629] FAULT_INJECTION: forcing a failure. [ 451.792908][T18629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.855495][T18629] CPU: 1 UID: 0 PID: 18629 Comm: syz.4.3067 Not tainted syzkaller #0 PREEMPT(full) [ 451.855525][T18629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 451.855538][T18629] Call Trace: [ 451.855547][T18629] [ 451.855556][T18629] dump_stack_lvl+0xe8/0x150 [ 451.855599][T18629] should_fail_ex+0x412/0x560 [ 451.855633][T18629] _copy_from_user+0x2d/0xb0 [ 451.855656][T18629] __sys_bpf+0x229/0x950 [ 451.855681][T18629] ? __pfx___sys_bpf+0x10/0x10 [ 451.855719][T18629] ? ksys_write+0x242/0x270 [ 451.855757][T18629] ? __pfx_ksys_write+0x10/0x10 [ 451.855791][T18629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.855814][T18629] __x64_sys_bpf+0x7c/0x90 [ 451.855850][T18629] do_syscall_64+0x15f/0xf80 [ 451.855874][T18629] ? trace_irq_disable+0x3b/0x140 [ 451.855896][T18629] ? clear_bhb_loop+0x40/0x90 [ 451.855921][T18629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.855941][T18629] RIP: 0033:0x7fb80e99c819 [ 451.855961][T18629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.855987][T18629] RSP: 002b:00007fb80f88d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 451.856010][T18629] RAX: ffffffffffffffda RBX: 00007fb80ec15fa0 RCX: 00007fb80e99c819 [ 451.856026][T18629] RDX: 0000000000000028 RSI: 0000200000000540 RDI: 0000000000000012 [ 451.856039][T18629] RBP: 00007fb80f88d090 R08: 0000000000000000 R09: 0000000000000000 [ 451.856052][T18629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.856064][T18629] R13: 00007fb80ec16038 R14: 00007fb80ec15fa0 R15: 00007ffdfb2a0978 [ 451.856098][T18629] [ 452.023911][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 452.143060][ T6581] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 452.260554][ T6581] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 452.396402][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 452.645500][T18646] team0 (unregistering): Port device team_slave_0 removed [ 452.680116][T18646] team0 (unregistering): Port device team_slave_1 removed [ 452.731447][T18422] gre0 speed is unknown, defaulting to 1000 [ 452.741459][ T6581] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 452.858654][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 453.091488][T18653] erspan0: entered promiscuous mode [ 453.229367][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 453.335534][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 453.351157][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 453.365219][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 453.372812][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 453.372844][ C0] lec:lec_tx_timeout: lec0 [ 453.381406][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 453.400353][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 453.408602][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 453.417158][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 453.582531][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 453.813696][T18422] gre0 speed is unknown, defaulting to 1000 [ 453.841805][T18671] netlink: 'syz.1.3076': attribute type 8 has an invalid length. [ 453.857508][T18671] netlink: 'syz.1.3076': attribute type 8 has an invalid length. [ 454.202682][T18680] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 454.535520][T18422] gre0 speed is unknown, defaulting to 1000 [ 454.738221][T18709] erspan0: entered promiscuous mode [ 454.754014][T18709] macsec1: entered promiscuous mode [ 454.781879][T18709] erspan0: left promiscuous mode [ 454.878004][T18713] __nla_validate_parse: 31 callbacks suppressed [ 454.878027][T18713] netlink: 820 bytes leftover after parsing attributes in process `syz.3.3086'. [ 454.894330][T18713] netlink: 820 bytes leftover after parsing attributes in process `syz.3.3086'. [ 455.051617][T18656] lo speed is unknown, defaulting to 1000 [ 455.137315][T18719] netlink: 'syz.3.3087': attribute type 8 has an invalid length. [ 455.156065][T18719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3087'. [ 455.166418][T18719] netlink: 'syz.3.3087': attribute type 8 has an invalid length. [ 455.174879][T18719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3087'. [ 455.261938][T18717] gretap0: entered promiscuous mode [ 455.283579][T18717] vlan0: entered promiscuous mode [ 455.539967][ T5837] Bluetooth: hci2: command tx timeout [ 455.585970][T18730] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 455.750295][ T6583] batadv0: left promiscuous mode [ 455.783751][ T6583] hsr_slave_0: left promiscuous mode [ 455.823501][ T6583] hsr_slave_1: left promiscuous mode [ 455.841594][ T6583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.784576][T18763] netlink: 'syz.1.3099': attribute type 8 has an invalid length. [ 456.793208][T18763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3099'. [ 456.803203][T18763] netlink: 'syz.1.3099': attribute type 8 has an invalid length. [ 456.813150][T18763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3099'. [ 457.008568][ T6583] team0 (unregistering): Port device team_slave_1 removed [ 457.138668][ T12] net_ratelimit: 13 callbacks suppressed [ 457.138690][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 457.426003][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 457.612421][T18656] chnl_net:caif_netlink_parms(): no params data found [ 457.625568][ T5837] Bluetooth: hci2: command tx timeout [ 457.848856][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 458.003269][T18797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3109'. [ 458.043573][T18800] FAULT_INJECTION: forcing a failure. [ 458.043573][T18800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.074983][T18800] CPU: 0 UID: 0 PID: 18800 Comm: syz.3.3110 Not tainted syzkaller #0 PREEMPT(full) [ 458.075013][T18800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 458.075025][T18800] Call Trace: [ 458.075034][T18800] [ 458.075050][T18800] dump_stack_lvl+0xe8/0x150 [ 458.075086][T18800] should_fail_ex+0x412/0x560 [ 458.075121][T18800] _copy_from_user+0x2d/0xb0 [ 458.075145][T18800] btf_new_fd+0x352/0xd40 [ 458.075184][T18800] ? __pfx_btf_new_fd+0x10/0x10 [ 458.075214][T18800] ? bpf_token_put+0x143/0x160 [ 458.075240][T18800] ? bpf_btf_load+0x126/0x190 [ 458.075266][T18800] __sys_bpf+0x4e5/0x950 [ 458.075290][T18800] ? __pfx___sys_bpf+0x10/0x10 [ 458.075330][T18800] ? ksys_write+0x242/0x270 [ 458.075363][T18800] ? __pfx_ksys_write+0x10/0x10 [ 458.075396][T18800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.075418][T18800] __x64_sys_bpf+0x7c/0x90 [ 458.075437][T18800] do_syscall_64+0x15f/0xf80 [ 458.075458][T18800] ? trace_irq_disable+0x3b/0x140 [ 458.075479][T18800] ? clear_bhb_loop+0x40/0x90 [ 458.075501][T18800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.075520][T18800] RIP: 0033:0x7f0ec9d9c819 [ 458.075539][T18800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.075556][T18800] RSP: 002b:00007f0ecac12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 458.075585][T18800] RAX: ffffffffffffffda RBX: 00007f0eca015fa0 RCX: 00007f0ec9d9c819 [ 458.075600][T18800] RDX: 0000000000000028 RSI: 0000200000000540 RDI: 0000000000000012 [ 458.075612][T18800] RBP: 00007f0ecac12090 R08: 0000000000000000 R09: 0000000000000000 [ 458.075624][T18800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.075636][T18800] R13: 00007f0eca016038 R14: 00007f0eca015fa0 R15: 00007ffc01847ed8 [ 458.075669][T18800] [ 458.388713][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 458.397164][ C0] lec:lec_tx_timeout: lec0 [ 458.401904][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 458.503650][T18656] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.511823][T18656] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.519949][T18656] bridge_slave_0: entered allmulticast mode [ 458.528165][T18656] bridge_slave_0: entered promiscuous mode [ 458.649948][T18656] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.671238][T18656] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.682015][T18656] bridge_slave_1: entered allmulticast mode [ 458.731628][T18656] bridge_slave_1: entered promiscuous mode [ 458.875362][T18821] bond1 (unregistering): Released all slaves [ 458.883677][T18826] netlink: 284 bytes leftover after parsing attributes in process `syz.0.3117'. [ 459.207838][T18839] pim6reg: entered allmulticast mode [ 459.241844][T18656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.255731][T18842] pim6reg: left allmulticast mode [ 459.287361][T18656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.444201][ T6583] IPVS: stop unused estimator thread 0... [ 459.489678][T18656] team0: Port device team_slave_0 added [ 459.511553][T18656] team0: Port device team_slave_1 added [ 459.615067][T18656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.639094][T18656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.699142][ T5837] Bluetooth: hci2: command tx timeout [ 459.715039][T18656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.750028][T18656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.757235][T18656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.784138][T18656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.845135][T18861] tipc: Enabling of bearer rejected, already enabled [ 459.870507][T18837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3119'. [ 459.892311][T18837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3119'. [ 459.924989][T18837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3119'. [ 459.957136][T18837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3119'. [ 460.073741][T18656] hsr_slave_0: entered promiscuous mode [ 460.091769][T18656] hsr_slave_1: entered promiscuous mode [ 460.107831][T18656] debugfs: 'hsr0' already exists in 'hsr' [ 460.116956][T18656] Cannot create hsr debugfs directory [ 460.418941][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 460.575201][T18882] syzkaller1: entered promiscuous mode [ 460.598187][T18882] syzkaller1: entered allmulticast mode [ 460.598254][T18887] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3130'. [ 460.622405][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 460.657363][T18889] netlink: 'syz.4.3131': attribute type 1 has an invalid length. [ 460.803431][T18889] 8021q: adding VLAN 0 to HW filter on device bond16 [ 460.926503][T18889] bond16: (slave batadv0): Opening slave failed [ 460.957770][T18902] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 461.015279][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 461.211485][T18899] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.246113][T18897] lo speed is unknown, defaulting to 1000 [ 461.399549][ T6583] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 461.482217][T18899] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.595538][T18897] gre0 speed is unknown, defaulting to 1000 [ 461.677297][T18917] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3139'. [ 461.686249][T18914] bond17: entered promiscuous mode [ 461.704290][T18917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3139'. [ 461.713440][T18914] bond17: entered allmulticast mode [ 461.724707][T18914] 8021q: adding VLAN 0 to HW filter on device bond17 [ 461.779068][ T5837] Bluetooth: hci2: command tx timeout [ 461.779421][T18917] xt_hashlimit: size too large, truncated to 1048576 [ 462.086983][T18899] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.329094][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 462.424144][T18899] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.477235][T18942] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3144'. [ 462.948745][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 463.199460][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 463.209551][T18971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3151'. [ 463.229687][T18965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3149'. [ 463.267903][T18965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3149'. [ 463.441355][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.846839][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.895387][ T6689] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 464.018110][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 464.034487][ T1676] block nbd1: Possible stuck request ffff888026fe7000: control (read@0,1024B). Runtime 180 seconds [ 464.045773][ T1676] block nbd1: Possible stuck request ffff888026fe71c0: control (read@1024,1024B). Runtime 180 seconds [ 464.057190][ T1676] block nbd1: Possible stuck request ffff888026fe7380: control (read@2048,1024B). Runtime 180 seconds [ 464.068914][ T1676] block nbd1: Possible stuck request ffff888026fe7540: control (read@3072,1024B). Runtime 180 seconds [ 464.096884][T18656] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 464.114699][T18656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 464.197154][ T6689] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.211294][ T6689] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.256277][T18656] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 464.274880][T18656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 464.331639][T19020] FAULT_INJECTION: forcing a failure. [ 464.331639][T19020] name failslab, interval 1, probability 0, space 0, times 0 [ 464.347054][T19020] CPU: 0 UID: 0 PID: 19020 Comm: syz.0.3162 Not tainted syzkaller #0 PREEMPT(full) [ 464.347084][T19020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 464.347096][T19020] Call Trace: [ 464.347104][T19020] [ 464.347113][T19020] dump_stack_lvl+0xe8/0x150 [ 464.347149][T19020] should_fail_ex+0x412/0x560 [ 464.347183][T19020] should_failslab+0xa8/0x100 [ 464.347208][T19020] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 464.347240][T19020] ? __get_vm_area_node+0x13f/0x300 [ 464.347273][T19020] __get_vm_area_node+0x13f/0x300 [ 464.347304][T19020] __vmalloc_node_range_noprof+0x372/0x1730 [ 464.347333][T19020] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 464.347387][T19020] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 464.347422][T19020] ? __lock_acquire+0x6b5/0x2cf0 [ 464.347455][T19020] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 464.347476][T19020] __vmalloc_noprof+0xd2/0x120 [ 464.347505][T19020] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 464.347531][T19020] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 464.347560][T19020] bpf_prog_alloc+0x3c/0x1a0 [ 464.347586][T19020] bpf_prog_load+0x7ba/0x1ae0 [ 464.347608][T19020] ? get_pid_task+0x20/0x1f0 [ 464.347644][T19020] ? __pfx_bpf_prog_load+0x10/0x10 [ 464.347666][T19020] ? __might_fault+0xaf/0x130 [ 464.347714][T19020] ? bpf_lsm_bpf+0x9/0x20 [ 464.347735][T19020] ? security_bpf+0x7e/0x2d0 [ 464.347763][T19020] __sys_bpf+0x618/0x950 [ 464.347788][T19020] ? __pfx___sys_bpf+0x10/0x10 [ 464.347828][T19020] ? ksys_write+0x242/0x270 [ 464.347860][T19020] ? __pfx_ksys_write+0x10/0x10 [ 464.347895][T19020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.347918][T19020] __x64_sys_bpf+0x7c/0x90 [ 464.347949][T19020] do_syscall_64+0x15f/0xf80 [ 464.347974][T19020] ? trace_irq_disable+0x3b/0x140 [ 464.347996][T19020] ? clear_bhb_loop+0x40/0x90 [ 464.348022][T19020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.348043][T19020] RIP: 0033:0x7fa8acb9c819 [ 464.348068][T19020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.348086][T19020] RSP: 002b:00007fa8ada65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 464.348109][T19020] RAX: ffffffffffffffda RBX: 00007fa8ace15fa0 RCX: 00007fa8acb9c819 [ 464.348124][T19020] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 464.348138][T19020] RBP: 00007fa8ada65090 R08: 0000000000000000 R09: 0000000000000000 [ 464.348151][T19020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.348163][T19020] R13: 00007fa8ace16038 R14: 00007fa8ace15fa0 R15: 00007ffd2553e0c8 [ 464.348196][T19020] [ 464.348224][T19020] syz.0.3162: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 464.354141][T18656] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 464.363344][T19020] ,cpuset=/,mems_allowed=0-1 [ 464.643431][T19020] CPU: 0 UID: 0 PID: 19020 Comm: syz.0.3162 Not tainted syzkaller #0 PREEMPT(full) [ 464.643458][T19020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 464.643470][T19020] Call Trace: [ 464.643478][T19020] [ 464.643487][T19020] dump_stack_lvl+0xe8/0x150 [ 464.643522][T19020] warn_alloc+0x249/0x340 [ 464.643561][T19020] ? __pfx_warn_alloc+0x10/0x10 [ 464.643593][T19020] ? __get_vm_area_node+0x13f/0x300 [ 464.643625][T19020] ? __get_vm_area_node+0x2b5/0x300 [ 464.643660][T19020] __vmalloc_node_range_noprof+0x397/0x1730 [ 464.643732][T19020] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 464.643769][T19020] ? __lock_acquire+0x6b5/0x2cf0 [ 464.643801][T19020] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 464.643822][T19020] __vmalloc_noprof+0xd2/0x120 [ 464.643850][T19020] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 464.643873][T19020] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 464.643897][T19020] bpf_prog_alloc+0x3c/0x1a0 [ 464.643918][T19020] bpf_prog_load+0x7ba/0x1ae0 [ 464.643937][T19020] ? get_pid_task+0x20/0x1f0 [ 464.643970][T19020] ? __pfx_bpf_prog_load+0x10/0x10 [ 464.643992][T19020] ? __might_fault+0xaf/0x130 [ 464.644041][T19020] ? bpf_lsm_bpf+0x9/0x20 [ 464.644062][T19020] ? security_bpf+0x7e/0x2d0 [ 464.644089][T19020] __sys_bpf+0x618/0x950 [ 464.644114][T19020] ? __pfx___sys_bpf+0x10/0x10 [ 464.644153][T19020] ? ksys_write+0x242/0x270 [ 464.644186][T19020] ? __pfx_ksys_write+0x10/0x10 [ 464.644220][T19020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.644243][T19020] __x64_sys_bpf+0x7c/0x90 [ 464.644263][T19020] do_syscall_64+0x15f/0xf80 [ 464.644288][T19020] ? trace_irq_disable+0x3b/0x140 [ 464.644310][T19020] ? clear_bhb_loop+0x40/0x90 [ 464.644336][T19020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.644356][T19020] RIP: 0033:0x7fa8acb9c819 [ 464.644377][T19020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.644395][T19020] RSP: 002b:00007fa8ada65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 464.644417][T19020] RAX: ffffffffffffffda RBX: 00007fa8ace15fa0 RCX: 00007fa8acb9c819 [ 464.644432][T19020] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 464.644446][T19020] RBP: 00007fa8ada65090 R08: 0000000000000000 R09: 0000000000000000 [ 464.644459][T19020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.644471][T19020] R13: 00007fa8ace16038 R14: 00007fa8ace15fa0 R15: 00007ffd2553e0c8 [ 464.644506][T19020] [ 464.644513][T19020] Mem-Info: [ 464.666555][T18656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 464.668288][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6260 ms [ 464.692160][T18656] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 464.695804][ C0] lec:lec_tx_timeout: lec0 [ 464.697637][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 464.772322][T19020] active_anon:6395 inactive_anon:0 isolated_anon:0 [ 464.772322][T19020] active_file:3083 inactive_file:40097 isolated_file:0 [ 464.772322][T19020] unevictable:768 dirty:237 writeback:0 [ 464.772322][T19020] slab_reclaimable:12024 slab_unreclaimable:139213 [ 464.772322][T19020] mapped:29630 shmem:1366 pagetables:1487 [ 464.772322][T19020] sec_pagetables:0 bounce:0 [ 464.772322][T19020] kernel_misc_reclaimable:0 [ 464.772322][T19020] free:1275382 free_pcp:10855 free_cma:0 [ 464.782488][ T1676] block nbd2: Possible stuck request ffff888027057000: control (read@0,1024B). Runtime 180 seconds [ 464.844739][T19020] Node 0 active_anon:25480kB inactive_anon:0kB active_file:12332kB inactive_file:160176kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118520kB dirty:944kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14668kB pagetables:5728kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 464.852650][ T1676] block nbd2: Possible stuck request ffff8880270571c0: control (read@1024,1024B). Runtime 180 seconds [ 464.885833][T18656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 464.908948][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 464.916233][ T1676] block nbd2: Possible stuck request ffff888027057380: control (read@2048,1024B). Runtime 180 seconds [ 464.993013][T19020] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 465.024514][ T1676] block nbd2: Possible stuck request ffff888027057540: control (read@3072,1024B). Runtime 180 seconds [ 465.104803][T19020] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 465.135872][T19020] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 465.142048][T19020] Node 0 DMA32 free:1156032kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25780kB inactive_anon:0kB active_file:12332kB inactive_file:160176kB unevictable:1536kB writepending:944kB zspages:0kB present:3129332kB managed:2551528kB mlocked:0kB bounce:0kB free_pcp:41784kB local_pcp:21288kB free_cma:0kB [ 465.177092][T19020] lowmem_reserve[]: 0 0 0 0 0 [ 465.182094][T19020] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:612kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 465.211947][T19020] lowmem_reserve[]: 0 0 0 0 0 [ 465.216770][T19020] Node 1 Normal free:3931352kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1004kB local_pcp:0kB free_cma:0kB [ 465.249761][T19020] lowmem_reserve[]: 0 0 0 0 0 [ 465.255651][T19020] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 465.262687][ T6583] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 465.304310][T19020] Node 0 DMA32: 8057*4kB (UM) 4533*8kB (UME) 2185*16kB (UM) 389*32kB (UME) 591*64kB (UME) 645*128kB (UME) 560*256kB (UM) 317*512kB (UM) 194*1024kB (UME) 97*2048kB (UME) 53*4096kB (UM) = 1156348kB [ 465.354956][T19020] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 465.382494][T19020] Node 1 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 2*32kB (UM) 2*64kB (UM) 6*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 958*4096kB (UM) = 3931352kB [ 465.404396][T19020] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 465.433122][T19020] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 465.450119][T19020] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 465.463072][T19020] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 465.473649][T19020] 44544 total pagecache pages [ 465.478887][T19020] 0 pages in swap cache [ 465.483096][T19020] Free swap = 124996kB [ 465.487515][T19020] Total swap = 124996kB [ 465.492083][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 465.523827][T19020] 2097051 pages RAM [ 465.533964][T19020] 0 pages HighMem/MovableOnly [ 465.537450][T18656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.541368][T19020] 427401 pages reserved [ 465.567733][T19020] 0 pages cma reserved [ 465.856946][T19047] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.866511][T19047] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.084143][T19047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.103216][T19047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.268286][T19067] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3171'. [ 466.588623][T19065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3171'. [ 466.683673][T19066] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 466.721237][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.744941][T19056] lo speed is unknown, defaulting to 1000 [ 466.754868][T18656] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.770462][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.782525][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.814781][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.860721][T19056] gre0 speed is unknown, defaulting to 1000 [ 466.870757][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.878210][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.884217][T19076] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 466.918205][T19076] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 466.941855][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 466.970016][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.977247][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.018412][T19078] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3175'. [ 467.126174][T19080] tipc: Enabling of bearer rejected, failed to enable media [ 467.382098][ T6687] net_ratelimit: 2 callbacks suppressed [ 467.382122][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 467.529767][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 467.551558][T19100] netlink: 'syz.4.3180': attribute type 2 has an invalid length. [ 467.572100][T19100] netlink: 'syz.4.3180': attribute type 11 has an invalid length. [ 467.597658][T19100] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3180'. [ 467.848661][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 467.903977][T18656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.998568][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 468.113072][T18656] veth0_vlan: entered promiscuous mode [ 468.172363][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 468.228777][T18656] veth1_vlan: entered promiscuous mode [ 468.400352][T18656] veth0_macvtap: entered promiscuous mode [ 468.452567][T18656] veth1_macvtap: entered promiscuous mode [ 468.548278][T18656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.591137][T19115] lo speed is unknown, defaulting to 1000 [ 468.622750][T18656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.645432][T19115] gre0 speed is unknown, defaulting to 1000 [ 468.650742][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 468.700645][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.717680][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.771564][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.782429][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.864850][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 468.987381][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 469.130140][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 469.168945][T19128] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3187'. [ 469.229113][T19128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3187'. [ 469.238285][ T6687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.249038][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 469.268686][ T6687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.276415][T19128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3187'. [ 469.482561][ T6687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.504293][ T6687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.890703][ T30] audit: type=1107 audit(1776431470.302:11): pid=19136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 470.132133][T19144] tipc: Resetting bearer [ 470.418794][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5650 ms [ 470.426938][ C0] lec:lec_tx_timeout: lec0 [ 470.432898][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 470.812081][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 470.826765][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 470.836535][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 470.849577][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 470.866969][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 471.036682][T19154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3194'. [ 471.047057][T19154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3194'. [ 471.061828][T19154] netlink: 'syz.0.3194': attribute type 1 has an invalid length. [ 471.221790][T19154] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3194'. [ 471.353197][T19151] lo speed is unknown, defaulting to 1000 [ 471.391353][T19151] gre0 speed is unknown, defaulting to 1000 [ 471.426141][T19163] bridge_slave_1: left allmulticast mode [ 471.457531][T19163] bridge_slave_1: left promiscuous mode [ 471.499024][T19163] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.654207][T19166] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 471.774171][T19166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3197'. [ 472.040451][T19167] lo speed is unknown, defaulting to 1000 [ 472.095611][T19167] gre0 speed is unknown, defaulting to 1000 [ 472.448848][T19184] netlink: 'syz.2.3202': attribute type 11 has an invalid length. [ 472.489823][T19184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3202'. [ 472.688627][ T6689] net_ratelimit: 13 callbacks suppressed [ 472.688649][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 472.777197][T19193] lo: entered allmulticast mode [ 472.845392][T19193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 472.981109][ T5841] Bluetooth: hci1: command tx timeout [ 472.988203][T19194] netlink: 'syz.2.3204': attribute type 16 has an invalid length. [ 473.021129][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 473.184340][T19199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 473.215354][T19151] chnl_net:caif_netlink_parms(): no params data found [ 473.276967][T19199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3205'. [ 473.314018][T19201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3206'. [ 473.752066][T19095] Set syz1 is full, maxelem 65536 reached [ 473.936382][T19151] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.968219][T19151] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.977004][T19151] bridge_slave_0: entered allmulticast mode [ 473.985972][T19151] bridge_slave_0: entered promiscuous mode [ 474.040755][T19151] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.060476][T19151] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.079340][T19151] bridge_slave_1: entered allmulticast mode [ 474.103217][T19151] bridge_slave_1: entered promiscuous mode [ 474.118590][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 474.186789][T19151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.264627][T19151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.354641][T19236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3213'. [ 474.374453][T19151] team0: Port device team_slave_0 added [ 474.383906][T19151] team0: Port device team_slave_1 added [ 474.449246][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 474.503819][T19151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.518637][T19151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.581030][T19151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.597355][T19151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.606554][T19151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.633943][T19151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.645259][ T30] audit: type=1800 audit(1776431475.052:12): pid=19241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3215" name="memory.events" dev="tmpfs" ino=3294 res=0 errno=0 [ 474.707328][T19245] ip6tnl1: entered allmulticast mode [ 474.822914][T19151] hsr_slave_0: entered promiscuous mode [ 474.846669][T19151] hsr_slave_1: entered promiscuous mode [ 474.873079][T19151] debugfs: 'hsr0' already exists in 'hsr' [ 474.882663][T19151] Cannot create hsr debugfs directory [ 474.888899][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 474.956244][T19255] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3218'. [ 475.059255][ T5841] Bluetooth: hci1: command tx timeout [ 475.071858][T19255] syzkaller1: tun_chr_ioctl cmd 35108 [ 475.101596][ T796] IPVS: starting estimator thread 0... [ 475.239885][T19264] IPVS: using max 34 ests per chain, 81600 per kthread [ 475.269373][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 475.399117][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 475.520827][T19284] FAULT_INJECTION: forcing a failure. [ 475.520827][T19284] name failslab, interval 1, probability 0, space 0, times 0 [ 475.536935][T19284] CPU: 0 UID: 0 PID: 19284 Comm: syz.2.3226 Not tainted syzkaller #0 PREEMPT(full) [ 475.536970][T19284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 475.536983][T19284] Call Trace: [ 475.536990][T19284] [ 475.536999][T19284] dump_stack_lvl+0xe8/0x150 [ 475.537043][T19284] should_fail_ex+0x412/0x560 [ 475.537073][T19284] ? __d_alloc+0x37/0x6f0 [ 475.537101][T19284] should_failslab+0xa8/0x100 [ 475.537124][T19284] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 475.537161][T19284] __d_alloc+0x37/0x6f0 [ 475.537185][T19284] ? do_raw_spin_lock+0x12b/0x2f0 [ 475.537214][T19284] d_alloc_pseudo+0x21/0xc0 [ 475.537241][T19284] alloc_file_pseudo+0xdd/0x240 [ 475.537269][T19284] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 475.537307][T19284] anon_inode_getfd+0xc8/0x1f0 [ 475.537333][T19284] btf_new_fd+0xa41/0xd40 [ 475.537370][T19284] ? __pfx_btf_new_fd+0x10/0x10 [ 475.537399][T19284] ? bpf_token_put+0x143/0x160 [ 475.537426][T19284] ? bpf_btf_load+0x126/0x190 [ 475.537452][T19284] __sys_bpf+0x4e5/0x950 [ 475.537477][T19284] ? __pfx___sys_bpf+0x10/0x10 [ 475.537517][T19284] ? ksys_write+0x242/0x270 [ 475.537549][T19284] ? __pfx_ksys_write+0x10/0x10 [ 475.537583][T19284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.537606][T19284] __x64_sys_bpf+0x7c/0x90 [ 475.537627][T19284] do_syscall_64+0x15f/0xf80 [ 475.537652][T19284] ? trace_irq_disable+0x3b/0x140 [ 475.537672][T19284] ? clear_bhb_loop+0x40/0x90 [ 475.537696][T19284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.537716][T19284] RIP: 0033:0x7f0bd459c819 [ 475.537737][T19284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.537755][T19284] RSP: 002b:00007f0bd53e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 475.537778][T19284] RAX: ffffffffffffffda RBX: 00007f0bd4815fa0 RCX: 00007f0bd459c819 [ 475.537792][T19284] RDX: 0000000000000028 RSI: 0000200000000540 RDI: 0000000000000012 [ 475.537805][T19284] RBP: 00007f0bd53e3090 R08: 0000000000000000 R09: 0000000000000000 [ 475.537818][T19284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 475.537831][T19284] R13: 00007f0bd4816038 R14: 00007f0bd4815fa0 R15: 00007fff2b4366f8 [ 475.537867][T19284] [ 476.179337][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 476.187527][ C0] lec:lec_tx_timeout: lec0 [ 476.193314][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 476.210229][T19316] netlink: 'syz.3.3235': attribute type 13 has an invalid length. [ 476.486528][T19327] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3237'. [ 476.887818][T19343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3242'. [ 476.963278][T19332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3240'. [ 477.003505][T19349] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3244'. [ 477.139705][ T5841] Bluetooth: hci1: command tx timeout [ 477.189419][T19356] ip6tnl2: entered promiscuous mode [ 477.203725][T19151] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 477.215420][T19151] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 477.225507][T19151] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 477.240733][T19151] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 477.250246][T19151] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 477.272914][T19151] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 477.347244][T19151] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 477.429264][T19151] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 477.457201][T19352] lo speed is unknown, defaulting to 1000 [ 477.486177][T19352] gre0 speed is unknown, defaulting to 1000 [ 477.856730][T19382] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3251'. [ 478.150549][T19389] netlink: 'syz.2.3252': attribute type 2 has an invalid length. [ 478.173652][T19389] tipc: Started in network mode [ 478.186643][T19389] tipc: Node identity 340008, cluster identity 4711 [ 478.208639][T19389] tipc: Node number set to 3407880 [ 478.458290][T19151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.597778][T19410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3259'. [ 478.745441][T19151] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.763617][ T6689] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.771226][ T6689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.794259][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.801792][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.881814][T19418] delete_channel: no stack [ 478.917365][T19416] delete_channel: no stack [ 478.968748][ T36] net_ratelimit: 10 callbacks suppressed [ 478.968770][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 479.126070][T19424] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3265'. [ 479.169792][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 479.222391][ T5841] Bluetooth: hci1: command tx timeout [ 479.301254][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 479.419350][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 479.504334][T19151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.527209][T19439] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 479.536885][T19439] bridge1: entered allmulticast mode [ 479.698349][T19440] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.708257][T19440] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.151278][T19456] netlink: 'syz.3.3272': attribute type 1 has an invalid length. [ 480.159751][T19456] netlink: 'syz.3.3272': attribute type 2 has an invalid length. [ 480.167762][T19456] netlink: 'syz.3.3272': attribute type 1 has an invalid length. [ 480.176674][T19456] netlink: 'syz.3.3272': attribute type 3 has an invalid length. [ 480.256974][T19440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.288060][T19440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.529078][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 480.545841][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.566525][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.614130][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.634488][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.688614][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 480.830026][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 480.948985][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 480.957433][T19472] xt_l2tp: v2 sid > 0xffff: 4294967293 [ 480.977743][T19471] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3275'. [ 481.079055][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 481.201445][T19151] veth0_vlan: entered promiscuous mode [ 481.213895][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 481.221361][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 481.229515][ C0] lec:lec_tx_timeout: lec0 [ 481.234771][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 481.278607][T19151] veth1_vlan: entered promiscuous mode [ 481.356804][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3279'. [ 481.392651][T19151] veth0_macvtap: entered promiscuous mode [ 481.436041][T19480] bond8: option arp_all_targets: invalid value (129) [ 481.454963][T19480] bond8 (unregistering): Released all slaves [ 481.550884][T19482] bond8: option arp_all_targets: invalid value (129) [ 481.592769][T19482] bond8 (unregistering): Released all slaves [ 481.758776][T19151] veth1_macvtap: entered promiscuous mode [ 481.798954][T19483] lo speed is unknown, defaulting to 1000 [ 481.851313][T19151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.876416][T19483] gre0 speed is unknown, defaulting to 1000 [ 481.894256][T19151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.913842][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.951193][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.981498][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.047457][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.233745][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.259402][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.381798][T19497] lo speed is unknown, defaulting to 1000 [ 482.390388][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.415012][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.627575][T19497] gre0 speed is unknown, defaulting to 1000 [ 483.675815][T19512] syzkaller0: entered promiscuous mode [ 483.683918][T19512] syzkaller0: entered allmulticast mode [ 483.803634][T19513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3283'. [ 484.046519][T19515] macvtap1: entered promiscuous mode [ 484.068630][T19515] macvtap1: entered allmulticast mode [ 484.119178][ T36] net_ratelimit: 12 callbacks suppressed [ 484.119203][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 484.249203][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 484.361379][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 484.452095][T19522] netlink: 'syz.4.3285': attribute type 4 has an invalid length. [ 484.482127][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 484.624121][T19444] Set syz1 is full, maxelem 65536 reached [ 484.668745][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 484.674463][T19529] netlink: 'syz.4.3289': attribute type 1 has an invalid length. [ 484.789221][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 484.870101][T19534] bridge0: port 3(syz_tun) entered blocking state [ 484.878752][T19534] bridge0: port 3(syz_tun) entered disabled state [ 484.892178][T19534] syz_tun: entered allmulticast mode [ 484.915251][T19534] syz_tun: entered promiscuous mode [ 484.924221][T19532] lo speed is unknown, defaulting to 1000 [ 484.932235][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 484.957651][T19532] gre0 speed is unknown, defaulting to 1000 [ 485.051173][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 485.169559][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 485.277210][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 485.291306][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 485.307927][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 485.317723][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 485.326046][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 485.441861][T19546] lo speed is unknown, defaulting to 1000 [ 485.547465][T19546] gre0 speed is unknown, defaulting to 1000 [ 486.156275][T19546] chnl_net:caif_netlink_parms(): no params data found [ 486.248488][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 486.256627][ C0] lec:lec_tx_timeout: lec0 [ 486.262174][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 486.286241][T19546] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.293644][T19546] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.301127][T19546] bridge_slave_0: entered allmulticast mode [ 486.308696][T19546] bridge_slave_0: entered promiscuous mode [ 486.316865][T19546] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.324766][T19546] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.332709][T19546] bridge_slave_1: entered allmulticast mode [ 486.341919][T19546] bridge_slave_1: entered promiscuous mode [ 486.370424][T19546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.384026][T19546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.415946][T19546] team0: Port device team_slave_0 added [ 486.426629][T19546] team0: Port device team_slave_1 added [ 486.455175][T19546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.462293][T19546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.489151][T19546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.502205][T19546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.509241][T19546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.536686][T19546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.586138][T19546] hsr_slave_0: entered promiscuous mode [ 486.593269][T19546] hsr_slave_1: entered promiscuous mode [ 486.599988][T19546] debugfs: 'hsr0' already exists in 'hsr' [ 486.605763][T19546] Cannot create hsr debugfs directory [ 486.723081][T19546] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.771159][T19546] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.837496][T19546] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.907978][T19546] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.378720][ T5837] Bluetooth: hci0: command tx timeout [ 489.148903][ T1114] net_ratelimit: 27 callbacks suppressed [ 489.148927][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 489.268665][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 489.379143][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 489.458867][ T5837] Bluetooth: hci0: command tx timeout [ 489.488722][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 489.598872][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 489.708885][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 489.818791][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 489.928991][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 490.038909][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 490.077160][ T5193] udevd[5193]: worker [5886] /devices/virtual/block/nbd1 timeout; kill it [ 490.086122][ T5193] udevd[5193]: seq 19296 '/devices/virtual/block/nbd1' killed [ 490.093875][ T5193] udevd[5193]: worker [6911] /devices/virtual/block/nbd2 timeout; kill it [ 490.102982][ T5193] udevd[5193]: seq 19298 '/devices/virtual/block/nbd2' killed [ 490.148818][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 491.278658][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 491.286742][ C0] lec:lec_tx_timeout: lec0 [ 491.291518][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 491.539901][ T5837] Bluetooth: hci0: command tx timeout [ 493.618679][ T5837] Bluetooth: hci0: command tx timeout [ 494.099869][ T1676] block nbd1: Possible stuck request ffff888026fe7000: control (read@0,1024B). Runtime 210 seconds [ 494.110768][ T1676] block nbd1: Possible stuck request ffff888026fe71c0: control (read@1024,1024B). Runtime 210 seconds [ 494.122400][ T1676] block nbd1: Possible stuck request ffff888026fe7380: control (read@2048,1024B). Runtime 210 seconds [ 494.134115][ T1676] block nbd1: Possible stuck request ffff888026fe7540: control (read@3072,1024B). Runtime 210 seconds [ 494.258869][ T12] net_ratelimit: 36 callbacks suppressed [ 494.258895][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 494.378711][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 494.488794][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 494.599070][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 494.708895][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 494.819170][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 494.928845][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 495.038689][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 495.148957][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 495.258606][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 495.380119][ T1676] block nbd2: Possible stuck request ffff888027057000: control (read@0,1024B). Runtime 210 seconds [ 495.391394][ T1676] block nbd2: Possible stuck request ffff8880270571c0: control (read@1024,1024B). Runtime 210 seconds [ 495.402457][ T1676] block nbd2: Possible stuck request ffff888027057380: control (read@2048,1024B). Runtime 210 seconds [ 495.413741][ T1676] block nbd2: Possible stuck request ffff888027057540: control (read@3072,1024B). Runtime 210 seconds [ 496.308599][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 496.316655][ C0] lec:lec_tx_timeout: lec0 [ 496.321634][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 499.348850][ T54] net_ratelimit: 36 callbacks suppressed [ 499.348881][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 499.468762][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 499.579101][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 499.688885][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 499.798904][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 499.909054][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 500.018971][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 500.129045][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 500.238843][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 500.368856][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 500.511882][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 500.531111][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 500.543838][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 500.545639][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 500.571923][ T5831] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 500.571922][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 500.585249][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 500.593053][ T5831] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 500.595434][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 500.603449][ T5831] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 500.616004][T19570] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 500.618331][ T5831] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 500.633982][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 500.642724][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 500.642775][ T5831] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 500.760979][T19565] lo speed is unknown, defaulting to 1000 [ 500.772227][T19567] lo speed is unknown, defaulting to 1000 [ 500.779654][T19565] gre0 speed is unknown, defaulting to 1000 [ 500.787649][T19569] lo speed is unknown, defaulting to 1000 [ 500.917401][T19567] gre0 speed is unknown, defaulting to 1000 [ 501.151681][T19565] chnl_net:caif_netlink_parms(): no params data found [ 501.178827][T19569] gre0 speed is unknown, defaulting to 1000 [ 501.328463][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 501.336544][ C0] lec:lec_tx_timeout: lec0 [ 501.341588][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 501.357459][T19565] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.373189][T19565] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.381775][T19565] bridge_slave_0: entered allmulticast mode [ 501.390675][T19565] bridge_slave_0: entered promiscuous mode [ 501.406547][T19565] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.417081][T19565] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.425543][T19565] bridge_slave_1: entered allmulticast mode [ 501.435073][T19565] bridge_slave_1: entered promiscuous mode [ 501.494891][T19565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.515314][T19565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.585056][T19565] team0: Port device team_slave_0 added [ 501.604974][T19565] team0: Port device team_slave_1 added [ 501.654419][T19565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.661867][T19565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.689073][T19565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.718175][T19565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.725271][T19565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.751988][T19565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.788613][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 501.829910][T19567] chnl_net:caif_netlink_parms(): no params data found [ 501.911943][T19570] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 501.922441][T19570] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 501.938232][T19570] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 501.948396][T19570] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 501.962007][T19570] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 502.012957][T19565] hsr_slave_0: entered promiscuous mode [ 502.021519][T19565] hsr_slave_1: entered promiscuous mode [ 502.027739][T19565] debugfs: 'hsr0' already exists in 'hsr' [ 502.034462][T19565] Cannot create hsr debugfs directory [ 502.156199][T19569] chnl_net:caif_netlink_parms(): no params data found [ 502.182958][T19567] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.191287][T19567] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.199080][T19567] bridge_slave_0: entered allmulticast mode [ 502.206976][T19567] bridge_slave_0: entered promiscuous mode [ 502.234746][T19567] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.242541][T19567] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.250381][T19567] bridge_slave_1: entered allmulticast mode [ 502.257731][T19567] bridge_slave_1: entered promiscuous mode [ 502.288651][T19583] lo speed is unknown, defaulting to 1000 [ 502.338114][T19583] gre0 speed is unknown, defaulting to 1000 [ 502.342339][T19567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.377094][T19567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.527114][T19567] team0: Port device team_slave_0 added [ 502.537970][T19567] team0: Port device team_slave_1 added [ 502.544958][T19569] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.553386][T19569] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.561591][T19569] bridge_slave_0: entered allmulticast mode [ 502.570605][T19569] bridge_slave_0: entered promiscuous mode [ 502.605522][T19569] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.612729][T19569] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.620637][T19569] bridge_slave_1: entered allmulticast mode [ 502.629077][T19569] bridge_slave_1: entered promiscuous mode [ 502.666170][T19567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.673387][T19567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.700444][T19567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.739102][ T5841] Bluetooth: hci3: command tx timeout [ 502.745744][T19570] Bluetooth: hci7: command tx timeout [ 502.752131][ T5831] Bluetooth: hci6: command tx timeout [ 502.756193][T19569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.772102][T19567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.779463][T19567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.806313][T19567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.844570][T19569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.919568][T19569] team0: Port device team_slave_0 added [ 502.928787][T19569] team0: Port device team_slave_1 added [ 503.006027][T19569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.013174][T19569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.040184][T19569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.061515][T19567] hsr_slave_0: entered promiscuous mode [ 503.068034][T19567] hsr_slave_1: entered promiscuous mode [ 503.074695][T19567] debugfs: 'hsr0' already exists in 'hsr' [ 503.080671][T19567] Cannot create hsr debugfs directory [ 503.100122][T19569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.107153][T19569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.133906][T19569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.288231][T19569] hsr_slave_0: entered promiscuous mode [ 503.295040][T19569] hsr_slave_1: entered promiscuous mode [ 503.301882][T19569] debugfs: 'hsr0' already exists in 'hsr' [ 503.307648][T19569] Cannot create hsr debugfs directory [ 503.441677][T19583] chnl_net:caif_netlink_parms(): no params data found [ 503.671154][T19583] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.678650][T19583] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.686140][T19583] bridge_slave_0: entered allmulticast mode [ 503.693855][T19583] bridge_slave_0: entered promiscuous mode [ 503.706221][T19583] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.714025][T19583] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.721572][T19583] bridge_slave_1: entered allmulticast mode [ 503.729485][T19583] bridge_slave_1: entered promiscuous mode [ 503.781145][T19583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.794987][T19583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.854532][T19583] team0: Port device team_slave_0 added [ 503.863832][T19583] team0: Port device team_slave_1 added [ 503.905003][T19583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.912360][T19583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.939410][T19583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.963827][T19583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.971252][T19583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.998760][T19583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.018579][ T5831] Bluetooth: hci8: command tx timeout [ 504.071320][T19583] hsr_slave_0: entered promiscuous mode [ 504.079263][T19583] hsr_slave_1: entered promiscuous mode [ 504.085555][T19583] debugfs: 'hsr0' already exists in 'hsr' [ 504.091577][T19583] Cannot create hsr debugfs directory [ 504.378928][ T1114] net_ratelimit: 9 callbacks suppressed [ 504.378954][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 504.498930][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 504.608841][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 504.718919][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 504.818774][ T5831] Bluetooth: hci6: command tx timeout [ 504.819894][ T5841] Bluetooth: hci3: command tx timeout [ 504.824253][T19570] Bluetooth: hci7: command tx timeout [ 504.831121][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 504.949021][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 505.058841][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 505.168980][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 505.278918][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 505.388899][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 506.099121][ T5841] Bluetooth: hci8: command tx timeout [ 506.348539][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 506.356624][ C0] lec:lec_tx_timeout: lec0 [ 506.361333][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 506.899600][ T5841] Bluetooth: hci3: command tx timeout [ 506.905361][T19570] Bluetooth: hci7: command tx timeout [ 506.910968][ T5831] Bluetooth: hci6: command tx timeout [ 508.179512][T19570] Bluetooth: hci8: command tx timeout [ 508.978844][T19570] Bluetooth: hci6: command tx timeout [ 508.978865][ T5831] Bluetooth: hci7: command tx timeout [ 508.978895][ T5831] Bluetooth: hci3: command tx timeout [ 509.468702][ T36] net_ratelimit: 36 callbacks suppressed [ 509.468728][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 509.588766][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 509.699008][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 509.808926][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 509.918729][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 510.028927][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 510.138870][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 510.248891][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 510.268883][ T5831] Bluetooth: hci8: command tx timeout [ 510.359077][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 510.468838][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 511.368583][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 511.376680][ C0] lec:lec_tx_timeout: lec0 [ 511.383851][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 514.538778][ T6687] net_ratelimit: 36 callbacks suppressed [ 514.538804][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 514.659111][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 514.769126][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 514.879008][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 514.989522][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 515.099150][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 515.208888][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 515.319021][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 515.438903][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 515.549204][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 517.218759][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 517.226843][ C0] lec:lec_tx_timeout: lec0 [ 517.233350][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 519.629190][ T36] net_ratelimit: 36 callbacks suppressed [ 519.629214][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 519.749012][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 519.859877][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 519.968696][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 520.079016][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 520.188869][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 520.298745][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 520.408980][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 520.518737][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 520.629147][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 522.248783][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 522.256946][ C0] lec:lec_tx_timeout: lec0 [ 522.262617][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 524.179183][ T1676] block nbd1: Possible stuck request ffff888026fe7000: control (read@0,1024B). Runtime 240 seconds [ 524.191528][ T1676] block nbd1: Possible stuck request ffff888026fe71c0: control (read@1024,1024B). Runtime 240 seconds [ 524.202701][ T1676] block nbd1: Possible stuck request ffff888026fe7380: control (read@2048,1024B). Runtime 240 seconds [ 524.214502][ T1676] block nbd1: Possible stuck request ffff888026fe7540: control (read@3072,1024B). Runtime 240 seconds [ 524.708673][ T12] net_ratelimit: 36 callbacks suppressed [ 524.708697][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 524.828591][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 524.938795][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 525.048654][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 525.158652][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 525.268877][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 525.379062][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 525.458925][ T1676] block nbd2: Possible stuck request ffff888027057000: control (read@0,1024B). Runtime 240 seconds [ 525.470351][ T1676] block nbd2: Possible stuck request ffff8880270571c0: control (read@1024,1024B). Runtime 240 seconds [ 525.481732][ T1676] block nbd2: Possible stuck request ffff888027057380: control (read@2048,1024B). Runtime 240 seconds [ 525.493096][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 525.493119][ T1676] block nbd2: Possible stuck request ffff888027057540: control (read@3072,1024B). Runtime 240 seconds [ 525.608671][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 525.718930][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 527.278875][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 527.287019][ C0] lec:lec_tx_timeout: lec0 [ 529.798829][ T12] net_ratelimit: 36 callbacks suppressed [ 529.798854][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 529.918994][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 530.029145][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 530.139340][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 530.249379][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 530.358777][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 530.468841][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 530.579498][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 530.688698][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 530.798712][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 534.888586][ T36] net_ratelimit: 36 callbacks suppressed [ 534.888609][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 535.008650][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 535.118650][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 535.228992][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 535.338642][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 535.448637][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 535.558967][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 535.668660][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 535.788896][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 535.898828][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 539.978767][ T54] net_ratelimit: 36 callbacks suppressed [ 539.978791][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 540.098696][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 540.208985][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 540.318837][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 540.428929][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 540.538848][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 540.648857][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 540.758762][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 540.868847][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 540.980179][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 545.048703][ T6687] net_ratelimit: 36 callbacks suppressed [ 545.048748][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 545.168657][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 545.279014][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 545.388714][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 545.498742][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 545.619102][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 545.728684][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 545.839038][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 545.887420][ T5841] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 545.896885][ T5841] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 545.909376][ T5841] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 545.921850][ T5841] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 545.931725][ T5841] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 545.949689][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 546.004502][T19602] lo speed is unknown, defaulting to 1000 [ 546.013403][T19602] gre0 speed is unknown, defaulting to 1000 [ 546.078547][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 546.262525][T19602] chnl_net:caif_netlink_parms(): no params data found [ 546.334628][T19602] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.342292][T19602] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.350111][T19602] bridge_slave_0: entered allmulticast mode [ 546.358037][T19602] bridge_slave_0: entered promiscuous mode [ 546.367005][T19602] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.374453][T19602] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.381953][T19602] bridge_slave_1: entered allmulticast mode [ 546.389727][T19602] bridge_slave_1: entered promiscuous mode [ 546.420097][T19602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.432650][T19602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.464137][T19602] team0: Port device team_slave_0 added [ 546.472229][T19602] team0: Port device team_slave_1 added [ 546.503573][T19602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.511027][T19602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.537872][T19602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.551390][T19602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.559494][T19602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.586667][T19602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.636845][T19602] hsr_slave_0: entered promiscuous mode [ 546.643675][T19602] hsr_slave_1: entered promiscuous mode [ 546.650410][T19602] debugfs: 'hsr0' already exists in 'hsr' [ 546.656256][T19602] Cannot create hsr debugfs directory [ 548.019574][ T5831] Bluetooth: hci9: command tx timeout [ 549.619989][T13077] lec:lec_start_xmit: lec0:No lecd attached [ 550.098920][ T5831] Bluetooth: hci9: command tx timeout [ 550.109031][ T6689] net_ratelimit: 31 callbacks suppressed [ 550.109049][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 550.228667][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 550.339078][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 550.448607][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 550.558816][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 550.668697][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 550.778667][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 550.888884][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 550.998657][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 551.108986][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 552.179206][ T5831] Bluetooth: hci9: command tx timeout [ 554.259459][ T5831] Bluetooth: hci9: command tx timeout [ 554.264414][ T1676] block nbd1: Possible stuck request ffff888026fe7000: control (read@0,1024B). Runtime 270 seconds [ 554.276557][ T1676] block nbd1: Possible stuck request ffff888026fe71c0: control (read@1024,1024B). Runtime 270 seconds [ 554.288145][ T1676] block nbd1: Possible stuck request ffff888026fe7380: control (read@2048,1024B). Runtime 270 seconds [ 554.299487][ T1676] block nbd1: Possible stuck request ffff888026fe7540: control (read@3072,1024B). Runtime 270 seconds [ 555.208863][ T6689] net_ratelimit: 36 callbacks suppressed [ 555.208889][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 555.218997][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5600 ms [ 555.230188][ C0] lec:lec_tx_timeout: lec0 [ 555.328999][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 555.438693][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 555.539619][ T1676] block nbd2: Possible stuck request ffff888027057000: control (read@0,1024B). Runtime 270 seconds [ 555.550836][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 555.558853][ T1676] block nbd2: Possible stuck request ffff8880270571c0: control (read@1024,1024B). Runtime 270 seconds [ 555.571119][ T1676] block nbd2: Possible stuck request ffff888027057380: control (read@2048,1024B). Runtime 270 seconds [ 555.582932][ T1676] block nbd2: Possible stuck request ffff888027057540: control (read@3072,1024B). Runtime 270 seconds [ 555.658958][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 555.768724][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 555.878638][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 555.988882][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 556.099301][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 556.208658][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 560.318917][ T6687] net_ratelimit: 36 callbacks suppressed [ 560.318942][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 560.459453][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 560.529330][ T5841] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 560.553948][ T5837] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 560.567861][ T5841] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 560.568847][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 560.589053][ T5841] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 560.596364][ T5837] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 560.607656][ T5837] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 560.620891][ T5837] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 560.628355][ T5841] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 560.642398][ T5837] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 560.648044][ T5843] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 560.652016][ T5834] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 560.663506][ T5843] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 560.681421][ T5843] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 560.701930][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 560.720306][T19570] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 560.745675][ T5843] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 560.802968][T19617] lo speed is unknown, defaulting to 1000 [ 560.812170][T19616] lo speed is unknown, defaulting to 1000 [ 560.819828][T19617] gre0 speed is unknown, defaulting to 1000 [ 560.840959][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 560.849982][T19620] lo speed is unknown, defaulting to 1000 [ 560.967071][T19616] gre0 speed is unknown, defaulting to 1000 [ 561.148863][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 561.195970][T19617] chnl_net:caif_netlink_parms(): no params data found [ 561.221719][T19620] gre0 speed is unknown, defaulting to 1000 [ 561.436626][T19617] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.446067][T19617] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.454943][T19617] bridge_slave_0: entered allmulticast mode [ 561.464514][T19617] bridge_slave_0: entered promiscuous mode [ 561.481680][T19617] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.489393][T19617] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.496825][T19617] bridge_slave_1: entered allmulticast mode [ 561.504895][T19617] bridge_slave_1: entered promiscuous mode [ 561.579499][T19617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.603806][T19617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.681225][T19617] team0: Port device team_slave_0 added [ 561.704534][T19617] team0: Port device team_slave_1 added [ 561.761374][T19617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.768559][T19617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.795609][T19617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.807086][T19616] chnl_net:caif_netlink_parms(): no params data found [ 561.834948][T19617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.842093][T19617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.869477][T19617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.028161][T19617] hsr_slave_0: entered promiscuous mode [ 562.035070][T19617] hsr_slave_1: entered promiscuous mode [ 562.044295][T19617] debugfs: 'hsr0' already exists in 'hsr' [ 562.050142][T19617] Cannot create hsr debugfs directory [ 562.061761][T19616] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.070321][T19616] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.077592][T19616] bridge_slave_0: entered allmulticast mode [ 562.085122][T19616] bridge_slave_0: entered promiscuous mode [ 562.093947][T19616] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.101651][T19616] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.109321][T19616] bridge_slave_1: entered allmulticast mode [ 562.117379][T19616] bridge_slave_1: entered promiscuous mode [ 562.125917][T19620] chnl_net:caif_netlink_parms(): no params data found [ 562.212896][T19616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.257340][T19616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.329007][T19616] team0: Port device team_slave_0 added [ 562.340464][T19616] team0: Port device team_slave_1 added [ 562.421094][T19620] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.430495][T19620] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.437932][T19620] bridge_slave_0: entered allmulticast mode [ 562.447218][T19620] bridge_slave_0: entered promiscuous mode [ 562.495969][T19620] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.499556][ T5843] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 562.506464][T19620] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.517429][ T5843] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 562.519352][T19620] bridge_slave_1: entered allmulticast mode [ 562.530159][ T5843] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 562.535231][T19620] bridge_slave_1: entered promiscuous mode [ 562.539829][ T5843] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 562.547570][T19616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.554647][ T5843] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 562.560134][T19616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.603964][T19616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.634212][T19616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.641932][T19616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.669369][T19616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.725235][T19620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.738734][ T5841] Bluetooth: hci11: command tx timeout [ 562.752432][T19620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.819062][ T5841] Bluetooth: hci12: command tx timeout [ 562.829215][ T5841] Bluetooth: hci10: command tx timeout [ 562.851751][T19616] hsr_slave_0: entered promiscuous mode [ 562.858509][T19616] hsr_slave_1: entered promiscuous mode [ 562.864918][T19616] debugfs: 'hsr0' already exists in 'hsr' [ 562.871055][T19616] Cannot create hsr debugfs directory [ 562.882353][T19641] lo speed is unknown, defaulting to 1000 [ 562.909475][T19620] team0: Port device team_slave_0 added [ 562.932930][T19620] team0: Port device team_slave_1 added [ 562.955908][T19641] gre0 speed is unknown, defaulting to 1000 [ 563.038002][T19620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.045856][T19620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.075417][T19620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.105279][T19620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.112975][T19620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.140046][T19620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.231467][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 563.237547][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 563.304901][T19620] hsr_slave_0: entered promiscuous mode [ 563.312359][T19620] hsr_slave_1: entered promiscuous mode [ 563.319601][T19620] debugfs: 'hsr0' already exists in 'hsr' [ 563.325365][T19620] Cannot create hsr debugfs directory [ 563.400102][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 563.700955][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 563.730068][T19641] chnl_net:caif_netlink_parms(): no params data found [ 563.829332][T19641] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.836718][T19641] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.844216][T19641] bridge_slave_0: entered allmulticast mode [ 563.852007][T19641] bridge_slave_0: entered promiscuous mode [ 563.864918][T19641] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.872573][T19641] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.880664][T19641] bridge_slave_1: entered allmulticast mode [ 563.888022][T19641] bridge_slave_1: entered promiscuous mode [ 563.926450][T19641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.939259][T19641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.980744][T19641] team0: Port device team_slave_0 added [ 563.991389][T19641] team0: Port device team_slave_1 added [ 564.030356][T19641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.037360][T19641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.065812][T19641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.079488][T19641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.086644][T19641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.113498][T19641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.148890][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 564.222730][T19641] hsr_slave_0: entered promiscuous mode [ 564.229832][T19641] hsr_slave_1: entered promiscuous mode [ 564.236170][T19641] debugfs: 'hsr0' already exists in 'hsr' [ 564.242530][T19641] Cannot create hsr debugfs directory [ 564.419295][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 564.659052][ T5841] Bluetooth: hci13: command tx timeout [ 564.818618][ T5841] Bluetooth: hci11: command tx timeout [ 564.908696][ T5841] Bluetooth: hci10: command tx timeout [ 564.909478][ T5843] Bluetooth: hci12: command tx timeout [ 565.419420][ T6687] net_ratelimit: 8 callbacks suppressed [ 565.419444][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 565.539418][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 565.648760][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 565.758959][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 565.868709][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 565.978932][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 566.089056][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 566.198638][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 566.308803][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 566.419162][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 566.739442][ T5843] Bluetooth: hci13: command tx timeout [ 566.898692][ T5843] Bluetooth: hci11: command tx timeout [ 566.978862][ T5843] Bluetooth: hci12: command tx timeout [ 566.978902][ T5841] Bluetooth: hci10: command tx timeout [ 568.238488][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 568.246643][ C0] lec:lec_tx_timeout: lec0 [ 568.818850][ T5841] Bluetooth: hci13: command tx timeout [ 568.979111][ T5841] Bluetooth: hci11: command tx timeout [ 569.059180][ T5841] Bluetooth: hci12: command tx timeout [ 569.060225][ T5843] Bluetooth: hci10: command tx timeout [ 570.528848][ T6689] net_ratelimit: 36 callbacks suppressed [ 570.528873][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 570.648776][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 570.758771][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 570.868844][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 570.898925][ T5843] Bluetooth: hci13: command tx timeout [ 570.978949][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 571.098820][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 571.208668][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 571.318849][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 571.428689][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 571.539117][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 575.538830][ T54] net_ratelimit: 35 callbacks suppressed [ 575.538864][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 575.658740][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 575.768925][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 575.878798][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 575.988711][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 576.099451][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 576.208811][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 576.318914][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 576.428840][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 576.538704][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 580.638926][ T6689] net_ratelimit: 36 callbacks suppressed [ 580.638950][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 580.662431][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 580.759035][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 580.868944][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 580.979171][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 581.088638][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 581.199158][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 581.308995][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 581.419008][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 581.529091][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 581.638980][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 584.339294][ T1676] block nbd1: Possible stuck request ffff888026fe7000: control (read@0,1024B). Runtime 300 seconds [ 584.350813][ T1676] block nbd1: Possible stuck request ffff888026fe71c0: control (read@1024,1024B). Runtime 300 seconds [ 584.363362][ T1676] block nbd1: Possible stuck request ffff888026fe7380: control (read@2048,1024B). Runtime 300 seconds [ 584.374486][ T1676] block nbd1: Possible stuck request ffff888026fe7540: control (read@3072,1024B). Runtime 300 seconds [ 585.620989][ T1676] block nbd2: Possible stuck request ffff888027057000: control (read@0,1024B). Runtime 300 seconds [ 585.631882][ T1676] block nbd2: Possible stuck request ffff8880270571c0: control (read@1024,1024B). Runtime 300 seconds [ 585.643222][ T1676] block nbd2: Possible stuck request ffff888027057380: control (read@2048,1024B). Runtime 300 seconds [ 585.654647][ T1676] block nbd2: Possible stuck request ffff888027057540: control (read@3072,1024B). Runtime 300 seconds [ 585.728903][ T6689] net_ratelimit: 36 callbacks suppressed [ 585.729043][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 585.849416][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 585.958830][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 586.068636][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 586.179141][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 586.288728][ T36] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 586.398623][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 586.508892][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 586.618612][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 586.728623][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 590.838882][ T54] net_ratelimit: 36 callbacks suppressed [ 590.838907][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 590.958843][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 591.068838][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 591.178788][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 591.288606][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 591.398616][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 591.508773][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 591.629350][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 591.748790][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 591.859177][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 595.948818][ T54] net_ratelimit: 36 callbacks suppressed [ 595.948842][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 596.023358][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 596.068760][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 596.178851][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 596.288922][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 596.398681][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 596.508779][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 596.618799][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 596.728849][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 596.838662][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 596.948675][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 601.060472][ T1114] net_ratelimit: 36 callbacks suppressed [ 601.060496][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 601.188634][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 601.299247][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 601.408630][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 601.518710][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 601.628902][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 601.738584][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 601.859062][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 601.968602][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 602.078778][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 605.980027][ T5843] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 605.993523][ T5843] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 606.002703][ T5843] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 606.012887][ T5843] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 606.025617][ T5843] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 606.072875][T19652] lo speed is unknown, defaulting to 1000 [ 606.081782][T19652] gre0 speed is unknown, defaulting to 1000 [ 606.159029][ T6687] net_ratelimit: 36 callbacks suppressed [ 606.159053][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 606.308912][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 606.329828][T19652] chnl_net:caif_netlink_parms(): no params data found [ 606.408884][T19652] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.416324][T19652] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.423906][T19652] bridge_slave_0: entered allmulticast mode [ 606.431716][T19652] bridge_slave_0: entered promiscuous mode [ 606.441302][T19652] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.449388][T19652] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.457026][T19652] bridge_slave_1: entered allmulticast mode [ 606.465055][T19652] bridge_slave_1: entered promiscuous mode [ 606.495091][T19652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.509074][T19652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.539628][T19652] team0: Port device team_slave_0 added [ 606.547519][T19652] team0: Port device team_slave_1 added [ 606.574327][T19652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.582030][T19652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.608988][T19652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.621574][T19652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.628931][T19652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.655141][T19652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.699857][T19652] hsr_slave_0: entered promiscuous mode [ 606.706825][T19652] hsr_slave_1: entered promiscuous mode [ 606.713614][T19652] debugfs: 'hsr0' already exists in 'hsr' [ 606.719721][T19652] Cannot create hsr debugfs directory [ 606.868806][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 606.998571][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 607.149888][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 607.259068][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 607.368684][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 607.478805][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 607.588760][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 607.699280][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 608.099444][ T5843] Bluetooth: hci14: command tx timeout [ 610.179507][ T5843] Bluetooth: hci14: command tx timeout [ 611.268690][ T6689] net_ratelimit: 31 callbacks suppressed [ 611.268726][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 611.382047][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 611.398792][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 611.508879][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 611.619232][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 611.728821][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 611.838588][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 611.948717][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 612.058783][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 612.168641][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 612.259322][ T5841] Bluetooth: hci14: command tx timeout [ 612.278934][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 613.887140][T13077] lec:lec_start_xmit: lec0:No lecd attached [ 614.339348][ T5841] Bluetooth: hci14: command tx timeout [ 614.420785][ T1676] block nbd1: Possible stuck request ffff888026fe7000: control (read@0,1024B). Runtime 330 seconds [ 614.431809][ T1676] block nbd1: Possible stuck request ffff888026fe71c0: control (read@1024,1024B). Runtime 330 seconds [ 614.443226][ T1676] block nbd1: Possible stuck request ffff888026fe7380: control (read@2048,1024B). Runtime 330 seconds [ 614.455048][ T1676] block nbd1: Possible stuck request ffff888026fe7540: control (read@3072,1024B). Runtime 330 seconds [ 615.699378][ T1676] block nbd2: Possible stuck request ffff888027057000: control (read@0,1024B). Runtime 330 seconds [ 615.710425][ T1676] block nbd2: Possible stuck request ffff8880270571c0: control (read@1024,1024B). Runtime 330 seconds [ 615.721718][ T1676] block nbd2: Possible stuck request ffff888027057380: control (read@2048,1024B). Runtime 330 seconds [ 615.733261][ T1676] block nbd2: Possible stuck request ffff888027057540: control (read@3072,1024B). Runtime 330 seconds [ 616.378818][ T54] net_ratelimit: 36 callbacks suppressed [ 616.378844][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 616.499243][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 616.608822][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 616.718883][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 616.828678][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 616.938865][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 617.058708][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 617.178699][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 617.288846][ T6689] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 617.398665][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 619.218464][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5330 ms [ 619.226515][ C0] lec:lec_tx_timeout: lec0 [ 621.083508][ T5843] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 621.106132][ T5843] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 621.117959][ T5843] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 621.131735][ T5843] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 621.146426][ T5843] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 621.200930][ T5843] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 621.217089][ T5843] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 621.226337][ T5843] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 621.235187][ T5843] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 621.241207][T19666] lo speed is unknown, defaulting to 1000 [ 621.250607][ T5843] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 621.253853][T19666] gre0 speed is unknown, defaulting to 1000 [ 621.280589][T19570] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 621.314948][ T5841] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 621.325252][ T5841] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 621.337751][ T5841] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 621.338095][T19668] lo speed is unknown, defaulting to 1000 [ 621.354733][ T5841] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 621.426263][T19670] lo speed is unknown, defaulting to 1000 [ 621.478683][ T54] net_ratelimit: 36 callbacks suppressed [ 621.478716][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 621.540369][T19668] gre0 speed is unknown, defaulting to 1000 [ 621.738516][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 621.783168][T19670] gre0 speed is unknown, defaulting to 1000 [ 621.812197][T19666] chnl_net:caif_netlink_parms(): no params data found [ 622.025942][T19666] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.035261][T19666] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.043200][T19666] bridge_slave_0: entered allmulticast mode [ 622.050922][T19666] bridge_slave_0: entered promiscuous mode [ 622.073212][T19666] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.080566][T19666] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.087895][T19666] bridge_slave_1: entered allmulticast mode [ 622.096140][T19666] bridge_slave_1: entered promiscuous mode [ 622.164984][T19666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.201699][T19666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.259728][T19666] team0: Port device team_slave_0 added [ 622.269791][T19666] team0: Port device team_slave_1 added [ 622.355995][T19666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.363439][T19666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.389957][T19666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.402121][T19668] chnl_net:caif_netlink_parms(): no params data found [ 622.433049][T19666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.440959][T19666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.468146][T19666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.637563][ T5843] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 622.656095][ T5843] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 622.669673][ T5843] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 622.679078][T19670] chnl_net:caif_netlink_parms(): no params data found [ 622.680274][ T5843] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 622.694576][ T5843] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 622.714388][T19666] hsr_slave_0: entered promiscuous mode [ 622.721657][T19666] hsr_slave_1: entered promiscuous mode [ 622.731684][T19666] debugfs: 'hsr0' already exists in 'hsr' [ 622.737550][T19666] Cannot create hsr debugfs directory [ 622.772070][T19668] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.780390][T19668] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.787831][T19668] bridge_slave_0: entered allmulticast mode [ 622.795498][T19668] bridge_slave_0: entered promiscuous mode [ 622.817812][T19668] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.825743][T19668] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.833639][T19668] bridge_slave_1: entered allmulticast mode [ 622.841810][T19668] bridge_slave_1: entered promiscuous mode [ 622.969003][T19668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.986723][T19688] lo speed is unknown, defaulting to 1000 [ 623.010063][T19668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.033828][T19670] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.041288][T19670] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.048927][T19670] bridge_slave_0: entered allmulticast mode [ 623.056231][T19670] bridge_slave_0: entered promiscuous mode [ 623.074622][T19688] gre0 speed is unknown, defaulting to 1000 [ 623.100280][T19670] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.107599][T19670] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.115211][T19670] bridge_slave_1: entered allmulticast mode [ 623.123833][T19670] bridge_slave_1: entered promiscuous mode [ 623.154335][T19668] team0: Port device team_slave_0 added [ 623.164255][T19668] team0: Port device team_slave_1 added [ 623.220963][ T5841] Bluetooth: hci15: command tx timeout [ 623.273171][T19670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.298928][ T5841] Bluetooth: hci16: command tx timeout [ 623.329823][T19670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.340551][T19668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.347557][T19668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.374698][T19668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.385562][ T5841] Bluetooth: hci17: command tx timeout [ 623.426721][T19668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.433870][T19668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.463123][T19668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.531953][T19670] team0: Port device team_slave_0 added [ 623.567315][T19670] team0: Port device team_slave_1 added [ 623.630713][T19668] hsr_slave_0: entered promiscuous mode [ 623.637329][T19668] hsr_slave_1: entered promiscuous mode [ 623.645747][T19668] debugfs: 'hsr0' already exists in 'hsr' [ 623.651979][T19668] Cannot create hsr debugfs directory [ 623.674638][T19670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.681798][T19670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.710283][T19670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.740631][T19670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.747788][T19670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.774378][T19670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.914755][T19670] hsr_slave_0: entered promiscuous mode [ 623.922359][T19670] hsr_slave_1: entered promiscuous mode [ 623.929587][T19670] debugfs: 'hsr0' already exists in 'hsr' [ 623.935337][T19670] Cannot create hsr debugfs directory [ 624.195692][T19688] chnl_net:caif_netlink_parms(): no params data found [ 624.408961][T19688] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.416299][T19688] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.424603][T19688] bridge_slave_0: entered allmulticast mode [ 624.436428][T19688] bridge_slave_0: entered promiscuous mode [ 624.446617][T19688] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.454268][T19688] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.462332][T19688] bridge_slave_1: entered allmulticast mode [ 624.471078][T19688] bridge_slave_1: entered promiscuous mode [ 624.512670][T19688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.525594][T19688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.582256][T19688] team0: Port device team_slave_0 added [ 624.601008][T19688] team0: Port device team_slave_1 added [ 624.635583][T19688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.643398][T19688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.680780][T19688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.682889][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 624.694744][T19688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.705940][ T1301] clip:clip_start_xmit: skb_dst(skb) == NULL [ 624.706655][T19688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.740453][ T5834] Bluetooth: hci18: command tx timeout [ 624.748246][T19688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.812302][T19688] hsr_slave_0: entered promiscuous mode [ 624.819755][T19688] hsr_slave_1: entered promiscuous mode [ 624.826491][T19688] debugfs: 'hsr0' already exists in 'hsr' [ 624.833110][T19688] Cannot create hsr debugfs directory [ 625.028941][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 625.148976][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 625.258805][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 625.299028][ T5837] Bluetooth: hci15: command tx timeout [ 625.368739][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 625.378594][ T5837] Bluetooth: hci16: command tx timeout [ 625.458628][ T5837] Bluetooth: hci17: command tx timeout [ 625.481671][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 625.598605][ T6583] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 625.708815][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 625.818694][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 626.499386][ T6687] net_ratelimit: 5 callbacks suppressed [ 626.499410][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 626.618873][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 626.728633][ T6583] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 626.738869][ T5834] Bluetooth: hci7: command 0x0406 tx timeout [ 626.746059][ T5837] Bluetooth: hci8: command 0x0406 tx timeout [ 626.752419][ T5834] Bluetooth: hci6: command 0x0406 tx timeout [ 626.759804][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 626.829490][ T5831] Bluetooth: hci18: command tx timeout [ 626.839124][ T6687] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 626.958739][ T6583] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 627.068736][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 627.178512][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 627.288598][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 627.379148][ T5831] Bluetooth: hci15: command tx timeout [ 627.408649][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 627.458619][ T5831] Bluetooth: hci16: command tx timeout [ 627.518783][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 627.538832][ T5831] Bluetooth: hci17: command tx timeout [ 628.909037][ T5831] Bluetooth: hci18: command tx timeout [ 629.458812][ T5831] Bluetooth: hci15: command tx timeout [ 629.538586][ T5831] Bluetooth: hci16: command tx timeout [ 629.618950][ T5831] Bluetooth: hci17: command tx timeout [ 630.178452][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5480 ms [ 630.186620][ C0] lec:lec_tx_timeout: lec0 [ 630.419175][ T31] INFO: task syz.1.3287:19525 blocked for more than 143 seconds. [ 630.427905][ T31] Not tainted syzkaller #0 [ 630.433425][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 630.442539][ T31] task:syz.1.3287 state:D stack:26056 pid:19525 tgid:19524 ppid:18274 task_flags:0x480140 flags:0x00080002 [ 630.455227][ T31] Call Trace: [ 630.458862][ T31] [ 630.461925][ T31] __schedule+0x17b4/0x5680 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 630.466552][ T31] ? __pfx___schedule+0x10/0x10 [ 630.473084][ T31] ? schedule+0x90/0x360 [ 630.478731][ T31] schedule+0x164/0x360 [ 630.483094][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 630.489453][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 630.518916][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 630.530952][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 630.551674][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 630.575738][ T31] nbd_set_size+0x454/0x680 [ 630.584129][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 630.589644][ T31] ? nla_memcpy+0x5b/0xc0 [ 630.594639][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 630.600165][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 630.605953][ T31] ? rcu_is_watching+0x15/0xb0 [ 630.611156][ T31] ? trace_kmalloc+0x2a/0xf0 [ 630.615803][ T31] ? __nla_parse+0x40/0x60 [ 630.620333][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 630.627243][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 630.633884][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 630.639765][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 630.646045][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 630.651190][ T31] genl_rcv_msg+0x61c/0x7a0 [ 630.655759][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 630.661090][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 630.667041][ T31] netlink_rcv_skb+0x232/0x4b0 [ 630.672124][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 630.677270][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 630.682920][ T31] ? down_read+0x270/0x2e0 [ 630.687409][ T31] ? genl_rcv+0xd/0x40 [ 630.692080][ T31] genl_rcv+0x28/0x40 [ 630.696146][ T31] netlink_unicast+0x75c/0x8e0 [ 630.701229][ T31] netlink_sendmsg+0x813/0xb40 [ 630.706052][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.711563][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 630.716636][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 630.722148][ T31] ____sys_sendmsg+0x972/0x9f0 [ 630.726957][ T31] ? __might_fault+0xaf/0x130 [ 630.732413][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 630.738057][ T31] ? import_iovec+0x73/0xa0 [ 630.743296][ T31] ___sys_sendmsg+0x2a5/0x360 [ 630.748149][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 630.754158][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 630.759871][ T31] ? futex_wake+0x4ac/0x580 [ 630.764783][ T31] ? __fget_files+0x2a/0x420 [ 630.769968][ T31] ? __fget_files+0x3a0/0x420 [ 630.774818][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 630.779952][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 630.785541][ T31] ? rcu_is_watching+0x15/0xb0 [ 630.790802][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.797042][ T31] do_syscall_64+0x15f/0xf80 [ 630.801760][ T31] ? trace_irq_disable+0x3b/0x140 [ 630.806854][ T31] ? clear_bhb_loop+0x40/0x90 [ 630.811677][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.817641][ T31] RIP: 0033:0x7fa71ff9c819 [ 630.822857][ T31] RSP: 002b:00007fa720e7b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 630.832529][ T31] RAX: ffffffffffffffda RBX: 00007fa720215fa0 RCX: 00007fa71ff9c819 [ 630.840736][ T31] RDX: 0000000000040004 RSI: 0000200000000100 RDI: 0000000000000005 [ 630.849554][ T31] RBP: 00007fa720032c91 R08: 0000000000000000 R09: 0000000000000000 [ 630.857599][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.865943][ T31] R13: 00007fa720216038 R14: 00007fa720215fa0 R15: 00007ffd6b87b238 [ 630.875079][ T31] [ 630.878181][ T31] INFO: task syz.4.3289:19529 blocked for more than 143 seconds. [ 630.886361][ T31] Not tainted syzkaller #0 [ 630.891402][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 630.900380][ T31] task:syz.4.3289 state:D stack:25480 pid:19529 tgid:19527 ppid:19151 task_flags:0x400140 flags:0x00080002 [ 630.913210][ T31] Call Trace: [ 630.916614][ T31] [ 630.919701][ T31] __schedule+0x17b4/0x5680 [ 630.924246][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 630.929272][ T31] ? __pfx___schedule+0x10/0x10 [ 630.934172][ T31] ? schedule+0x90/0x360 [ 630.938882][ T31] schedule+0x164/0x360 [ 630.943182][ T31] schedule_preempt_disabled+0x13/0x30 [ 630.948792][ T31] __mutex_lock+0x7f5/0x1550 [ 630.953431][ T31] ? __mutex_lock+0x606/0x1550 [ 630.958320][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 630.963369][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 630.968974][ T31] ? radix_tree_lookup+0x240/0x290 [ 630.974235][ T31] genl_rcv_msg+0x10b/0x7a0 [ 630.978627][ T5831] Bluetooth: hci18: command tx timeout [ 630.979978][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 630.989515][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 630.994948][ T31] netlink_rcv_skb+0x232/0x4b0 [ 631.000011][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 631.005096][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 631.010471][ T31] ? down_read+0x270/0x2e0 [ 631.014927][ T31] ? genl_rcv+0xd/0x40 [ 631.019173][ T31] genl_rcv+0x28/0x40 [ 631.023198][ T31] netlink_unicast+0x75c/0x8e0 [ 631.027977][ T31] netlink_sendmsg+0x813/0xb40 [ 631.033242][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.038691][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 631.043669][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 631.049051][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.054406][ T31] __sys_sendto+0x672/0x710 [ 631.060768][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 631.065892][ T31] ? exc_page_fault+0x6a/0xc0 [ 631.070965][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 631.076313][ T31] __x64_sys_sendto+0xde/0x100 [ 631.081510][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.087687][ T31] do_syscall_64+0x15f/0xf80 [ 631.092634][ T31] ? trace_irq_disable+0x3b/0x140 [ 631.097701][ T31] ? clear_bhb_loop+0x40/0x90 [ 631.102672][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.108751][ T31] RIP: 0033:0x7f59b435d04e [ 631.113271][ T31] RSP: 002b:00007f59b51cbe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 631.122412][ T31] RAX: ffffffffffffffda RBX: 00007f59b51cd6c0 RCX: 00007f59b435d04e [ 631.130831][ T31] RDX: 0000000000000020 RSI: 00007f59b51cc000 RDI: 000000000000000a [ 631.139972][ T31] RBP: 0000000000000000 R08: 00007f59b51cbf04 R09: 000000000000000c [ 631.148030][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 631.156409][ T31] R13: 00007f59b51cbf58 R14: 00007f59b51cc000 R15: 0000000000000000 [ 631.164554][ T31] [ 631.167621][ T31] INFO: task syz.4.3289:19533 blocked for more than 144 seconds. [ 631.179171][ T31] Not tainted syzkaller #0 [ 631.184331][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 631.193259][ T31] task:syz.4.3289 state:D stack:26696 pid:19533 tgid:19527 ppid:19151 task_flags:0x400040 flags:0x00080002 [ 631.205731][ T31] Call Trace: [ 631.209463][ T31] [ 631.212436][ T31] __schedule+0x17b4/0x5680 [ 631.216956][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 631.223264][ T31] ? __pfx___schedule+0x10/0x10 [ 631.228195][ T31] ? schedule+0x90/0x360 [ 631.232913][ T31] schedule+0x164/0x360 [ 631.237128][ T31] schedule_preempt_disabled+0x13/0x30 [ 631.243237][ T31] __mutex_lock+0x7f5/0x1550 [ 631.247886][ T31] ? __mutex_lock+0x606/0x1550 [ 631.252952][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 631.257699][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 631.262897][ T31] ? radix_tree_lookup+0x240/0x290 [ 631.268067][ T31] genl_rcv_msg+0x10b/0x7a0 [ 631.272982][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 631.278075][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 631.283762][ T31] netlink_rcv_skb+0x232/0x4b0 [ 631.288725][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 631.293873][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 631.299747][ T31] ? down_read+0x270/0x2e0 [ 631.304449][ T31] ? genl_rcv+0xd/0x40 [ 631.308737][ T31] genl_rcv+0x28/0x40 [ 631.312756][ T31] netlink_unicast+0x75c/0x8e0 [ 631.317584][ T31] netlink_sendmsg+0x813/0xb40 [ 631.322723][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.328068][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 631.333401][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 631.339044][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.344831][ T31] __sys_sendto+0x672/0x710 [ 631.349818][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 631.354949][ T31] ? fd_install+0x94/0x3d0 [ 631.359731][ T31] ? fd_install+0x306/0x3d0 [ 631.364293][ T31] __x64_sys_sendto+0xde/0x100 [ 631.369693][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.375910][ T31] do_syscall_64+0x15f/0xf80 [ 631.380778][ T31] ? trace_irq_disable+0x3b/0x140 [ 631.385873][ T31] ? clear_bhb_loop+0x40/0x90 [ 631.390947][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.396899][ T31] RIP: 0033:0x7f59b435d04e [ 631.401962][ T31] RSP: 002b:00007f59b51aae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 631.410536][ T31] RAX: ffffffffffffffda RBX: 00007f59b51ac6c0 RCX: 00007f59b435d04e [ 631.418816][ T31] RDX: 0000000000000020 RSI: 00007f59b51ab000 RDI: 000000000000000c [ 631.426849][ T31] RBP: 0000000000000000 R08: 00007f59b51aaf04 R09: 000000000000000c [ 631.435205][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 631.443430][ T31] R13: 00007f59b51aaf58 R14: 00007f59b51ab000 R15: 0000000000000000 [ 631.452573][ T31] [ 631.455709][ T31] INFO: task syz.3.3291:19538 blocked for more than 144 seconds. [ 631.468547][ T31] Not tainted syzkaller #0 [ 631.473541][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 631.482783][ T31] task:syz.3.3291 state:D stack:25720 pid:19538 tgid:19536 ppid:17889 task_flags:0x400140 flags:0x00080002 [ 631.494912][ T31] Call Trace: [ 631.498233][ T31] [ 631.501333][ T31] __schedule+0x17b4/0x5680 [ 631.505974][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 631.511344][ T54] net_ratelimit: 35 callbacks suppressed [ 631.511360][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 631.524588][ T31] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 631.530646][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 631.536063][ T31] ? __pfx___schedule+0x10/0x10 [ 631.541504][ T31] ? schedule+0x90/0x360 [ 631.545841][ T31] schedule+0x164/0x360 [ 631.550714][ T31] schedule_preempt_disabled+0x13/0x30 [ 631.556221][ T31] __mutex_lock+0x7f5/0x1550 [ 631.561100][ T31] ? kernel_text_address+0xa5/0xe0 [ 631.566267][ T31] ? __mutex_lock+0x606/0x1550 [ 631.571779][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 631.576653][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 631.581955][ T31] ? stack_trace_save+0xa9/0x100 [ 631.586987][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 631.592310][ T31] ? radix_tree_lookup+0x240/0x290 [ 631.597469][ T31] genl_rcv_msg+0x10b/0x7a0 [ 631.602271][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 631.607329][ T31] netlink_rcv_skb+0x232/0x4b0 [ 631.612386][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 631.617475][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 631.623056][ T31] ? down_read+0x270/0x2e0 [ 631.627530][ T31] ? genl_rcv+0xd/0x40 [ 631.628782][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 631.631913][ T31] genl_rcv+0x28/0x40 [ 631.643165][ T31] netlink_unicast+0x75c/0x8e0 [ 631.647940][ T31] netlink_sendmsg+0x813/0xb40 [ 631.653395][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.659039][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 631.664025][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 631.669653][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.675017][ T31] __sys_sendto+0x672/0x710 [ 631.679648][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 631.684743][ T31] ? exc_page_fault+0x6a/0xc0 [ 631.689764][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 631.695258][ T31] __x64_sys_sendto+0xde/0x100 [ 631.700317][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.706447][ T31] do_syscall_64+0x15f/0xf80 [ 631.711419][ T31] ? trace_irq_disable+0x3b/0x140 [ 631.716508][ T31] ? clear_bhb_loop+0x40/0x90 [ 631.721651][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.727676][ T31] RIP: 0033:0x7f0ec9d5d04e [ 631.732215][ T31] RSP: 002b:00007f0ecabefe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 631.741112][ T31] RAX: ffffffffffffffda RBX: 00007f0ecabf16c0 RCX: 00007f0ec9d5d04e [ 631.749479][ T31] RDX: 0000000000000020 RSI: 00007f0ecabf0000 RDI: 0000000000000009 [ 631.757928][ T31] RBP: 0000000000000000 R08: 00007f0ecabeff04 R09: 000000000000000c [ 631.758612][ T6583] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 631.766136][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 631.782429][ T31] R13: 00007f0ecabeff58 R14: 00007f0ecabf0000 R15: 0000000000000000 [ 631.790562][ T31] [ 631.793618][ T31] INFO: task syz.2.3293:19557 blocked for more than 144 seconds. [ 631.802354][ T31] Not tainted syzkaller #0 [ 631.807296][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 631.816480][ T31] task:syz.2.3293 state:D stack:26784 pid:19557 tgid:19556 ppid:18656 task_flags:0x400040 flags:0x00080002 [ 631.828499][ T31] Call Trace: [ 631.831837][ T31] [ 631.834765][ T31] __schedule+0x17b4/0x5680 [ 631.839603][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 631.844609][ T31] ? __pfx___schedule+0x10/0x10 [ 631.849599][ T31] ? schedule+0x90/0x360 [ 631.853906][ T31] schedule+0x164/0x360 [ 631.858929][ T31] schedule_preempt_disabled+0x13/0x30 [ 631.864460][ T31] __mutex_lock+0x7f5/0x1550 [ 631.869536][ T31] ? kernel_text_address+0xa5/0xe0 [ 631.874693][ T31] ? __mutex_lock+0x606/0x1550 [ 631.879528][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 631.884232][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 631.888732][ T6583] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 631.889664][ T31] ? stack_trace_save+0xa9/0x100 [ 631.901879][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 631.906838][ T31] ? radix_tree_lookup+0x240/0x290 [ 631.912041][ T31] genl_rcv_msg+0x10b/0x7a0 [ 631.916578][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 631.921773][ T31] netlink_rcv_skb+0x232/0x4b0 [ 631.926578][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 631.931931][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 631.937261][ T31] ? down_read+0x270/0x2e0 [ 631.942020][ T31] ? genl_rcv+0xd/0x40 [ 631.946247][ T31] genl_rcv+0x28/0x40 [ 631.950360][ T31] netlink_unicast+0x75c/0x8e0 [ 631.955164][ T31] netlink_sendmsg+0x813/0xb40 [ 631.960665][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.965999][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 631.971121][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 631.976758][ T31] ____sys_sendmsg+0x972/0x9f0 [ 631.981853][ T31] ? __might_fault+0xaf/0x130 [ 631.986661][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 631.992338][ T31] ? import_iovec+0x73/0xa0 [ 631.996977][ T31] ___sys_sendmsg+0x2a5/0x360 [ 632.001960][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 632.006973][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 632.008544][ T6583] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 632.012288][ T31] ? futex_wake+0x4ac/0x580 [ 632.025064][ T31] ? __fget_files+0x2a/0x420 [ 632.029989][ T31] ? __fget_files+0x3a0/0x420 [ 632.034775][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 632.040297][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 632.045817][ T31] ? rcu_is_watching+0x15/0xb0 [ 632.050982][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.057081][ T31] do_syscall_64+0x15f/0xf80 [ 632.062408][ T31] ? trace_irq_disable+0x3b/0x140 [ 632.067476][ T31] ? clear_bhb_loop+0x40/0x90 [ 632.072349][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.078693][ T31] RIP: 0033:0x7f0bd459c819 [ 632.083275][ T31] RSP: 002b:00007f0bd53e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.091951][ T31] RAX: ffffffffffffffda RBX: 00007f0bd4815fa0 RCX: 00007f0bd459c819 [ 632.103236][ T31] RDX: 000000000000c000 RSI: 00002000000008c0 RDI: 0000000000000003 [ 632.111826][ T31] RBP: 00007f0bd4632c91 R08: 0000000000000000 R09: 0000000000000000 [ 632.119977][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.128035][ T31] R13: 00007f0bd4816038 R14: 00007f0bd4815fa0 R15: 00007fff2b4366f8 [ 632.136184][ T31] [ 632.139622][ T31] [ 632.139622][ T31] Showing all locks held in the system: [ 632.147555][ T31] 1 lock held by khungtaskd/31: [ 632.152567][ T31] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 632.158600][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 632.163148][ T31] 8 locks held by kworker/u8:8/1114: [ 632.175557][ T31] #0: ffff8880b873aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 632.186383][ T31] #1: ffffc90005a1fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 632.199935][ T31] #2: ffff88803257a780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x930 [ 632.211132][ T31] #3: ffffffff9a712310 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 632.221768][ T31] #4: ffffffff9a74a0e0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 632.232597][ T31] #5: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 632.241749][ T31] #6: ffffffff9a4d55c8 (&____s->seqcount#2){----}-{0:0}, at: ktime_get+0x45/0x220 [ 632.251180][ T31] #7: ffff8880207c0a88 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x66/0x1380 [ 632.263674][ T31] 2 locks held by getty/5587: [ 632.269053][ T31] #0: ffff888036daf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 632.279021][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 632.288548][ T1114] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 632.289401][ T31] 1 lock held by udevd/5886: [ 632.301159][ T31] #0: ffff888026348350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 632.310605][ T31] 1 lock held by udevd/6911: [ 632.315254][ T31] #0: ffff888026f54350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 632.324877][ T31] 6 locks held by syz.1.3287/19525: [ 632.330343][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 632.339151][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 632.348799][ T31] #2: ffff8880202bda60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 632.359425][ T31] #3: ffff8880261e2bd8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 632.369557][ T31] #4: ffff8880261e25a0 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 632.382201][ T31] #5: ffff8880261e25d8 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 632.394642][ T31] 2 locks held by syz.4.3289/19529: [ 632.399959][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 632.408236][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 632.409098][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 632.417558][ T31] 2 locks held by syz.4.3289/19533: [ 632.430268][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 632.439194][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 632.448200][ T31] 2 locks held by syz.3.3291/19538: [ 632.453489][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 632.461786][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 632.471495][ T31] 2 locks held by syz-executor/19546: [ 632.477100][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 632.485373][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 632.494501][ T31] 2 locks held by syz.2.3293/19557: [ 632.500588][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 632.508957][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 632.518072][ T31] 2 locks held by syz-executor/19565: [ 632.523652][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 632.532079][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 632.538969][ T6583] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 632.541265][ T31] 2 locks held by syz-executor/19567: [ 632.554107][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 632.562528][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 632.571604][ T31] 2 locks held by syz-executor/19569: [ 632.577462][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 632.586049][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 632.595255][ T31] 2 locks held by syz-executor/19583: [ 632.600736][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 632.609032][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 632.618016][ T31] 2 locks held by syz-executor/19602: [ 632.623721][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 632.632161][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 632.641292][ T31] 2 locks held by syz-executor/19616: [ 632.646697][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 632.655608][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 632.665100][ T31] 2 locks held by syz-executor/19617: [ 632.668826][ T54] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 632.670640][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 632.687343][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 632.696395][ T31] 2 locks held by syz-executor/19620: [ 632.701878][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 632.710378][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 632.719737][ T31] 2 locks held by syz-executor/19641: [ 632.725156][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 632.733476][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 632.742807][ T31] 2 locks held by syz-executor/19652: [ 632.748199][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 632.756482][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 632.765731][ T31] 2 locks held by syz-executor/19666: [ 632.772062][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 632.780669][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 632.790007][ T31] 2 locks held by syz-executor/19668: [ 632.795421][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 632.804081][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 632.813728][ T31] 2 locks held by syz-executor/19670: [ 632.820439][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 632.829116][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 632.838160][ T31] 2 locks held by syz-executor/19688: [ 632.843785][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 632.852231][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 632.861693][ T31] [ 632.864069][ T31] ============================================= [ 632.864069][ T31] [ 632.873425][ T31] NMI backtrace for cpu 0 [ 632.873444][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 632.873467][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 632.873478][ T31] Call Trace: [ 632.873485][ T31] [ 632.873493][ T31] dump_stack_lvl+0xe8/0x150 [ 632.873517][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 632.873536][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 632.873554][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 632.873574][ T31] sys_info+0x135/0x170 [ 632.873590][ T31] watchdog+0xfaa/0x1000 [ 632.873606][ T31] ? watchdog+0x209/0x1000 [ 632.873626][ T31] kthread+0x388/0x470 [ 632.873638][ T31] ? __pfx_watchdog+0x10/0x10 [ 632.873649][ T31] ? __pfx_kthread+0x10/0x10 [ 632.873662][ T31] ret_from_fork+0x514/0xb70 [ 632.873680][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 632.873695][ T31] ? __switch_to+0xc79/0x1410 [ 632.873711][ T31] ? __pfx_kthread+0x10/0x10 [ 632.873723][ T31] ret_from_fork_asm+0x1a/0x30 [ 632.873760][ T31] [ 632.873765][ T31] Sending NMI from CPU 0 to CPUs 1: [ 632.987460][ C1] NMI backtrace for cpu 1 [ 632.987480][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 632.987498][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 632.987507][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 632.987533][ C1] Code: 5b 74 02 e9 c3 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 4d 16 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 632.987547][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 632.987564][ C1] RAX: 00000000001d0123 RBX: ffffffff819a67ea RCX: 0000000080000001 [ 632.987576][ C1] RDX: 0000000000000001 RSI: ffffffff8dfb65fa RDI: ffffffff8c27f000 [ 632.987587][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 632.987598][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 632.987609][ C1] R13: 1ffff11003bd0000 R14: 0000000000000001 R15: 1ffff11003bd0000 [ 632.987620][ C1] FS: 0000000000000000(0000) GS:ffff888125345000(0000) knlGS:0000000000000000 [ 632.987634][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 632.987646][ C1] CR2: 00007efe52347e20 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 632.987663][ C1] Call Trace: [ 632.987670][ C1] [ 632.987675][ C1] default_idle+0x9/0x20 [ 632.987696][ C1] default_idle_call+0x72/0xb0 [ 632.987718][ C1] do_idle+0x36a/0x5f0 [ 632.987743][ C1] ? __pfx_do_idle+0x10/0x10 [ 632.987769][ C1] cpu_startup_entry+0x43/0x60 [ 632.987791][ C1] start_secondary+0x101/0x110 [ 632.987812][ C1] common_startup_64+0x13e/0x147 [ 632.987837][ C1] [ 632.989046][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 632.989063][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 632.989085][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 632.989096][ T31] Call Trace: [ 632.989104][ T31] [ 632.989113][ T31] vpanic+0x56c/0xa60 [ 632.989144][ T31] ? __pfx___schedule+0x10/0x10 [ 632.989165][ T31] ? __pfx_vpanic+0x10/0x10 [ 632.989200][ T31] panic+0xc5/0xd0 [ 632.989224][ T31] ? __pfx_panic+0x10/0x10 [ 632.989251][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 632.989278][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 632.989311][ T31] watchdog+0xff4/0x1000 [ 632.989337][ T31] ? watchdog+0x209/0x1000 [ 632.989364][ T31] kthread+0x388/0x470 [ 632.989384][ T31] ? __pfx_watchdog+0x10/0x10 [ 632.989402][ T31] ? __pfx_kthread+0x10/0x10 [ 632.989422][ T31] ret_from_fork+0x514/0xb70 [ 632.989450][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 632.989476][ T31] ? __switch_to+0xc79/0x1410 [ 632.989500][ T31] ? __pfx_kthread+0x10/0x10 [ 632.989521][ T31] ret_from_fork_asm+0x1a/0x30 [ 632.989563][ T31] [ 633.263105][ T31] Kernel Offset: disabled [ 633.267432][ T31] Rebooting in 86400 seconds..