last executing test programs: 23.691382738s ago: executing program 0 (id=5975): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000084850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @loopback}, &(0x7f0000000040)=0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000780)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000000880)='syzkaller\x00', 0x2, 0xb6, &(0x7f000000cf3d)=""/180, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a30000000004c000000030a010200000000000000000a0000000900010073797a30000000000900030073797a310000000014000480080001400100000008000240000000000a000700726f757465"], 0x94}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xfff1, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) close(r1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000180)=r1}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) accept$alg(r4, 0x0, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r8, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x5d, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xe8, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x4, 0x0, 0x1}, 0x50) ioctl$FS_IOC_FSGETXATTR(r10, 0x801c581f, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r12) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x74, r13, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@jmp={0x5, 0x1, 0x1, 0x0, 0x6, 0xffffffffffffffe4, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @ldst={0x2, 0x2, 0x0, 0x4, 0xd36ea48ac6225785, 0x20, 0x4}, @ldst={0x1, 0x0, 0x6, 0x8, 0x7, 0x50, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x1000, &(0x7f0000000a80)=""/4096, 0x41100, 0x1d, '\x00', 0x0, @fallback=0x24, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0x7, 0x4}, 0x10, r9, r0, 0x1, &(0x7f0000000600)=[r10, r11, 0x1], &(0x7f0000000640)=[{0x5, 0x5, 0xd, 0x7}], 0x10, 0x7}, 0x94) 23.345804322s ago: executing program 0 (id=5979): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) close(0x3) (async, rerun: 32) r1 = socket(0x2, 0x80805, 0x0) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)={0x0, 0xc, 0x20, 0x3, 0x80}, &(0x7f0000000840)=0x18) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b000005"], 0x0) 22.461040968s ago: executing program 0 (id=5984): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='cubic', 0xb) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x24, r3, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}}, 0x0) 22.279593905s ago: executing program 0 (id=5988): r0 = socket$inet6(0xa, 0x1, 0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={0x0, 0x96bad23393441008, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=r1, @ANYRES8=r0, @ANYRESOCT=r0], 0x30}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f00000004c0)=ANY=[@ANYRES8=r0], &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0efeff00040000000400000003"], 0x50) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000580)) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000180)=0x8) r7 = socket$pptp(0x18, 0x1, 0x2) (async) r8 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r8, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1e) (async) bind$pptp(r7, &(0x7f0000000000)={0x18, 0x2, {0xfffc, @loopback}}, 0x1e) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r9) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="3f9d00000000fedbdf25170000000c00060003000000030000000c00060002000000020000008dec080000006ae813607c006617da1027f76aa0329b2e5fe9aef68ea22fcfdc2fb0f6f8c74087d3378112e4b1b9ff1b7f7b00b625ba0953da54ef7a8cff07a278a78ac22dd6f739c385aeb89b7c89fb4d30bbdee1bc577a06eaca7fa3bbc93a9c08412850267b3056bb4b7ee450be4ccb3041a0f84cbe505cb3a72603428941dcebd2156e8d9602cafbe3a190abbca42fe231b77051ad88deaf4e044e76a3b1480c355eefe3debcd1599207ae6fa35fc2988591bfc04b001b24a504d05eae464c9c7889c6f85a1b8094a002d6e4a691ae3e2cf0a4835b9d9a74004c257f3b5c522619b68337ee049a3ed919af788f2eeefdc04c0863be005e4b9468c12f7224af7e770fe097ee63ff317e38ae1a729fbe4ec4fb759f44fbf7e5e5820706436337e26370b31db7e0bdcb88ce4558f8153c0c1287500cfbfe12936fdd6500a2ef0d5b2338c4a9d32cc56daf55a47f7f121b117dc7a735c22521ceec62438dab20f4967f475452a2876de9dcd85e73d2a35da79eee1b1dc850d3f4fa082b452ba3993b1faff622a729e403475a02c70ee452922345def280100ed671600929e1a35db69c7bfd0bc891c205cb563a655fe4790c55745fe0aa896f8109e0cb76c22db97ce0074df0bbd590062be41ed82989fb8d399b613a5abcea683b4b529f"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r9, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="251014be", @ANYRES16, @ANYBLOB="000425bd7000ffdbdf252b00000008000200", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24000) (async) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000080)={0x1fffffffffffff76, &(0x7f0000000000)=[{0x6}]}) socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x88043, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 22.018472693s ago: executing program 0 (id=5993): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x80}, &(0x7f0000000500)=0x90) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @mcast1}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @private1}, 0x1c) close(0x4) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r3}, 0x18) r5 = socket(0x40000000015, 0x5, 0x0) sendmsg$inet6(r5, &(0x7f0000000740)={&(0x7f0000000400)={0xa, 0x5e22, 0x80, @private1, 0xfff}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=ANY=[], 0x130}, 0x4000000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r4, 0x4) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 21.886824024s ago: executing program 0 (id=5997): r0 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'netdevsim0\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'netdevsim0\x00', @link_local}) 21.785409487s ago: executing program 2 (id=5998): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/675], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xfffffe94, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, 0x0, 0x25, 0x0, @void}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000001400)={'syztnl1\x00', 0x0, 0x8, 0x80, 0xf, 0x3, {{0xd, 0x4, 0x0, 0x3f, 0x34, 0x68, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010102, @local, {[@timestamp={0x44, 0x8, 0xe1, 0x0, 0x2, [0x10000]}, @timestamp_prespec={0x44, 0xc, 0x3b, 0x3, 0x4, [{@rand_addr=0x64010102, 0x78}]}, @generic={0x89, 0xb, "e964f4f754c21e64f0"}, @noop]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@multicast1, @initdev}, &(0x7f0000000500)=0xc) (async) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10, 0x6, 0xffffffef, 0x7fffffff, 0xffffffff, 0x8, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) r8 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r9 = socket(0x10, 0x2, 0x0) (rerun: 64) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r10, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r9], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r8, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r10, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x29, 0xb7, 0x5, 0x8000, 0x40, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x80, 0x62, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x29, 0xc, 0x27, 0xa, 0x50, @loopback, @private2, 0x80, 0x40, 0x74, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'ip_vti0\x00', &(0x7f0000000780)={'ip_vti0\x00', 0x0, 0x20, 0x80, 0x100, 0x1000000, {{0x9, 0x4, 0x0, 0x6, 0x24, 0x64, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@end, @cipso={0x86, 0xa, 0x1, [{0x7, 0x2}, {0x5, 0x2}]}, @noop, @noop]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000840)={@private2, 0x0}, &(0x7f0000000880)=0x14) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) (async) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000015c0)=ANY=[@ANYBLOB="300000001c00010026bd70000000000007000000", @ANYRES32=r14, @ANYBLOB="8002b2000a0002000180c200000200000600050002000000a4dca3554084cc5d457c35bb4cd1a269d6079b8eef79d06f72c608ae85b90f47f29d5e20ed48cb3c12ca3ce8d411a9d09db809f45a20102ca2a20ce7c75fb1df6d6a288fdb8c489bc4e193455cd33ab6dd00661806e202e9a23f5396fab5f13098370c9ad29c05a923aab838f1f2afa4bebdc05c7fe62c070000000000000098781c89f02e8ea9a1fb52c5d2e93d0ed8999363702bc0a2c668f7f51ca5a9e7d7aeb71d98"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) (async) sendmsg$TEAM_CMD_NOOP(r9, &(0x7f0000001580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="08060000", @ANYRES16=0x0, @ANYBLOB="000227bd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="7c0002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRESDEC=r1, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000bdff030003000000080004000a00000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000200000008000100", @ANYRES32=0x0, @ANYBLOB="bc000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004003b99000008000600", @ANYRES64=r11, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004001000000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000700000008000100", @ANYRES32=0x0, @ANYBLOB="c00102803c000100240001006c625f74785f6d6574686f64000000000000000000000000001000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000700000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400060000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r3, @ANYBLOB="7400028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000900000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900000008000100", @ANYRES32=r4, @ANYBLOB="74000280b8000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100008038000100240001006e6faf0fac075f70656572735f696e74657276616c00ecfffffe000000000000050003000300000008000400d87b000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r12, @ANYBLOB="080007000000000008000100", @ANYRES32=r14, @ANYBLOB="040102804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff01000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000000000800070000000000"], 0x608}}, 0x4044094) socket$inet_tcp(0x2, 0x1, 0x0) 21.705498847s ago: executing program 2 (id=6000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT=r1], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'rose0\x00'}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) sendto$inet6(r6, &(0x7f0000004300)="ed22d54d97e1275e82601445", 0xc, 0xc80c, &(0x7f0000000300)={0xa, 0x4e21, 0x2a, @loopback, 0x800000c0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000040)={0x2c, 0x0, 0x7, 0x9, 0x5, 0x2, 0x5, 0x3, 0x3, 0x8, 0x7f, 0x6, 0x1, 0x9}, 0xe) recvmmsg(r7, &(0x7f00000040c0)=[{{0x0, 0x0, &(0x7f0000000a80), 0x7}, 0x80000000}, {{&(0x7f0000000b00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000b80)=""/226, 0xe2}, {&(0x7f0000000c80)=""/84, 0x64}, {&(0x7f0000000d00)=""/91, 0x5b}], 0x3, &(0x7f0000000d80)=""/142, 0x8e}, 0x9}, {{&(0x7f0000000e40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000580)=""/58, 0x3a}, {&(0x7f0000000f80)=""/103, 0x67}], 0x2}, 0x255a}, {{&(0x7f0000001040)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000002680)=[{&(0x7f00000010c0)=""/102, 0x66}, {&(0x7f0000001140)=""/153, 0x99}, {&(0x7f0000001200)=""/189, 0xbd}, {&(0x7f0000001300)=""/187, 0xbb}, {&(0x7f0000000240)=""/27, 0x1b}, {&(0x7f0000001400)=""/76, 0x4c}, {&(0x7f0000001480)=""/27, 0x1b}, {&(0x7f00000014c0)=""/146, 0x92}, {&(0x7f0000001580)=""/230, 0xe6}, {&(0x7f0000001680)=""/4096, 0x1000}], 0xe3f, &(0x7f0000002740)=""/192, 0xc0}}, {{&(0x7f0000002800)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000002880)=""/168, 0xa8}, {&(0x7f0000002940)=""/247, 0xf7}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/17, 0x11}, {&(0x7f0000003a80)=""/151, 0x97}], 0x5}, 0x4}, {{&(0x7f00000005c0)=@phonet, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000003c40)=""/98, 0x62}], 0x1, &(0x7f0000003d00)=""/66, 0x42}, 0x7fff}, {{&(0x7f0000003d80)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000003e00)=""/70, 0x46}, {&(0x7f0000004340)=""/260, 0x104}, {&(0x7f0000003f80)=""/73, 0x49}, {&(0x7f0000004000)=""/58, 0x3a}], 0x4, &(0x7f0000004080)=""/28, 0x1c}}], 0x7, 0x0, 0x0) write$bt_hci(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="017c0c04c9e40500"], 0x8) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1c00000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000005a5b657a304707b59bdb000000"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000000000000040000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000110000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9, r8}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000280)='%ps \x00'}, 0x20) socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r10, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="f3", 0x1}], 0x1}, 0x20000000}], 0x1, 0x4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0xd0) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0800080007000000000014000000456f0fc000660000401190780a010102ac1414124e204e200fac9078e1070001e24f82d681079ea7a4e87616ec93ff3299ed88d29741d161f504c73dcab29b8c8bb6bd8ee37e9d73ea"], 0xfce) 21.089819528s ago: executing program 2 (id=6008): ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000140)=0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x40}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x4d6, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x20, 0x0, @in={0x2, 0x4e1d, @loopback}}]}, 0x50}}, 0x0) 20.999214408s ago: executing program 2 (id=6009): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000003580)={'lo\x00', {0x2, 0x4e21, @loopback}}) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x5c, r4, 0xe17, 0x0, 0x0, {0x1, 0x0, 0x6000}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1200}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local={0xfe, 0xfc}}]}, 0x5c}}, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (rerun: 64) read$alg(r2, &(0x7f0000000080)=""/47, 0x2f) sendmmsg$unix(r2, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)="0a690b6528a1f42d548655afb9", 0xd}, {&(0x7f0000000300)="dd5722a4ada647acf96f7778f3ab8a7dd0ecdc630c69655dff751cbf8e247fdab0058811f721758f4e5671f2093b80", 0x2f}, {&(0x7f00000003c0)="107b5c9b209d083fd0dee19bf2ae62f83fad9168be3cb66dcb11fa2dcac0d3120e5e4a3e38", 0x25}, {&(0x7f00000004c0)="15daa9013e28e13b10413e820291e0290267f7ef53a02da4a4630ee72b9e492821e9764377379dcb0e58575488acd91a74c343b40966bc", 0x37}], 0x4, 0x0, 0x0, 0x200400c4}}], 0x1, 0xc000) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x20, 0x20, 0x1, 0x3, {{0x15, 0x4, 0x0, 0x3, 0x54, 0x64, 0x0, 0x7, 0x4, 0x0, @local, @rand_addr=0x5, {[@noop, @lsrr={0x83, 0xf, 0xe8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0x86, 0x3, 0x2, [{@broadcast, 0x1}, {@loopback, 0x3}, {@multicast2, 0x8}, {@remote, 0x3}, {@remote, 0x9}]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000010020646c2501010000002020207b1af82c00000000bda100000000000007010000f8ffffffb702000008000000b7030000000000008500000055000000958404f1dbd846e7f60bfa35c3c6cbd65e8522e7506b68145ec742554948d929105a41f526e862059c9689290fc2ae641ce22e7432f58be22bb8a0e8b4286fef55d5543a6a8fba6daa43197ee2dc321af18a54686b416c979e59"], &(0x7f0000000380)='syzkaller\x00', 0x80, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) r6 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10, 0x80000) setsockopt$EBT_SO_SET_COUNTERS(r6, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x400, 0x101, 0x2, 0x876d, 0x7fffffffffffffff, 0x7], 0x7, &(0x7f0000000080)=[{}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) 19.911893959s ago: executing program 4 (id=6021): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001ea1d0080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3, 0xffffffffffffffff}, 0x4) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="000000fd0001040008001b"], 0x28}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r5) bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r7) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000400000000000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000b000000"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r10, 0xf21, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4044085}, 0x24008840) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r9, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x30, r10, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0xd6789d82f340106b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000002}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000002e00090027bd7004000000"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 19.798368077s ago: executing program 3 (id=6022): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x50) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xc9, &(0x7f0000000080)=0x8, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020207500feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000000)='GPL\x00', 0x4, 0x10, &(0x7f0000000140)=""/244, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23, 0x0, 0x0, 0xff87}, 0x23) 19.70802487s ago: executing program 3 (id=6023): socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), 0xffffffffffffffff) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000001bfc0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8001, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x4c004) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x48}}, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 18.469447667s ago: executing program 4 (id=6025): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x64, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x36, 0xe, {{{}, {}, @broadcast, @device_a, @random="dbcb3528a342"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x4, 0x2c, 0x4}}, @void, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x2c, r4, 0x1, 0x70bd2d, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2c}}, 0x4044890) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r6, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x104, r4, 0x8, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x104}}, 0x800) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x48001) syz_emit_ethernet(0x9e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd60f81fcb00603a00fc000000000000000000000000000000ff02000000000000000000000000000104009078000000fc01000000000000000000000000000000000000000000000000ffff7f0000012b00000000000000000304010000000000000000000000000000ffffac1414bb00a10400"/158], 0x0) 18.3072013s ago: executing program 4 (id=6026): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x18, r1, 0x1, 0x70bd30, 0x35dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x24040014) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x48, r1, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x0, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRES32, @ANYRESHEX=r4], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400004803c0001800b00010065787468647200002c000280050002008300000008000340000000d50800044000000000080006400000000208000140000000130900010073797a30000000000900020073797a32"], 0x94}}, 0x8000) 18.033773554s ago: executing program 4 (id=6028): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="04000002", @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050008000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000800)=ANY=[@ANYBLOB="b00000008bce58b8a80af5c6b21366c354f55bdb0802110000010802110000000802110000001000000002000000feff7359a1af79522bcc1f6cf482af0e8425978333068caad3e6d19f62863be530e3b1adf610fedeb695bfdb0bd12d0d827cb29632f03976178791017c3255c0f100e06461b847b5421e12db7486774553626da81334641ff363c669f77a445644da39fe226bca1b85f8ad5ad3f3fb123352990bdc26f2923feb6c0ef2e8e3a667fb6d6a596c83f2a9a3b0c3a6f9bafab2c3088fbcbe1ac88e60a92a6ec4c934bec3feafcc50da8dac62b8a692ada6884834d1d71e279bb06665ca6e6e"], 0x1e) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0xe) close(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet(0x2, 0x6, 0x3) syz_80211_inject_frame(&(0x7f0000000380), &(0x7f0000000440)=@ctrl_frame=@cts, 0xa) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x8010) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x80) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect(r7, &(0x7f0000000000)=@pptp={0x27, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) socket$alg(0x26, 0x5, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000010a01080000000000000000010000050900010073797a30"], 0x20}}, 0x4804) 17.674237092s ago: executing program 2 (id=6029): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0}, 0x4d0}], 0x1, 0x140, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32], 0x34}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) accept4$alg(r3, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYBLOB="f616675411cebfad0f2315d3c7447fc15eff4fa73074741b5f8061729e84ae5035aa7675c1b16aae10d1c9b1ec0ae523d54febdafaf702e1761e65c4e3d9034b228f30486ec7f270f941e378cf1d2d2be5005a0e4570265d5fb92e5599994a551517858b4c6f31ba87bcf225eeeb7a0c7c7ba27b445b8b80476c09c9adc06c42c78b024a890b32495689eba888678a963b554cd529947b28454e51232397c5ad46d2bca05a41dcfd1dada57523af3cd32d2bdb119b88b5f7e92d9ed78af44ba29b84b8c84e639b6212ba2b66674c8cd4c3907f8644203bc728147f8b", @ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3}, 0x94) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000138bd7000fbdbdf2500000000060000000000000003000300040000000000000008000700", @ANYRES32=r3, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20008010) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f00000001c0)) r7 = socket$unix(0x1, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x50, r8, 0x1, 0x70bd28, 0x25dfdbdd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x10004, 0x6c}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24048804) 17.354021111s ago: executing program 1 (id=6031): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003"], 0x80}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=@deltaction={0x30, 0x18, 0x1, 0x70bd28, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r3 = socket$netlink(0x10, 0x3, 0xc) splice(r0, 0x0, r3, 0x0, 0x10d00, 0xf) 17.154205299s ago: executing program 1 (id=6032): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0040000c003d920bfa550f0ac1b7f0ba6e3ad2b0000006000000030200000000000805000000006161611000"], 0x0, 0x2a, 0x0, 0x1, 0xe0}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071115100000000008510000002000000850000008c00000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071115100000000008510000002000000850000008c00000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c000280080009000800ffef08000500", @ANYRES32=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x24000054) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00'], 0x30}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x1) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c0003800400038004000100"], 0x38}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0x53}]}, 0xffffffffffffffb2}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffe0}, {0x10, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r7, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) (async) getsockopt$netlink(r7, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) r8 = socket(0x10, 0x803, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r9) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r9) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001c0000000a0004007770616e33000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="14a4b68044778007c48a9f3b84ab01565f3248c1af90f354a2a43016c7d31f844100934a07e9"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) 17.09435001s ago: executing program 4 (id=6033): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x14, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) 16.977408494s ago: executing program 2 (id=6034): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x7, 0x2}, {0xfff2, 0x3}, {0xf, 0xc}}, [{0x8, 0xb, 0x41a9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x890}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x7, 0x2}, {0xfff2, 0x3}, {0xf, 0xc}}, [{0x8, 0xb, 0x41a9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x890}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r5, 0x0, 0x0) close(r5) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '/'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048000}, 0x80) getsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0xfffffffd, 0x0, {0xa, 0x0, 0x1}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0xfffffffd, 0x0, {0xa, 0x0, 0x1}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c00028008000140000000080000"], 0x74}}, 0x0) 16.793793079s ago: executing program 1 (id=6035): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@gettaction={0x14, 0x32, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x10040000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@generic={0xf, 0x7, 0x0, 0x3bb, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) 16.792821364s ago: executing program 4 (id=6036): r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x1, 0x100, 0x100, 0x100, 0x0, 0x4}, 0x1c) sendto(r0, 0x0, 0x0, 0x8004, &(0x7f0000000280)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000080)={0x14, r2, 0x21, 0x8d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) 16.349401549s ago: executing program 1 (id=6037): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.245709624s ago: executing program 3 (id=6038): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x30, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x9, 0x1a, 0x0, 0x1, [@generic="8767c2b69e"]}, @nested={0x4, 0x37}]}, 0x30}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 16.12455998s ago: executing program 3 (id=6039): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 16.010866198s ago: executing program 1 (id=6040): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x11cc, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x11a4, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x116c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x115c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_XOR={0x1100, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_BITWISE_DATA={0x38, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1240}}, 0x0) 15.895650404s ago: executing program 1 (id=6041): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="91104b000000000095"], &(0x7f0000000540)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003500093300000000fcdbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000101010900000000000000000200000014001980090002"], 0x28}, 0x1, 0x0, 0x0, 0x20000c00}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r5 = socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0x4, 0x4, 0x2, 0xd, 0x11f4, 0xf, 0x100, 0x0, 0xfffffffe, 0x4, 0x7f, 0x9, 0x4, 0xa0000, 0x80, 0xc, 0x0, 0x6, 0xf290, 0x1, 0x6, 0x20a, 0x0, 0xfffffff3, 0x2b, 0x4, 0x4, 0x7, 0x6, 0xffff8001, 0x80, 0x479, 0x7, 0x1, 0x3, 0x4050732b, 0x1, 0xf5c8, 0x5e, 0x4, 0xf0, 0x7, 0x946, 0x8, 0x8001, 0x8001, 0xfffffff5, 0xbf2, 0x10001, 0x2, 0x8, 0xfffffffd, 0x8001, 0x6, 0x1, 0x7fffffff, 0xd05, 0x7a, 0x11dc294f, 0x9, 0x5, 0x0, 0x9, 0x1, 0x7, 0x1e8, 0x4, 0xc33, 0x8, 0x5, 0x80000000, 0x1, 0x9, 0x5, 0x5, 0x80000000, 0x3e64, 0x5, 0x8, 0x6, 0xfffffff6, 0x4, 0x10, 0x9, 0x8, 0xd, 0x2, 0x2, 0x2941, 0x1000, 0x8, 0xff, 0x4, 0x9, 0xf6e2, 0x5, 0x6, 0x4, 0x1, 0x3, 0x0, 0x2ee, 0x444, 0x2, 0x9, 0xb966, 0xb2000, 0x33, 0x9a6d, 0x9, 0x8, 0x200, 0x8, 0x7, 0x89, 0x8, 0x100e, 0x7, 0x4, 0x3, 0x8, 0x3, 0x0, 0x6, 0xbfe8, 0x5, 0x8, 0x3, 0x6, 0x4, 0x4e8d, 0x2, 0x8e, 0xffffff42, 0x5, 0xe, 0x1, 0x6, 0xe, 0x2, 0x4, 0x8, 0x6, 0x1, 0x5, 0x9, 0xffffffff, 0x7, 0x5, 0x160000, 0x9, 0x8, 0x1640, 0x6, 0x6, 0x0, 0xaa, 0x2, 0xedd5, 0xfff, 0x8, 0x7fffffff, 0x8, 0x1, 0x2, 0x3, 0x8, 0x3, 0x0, 0x3, 0x34, 0x9, 0x3, 0x2, 0xffffcd43, 0x7, 0x8, 0x486, 0x1, 0x2, 0x5ca0, 0x3, 0x1000, 0x4, 0x9, 0x8, 0x5, 0x7, 0xfffffffd, 0x7, 0x8, 0xffffffff, 0x22, 0x4, 0x2, 0x0, 0x3, 0x1e, 0x3, 0x8, 0xa1, 0x81, 0x5, 0x1, 0x2, 0x2, 0x7ff, 0xf43, 0x3, 0x8, 0x3, 0x3, 0x4, 0x100000, 0x9, 0x66c, 0x7fc, 0x3, 0x0, 0x10001, 0x5, 0x0, 0x81, 0x2, 0x9, 0x2823, 0x8, 0xffffffff, 0x0, 0xffffffff, 0x8001, 0x0, 0x9, 0x1, 0x1, 0x9, 0x5, 0x1ff, 0xc79, 0x80000001, 0x200, 0xede5, 0x3, 0x3, 0x0, 0x3, 0x7, 0x8, 0x9, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x10000000, 0x7, 0x7, 0x7, {0x4, 0x2, 0xfe00, 0xfe42, 0x4, 0x7}, {0x7, 0x2, 0xcf, 0x1, 0x800, 0x2}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x0, 0x7, 0x7, 0x796, 0x5, 0xd2c1, 0x207ff, 0x20, 0x9, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x0, 0x4, 0x3, 0x3, 0xc94, 0xa0, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0x9, 0xce3a, 0x2, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x6, 0x0, 0xffffffff, 0xb1e5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0x4b, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x3, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf48, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x80000000, 0x6, 0xa001, 0xbe39, 0x7b7, 0x5, 0x7ff, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x21d, 0x6, 0xc, 0x10, 0xf91, 0x0, 0x4062e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x1, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x7fff, 0x400009, 0x5, 0x3, 0x3, 0x0, 0x200, 0xdfb, 0x7, 0x9, 0x223ec3e7, 0xdaa, 0x2, 0x101, 0x1000, 0x4, 0x8, 0x8, 0xf, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x3, 0x1, 0x4005, 0x1, 0x8001, 0x6, 0x10001, 0x1, 0x3, 0x80000000, 0x4, 0x38, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x4, 0x4, 0x5, 0x5, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0x1, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xff, 0x8, 0x5, 0x0, 0x0, 0x12, 0x0, 0xd, 0xbb4f, 0x8, 0x8000, 0xbcba, 0x80, 0x96, 0xc6, 0x9, 0x81, 0x10000, 0x70, 0x3, 0x8, 0x80, 0x3, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0x73da, 0x401, 0x7, 0xd, 0x81, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0xe, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000085}, 0x40000) (async) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0xe, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000085}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x6, 0x5c, 0x40, @loopback, @mcast1, 0x40, 0x7, 0x1, 0xb2}}) 15.894934973s ago: executing program 3 (id=6042): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}}, @NHA_FDB={0x4}]}, 0x34}}, 0x40040d0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) 15.709589218s ago: executing program 3 (id=6043): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x31}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}, @IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0xffffffffffffff7b}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x15, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2ffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80080000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x50, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6f}]}, 0x50}}, 0x20000034) 1.542708576s ago: executing program 32 (id=6034): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x7, 0x2}, {0xfff2, 0x3}, {0xf, 0xc}}, [{0x8, 0xb, 0x41a9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x890}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettfilter={0x2c, 0x2e, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x7, 0x2}, {0xfff2, 0x3}, {0xf, 0xc}}, [{0x8, 0xb, 0x41a9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x890}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r5, 0x0, 0x0) close(r5) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '/'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048000}, 0x80) getsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000240), &(0x7f0000000280)=0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0xfffffffd, 0x0, {0xa, 0x0, 0x1}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0xfffffffd, 0x0, {0xa, 0x0, 0x1}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c00028008000140000000080000"], 0x74}}, 0x0) 1.523352145s ago: executing program 33 (id=6036): r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x1, 0x100, 0x100, 0x100, 0x0, 0x4}, 0x1c) sendto(r0, 0x0, 0x0, 0x8004, &(0x7f0000000280)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000080)={0x14, r2, 0x21, 0x8d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) 43.504709ms ago: executing program 34 (id=6041): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="91104b000000000095"], &(0x7f0000000540)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003500093300000000fcdbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000101010900000000000000000200000014001980090002"], 0x28}, 0x1, 0x0, 0x0, 0x20000c00}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r5 = socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) socket(0x400000000010, 0x3, 0x0) (async) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0x4, 0x4, 0x2, 0xd, 0x11f4, 0xf, 0x100, 0x0, 0xfffffffe, 0x4, 0x7f, 0x9, 0x4, 0xa0000, 0x80, 0xc, 0x0, 0x6, 0xf290, 0x1, 0x6, 0x20a, 0x0, 0xfffffff3, 0x2b, 0x4, 0x4, 0x7, 0x6, 0xffff8001, 0x80, 0x479, 0x7, 0x1, 0x3, 0x4050732b, 0x1, 0xf5c8, 0x5e, 0x4, 0xf0, 0x7, 0x946, 0x8, 0x8001, 0x8001, 0xfffffff5, 0xbf2, 0x10001, 0x2, 0x8, 0xfffffffd, 0x8001, 0x6, 0x1, 0x7fffffff, 0xd05, 0x7a, 0x11dc294f, 0x9, 0x5, 0x0, 0x9, 0x1, 0x7, 0x1e8, 0x4, 0xc33, 0x8, 0x5, 0x80000000, 0x1, 0x9, 0x5, 0x5, 0x80000000, 0x3e64, 0x5, 0x8, 0x6, 0xfffffff6, 0x4, 0x10, 0x9, 0x8, 0xd, 0x2, 0x2, 0x2941, 0x1000, 0x8, 0xff, 0x4, 0x9, 0xf6e2, 0x5, 0x6, 0x4, 0x1, 0x3, 0x0, 0x2ee, 0x444, 0x2, 0x9, 0xb966, 0xb2000, 0x33, 0x9a6d, 0x9, 0x8, 0x200, 0x8, 0x7, 0x89, 0x8, 0x100e, 0x7, 0x4, 0x3, 0x8, 0x3, 0x0, 0x6, 0xbfe8, 0x5, 0x8, 0x3, 0x6, 0x4, 0x4e8d, 0x2, 0x8e, 0xffffff42, 0x5, 0xe, 0x1, 0x6, 0xe, 0x2, 0x4, 0x8, 0x6, 0x1, 0x5, 0x9, 0xffffffff, 0x7, 0x5, 0x160000, 0x9, 0x8, 0x1640, 0x6, 0x6, 0x0, 0xaa, 0x2, 0xedd5, 0xfff, 0x8, 0x7fffffff, 0x8, 0x1, 0x2, 0x3, 0x8, 0x3, 0x0, 0x3, 0x34, 0x9, 0x3, 0x2, 0xffffcd43, 0x7, 0x8, 0x486, 0x1, 0x2, 0x5ca0, 0x3, 0x1000, 0x4, 0x9, 0x8, 0x5, 0x7, 0xfffffffd, 0x7, 0x8, 0xffffffff, 0x22, 0x4, 0x2, 0x0, 0x3, 0x1e, 0x3, 0x8, 0xa1, 0x81, 0x5, 0x1, 0x2, 0x2, 0x7ff, 0xf43, 0x3, 0x8, 0x3, 0x3, 0x4, 0x100000, 0x9, 0x66c, 0x7fc, 0x3, 0x0, 0x10001, 0x5, 0x0, 0x81, 0x2, 0x9, 0x2823, 0x8, 0xffffffff, 0x0, 0xffffffff, 0x8001, 0x0, 0x9, 0x1, 0x1, 0x9, 0x5, 0x1ff, 0xc79, 0x80000001, 0x200, 0xede5, 0x3, 0x3, 0x0, 0x3, 0x7, 0x8, 0x9, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x10000000, 0x7, 0x7, 0x7, {0x4, 0x2, 0xfe00, 0xfe42, 0x4, 0x7}, {0x7, 0x2, 0xcf, 0x1, 0x800, 0x2}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x0, 0x7, 0x7, 0x796, 0x5, 0xd2c1, 0x207ff, 0x20, 0x9, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x0, 0x4, 0x3, 0x3, 0xc94, 0xa0, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0x9, 0xce3a, 0x2, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x6, 0x0, 0xffffffff, 0xb1e5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0x4b, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x3, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf48, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x80000000, 0x6, 0xa001, 0xbe39, 0x7b7, 0x5, 0x7ff, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x21d, 0x6, 0xc, 0x10, 0xf91, 0x0, 0x4062e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x1, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x7fff, 0x400009, 0x5, 0x3, 0x3, 0x0, 0x200, 0xdfb, 0x7, 0x9, 0x223ec3e7, 0xdaa, 0x2, 0x101, 0x1000, 0x4, 0x8, 0x8, 0xf, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x3, 0x1, 0x4005, 0x1, 0x8001, 0x6, 0x10001, 0x1, 0x3, 0x80000000, 0x4, 0x38, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x4, 0x4, 0x5, 0x5, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0x1, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xff, 0x8, 0x5, 0x0, 0x0, 0x12, 0x0, 0xd, 0xbb4f, 0x8, 0x8000, 0xbcba, 0x80, 0x96, 0xc6, 0x9, 0x81, 0x10000, 0x70, 0x3, 0x8, 0x80, 0x3, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0x73da, 0x401, 0x7, 0xd, 0x81, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0xe, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000085}, 0x40000) (async) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0xe, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000085}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x6, 0x5c, 0x40, @loopback, @mcast1, 0x40, 0x7, 0x1, 0xb2}}) 0s ago: executing program 35 (id=6043): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x31}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}, @IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0xffffffffffffff7b}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x15, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2ffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80080000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x50, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macvtap0\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6f}]}, 0x50}}, 0x20000034) kernel console output (not intermixed with test programs): cket option deprecated. [ 747.669555][T26468] Use struct sctp_assoc_value instead [ 748.202944][T26494] bridge6: port 1(veth7) entered blocking state [ 748.209691][T26494] bridge6: port 1(veth7) entered disabled state [ 748.216298][T26494] veth7: entered allmulticast mode [ 748.224060][T26494] veth7: entered promiscuous mode [ 748.247640][T26496] bridge6: port 2(veth9) entered blocking state [ 748.254647][T26496] bridge6: port 2(veth9) entered disabled state [ 748.262678][T26496] veth9: entered allmulticast mode [ 748.330373][T26496] veth9: entered promiscuous mode [ 748.344168][T26495] bridge6: port 3(veth0_to_bond) entered blocking state [ 748.354561][T26495] bridge6: port 3(veth0_to_bond) entered disabled state [ 748.362231][T26495] veth0_to_bond: entered allmulticast mode [ 748.371193][T26495] veth0_to_bond: entered promiscuous mode [ 748.407196][ T8437] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.415923][ T8437] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.437311][ T8437] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.447727][ T8437] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.594648][T26518] __nla_validate_parse: 14 callbacks suppressed [ 748.594660][T26518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5114'. [ 748.665810][T26520] syzkaller0: entered promiscuous mode [ 748.671538][T26520] syzkaller0: entered allmulticast mode [ 748.719969][T26525] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5117'. [ 748.793956][T26529] : renamed from veth0_to_bond (while UP) [ 748.838786][T26533] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5121'. [ 749.047092][T26543] xfrm1: entered promiscuous mode [ 749.060878][T26543] xfrm1: entered allmulticast mode [ 749.074765][T26542] syzkaller0: entered promiscuous mode [ 749.081938][T26542] syzkaller0: entered allmulticast mode [ 749.106527][T26545] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.145543][T26548] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5126'. [ 749.466747][T26560] tipc: Failed to remove unknown binding: 66,0,0/0:3499933663/3499933665 [ 749.480508][T26564] Cannot find del_set index 2 as target [ 749.524709][T26560] tipc: Failed to remove unknown binding: 66,0,0/0:3499933663/3499933664 [ 749.550900][T26562] tipc: Failed to remove unknown binding: 66,0,0/0:3499933663/3499933665 [ 749.559706][T26562] tipc: Failed to remove unknown binding: 66,0,0/0:3499933663/3499933664 [ 749.578576][T26562] tipc: Failed to remove unknown binding: 66,0,0/0:3499933663/3499933665 [ 749.594814][T26562] tipc: Failed to remove unknown binding: 66,0,0/0:3499933663/3499933664 [ 749.785304][T26545] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.819820][ T8414] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.837716][ T8414] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.989826][T26580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5135'. [ 750.104733][T26590] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5134'. [ 750.159322][T26583] netlink: 16370 bytes leftover after parsing attributes in process `syz.2.5134'. [ 750.196029][T26596] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5139'. [ 750.237517][T26593] tipc: Enabled bearer , priority 0 [ 750.297556][T26594] syzkaller0: entered promiscuous mode [ 750.303198][T26594] syzkaller0: entered allmulticast mode [ 750.310639][T26594] tipc: Resetting bearer [ 750.339534][T26594] tipc: Resetting bearer [ 751.772776][ T5829] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 751.786527][ T5829] Bluetooth: hci2: command 0x0401 tx timeout [ 751.949703][T26594] tipc: Disabling bearer [ 751.962754][T26608] vlan0: entered promiscuous mode [ 751.968182][T26608] geneve1: entered promiscuous mode [ 751.973626][T26608] vlan0: entered allmulticast mode [ 751.979051][T26608] geneve1: entered allmulticast mode [ 752.078893][T26615] net_ratelimit: 62 callbacks suppressed [ 752.078912][T26615] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 752.577114][T26647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5152'. [ 752.643863][T26651] netlink: 'syz.0.5154': attribute type 4 has an invalid length. [ 752.652526][T26651] netlink: 'syz.0.5154': attribute type 1 has an invalid length. [ 752.660689][T26651] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5154'. [ 753.091436][T26685] netlink: 'syz.1.5163': attribute type 6 has an invalid length. [ 753.103372][T26685] netlink: 'syz.1.5163': attribute type 5 has an invalid length. [ 753.112754][T26686] netlink: 'syz.1.5163': attribute type 6 has an invalid length. [ 753.134206][T26686] netlink: 'syz.1.5163': attribute type 5 has an invalid length. [ 753.216165][T26691] netlink: 'syz.1.5163': attribute type 4 has an invalid length. [ 753.342728][T26703] IPv6: NLM_F_CREATE should be specified when creating new route [ 753.386049][ T8437] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.405145][ T8437] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 753.421486][ T8437] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.430260][ T8437] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 753.439459][ T8437] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.450480][ T8437] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 753.468548][ T8437] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 753.477552][ T8437] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 753.724598][T26720] syzkaller1: entered promiscuous mode [ 753.730743][T26720] syzkaller1: entered allmulticast mode [ 753.976412][T26733] syzkaller0: entered promiscuous mode [ 753.985579][T26733] syzkaller0: entered allmulticast mode [ 754.077494][T26733] wg1 speed is unknown, defaulting to 1000 [ 754.207251][T26741] __nla_validate_parse: 10 callbacks suppressed [ 754.207270][T26741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5176'. [ 754.337076][T26749] wg1 speed is unknown, defaulting to 1000 [ 754.697624][T26733] lo speed is unknown, defaulting to 1000 [ 755.327585][T26749] lo speed is unknown, defaulting to 1000 [ 755.463481][T26788] syzkaller0: entered promiscuous mode [ 755.469266][T26788] syzkaller0: entered allmulticast mode [ 756.206734][T26793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5185'. [ 757.949276][T26782] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 758.079614][T26812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5189'. [ 758.089263][T26813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5190'. [ 758.126146][T26815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5190'. [ 758.142291][T26818] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5189'. [ 758.174366][T26818] ksmbd: Unknown IPC event: 1, ignore. [ 758.216974][T26813] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 758.399251][T26836] netlink: 'syz.4.5195': attribute type 101 has an invalid length. [ 758.417942][T26836] netlink: 'syz.4.5195': attribute type 7 has an invalid length. [ 758.505568][T26850] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5197'. [ 759.076077][T26874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5205'. [ 759.086357][T26874] ip_vti0: entered promiscuous mode [ 759.092395][T26874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5205'. [ 759.102563][T26875] sctp: [Deprecated]: syz.1.5203 (pid 26875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 759.102563][T26875] Use struct sctp_sack_info instead [ 759.277351][T26878] netlink: 'syz.3.5206': attribute type 1 has an invalid length. [ 759.309368][T26878] 8021q: adding VLAN 0 to HW filter on device bond8 [ 759.317308][T26878] bond8: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 759.465973][T26885] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5207'. [ 759.561857][T26897] netlink: 'syz.0.5209': attribute type 13 has an invalid length. [ 759.610060][T26902] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5210'. [ 759.761962][T26912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5213'. [ 759.777616][T26912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5213'. [ 759.777625][ T8404] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.777662][ T8404] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.804851][ T8404] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.814508][T26915] netlink: 'syz.4.5212': attribute type 9 has an invalid length. [ 759.822814][ T8404] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 759.831470][T26912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5213'. [ 759.895140][T26917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5214'. [ 759.934614][T26917] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 760.043687][T26923] netlink: 'syz.3.5217': attribute type 4 has an invalid length. [ 760.068264][T26926] netlink: 'syz.0.5218': attribute type 18 has an invalid length. [ 760.076124][T26926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5218'. [ 760.109604][T26926] netlink: 'syz.0.5218': attribute type 18 has an invalid length. [ 760.125209][T26926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5218'. [ 760.269947][T26942] pim6reg: entered allmulticast mode [ 760.275930][T26942] pim6reg: left allmulticast mode [ 761.195585][T26976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5228'. [ 761.206383][T26976] caif0: Master is either lo or non-ether device [ 761.375084][T26982] syzkaller0: entered promiscuous mode [ 761.384689][T26982] syzkaller0: entered allmulticast mode [ 761.412981][T26986] netlink: 'syz.0.5233': attribute type 2 has an invalid length. [ 761.516938][T26992] wg1 speed is unknown, defaulting to 1000 [ 761.586825][T26998] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5237'. [ 761.614484][T27000] netlink: 'syz.3.5238': attribute type 2 has an invalid length. [ 761.640788][T27000] : entered promiscuous mode [ 761.799454][T26992] lo speed is unknown, defaulting to 1000 [ 762.198708][T27025] ip6tnl0: Caught tx_queue_len zero misconfig [ 762.668325][T27050] tipc: Enabled bearer , priority 0 [ 762.693663][T27050] syzkaller0: entered promiscuous mode [ 762.701073][T27050] syzkaller0: entered allmulticast mode [ 762.889877][T27074] tipc: Resetting bearer [ 763.123483][T27096] 8021q: adding VLAN 0 to HW filter on device bond9 [ 763.170143][T27096] bond9: (slave gretap2): making interface the new active one [ 763.178796][T27096] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 763.511994][T27115] A link change request failed with some changes committed already. Interface ªªªªª9 may have been left with an inconsistent configuration, please check. [ 763.534544][T27115] A link change request failed with some changes committed already. Interface ªªªªª9 may have been left with an inconsistent configuration, please check. [ 763.748317][ T10] tipc: Node number set to 710873999 [ 763.839060][T27144] wg1 speed is unknown, defaulting to 1000 [ 763.952772][T27144] lo speed is unknown, defaulting to 1000 [ 765.622674][T27050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 765.662105][T27049] tipc: Resetting bearer [ 765.767638][T27049] tipc: Disabling bearer [ 765.769527][T27155] __nla_validate_parse: 9 callbacks suppressed [ 765.769542][T27155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5274'. [ 765.812473][T27159] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5275'. [ 765.831351][T27159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5275'. [ 765.868962][T27162] wg1 speed is unknown, defaulting to 1000 [ 765.938543][T27168] netlink: 'syz.1.5279': attribute type 11 has an invalid length. [ 766.005930][T27159] syzkaller0: entered promiscuous mode [ 766.040977][T27159] syzkaller0: entered allmulticast mode [ 766.102770][T27182] validate_nla: 4 callbacks suppressed [ 766.102790][T27182] netlink: 'syz.3.5281': attribute type 9 has an invalid length. [ 766.607524][T27162] lo speed is unknown, defaulting to 1000 [ 766.934755][T27201] netlink: 'syz.1.5285': attribute type 1 has an invalid length. [ 766.955447][T27201] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5285'. [ 767.029187][T27203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5285'. [ 767.103692][T27205] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 768.409072][ T97] block nbd2: Possible stuck request ffff88805fec2800: control (read@0,1024B). Runtime 60 seconds [ 768.420269][ T97] block nbd2: Possible stuck request ffff88805fec2a00: control (read@1024,1024B). Runtime 60 seconds [ 768.432673][ T97] block nbd2: Possible stuck request ffff88805fec2c00: control (read@2048,1024B). Runtime 60 seconds [ 768.443784][ T97] block nbd2: Possible stuck request ffff88805fec2e00: control (read@3072,1024B). Runtime 60 seconds [ 768.772084][T27204] vxcan3: entered promiscuous mode [ 768.902478][T27201] wg1 speed is unknown, defaulting to 1000 [ 769.143939][T27223] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5292'. [ 769.226171][T27230] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5293'. [ 769.238484][T27229] lo: Caught tx_queue_len zero misconfig [ 769.254942][T27234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5291'. [ 769.464151][T27201] lo speed is unknown, defaulting to 1000 [ 769.679265][T27239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.704921][T27239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 769.736460][T27247] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5295'. [ 769.870579][T27256] gretap2: entered promiscuous mode [ 770.211668][T27270] xfrm2: entered allmulticast mode [ 770.255761][T27280] netlink: 'syz.4.5307': attribute type 11 has an invalid length. [ 770.325983][T27280] pim6reg: entered allmulticast mode [ 770.336641][T27277] dvmrp6: entered allmulticast mode [ 770.344430][T27280] pim6reg: left allmulticast mode [ 770.367759][T27277] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5305'. [ 770.563118][T27292] wg1 speed is unknown, defaulting to 1000 [ 770.669687][T27309] Bluetooth: MGMT ver 1.23 [ 771.063876][T27292] lo speed is unknown, defaulting to 1000 [ 771.365279][T27334] syzkaller0: entered promiscuous mode [ 771.371700][T27334] syzkaller0: entered allmulticast mode [ 771.463571][T27348] tipc: Enabling of bearer rejected, failed to enable media [ 771.502794][T27349] __nla_validate_parse: 3 callbacks suppressed [ 771.502811][T27349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5325'. [ 771.560552][T27345] "syz.4.5325" (27345) uses obsolete ecb(arc4) skcipher [ 771.588457][T27345] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5325'. [ 771.771285][T27353] wg1 speed is unknown, defaulting to 1000 [ 772.271732][T27353] lo speed is unknown, defaulting to 1000 [ 772.274122][T27398] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5336'. [ 772.310905][T27387] netlink: 'syz.1.5334': attribute type 13 has an invalid length. [ 772.328284][T27387] netlink: 'syz.1.5334': attribute type 17 has an invalid length. [ 772.462246][T27387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.492684][T27387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 772.773327][T27417] syzkaller0: entered promiscuous mode [ 772.783890][T27417] syzkaller0: entered allmulticast mode [ 772.935440][T27425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5342'. [ 772.995627][T27417] bond6: option lacp_active: invalid value (8) [ 773.016915][T27417] bond6 (unregistering): Released all slaves [ 773.175594][T27437] Unsupported ieee802154 address type: 0 [ 773.191684][T27437] openvswitch: netlink: Duplicate or invalid key (type 0). [ 773.199765][T27437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.297707][T27442] syzkaller0: entered promiscuous mode [ 773.303428][T27442] syzkaller0: entered allmulticast mode [ 773.322803][T27442] 0: reclassify loop, rule prio 0, protocol 800 [ 773.727761][T27481] netlink: 'syz.3.5359': attribute type 7 has an invalid length. [ 773.744849][T27481] tipc: Enabled bearer , priority 0 [ 773.753060][T27481] syzkaller0: entered promiscuous mode [ 773.769718][T27481] syzkaller0: entered allmulticast mode [ 773.826539][T27481] tipc: Resetting bearer [ 773.853679][T27480] tipc: Resetting bearer [ 773.932832][T27480] tipc: Disabling bearer [ 774.415687][T27533] bond5 (unregistering): Released all slaves [ 774.567486][T27548] bond6: option arp_all_targets: invalid value (129) [ 774.591092][T27548] bond6 (unregistering): Released all slaves [ 774.665004][T27552] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5372'. [ 774.687472][T27552] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5372'. [ 774.732052][T27503] lec:lec_atm_close: lec0: Shut down! [ 774.984718][T27575] netlink: 'syz.1.5377': attribute type 7 has an invalid length. [ 775.009254][T27580] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5379'. [ 775.111341][T27587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5380'. [ 775.131175][T27587] netlink: 'syz.2.5380': attribute type 1 has an invalid length. [ 775.251315][T27592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5382'. [ 775.432817][T27611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5386'. [ 775.640254][T27628] gretap0: entered promiscuous mode [ 775.719799][T27626] tipc: Enabling of bearer rejected, failed to enable media [ 775.864622][ T8439] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.885919][ T8439] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.913642][ T8439] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.957117][ T8439] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.112314][T27663] xt_hashlimit: size too large, truncated to 1048576 [ 776.278502][T26689] lec:lec_start_xmit: lec0:No lecd attached [ 776.322747][T27664] wg1 speed is unknown, defaulting to 1000 [ 776.493842][T27674] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 776.779967][T27696] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 776.810108][T27664] lo speed is unknown, defaulting to 1000 [ 776.836766][T27696] wg1 speed is unknown, defaulting to 1000 [ 777.000240][T27697] netlink: set zone limit has 4 unknown bytes [ 777.063403][T27704] __nla_validate_parse: 3 callbacks suppressed [ 777.063421][T27704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5404'. [ 777.285190][T27712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5406'. [ 777.300731][T27712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5406'. [ 777.553190][T27722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5409'. [ 777.578076][T27696] lo speed is unknown, defaulting to 1000 [ 777.857739][T27727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5409'. [ 778.086940][T27738] netlink: 'syz.2.5415': attribute type 1 has an invalid length. [ 778.113150][T27738] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5415'. [ 778.145730][T27740] netlink: 'syz.1.5414': attribute type 11 has an invalid length. [ 778.158186][T27738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5415'. [ 778.167203][T27740] netlink: 'syz.1.5414': attribute type 23 has an invalid length. [ 778.219630][T27740] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5414'. [ 778.240587][T27742] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 778.294592][T27742] bond6 (unregistering): Released all slaves [ 778.362457][T27745] geneve0: entered promiscuous mode [ 778.370604][T27745] geneve0: entered allmulticast mode [ 778.378036][T27740] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5414'. [ 778.392603][T27740] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5414'. [ 778.444539][T27751] wg1 speed is unknown, defaulting to 1000 [ 778.579752][T27760] netlink: 'syz.3.5421': attribute type 2 has an invalid length. [ 778.740471][T27760] 9: entered promiscuous mode [ 778.868220][T27751] lo speed is unknown, defaulting to 1000 [ 779.285853][T27797] syzkaller1: entered promiscuous mode [ 779.302458][T27797] syzkaller1: entered allmulticast mode [ 779.333935][T27803] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 779.795100][T27832] netlink: 'syz.2.5431': attribute type 1 has an invalid length. [ 779.874644][T27832] 8021q: adding VLAN 0 to HW filter on device bond9 [ 779.942683][T27828] bond9: entered promiscuous mode [ 780.025436][T27828] bond9: entered allmulticast mode [ 780.101502][T27832] bond0: (slave dummy0): Releasing backup interface [ 780.144921][T27832] bond9: (slave dummy0): making interface the new active one [ 780.162640][T27845] netlink: 'syz.3.5434': attribute type 1 has an invalid length. [ 780.174904][T27832] dummy0: entered promiscuous mode [ 780.184342][T27832] dummy0: entered allmulticast mode [ 780.196152][T27832] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 780.266684][T27844] tipc: MTU too low for tipc bearer [ 780.273383][T27845] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 780.274303][T27846] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 780.411205][T27854] netlink: 'syz.1.5436': attribute type 1 has an invalid length. [ 780.502251][T27854] 8021q: adding VLAN 0 to HW filter on device bond6 [ 780.509935][T27860] netlink: 'syz.3.5438': attribute type 4 has an invalid length. [ 780.525943][T27863] macvlan2: entered promiscuous mode [ 780.541838][T27863] macvlan2: entered allmulticast mode [ 780.815932][T27886] netlink: 'syz.1.5444': attribute type 7 has an invalid length. [ 780.854929][T27886] siw: device registration error -23 [ 780.880459][T27889] wg1 speed is unknown, defaulting to 1000 [ 781.425377][T27889] lo speed is unknown, defaulting to 1000 [ 781.725342][T27923] wg1 speed is unknown, defaulting to 1000 [ 781.927955][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5650 ms [ 781.936685][ C1] lec:lec_tx_timeout: lec0 [ 781.941560][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 782.080576][T27923] lo speed is unknown, defaulting to 1000 [ 782.093675][T27947] __nla_validate_parse: 11 callbacks suppressed [ 782.093691][T27947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5455'. [ 782.151370][T27945] wg1 speed is unknown, defaulting to 1000 [ 782.354029][T27958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5456'. [ 782.565571][T27945] lo speed is unknown, defaulting to 1000 [ 783.108868][T28000] netlink: 252 bytes leftover after parsing attributes in process `syz.4.5466'. [ 783.152001][T27979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 783.209671][T28003] netlink: 284 bytes leftover after parsing attributes in process `syz.2.5468'. [ 783.323747][T28007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5469'. [ 783.547154][T28024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5469'. [ 784.080455][T28041] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5479'. [ 784.223165][T28040] bridge0: port 2(batadv1) entered blocking state [ 784.230649][T28040] bridge0: port 2(batadv1) entered disabled state [ 784.237509][T28040] batadv1: entered allmulticast mode [ 784.245136][T28040] batadv1: entered promiscuous mode [ 784.347441][T28052] syzkaller0: entered promiscuous mode [ 784.372093][T28052] syzkaller0: entered allmulticast mode [ 784.404491][T28059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5484'. [ 784.437457][T28059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5484'. [ 784.642601][T28067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5485'. [ 784.718293][ T8436] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 784.728290][ T8436] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 784.814010][T28079] syzkaller0: entered promiscuous mode [ 784.819709][T28079] syzkaller0: entered allmulticast mode [ 784.841629][T28081] netlink: 'syz.1.5489': attribute type 1 has an invalid length. [ 785.395527][T28116] netlink: 'syz.2.5498': attribute type 39 has an invalid length. [ 785.566377][T28121] tap0: tun_chr_ioctl cmd 1074812118 [ 786.957909][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 786.966211][ C1] lec:lec_tx_timeout: lec0 [ 786.972135][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 787.148869][T28211] __nla_validate_parse: 13 callbacks suppressed [ 787.148888][T28211] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5520'. [ 787.170136][T28209] sctp: [Deprecated]: syz.3.5519 (pid 28209) Use of struct sctp_assoc_value in delayed_ack socket option. [ 787.170136][T28209] Use struct sctp_sack_info instead [ 787.240720][T28216] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5521'. [ 787.275756][T28216] netlink: 'syz.4.5521': attribute type 1 has an invalid length. [ 787.352107][T28165] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 787.359704][T28165] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 787.399013][T28231] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5525'. [ 787.610712][T28187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 787.636473][T28245] netlink: 'syz.1.5528': attribute type 1 has an invalid length. [ 787.644888][T28245] netlink: 'syz.1.5528': attribute type 1 has an invalid length. [ 787.653179][T28245] netlink: 'syz.1.5528': attribute type 1 has an invalid length. [ 787.662908][T28245] netlink: 'syz.1.5528': attribute type 1 has an invalid length. [ 787.842782][ T30] audit: type=1804 audit(1770609194.686:18): pid=28262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5530" name="memory.events" dev="tmpfs" ino=2409 res=1 errno=0 [ 787.881423][ T30] audit: type=1800 audit(1770609194.686:19): pid=28262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5530" name="memory.events" dev="tmpfs" ino=2409 res=0 errno=0 [ 788.025082][T28270] x_tables: duplicate underflow at hook 1 [ 788.032567][T28270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5533'. [ 788.133403][T28165] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 788.141991][T28165] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 788.518137][T28303] netlink: 'syz.1.5540': attribute type 13 has an invalid length. [ 788.534002][T28299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 788.563150][T28303] gretap0: refused to change device tx_queue_len [ 788.579751][T28303] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 788.616938][T28310] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5541'. [ 788.655274][T28310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5541'. [ 788.701717][T28312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5541'. [ 788.709497][T28310] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5541'. [ 788.996124][T28328] netlink: 'syz.3.5544': attribute type 30 has an invalid length. [ 789.007334][T28322] wg1 speed is unknown, defaulting to 1000 [ 789.069132][T28326] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 789.077742][T28333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5546'. [ 789.108467][T28326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5542'. [ 789.127716][T28333] netlink: 'syz.1.5546': attribute type 12 has an invalid length. [ 789.144105][T28318] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 789.276840][T28322] lo speed is unknown, defaulting to 1000 [ 789.401853][T28345] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 789.628885][T28361] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 789.673166][T28342] syzkaller0: entered promiscuous mode [ 789.679529][T28342] syzkaller0: entered allmulticast mode [ 789.720250][T28357] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 789.738280][T28357] syzkaller0: entered promiscuous mode [ 789.754225][T28357] syzkaller0: entered allmulticast mode [ 791.709463][T28367] tipc: Enabled bearer , priority 0 [ 791.732330][T28355] tipc: Resetting bearer [ 791.798091][T28389] validate_nla: 2 callbacks suppressed [ 791.798108][T28389] netlink: 'syz.1.5559': attribute type 1 has an invalid length. [ 791.853726][T28355] tipc: Disabling bearer [ 791.893984][T28389] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 791.920885][T28396] ip6gre1: entered promiscuous mode [ 791.925457][ T5189] udevd[5189]: worker [24791] /devices/virtual/block/nbd2 is taking a long time [ 791.936094][T28396] ip6gre1: entered allmulticast mode [ 791.959918][T28405] netlink: 'syz.4.5562': attribute type 4 has an invalid length. [ 791.980179][T28405] netlink: 'syz.4.5562': attribute type 1 has an invalid length. [ 791.988067][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 791.988147][ C1] lec:lec_tx_timeout: lec0 [ 791.996284][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 792.245591][T28430] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.293478][T28430] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.440482][ T8431] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 792.458323][ T8431] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 792.468309][T26689] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 792.522393][T28439] wg1 speed is unknown, defaulting to 1000 [ 792.725101][T26701] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 792.740348][T28430] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.754755][T28430] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.790137][T28457] __nla_validate_parse: 35 callbacks suppressed [ 792.790156][T28457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5568'. [ 792.794282][T28454] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5573'. [ 792.830519][T28430] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.858517][T26701] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 792.882979][T28430] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.935268][T28439] lo speed is unknown, defaulting to 1000 [ 793.023756][T28430] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.052958][T28430] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.120560][T28468] netlink: 'syz.3.5575': attribute type 3 has an invalid length. [ 793.299646][T28479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5578'. [ 793.399465][ T8404] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.420693][ T8404] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.474074][T28479] sctp: [Deprecated]: syz.3.5578 (pid 28479) Use of int in maxseg socket option. [ 793.474074][T28479] Use struct sctp_assoc_value instead [ 793.626178][ T8407] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.634587][ T8407] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.679616][ T8439] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.716175][ T8439] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.776183][ T8407] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.800717][ T8407] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.040048][T28508] 8021q: VLANs not supported on vxcan1 [ 794.180784][T28515] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5584'. [ 794.219176][T28516] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5584'. [ 794.290455][T28520] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5586'. [ 794.319139][T28520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5586'. [ 794.345423][T28523] netlink: 276 bytes leftover after parsing attributes in process `syz.4.5587'. [ 794.361464][T28520] netlink: 31 bytes leftover after parsing attributes in process `syz.0.5586'. [ 794.398618][T28520] netlink: 'syz.0.5586': attribute type 3 has an invalid length. [ 794.423164][T28520] netlink: 'syz.0.5586': attribute type 2 has an invalid length. [ 794.441389][T28520] netlink: 31 bytes leftover after parsing attributes in process `syz.0.5586'. [ 794.474496][T28520] netlink: 'syz.0.5586': attribute type 2 has an invalid length. [ 794.753730][T28546] tunl0: Caught tx_queue_len zero misconfig [ 795.378305][T28566] syzkaller1: entered promiscuous mode [ 795.409725][T28566] syzkaller1: entered allmulticast mode [ 795.539900][T28581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 795.620322][T28581] bond0: entered promiscuous mode [ 795.625435][T28581] bond_slave_0: entered promiscuous mode [ 795.631985][T28581] bond_slave_1: entered promiscuous mode [ 795.639718][T28581] bond0: left promiscuous mode [ 795.644698][T28581] bond_slave_0: left promiscuous mode [ 795.651845][T28581] bond_slave_1: left promiscuous mode [ 796.693481][T28617] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 796.738147][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 796.997901][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 797.006016][ C1] lec:lec_tx_timeout: lec0 [ 797.011725][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 797.907776][T28699] __nla_validate_parse: 8 callbacks suppressed [ 797.907795][T28699] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.5628'. [ 797.969402][T28702] tipc: Enabling of bearer rejected, failed to enable media [ 798.091491][T28702] syzkaller0: entered promiscuous mode [ 798.097196][T28702] syzkaller0: entered allmulticast mode [ 798.504401][ T97] block nbd2: Possible stuck request ffff88805fec2800: control (read@0,1024B). Runtime 90 seconds [ 798.515331][ T97] block nbd2: Possible stuck request ffff88805fec2a00: control (read@1024,1024B). Runtime 90 seconds [ 798.526453][ T97] block nbd2: Possible stuck request ffff88805fec2c00: control (read@2048,1024B). Runtime 90 seconds [ 798.538395][ T97] block nbd2: Possible stuck request ffff88805fec2e00: control (read@3072,1024B). Runtime 90 seconds [ 798.860825][T28722] netlink: 428 bytes leftover after parsing attributes in process `syz.2.5635'. [ 798.950259][T28729] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5635'. [ 799.215187][T28723] IPVS: set_ctl: invalid protocol: 133 172.20.20.187:20002 [ 800.657154][T28722] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5635'. [ 800.715884][T28733] lo: Caught tx_queue_len zero misconfig [ 800.732524][T28720] wg1 speed is unknown, defaulting to 1000 [ 800.760004][T28749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5641'. [ 800.779576][T28744] wg1 speed is unknown, defaulting to 1000 [ 800.839318][T28753] netlink: 'syz.2.5643': attribute type 1 has an invalid length. [ 800.900399][T28756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5644'. [ 800.913301][T28753] 8021q: adding VLAN 0 to HW filter on device bond10 [ 800.929442][T28759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5645'. [ 800.988631][T28758] bond9: (slave dummy0): Releasing active interface [ 801.009574][T28758] dummy0: left promiscuous mode [ 801.019146][T28758] dummy0: left allmulticast mode [ 801.035972][T28758] bond10: (slave dummy0): making interface the new active one [ 801.045312][T28758] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 801.056016][T28720] lo speed is unknown, defaulting to 1000 [ 801.182574][T28770] netlink: 'syz.0.5647': attribute type 11 has an invalid length. [ 801.432367][T28783] netlink: 'syz.0.5650': attribute type 1 has an invalid length. [ 801.445965][T28785] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5651'. [ 801.464976][T28783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5650'. [ 801.557022][T28787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5652'. [ 801.576476][T28744] lo speed is unknown, defaulting to 1000 [ 802.017850][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 802.025984][ C1] lec:lec_tx_timeout: lec0 [ 802.031016][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 802.314804][T28821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 802.393331][T28820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 802.481411][T28827] sctp: [Deprecated]: syz.0.5663 (pid 28827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 802.481411][T28827] Use struct sctp_sack_info instead [ 802.628815][T28835] netlink: 'syz.3.5665': attribute type 32 has an invalid length. [ 802.663515][T28835] bond10: option coupled_control: invalid value (12) [ 802.673002][T28835] bond10 (unregistering): Released all slaves [ 803.078622][T28856] __nla_validate_parse: 106 callbacks suppressed [ 803.078645][T28856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5669'. [ 803.181316][T28862] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5672'. [ 803.681645][T28884] syzkaller0: entered promiscuous mode [ 803.687266][T28884] syzkaller0: entered allmulticast mode [ 803.872173][T28897] netlink: 'syz.2.5677': attribute type 1 has an invalid length. [ 803.881959][T28900] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.5679'. [ 803.908168][T28898] netlink: 'syz.2.5677': attribute type 1 has an invalid length. [ 803.917524][T28900] netlink: 'syz.1.5679': attribute type 6 has an invalid length. [ 803.937197][T28897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5677'. [ 803.944144][T28890] wg1 speed is unknown, defaulting to 1000 [ 804.295712][T28918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5683'. [ 804.397434][T28890] lo speed is unknown, defaulting to 1000 [ 804.754712][T28951] xt_TCPMSS: Only works on TCP SYN packets [ 804.768215][T28951] xt_TCPMSS: Only works on TCP SYN packets [ 804.887997][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 805.066085][T28969] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5697'. [ 805.115794][T28969] geneve0: entered promiscuous mode [ 805.124351][ T8436] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.134391][ T8436] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.189102][ T8436] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.207241][ T8436] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.475239][T28979] ip6gre1: entered promiscuous mode [ 805.492479][T28979] ip6gre1: entered allmulticast mode [ 805.517130][ T8407] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 805.529648][ T8407] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 805.539519][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 805.603370][T28990] netlink: 'syz.2.5704': attribute type 1 has an invalid length. [ 805.628124][T28993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5705'. [ 805.640855][T28990] 8021q: adding VLAN 0 to HW filter on device bond11 [ 805.654389][T28990] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5704'. [ 805.655177][T28993] bridge0: port 1(batadv2) entered blocking state [ 805.672053][T28993] bridge0: port 1(batadv2) entered disabled state [ 805.679121][T28993] batadv2: entered allmulticast mode [ 805.686713][T28993] batadv2: entered promiscuous mode [ 806.159189][ T13] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 806.168638][ T13] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 806.334211][T26700] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 806.355356][T29026] wg1 speed is unknown, defaulting to 1000 [ 806.488131][T26700] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 806.547305][T29036] netlink: zone id is out of range [ 806.558181][T29036] netlink: zone id is out of range [ 806.563335][T29036] netlink: zone id is out of range [ 806.579856][T29036] netlink: zone id is out of range [ 806.585108][T29036] netlink: zone id is out of range [ 806.597679][T29036] netlink: zone id is out of range [ 806.617954][T29036] netlink: zone id is out of range [ 806.623122][T29036] netlink: zone id is out of range [ 806.647951][T29036] netlink: zone id is out of range [ 806.659389][T29036] netlink: zone id is out of range [ 806.949874][T29029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5713'. [ 806.970142][T29026] lo speed is unknown, defaulting to 1000 [ 806.985822][T29046] netlink: 'syz.2.5718': attribute type 5 has an invalid length. [ 807.038097][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 807.046189][ C1] lec:lec_tx_timeout: lec0 [ 807.051024][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 807.292233][T29054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5721'. [ 807.634719][T29062] macsec0: entered promiscuous mode [ 807.652983][T29062] dummy0: entered promiscuous mode [ 807.658671][T29062] macsec0: entered allmulticast mode [ 807.666473][T29062] dummy0: entered allmulticast mode [ 807.745805][T29062] dummy0: left allmulticast mode [ 807.751368][T29062] dummy0: left promiscuous mode [ 807.785125][T29067] wg1 speed is unknown, defaulting to 1000 [ 808.072459][T29067] lo speed is unknown, defaulting to 1000 [ 808.209064][T29101] __nla_validate_parse: 4 callbacks suppressed [ 808.209083][T29101] netlink: 216 bytes leftover after parsing attributes in process `syz.3.5733'. [ 808.263569][T29101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5733'. [ 808.270661][T29103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5733'. [ 808.346680][T29106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5734'. [ 808.381245][T29106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5734'. [ 808.401749][T29109] x_tables: unsorted entry at hook 2 [ 808.532993][T29111] vlan2: entered promiscuous mode [ 808.558549][T29111] bridge0: entered promiscuous mode [ 808.565924][T29113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5738'. [ 808.598007][T29113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5738'. [ 808.738421][T29129] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5742'. [ 809.033737][T29153] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5749'. [ 809.274452][T29170] netlink: 'syz.3.5754': attribute type 1 has an invalid length. [ 809.284214][T29170] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5754'. [ 809.296728][T29170] netlink: 'syz.3.5754': attribute type 1 has an invalid length. [ 809.403832][T29178] wg1 speed is unknown, defaulting to 1000 [ 809.608130][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 809.663370][T29178] lo speed is unknown, defaulting to 1000 [ 809.714185][T29189] netlink: 'syz.2.5758': attribute type 11 has an invalid length. [ 809.912056][T29200] netlink: 'syz.4.5762': attribute type 10 has an invalid length. [ 810.298809][T29228] netlink: 'syz.0.5768': attribute type 1 has an invalid length. [ 810.558390][T29246] netlink: 'syz.1.5771': attribute type 8 has an invalid length. [ 811.244416][T29266] syzkaller0: entered promiscuous mode [ 811.258051][T29266] syzkaller0: entered allmulticast mode [ 812.067949][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 812.076126][ C1] lec:lec_tx_timeout: lec0 [ 812.080830][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 813.363291][T29310] xt_hashlimit: size too large, truncated to 1048576 [ 813.755992][T29331] netlink: 'syz.1.5792': attribute type 23 has an invalid length. [ 813.909057][T29337] syzkaller0: entered promiscuous mode [ 813.914973][T29337] syzkaller0: entered allmulticast mode [ 814.193723][T29350] __nla_validate_parse: 17 callbacks suppressed [ 814.193744][T29350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5797'. [ 814.217692][T29350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5797'. [ 814.228624][T29350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5797'. [ 814.241512][T29350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5797'. [ 814.260048][T29350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5797'. [ 814.273852][T29360] netlink: 'syz.2.5798': attribute type 1 has an invalid length. [ 814.275961][T29350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5797'. [ 814.292084][T29350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5797'. [ 814.301751][T29350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5797'. [ 814.311723][T29350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5797'. [ 814.321629][T29350] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5797'. [ 814.484856][T29370] xt_ecn: cannot match TCP bits for non-tcp packets [ 814.765846][T29384] wg1 speed is unknown, defaulting to 1000 [ 815.215145][T29414] No such timeout policy "syz0" [ 815.230903][T29415] sch_tbf: burst 7 is lower than device tunl0 mtu (1480) ! [ 815.331528][T29423] netlink: 'syz.2.5814': attribute type 29 has an invalid length. [ 815.341249][T29423] netlink: 'syz.2.5814': attribute type 29 has an invalid length. [ 815.416272][T29384] lo speed is unknown, defaulting to 1000 [ 815.553927][T29430] bond12: Removing last ns target with arp_interval on [ 815.699873][T29439] netlink: 'syz.2.5819': attribute type 1 has an invalid length. [ 815.830585][T29444] net_ratelimit: 36 callbacks suppressed [ 815.830607][T29444] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 815.860938][T29446] tipc: Enabled bearer , priority 0 [ 815.890176][T29446] syzkaller0: entered promiscuous mode [ 815.895788][T29446] syzkaller0: entered allmulticast mode [ 815.982692][T29452] ip6erspan0: entered allmulticast mode [ 816.014527][T29445] tipc: Resetting bearer [ 816.089858][T29445] tipc: Disabling bearer [ 816.214038][T29461] syzkaller0: entered promiscuous mode [ 816.224408][T29461] syzkaller0: entered allmulticast mode [ 816.249953][T29461] sctp: [Deprecated]: syz.0.5827 (pid 29461) Use of struct sctp_assoc_value in delayed_ack socket option. [ 816.249953][T29461] Use struct sctp_sack_info instead [ 816.286928][T29468] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 816.294952][T29468] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 816.302956][T29468] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 816.310678][T29468] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 816.364241][T29468] netlink: 'syz.3.5830': attribute type 6 has an invalid length. [ 816.394002][T29468] netlink: 'syz.3.5830': attribute type 1 has an invalid length. [ 817.089169][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 817.097349][ C1] lec:lec_tx_timeout: lec0 [ 817.102089][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 817.506278][T29494] netlink: 'syz.4.5836': attribute type 6 has an invalid length. [ 817.514565][T29494] IPv6: NLM_F_CREATE should be specified when creating new route [ 817.688121][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 818.617302][T29488] wg1 speed is unknown, defaulting to 1000 [ 818.662998][T29500] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 818.808891][T29512] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 819.067207][T29488] lo speed is unknown, defaulting to 1000 [ 819.503377][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 819.514193][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 819.522820][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 819.545816][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 819.578269][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 819.664729][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 819.677351][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 819.686206][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 819.695015][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 819.702979][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 819.886825][T29561] __nla_validate_parse: 69 callbacks suppressed [ 819.886844][T29561] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5854'. [ 819.903215][T29562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5853'. [ 819.917401][T29562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5853'. [ 819.949946][T29549] wg1 speed is unknown, defaulting to 1000 [ 820.190631][T29580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5857'. [ 820.301734][T29585] x_tables: duplicate underflow at hook 2 [ 820.370596][T29590] netlink: 'syz.4.5860': attribute type 2 has an invalid length. [ 820.460631][T29549] lo speed is unknown, defaulting to 1000 [ 820.498704][T29591] No such timeout policy "syz0" [ 820.572202][T29606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5864'. [ 820.826702][T29624] bond0: (slave bridge0): Releasing backup interface [ 820.866102][T29624] bridge_slave_0: left allmulticast mode [ 820.883085][T29624] bridge_slave_0: left promiscuous mode [ 820.893436][T29624] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.923605][T29624] bridge_slave_1: left allmulticast mode [ 820.929416][T29624] bridge_slave_1: left promiscuous mode [ 820.935399][T29624] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.946154][T29624] bond0: (slave bond_slave_0): Releasing backup interface [ 820.955140][T29624] bond0: (slave bond_slave_1): Releasing backup interface [ 820.965777][T29624] team0: Port device team_slave_0 removed [ 820.974048][T29624] team0: Port device team_slave_1 removed [ 820.981331][T29624] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 821.096469][T29640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5871'. [ 821.145398][T29549] chnl_net:caif_netlink_parms(): no params data found [ 821.190837][T29646] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5873'. [ 821.378597][T29666] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5875'. [ 821.380702][T29549] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.395205][T29549] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.403059][T29549] bridge_slave_0: entered allmulticast mode [ 821.410819][T29549] bridge_slave_0: entered promiscuous mode [ 821.506328][T29549] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.517094][T29549] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.526752][T29549] bridge_slave_1: entered allmulticast mode [ 821.535203][T29549] bridge_slave_1: entered promiscuous mode [ 821.656267][T29549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.677641][T29644] wg1 speed is unknown, defaulting to 1000 [ 821.684099][T29549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.693944][T29674] syzkaller0: entered promiscuous mode [ 821.703796][T29674] syzkaller0: entered allmulticast mode [ 821.733649][T29684] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5878'. [ 821.783377][T29549] team0: Port device team_slave_0 added [ 821.802734][T29549] team0: Port device team_slave_1 added [ 821.871430][T29549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 821.928470][ T5829] Bluetooth: hci0: command tx timeout [ 821.968229][T29549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.998010][T29549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.008372][T29689] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5880'. [ 822.010612][T29549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.025439][T29549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.072406][T29549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 822.153942][T29644] lo speed is unknown, defaulting to 1000 [ 822.168033][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 822.233282][T29549] hsr_slave_0: entered promiscuous mode [ 822.240888][T29549] hsr_slave_1: entered promiscuous mode [ 822.690269][T29705] syzkaller1: entered promiscuous mode [ 822.695956][T29705] syzkaller1: entered allmulticast mode [ 822.811584][T29710] syzkaller0: entered promiscuous mode [ 822.817203][T29710] syzkaller0: entered allmulticast mode [ 822.887863][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 822.896022][ C1] lec:lec_tx_timeout: lec0 [ 822.901049][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 823.370981][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 823.419464][T29549] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 823.438825][ T8439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.455936][ T8439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.468983][T29549] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 823.522151][T29549] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 823.542442][T29549] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 823.571384][T29748] xt_hashlimit: size too large, truncated to 1048576 [ 823.746328][T29549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.794383][T29549] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.821595][ T8407] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.828803][ T8407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.859464][ T8407] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.866656][ T8407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.008063][ T5829] Bluetooth: hci0: command tx timeout [ 824.076869][T29779] netlink: 'syz.4.5901': attribute type 11 has an invalid length. [ 824.408498][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 824.423152][T29549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.473779][T29798] netlink: 'syz.4.5907': attribute type 1 has an invalid length. [ 824.537464][T29798] 8021q: adding VLAN 0 to HW filter on device bond6 [ 824.561846][T29798] nbd: must specify an index to disconnect [ 824.601687][T29549] veth0_vlan: entered promiscuous mode [ 824.614124][T29549] veth1_vlan: entered promiscuous mode [ 824.642902][T29801] syzkaller1: entered promiscuous mode [ 824.672131][T29801] syzkaller1: entered allmulticast mode [ 824.696831][T29811] batadv_slave_0: entered promiscuous mode [ 824.704336][T29811] netlink: 'syz.4.5910': attribute type 2 has an invalid length. [ 824.737540][T29549] veth0_macvtap: entered promiscuous mode [ 824.771151][T29549] veth1_macvtap: entered promiscuous mode [ 824.796157][T29818] netlink: 'syz.4.5910': attribute type 10 has an invalid length. [ 824.815606][T29818] veth0_vlan: left promiscuous mode [ 824.823553][T29818] veth0_vlan: entered promiscuous mode [ 824.832979][T29818] team0: Device veth0_vlan failed to register rx_handler [ 824.909950][T29549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 824.937109][T29549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 824.965191][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.991495][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.026823][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.049021][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.206046][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.229193][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.237349][T29841] "syz.1.5918" (29841) uses obsolete ecb(arc4) skcipher [ 825.274291][T29846] netlink: 'syz.0.5920': attribute type 27 has an invalid length. [ 825.279395][T29844] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 825.283248][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.306678][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.320028][T29853] __nla_validate_parse: 75 callbacks suppressed [ 825.320046][T29853] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5918'. [ 825.381840][T29856] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5921'. [ 825.391754][T29856] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5921'. [ 825.814480][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x2d [ 825.993537][T29903] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5932'. [ 826.056232][T29904] x_tables: ip_tables: ah match: only valid for protocol 51 [ 826.088156][ T5829] Bluetooth: hci0: command tx timeout [ 826.843628][T29919] xt_CT: No such helper "snmp_trap" [ 827.928315][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 827.936604][ C1] lec:lec_tx_timeout: lec0 [ 827.941421][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 828.168055][ T5829] Bluetooth: hci0: command tx timeout [ 828.578079][ T97] block nbd2: Possible stuck request ffff88805fec2800: control (read@0,1024B). Runtime 120 seconds [ 828.589165][ T97] block nbd2: Possible stuck request ffff88805fec2a00: control (read@1024,1024B). Runtime 120 seconds [ 828.600818][ T97] block nbd2: Possible stuck request ffff88805fec2c00: control (read@2048,1024B). Runtime 120 seconds [ 828.611966][ T97] block nbd2: Possible stuck request ffff88805fec2e00: control (read@3072,1024B). Runtime 120 seconds [ 828.676188][T29888] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 828.753678][T29930] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5939'. [ 829.054587][T29949] netlink: 'syz.0.5944': attribute type 29 has an invalid length. [ 829.103105][T29958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5946'. [ 829.127209][T29939] wg1 speed is unknown, defaulting to 1000 [ 829.137262][T29949] netlink: 'syz.0.5944': attribute type 29 has an invalid length. [ 829.388292][T29952] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20001 [ 829.416592][T29939] lo speed is unknown, defaulting to 1000 [ 830.191262][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 830.201749][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 830.210413][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 830.218687][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 830.226535][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 830.440227][T29983] wg1 speed is unknown, defaulting to 1000 [ 830.575711][T29983] lo speed is unknown, defaulting to 1000 [ 830.670923][T29983] chnl_net:caif_netlink_parms(): no params data found [ 830.731839][T29983] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.739175][T29983] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.746379][T29983] bridge_slave_0: entered allmulticast mode [ 830.753772][T29983] bridge_slave_0: entered promiscuous mode [ 830.761640][T29983] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.768982][T29983] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.776179][T29983] bridge_slave_1: entered allmulticast mode [ 830.783385][T29983] bridge_slave_1: entered promiscuous mode [ 830.808745][T29983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.820384][T29983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.846388][T29983] team0: Port device team_slave_0 added [ 830.855327][T29983] team0: Port device team_slave_1 added [ 830.876420][T29983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.883562][T29983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.910138][T29983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.922777][T29983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.929827][T29983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.956630][T29983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 830.993169][T29983] hsr_slave_0: entered promiscuous mode [ 830.999706][T29983] hsr_slave_1: entered promiscuous mode [ 831.005788][T29983] debugfs: 'hsr0' already exists in 'hsr' [ 831.011953][T29983] Cannot create hsr debugfs directory [ 831.968653][T29949] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 832.080949][T29983] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 832.094698][T29983] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 832.125491][T29983] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 832.219579][T29994] bond6: option min_links: invalid value (18446744073709551612) [ 832.248645][T29994] bond6: option min_links: allowed values 0 - 2147483647 [ 832.281712][T29994] bond6 (unregistering): Released all slaves [ 832.346812][ T52] Bluetooth: hci5: command tx timeout [ 832.357886][T30009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5956'. [ 832.372017][T30009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5956'. [ 832.456789][T29983] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 832.497391][T30009] vlan2: entered allmulticast mode [ 832.534754][T30009] team0: entered allmulticast mode [ 832.558020][T30009] team_slave_0: entered allmulticast mode [ 832.574256][T30009] team_slave_1: entered allmulticast mode [ 832.795412][T30027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5960'. [ 832.817983][T30027] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5960'. [ 832.827165][T30027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5960'. [ 832.850205][T30027] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5960'. [ 832.883750][T30037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5963'. [ 832.910578][T30034] syzkaller0: entered promiscuous mode [ 832.916176][T30034] syzkaller0: entered allmulticast mode [ 832.948805][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 832.956843][ C1] lec:lec_tx_timeout: lec0 [ 832.961846][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 832.979386][T30037] 8021q: adding VLAN 0 to HW filter on device bond10 [ 832.984666][T30045] PKCS7: Unknown OID: [4] (bad) [ 832.992755][T30045] PKCS7: Only support pkcs7_signedData type [ 832.993052][T29983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.014889][T30044] sctp: [Deprecated]: syz.2.5965 (pid 30044) Use of struct sctp_assoc_value in delayed_ack socket option. [ 833.014889][T30044] Use struct sctp_sack_info instead [ 833.061042][T30041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.075575][T30041] bond10: (slave batadv0): Enslaving as an active interface with an up link [ 833.105858][T29983] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.119486][ T8431] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.126673][ T8431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.169680][ T8436] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.176863][ T8436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.254310][T30051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5966'. [ 833.264891][T30053] xt_CT: You must specify a L4 protocol and not use inversions on it [ 833.274457][T30051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5966'. [ 833.294272][T30051] netlink: 'syz.3.5966': attribute type 14 has an invalid length. [ 833.313167][T30051] netlink: 'syz.3.5966': attribute type 11 has an invalid length. [ 833.424354][T30058] sctp: [Deprecated]: syz.3.5969 (pid 30058) Use of int in maxseg socket option. [ 833.424354][T30058] Use struct sctp_assoc_value instead [ 833.576033][T30066] wg1 speed is unknown, defaulting to 1000 [ 833.594079][T30060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5970'. [ 833.599329][T29983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 833.721557][T30060] bond7: option broadcast_neighbor: invalid value (30) [ 833.760461][T30060] bond7 (unregistering): Released all slaves [ 834.229368][T30066] lo speed is unknown, defaulting to 1000 [ 834.273586][T30095] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 834.328555][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 834.339882][T29983] veth0_vlan: entered promiscuous mode [ 834.407993][ T52] Bluetooth: hci5: command tx timeout [ 834.447626][T29983] veth1_vlan: entered promiscuous mode [ 834.550130][T29983] veth0_macvtap: entered promiscuous mode [ 834.599289][T29983] veth1_macvtap: entered promiscuous mode [ 834.730016][T29983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.796104][T29983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.822745][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.831925][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.921611][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.933112][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.109045][ T8407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.149901][ T8407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.214391][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.226455][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.253402][T30127] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 835.300749][T30129] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 835.358029][T30133] batadv_slave_1: entered promiscuous mode [ 835.692467][T30158] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 835.717499][T30153] gtp1: entered promiscuous mode [ 835.723853][T30153] gtp1: entered allmulticast mode [ 836.127088][T30180] gtp2: entered promiscuous mode [ 836.144380][T30180] gtp2: entered allmulticast mode [ 836.152824][T30133] batadv_slave_1: left promiscuous mode [ 836.213605][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 836.223204][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 836.233321][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 836.255418][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 836.263637][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 836.459124][T30196] syzkaller0: entered promiscuous mode [ 836.464642][T30196] syzkaller0: entered allmulticast mode [ 836.488872][ T5829] Bluetooth: hci5: command tx timeout [ 836.506762][T30186] wg1 speed is unknown, defaulting to 1000 [ 836.509610][T30202] tipc: Started in network mode [ 836.517498][T30202] tipc: Node identity e6ad23ce9465, cluster identity 4711 [ 836.525532][T30202] tipc: Enabled bearer , priority 0 [ 836.637708][T30202] tipc: Disabling bearer [ 836.905586][T30186] lo speed is unknown, defaulting to 1000 [ 837.166302][ T8439] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.188073][ T8439] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.249978][ T8407] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.352961][ T8436] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.376286][ T13] batadv2: left allmulticast mode [ 837.404438][ T13] batadv2: left promiscuous mode [ 837.430603][ T13] bridge0: port 1(batadv2) entered disabled state [ 837.973777][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 837.981938][ C1] lec:lec_tx_timeout: lec0 [ 837.986988][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 838.003486][ T13] gretap0 (unregistering): left promiscuous mode [ 838.339186][ T5829] Bluetooth: hci3: command tx timeout [ 838.462915][ T13] bond0 (unregistering): left promiscuous mode [ 838.469595][ T13] bond_slave_0: left promiscuous mode [ 838.475299][ T13] bond_slave_1: left promiscuous mode [ 838.493542][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.507294][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 838.518178][ T13] bond0 (unregistering): Released all slaves [ 838.567978][ T5829] Bluetooth: hci5: command tx timeout [ 838.569728][ T13] bond1 (unregistering): Released all slaves [ 838.636117][ T13] bond2 (unregistering): (slave batadv1): Releasing active interface [ 838.662207][ T13] bond2 (unregistering): Released all slaves [ 838.700642][ T13] bond3 (unregistering): (slave bond4): Releasing backup interface [ 838.711272][ T13] bond3 (unregistering): Released all slaves [ 838.734161][ T13] bond4 (unregistering): Released all slaves [ 838.755503][ T13] bond5 (unregistering): Released all slaves [ 838.932245][T30186] chnl_net:caif_netlink_parms(): no params data found [ 838.980429][ T13] : left promiscuous mode [ 839.028818][T30264] wg1 speed is unknown, defaulting to 1000 [ 839.097919][ T13] tipc: Left network mode [ 839.294166][T30186] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.350438][T30186] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.393744][T30186] bridge_slave_0: entered allmulticast mode [ 839.446300][T30186] bridge_slave_0: entered promiscuous mode [ 839.578641][T30186] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.585888][T30186] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.597635][T30293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 839.615997][T30186] bridge_slave_1: entered allmulticast mode [ 839.639666][T30186] bridge_slave_1: entered promiscuous mode [ 839.685989][T30297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 839.740525][T30264] lo speed is unknown, defaulting to 1000 [ 839.811705][T30186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.894912][T30186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.989143][T30186] team0: Port device team_slave_0 added [ 840.005223][T30186] team0: Port device team_slave_1 added [ 840.180149][T30318] netlink: 'syz.1.6031': attribute type 31 has an invalid length. [ 840.192286][T30186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.200700][T30318] __nla_validate_parse: 16 callbacks suppressed [ 840.200721][T30318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6031'. [ 840.207861][T30186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.207889][T30186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.225402][T30186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.268080][T30186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.296292][T30186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.410217][ T5829] Bluetooth: hci3: command tx timeout [ 840.480834][T30321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6032'. [ 840.580567][T30322] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6032'. [ 840.596596][T30328] tipc: Failed to remove unknown binding: 66,0,0/0:3470363189/3470363191 [ 840.605854][T30328] tipc: Failed to remove unknown binding: 66,0,0/0:3470363189/3470363190 [ 840.644389][T30328] tipc: Failed to remove unknown binding: 66,0,0/0:3470363189/3470363191 [ 840.674173][T30321] netlink: 'syz.1.6032': attribute type 4 has an invalid length. [ 840.683075][T30328] tipc: Failed to remove unknown binding: 66,0,0/0:3470363189/3470363190 [ 840.801984][ T13] hsr_slave_0: left promiscuous mode [ 840.807782][ T13] hsr_slave_1: left promiscuous mode [ 840.814154][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.026053][ T8404] smc: removing ib device syû [ 841.110156][T30186] hsr_slave_0: entered promiscuous mode [ 841.116825][T30186] hsr_slave_1: entered promiscuous mode [ 841.124506][T30186] debugfs: 'hsr0' already exists in 'hsr' [ 841.132826][T30186] Cannot create hsr debugfs directory [ 841.218588][T30341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6037'. [ 841.260653][T30341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6037'. [ 841.364833][T30341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6037'. [ 841.435631][T30341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6037'. [ 841.675659][T30352] netlink: 'syz.1.6041': attribute type 2 has an invalid length. [ 841.805971][T30356] syzkaller0: entered promiscuous mode [ 841.812099][T30356] syzkaller0: entered allmulticast mode [ 841.827660][T30353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6041'. [ 841.840899][T30356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6041'. [ 841.857484][T30186] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.026703][T30186] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.201971][T30186] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.357044][T30186] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.488579][ T5829] Bluetooth: hci3: command tx timeout [ 842.775420][ T13] IPVS: stop unused estimator thread 0... [ 843.007887][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 843.016015][ C1] lec:lec_tx_timeout: lec0 [ 843.020835][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 844.568926][ T5829] Bluetooth: hci3: command tx timeout [ 848.027947][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 848.035989][ C1] lec:lec_tx_timeout: lec0 [ 848.040751][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 853.047961][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 853.056010][ C1] lec:lec_tx_timeout: lec0 [ 853.060579][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 856.129059][T30365] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 856.129205][T30369] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 856.138617][T30365] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 856.154528][T30369] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 856.154791][T30365] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 856.170306][T30369] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 856.170853][T30365] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 856.182425][T30369] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 856.186107][T30365] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 856.192447][T30369] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 856.247421][T30363] wg1 speed is unknown, defaulting to 1000 [ 856.261131][T30366] wg1 speed is unknown, defaulting to 1000 [ 856.261713][T30363] lo speed is unknown, defaulting to 1000 [ 856.277708][T30366] lo speed is unknown, defaulting to 1000 [ 856.454056][T30363] chnl_net:caif_netlink_parms(): no params data found [ 856.513915][T30366] chnl_net:caif_netlink_parms(): no params data found [ 856.571248][T30363] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.578517][T30363] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.585825][T30363] bridge_slave_0: entered allmulticast mode [ 856.593322][T30363] bridge_slave_0: entered promiscuous mode [ 856.605580][T30363] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.612946][T30363] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.620292][T30363] bridge_slave_1: entered allmulticast mode [ 856.627322][T30363] bridge_slave_1: entered promiscuous mode [ 856.674567][T30363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.697059][T30363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.706696][T30366] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.714015][T30366] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.721589][T30366] bridge_slave_0: entered allmulticast mode [ 856.729760][T30366] bridge_slave_0: entered promiscuous mode [ 856.738351][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 856.748743][T30366] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.755972][T30366] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.764628][T30366] bridge_slave_1: entered allmulticast mode [ 856.772376][T30366] bridge_slave_1: entered promiscuous mode [ 856.800123][T30363] team0: Port device team_slave_0 added [ 856.817556][T30363] team0: Port device team_slave_1 added [ 856.836568][T30366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.856708][T30366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.866712][T30363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.874046][T30363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.900434][T30363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.922176][T30363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.929311][T30363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.955742][T30363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.986698][T30366] team0: Port device team_slave_0 added [ 856.995700][T30366] team0: Port device team_slave_1 added [ 857.039286][T30366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.046342][T30366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.072906][T30366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.090640][T30363] hsr_slave_0: entered promiscuous mode [ 857.096935][T30363] hsr_slave_1: entered promiscuous mode [ 857.103459][T30363] debugfs: 'hsr0' already exists in 'hsr' [ 857.109694][T30363] Cannot create hsr debugfs directory [ 857.115941][T30366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.123204][T30366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.149993][T30366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.217674][T30366] hsr_slave_0: entered promiscuous mode [ 857.224282][T30366] hsr_slave_1: entered promiscuous mode [ 857.230923][T30366] debugfs: 'hsr0' already exists in 'hsr' [ 857.236663][T30366] Cannot create hsr debugfs directory [ 857.656895][T30369] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 857.658607][ T5829] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 857.667523][T30369] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 857.674626][ T5829] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 857.683290][T30369] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 857.687724][ T5829] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 857.693888][T30369] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 857.701214][ T5829] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 857.708597][T30369] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 857.714977][ T5829] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 857.777773][T30384] wg1 speed is unknown, defaulting to 1000 [ 857.793467][T30384] lo speed is unknown, defaulting to 1000 [ 857.793481][T30385] wg1 speed is unknown, defaulting to 1000 [ 857.823429][T30385] lo speed is unknown, defaulting to 1000 [ 857.986369][T30384] chnl_net:caif_netlink_parms(): no params data found [ 858.053427][T30385] chnl_net:caif_netlink_parms(): no params data found [ 858.067882][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 858.075985][ C1] lec:lec_tx_timeout: lec0 [ 858.080582][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 858.120114][T30384] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.129242][T30384] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.136483][T30384] bridge_slave_0: entered allmulticast mode [ 858.145320][T30384] bridge_slave_0: entered promiscuous mode [ 858.162232][T30384] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.172707][T30384] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.180359][T30384] bridge_slave_1: entered allmulticast mode [ 858.187316][T30384] bridge_slave_1: entered promiscuous mode [ 858.240653][T30384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.248192][ T52] Bluetooth: hci1: command tx timeout [ 858.250264][ T5829] Bluetooth: hci6: command tx timeout [ 858.261924][T30384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.271866][T30385] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.279385][T30385] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.286637][T30385] bridge_slave_0: entered allmulticast mode [ 858.293819][T30385] bridge_slave_0: entered promiscuous mode [ 858.310978][T30385] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.318273][T30385] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.325504][T30385] bridge_slave_1: entered allmulticast mode [ 858.333067][T30385] bridge_slave_1: entered promiscuous mode [ 858.360998][T30384] team0: Port device team_slave_0 added [ 858.376618][T30384] team0: Port device team_slave_1 added [ 858.384872][T30385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.397616][T30385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.442417][T30384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.449896][T30384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.476303][T30384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.490339][T30385] team0: Port device team_slave_0 added [ 858.501273][T30384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.508462][T30384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.535094][T30384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.548308][T30385] team0: Port device team_slave_1 added [ 858.592953][T30385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.600122][T30385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.626667][T30385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.639383][T30385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.646325][T30385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.673602][ T97] block nbd2: Possible stuck request ffff88805fec2800: control (read@0,1024B). Runtime 150 seconds [ 858.684372][ T97] block nbd2: Possible stuck request ffff88805fec2a00: control (read@1024,1024B). Runtime 150 seconds [ 858.687923][T30385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.695550][ T97] block nbd2: Possible stuck request ffff88805fec2c00: control (read@2048,1024B). Runtime 150 seconds [ 858.717684][ T97] block nbd2: Possible stuck request ffff88805fec2e00: control (read@3072,1024B). Runtime 150 seconds [ 858.756336][T30384] hsr_slave_0: entered promiscuous mode [ 858.762757][T30384] hsr_slave_1: entered promiscuous mode [ 858.769143][T30384] debugfs: 'hsr0' already exists in 'hsr' [ 858.775010][T30384] Cannot create hsr debugfs directory [ 858.795622][T30385] hsr_slave_0: entered promiscuous mode [ 858.802138][T30385] hsr_slave_1: entered promiscuous mode [ 858.808880][T30385] debugfs: 'hsr0' already exists in 'hsr' [ 858.814595][T30385] Cannot create hsr debugfs directory [ 859.768363][ T5829] Bluetooth: hci8: command tx timeout [ 859.768371][ T52] Bluetooth: hci7: command tx timeout [ 860.328002][ T5829] Bluetooth: hci1: command tx timeout [ 860.328103][ T52] Bluetooth: hci6: command tx timeout [ 861.848690][ T52] Bluetooth: hci7: command tx timeout [ 861.849343][ T5829] Bluetooth: hci8: command tx timeout [ 862.408112][ T52] Bluetooth: hci1: command tx timeout [ 862.413593][ T5829] Bluetooth: hci6: command tx timeout [ 863.087958][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 863.096068][ C1] lec:lec_tx_timeout: lec0 [ 863.100656][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 863.928545][ T5829] Bluetooth: hci8: command tx timeout [ 863.928793][ T52] Bluetooth: hci7: command tx timeout [ 864.488301][ T52] Bluetooth: hci6: command tx timeout [ 864.493785][ T5829] Bluetooth: hci1: command tx timeout [ 866.008265][ T5829] Bluetooth: hci8: command tx timeout [ 866.013713][ T5829] Bluetooth: hci7: command tx timeout [ 868.117947][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 868.125975][ C1] lec:lec_tx_timeout: lec0 [ 868.130542][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 874.007913][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5880 ms [ 874.016008][ C1] lec:lec_tx_timeout: lec0 [ 874.020947][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 879.027992][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 879.036029][ C1] lec:lec_tx_timeout: lec0 [ 879.040759][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 884.047926][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 884.055974][ C1] lec:lec_tx_timeout: lec0 [ 884.060599][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 888.729551][ T97] block nbd2: Possible stuck request ffff88805fec2800: control (read@0,1024B). Runtime 180 seconds [ 888.740329][ T97] block nbd2: Possible stuck request ffff88805fec2a00: control (read@1024,1024B). Runtime 180 seconds [ 888.751346][ T97] block nbd2: Possible stuck request ffff88805fec2c00: control (read@2048,1024B). Runtime 180 seconds [ 888.762368][ T97] block nbd2: Possible stuck request ffff88805fec2e00: control (read@3072,1024B). Runtime 180 seconds [ 889.067980][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 889.076003][ C1] lec:lec_tx_timeout: lec0 [ 889.080637][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 889.129242][ T5189] udevd[5189]: worker [24791] /devices/virtual/block/nbd2 timeout; kill it [ 889.138040][ T5189] udevd[5189]: seq 35640 '/devices/virtual/block/nbd2' killed [ 894.088153][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 894.096261][ C1] lec:lec_tx_timeout: lec0 [ 894.100888][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 896.145150][ T52] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 896.154243][ T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 896.163222][ T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 896.171301][ T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 896.179199][ T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 896.211024][T30401] wg1 speed is unknown, defaulting to 1000 [ 896.219726][T30401] lo speed is unknown, defaulting to 1000 [ 896.316910][T30401] chnl_net:caif_netlink_parms(): no params data found [ 896.379088][T30401] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.386224][T30401] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.394816][T30401] bridge_slave_0: entered allmulticast mode [ 896.402069][T30401] bridge_slave_0: entered promiscuous mode [ 896.410741][T30401] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.418644][T30401] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.425867][T30401] bridge_slave_1: entered allmulticast mode [ 896.433128][T30401] bridge_slave_1: entered promiscuous mode [ 896.459658][T30401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.471253][T30401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.498662][T30401] team0: Port device team_slave_0 added [ 896.506257][T30401] team0: Port device team_slave_1 added [ 896.527976][T30401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.534933][T30401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.561804][T30401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 896.574791][T30401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 896.581825][T30401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.608619][T30401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.646640][T30401] hsr_slave_0: entered promiscuous mode [ 896.656337][T30401] hsr_slave_1: entered promiscuous mode [ 896.662663][T30401] debugfs: 'hsr0' already exists in 'hsr' [ 896.668547][T30401] Cannot create hsr debugfs directory [ 898.248082][ T5829] Bluetooth: hci9: command tx timeout [ 899.107929][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 899.115951][ C1] lec:lec_tx_timeout: lec0 [ 899.120597][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 900.328042][ T5829] Bluetooth: hci9: command tx timeout [ 902.408092][ T5829] Bluetooth: hci9: command tx timeout [ 904.488146][ T5829] Bluetooth: hci9: command tx timeout [ 905.367914][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6250 ms [ 905.375980][ C1] lec:lec_tx_timeout: lec0 [ 905.380927][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 911.127944][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 911.136059][ C1] lec:lec_tx_timeout: lec0 [ 911.140892][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 916.734102][T30369] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 916.740166][T30365] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 916.745722][T30369] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 916.752140][T30365] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 916.758652][T30369] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 916.765052][T30365] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 916.772767][T30369] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 916.778833][T30365] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 916.785475][T30369] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 916.793100][T30365] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 916.837008][T30411] wg1 speed is unknown, defaulting to 1000 [ 916.847349][T30411] lo speed is unknown, defaulting to 1000 [ 916.881268][T30413] wg1 speed is unknown, defaulting to 1000 [ 916.887870][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 916.896132][ C1] lec:lec_tx_timeout: lec0 [ 916.900775][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 916.911919][T30413] lo speed is unknown, defaulting to 1000 [ 917.063813][T30411] chnl_net:caif_netlink_parms(): no params data found [ 917.123421][T30413] chnl_net:caif_netlink_parms(): no params data found [ 917.193410][T30411] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.200722][T30411] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.208565][T30411] bridge_slave_0: entered allmulticast mode [ 917.215635][T30411] bridge_slave_0: entered promiscuous mode [ 917.232332][T30411] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.239554][T30411] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.246827][T30411] bridge_slave_1: entered allmulticast mode [ 917.254287][T30411] bridge_slave_1: entered promiscuous mode [ 917.299922][T30413] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.307074][T30413] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.314643][T30413] bridge_slave_0: entered allmulticast mode [ 917.321763][T30413] bridge_slave_0: entered promiscuous mode [ 917.332009][T30411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.343020][T30413] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.350328][T30413] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.357617][T30413] bridge_slave_1: entered allmulticast mode [ 917.365306][T30413] bridge_slave_1: entered promiscuous mode [ 917.375044][T30411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.422161][T30411] team0: Port device team_slave_0 added [ 917.430938][T30413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.442970][T30411] team0: Port device team_slave_1 added [ 917.462889][T30413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.494048][T30411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.501132][T30411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.527726][T30411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.549253][T30411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.556216][T30411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.582578][T30411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.596596][T30413] team0: Port device team_slave_0 added [ 917.612471][T30413] team0: Port device team_slave_1 added [ 917.645708][T30413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.652889][T30413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.679722][T30413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.708793][T30413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.715901][T30413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.745719][T30413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.791460][T30411] hsr_slave_0: entered promiscuous mode [ 917.798861][T30411] hsr_slave_1: entered promiscuous mode [ 917.805379][T30411] debugfs: 'hsr0' already exists in 'hsr' [ 917.811538][T30411] Cannot create hsr debugfs directory [ 917.859808][T30365] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 917.870695][T30365] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 917.879555][T30365] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 917.886566][T30413] hsr_slave_0: entered promiscuous mode [ 917.894355][T30365] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 917.895223][T30413] hsr_slave_1: entered promiscuous mode [ 917.909900][T30365] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 917.910724][T30413] debugfs: 'hsr0' already exists in 'hsr' [ 917.924090][T30413] Cannot create hsr debugfs directory [ 917.980429][ T52] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 917.991729][ T52] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 918.002139][ T52] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 918.015504][ T52] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 918.025141][ T52] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 918.070551][T30429] wg1 speed is unknown, defaulting to 1000 [ 918.100732][T30429] lo speed is unknown, defaulting to 1000 [ 918.148184][T30431] wg1 speed is unknown, defaulting to 1000 [ 918.204016][T30431] lo speed is unknown, defaulting to 1000 [ 918.454930][T30429] chnl_net:caif_netlink_parms(): no params data found [ 918.521644][T30431] chnl_net:caif_netlink_parms(): no params data found [ 918.613856][T30429] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.622185][T30429] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.629851][T30429] bridge_slave_0: entered allmulticast mode [ 918.639495][T30429] bridge_slave_0: entered promiscuous mode [ 918.647258][T30429] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.655669][T30429] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.663180][T30429] bridge_slave_1: entered allmulticast mode [ 918.670619][T30429] bridge_slave_1: entered promiscuous mode [ 918.726083][T30431] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.735746][T30431] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.744890][T30431] bridge_slave_0: entered allmulticast mode [ 918.752250][T30431] bridge_slave_0: entered promiscuous mode [ 918.762962][T30429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.773957][T30431] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.781279][T30431] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.788924][T30431] bridge_slave_1: entered allmulticast mode [ 918.795939][T30431] bridge_slave_1: entered promiscuous mode [ 918.805354][T30429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.818143][ T97] block nbd2: Possible stuck request ffff88805fec2800: control (read@0,1024B). Runtime 210 seconds [ 918.829237][ T97] block nbd2: Possible stuck request ffff88805fec2a00: control (read@1024,1024B). Runtime 210 seconds [ 918.840530][ T97] block nbd2: Possible stuck request ffff88805fec2c00: control (read@2048,1024B). Runtime 210 seconds [ 918.851797][ T97] block nbd2: Possible stuck request ffff88805fec2e00: control (read@3072,1024B). Runtime 210 seconds [ 918.884750][T30429] team0: Port device team_slave_0 added [ 918.890796][T30365] Bluetooth: hci11: command tx timeout [ 918.897273][T30365] Bluetooth: hci10: command tx timeout [ 918.914401][T30429] team0: Port device team_slave_1 added [ 918.933118][T30431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.966836][T30431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.991438][T30429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 918.998747][T30429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.026232][T30429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.066747][T30429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.074013][T30429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.101249][T30429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.121651][T30431] team0: Port device team_slave_0 added [ 919.139252][T30431] team0: Port device team_slave_1 added [ 919.183763][T30429] hsr_slave_0: entered promiscuous mode [ 919.191100][T30429] hsr_slave_1: entered promiscuous mode [ 919.197723][T30429] debugfs: 'hsr0' already exists in 'hsr' [ 919.203646][T30429] Cannot create hsr debugfs directory [ 919.211858][T30431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.218906][T30431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.245150][T30431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.264147][T30431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.271325][T30431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.298059][T30431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.380301][T30431] hsr_slave_0: entered promiscuous mode [ 919.386965][T30431] hsr_slave_1: entered promiscuous mode [ 919.394591][T30431] debugfs: 'hsr0' already exists in 'hsr' [ 919.400732][T30431] Cannot create hsr debugfs directory [ 920.008154][T30365] Bluetooth: hci12: command tx timeout [ 920.088723][T30365] Bluetooth: hci13: command tx timeout [ 920.968174][ T52] Bluetooth: hci11: command tx timeout [ 920.973732][T30365] Bluetooth: hci10: command tx timeout [ 921.927970][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 921.936036][ C1] lec:lec_tx_timeout: lec0 [ 921.940740][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 922.088077][T30365] Bluetooth: hci12: command tx timeout [ 922.168343][T30365] Bluetooth: hci13: command tx timeout [ 923.048061][ T52] Bluetooth: hci11: command tx timeout [ 923.048114][T30365] Bluetooth: hci10: command tx timeout [ 924.168090][T30365] Bluetooth: hci12: command tx timeout [ 924.248250][T30365] Bluetooth: hci13: command tx timeout [ 925.128197][T30365] Bluetooth: hci10: command tx timeout [ 925.129574][ T52] Bluetooth: hci11: command tx timeout [ 926.258165][ T52] Bluetooth: hci12: command tx timeout [ 926.328288][ T52] Bluetooth: hci13: command tx timeout [ 926.488433][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 926.947994][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 926.956099][ C1] lec:lec_tx_timeout: lec0 [ 926.960825][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 931.967916][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 931.975981][ C1] lec:lec_tx_timeout: lec0 [ 931.980687][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 936.987970][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 936.996006][ C1] lec:lec_tx_timeout: lec0 [ 937.000695][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 942.008053][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 942.016095][ C1] lec:lec_tx_timeout: lec0 [ 942.021150][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 943.928334][T30365] Bluetooth: hci0: command 0x0406 tx timeout [ 947.027981][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 947.036117][ C1] lec:lec_tx_timeout: lec0 [ 947.040857][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 948.888408][ T97] block nbd2: Possible stuck request ffff88805fec2800: control (read@0,1024B). Runtime 240 seconds [ 948.899780][ T97] block nbd2: Possible stuck request ffff88805fec2a00: control (read@1024,1024B). Runtime 240 seconds [ 948.911084][ T97] block nbd2: Possible stuck request ffff88805fec2c00: control (read@2048,1024B). Runtime 240 seconds [ 948.923499][ T97] block nbd2: Possible stuck request ffff88805fec2e00: control (read@3072,1024B). Runtime 240 seconds [ 952.047922][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 952.056126][ C1] lec:lec_tx_timeout: lec0 [ 952.060787][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 954.178331][T30365] Bluetooth: hci5: command 0x0406 tx timeout [ 956.759982][ T52] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 956.769009][ T52] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 956.777447][ T52] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 956.786884][ T52] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 956.794954][ T52] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 956.830556][T30446] wg1 speed is unknown, defaulting to 1000 [ 956.838513][T30446] lo speed is unknown, defaulting to 1000 [ 956.940934][T30446] chnl_net:caif_netlink_parms(): no params data found [ 957.011794][T30446] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.019984][T30446] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.027329][T30446] bridge_slave_0: entered allmulticast mode [ 957.034960][T30446] bridge_slave_0: entered promiscuous mode [ 957.042934][T30446] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.050380][T30446] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.057638][T30446] bridge_slave_1: entered allmulticast mode [ 957.065550][T30446] bridge_slave_1: entered promiscuous mode [ 957.077915][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 957.085943][ C1] lec:lec_tx_timeout: lec0 [ 957.090858][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 957.100734][T30446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.113163][T30446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.141486][T30446] team0: Port device team_slave_0 added [ 957.149704][T30446] team0: Port device team_slave_1 added [ 957.172138][T30446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.179451][T30446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 957.205820][T30446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 957.223430][T30446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 957.230801][T30446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 957.257101][T30446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.299451][T30446] hsr_slave_0: entered promiscuous mode [ 957.306250][T30446] hsr_slave_1: entered promiscuous mode [ 957.312829][T30446] debugfs: 'hsr0' already exists in 'hsr' [ 957.318657][T30446] Cannot create hsr debugfs directory [ 958.808153][T30365] Bluetooth: hci14: command tx timeout [ 959.288112][T30365] Bluetooth: hci3: command 0x0406 tx timeout [ 960.888112][ T52] Bluetooth: hci14: command tx timeout [ 962.097932][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 962.105956][ C1] lec:lec_tx_timeout: lec0 [ 962.110629][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 962.968146][ T52] Bluetooth: hci14: command tx timeout [ 965.048025][ T52] Bluetooth: hci14: command tx timeout [ 967.927982][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 967.936018][ C1] lec:lec_tx_timeout: lec0 [ 967.940953][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 972.947945][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 972.956154][ C1] lec:lec_tx_timeout: lec0 [ 972.960933][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 977.324981][T30365] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 977.336625][T30365] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 977.345850][T30365] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 977.354785][T30365] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 977.356530][ T5829] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 977.370030][T30365] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 977.380768][ T5829] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 977.380897][T30365] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 977.400180][ T5829] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 977.415971][ T5829] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 977.445920][T30456] wg1 speed is unknown, defaulting to 1000 [ 977.457744][T30456] lo speed is unknown, defaulting to 1000 [ 977.496139][T30458] wg1 speed is unknown, defaulting to 1000 [ 977.513522][T30458] lo speed is unknown, defaulting to 1000 [ 977.672073][T30456] chnl_net:caif_netlink_parms(): no params data found [ 977.733965][T30458] chnl_net:caif_netlink_parms(): no params data found [ 977.810261][T30456] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.817375][T30456] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.824904][T30456] bridge_slave_0: entered allmulticast mode [ 977.832145][T30456] bridge_slave_0: entered promiscuous mode [ 977.848313][T30456] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.855584][T30456] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.863312][T30456] bridge_slave_1: entered allmulticast mode [ 977.870689][T30456] bridge_slave_1: entered promiscuous mode [ 977.906990][T30458] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.914731][T30458] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.922939][T30458] bridge_slave_0: entered allmulticast mode [ 977.930424][T30458] bridge_slave_0: entered promiscuous mode [ 977.946399][T30458] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.955670][T30458] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.963408][T30458] bridge_slave_1: entered allmulticast mode [ 977.970740][T30458] bridge_slave_1: entered promiscuous mode [ 977.977866][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 977.986056][ C1] lec:lec_tx_timeout: lec0 [ 977.990957][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 978.006238][T30456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 978.022354][T30458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 978.034418][T30456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.046689][T30458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.096379][T30456] team0: Port device team_slave_0 added [ 978.105683][T30456] team0: Port device team_slave_1 added [ 978.113817][T30458] team0: Port device team_slave_0 added [ 978.131564][T30458] team0: Port device team_slave_1 added [ 978.155292][T30456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.162846][T30456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.189809][T30456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.212698][T30456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.219841][T30456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.246444][T30456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.269235][T30458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.276206][T30458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.309770][T30458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.329569][T30458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.336557][T30458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.375909][T30458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.445748][ T52] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 978.456042][ T52] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 978.465860][ T52] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 978.476038][ T52] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 978.484975][ T52] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 978.529458][T30456] hsr_slave_0: entered promiscuous mode [ 978.536417][T30456] hsr_slave_1: entered promiscuous mode [ 978.544402][T30456] debugfs: 'hsr0' already exists in 'hsr' [ 978.552413][T30456] Cannot create hsr debugfs directory [ 978.559170][ T52] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 978.569041][ T52] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 978.577733][ T52] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 978.591705][ T52] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 978.605114][T30458] hsr_slave_0: entered promiscuous mode [ 978.611272][ T52] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 978.618332][T30458] hsr_slave_1: entered promiscuous mode [ 978.619249][T30458] debugfs: 'hsr0' already exists in 'hsr' [ 978.632658][T30458] Cannot create hsr debugfs directory [ 978.726302][T30474] wg1 speed is unknown, defaulting to 1000 [ 978.767697][T30474] lo speed is unknown, defaulting to 1000 [ 978.856169][T30476] wg1 speed is unknown, defaulting to 1000 [ 978.897227][T30476] lo speed is unknown, defaulting to 1000 [ 978.978192][ T97] block nbd2: Possible stuck request ffff88805fec2800: control (read@0,1024B). Runtime 270 seconds [ 978.989532][ T97] block nbd2: Possible stuck request ffff88805fec2a00: control (read@1024,1024B). Runtime 270 seconds [ 979.007484][ T97] block nbd2: Possible stuck request ffff88805fec2c00: control (read@2048,1024B). Runtime 270 seconds [ 979.020243][ T97] block nbd2: Possible stuck request ffff88805fec2e00: control (read@3072,1024B). Runtime 270 seconds [ 979.132388][T30474] chnl_net:caif_netlink_parms(): no params data found [ 979.193136][T30476] chnl_net:caif_netlink_parms(): no params data found [ 979.306869][T30474] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.314298][T30474] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.321733][T30474] bridge_slave_0: entered allmulticast mode [ 979.329277][T30474] bridge_slave_0: entered promiscuous mode [ 979.360087][T30474] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.367203][T30474] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.375589][T30474] bridge_slave_1: entered allmulticast mode [ 979.382906][T30474] bridge_slave_1: entered promiscuous mode [ 979.425948][T30476] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.433340][T30476] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.441170][T30476] bridge_slave_0: entered allmulticast mode [ 979.448126][T30365] Bluetooth: hci16: command tx timeout [ 979.448399][ T52] Bluetooth: hci15: command tx timeout [ 979.455454][T30476] bridge_slave_0: entered promiscuous mode [ 979.468741][T30476] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.475869][T30476] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.483561][T30476] bridge_slave_1: entered allmulticast mode [ 979.491001][T30476] bridge_slave_1: entered promiscuous mode [ 979.501207][T30474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.514678][T30474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.582799][T30474] team0: Port device team_slave_0 added [ 979.591065][T30474] team0: Port device team_slave_1 added [ 979.607445][T30476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.640197][T30476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.662098][T30474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.669453][T30474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.696548][T30474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.732818][T30474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.740108][T30474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.767015][T30474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.778323][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 979.779148][T30365] Bluetooth: hci6: command 0x0406 tx timeout [ 979.795373][T30476] team0: Port device team_slave_0 added [ 979.815061][T30476] team0: Port device team_slave_1 added [ 979.857548][T30476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.865024][T30476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.891492][T30476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.925865][T30476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.933455][T30476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.962601][T30476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.985374][T30474] hsr_slave_0: entered promiscuous mode [ 979.992047][T30474] hsr_slave_1: entered promiscuous mode [ 979.998658][T30474] debugfs: 'hsr0' already exists in 'hsr' [ 980.004483][T30474] Cannot create hsr debugfs directory [ 980.107459][T30476] hsr_slave_0: entered promiscuous mode [ 980.120367][T30476] hsr_slave_1: entered promiscuous mode [ 980.129489][T30476] debugfs: 'hsr0' already exists in 'hsr' [ 980.135459][T30476] Cannot create hsr debugfs directory [ 980.568123][T30369] Bluetooth: hci17: command tx timeout [ 980.649604][T30369] Bluetooth: hci18: command tx timeout [ 981.528230][T30369] Bluetooth: hci16: command tx timeout [ 981.529469][ T5829] Bluetooth: hci15: command tx timeout [ 982.648383][ T5829] Bluetooth: hci17: command tx timeout [ 982.728103][ T5829] Bluetooth: hci18: command tx timeout [ 982.997919][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 983.006126][ C1] lec:lec_tx_timeout: lec0 [ 983.010820][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 983.608171][ T5829] Bluetooth: hci16: command tx timeout [ 983.608179][ T52] Bluetooth: hci15: command tx timeout [ 984.729968][ T5829] Bluetooth: hci17: command tx timeout [ 984.808044][ T5829] Bluetooth: hci18: command tx timeout [ 984.891421][ T5829] Bluetooth: hci8: command 0x0406 tx timeout [ 984.891903][ T52] Bluetooth: hci7: command 0x0406 tx timeout [ 985.688253][T30365] Bluetooth: hci15: command tx timeout [ 985.688265][T30369] Bluetooth: hci16: command tx timeout [ 986.808201][T30365] Bluetooth: hci17: command tx timeout [ 986.888448][T30365] Bluetooth: hci18: command tx timeout [ 988.027904][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 988.035954][ C1] lec:lec_tx_timeout: lec0 [ 988.040904][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 988.568362][ T31] INFO: task dhcpcd:5483 blocked for more than 143 seconds. [ 988.575817][ T31] Not tainted syzkaller #0 [ 988.580836][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 988.589526][ T31] task:dhcpcd state:D stack:22688 pid:5483 tgid:5483 ppid:1 task_flags:0x400140 flags:0x00080000 [ 988.601547][ T31] Call Trace: [ 988.604838][ T31] [ 988.607773][ T31] __schedule+0x14ea/0x5050 [ 988.612457][ T31] ? __lock_acquire+0x6b5/0x2cf0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 988.617423][ T31] ? __pfx___schedule+0x10/0x10 [ 988.622715][ T31] ? schedule+0x90/0x360 [ 988.627032][ T31] schedule+0x164/0x360 [ 988.632609][ T31] schedule_preempt_disabled+0x13/0x30 [ 988.638481][ T31] __mutex_lock+0x7fe/0x1300 [ 988.643102][ T31] ? __mutex_lock+0x5ac/0x1300 [ 988.668027][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 988.672766][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 988.688006][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 988.697053][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 988.703131][ T31] ? radix_tree_lookup+0x240/0x290 [ 988.708810][ T31] genl_rcv_msg+0x10b/0x7a0 [ 988.713439][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 988.718943][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 988.723936][ T31] netlink_rcv_skb+0x232/0x4b0 [ 988.729814][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 988.734902][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 988.740487][ T31] ? genl_rcv+0x19/0x40 [ 988.744664][ T31] ? down_read+0x272/0x2e0 [ 988.749232][ T31] ? genl_rcv+0xd/0x40 [ 988.753506][ T31] genl_rcv+0x28/0x40 [ 988.757621][ T31] netlink_unicast+0x80f/0x9b0 [ 988.763409][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 988.768827][ T31] ? netlink_sendmsg+0x650/0xb40 [ 988.773937][ T31] ? skb_put+0x11b/0x210 [ 988.778578][ T31] netlink_sendmsg+0x813/0xb40 [ 988.783372][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 988.788937][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 988.793984][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 988.799445][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 988.804744][ T31] ____sys_sendmsg+0xa68/0xad0 [ 988.809835][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 988.815162][ T31] ? import_iovec+0x73/0xa0 [ 988.820058][ T31] ___sys_sendmsg+0x2a5/0x360 [ 988.824761][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 988.830143][ T31] ? __rtnl_unlock+0xc8/0xf0 [ 988.834866][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 988.839901][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 988.845468][ T31] ? rcu_is_watching+0x15/0xb0 [ 988.850430][ T31] ? __secure_computing+0xe1/0x2a0 [ 988.855583][ T31] do_syscall_64+0xe2/0xf80 [ 988.860484][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.866572][ T31] ? trace_irq_disable+0x37/0x100 [ 988.871833][ T31] ? clear_bhb_loop+0x60/0xb0 [ 988.876531][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.882875][ T31] RIP: 0033:0x7f5c78e1c407 [ 988.887310][ T31] RSP: 002b:00007ffc103f0340 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 988.896163][ T31] RAX: ffffffffffffffda RBX: 00007f5c78d92740 RCX: 00007f5c78e1c407 [ 988.904389][ T31] RDX: 0000000000000000 RSI: 00007ffc103f03c0 RDI: 000000000000000e [ 988.912710][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 988.920856][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000557120bf9e10 [ 988.928956][ T31] R13: 000000000000000e R14: 00007ffc10404880 R15: 0000557124522f10 [ 988.936966][ T31] [ 988.940467][ T31] INFO: task syz-executor:30186 blocked for more than 143 seconds. [ 988.948779][ T31] Not tainted syzkaller #0 [ 988.953723][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 988.962560][ T31] task:syz-executor state:D stack:22872 pid:30186 tgid:30186 ppid:1 task_flags:0x400140 flags:0x00080002 [ 988.974995][ T31] Call Trace: [ 988.978438][ T31] [ 988.981404][ T31] __schedule+0x14ea/0x5050 [ 988.986746][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 988.992022][ T31] ? __pfx___schedule+0x10/0x10 [ 988.996908][ T31] ? schedule+0x90/0x360 [ 989.001491][ T31] schedule+0x164/0x360 [ 989.005698][ T31] schedule_preempt_disabled+0x13/0x30 [ 989.011342][ T31] __mutex_lock+0x7fe/0x1300 [ 989.015961][ T31] ? __mutex_lock+0x5ac/0x1300 [ 989.021087][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 989.025857][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 989.031361][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 989.037547][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 989.042661][ T31] ? radix_tree_lookup+0x240/0x290 [ 989.048318][ T31] genl_rcv_msg+0x10b/0x7a0 [ 989.052865][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 989.058018][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 989.062985][ T31] netlink_rcv_skb+0x232/0x4b0 [ 989.067741][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 989.073091][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 989.078506][ T31] ? genl_rcv+0x19/0x40 [ 989.082763][ T31] ? down_read+0x272/0x2e0 [ 989.087194][ T31] ? genl_rcv+0xd/0x40 [ 989.091442][ T31] genl_rcv+0x28/0x40 [ 989.095441][ T31] netlink_unicast+0x80f/0x9b0 [ 989.100483][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 989.105763][ T31] ? netlink_sendmsg+0x650/0xb40 [ 989.110971][ T31] ? skb_put+0x11b/0x210 [ 989.115236][ T31] netlink_sendmsg+0x813/0xb40 [ 989.120153][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 989.125549][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 989.131319][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 989.136651][ T31] __sys_sendto+0x709/0x7a0 [ 989.141453][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 989.146520][ T31] ? fd_install+0x94/0x3d0 [ 989.151214][ T31] ? fd_install+0x306/0x3d0 [ 989.155738][ T31] __x64_sys_sendto+0xde/0x100 [ 989.160566][ T31] do_syscall_64+0xe2/0xf80 [ 989.165081][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.171291][ T31] ? clear_bhb_loop+0x60/0xb0 [ 989.175996][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.182296][ T31] RIP: 0033:0x7ffa63b5b78e [ 989.186807][ T31] RSP: 002b:00007ffdda923c18 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 989.195502][ T31] RAX: ffffffffffffffda RBX: 00005555582bc500 RCX: 00007ffa63b5b78e [ 989.203637][ T31] RDX: 0000000000000020 RSI: 00007ffa64944670 RDI: 0000000000000005 [ 989.216262][ T31] RBP: 0000000000000001 R08: 00007ffdda923c94 R09: 000000000000000c [ 989.225344][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 989.233546][ T31] R13: 00007ffdda923ce8 R14: 00007ffa64944670 R15: 0000000000000000 [ 989.242243][ T31] [ 989.245321][ T31] INFO: task syz.2.6034:30328 blocked for more than 144 seconds. [ 989.259770][ T31] Not tainted syzkaller #0 [ 989.265860][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 989.274774][ T31] task:syz.2.6034 state:D stack:26200 pid:30328 tgid:30327 ppid:29549 task_flags:0x480140 flags:0x00080002 [ 989.287278][ T31] Call Trace: [ 989.290781][ T31] [ 989.293729][ T31] __schedule+0x14ea/0x5050 [ 989.298446][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 989.303496][ T31] ? __pfx___schedule+0x10/0x10 [ 989.308449][ T31] ? schedule+0x90/0x360 [ 989.312709][ T31] schedule+0x164/0x360 [ 989.316885][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 989.322496][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 989.328706][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 989.335024][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 989.341210][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 989.347465][ T31] nbd_set_size+0x516/0x6d0 [ 989.352179][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 989.357230][ T31] ? nla_memcpy+0x5b/0xc0 [ 989.361637][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 989.367943][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 989.373699][ T31] ? rcu_is_watching+0x15/0xb0 [ 989.378684][ T31] ? __nla_parse+0x40/0x60 [ 989.383259][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 989.389811][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 989.395396][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 989.401568][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 989.406524][ T31] genl_rcv_msg+0x61c/0x7a0 [ 989.411104][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 989.416165][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 989.422115][ T31] netlink_rcv_skb+0x232/0x4b0 [ 989.426895][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 989.432034][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 989.437591][ T31] ? genl_rcv+0x19/0x40 [ 989.441945][ T31] ? down_read+0x272/0x2e0 [ 989.446389][ T31] ? genl_rcv+0xd/0x40 [ 989.451005][ T31] genl_rcv+0x28/0x40 [ 989.455020][ T31] netlink_unicast+0x80f/0x9b0 [ 989.459984][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 989.465282][ T31] ? netlink_sendmsg+0x650/0xb40 [ 989.471449][ T31] netlink_sendmsg+0x813/0xb40 [ 989.476343][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 989.481779][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 989.487519][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 989.492969][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 989.498341][ T31] ____sys_sendmsg+0xa68/0xad0 [ 989.503134][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 989.508721][ T31] ? import_iovec+0x73/0xa0 [ 989.513329][ T31] ___sys_sendmsg+0x2a5/0x360 [ 989.518103][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 989.523061][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 989.528397][ T31] ? futex_wait+0x29a/0x380 [ 989.532936][ T31] ? __fget_files+0x2a/0x420 [ 989.537509][ T31] ? __fget_files+0x3a0/0x420 [ 989.542274][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 989.547233][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 989.552879][ T31] ? rcu_is_watching+0x15/0xb0 [ 989.557661][ T31] do_syscall_64+0xe2/0xf80 [ 989.562331][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.568643][ T31] ? trace_irq_disable+0x37/0x100 [ 989.574611][ T31] ? clear_bhb_loop+0x60/0xb0 [ 989.579400][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.585311][ T31] RIP: 0033:0x7f137939aeb9 [ 989.590054][ T31] RSP: 002b:00007f137a273028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 989.598526][ T31] RAX: ffffffffffffffda RBX: 00007f1379615fa0 RCX: 00007f137939aeb9 [ 989.606489][ T31] RDX: 0000000000000080 RSI: 0000200000000600 RDI: 0000000000000007 [ 989.614528][ T31] RBP: 00007f1379408c1f R08: 0000000000000000 R09: 0000000000000000 [ 989.622675][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 989.630812][ T31] R13: 00007f1379616038 R14: 00007f1379615fa0 R15: 00007ffff1660f48 [ 989.638855][ T31] [ 989.641872][ T31] INFO: task syz.4.6036:30334 blocked for more than 144 seconds. [ 989.649813][ T31] Not tainted syzkaller #0 [ 989.654758][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 989.663489][ T31] task:syz.4.6036 state:D stack:27840 pid:30334 tgid:30333 ppid:29983 task_flags:0x400140 flags:0x00080002 [ 989.676283][ T31] Call Trace: [ 989.679772][ T31] [ 989.682747][ T31] __schedule+0x14ea/0x5050 [ 989.687254][ T31] ? __pfx___schedule+0x10/0x10 [ 989.692664][ T31] ? schedule+0x90/0x360 [ 989.697171][ T31] schedule+0x164/0x360 [ 989.701432][ T31] schedule_preempt_disabled+0x13/0x30 [ 989.707011][ T31] __mutex_lock+0x7fe/0x1300 [ 989.711714][ T31] ? __mutex_lock+0x5ac/0x1300 [ 989.716593][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 989.721359][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 989.726400][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 989.731639][ T31] ? radix_tree_lookup+0x240/0x290 [ 989.736775][ T31] genl_rcv_msg+0x10b/0x7a0 [ 989.741352][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 989.746405][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 989.751578][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 989.756968][ T31] netlink_rcv_skb+0x232/0x4b0 [ 989.761802][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 989.766875][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 989.772437][ T31] ? genl_rcv+0x19/0x40 [ 989.777501][ T31] ? down_read+0x272/0x2e0 [ 989.782038][ T31] ? genl_rcv+0xd/0x40 [ 989.786170][ T31] genl_rcv+0x28/0x40 [ 989.790321][ T31] netlink_unicast+0x80f/0x9b0 [ 989.795139][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 989.800545][ T31] ? netlink_sendmsg+0x650/0xb40 [ 989.805542][ T31] ? skb_put+0x11b/0x210 [ 989.809850][ T31] netlink_sendmsg+0x813/0xb40 [ 989.814729][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 989.820106][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 989.825054][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 989.830532][ T31] __sys_sendto+0x709/0x7a0 [ 989.835055][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 989.840173][ T31] ? exc_page_fault+0x6a/0xc0 [ 989.844921][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 989.851029][ T31] __x64_sys_sendto+0xde/0x100 [ 989.855823][ T31] do_syscall_64+0xe2/0xf80 [ 989.860374][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.866436][ T31] ? trace_irq_disable+0x37/0x100 [ 989.871712][ T31] ? clear_bhb_loop+0x60/0xb0 [ 989.876402][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.883244][ T31] RIP: 0033:0x7f39d295b78e [ 989.887673][ T31] RSP: 002b:00007f39d37a0e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 989.896650][ T31] RAX: ffffffffffffffda RBX: 00007f39d37a26c0 RCX: 00007f39d295b78e [ 989.905429][ T31] RDX: 0000000000000024 RSI: 00007f39d37a1000 RDI: 0000000000000005 [ 989.914226][ T31] RBP: 0000000000000000 R08: 00007f39d37a0f04 R09: 000000000000000c [ 989.922455][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 989.930841][ T31] R13: 00007f39d37a0f58 R14: 00007f39d37a1000 R15: 0000000000000000 [ 989.938929][ T31] [ 989.941960][ T31] INFO: task syz.1.6041:30352 blocked for more than 144 seconds. [ 989.950038][ T31] Not tainted syzkaller #0 [ 989.954997][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 989.963783][ T31] task:syz.1.6041 state:D stack:24296 pid:30352 tgid:30351 ppid:19240 task_flags:0x400140 flags:0x00080002 [ 989.975769][ T31] Call Trace: [ 989.979145][ T31] [ 989.982957][ T31] __schedule+0x14ea/0x5050 [ 989.987498][ T31] ? __pfx___schedule+0x10/0x10 [ 989.992499][ T31] ? schedule+0x90/0x360 [ 989.996980][ T31] schedule+0x164/0x360 [ 990.001248][ T31] schedule_preempt_disabled+0x13/0x30 [ 990.006729][ T31] __mutex_lock+0x7fe/0x1300 [ 990.011783][ T31] ? __mutex_lock+0x5ac/0x1300 [ 990.016590][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 990.021341][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 990.026378][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 990.031788][ T31] ? radix_tree_lookup+0x240/0x290 [ 990.036929][ T31] genl_rcv_msg+0x10b/0x7a0 [ 990.041528][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 990.046568][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 990.051702][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 990.057107][ T31] netlink_rcv_skb+0x232/0x4b0 [ 990.061944][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 990.066978][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 990.072447][ T31] ? genl_rcv+0x19/0x40 [ 990.076635][ T31] ? down_read+0x272/0x2e0 [ 990.081137][ T31] ? genl_rcv+0xd/0x40 [ 990.086285][ T31] genl_rcv+0x28/0x40 [ 990.090809][ T31] netlink_unicast+0x80f/0x9b0 [ 990.095649][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 990.101126][ T31] ? netlink_sendmsg+0x650/0xb40 [ 990.106080][ T31] ? skb_put+0x11b/0x210 [ 990.110491][ T31] netlink_sendmsg+0x813/0xb40 [ 990.115285][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 990.120766][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 990.125716][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 990.131090][ T31] __sys_sendto+0x709/0x7a0 [ 990.135698][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 990.140838][ T31] ? exc_page_fault+0x6a/0xc0 [ 990.145535][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 990.150999][ T31] __x64_sys_sendto+0xde/0x100 [ 990.155786][ T31] do_syscall_64+0xe2/0xf80 [ 990.160356][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.166434][ T31] ? trace_irq_disable+0x37/0x100 [ 990.171786][ T31] ? clear_bhb_loop+0x60/0xb0 [ 990.176528][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.182521][ T31] RIP: 0033:0x7f8bc875b78e [ 990.188098][ T31] RSP: 002b:00007f8bc956ee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 990.196639][ T31] RAX: ffffffffffffffda RBX: 00007f8bc95706c0 RCX: 00007f8bc875b78e [ 990.204913][ T31] RDX: 0000000000000024 RSI: 00007f8bc956f000 RDI: 0000000000000011 [ 990.213045][ T31] RBP: 0000000000000000 R08: 00007f8bc956ef04 R09: 000000000000000c [ 990.221334][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 990.229872][ T31] R13: 00007f8bc956ef58 R14: 00007f8bc956f000 R15: 0000000000000000 [ 990.238081][ T31] [ 990.241136][ T31] INFO: task syz.3.6043:30358 blocked for more than 145 seconds. [ 990.249281][ T31] Not tainted syzkaller #0 [ 990.254229][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 990.263075][ T31] task:syz.3.6043 state:D stack:27608 pid:30358 tgid:30357 ppid:18074 task_flags:0x400040 flags:0x00080002 [ 990.275372][ T31] Call Trace: [ 990.278824][ T31] [ 990.281776][ T31] __schedule+0x14ea/0x5050 [ 990.286284][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 990.292341][ T31] ? __pfx___schedule+0x10/0x10 [ 990.297221][ T31] ? schedule+0x90/0x360 [ 990.301574][ T31] schedule+0x164/0x360 [ 990.305742][ T31] schedule_preempt_disabled+0x13/0x30 [ 990.311393][ T31] __mutex_lock+0x7fe/0x1300 [ 990.316000][ T31] ? __mutex_lock+0x5ac/0x1300 [ 990.320889][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 990.325678][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 990.330789][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 990.337140][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 990.342263][ T31] ? radix_tree_lookup+0x240/0x290 [ 990.347485][ T31] genl_rcv_msg+0x10b/0x7a0 [ 990.352179][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 990.357223][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 990.362266][ T31] netlink_rcv_skb+0x232/0x4b0 [ 990.367041][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 990.372135][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 990.377437][ T31] ? genl_rcv+0x19/0x40 [ 990.381706][ T31] ? down_read+0x272/0x2e0 [ 990.386143][ T31] ? genl_rcv+0xd/0x40 [ 990.390420][ T31] genl_rcv+0x28/0x40 [ 990.395271][ T31] netlink_unicast+0x80f/0x9b0 [ 990.400140][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 990.405429][ T31] ? netlink_sendmsg+0x650/0xb40 [ 990.410948][ T31] ? skb_put+0x11b/0x210 [ 990.415675][ T31] netlink_sendmsg+0x813/0xb40 [ 990.420834][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 990.426408][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 990.431702][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 990.437010][ T31] __sys_sendto+0x709/0x7a0 [ 990.441815][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 990.446974][ T31] ? exc_page_fault+0x6a/0xc0 [ 990.452432][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 990.457925][ T31] __x64_sys_sendto+0xde/0x100 [ 990.462815][ T31] do_syscall_64+0xe2/0xf80 [ 990.467339][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.473674][ T31] ? trace_irq_disable+0x37/0x100 [ 990.478783][ T31] ? clear_bhb_loop+0x60/0xb0 [ 990.483482][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.489722][ T31] RIP: 0033:0x7f735235b78e [ 990.495218][ T31] RSP: 002b:00007f73532d5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 990.503722][ T31] RAX: ffffffffffffffda RBX: 00007f73532d76c0 RCX: 00007f735235b78e [ 990.511857][ T31] RDX: 0000000000000020 RSI: 00007f73532d6000 RDI: 0000000000000008 [ 990.520037][ T31] RBP: 0000000000000000 R08: 00007f73532d5f04 R09: 000000000000000c [ 990.528688][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 990.536667][ T31] R13: 00007f73532d5f58 R14: 00007f73532d6000 R15: 0000000000000000 [ 990.544838][ T31] [ 990.548053][ T31] [ 990.548053][ T31] Showing all locks held in the system: [ 990.555856][ T31] 1 lock held by khungtaskd/31: [ 990.560962][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 990.571035][ T31] 2 locks held by dhcpcd/5483: [ 990.575805][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 990.584352][ T31] #1: ffffffff8fa19908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 990.593400][ T31] 2 locks held by getty/5580: [ 990.599254][ T31] #0: ffff88814e77d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 990.609097][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 990.619273][ T31] 1 lock held by udevd/24791: [ 990.624115][ T31] #0: ffff88804ad69358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 990.633975][ T31] 2 locks held by syz-executor/30186: [ 990.639487][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 990.647750][ T31] #1: ffffffff8fa19908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 990.656788][ T31] 6 locks held by syz.2.6034/30328: [ 990.662216][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 990.670523][ T31] #1: ffffffff8fa19908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 990.679558][ T31] #2: ffff88805db35278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 990.690078][ T31] #3: ffff888028dd6610 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2ba/0x6d0 [ 990.700590][ T31] #4: ffff888028dd5fb0 (&q->q_usage_counter(io)#69){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 990.712733][ T31] #5: ffff888028dd5fe8 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 990.725167][ T31] 2 locks held by syz.4.6036/30334: [ 990.730577][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 990.738860][ T31] #1: ffffffff8fa19908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 990.748168][ T31] 2 locks held by syz.1.6041/30352: [ 990.753450][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 990.761710][ T31] #1: ffffffff8fa19908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 990.770745][ T31] 2 locks held by syz.3.6043/30358: [ 990.775921][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 990.784275][ T31] #1: ffffffff8fa19908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 990.793322][ T31] 2 locks held by syz-executor/30363: [ 990.798752][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 990.808197][ T31] #1: ffffffff8fa19908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 990.817210][ T31] 2 locks held by syz-executor/30366: [ 990.822653][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 990.830889][ T31] #1: ffffffff8fa19908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 990.840643][ T31] 2 locks held by syz-executor/30384: [ 990.846108][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 990.854373][ T31] #1: ffffffff8fa19908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 990.863529][ T31] 2 locks held by syz-executor/30385: [ 990.869041][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 990.877344][ T31] #1: ffffffff8fa19908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 990.886375][ T31] 2 locks held by syz-executor/30401: [ 990.892064][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 990.900368][ T31] #1: ffffffff8fa19908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 990.910281][ T31] 2 locks held by syz-executor/30411: [ 990.915677][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 990.924077][ T31] #1: ffffffff8fa19908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 990.933282][ T31] 2 locks held by syz-executor/30413: [ 990.938966][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 990.947279][ T31] #1: ffffffff8fa19908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 990.956421][ T31] 2 locks held by syz-executor/30429: [ 990.961932][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 990.970366][ T31] #1: ffffffff8fa19908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 990.979468][ T31] 2 locks held by syz-executor/30431: [ 990.984833][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 990.993078][ T31] #1: ffffffff8fa19908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 991.002298][ T31] 2 locks held by syz-executor/30446: [ 991.008939][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 991.017354][ T31] #1: ffffffff8fa19908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 991.026411][ T31] 2 locks held by syz-executor/30456: [ 991.031910][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 991.040161][ T31] #1: ffffffff8fa19908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 991.049234][ T31] 2 locks held by syz-executor/30458: [ 991.054632][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 991.062884][ T31] #1: ffffffff8fa19908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 991.072000][ T31] 2 locks held by syz-executor/30474: [ 991.077381][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 991.085632][ T31] #1: ffffffff8fa19908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 991.094657][ T31] 2 locks held by syz-executor/30476: [ 991.100074][ T31] #0: ffffffff8fa19af0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 991.109591][ T31] #1: ffffffff8fa19908 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 991.118711][ T31] [ 991.121052][ T31] ============================================= [ 991.121052][ T31] [ 991.130005][ T31] NMI backtrace for cpu 1 [ 991.130020][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 991.130040][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 991.130048][ T31] Call Trace: [ 991.130056][ T31] [ 991.130064][ T31] dump_stack_lvl+0xe8/0x150 [ 991.130090][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 991.130110][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 991.130136][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 991.130157][ T31] sys_info+0x135/0x170 [ 991.130172][ T31] watchdog+0xf90/0xfe0 [ 991.130195][ T31] ? watchdog+0x209/0xfe0 [ 991.130218][ T31] kthread+0x726/0x8b0 [ 991.130238][ T31] ? __pfx_watchdog+0x10/0x10 [ 991.130254][ T31] ? __pfx_kthread+0x10/0x10 [ 991.130275][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 991.130294][ T31] ? __pfx_kthread+0x10/0x10 [ 991.130314][ T31] ret_from_fork+0x51b/0xa40 [ 991.130333][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 991.130356][ T31] ? __switch_to+0xc82/0x1410 [ 991.130382][ T31] ? __pfx_kthread+0x10/0x10 [ 991.130402][ T31] ret_from_fork_asm+0x1a/0x30 [ 991.130439][ T31] [ 991.130446][ T31] Sending NMI from CPU 1 to CPUs 0: [ 991.252391][ C0] NMI backtrace for cpu 0 [ 991.252410][ C0] CPU: 0 UID: 0 PID: 8436 Comm: kworker/u8:36 Not tainted syzkaller #0 PREEMPT(full) [ 991.252428][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 991.252439][ C0] Workqueue: events_unbound toggle_allocation_gate [ 991.252462][ C0] RIP: 0010:update_load_avg+0x40/0x21b0 [ 991.252483][ C0] Code: 89 fd 48 bd 00 00 00 00 00 fc ff df 4c 8d b7 e0 01 00 00 4c 89 f0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 5b 1c 00 00 41 f6 06 02 <4c> 89 64 24 10 0f 85 9d 1b 00 00 4d 8d b5 78 01 00 00 4c 89 f0 48 [ 991.252496][ C0] RSP: 0018:ffffc90003a3f570 EFLAGS: 00000046 [ 991.252509][ C0] RAX: 0000000000000000 RBX: ffff8880b863a9f0 RCX: dffffc0000000000 [ 991.252520][ C0] RDX: 0000000000000000 RSI: ffff88804bef0080 RDI: ffff8880b863a9c0 [ 991.252530][ C0] RBP: dffffc0000000000 R08: ffff88804bef0007 R09: 1ffff110097de000 [ 991.252541][ C0] R10: dffffc0000000000 R11: ffffed10097de001 R12: ffff88804bef0080 [ 991.252552][ C0] R13: ffff8880b863a9c0 R14: ffff8880b863aba0 R15: ffff88804bef0080 [ 991.252564][ C0] FS: 0000000000000000(0000) GS:ffff8881256ea000(0000) knlGS:0000000000000000 [ 991.252576][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 991.252587][ C0] CR2: 00007fd34a0280e5 CR3: 000000000e346000 CR4: 00000000003526f0 [ 991.252601][ C0] Call Trace: [ 991.252610][ C0] [ 991.252624][ C0] dequeue_entities+0x32c3/0x3850 [ 991.252646][ C0] ? rcu_is_watching+0x15/0xb0 [ 991.252666][ C0] dequeue_task_fair+0x1fd/0x760 [ 991.252684][ C0] __schedule+0x676/0x5050 [ 991.252702][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 991.252726][ C0] ? static_key_enable+0x1a/0x20 [ 991.252747][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 991.252764][ C0] ? __pfx___schedule+0x10/0x10 [ 991.252792][ C0] ? schedule+0x90/0x360 [ 991.252810][ C0] schedule+0x164/0x360 [ 991.252827][ C0] toggle_allocation_gate+0x17c/0x290 [ 991.252843][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 991.252859][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 991.252879][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 991.252898][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 991.252917][ C0] process_scheduled_works+0xaec/0x17a0 [ 991.252949][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 991.252966][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 991.252983][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 991.252997][ C0] ? schedule+0x90/0x360 [ 991.253017][ C0] worker_thread+0xda6/0x1360 [ 991.253048][ C0] kthread+0x726/0x8b0 [ 991.253065][ C0] ? __pfx_worker_thread+0x10/0x10 [ 991.253083][ C0] ? __pfx_kthread+0x10/0x10 [ 991.253100][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 991.253116][ C0] ? __pfx_kthread+0x10/0x10 [ 991.253131][ C0] ret_from_fork+0x51b/0xa40 [ 991.253147][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 991.253165][ C0] ? __switch_to+0xc82/0x1410 [ 991.253185][ C0] ? __pfx_kthread+0x10/0x10 [ 991.253201][ C0] ret_from_fork_asm+0x1a/0x30 [ 991.253226][ C0] [ 991.546042][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 991.552923][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 991.562211][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 991.572797][ T31] Call Trace: [ 991.576076][ T31] [ 991.579045][ T31] vpanic+0x1e0/0x670 [ 991.583025][ T31] panic+0xc5/0xd0 [ 991.586754][ T31] ? __pfx_panic+0x10/0x10 [ 991.591276][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 991.596788][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 991.603194][ T31] watchdog+0xfda/0xfe0 [ 991.607613][ T31] ? watchdog+0x209/0xfe0 [ 991.611984][ T31] kthread+0x726/0x8b0 [ 991.616166][ T31] ? __pfx_watchdog+0x10/0x10 [ 991.620845][ T31] ? __pfx_kthread+0x10/0x10 [ 991.625433][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 991.630616][ T31] ? __pfx_kthread+0x10/0x10 [ 991.635199][ T31] ret_from_fork+0x51b/0xa40 [ 991.639878][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 991.645502][ T31] ? __switch_to+0xc82/0x1410 [ 991.650172][ T31] ? __pfx_kthread+0x10/0x10 [ 991.654753][ T31] ret_from_fork_asm+0x1a/0x30 [ 991.659517][ T31] [ 991.663287][ T31] Kernel Offset: disabled [ 991.669112][ T31] Rebooting in 86400 seconds..