last executing test programs: 19.555839816s ago: executing program 4 (id=4432): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f00000003c0)=""/67, &(0x7f0000000000)=0x43) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/436], 0x1fc}}, 0x0) 19.555019415s ago: executing program 2 (id=4433): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r2, 0x609, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x4) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x70bd25, 0x25dfdbf8, {0xc}}, 0x14}}, 0x4000000) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x10, &(0x7f00000000c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000740)="836a7f89a29f36eb8e4fe49dc5ffe59fddd42faf4c6f59d988569f0a7a01ba051faa21fad5456d514be37095ed5011a1d88cb41028fc8fc1c2ea5728d7238840f39b5dc139c24fd8d2a47068414030786ad45a48be9b267c6a18bd8872e950d3eb08a0d99f7cf48aa844cae206dce3ccff82e886929ee00122650e370e502891b5d6c371606782bc7deb59cc75f7a7820bde126a6258800f2145f7e458f0c8c81de57366be53f7cb5a4daf1618e25548c72fc00858182b0350750cd4a47be8366879a23eda5c5aae3f91c0db24bb71a97b0e9e10a74125b58d0a941311941de1cd1670ce327732e72ffd0300000000000000b89af9e9e67d90f69d57a81d6c10ec123ddbcc6ef04838a8f7a387", 0x10d}, {&(0x7f0000000640)="9c945b737c926f45fb6b320f984639d4d02d568356ac22b3bea0815ca0d1f2e71b538a612a0938b0d534d8aa92463ba6245d956f60f188a0f628190c5b80bb88b3748fa1537a7d17d61de971c0742dba2132b0862993c10f76e4c4fb566f6f3ce04d36b8a3dd177b91781698748776718c67803ffa4992b4c225be8f0fb6c999282e37ae93871900f31e62fe6aeb23dc4441080393be81fdb5ee4b30e2b680aa569d54ac2a0498570f5b373b08efc45a5384cf1f4c50223cb8260094f22cc9a06496a7ce08fab19c", 0xc8}, {&(0x7f00000003c0)="40773368775115db92d037417a", 0xd}], 0x3) close(0x4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000006840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) close(0x3) 19.539425213s ago: executing program 0 (id=4434): r0 = socket(0x2, 0x2, 0x1) bind$can_j1939(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001800010000000008000000001d010000"], 0x14}}, 0x49080) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, &(0x7f00000003c0)={@val={0x1c}, @val={0x0, 0x5, 0x0, 0x300}, @ipv6=@udp={0x0, 0x6, '\'\vB', 0x18, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @local}, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}, 0x4e) (async) write$tun(r6, &(0x7f00000003c0)={@val={0x1c}, @val={0x0, 0x5, 0x0, 0x300}, @ipv6=@udp={0x0, 0x6, '\'\vB', 0x18, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @local}, {[], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}, 0x4e) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000080)={0x2, 0x4e29, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) bind$rds(r7, &(0x7f0000000080)={0x2, 0x4e29, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) (async) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r2}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r2}) getpeername$unix(r9, &(0x7f0000000300)=@abs, &(0x7f00000000c0)=0x6e) (async) getpeername$unix(r9, &(0x7f0000000300)=@abs, &(0x7f00000000c0)=0x6e) bind$l2tp(r8, &(0x7f0000000080)={0x2, 0x0, @local, 0x1}, 0x10) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r10, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) sendto$inet(r10, 0x0, 0x0, 0x200040d1, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r7, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) r11 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETVIFCNT(r11, 0x89e0, &(0x7f0000000240)) (async) ioctl$SIOCGETVIFCNT(r11, 0x89e0, &(0x7f0000000240)) sendto$inet(r11, &(0x7f00000004c0)="ad4a3386b9f580c3e4f4934a5237491b0554b2d08e6ff964e9915bf89f0008b2f0e916fb9b96d1dd24ef264d45bca14eddf40e6c2a8adfbeb20479d3d357d2ba223e77857b95517e307ad14fc31a5016f3d10049e3be3fc8a3e3c28b56fec92132ec98e3c803909d03b476ca3177fce6bbe61f3ea12a16cce441467eb8318c494869c611b7327043f67e227012cecff2c87cbb828309641c6c1fae", 0x9b, 0x4040010, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES16=r3, @ANYRES8=r1], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 19.455458058s ago: executing program 4 (id=4436): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socketpair(0x2b, 0x100007, 0x5, 0x0) r4 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r4, 0x40106183, &(0x7f0000000000)) close(r3) close(r0) r5 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r5, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xfffffeeb, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x4d, 0x0, &(0x7f00000000c0)) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) r8 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f0000000080), 0x4) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r9, 0x0, 0xd, &(0x7f00000001c0)="01", 0x1) setsockopt$inet_opts(r9, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) getsockopt$inet_opts(r9, 0x0, 0x9, &(0x7f0000000680)=""/17, &(0x7f00000000c0)=0x11) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000040)=0x400, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x18, &(0x7f0000001880)=[{&(0x7f0000000200)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6f911b51430437121d3ca7", 0x2a}], 0x1}, 0x20008060) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)=@ax25={{0x3, @default, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000100)="9cccbedb546210a16a1ef2c9a1ccf6e7bdc9f7b67793cf1be249df2cbe6a9ebad75e2919d08ee37d8b07594d2ca5a00dc9cda251e73b77b89edda0d61f6a8523f588d015835720a0c15e196edebb13ff70969ce1ff0efaaffa31e045c4401c53878950935341b96d7d4aa7968308744338384c7b1832d0594f4412253e386c93", 0x80}, {&(0x7f0000000180)="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", 0xfe}, {&(0x7f0000000280)="cf1dd7574e2d27309bf48da838a7665e68ac853247a90fe044e2b6997c6898817bd89c4389bcb110b7bff1c14614dfc3c83edea02c80d9d3cad0e19c2804402c13654beda030eefe88151e4d67d386452002b0415528366caef1257f83eb7a48299da7f576c44d3f21f38a44e02f14743e92f19af67800d68243c39c0ac5f1c7aa23c7e8660c0c9fd3e03186ba7b659862", 0x91}, {&(0x7f0000000340)="2945fa3887af133c3758cc684dc05232dd55805aa0568eac34ddba0c22e1b2565f5185e63f7ca80bcf5b768e9826e00d8d61c27f4a07165d3038a24c9e9e25b7604ef04620ee9fd9b1f0bc9736470c1462412935aa07b839a88c9328bd026f7be9aee69aa95cfa7ae5c6704e747831650de54ea8e66ca186d4953d3acd47d57534ee03479a2017823109bce9b6894d46906017ed9b58e1272f184a978f7587967569027651d413784a97a7320482ac5bead3175cdb3e1419d47580595fe3be9a32b3552c36f5a884356529eb3bda79c992722ecae1c756e844ffbc33e7f4c10ff6", 0xe1}], 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x404c095) socket$nl_route(0x10, 0x3, 0x0) 19.363527938s ago: executing program 2 (id=4438): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0c01000019002907000000000000000000000000000000000000000000000000001fa81cde34f132ba00000000020000001800"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000002000000000000001fffffffffffffff020000000000000000000000000000000000000000000000feffffffffffffffffffffffffffffff00000000000000000000000000000000000000000000000001000003000000000c0015005b073500de030000480003006465666c61746500"/196], 0x10c}}, 0x8000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) 19.213233369s ago: executing program 0 (id=4441): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x3, 0x1, 0x1, 0x8}, @call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r6], 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x6}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x4}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) 19.168226026s ago: executing program 2 (id=4442): r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x800803fc) (async) listen(r0, 0x800803fc) shutdown(r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x310000, 0x1000, 0x4, 0x3}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000200)={0x2c, 0x1, r3, 0x25, r1}, 0x10) (async) bind$xdp(r1, &(0x7f0000000200)={0x2c, 0x1, r3, 0x25, r1}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0x10, 0x2, 0x4) (async) r6 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r6, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r6, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000000)="48000000140081fb7059ae08060c04000aff0f0300000400003a000000006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000340)={0x0, 0x0, 0x3}, 0x8) setsockopt$inet_int(r4, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_mreq(r4, 0x0, 0x7, &(0x7f00000000c0)={@private=0x2a010102, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8) recvmmsg(r4, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x102}], 0x1, 0x45833af96e4b38bf, 0x0) 18.952487348s ago: executing program 1 (id=4443): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYRES32], &(0x7f0000000480)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00}, 0x94) 18.887770169s ago: executing program 1 (id=4445): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, r2, 0x25, 0x0, @void}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000280)={r3, r4, 0x4, r0}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) listen(r6, 0x0) r7 = accept(r6, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r7}, 0x47) ppoll(&(0x7f0000000000)=[{r7, 0x2420}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0792e3000000000000000000000000007a6f3d1a10895f1f1b6b33df12c7b18d65a1ceb5274eaf42521c7ec3f92f655d6555b73c77a0bbff76fda0c370b2b426aebd884a68029776c6b67fa1cd12c7dc5655ad4b39f397f2cef964bb503b1facbd60eff7e958aef8dba9c20c91f64cf869588faf166dc1253349fce830eb7d34d6206fdf956307c851ee8fc49f715f696a92703a865ae5131dd03b7433c5a12f9f656285e34adcc0f9b6509972157461122a1a76533338a034e15c2e24b1c331b240ce0689935721868d612fd6e3bce7e39ccbc065e8432470d61c5e2adb24819b62daa898cb7043f38fbd430572a22a014b1938ab67f79ed9a8ae162a774b0301b341723cd714021b6547a1aa193a014aaefa9e8e33ce7bd52de1a2a8f1cf2359503634bca7a96670d30510723939730fc7f09e7223a3709f052e3119895060af1656c8a50db4652229af68f6dceb1332a9c7b0ba6cd34b16cd29b492d3006a19ff183077", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000010000601001000038c7c8b8a63ad37941915fadeb2bb5a123125ef468008c1e11a8c8a3f766e8a491359256f4c296c34c94aa412cdd25df0874e6ecd6f6bc3992b24538fc94a0b9"], 0x80}, 0x1, 0x0, 0x0, 0x48894}, 0x400c0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r10 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGSKNS(r10, 0x894c, &(0x7f0000000080)=0x10000) 18.637686821s ago: executing program 0 (id=4448): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001280), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="ff45211a4ef490d855ba2353246f2a2661f01bda83cc32e131ef488506f62f8b3b26093aa56c29b92c00e13f12527cd0df6c3f05932b269b92c84215610624d5a0b6c447465037df0f293bb7fb9a95dd7752dcc79e2ccd5308d7484e8ed2583f4e9300236dfd9f9e87b62a4f177e4d180a3453bdb0b6b050968f31c296771fd59dd76d89d8d020b28efb", 0x8a}, {&(0x7f0000000340)="4eb73060d6b0cb762acf6a4dceb6d735ccc48191c05c6e585d5870c69c6120c738f7861f8ed43f2d012c2cf351e8c6783e95b08d621c48a80c39f49748a316b6189ec1ce24ddf99b9a380857b5c9524bec7ea7474c24a470adc4c64a864be51b260fe884e1a1419f62d3a15321d6cd", 0x6f}, {&(0x7f0000000600)="b0be06acbab60060f8efa9c1e79a5a5434115dbad74359e0fe131f199e27a593054fef2999d000a0eae9672a6e82c4154e17fb66154aea7a80cf44d83d5eb3361cc32f766bb625fc993a2158331867f14cdc02e6a7eec57814bf236049e2be5957994105356efeadf4da6937d989538b1b4ddb235825eb5f080498dadddaea3759d6282f4aaed03a6f927a41de99e702735cd1720f1e8b", 0x97}], 0x3, &(0x7f0000001380)=[{0xa8, 0x112, 0x2, "572025739ec6833f7941dbf107434446c7bf9a43ed2b31bce58590b7c8285b9d7c9416f9acdbe26e2cc3a8189b873bea29862b16e969deadce12a0cecda330e53fdc2cb096f8e697b485194b873ea3192e2fb38a49999921dc8cec98c18be2cc876f9a24be46b757838eda289abbd62630f39949f07b3b7b44fad62758a34e4363e6455b5b623ec8657c792165d6ceaf954a68f7"}, {0x1010, 0x10d, 0x6, "7a944c6a4f3299da69fe51a9dabe07036a6f9599f2f192fe1c349b7f9ecdcfe27785b90de5ba47b41c8901a1dfdfe323ee3dcfb8dfc6415616c8c54ea48b09e5d8ed3057ba16c5162ec376d56bcd37d58fa3e5bdbda3292119b860556b81805cb2932410c0c0b972af3284ee797c760ed1cd4b991b409a4368b4c45f38cba35680d463d2a9c2fc7b184e3344668f3c0ca505a3e27db572f5c4c2faa6dda4e5e6c91d1dcad02fa354fc5b6aac97fe65aebdcc81499add489a11728c872450e6fbb9e8158473b8505f22f9889bc617102f7ed0c1248ab6fdd81fcf3c2c8de0391f51325d9998f57d8048dffd1e4db3112c901451fa2169b1fb7320420e2f422e1197e3ab177ad86de422e5020cbb1a753dc3d4c0e41a0d3845941fffb1a2ca68c9eb05c9eacd034e4cd55f8e7c7db1ede9809e2b4d1235aa714eec89a18bc9460d917101e507f7c1a86b60b33fce74d0e12336a166737d453c81e4e8726ea6ef9008a80bd70a9aa50fc8077ed86a2aa5e0a695527d675902bfa71d3032e254e5ade85a20d7b4681bbe9c8da023683c637e335bbe9a2c80eb2bc5c61e6eb3f9097eeb3eeca655da87e504e24e6dfcfea07d7044006631661637ab1c81de4a5e81a428fea77351de218e61d10cd0754f82a3e03f79cd4c9b13eedcb60f8248a1f97e5b4278d9bf12f1e702a5fa5316f7bfe7ed64d22c663b2662c0240caeb54699a8e1152e9d825f0cca2aa3d3cd58c8dc4fee24d044d905bb396c928027ca02d2cdc051aee97ed6e45f7588b948a21d05e40de6dbf142715292b0bca5e9d8e0efb64efc184cb2e90359069855814a517b0e93990356714ad80849a47b7a93356a4a766fa0f0980c57af3bd38dc23176aa5a009e42fdc89c98c24464871ca6390c1d665fa33838ae0e1e48a9be1011c577d4ebb713009ef6be318661dc45af71223b6b64b278b0f19619ef3c9b8a3bebce9821d0fca9497ffba09d6438b9ef7c5b53119454c026ebd8c56a2f0bfb5ac06c53717498c3b3eb2289432531459b18a503774412228f48162b3c10fa761184ae9e83ff24f68f3207b6aafd4bd8f8fcde88040a2ea25b0a8f22be2ad0a3ad1af45674625fc97acaf91d3db62bf71e3fc4953703a843fc2965dd33f52d463edb31519d8176399f7baf032fb2b54629db3c57166a7f73e6bff29a71aedaf29ce90c7fcb9ff739b564e5777a49a784c3786212f23fb17d2fde2ffaee4cb0379509722d1f3654bafed151eccf3a85308c993f955fc988100117e96e22d2e104cd94238dbc91adb66de2205d0bd24b4ada58d30845ed9c1bf7609f2a9239a1abb97f5345710cca25f6f62e17fdd7ae0a302b7bd6412ca70644ef8ec4a81c3da3e4955d01e96411bb1a28ab80e39b62ed4f406e55ae914b4d2bcfaabf17e3499981fe96d95e35de3ea27b74dcf25b7eae6f1a0299dd70a57ad017170b99f86a48d6987a4ecc0470600971423b3f40081b022fbe1d551cd5b0a89b595aef4986a047a0e2a5d5b0d0f5de0f174294427776e838598d93165b354b9163b1a92a06cb3de9c32abbe896e5af0d22b3be7d5d90383692ed95fa3c7999c12f0f1b4e16004d9fc75037c2838a83ea179b8d6e737b3967d6327fce1fd291e230c7748883274d927d4c7b3bbbca8153a9992ac7bcb9e5bd4a718ad4de5f9f713c26f66053959b566666a148430d65d068e8cf0db435e023cac9b512fd63324da669eb8b9adf80da857b74832a70a3dcb2d3282f38e3ddf1b2c4618c9c496a2947f429a2ac73b2c714590cc192ea43ea013021f328f80ba439023d10ae8f30389463188ee5ba993db3246ada19eff9cbb8b570d2b25ac532ec8be221c5974ce137ac6a4a3b62db6f822f91eddf899cca259c80208e21b9eca459e9e8d3603df53b54528eb988fb97d6dd8cb70deb6853480daef502fec81c71c734ea8bf1f03f2fe1dd8f210baa2d8c0650f5c3b74492df6cc54645353f1135ff54df0580b4e9c84a90bab5b1576bb874b4f508bf4e40e65f7a29ceac038ae993b7faafa18a74ee1b4705ba58a3f13d1510810e94c385e9b66f9de5170efd6859a552c672ec94cb57348044493f5251ea0009ccfb35833a75a470bb2679c070e445fc932b878c4ad4a509340677007f6f560e420a2c8a8652c675ec86cb86cf5946a9dd894be315936ac39ee2775ee9ab0f0836a4865e50923ac79816e51413f45111e15dde888f60d1ad7596ef2333d5eff4dddfbff7621b48cd378ba24ac430c1dd3a0b58468a3c80cab9101f4fc5028ec82775dbb2d12db0d13d28a3fe30b44d3232dd027f5fe105193dd996426a3ecca54b9463337a6f21e6aa233a694ae22325a66c539dedceb54be78cd622b60bb025d5e490cb2c5c8d08319de9b0f84b8b0f2b5450b1f18f8980f50c95c6b4a47b4ee05eafac27ad99a595f28e35dfd2104dfba756f3940404869e32b6d64ea01b29dd495d033058c5a7fc7eb11585d0b820dc5ede654baffd279809b9f60deb2000c7157f3125759c61c319c3c2710944346de27b68b17cb31a0b87dc32ec71a289b7425ab3cce5a11ff87e0641289ebd0c6b68f22cc83b1ed5a619f16a9088787b82843a905bb8900a915388a2e794628c3d480807ec8cbdf440ea52b7a3d0f253c77ef55a77ab30a9c2c5b4595203133d5857ae7016eabb968bd66556229b8e66212ca9ba35cfb4b773030b83ce4d5f923c97769be0e5b95d498692bd99dbcf02af4236783a6eee446da0797a7b9ff4838613d9cb207eeb46902c34c08d850398fa93a798bfa0848c7ebe28078ee98e0740d09ede8e053cbbb040201b3b2fc8d3053f3a355f5a4b4abbde43ecd5a37f21aa9132254ec1137b5953ea698a39c6c1df2a9ec4c5c6d9ccd49c93a28ac4e5cfa251896d4d6d7a57ba660b00d8828b53c83167651e211a98311985458c92c368fca3d7250b0165e56837d1572b29a88a07a0ec2da26cabd9fc1fd9624fd6840ba70910856501c2c510085307113da3a49769d28f5ab201a97a0c702211ea7acfdd12620bede26ece8b3a249e05610b49e2deb6fe0350b154ac70eb784a73ad6fc4ffb5391b067d294e62263e58be413d71fc8fd8b628b2f1e8ecd056ee5ab80a0d0889c1b5bb38a8558df03f7c0a671bf962c5abf9d050286e342a6574dab73675fd13067ac4bac265150093465b8eda9ba304184dafebe7dfebaa6afe5f556e3f58dd280415a633d79200f9f886c855063a5d5e82dcc944194304e3b51649f11630dc8f534f46ced96a6247470513c62e51feb11be612104a499bebd3e8d086fa1e24fc6923a7b9cae8efd3e5a7bca0b259a7087dd1a962641a4d5628e44984e8e60637dca09444e3b516e64d70d74c20273b36fa026385ded4cac5105672108713d2840b0dcd0c31573e5d93b374321237c62ef08e01674d927c4c3dc36d76b1d50b7f3a2226586d9edb7b01c2ef2ff3ff9011f1ab100e7dd6050ed3ba4a7f857a047b64741cf3db3ba37427e1ae80890362016de564fb6d09e742429047c073a7d3db96b566dbffd48a4d010341d8631fb748d62e7c2dc57098cee0a6edcb71113fe4fe070d346d72a84346ce6105b176d01796f25a13d3500c7c99ec0a4e68e0067ddd6d225a714e039268b9ae4485bec99b30d8dbc58d0271f131d60d5397cc308cb657a1c3516a65d71b9cbbd5c635548456b56d63970ed4c57765c96632e47ff6ca904c02b54e84d890efa629af87aacbfdb56d68e07657a0aa333f7a9daa9588a375591eebead4a2489ba93a42ef78f1a526a6fe25b69dcaf0571c70d6ea5dd12f55746a9f1fe9a876e54d75179d02adece6fc227846002b5286ce97390484f612b3702116d1dd164c765fe1e9580a5e2e661d97ff4c5db45fa2b08c92eb0e50e4dcb4f03591a8eca44dd92a9e2aa6d62c4709134cea4dd5c1ae7306d81858d24f5358cb90ecaff18d21e35fc800eaf60cb0f8f6203ec8979effd86f0d3b3786d2ce9bafa0c48f8986010703b02d8b004e2d96918f9cb4786d20f0244198c54460eb9a41da8d95b74cbfb0a8f79be57e3ca23f80aefbd56336710afb2da35d5899fce845f69807cd4b3fbad0a18f4301d294d56545ba3139eed9e1bc598b17fe1b448446d343be9fa6bdf96ecc9c5cb06fb685a36787d6a88a1922a45967ece1144ddf70e7148a8272acf8ceca7df2daa2d8b7d984ed76128cc06a365b1ed5de4e802adfd78e2c4e9b29d2efbf753a7ff876394ff5e197ee6cbe87e7f4bbdc166bfb724fef3ea9f068d3d4c3c4591afedfe6430182b1dee5af12c48bffaaa9e1f8529f77b228664e98b1dd660569294a7e5f61d6a196fa82abd7a068dacc7c4e6a29a3d431c4b3f0784d806173703da56b37c908b98707d219cec17aab830922b5b409956519e9b57caff95343f8e19b72dc1860b1735c765d3a8b21ba367fe38649d7acf2563e1c319876bc72febbf34bf310bc950214a1b9558e23b0a70c216ff4ee46b3494c9af39d1d667a232747d6f60911494534ef75b311903afc2913081179d70dcd5ff14446eee9d9adeb429782b1777fbcd901e83c132ab34973bc6befdb6d2708c5060133e919bd06ead394bbe90a552f2fd781dba4709a54fdddf45194253aca83df8a16f9cad66dac813c11fa98058c0999488544aaad212b4a545451e3206c5955cbfd87dc28015896c7f47418bdb253b8d46648176b8a5f3cfeef8078a77fac47f90bb98ac0e42aabb488c1a3218f79129329da134d81c121811f27ff9a6174ab1ff3f860a4525a3569bfc8557fb2eeaa63efb5d16b9ccb30efcba7a94c6164e99741995422a42d8c947e40f8ebbbeedd1b0a0884f7a9848ec2e6a2b180258c9ba2c0593f503ca75b4f05867de267c1b9bae4c15eff3f6787327138e39fdefd81af265c082b207b65b5479228d2e33096624f411c8d3706853f7fc7a70f86892541a30cb4b9f74a4550415420285942b4e0e2ef43a4d40405171801bd4d14ced5957b49700cf6046d947af4fbac10720ef8adba5331c24fc1cf1b82e1ad900f7b4640540e28a0fccd220c2dd6d0977ee6153534e3fafee0a617f2d44ca6ea01efe2a655078ca50957b2373e76593e6e190580f2ae459dfa96a727d7b0e1cb80e2e568ec9e6c677fa007c421a9b1794724bde37ef70a4e33538809367a7de500865c4156bb3a95e6498f50a1493f47e410c138a973209ff397b5385372bc9eac662a9b6c7bf5344fefc58cef5b3887f7a569643b04c25a5e5d10589beb97cc1c3d68b3370457e0dbda644bd1e956fc545bbb3b48163fab0301af8df4857f11ff622ed80bb31b482b5178503b5da92328427bcfc6bd5bc618b93a3f87076974f33651fd496a67cc1cdbfc202a4a0282044489a60b846c36090d7e0e5102c90c01b754e79694001c05e6438092019d8791f7b8596a07589c5d68bcfe7a55df959d801afe4ff2eae4d1746100fd297bd5c282cb8617f05b8a83fea9475c7940dd1ef830fe4ac81bf21e36a8a1bfdd3cea64c8672a139ac097b1d4f459a842150bce132245bfa7f962e4fb48fd21f42dd19ed5eda459c14699d1e43810c948c9ec8edd1b7bc26a584b4aa82076db740136b0408f04afb9fcb655d00fed8c8abdad33179962c4e0571d90c71cd8ae1a9e8577802c1e85a3a12210caa50bf51e4bbbe6ec9c558f6bbb6c379880ef85df416def1b6c375d025d9fd7ed371b01bc8335bfca03d40e17f9032168bfc0bd6a6f2b2eae1a125c48aace534f4c3404c929ff03b36ae5af37a4e79bbf54113724e5f9a2640696"}, {0xb8, 0x84, 0x8, "8826acd29bc50d24fea3e1ada9111fa2ae224a7e630942f4c7eee9e98c63bd4a3e4aab57fd14f624e660f717789e43098ab2ec16a5ea517c8b6bb3ee522b836d6d4b66ab09bb383b3abd65d4e0212f78d994f2e3485629baa5d909fbed1c49c8df2ec1817c43ace5664ff1841c778723873706945e0d2a080752e2f1d0f726bc40821896a87ca31b217c565d9530973d0304d1f0fb1759ce2f8a7018d153532c009f"}], 0x1170}, 0x11) (async, rerun: 32) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) (rerun: 32) read(r6, &(0x7f0000000280)=""/187, 0xbb) (async) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000580)=0x7fff, 0x4) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0xe0, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xaf, 0x6, "0f450e561618d85c1ea0e49ff3500a2cb091d1729f8f90f00305eb2707612fe2a67e27dddf14360e2bc3bec1bccab358a660812686605f903bc5b9c20d8c8f58017d6168661024b28bd2b90bbe1dfbf7f01f84be42e4b2acd6508b5387349ba194b3a1366e6d9c0c9072faaf6487bda754af49ce5b3570c369a62543c2b2866a5141e695ba6b208365c97fd0a13b0fa854e8f780afef1c43fc30da05d6ad870c3d820ab07547652afce9b6"}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14}}, 0x144}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) 18.629752757s ago: executing program 2 (id=4449): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000800800"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="07000000a008"], 0x80}}, 0x0) 18.418817866s ago: executing program 2 (id=4451): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0), 0x48) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001780)={r4, r5, 0x4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x8001, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r5}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x51, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x17, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x17, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "51f84227a41c82"}}}}}}}, 0x0) 18.348179314s ago: executing program 3 (id=4452): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf253d00000008000300", @ANYRES32=r3, @ANYBLOB="edd2960a70f6ca7f62abc0a962557b9d6e743d87776041944beb6a00e72b4b7888a6b70fee333166acf7920e4c8005307fbf3a327860ea4803d9e004b26e271760527f56b270ddc652248ba8d8568e0d054fee5f44fef672ff1046d31cefb92a6928eea7bfb02128a4e2193ee75b4d6a2166b90fd53660392a423feac465f02e8038be442a77dd827ea2220b000000425e482a706840cdb849f85b"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000080)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000180)={0x0, 0x0, "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", "d6211322d81728b5a6f22c2dffe4bf6b62083160ca436067c91dd4dcdba8dd0bb6b9f7e1646ff9b30d5bc51da6d9316d9e520493503bd698692a70b25029d6e9c16abcd3f17a68c5fc4485b063f1e8fc29f41ea269fcfa4f0000404c47708b84d710c71b89cd59323812e0c44c9b652f87ed864a57d92276c32699e47e03f3c41982f6e118766e9712961dbeabf488362c807cbe2fa7158ca483c21a240e2072f37d8070cd33a8b476ada50074e5dd5d33b631c67dc7b34fbfa596ffbf30318d7c0e5a15e307f3559dc2b08fdd1f89d51b47030eff9a67b254529b53ec576e9dcbb215dfef6baf0876ffcd79d880362fffe3bb2a2f9ee6ab66a0fe22e5bfd5d3d8df04aca3200a372609ab9daea25a350571393b6a7e879f8e3769369d4bdfc56a17736ca5b6d1addd94841ab97e548c3c95e55779bda14705be617f34f42687e331cc7cece6663bea5840d9d4727c82fc9946add824158bb1f91a02f2122d4f7f3b9a8e60373110a506d46f42edd9e0e33ac2f8f99a4e1cfbdcb9065276748faa4ba1a0bea35b61f3d4f16cbbbe185546bd0aaf98b7e1e79ae9de878fa8ad9a71c3fcd505b008bf4411a7827f19cdb8e3d799df80b2a5e9c36341779d97f5fdacba9ccdb02f11e5ea353e76d76c659955d0e7235f10eb75feefe6d63227194a86dff5f25782d1d8b2995c18a5b361d5a9fff209e3c519e39fd59080981132a1b055fc1f3f1a3ef9f070d09f8a34e67f1d6d1287b686049401fb0755fbd5241bb8b4cbbf6608e05b354242267b1d161d28d7040fa19ef0d10c2be529702ab93490a5151828c4686a51e86c52f32e948aba5bf5693b52f1c988a466c6b13b2152a410bb1ec401d9bb7dde2619e7b27d9058b19c64d1c09ffb2e7ae3b01720f99099db1b2667f34d5b78c0fa5fdf83e413e1afdff2dc943bc58c6387419691a8dabf0390fc2a017ddd2b209a417878a4d68e906565d200ff08c0855eeff30a9ea4c8abf322acd9e4defca4278d1203c77dea3204f3a7d2a5d50c841abc7acb317e1b4cb20099cea8fe0b1bae91cabb5d45cb029e25996d0e755c75b38027c52655522970c03d8c7a909144d60466756e6558e21c7ae6f36afe9e86708fd0bcc1638d7882f68ea9dca156b28be57484aa4063bbc2cb59cebb35add1962f7de9bae2cf3db7f37a50a766d1d9a4bea9a659b9184bcf44b70e70cf0b500b5211c9026d69bf089889458a18d3334214680b7127c4dd4b259d4ca068f2e714c465c778e8a7cc1d421ba36d7d90b3949c2f6bac35257f3395e3093a521ad9402e54050ac745ae2ccbd843d0261ecc3d5bb31213a57406b169203f8d2fd645238d54a6c82412281ec59c0410a40e94f5a1ddcdea81df8aa3edbcfaf5e0bab5aa7904879271c98cd3c396033499a9fdf0d57b9320783b26fb4ab87ab543e7e9a23e397855cf08c7d7a3d6a22d538704f7329af47d092deb08f072e2763ef3d2bc749c5c721b1ff4b0cca9f8d85434dcfd48fc35551733759be2077a1fda913c88bd0c8dcf311f59ae1a4e2ba66dce0ae93be2dfbf64e1c2479bb99434463c615a3ccfdb480a0f156b0f5ef507603fdbef9686f84820da7c46be1e8ed98c14db893dea8d2729db8f9cb22e7da7d6ab350d8fe17ce4a1c0abdcbee00b7579a875dc05c6e8a03dda3b975b5a4c738c3b872c335de88fc5233a17671dca0d58cb8492ef97d565b7b52f24756afafa0a0dfd5f0a3fd13620d6ae8df0863cff3e1ff2450cc2d65d845dfbb10ae00a556da0b5158afde89a7420a87eb058d2c8c0fd303f8767246de07bcc22254c3558e163822b1ab6de4fe45f6e2caaa3d5aaedd9e5f3ea3d389846b4210eb5ca57c072e21a60cf7763d95d4e24e8579f4fcde5d84e9977132db37163e67535b0af782af53fce537969d39a33bd7f48875da003e2828a10010835118d518284273424c68b1266c1b23e40a1ed2b905102c8f4a6e7b06bc052485bd6985d72d568fa30303e9fc0fdc295cd8ae59e5bf680e9b255a741648b799c5eb4df779f560e877147534d3485ac20a1b988aa7f4f6aca1b7fdc46d93dfc5f56f9842bd2a1aca8e2e08c0d99fbfb08fd29950054c1c20b62edf222c2c5d1b8baddecf3f0a893f4b98ff1b48e74786e0b8303909095131b5c7047e1e3698f08afe0224c7357f428f9e68d3a8cf29a7bc9e2e62c354265d9642f26860f7fc07e03610d7d34c8aeb379b982ce87d0b828ba77d1570fcbafc0377b288d9464560ad5a3ea21e87f5bd3e977e3c924150a34a5ef975f312db066f36014987d08cbce38dc620b6155eab4b02707dab525047f1262fd9642f5679d7217994786021d245960959df83949db1d2883e4f867f5a85f8f4b343f794f87d5c16cc75dcc8b91c6ece394b8aa212756815f917d476a38004076261259eb43ceaea9ae8a0460f42ab1cef4b9de44722a5b5accdc6036457f3075cbeaf1308634f7bb154a83882232d9b931b3833f69e20d2300b2a341b6597a89c8b1d1b4096e6205cdb9555d19abe6be9bebeae187a797f7741541521fcdd31a3ab491210181c46a1f2a23c8ff337f110ba2a03d60e4722d86914f51f79ed9109a6dba05adf298abc7db49a716ac17728362efd5052dd8303d17914df17ff54c68d241512393e6a822518b39781420bcb9847d62094757e23fb234e71ab3984a8eb5052a95a28a0dfbc5f35d9dc6c6840c4c0c4d280f5532f917fe65f782a7857ef5978917c0f6771c5b0c94a919c276c069f029c8b2ca013b1ad6365e2cf9aa62dd4007c12b3904eaa17e50a04a8e91f9ab398d0f095ac00f6f3c42a19517dc5e45bba73818120bc58c2fa9921b188ee7a153eb60b672967b130d1855ac18771527336cf2bf8a4f878b2c409f6a39f1291fc0582650c2b039536576ffd234903eea56b5fd0684ded0b212a0a81852feecdb603904e20ed1031b252cc629c88066cc64ac9f4dd695ef4b62070bd58bcc004301afbf3ce34c3a3c53b8b399b0a80318760a327575ba14a6a799fdd1a142c0bfc76a4b0a21213515eb07025afb4cf2fcea56c7386eddf1bf73b2ea7bc0157e5763b9a34e255895cc7d1c1815981d93d7fbcd85a337e3c65e6d093a9a6cc96dfd506b728fa3bf9b3165403999b121a7ed1a561c28c6637f43e5a56f3b8e050bb7c7f4b8e93213ba0fa6fd62024825d4ee13d7ff26a2a147118c619c022bb5d5988f96c4619cf6042d82d80822674cce61f1dbc021233af3489f9ede4290ac30bf485bc3741e1bcccff66440dfe15f04820a0327d4f9703a3db35aa1b0a1284a1c2fc8e0586150bb31e85720d98d1ee9de0be76dfb9d241c87a3475f9fe2f933e90ccd8ead70d647928c1961865e537ed1f70b1d2242b1068f996d6499584b93edfafdb2ca6ce9cf55f9c767d0ebdbf651e1c9ec0f75404b58ddeb3a816b06ef92394a3a3965f46f41116a50c48b5b83385c11ab3cf9ed33df7393c930881b8083ad00fb5ed475fb58ab5f8830e7d59caf4f74ff5837c510276add555a556ba62450239d730a0616b32a005807851cba11e15d9742f72ed9ad6d43c328875471e13c3be655589cb8467783e34487a9ab6c21a757bad8b95210c22cf2cb9827b6be8ab98d8b225e54ca7ffdcbd8edf28970c60a86fc7809bc4a2096afcf71da0b3e0f190d819509df768055f0b88dff6e05c368e1f26427ddebda7a73386775bf3dc96b9ee09218372a9ff9f47717f7216656fe8d19fdf86273d32c839a7887733f2a1d5cdfd27c046b06993f992a9735eaa3f70436a93d9be1f6a1dfb9cfd8b7578be5abfae1785c7085a4140302d2d2533fd99711cf553fd2491d3fdb918c9e85e81b4e8f8933298797262d79d88b34f68de0767018e91ba2f2a8302973a79564199a7e20796cdbfc2e6d3750a74767907a175c0c51fcc68965157b191d03741eca85abbc9a8cfa56c986585b461a2c6caec1df1e381ffa264fb21e500ef5a7fcd89436fa7a74ebb751fbc6a3ed3f15d015a7e154eea1a2396fee395adef9a951657ff3b810331962488299f7f445c91e150f40af23dc1a6cd71c571c6e6297fe9c87c97ee9685460c3e39cda8535d6b0188a8dc11a8661d6c87e3b842447b769c21973ac34c9c859d8130c64fa7c097e4252f1564f0cb9b8c6a749e1c174b365b383506586646f8439177a6dd8b8b6c33ef9e0481efe00ffb8e543f7fd35bcdf21ce8708e716e8ccebaaa39e2f105e9590053d90408fc3c3f4fbc086c46c792ef440aae35ae73e146959781c056af9762d05aaf361c4c5b9e769efa35696daa1dbb551c100c13dd7f4b5d90775a13cd03075c1a5a9cd6b6de992b6e177c79dd96da91fb3933377a585d8e30626aaa4f670d7ec6dc08a9b5595a7561c0e946365f3b31bec5b0455cc39c8f6be77990a8baefcc1ebe7e9e087a60cab204b65270559fb64994bdc2291f0bb61dfc619cfb9a5f342a1373b79168db5ae34023bf4616aa616b0206f50e0d494572877adb77e744816ebb5f114e8ef87e27e3f05ba19974fd4865f2f823a0db660d6e0307a77cd9575b48c644f4afead50e2e298f6802fdcda736156289ff8ad5c5bef1e9c12deaee784014a8abbf96f451b26a34f89b2ede4100c45fbc95c3494ea1dfa561c26f9765321f6c935b6491347f5bcc1855cd8008b6cbd354b5dfc6cf17529e9197a72c62017409386f434916b94132624ec7e044bd9d3540394170c8f6cabbd2bbae41a379dafd66a4eb60256aebb0ebe91eff866da9b86cac3ccf8fd647525de7d50bf6de9218ebae1b5e214c1ebb7d4105ab95b77e140aa0dff67f23b77d2d5c6391a9db9460272440f0b6fd46d16a74ddbeebc1522f3cb1253589b74170c09084bfb0552c3a9bfcf0dee352220ff1dfd6801261ece535c6b897ed7c40824cf28d8fff763799c5a5665d2ce38782e16ff96135e1de1c4122d9b88d517b9490e0bbc9ef5f9c32df11e343180a3a7885e2b515a1b4dcaa363cf05d44098302191dca443341cc6fdc271a515565fd15f0a9f765efdb8907a024c31b6eb00ac7f007e3d211f896dbded30a1f4692731090ae8017bae37ff0c7e3198d3c17bf3a9b72a2a0f45db9d9649fe559dd0fbe6dab26b64c7751fdbc440c3c7d307c0a7323cc43be3592b9f546e33b3704f933e170094cf11bf2e26f98370bbbd57b6febce849d2ff6229e34f2a3dc4e0dfb9d951407fe6edadd131eb884a271531197963877f3a48af47b1788873686f6730d77d00bd2438560aa78fe388c6cc65ce2cacae19be53e810ff56fa6816a9ca3deb0e7dcb8d724bd4860b8d15b84598e80732d30a41384a9a96f751c8dbd08a110b1bb3b5216cbf6449a40285755da82e5b25fca6413d0f0c62b292ebb28413465349b9e1b02ba2649f000b79d17cf587"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001180)={{0x0, 0x6, 0x8, 0x9a, 0x6, 0x8000000000000000, 0x9, 0x6, 0x9, 0x0, 0xffff, 0x7ff, 0x9, 0x8, 0x1}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001240)={r4, r5, "068aab30c24b97f753397249f11c5ceb71dd52ddeafc0bd438709524ee33a757f021f964316f9b60a2b217a1652ea3130722589d957eec17f10ce9f0434750124973906589b536b702e2df2043a2df40ea93185bed9ab992fa06d0e7642c184d781ef50331724a1d70ff719c2a4fbb182d9a45e27cafab3f474855781bcbb1e4994c1f30546207e55b8eab3db3dd115abc0ac645ef790ffc93605579ba0fea2f15316933d53a46365a6983705388574cdd5f96ba3627d871b938650b56c346ddf460c202ef8254a741d048191104934c52c44d201436a2edfe8115611ddb22be6a2626083473e553d7b6cbe5c8dcd3bd6066741e4b29d349069c651535380660", "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"}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@migrate={0xa0, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev, @in6=@mcast2}}, [@migrate={0x50, 0x11, [{@in6=@local, @in=@dev, @in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}]}, 0xa0}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000014002146010000000000000023000000", @ANYRES32=0x0, @ANYRES32=r6], 0x2c}}, 0x40) 18.24021488s ago: executing program 0 (id=4453): socket(0x2a, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_dellink={0x2c, 0x13, 0x5, 0x0, 0x300, {0x7, 0x0, 0x0, r2, 0x1, 0x8012}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x6}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @none, 0x701, 0x1}, 0xe) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) 18.239117382s ago: executing program 2 (id=4454): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000003ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000003f80)={0x0, 0x0, &(0x7f0000003f40)={&(0x7f0000003f00)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '\xff\xff\xff\xff\xff\xff'}]}, 0x3c}}, 0x4050) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000003f80)={0x0, 0x0, &(0x7f0000003f40)={&(0x7f0000003f00)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '\xff\xff\xff\xff\xff\xff'}]}, 0x3c}}, 0x4050) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000004000)={'wpan1\x00'}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) (async) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2e}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004014}, 0x20004) 18.174683066s ago: executing program 3 (id=4455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c000480280001801100f2b9c58836fc130100666c6f775f6f66666c6f6164000040001000c7500af5028009000130000000000900010073797a30000000000900020073797a320000000014000000110001000000000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async) close(r0) 18.110710087s ago: executing program 0 (id=4456): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_getaddr={0x68, 0x16, 0x800, 0x70bd25, 0x25dfdbff, {0x2, 0x1, 0xb8, 0xff}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x44b}, @IFA_CACHEINFO={0x14, 0x6, {0x80000001, 0x10, 0xd, 0x5}}, @IFA_ADDRESS={0x8, 0x1, @local}, @IFA_LOCAL={0x8, 0x2, @empty}, @IFA_LABEL={0x14, 0x3, 'bridge_slave_0\x00'}, @IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0xa71}]}, 0x68}}, 0x0) 17.982185722s ago: executing program 3 (id=4457): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) (async) readv(0xffffffffffffffff, &(0x7f0000000200), 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c0007800800"], 0x50}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 17.973316333s ago: executing program 1 (id=4458): r0 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f00000001c0)=""/225, 0xe1}, {&(0x7f00000000c0)=""/63, 0x3f}, {&(0x7f0000000380)=""/232, 0xe8}], 0x5, 0x8, 0x10001) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a000000000000000000000005000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa010016"], 0xd0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x8, &(0x7f0000000100)=0xffffffff00040000, 0x112) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x74, 0x2c, 0x117, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @typed={0x55, 0xb0, 0x0, 0x0, @binary="8143f9b64fdf0bc1149296fdd7d20f353db0791a385188d276c24c39934a6475dca9312595654e08b9790e7b17d25fefda70eae618d3536d37c2f9334aa4db6dca4d26eaa1759019a41d9628b60541a4b8"}]}, 0x74}, 0x1, 0x0, 0x0, 0x2004c000}, 0x2400d081) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000054003d0926bd7000fedbdf2507000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="01030000000000000000000000000000001b000086dd00"], 0x38}}, 0x8000) socket$netlink(0x10, 0x3, 0x0) (async) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000000)=""/41, 0x29}, {&(0x7f00000001c0)=""/225, 0xe1}, {&(0x7f00000000c0)=""/63, 0x3f}, {&(0x7f0000000380)=""/232, 0xe8}], 0x5, 0x8, 0x10001) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a000000000000000000000005000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa010016"], 0xd0}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x8, &(0x7f0000000100)=0xffffffff00040000, 0x112) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x74, 0x2c, 0x117, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @typed={0x55, 0xb0, 0x0, 0x0, @binary="8143f9b64fdf0bc1149296fdd7d20f353db0791a385188d276c24c39934a6475dca9312595654e08b9790e7b17d25fefda70eae618d3536d37c2f9334aa4db6dca4d26eaa1759019a41d9628b60541a4b8"}]}, 0x74}, 0x1, 0x0, 0x0, 0x2004c000}, 0x2400d081) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000054003d0926bd7000fedbdf2507000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="01030000000000000000000000000000001b000086dd00"], 0x38}}, 0x8000) (async) 17.962014581s ago: executing program 0 (id=4459): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r4, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r2, 0x7, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r1, 0x4, r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) 17.855571091s ago: executing program 3 (id=4460): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r1, 0xfffffffc}, 0x8) 17.854582744s ago: executing program 1 (id=4461): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'batadv_slave_0\x00', @random="0100ee210110"}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000390400000000fbdbdf2500000000", @ANYRES32=r7, @ANYBLOB="e1980400419a04001c0012800e00010069703665727370616e00000008000280040012"], 0x3c}}, 0x0) sendto$packet(r5, &(0x7f0000000040)="05000000000000000087e95422007f83", 0x10, 0x40884, &(0x7f0000000100)={0x11, 0x6, r7, 0x1, 0x4, 0x6, @local}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000240)={'erspan0\x00', r4, 0x20, 0x8, 0x2, 0x8001, {{0x11, 0x4, 0x2, 0x15, 0x44, 0x64, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @local, {[@timestamp={0x44, 0x20, 0xab, 0x0, 0x0, [0x3, 0x3, 0x5, 0x1, 0xd, 0x9, 0x1]}, @rr={0x7, 0xf, 0x43, [@multicast2, @local, @multicast1]}]}}}}}) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0x81, 0x18}, 0xc) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x90f, 0x0, 0xffffffffffffffff, 0x4, '\x00', r4, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50) syz_emit_ethernet(0x3de, &(0x7f0000000cc0)={@remote, @random="c602dac24687", @void, {@mpls_mc={0x8848, {[{0xed, 0x0, 0x1}, {0x8}, {0x9}], @ipv6=@icmpv6={0x7, 0x6, "80c7e4", 0x39c, 0x3a, 0xff, @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, {[@fragment={0x88, 0x0, 0x8b, 0x1, 0x0, 0xb, 0x65}, @hopopts={0xff, 0x2, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x4c}]}, @fragment={0x16, 0x0, 0x0, 0x0, 0x0, 0xb, 0x66}, @dstopts={0x110, 0x5, '\x00', [@ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x10, {0x1, 0x2, 0x6, 0x4, [0x4]}}, @hao={0xc9, 0x10, @private1}]}, @fragment={0x2, 0x0, 0x9, 0x1, 0x0, 0x0, 0x66}], @ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x5, 0xb, "ab7c310be3ac965dfb6ed210f4dee513906ee326b5dff76f6be42dd2e4d0f9f39b02c4394c4fc2c221b00415e57ce4df8e66d2c34212982fd7364c24ed77b439ede4f4f85b1770e1b0c913b70560aea5083f32dcd89b71ec9db7"}, {0x1f, 0x6, "95d2ca1bf83ff4a12e3dab1d1bd9da7f62c1caa42c366f61c224a4c97236c5bcde3b145f3b2fe7e7c684a456a2b25377358e"}, {0x5, 0x11, "e13e83d9f18d953acdcb456b3088f1796fdb7bfd8804c0acad8a4e184324e68464297c60a567f010f20091cb6db835aebd57ae732e6335f1e1f489e972fe8bfd247cc758fa849cee936ecd4ee1d3b494bf82a595c44bb48d1949ca5e8708f2df57e62ea4e0b074d9f0bc3d2be946aa082939b941ca79ce0188f4e9b4c88e23aefcdfc4f1f46838fd23b6f0"}, {0x4, 0x4, "6f17e3a05f69934a9ec707cba131f7dd04885648e4276acce51d049bac5ffc83"}, {0x22, 0x19, "00275b03dc70393c8a9e64b93e2c1536ea744f6672e5c5a5bc32d811b2f2078c17f2280a4a6c39bfbba308fff1a435b9d5072c75c012c475af84056abcd9e7a08e118df75e4ac3e349b22e5fa790cdcded8ec70e3d5a74fc64f185be4abd7428743217d440e1fd5075fca3d766d9ccbe746718e45e9d550208fd133f444d8d4862e86317c135edece5a0dc23b7c3d9d6e2a8a50774872e5986113182f03d99a3a3c4fa3e1dc021ba35df7b1d84d89ae8fc3fcd7335b739c830638c335a7e818525a6629dc50c"}, {0x2, 0x16, "7b951553be435f6bbcfac894e2947546757a1156c1a3b35f7052b156fa2fbd4fdd57f2430dac9cedc01a76fbdb69b80e1c8cd30f53542400a893032de4aab26b8afc5d1a717d5966e688079638f97075ae1d1229c75857751b51dd3410a05faaf583ecfa271ab761569a2ffbe06ba81ee46d8915483bd9f0b8d2aaf44de6d12957338e208d7205865275bba59312c6e664073f72d62dc0a4e7d9cb619a1c1fea570c0aa7bd47fd32cc80d59e7fb2"}, {0x19, 0x9, "203531bd11940cb7c42da2dcb27b134a279dfdc353f01dd4b36a4432c66a17510c71c1ec7b03c8b93ac4950a747ed3d3706f09666fa5b29b29105a79a588994796878de6b75a9ebd2c5ae0ed"}, {0x22, 0x4, "372d0b7e4243596f8105dddfca0635b2cd48ddba86c6b85e5bcd41f91700e9307101404407"}]}}}}}}}, &(0x7f0000000680)={0x1, 0x4, [0x36b, 0xa6c, 0xf0, 0x625]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x17, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3493bcf3f0e4d5be}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x40f00, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0x1, 0x3, 0x10000}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000005c0)=[r9, r10, r11], &(0x7f0000000600)=[{0x1, 0x3, 0x5, 0x5}, {0x5, 0x2, 0x1003, 0x8}, {0x5, 0x2, 0xa, 0x7}, {0x2, 0x5, 0x6, 0x4}, {0x0, 0x1, 0x9, 0x3}, {0x0, 0x5, 0x6, 0x1}, {0x1, 0x3, 0x1, 0xc}], 0x10, 0x7}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x6c, 0x24, 0xd0f, 0x200000, 0xfffffffc, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0xfd, 0x2, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0x7, 0xff, 0x0, 0xca11, 0xffff}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x845}, 0x4000080) 17.826115129s ago: executing program 3 (id=4462): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x10}}, 0x94}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r5, 0x11, 0x68, &(0x7f0000000540)=0x2000000, 0x4) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000500)=0x2, 0x4) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0010000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="08000400000058"], 0x4c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14}}, 0x90}}, 0x0) 17.712085406s ago: executing program 1 (id=4463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000200)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0xa, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x30) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x5, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f0000000000)=0xffffffff, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@typedef={0x0, 0x0, 0x0, 0x10, 0x2}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x3e, 0x0, 0x2}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b05, &(0x7f00000000c0)={'wlan0\x00'}) close(r6) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) socket$unix(0x1, 0x4, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r12, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 17.620153615s ago: executing program 3 (id=4464): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x188, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x12a, 0xe, {{{}, {0x1}, @device_b, @broadcast, @from_mac}, 0x0, @random=0x3, 0x0, @val, @val, @void, @void, @void, @val={0x5, 0xf0, {0xe3, 0xd8, 0x1, "b9996d6ebfdff7e33a3849dde2b98a695e2dc96ea789bc2c5f253b1c4a662f71e0e747ed1f1717c8438e7e25b128f271bdc80b382fd58b747967494afc3b2783c8fa04320087ce661cf8e8fa178229964fd80e5d08464f325322a8210a950eff26db26c51f47e4300ed573dad8a7e140789fe7f5a51a3b23ebedb0b834c4a216d0b9d622a87301b3a0335d40e719bd68a2b2188ffc2eda0abd22a744a74490459c22a6121de5b888012f18aa3b144509e8d19be2873be846ca4b598b526ae5583aa2eccab1f4fc8520d11f270a0a9c55afcdd062435cc672a5413296c4aeb95f1165913ee9514a2b1f8ba4caae"}}, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x81, 0x11, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x28, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1d, 0x2, "f3679a46869d2a47dbb901fbd60c550e6deeb0ee65de448fbc"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x188}}, 0x0) 15.777508498s ago: executing program 1 (id=4465): socket$netlink(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001a00100004000000fbdbdf251c000000000000080000000008000400", @ANYRES32=0x0, @ANYBLOB="e0a7ca79cd5dd24b139c1009c029ab2bc39b318b3fff2b6c9e767aa4d97cf1a878c551582c6ba8360a93ee93134ef73399a7f7e024783373a8d5a95b664574c32f90fcef6cdbf3777f683bc814d08049ce4c85f446170536dd1ebf2bf051c78ada29dfd5bf5a5b44fabed44953fb5802b0500505ef75dd1a0731199d6a15f57057181732c0bfd5fdd14c588972dd4863f8cf9d2144dd9488a17892933a552275abbd4566baf92a540a85de3255c4555f9feccc56f1bc6b7a4905294046d1"], 0x24}}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@mcast1={0xff, 0x5}, @remote, @loopback={0xff00000000000000}, 0x0, 0x0, 0x0, 0x0, 0xc, 0x8144008a}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r6, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x404c851) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x11, 0x3, 0x8, 0x0, 0x5, 0x2, 0x1, 0x2, 0x6}}) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000002c28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010000087a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800280080002400000001908000140000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/124], 0x7c}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) 15.730037215s ago: executing program 4 (id=4466): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) close(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) 15.652319974s ago: executing program 4 (id=4467): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000023b7007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x9}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.645048812s ago: executing program 4 (id=4468): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000b80)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x1081) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069004f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) 15.591053244s ago: executing program 4 (id=4469): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd0000ffff080088"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x24, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8}]}, 0x68}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) (async) socket$unix(0x1, 0x1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x197, 0x7, 0x9}}}}]}, 0x44}}, 0x0) (async) socket$kcm(0x11, 0x3, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r8, 0x0) writev(r7, &(0x7f0000000640)=[{&(0x7f0000000180)="580000001500c5d427323b470c45b45602067fffffff81004e22030d00ff0028925a01000100eaa57b000900800a0efffeffffffffe7010000000000000000020000", 0x42}], 0x1) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd22, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff3, 0x3}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0xa}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x301, 0x0) close(r11) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 3.181262175s ago: executing program 32 (id=4454): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000003ec0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000003f80)={0x0, 0x0, &(0x7f0000003f40)={&(0x7f0000003f00)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '\xff\xff\xff\xff\xff\xff'}]}, 0x3c}}, 0x4050) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000003f80)={0x0, 0x0, &(0x7f0000003f40)={&(0x7f0000003f00)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, '\xff\xff\xff\xff\xff\xff'}]}, 0x3c}}, 0x4050) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000004000)={'wpan1\x00'}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) (async) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2e}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004014}, 0x20004) 2.152691274s ago: executing program 33 (id=4459): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r4, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r2, 0x7, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r1, 0x4, r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) 2.116296616s ago: executing program 34 (id=4464): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x188, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x12a, 0xe, {{{}, {0x1}, @device_b, @broadcast, @from_mac}, 0x0, @random=0x3, 0x0, @val, @val, @void, @void, @void, @val={0x5, 0xf0, {0xe3, 0xd8, 0x1, "b9996d6ebfdff7e33a3849dde2b98a695e2dc96ea789bc2c5f253b1c4a662f71e0e747ed1f1717c8438e7e25b128f271bdc80b382fd58b747967494afc3b2783c8fa04320087ce661cf8e8fa178229964fd80e5d08464f325322a8210a950eff26db26c51f47e4300ed573dad8a7e140789fe7f5a51a3b23ebedb0b834c4a216d0b9d622a87301b3a0335d40e719bd68a2b2188ffc2eda0abd22a744a74490459c22a6121de5b888012f18aa3b144509e8d19be2873be846ca4b598b526ae5583aa2eccab1f4fc8520d11f270a0a9c55afcdd062435cc672a5413296c4aeb95f1165913ee9514a2b1f8ba4caae"}}, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x81, 0x11, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x28, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1d, 0x2, "f3679a46869d2a47dbb901fbd60c550e6deeb0ee65de448fbc"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x188}}, 0x0) 81.199004ms ago: executing program 35 (id=4465): socket$netlink(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001a00100004000000fbdbdf251c000000000000080000000008000400", @ANYRES32=0x0, @ANYBLOB="e0a7ca79cd5dd24b139c1009c029ab2bc39b318b3fff2b6c9e767aa4d97cf1a878c551582c6ba8360a93ee93134ef73399a7f7e024783373a8d5a95b664574c32f90fcef6cdbf3777f683bc814d08049ce4c85f446170536dd1ebf2bf051c78ada29dfd5bf5a5b44fabed44953fb5802b0500505ef75dd1a0731199d6a15f57057181732c0bfd5fdd14c588972dd4863f8cf9d2144dd9488a17892933a552275abbd4566baf92a540a85de3255c4555f9feccc56f1bc6b7a4905294046d1"], 0x24}}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@mcast1={0xff, 0x5}, @remote, @loopback={0xff00000000000000}, 0x0, 0x0, 0x0, 0x0, 0xc, 0x8144008a}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r6, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x404c851) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x11, 0x3, 0x8, 0x0, 0x5, 0x2, 0x1, 0x2, 0x6}}) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000002c28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010000087a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800280080002400000001908000140000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/124], 0x7c}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) 0s ago: executing program 36 (id=4469): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd0000ffff080088"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x24, 0x5, 0x0, 0x1, [{0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8}]}, 0x68}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) (async) socket$unix(0x1, 0x1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x197, 0x7, 0x9}}}}]}, 0x44}}, 0x0) (async) socket$kcm(0x11, 0x3, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r8, 0x0) writev(r7, &(0x7f0000000640)=[{&(0x7f0000000180)="580000001500c5d427323b470c45b45602067fffffff81004e22030d00ff0028925a01000100eaa57b000900800a0efffeffffffffe7010000000000000000020000", 0x42}], 0x1) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd22, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff3, 0x3}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0xa}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x301, 0x0) close(r11) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) kernel console output (not intermixed with test programs): miscuous mode [ 431.662326][T19853] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 431.811691][T19870] openvswitch: netlink: Multiple metadata blocks provided [ 431.819679][T19870] tipc: Started in network mode [ 431.825576][T19870] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 431.860871][T19870] tipc: Enabled bearer , priority 10 [ 431.885387][T19875] netlink: 'syz.0.3745': attribute type 1 has an invalid length. [ 431.899894][T19869] tunl0: left promiscuous mode [ 431.912136][T19869] gre0: left promiscuous mode [ 431.924536][T19869] gretap0: left promiscuous mode [ 431.931030][T19877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.973237][T19869] erspan0: left promiscuous mode [ 431.980147][T19869] ip_vti0: left promiscuous mode [ 431.999157][T19869] ip6_vti0: left promiscuous mode [ 432.017831][T19869] sit0: left promiscuous mode [ 432.028782][T19869] ip6tnl0: left promiscuous mode [ 432.061233][T19869] ip6gre0: left promiscuous mode [ 432.067653][T19869] syz_tun: left promiscuous mode [ 432.085760][T19869] ip6gretap0: left promiscuous mode [ 432.096898][T19869] bridge0: left promiscuous mode [ 432.105836][T19869] vcan0: left promiscuous mode [ 432.114229][T19869] bond0: left promiscuous mode [ 432.122561][T19869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.129988][T19869] team0: left promiscuous mode [ 432.138078][T19869] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.146400][T19869] dummy0: left promiscuous mode [ 432.178257][T19869] nlmon0: left promiscuous mode [ 432.186400][T19869] caif0: left promiscuous mode [ 432.193388][T19869] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 432.215651][T19873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 432.275945][T19875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.301817][T19878] bond1: (slave ip6gretap2): making interface the new active one [ 432.313332][T19878] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 432.338229][T19884] veth3: entered promiscuous mode [ 432.347149][T19884] bond1: (slave veth3): Enslaving as an active interface with a down link [ 432.376899][T19894] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 432.724976][T19911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.889879][T14014] tipc: Node number set to 10136234 [ 432.938456][T19922] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3757'. [ 433.030293][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 433.038426][ C1] lec:lec_tx_timeout: lec0 [ 433.043847][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 433.393873][T19949] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 433.492228][T19954] netlink: 'syz.1.3766': attribute type 11 has an invalid length. [ 433.701028][T19971] netlink: 'syz.3.3769': attribute type 1 has an invalid length. [ 433.741198][T19978] netlink: 644 bytes leftover after parsing attributes in process `syz.2.3773'. [ 433.762546][T19978] openvswitch: netlink: Flow key attr not present in new flow. [ 433.798107][T19971] 8021q: adding VLAN 0 to HW filter on device bond5 [ 433.829870][T19983] Cannot find add_set index 0 as target [ 434.352461][T20023] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3783'. [ 434.375466][T20023] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3783'. [ 434.491978][T20034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3783'. [ 434.656330][T20034] can: request_module (can-proto-0) failed. [ 434.861995][T20051] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3789'. [ 434.897073][T20053] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3789'. [ 434.968562][T20058] tipc: Cannot configure node identity twice [ 435.089602][T20064] netlink: 'syz.0.3793': attribute type 30 has an invalid length. [ 435.134057][T20071] netlink: 'syz.1.3795': attribute type 64 has an invalid length. [ 435.177357][T20074] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3796'. [ 435.391788][T20082] syzkaller0: entered promiscuous mode [ 435.397363][T20082] syzkaller0: entered allmulticast mode [ 435.444113][T20089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 435.459721][T20091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3802'. [ 435.479453][T20091] vxcan2: entered allmulticast mode [ 435.557867][T20098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3802'. [ 435.587614][T20096] netlink: 'syz.1.3804': attribute type 4 has an invalid length. [ 435.605791][T20098] vxcan2: entered allmulticast mode [ 435.641520][T20102] netlink: 'syz.1.3804': attribute type 4 has an invalid length. [ 435.672154][T20110] netlink: 'syz.0.3805': attribute type 13 has an invalid length. [ 435.689334][T20110] netlink: 'syz.0.3805': attribute type 17 has an invalid length. [ 435.776264][T20096] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.784398][T20096] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.975902][T20096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.995233][T20096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.295513][T20110] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 436.332795][T14015] vxcan1 speed is unknown, defaulting to 1000 [ 436.340789][T16849] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.351758][T16849] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.361164][T14015] syz2: Port: 1 Link DOWN [ 436.391030][T14015] vxcan1 speed is unknown, defaulting to 1000 [ 436.391046][T16849] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.416008][T20124] openvswitch: netlink: Duplicate or invalid key (type 0). [ 436.424718][T20124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.441435][T16849] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.472329][T20126] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 436.502006][T20124] vlan3: entered promiscuous mode [ 436.518420][T20124] bridge0: entered promiscuous mode [ 436.598940][T20133] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 436.606333][T20133] IPv6: NLM_F_CREATE should be set when creating new route [ 436.728802][T20135] xt_TPROXY: Can be used only with -p tcp or -p udp [ 436.817579][T20144] tipc: Enabling of bearer rejected, failed to enable media [ 436.829632][T20144] syzkaller1: entered promiscuous mode [ 436.835379][T20144] syzkaller1: entered allmulticast mode [ 437.057617][T20161] netlink: 'syz.0.3823': attribute type 3 has an invalid length. [ 437.069750][T20161] netlink: 'syz.0.3823': attribute type 1 has an invalid length. [ 437.087088][T20160] netlink: 'syz.0.3823': attribute type 6 has an invalid length. [ 437.087116][T20159] netlink: 'syz.0.3823': attribute type 6 has an invalid length. [ 437.512529][T20174] vlan2: entered allmulticast mode [ 437.517881][T20174] hsr0: entered allmulticast mode [ 437.530956][T20174] hsr_slave_0: entered allmulticast mode [ 437.536794][T20174] hsr_slave_1: entered allmulticast mode [ 437.982472][T20197] bond3: option miimon: invalid value (18446744073709551585) [ 437.990371][T20197] bond3: option miimon: allowed values 0 - 2147483647 [ 438.002900][T20197] bond3 (unregistering): Released all slaves [ 438.050313][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 438.058517][ C1] lec:lec_tx_timeout: lec0 [ 438.063707][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 438.108291][T20199] bond1 (unregistering): Released all slaves [ 438.219142][T20210] __nla_validate_parse: 7 callbacks suppressed [ 438.219163][T20210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3841'. [ 438.291468][T20210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3841'. [ 438.620862][T20241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3850'. [ 438.639143][T20244] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20000 [ 438.662880][T20247] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20000 [ 438.675095][T20249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3850'. [ 438.698549][T20237] syzkaller0: entered promiscuous mode [ 438.706080][T20237] syzkaller0: entered allmulticast mode [ 438.714312][T20236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3848'. [ 438.730902][T20237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3850'. [ 438.842765][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 438.855687][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.507762][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.516764][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 440.549406][T20273] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 440.701194][T20285] Bluetooth: MGMT ver 1.23 [ 440.821002][T20283] vcan0: entered allmulticast mode [ 440.896121][T20295] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3864'. [ 440.920218][T20295] validate_nla: 45 callbacks suppressed [ 440.941131][T20295] netlink: 'syz.4.3864': attribute type 7 has an invalid length. [ 440.951705][T20295] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3864'. [ 440.999217][T20302] sch_fq: defrate 0 ignored. [ 441.269820][T20317] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3873'. [ 441.309652][T20321] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3874'. [ 441.521946][T20333] : entered promiscuous mode [ 442.145504][T20373] veth5: entered promiscuous mode [ 442.171132][T20373] veth5: entered allmulticast mode [ 442.251662][T20388] syzkaller1: entered promiscuous mode [ 442.263039][T20388] syzkaller1: entered allmulticast mode [ 443.070310][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 443.078465][ C1] lec:lec_tx_timeout: lec0 [ 443.083672][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 443.246033][T20436] syzkaller0: entered promiscuous mode [ 443.270427][T20436] syzkaller0: entered allmulticast mode [ 443.454158][T20448] netlink: 'syz.2.3912': attribute type 25 has an invalid length. [ 443.505781][T20450] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.552846][T20452] netlink: 'syz.1.3915': attribute type 1 has an invalid length. [ 443.610764][T20452] __nla_validate_parse: 6 callbacks suppressed [ 443.610784][T20452] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3915'. [ 443.676333][T20470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3920'. [ 443.689205][T20470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3920'. [ 443.713117][T20470] gretap0: entered promiscuous mode [ 443.730978][T20470] gretap0: left promiscuous mode [ 443.900160][T20478] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3922'. [ 444.029133][ T25] block nbd1: Possible stuck request ffff888025368000: control (read@0,1024B). Runtime 120 seconds [ 444.040274][ T25] block nbd1: Possible stuck request ffff888025368200: control (read@1024,1024B). Runtime 120 seconds [ 444.054541][ T125] block nbd2: Possible stuck request ffff8880253c0000: control (read@0,1024B). Runtime 120 seconds [ 444.066000][ T25] block nbd1: Possible stuck request ffff888025368400: control (read@2048,1024B). Runtime 120 seconds [ 444.077641][ T125] block nbd2: Possible stuck request ffff8880253c0200: control (read@1024,1024B). Runtime 120 seconds [ 444.092752][ T25] block nbd1: Possible stuck request ffff888025368600: control (read@3072,1024B). Runtime 120 seconds [ 444.107561][ T125] block nbd2: Possible stuck request ffff8880253c0400: control (read@2048,1024B). Runtime 120 seconds [ 444.119794][ T125] block nbd2: Possible stuck request ffff8880253c0600: control (read@3072,1024B). Runtime 120 seconds [ 444.302199][T20496] syzkaller0: entered promiscuous mode [ 444.323308][T20496] syzkaller0: entered allmulticast mode [ 444.533604][T20511] netlink: 'syz.0.3934': attribute type 3 has an invalid length. [ 444.542073][T20511] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3934'. [ 444.614312][T20511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3934'. [ 445.295545][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.302883][ T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 445.518639][T20572] netlink: 'syz.1.3949': attribute type 10 has an invalid length. [ 445.535773][T20572] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 445.628239][T20560] vxcan1 speed is unknown, defaulting to 1000 [ 446.452644][T20622] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3960'. [ 446.499929][T20625] netlink: 'syz.1.3962': attribute type 4 has an invalid length. [ 446.520633][T20622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3960'. [ 446.536416][T20629] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 446.579060][T20629] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 446.624394][T20629] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 447.242398][T20667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3974'. [ 447.335092][T20667] bond2: entered promiscuous mode [ 447.340978][T20667] bond2: entered allmulticast mode [ 447.356631][T20667] 8021q: adding VLAN 0 to HW filter on device bond2 [ 447.393285][T20687] netlink: 'syz.1.3974': attribute type 58 has an invalid length. [ 447.436140][T20680] macvlan2: entered promiscuous mode [ 447.490807][T20687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3974'. [ 447.511438][T20680] macvlan2: entered allmulticast mode [ 447.519084][T20680] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 447.666861][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.693502][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.041897][T20726] netlink: 'syz.3.3991': attribute type 1 has an invalid length. [ 448.090294][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 448.098423][ C1] lec:lec_tx_timeout: lec0 [ 448.103786][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 448.249641][T20734] 8021q: adding VLAN 0 to HW filter on device bond7 [ 448.354506][T20734] bond6: (slave bond7): making interface the new active one [ 448.419479][T20734] bond6: (slave bond7): Enslaving as an active interface with an up link [ 448.475253][T20726] bond6: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 448.499032][T20726] bond6: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 448.677228][T20756] __nla_validate_parse: 9 callbacks suppressed [ 448.677244][T20756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3999'. [ 448.850328][T20774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4005'. [ 449.112290][T20796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.137228][T20798] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4012'. [ 449.243256][T20810] netlink: 'syz.1.4013': attribute type 15 has an invalid length. [ 449.251541][T20810] netlink: 'syz.1.4013': attribute type 1 has an invalid length. [ 449.262920][T20808] netlink: 'syz.4.4015': attribute type 12 has an invalid length. [ 449.699507][T20830] xt_TPROXY: Can be used only with -p tcp or -p udp [ 449.725411][T20830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4019'. [ 449.748058][T20830] vlan3: entered allmulticast mode [ 449.772188][T20830] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode [ 449.795885][T20832] netlink: 'syz.0.4020': attribute type 1 has an invalid length. [ 449.819768][T20832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4020'. [ 449.849353][T20832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4020'. [ 449.889882][T20833] geneve2: entered promiscuous mode [ 449.896848][T20833] geneve2: entered allmulticast mode [ 449.905807][T20835] netlink: 'syz.3.4021': attribute type 3 has an invalid length. [ 449.917489][T20835] netlink: 766 bytes leftover after parsing attributes in process `syz.3.4021'. [ 449.950915][T16849] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 449.961499][T16849] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 450.079815][T16849] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 450.171161][T16849] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 450.338378][T20850] netlink: 212048 bytes leftover after parsing attributes in process `syz.3.4024'. [ 450.477542][T20856] veth1_macvtap: renamed from veth0_macvtap [ 450.561257][T20874] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.4031'. [ 450.685896][T20874] sctp: [Deprecated]: syz.4.4031 (pid 20874) Use of int in maxseg socket option. [ 450.685896][T20874] Use struct sctp_assoc_value instead [ 450.769507][T20888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4033'. [ 450.829562][T20893] openvswitch: netlink: Unknown nsh attribute 0 [ 450.891839][T20893] netlink: 'syz.3.4036': attribute type 26 has an invalid length. [ 451.242002][T20929] erspan0: entered promiscuous mode [ 451.247291][T20929] erspan0: entered allmulticast mode [ 452.066000][ T5491] veth1_macvtap: left promiscuous mode [ 453.110753][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 453.118887][ C1] lec:lec_tx_timeout: lec0 [ 453.123531][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 453.749827][T20888] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 454.058761][T20978] __nla_validate_parse: 4 callbacks suppressed [ 454.058783][T20978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4047'. [ 454.249697][T20975] syzkaller0: entered promiscuous mode [ 454.298812][T20975] syzkaller0: entered allmulticast mode [ 454.325740][T20978] bond0: entered promiscuous mode [ 454.331154][T20978] bond_slave_0: entered promiscuous mode [ 454.337217][T20978] bond_slave_1: entered promiscuous mode [ 454.354788][T20978] bond0: left promiscuous mode [ 454.374737][T20978] bond_slave_0: left promiscuous mode [ 454.381303][T20978] bond_slave_1: left promiscuous mode [ 456.671056][T21016] IPv6: sit1: Disabled Multicast RS [ 456.677370][T21016] sit1: entered allmulticast mode [ 456.797215][T21039] netlink: 'syz.3.4061': attribute type 13 has an invalid length. [ 456.836680][T21041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4062'. [ 456.985622][T21055] sctp: [Deprecated]: syz.4.4067 (pid 21055) Use of int in max_burst socket option deprecated. [ 456.985622][T21055] Use struct sctp_assoc_value instead [ 457.330526][T21072] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4070'. [ 457.353159][T21072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4070'. [ 457.650958][T21086] netlink: 'syz.0.4077': attribute type 1 has an invalid length. [ 457.816715][T21088] nbd: must specify at least one socket [ 458.092189][T21112] netlink: 'syz.2.4085': attribute type 4 has an invalid length. [ 458.130316][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 458.138385][ C1] lec:lec_tx_timeout: lec0 [ 458.143514][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 458.424379][T21116] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.431986][T21116] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.473227][T21127] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20001 [ 458.608249][T21116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.628706][T21116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.790659][T21116] veth3: left promiscuous mode [ 458.804803][T21116] geneve2: left promiscuous mode [ 458.841072][ T60] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.880682][ T60] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.889628][ T60] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 458.912896][ T60] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.940518][ T60] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.959812][ T60] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 458.982714][T21141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4092'. [ 459.001256][ T60] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.015351][ T60] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.043483][ T60] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 459.095643][ T60] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.106130][ T60] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.115945][ T60] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 459.174894][T21147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4095'. [ 459.384727][T21162] SET target dimension over the limit! [ 459.416758][T21169] SET target dimension over the limit! [ 459.433562][T21167] netlink: 'syz.4.4100': attribute type 8 has an invalid length. [ 459.523609][T21175] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4103'. [ 459.606153][T21177] syzkaller0: entered promiscuous mode [ 459.618579][T21177] syzkaller0: entered allmulticast mode [ 459.651122][T21177] tipc: Enabled bearer , priority 0 [ 459.663234][T21182] xt_hashlimit: invalid interval [ 459.693495][T21186] tipc: Resetting bearer [ 459.743848][T21186] tipc: Disabling bearer [ 459.975005][T21201] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4112'. [ 460.008382][T21201] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4112'. [ 460.076213][T21210] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4116'. [ 460.118637][T21211] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4115'. [ 460.246417][T21218] openvswitch: netlink: IP tunnel dst address not specified [ 460.320664][T21218] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 460.333417][T21218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4119'. [ 460.351271][T21231] netlink: 'syz.4.4123': attribute type 1 has an invalid length. [ 460.373721][T21234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4125'. [ 460.404911][T21231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.429420][T21231] vlan4: entered promiscuous mode [ 460.431447][T21237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4125'. [ 460.434818][T21231] bond1: entered promiscuous mode [ 460.449260][T21231] vlan4: entered allmulticast mode [ 460.455133][T21231] bond1: entered allmulticast mode [ 460.519326][T21231] bond1: (slave bridge1): making interface the new active one [ 460.527331][T21231] bridge1: entered promiscuous mode [ 460.539044][T21231] bridge1: entered allmulticast mode [ 460.548449][T21231] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 460.757425][T21250] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4131'. [ 460.766906][T21250] nbd: couldn't find a device at index 0 [ 460.833750][T21250] syzkaller0: entered promiscuous mode [ 460.839449][T21250] syzkaller0: entered allmulticast mode [ 462.507175][T21264] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 462.617024][T21273] IPv6: sit1: Disabled Multicast RS [ 462.683646][T21288] netlink: 'syz.1.4139': attribute type 5 has an invalid length. [ 462.699673][T21288] geneve2: entered promiscuous mode [ 462.712340][T21288] geneve2: entered allmulticast mode [ 462.750520][ T1149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 462.759250][ T1149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 462.825134][ T1149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 462.842050][ T1149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 462.901613][T21297] netlink: 'syz.4.4143': attribute type 16 has an invalid length. [ 462.919802][T21297] netlink: 'syz.4.4143': attribute type 3 has an invalid length. [ 463.057305][T21314] x_tables: unsorted entry at hook 1 [ 463.150906][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 463.159272][ C1] lec:lec_tx_timeout: lec0 [ 463.164478][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 463.264536][T21325] netlink: 'syz.0.4149': attribute type 29 has an invalid length. [ 463.276712][T21325] netlink: 'syz.0.4149': attribute type 29 has an invalid length. [ 463.285745][T21325] netlink: 'syz.0.4149': attribute type 29 has an invalid length. [ 463.295172][T21325] netlink: 'syz.0.4149': attribute type 29 has an invalid length. [ 463.306083][T21325] netlink: 'syz.0.4149': attribute type 29 has an invalid length. [ 463.316050][T21325] netlink: 'syz.0.4149': attribute type 29 has an invalid length. [ 463.328332][T21325] netlink: 'syz.0.4149': attribute type 29 has an invalid length. [ 463.735223][T21350] sch_fq: defrate 0 ignored. [ 463.888163][T21360] tipc: Started in network mode [ 463.913001][T21360] tipc: Node identity 9624ceb6b4af, cluster identity 4711 [ 463.925167][T21360] tipc: Enabled bearer , priority 0 [ 464.002264][T21360] tipc: Disabling bearer [ 464.319722][T21393] vcan0: tx address claim with dest, not broadcast [ 464.370446][T21394] vcan0: tx address claim with dest, not broadcast [ 464.427380][T21393] __nla_validate_parse: 10 callbacks suppressed [ 464.427400][T21393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4168'. [ 464.470560][T21401] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4171'. [ 464.496987][T21397] team0: Device vti0 is of different type [ 464.505765][T21393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4168'. [ 464.814194][T21419] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4174'. [ 465.096096][T21439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4179'. [ 465.136596][T21439] delete_channel: no stack [ 465.161744][T21439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4179'. [ 465.403861][T21439] delete_channel: no stack [ 465.538482][T21466] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4186'. [ 465.563328][T21468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4185'. [ 465.585531][T21466] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4186'. [ 465.639570][T21470] netlink: 211488 bytes leftover after parsing attributes in process `syz.3.4186'. [ 465.765345][T21479] vlan5: entered allmulticast mode [ 466.000992][T21494] syzkaller0: entered promiscuous mode [ 466.006542][T21494] syzkaller0: entered allmulticast mode [ 466.106511][T21500] 8021q: adding VLAN 0 to HW filter on device bond3 [ 466.171910][T21500] 8021q: adding VLAN 0 to HW filter on device bond3 [ 466.190749][T21500] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 466.221924][T21500] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 466.325296][T21511] veth7: entered promiscuous mode [ 466.486111][T21529] openvswitch: netlink: Duplicate or invalid key (type 0). [ 466.517867][T21529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.258123][T21573] vlan2: entered allmulticast mode [ 467.265815][T21573] veth1: entered allmulticast mode [ 467.421916][T21583] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 467.762024][ T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 467.791919][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 467.819933][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 467.832514][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 467.957696][T21625] openvswitch: netlink: Multiple metadata blocks provided [ 468.113310][T21636] sctp: [Deprecated]: syz.3.4231 (pid 21636) Use of int in maxseg socket option. [ 468.113310][T21636] Use struct sctp_assoc_value instead [ 468.159240][T21635] syzkaller0: entered promiscuous mode [ 468.174310][T21635] syzkaller0: entered allmulticast mode [ 468.180695][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 468.188827][ C1] lec:lec_tx_timeout: lec0 [ 468.194375][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 468.555584][T21669] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 468.588355][T21675] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 468.681916][T21677] GUP no longer grows the stack in syz.1.4240 (21677): 200000003000-20000000a000 (200000001000) [ 468.701829][T21677] CPU: 1 UID: 0 PID: 21677 Comm: syz.1.4240 Not tainted syzkaller #0 PREEMPT(full) [ 468.701862][T21677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 468.701884][T21677] Call Trace: [ 468.701893][T21677] [ 468.701903][T21677] dump_stack_lvl+0xe8/0x150 [ 468.701939][T21677] __get_user_pages+0x2453/0x29d0 [ 468.701994][T21677] ? __gup_longterm_locked+0xc4e/0x1630 [ 468.702025][T21677] ? down_read_killable+0x1bb/0x340 [ 468.702058][T21677] ? try_get_folio+0xec/0x650 [ 468.702093][T21677] __gup_longterm_locked+0xdcf/0x1630 [ 468.702152][T21677] gup_fast_fallback+0x1d82/0x22e0 [ 468.702223][T21677] ? __pfx_gup_fast_fallback+0x10/0x10 [ 468.702256][T21677] ? is_valid_gup_args+0x11f/0x200 [ 468.702288][T21677] ? get_user_pages_fast+0x4d/0xb0 [ 468.702321][T21677] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 468.702363][T21677] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 468.702396][T21677] iov_iter_get_pages2+0x5e/0xa0 [ 468.702432][T21677] __se_sys_vmsplice+0x7b3/0x1490 [ 468.702479][T21677] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 468.702504][T21677] ? __pfx_futex_wait+0x10/0x10 [ 468.702606][T21677] do_syscall_64+0xe2/0xf80 [ 468.702628][T21677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.702647][T21677] ? trace_irq_disable+0x37/0x100 [ 468.702667][T21677] ? clear_bhb_loop+0x60/0xb0 [ 468.702693][T21677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.702717][T21677] RIP: 0033:0x7f3c0d19aeb9 [ 468.702737][T21677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.702755][T21677] RSP: 002b:00007f3c0e016028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 468.702779][T21677] RAX: ffffffffffffffda RBX: 00007f3c0d415fa0 RCX: 00007f3c0d19aeb9 [ 468.702795][T21677] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 468.702809][T21677] RBP: 00007f3c0d208c1f R08: 0000000000000000 R09: 0000000000000000 [ 468.702822][T21677] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 468.702835][T21677] R13: 00007f3c0d416038 R14: 00007f3c0d415fa0 R15: 00007ffeeba70888 [ 468.702871][T21677] [ 468.933566][T21681] validate_nla: 8 callbacks suppressed [ 468.933585][T21681] netlink: 'syz.2.4241': attribute type 3 has an invalid length. [ 469.133209][ T10] IPVS: starting estimator thread 0... [ 469.157477][T21690] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 469.220897][T21692] IPVS: using max 30 ests per chain, 72000 per kthread [ 469.451584][T21715] netlink: 'syz.1.4250': attribute type 1 has an invalid length. [ 469.638966][T21715] 8021q: adding VLAN 0 to HW filter on device bond3 [ 469.688844][T21722] netlink: 'syz.3.4251': attribute type 39 has an invalid length. [ 469.701472][T21728] bond3: (slave gretap1): making interface the new active one [ 469.731544][T21728] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 469.944062][T21745] __nla_validate_parse: 12 callbacks suppressed [ 469.944083][T21745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4254'. [ 469.957774][T21722] netlink: 'syz.3.4251': attribute type 39 has an invalid length. [ 469.997901][T21745] bond0: entered promiscuous mode [ 470.027959][T21745] bond_slave_0: entered promiscuous mode [ 470.062029][T21745] bond_slave_1: entered promiscuous mode [ 470.086640][T21745] bond0: left promiscuous mode [ 470.102860][T21745] bond_slave_0: left promiscuous mode [ 470.118782][T21745] bond_slave_1: left promiscuous mode [ 470.147753][T21722] netlink: 'syz.3.4251': attribute type 39 has an invalid length. [ 470.192502][T21722] netlink: 'syz.3.4251': attribute type 39 has an invalid length. [ 470.230677][T21722] netlink: 'syz.3.4251': attribute type 39 has an invalid length. [ 470.290744][T21722] netlink: 'syz.3.4251': attribute type 39 has an invalid length. [ 470.298893][T21722] netlink: 'syz.3.4251': attribute type 39 has an invalid length. [ 470.355062][T21722] netlink: 'syz.3.4251': attribute type 39 has an invalid length. [ 470.471720][T21768] veth0_virt_wifi: default FDB implementation only supports local addresses [ 470.662363][T21778] tipc: New replicast peer: 255.255.255.255 [ 470.692456][T21778] tipc: Enabled bearer , priority 10 [ 470.722522][T21778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4262'. [ 470.792023][T21778] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 470.928449][T21782] 8021q: adding VLAN 0 to HW filter on device bond4 [ 470.977067][T21789] bond4: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 471.032626][T21782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4263'. [ 471.068096][T21790] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 471.127730][T21782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.165318][T21782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.290877][ T60] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 471.410894][ T60] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 471.422424][ T60] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 471.552798][ T60] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 471.569446][ T60] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 471.623197][ T30] audit: type=1800 audit(1770466166.518:10): pid=21839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4270" name="memory.events" dev="tmpfs" ino=1169 res=0 errno=0 [ 471.681101][ T79] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 471.689374][ T79] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 471.800939][ T79] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 471.808939][ T79] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 471.820543][T14014] tipc: Node number set to 579587766 [ 471.921044][ T79] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 471.929011][ T79] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 472.040802][ T12] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 472.048865][ T12] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 472.970483][ T5147] Bluetooth: hci5: command 0x0406 tx timeout [ 473.998301][T21795] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 474.010267][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms [ 474.018371][ C1] lec:lec_tx_timeout: lec0 [ 474.023678][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 474.108638][ T25] block nbd1: Possible stuck request ffff888025368000: control (read@0,1024B). Runtime 150 seconds [ 474.124174][ T125] block nbd2: Possible stuck request ffff8880253c0000: control (read@0,1024B). Runtime 150 seconds [ 474.135317][ T25] block nbd1: Possible stuck request ffff888025368200: control (read@1024,1024B). Runtime 150 seconds [ 474.148274][ T125] block nbd2: Possible stuck request ffff8880253c0200: control (read@1024,1024B). Runtime 150 seconds [ 474.159405][ T25] block nbd1: Possible stuck request ffff888025368400: control (read@2048,1024B). Runtime 150 seconds [ 474.176702][ T25] block nbd1: Possible stuck request ffff888025368600: control (read@3072,1024B). Runtime 150 seconds [ 474.190534][ T125] block nbd2: Possible stuck request ffff8880253c0400: control (read@2048,1024B). Runtime 150 seconds [ 474.202770][ T125] block nbd2: Possible stuck request ffff8880253c0600: control (read@3072,1024B). Runtime 150 seconds [ 474.336622][T21860] validate_nla: 2 callbacks suppressed [ 474.336645][T21860] netlink: 'syz.4.4271': attribute type 21 has an invalid length. [ 474.369167][T21860] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4271'. [ 474.383364][T21863] netlink: 'syz.2.4275': attribute type 1 has an invalid length. [ 474.391642][T21863] netlink: 'syz.2.4275': attribute type 2 has an invalid length. [ 474.399453][T21863] netlink: 'syz.2.4275': attribute type 1 has an invalid length. [ 474.408315][T21863] netlink: 'syz.2.4275': attribute type 3 has an invalid length. [ 474.417111][T21863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4275'. [ 474.593509][T21878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4278'. [ 474.620964][T21878] pimreg3: entered allmulticast mode [ 474.689665][T21883] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4281'. [ 474.699519][T21883] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4281'. [ 474.806865][T21888] xt_TPROXY: Can be used only with -p tcp or -p udp [ 474.835871][T21894] xt_TPROXY: Can be used only with -p tcp or -p udp [ 474.849876][T21893] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4283'. [ 474.882357][T21898] netlink: 'syz.2.4286': attribute type 9 has an invalid length. [ 474.996694][T21906] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4289'. [ 475.146838][T21916] netlink: 'syz.4.4293': attribute type 19 has an invalid length. [ 475.155576][T21916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4293'. [ 475.192199][T21916] netlink: 'syz.4.4293': attribute type 19 has an invalid length. [ 475.200864][T21916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4293'. [ 475.217725][ T1149] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.226722][ T1149] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.237580][ T1149] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.246772][ T1149] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.412583][T21926] SET target dimension over the limit! [ 475.526338][T21939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4300'. [ 475.592214][T21934] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4299'. [ 475.712050][T21949] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4302'. [ 475.769836][T21953] netlink: 'syz.1.4303': attribute type 10 has an invalid length. [ 475.792022][T21953] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4303'. [ 475.806082][T21953] dummy0: entered promiscuous mode [ 475.816340][T21953] bridge0: port 4(dummy0) entered blocking state [ 475.843424][T21953] bridge0: port 4(dummy0) entered disabled state [ 475.852466][T21953] dummy0: entered allmulticast mode [ 476.195598][T21979] netlink: 'syz.4.4313': attribute type 7 has an invalid length. [ 476.224448][T21979] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4313'. [ 476.234275][T21979] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4313'. [ 476.243353][T21979] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4313'. [ 476.265208][T21979] gretap1: entered promiscuous mode [ 476.277019][T21979] gretap1: entered allmulticast mode [ 476.655316][ T60] net_ratelimit: 99 callbacks suppressed [ 476.655342][ T60] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 476.690680][ T60] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 476.810911][ T60] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 476.825669][ T60] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 476.894573][T22024] sctp: [Deprecated]: syz.4.4329 (pid 22024) Use of int in maxseg socket option. [ 476.894573][T22024] Use struct sctp_assoc_value instead [ 476.942923][ T60] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 476.955553][ T60] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 476.965838][T22027] xt_hashlimit: size too large, truncated to 1048576 [ 477.090390][ T1149] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 477.120342][ T1149] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 477.140987][ T1149] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 477.161660][ T36] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 478.090399][ T5147] Bluetooth: hci1: command 0x0406 tx timeout [ 479.030732][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 479.038841][ C1] lec:lec_tx_timeout: lec0 [ 479.043905][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 479.990844][T22032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 480.175391][T22079] validate_nla: 6 callbacks suppressed [ 480.175411][T22079] netlink: 'syz.1.4337': attribute type 4 has an invalid length. [ 480.200919][T22083] __nla_validate_parse: 4 callbacks suppressed [ 480.200933][T22083] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4340'. [ 480.232070][T22088] netlink: 'syz.1.4337': attribute type 4 has an invalid length. [ 480.423693][T22099] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4344'. [ 480.720079][T22117] bond2: Removing last ns target with arp_interval on [ 480.746836][T22120] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4351'. [ 480.861569][T22127] netlink: 'syz.1.4354': attribute type 2 has an invalid length. [ 480.998752][T22136] syzkaller0: entered promiscuous mode [ 481.013327][T22136] syzkaller0: entered allmulticast mode [ 481.039803][T22136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4356'. [ 481.123296][T22147] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4359'. [ 481.432388][T22163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4364'. [ 481.504074][T22162] netlink: 'syz.0.4363': attribute type 1 has an invalid length. [ 481.520505][T22162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4363'. [ 481.607911][T22175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4367'. [ 481.740607][ T1149] net_ratelimit: 93 callbacks suppressed [ 481.740630][ T1149] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 481.821002][ T1149] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 481.870345][ T12] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 481.900737][ T12] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 481.930385][ T1149] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 481.953142][ T1149] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 482.001008][ T1149] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 482.020883][ T1149] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 482.050474][ T12] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 482.058479][ T12] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 482.689567][T22285] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4382'. [ 482.733255][T22285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4382'. [ 483.356758][T22298] IPVS: Scheduler module ip_vs_sip not found [ 483.670096][T22322] netlink: 'syz.4.4390': attribute type 2 has an invalid length. [ 483.709439][T22322] netlink: 'syz.4.4390': attribute type 1 has an invalid length. [ 483.857651][T22343] sctp: [Deprecated]: syz.4.4398 (pid 22343) Use of struct sctp_assoc_value in delayed_ack socket option. [ 483.857651][T22343] Use struct sctp_sack_info instead [ 483.895670][T22344] sctp: [Deprecated]: syz.4.4398 (pid 22344) Use of struct sctp_assoc_value in delayed_ack socket option. [ 483.895670][T22344] Use struct sctp_sack_info instead [ 484.050275][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 484.058390][ C1] lec:lec_tx_timeout: lec0 [ 484.063317][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 485.367888][T22440] netlink: 'syz.1.4429': attribute type 29 has an invalid length. [ 485.446664][T22440] netlink: 'syz.1.4429': attribute type 29 has an invalid length. [ 485.473795][T22449] __nla_validate_parse: 16 callbacks suppressed [ 485.473816][T22449] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4429'. [ 485.672825][T22455] netlink: 324 bytes leftover after parsing attributes in process `syz.4.4432'. [ 485.756610][T22461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4435'. [ 485.811118][T22465] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 485.841250][T22457] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 485.878347][T22465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4434'. [ 486.013817][T22477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4439'. [ 486.041708][T22476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4439'. [ 486.071638][T22480] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4440'. [ 486.169594][T22482] netlink: 'syz.0.4441': attribute type 1 has an invalid length. [ 486.267573][T22482] 8021q: adding VLAN 0 to HW filter on device bond3 [ 486.285499][T22487] vlan2: entered promiscuous mode [ 486.291384][T22487] bond3: entered promiscuous mode [ 486.296896][T22487] vlan2: entered allmulticast mode [ 486.302168][T22487] bond3: entered allmulticast mode [ 486.401780][T22482] bond3: (slave bridge2): making interface the new active one [ 486.409305][T22482] bridge2: entered promiscuous mode [ 486.432221][T22482] bridge2: entered allmulticast mode [ 486.451851][T22482] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 486.485039][T22502] netlink: 'syz.1.4445': attribute type 83 has an invalid length. [ 486.538052][T22471] vxcan1 speed is unknown, defaulting to 1000 [ 486.562708][T22505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4447'. [ 486.580604][T22505] netlink: 'syz.3.4447': attribute type 3 has an invalid length. [ 486.751617][T22262] net_ratelimit: 114 callbacks suppressed [ 486.751640][T22262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 486.768785][T22512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4450'. [ 486.789029][T22262] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 486.920594][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 486.943775][T22251] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 486.993302][T22522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4452'. [ 487.062856][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 487.075131][T22251] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 487.190597][T22262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 487.222574][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 487.260561][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 487.301024][T22262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 487.763398][T22561] syzkaller0: entered promiscuous mode [ 487.769367][T22561] syzkaller0: entered allmulticast mode [ 488.342972][ T5147] Bluetooth: hci4: command 0x0406 tx timeout [ 489.073802][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 489.081914][ C1] lec:lec_tx_timeout: lec0 [ 489.087100][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 491.831121][T22289] net_ratelimit: 134 callbacks suppressed [ 491.831144][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 491.845324][T22289] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 491.960517][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 491.968450][T22289] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 492.080436][T22284] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 492.088359][T22284] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 492.200487][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 492.208646][T22289] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 492.320471][T22283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 492.328295][T22283] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 494.100856][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 494.108934][ C1] lec:lec_tx_timeout: lec0 [ 494.113639][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 496.870450][T22287] net_ratelimit: 92 callbacks suppressed [ 496.870468][T22287] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 496.884187][T22287] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 497.001511][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 497.009389][T22251] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 497.120689][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 497.128690][T22251] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 497.240477][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 497.248268][T22251] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 497.360440][T22262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 497.368213][T22262] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 499.120317][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 499.128374][ C1] lec:lec_tx_timeout: lec0 [ 499.133380][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 501.880478][T22283] net_ratelimit: 86 callbacks suppressed [ 501.880503][T22283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 501.894174][T22283] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 502.010610][T22283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 502.018495][T22283] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 502.134124][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 502.143017][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 502.151165][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 502.159290][T22286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 502.160782][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 502.178339][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 502.187186][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 502.280383][T22283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 502.288286][T22283] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 502.365731][T22582] vxcan1 speed is unknown, defaulting to 1000 [ 502.400404][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 502.408317][T22286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 502.622810][T22582] chnl_net:caif_netlink_parms(): no params data found [ 502.704085][T22582] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.711761][T22582] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.719265][T22582] bridge_slave_0: entered allmulticast mode [ 502.726926][T22582] bridge_slave_0: entered promiscuous mode [ 502.736354][T22582] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.744436][T22582] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.751951][T22582] bridge_slave_1: entered allmulticast mode [ 502.759455][T22582] bridge_slave_1: entered promiscuous mode [ 502.791305][T22582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.804078][T22582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.836302][T22582] team0: Port device team_slave_0 added [ 502.845114][T22582] team0: Port device team_slave_1 added [ 502.872408][T22582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.879394][T22582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.906586][T22582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.920533][T22582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.927669][T22582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.954681][T22582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.001113][T22582] hsr_slave_0: entered promiscuous mode [ 503.007830][T22582] hsr_slave_1: entered promiscuous mode [ 503.015067][T22582] debugfs: 'hsr0' already exists in 'hsr' [ 503.020987][T22582] Cannot create hsr debugfs directory [ 503.271120][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 503.287207][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 503.301521][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 503.312718][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 503.321720][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 503.336559][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 503.353627][ T5147] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 503.362669][ T5147] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 503.372894][ T5147] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 503.383078][ T5147] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 503.603571][T22592] vxcan1 speed is unknown, defaulting to 1000 [ 503.826591][T22594] vxcan1 speed is unknown, defaulting to 1000 [ 504.062821][T22592] chnl_net:caif_netlink_parms(): no params data found [ 504.140300][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 504.148470][ C1] lec:lec_tx_timeout: lec0 [ 504.153911][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 504.190465][ T25] block nbd2: Possible stuck request ffff8880253c0000: control (read@0,1024B). Runtime 180 seconds [ 504.201704][ T25] block nbd2: Possible stuck request ffff8880253c0200: control (read@1024,1024B). Runtime 180 seconds [ 504.213493][ T125] block nbd1: Possible stuck request ffff888025368000: control (read@0,1024B). Runtime 180 seconds [ 504.224385][ T125] block nbd1: Possible stuck request ffff888025368200: control (read@1024,1024B). Runtime 180 seconds [ 504.235991][ T125] block nbd1: Possible stuck request ffff888025368400: control (read@2048,1024B). Runtime 180 seconds [ 504.248266][ T25] block nbd2: Possible stuck request ffff8880253c0400: control (read@2048,1024B). Runtime 180 seconds [ 504.259693][ T25] block nbd2: Possible stuck request ffff8880253c0600: control (read@3072,1024B). Runtime 180 seconds [ 504.271413][ T52] Bluetooth: hci2: command tx timeout [ 504.277866][ T125] block nbd1: Possible stuck request ffff888025368600: control (read@3072,1024B). Runtime 180 seconds [ 504.302261][T22592] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.309479][T22592] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.316959][T22592] bridge_slave_0: entered allmulticast mode [ 504.324634][T22592] bridge_slave_0: entered promiscuous mode [ 504.353074][T22592] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.361692][T22592] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.369387][T22592] bridge_slave_1: entered allmulticast mode [ 504.377586][T22592] bridge_slave_1: entered promiscuous mode [ 504.425403][T22592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.439768][T22592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.449474][T22594] chnl_net:caif_netlink_parms(): no params data found [ 504.502767][T22592] team0: Port device team_slave_0 added [ 504.521277][T22592] team0: Port device team_slave_1 added [ 504.567392][T22592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.577330][T22592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.603592][T22592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.626572][T22592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.633703][T22592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.660417][T22592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.694922][T22594] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.702210][T22594] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.709423][T22594] bridge_slave_0: entered allmulticast mode [ 504.717009][T22594] bridge_slave_0: entered promiscuous mode [ 504.726567][T22594] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.734036][T22594] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.741462][T22594] bridge_slave_1: entered allmulticast mode [ 504.748797][T22594] bridge_slave_1: entered promiscuous mode [ 504.803834][T22594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.818057][T22594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.833609][T22592] hsr_slave_0: entered promiscuous mode [ 504.840132][T22592] hsr_slave_1: entered promiscuous mode [ 504.846710][T22592] debugfs: 'hsr0' already exists in 'hsr' [ 504.852686][T22592] Cannot create hsr debugfs directory [ 504.883104][T22594] team0: Port device team_slave_0 added [ 504.904994][T22594] team0: Port device team_slave_1 added [ 504.952280][T22594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.959405][T22594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.986447][T22594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.006494][T22594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.014523][T22594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.040567][T22594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.126090][T22594] hsr_slave_0: entered promiscuous mode [ 505.133816][T22594] hsr_slave_1: entered promiscuous mode [ 505.142349][T22594] debugfs: 'hsr0' already exists in 'hsr' [ 505.148163][T22594] Cannot create hsr debugfs directory [ 505.424697][ T5147] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 505.439397][ T5147] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 505.451024][ T5147] Bluetooth: hci7: command tx timeout [ 505.457480][ T5833] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 505.464838][ T5837] Bluetooth: hci6: command tx timeout [ 505.476789][ T5833] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 505.488255][ T5833] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 505.492439][ T5837] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 505.506089][ T5837] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 505.514533][ T5837] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 505.525327][ T5837] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 505.537165][ T5837] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 505.825155][T22614] vxcan1 speed is unknown, defaulting to 1000 [ 506.076175][T22612] vxcan1 speed is unknown, defaulting to 1000 [ 506.224303][T22614] chnl_net:caif_netlink_parms(): no params data found [ 506.331031][ T5837] Bluetooth: hci2: command tx timeout [ 506.355232][T22614] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.362467][T22614] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.369836][T22614] bridge_slave_0: entered allmulticast mode [ 506.377937][T22614] bridge_slave_0: entered promiscuous mode [ 506.387743][T22614] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.395397][T22614] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.403183][T22614] bridge_slave_1: entered allmulticast mode [ 506.411785][T22614] bridge_slave_1: entered promiscuous mode [ 506.464806][T22614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.482900][T22614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.529683][T22614] team0: Port device team_slave_0 added [ 506.538685][T22614] team0: Port device team_slave_1 added [ 506.588119][T22614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.595441][T22614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.622383][T22614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.640461][T22614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.647497][T22614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.676253][T22614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.737190][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.775133][T22614] hsr_slave_0: entered promiscuous mode [ 506.782067][T22614] hsr_slave_1: entered promiscuous mode [ 506.788545][T22614] debugfs: 'hsr0' already exists in 'hsr' [ 506.794708][T22614] Cannot create hsr debugfs directory [ 506.806072][T22612] chnl_net:caif_netlink_parms(): no params data found [ 506.910946][T22262] net_ratelimit: 163 callbacks suppressed [ 506.910966][T22262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 506.951031][T22262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 506.963695][T22612] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.971321][T22612] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.973447][T22262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 506.979069][T22612] bridge_slave_0: entered allmulticast mode [ 506.993922][T22612] bridge_slave_0: entered promiscuous mode [ 507.001221][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 507.006784][T22612] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.016452][T22612] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.023848][T22612] bridge_slave_1: entered allmulticast mode [ 507.031625][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 507.032544][T22612] bridge_slave_1: entered promiscuous mode [ 507.050541][T22262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 507.070506][T22262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 507.090457][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 507.102052][T22612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.111464][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 507.135864][T22612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.142192][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 507.191096][T22612] team0: Port device team_slave_0 added [ 507.204704][T22612] team0: Port device team_slave_1 added [ 507.244486][T22612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.251793][T22612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.278773][T22612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.292746][T22612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.299741][T22612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.327035][T22612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.409601][T22612] hsr_slave_0: entered promiscuous mode [ 507.416476][T22612] hsr_slave_1: entered promiscuous mode [ 507.422965][T22612] debugfs: 'hsr0' already exists in 'hsr' [ 507.428713][T22612] Cannot create hsr debugfs directory [ 507.530979][ T5147] Bluetooth: hci6: command tx timeout [ 507.540539][ T5147] Bluetooth: hci7: command tx timeout [ 507.610800][ T5833] Bluetooth: hci9: command tx timeout [ 507.617087][ T5147] Bluetooth: hci8: command tx timeout [ 508.410529][ T5147] Bluetooth: hci2: command tx timeout [ 508.810786][ T5147] Bluetooth: hci0: command 0x0406 tx timeout [ 509.160505][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 509.168540][ C1] lec:lec_tx_timeout: lec0 [ 509.173213][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 509.610578][ T5837] Bluetooth: hci7: command tx timeout [ 509.611063][ T5147] Bluetooth: hci6: command tx timeout [ 509.690849][ T5147] Bluetooth: hci9: command tx timeout [ 509.700965][ T5147] Bluetooth: hci8: command tx timeout [ 510.490477][ T5147] Bluetooth: hci2: command tx timeout [ 511.690922][ T5147] Bluetooth: hci7: command tx timeout [ 511.691332][ T5837] Bluetooth: hci6: command tx timeout [ 511.772236][ T5837] Bluetooth: hci8: command tx timeout [ 511.772259][ T5147] Bluetooth: hci9: command tx timeout [ 511.825699][ T5196] udevd[5196]: worker [15615] /devices/virtual/block/nbd1 timeout; kill it [ 511.834907][ T5196] udevd[5196]: seq 18410 '/devices/virtual/block/nbd1' killed [ 511.842869][ T5196] udevd[5196]: worker [15640] /devices/virtual/block/nbd2 timeout; kill it [ 511.852334][ T5196] udevd[5196]: seq 18411 '/devices/virtual/block/nbd2' killed [ 512.010576][T22284] net_ratelimit: 105 callbacks suppressed [ 512.010600][T22284] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 512.024904][T22284] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 512.141051][T22284] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 512.148857][T22284] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 512.260682][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 512.268509][T22289] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 512.380698][T22283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 512.388489][T22283] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 512.518639][T22283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 512.526583][T22283] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 513.851814][ T5147] Bluetooth: hci9: command tx timeout [ 513.852925][ T5837] Bluetooth: hci8: command tx timeout [ 514.180781][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 514.188820][ C1] lec:lec_tx_timeout: lec0 [ 514.193589][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 517.070438][T22262] net_ratelimit: 92 callbacks suppressed [ 517.070460][T22262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 517.085933][T22262] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 517.201929][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 517.209906][T22289] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 517.320975][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 517.328763][T22289] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 517.440865][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 517.448889][T22289] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 517.560886][T22283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 517.568865][T22283] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 520.010297][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 520.018639][ C1] lec:lec_tx_timeout: lec0 [ 520.024509][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 522.101272][T22284] net_ratelimit: 86 callbacks suppressed [ 522.101295][T22284] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 522.115172][T22284] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 522.230406][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 522.238188][T22289] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 522.350536][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 522.358447][T22289] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 522.470483][T22262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 522.478362][T22262] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 522.590491][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 522.598883][T22286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 525.040328][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 525.048419][ C1] lec:lec_tx_timeout: lec0 [ 525.053314][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 527.120594][T22284] net_ratelimit: 92 callbacks suppressed [ 527.120617][T22284] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 527.134909][T22284] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 527.251003][T22284] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 527.258777][T22284] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 527.371419][T22262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 527.379210][T22262] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 527.491000][T22284] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 527.498780][T22284] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 527.611028][T22262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 527.618830][T22262] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 530.060309][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 530.068394][ C1] lec:lec_tx_timeout: lec0 [ 530.073772][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 532.130608][T22289] net_ratelimit: 86 callbacks suppressed [ 532.130635][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 532.144869][T22289] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 532.260458][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 532.268229][T22289] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 532.380720][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 532.388526][T22289] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 532.500514][T22283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 532.508652][T22283] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 532.620660][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 532.628556][T22289] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 534.253284][ T25] block nbd2: Possible stuck request ffff8880253c0000: control (read@0,1024B). Runtime 210 seconds [ 534.264680][ T125] block nbd1: Possible stuck request ffff888025368000: control (read@0,1024B). Runtime 210 seconds [ 534.275773][ T125] block nbd1: Possible stuck request ffff888025368200: control (read@1024,1024B). Runtime 210 seconds [ 534.286913][ T25] block nbd2: Possible stuck request ffff8880253c0200: control (read@1024,1024B). Runtime 210 seconds [ 534.298860][ T125] block nbd1: Possible stuck request ffff888025368400: control (read@2048,1024B). Runtime 210 seconds [ 534.310305][ T25] block nbd2: Possible stuck request ffff8880253c0400: control (read@2048,1024B). Runtime 210 seconds [ 534.340675][ T125] block nbd1: Possible stuck request ffff888025368600: control (read@3072,1024B). Runtime 210 seconds [ 534.352457][ T25] block nbd2: Possible stuck request ffff8880253c0600: control (read@3072,1024B). Runtime 210 seconds [ 535.080370][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 535.088422][ C1] lec:lec_tx_timeout: lec0 [ 535.093410][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 537.160953][T22251] net_ratelimit: 93 callbacks suppressed [ 537.160978][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 537.174726][T22251] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 537.291035][T22287] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 537.298829][T22287] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 537.411066][T22284] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 537.419138][T22284] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 537.531233][T22287] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 537.539109][T22287] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 537.650907][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 537.658716][T22251] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 540.100316][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 540.108468][ C1] lec:lec_tx_timeout: lec0 [ 540.113843][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 542.170758][T22251] net_ratelimit: 86 callbacks suppressed [ 542.170782][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 542.185182][T22251] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 542.300940][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 542.308729][T22251] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 542.420446][T22284] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 542.428248][T22284] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 542.541746][T22262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 542.549557][T22262] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 542.660413][T22262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 542.668323][T22262] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 545.120965][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 545.129165][ C1] lec:lec_tx_timeout: lec0 [ 545.135700][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 547.190972][T22286] net_ratelimit: 92 callbacks suppressed [ 547.190995][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 547.204570][T22286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 547.320429][T22287] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 547.328203][T22287] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 547.440485][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 547.448276][T22251] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 547.570824][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 547.578705][T22286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 547.692334][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 547.700131][T22286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 550.150737][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 550.158768][ C1] lec:lec_tx_timeout: lec0 [ 550.163633][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 552.220446][T22287] net_ratelimit: 86 callbacks suppressed [ 552.220469][T22287] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 552.234396][T22287] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 552.350849][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 552.358640][T22289] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 552.470819][T22287] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 552.478597][T22287] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 552.590940][T22284] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 552.598742][T22284] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 552.710647][T22287] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 552.718440][T22287] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 555.170390][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 555.178458][ C1] lec:lec_tx_timeout: lec0 [ 555.183250][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 557.260522][T22262] net_ratelimit: 92 callbacks suppressed [ 557.260546][T22262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 557.274242][T22262] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 557.390887][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 557.398679][T22286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 557.510525][T22284] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 557.518327][T22284] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 557.630536][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 557.638351][T22286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 557.750496][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 557.758299][T22251] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 560.190428][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 560.198574][ C1] lec:lec_tx_timeout: lec0 [ 560.203789][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 562.188531][ T5147] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 562.198103][ T5147] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 562.209901][ T5147] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 562.219250][ T5147] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 562.227481][ T5147] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 562.311380][T22289] net_ratelimit: 86 callbacks suppressed [ 562.311404][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 562.325879][T22289] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 562.413244][T22635] vxcan1 speed is unknown, defaulting to 1000 [ 562.440841][T22262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 562.448735][T22262] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 562.561264][T22262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 562.581111][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 562.600940][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 562.620391][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 562.640361][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 562.670732][T22262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 562.719388][T22635] chnl_net:caif_netlink_parms(): no params data found [ 562.798862][T22635] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.806153][T22635] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.814336][T22635] bridge_slave_0: entered allmulticast mode [ 562.824229][T22635] bridge_slave_0: entered promiscuous mode [ 562.833033][T22635] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.840372][T22635] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.847906][T22635] bridge_slave_1: entered allmulticast mode [ 562.855639][T22635] bridge_slave_1: entered promiscuous mode [ 562.887600][T22635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.900122][T22635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.932268][T22635] team0: Port device team_slave_0 added [ 562.940739][T22635] team0: Port device team_slave_1 added [ 562.968583][T22635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.975999][T22635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.002067][T22635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.015152][T22635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.022365][T22635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.048360][T22635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.095062][T22635] hsr_slave_0: entered promiscuous mode [ 563.111771][T22635] hsr_slave_1: entered promiscuous mode [ 563.118092][T22635] debugfs: 'hsr0' already exists in 'hsr' [ 563.124685][T22635] Cannot create hsr debugfs directory [ 563.276774][ T5147] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 563.286439][ T5147] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 563.296977][ T5147] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 563.305143][ T5147] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 563.313213][ T5147] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 563.513456][T22644] vxcan1 speed is unknown, defaulting to 1000 [ 563.825882][T22644] chnl_net:caif_netlink_parms(): no params data found [ 563.904493][T22644] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.911890][T22644] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.919171][T22644] bridge_slave_0: entered allmulticast mode [ 563.926988][T22644] bridge_slave_0: entered promiscuous mode [ 563.936628][T22644] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.944176][T22644] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.951870][T22644] bridge_slave_1: entered allmulticast mode [ 563.959186][T22644] bridge_slave_1: entered promiscuous mode [ 563.992448][T22644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.005222][T22644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.037740][T22644] team0: Port device team_slave_0 added [ 564.046231][T22644] team0: Port device team_slave_1 added [ 564.075782][T22644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.082838][T22644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.109291][T22644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.122166][T22644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.129131][T22644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.160301][T22644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.233526][T22644] hsr_slave_0: entered promiscuous mode [ 564.241195][T22644] hsr_slave_1: entered promiscuous mode [ 564.247836][T22644] debugfs: 'hsr0' already exists in 'hsr' [ 564.254208][ T5147] Bluetooth: hci10: command tx timeout [ 564.261478][T22644] Cannot create hsr debugfs directory [ 564.333498][ T125] block nbd1: Possible stuck request ffff888025368000: control (read@0,1024B). Runtime 240 seconds [ 564.345068][ T25] block nbd2: Possible stuck request ffff8880253c0000: control (read@0,1024B). Runtime 240 seconds [ 564.356284][ T125] block nbd1: Possible stuck request ffff888025368200: control (read@1024,1024B). Runtime 240 seconds [ 564.367711][ T25] block nbd2: Possible stuck request ffff8880253c0200: control (read@1024,1024B). Runtime 240 seconds [ 564.379930][ T125] block nbd1: Possible stuck request ffff888025368400: control (read@2048,1024B). Runtime 240 seconds [ 564.391286][ T25] block nbd2: Possible stuck request ffff8880253c0400: control (read@2048,1024B). Runtime 240 seconds [ 564.408592][ T5837] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 564.416976][ T25] block nbd2: Possible stuck request ffff8880253c0600: control (read@3072,1024B). Runtime 240 seconds [ 564.428399][ T125] block nbd1: Possible stuck request ffff888025368600: control (read@3072,1024B). Runtime 240 seconds [ 564.442588][ T5837] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 564.452374][ T5837] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 564.461493][ T5837] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 564.469506][ T5837] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 564.703213][T22653] vxcan1 speed is unknown, defaulting to 1000 [ 565.034615][T22653] chnl_net:caif_netlink_parms(): no params data found [ 565.115876][T22653] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.123633][T22653] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.131608][T22653] bridge_slave_0: entered allmulticast mode [ 565.139050][T22653] bridge_slave_0: entered promiscuous mode [ 565.147660][T22653] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.156034][T22653] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.163592][T22653] bridge_slave_1: entered allmulticast mode [ 565.172285][T22653] bridge_slave_1: entered promiscuous mode [ 565.212016][T22653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.225671][T22653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.273245][T22653] team0: Port device team_slave_0 added [ 565.284285][T22653] team0: Port device team_slave_1 added [ 565.325393][T22653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.333765][T22653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.361211][T22653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.375775][T22653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.383278][T22653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.384552][ T5837] Bluetooth: hci11: command tx timeout [ 565.413419][T22653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.451146][ T5147] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 565.459854][ T5147] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 565.469720][ T5147] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 565.493767][ T5147] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 565.509867][ T5147] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 565.515291][T22653] hsr_slave_0: entered promiscuous mode [ 565.524383][T22653] hsr_slave_1: entered promiscuous mode [ 565.531801][T22653] debugfs: 'hsr0' already exists in 'hsr' [ 565.537586][T22653] Cannot create hsr debugfs directory [ 565.815056][T22662] vxcan1 speed is unknown, defaulting to 1000 [ 566.156260][T22662] chnl_net:caif_netlink_parms(): no params data found [ 566.250235][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6050 ms [ 566.258295][ C1] lec:lec_tx_timeout: lec0 [ 566.263334][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 566.272191][T22662] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.279952][T22662] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.287869][T22662] bridge_slave_0: entered allmulticast mode [ 566.296854][T22662] bridge_slave_0: entered promiscuous mode [ 566.307819][T22662] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.315464][T22662] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.323963][T22662] bridge_slave_1: entered allmulticast mode [ 566.331038][ T5147] Bluetooth: hci10: command tx timeout [ 566.342915][T22662] bridge_slave_1: entered promiscuous mode [ 566.396261][T22662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.409918][T22662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.431371][ T5837] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 566.444039][ T5837] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 566.452766][ T5837] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 566.461979][ T5837] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 566.471803][ T5837] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 566.502647][T22662] team0: Port device team_slave_0 added [ 566.512378][T22662] team0: Port device team_slave_1 added [ 566.554791][T22662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.561974][T22662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.588195][ T5837] Bluetooth: hci12: command tx timeout [ 566.594500][T22662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.608664][T22662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.617078][T22662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.644396][T22662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.709922][T22662] hsr_slave_0: entered promiscuous mode [ 566.717403][T22662] hsr_slave_1: entered promiscuous mode [ 566.724723][T22662] debugfs: 'hsr0' already exists in 'hsr' [ 566.736882][T22662] Cannot create hsr debugfs directory [ 566.863519][T22671] vxcan1 speed is unknown, defaulting to 1000 [ 567.185184][T22671] chnl_net:caif_netlink_parms(): no params data found [ 567.315666][T22671] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.324140][T22671] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.333647][T22671] bridge_slave_0: entered allmulticast mode [ 567.341411][T22671] bridge_slave_0: entered promiscuous mode [ 567.358594][T22671] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.366107][T22671] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.374309][T22671] bridge_slave_1: entered allmulticast mode [ 567.381900][T22671] bridge_slave_1: entered promiscuous mode [ 567.401495][T22286] net_ratelimit: 156 callbacks suppressed [ 567.401513][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 567.430337][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 567.438632][T22286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 567.451464][ T5837] Bluetooth: hci11: command tx timeout [ 567.463857][T22671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.477803][T22671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.512698][T22671] team0: Port device team_slave_0 added [ 567.521686][T22671] team0: Port device team_slave_1 added [ 567.551204][T22671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.552058][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 567.558199][T22671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.593156][T22671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.605820][T22671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.613251][T22671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.622235][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 567.641923][ T5837] Bluetooth: hci13: command tx timeout [ 567.653308][T22671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.670583][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 567.678382][T22286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 567.713984][T22671] hsr_slave_0: entered promiscuous mode [ 567.721474][T22671] hsr_slave_1: entered promiscuous mode [ 567.727984][T22671] debugfs: 'hsr0' already exists in 'hsr' [ 567.733909][T22671] Cannot create hsr debugfs directory [ 567.790824][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 567.810853][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 567.830354][T22262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 568.175292][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.410872][ T5837] Bluetooth: hci10: command tx timeout [ 568.580514][ T5837] Bluetooth: hci14: command tx timeout [ 568.660682][ T5837] Bluetooth: hci12: command tx timeout [ 569.530928][ T5837] Bluetooth: hci11: command tx timeout [ 569.690489][ T5837] Bluetooth: hci13: command tx timeout [ 570.490805][ T5837] Bluetooth: hci10: command tx timeout [ 570.650476][ T5837] Bluetooth: hci14: command tx timeout [ 570.730789][ T5837] Bluetooth: hci12: command tx timeout [ 571.610490][ T5837] Bluetooth: hci11: command tx timeout [ 571.770891][ T5837] Bluetooth: hci13: command tx timeout [ 572.010290][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 572.018366][ C1] lec:lec_tx_timeout: lec0 [ 572.023582][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 572.470832][T22284] net_ratelimit: 92 callbacks suppressed [ 572.470855][T22284] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 572.485129][T22284] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 572.600491][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 572.608278][T22251] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 572.720887][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 572.728727][T22251] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 572.740394][ T5837] Bluetooth: hci14: command tx timeout [ 572.810869][ T5837] Bluetooth: hci12: command tx timeout [ 572.840536][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 572.848414][T22251] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 572.960552][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 572.968350][T22251] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 573.850942][ T5837] Bluetooth: hci13: command tx timeout [ 574.810947][ T5837] Bluetooth: hci14: command tx timeout [ 577.030315][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 577.038475][ C1] lec:lec_tx_timeout: lec0 [ 577.043813][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 577.491086][T22287] net_ratelimit: 92 callbacks suppressed [ 577.491109][T22287] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 577.504628][T22287] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 577.620521][T22287] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 577.628419][T22287] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 577.740450][T22262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 577.748347][T22262] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 577.860417][T22283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 577.868312][T22283] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 577.990724][T22283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 577.998523][T22283] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 582.050731][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 582.058757][ C1] lec:lec_tx_timeout: lec0 [ 582.063506][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 582.510624][T22251] net_ratelimit: 86 callbacks suppressed [ 582.510647][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 582.524283][T22251] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 582.640593][T22262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 582.648396][T22262] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 582.760449][T22262] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 582.768252][T22262] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 582.880469][T22284] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 582.888354][T22284] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 583.000405][T22283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 583.008286][T22283] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 587.070279][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 587.078422][ C1] lec:lec_tx_timeout: lec0 [ 587.083289][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 587.570881][T22283] net_ratelimit: 92 callbacks suppressed [ 587.570904][T22283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 587.584612][T22283] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 587.700431][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 587.708221][T22289] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 587.820538][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 587.828509][T22289] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 587.940438][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 587.948202][T22251] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 588.060501][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 588.068291][T22251] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 592.090965][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 592.099013][ C1] lec:lec_tx_timeout: lec0 [ 592.103858][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 592.581043][T22287] net_ratelimit: 86 callbacks suppressed [ 592.581066][T22287] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 592.594979][T22287] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 592.710466][T22283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 592.718539][T22283] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 592.830580][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 592.838396][T22251] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 592.950535][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 592.958544][T22289] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 593.050731][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.059489][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.412492][ T125] block nbd1: Possible stuck request ffff888025368000: control (read@0,1024B). Runtime 270 seconds [ 594.423685][ T25] block nbd2: Possible stuck request ffff8880253c0000: control (read@0,1024B). Runtime 270 seconds [ 594.435174][ T125] block nbd1: Possible stuck request ffff888025368200: control (read@1024,1024B). Runtime 270 seconds [ 594.446345][ T25] block nbd2: Possible stuck request ffff8880253c0200: control (read@1024,1024B). Runtime 270 seconds [ 594.457804][ T125] block nbd1: Possible stuck request ffff888025368400: control (read@2048,1024B). Runtime 270 seconds [ 594.469437][ T25] block nbd2: Possible stuck request ffff8880253c0400: control (read@2048,1024B). Runtime 270 seconds [ 594.491375][ T125] block nbd1: Possible stuck request ffff888025368600: control (read@3072,1024B). Runtime 270 seconds [ 594.502853][ T25] block nbd2: Possible stuck request ffff8880253c0600: control (read@3072,1024B). Runtime 270 seconds [ 597.110319][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 597.118579][ C1] lec:lec_tx_timeout: lec0 [ 597.123355][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 597.610760][T22286] net_ratelimit: 92 callbacks suppressed [ 597.610784][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 597.625134][T22286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 597.740425][T22283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 597.748208][T22283] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 597.860391][T22283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 597.868279][T22283] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 597.980913][T22283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 597.988732][T22283] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 598.100833][T22283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 598.108703][T22283] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 602.130615][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 602.138693][ C1] lec:lec_tx_timeout: lec0 [ 602.630964][T22251] net_ratelimit: 86 callbacks suppressed [ 602.630988][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 602.644673][T22251] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 602.760458][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 602.768324][T22251] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 602.880492][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 602.888294][T22286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 602.970841][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.979224][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.987754][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.996261][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.740588][T22287] net_ratelimit: 95 callbacks suppressed [ 607.740611][T22287] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 607.754732][T22287] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 607.870894][T22287] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 607.878701][T22287] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 607.990860][T22287] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 607.998657][T22287] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 608.112463][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 608.120321][T22286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 608.230783][T22287] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 608.238562][T22287] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 611.210393][ T5147] Bluetooth: hci3: command 0x0406 tx timeout [ 612.760433][T22286] net_ratelimit: 86 callbacks suppressed [ 612.760456][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 612.774340][T22286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 612.890494][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.898863][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.907281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.915718][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.924235][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.932652][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.942248][T22287] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 612.950024][T22287] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 617.810563][T22287] net_ratelimit: 92 callbacks suppressed [ 617.810588][T22287] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 617.824106][T22287] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 617.940554][T22283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 617.948360][T22283] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 618.060546][T22287] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 618.068417][T22287] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 618.180406][T22283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 618.188287][T22283] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 618.300430][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 618.308217][T22251] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 622.246838][ T5147] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 622.256405][ T5147] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 622.265424][ T5147] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 622.276666][ T5147] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 622.284745][ T5147] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 622.450111][T22688] vxcan1 speed is unknown, defaulting to 1000 [ 622.703752][T22688] chnl_net:caif_netlink_parms(): no params data found [ 622.787537][T22688] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.795242][T22688] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.802686][T22688] bridge_slave_0: entered allmulticast mode [ 622.810119][T22688] bridge_slave_0: entered promiscuous mode [ 622.820304][T22251] net_ratelimit: 95 callbacks suppressed [ 622.820322][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 622.821069][T22688] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.841573][T22688] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.848885][T22688] bridge_slave_1: entered allmulticast mode [ 622.851535][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 622.862529][T22688] bridge_slave_1: entered promiscuous mode [ 622.880328][T22284] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 622.900544][T22284] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 622.911153][T22688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.924235][T22688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.930643][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 622.961021][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 622.967431][T22688] team0: Port device team_slave_0 added [ 622.977392][T22688] team0: Port device team_slave_1 added [ 622.990473][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 623.011212][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 623.020957][T22688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.028052][T22688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.054969][T22688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.062373][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 623.072397][T22688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.080877][T22688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.106936][T22688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.111794][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 623.165975][T22688] hsr_slave_0: entered promiscuous mode [ 623.173572][T22688] hsr_slave_1: entered promiscuous mode [ 623.180107][T22688] debugfs: 'hsr0' already exists in 'hsr' [ 623.186678][T22688] Cannot create hsr debugfs directory [ 623.335127][ T5147] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 623.361027][ T5147] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 623.369306][ T5147] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 623.377804][ T5147] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 623.385675][ T5147] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 623.594905][T22697] vxcan1 speed is unknown, defaulting to 1000 [ 623.893520][T22697] chnl_net:caif_netlink_parms(): no params data found [ 623.979725][T22697] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.987707][T22697] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.995489][T22697] bridge_slave_0: entered allmulticast mode [ 624.003482][T22697] bridge_slave_0: entered promiscuous mode [ 624.013881][T22697] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.021446][T22697] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.028976][T22697] bridge_slave_1: entered allmulticast mode [ 624.037066][T22697] bridge_slave_1: entered promiscuous mode [ 624.070137][T22697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.083307][T22697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.118410][T22697] team0: Port device team_slave_0 added [ 624.126974][T22697] team0: Port device team_slave_1 added [ 624.157085][T22697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 624.164397][T22697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.200264][T22697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.214285][T22697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.222881][T22697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.254863][T22697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.327551][T22697] hsr_slave_0: entered promiscuous mode [ 624.335590][T22697] hsr_slave_1: entered promiscuous mode [ 624.342643][ T5147] Bluetooth: hci15: command tx timeout [ 624.343820][T22697] debugfs: 'hsr0' already exists in 'hsr' [ 624.355243][T22697] Cannot create hsr debugfs directory [ 624.400474][ T5837] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 624.410979][ T5837] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 624.419583][ T5837] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 624.428182][ T5837] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 624.436107][ T5837] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 624.511158][ T125] block nbd1: Possible stuck request ffff888025368000: control (read@0,1024B). Runtime 300 seconds [ 624.524847][ T25] block nbd2: Possible stuck request ffff8880253c0000: control (read@0,1024B). Runtime 300 seconds [ 624.535848][ T125] block nbd1: Possible stuck request ffff888025368200: control (read@1024,1024B). Runtime 300 seconds [ 624.547732][ T25] block nbd2: Possible stuck request ffff8880253c0200: control (read@1024,1024B). Runtime 300 seconds [ 624.559912][ T125] block nbd1: Possible stuck request ffff888025368400: control (read@2048,1024B). Runtime 300 seconds [ 624.571396][ T25] block nbd2: Possible stuck request ffff8880253c0400: control (read@2048,1024B). Runtime 300 seconds [ 624.591706][ T125] block nbd1: Possible stuck request ffff888025368600: control (read@3072,1024B). Runtime 300 seconds [ 624.603166][ T25] block nbd2: Possible stuck request ffff8880253c0600: control (read@3072,1024B). Runtime 300 seconds [ 624.778792][T22706] vxcan1 speed is unknown, defaulting to 1000 [ 625.136833][T22706] chnl_net:caif_netlink_parms(): no params data found [ 625.222871][T22706] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.230573][T22706] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.237996][T22706] bridge_slave_0: entered allmulticast mode [ 625.247037][T22706] bridge_slave_0: entered promiscuous mode [ 625.257346][T22706] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.265069][T22706] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.273407][T22706] bridge_slave_1: entered allmulticast mode [ 625.281885][T22706] bridge_slave_1: entered promiscuous mode [ 625.324746][T22706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.338495][T22706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.391561][T22706] team0: Port device team_slave_0 added [ 625.401224][T22706] team0: Port device team_slave_1 added [ 625.443984][T22706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.452971][T22708] Bluetooth: hci16: command tx timeout [ 625.460800][T22706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.491884][T22706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.505554][T22706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.513162][T22706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.539985][T22706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.545750][ T5833] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 625.561724][ T5833] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 625.572395][ T5833] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 625.584059][ T5833] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 625.592161][ T5833] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 625.647857][T22706] hsr_slave_0: entered promiscuous mode [ 625.655272][T22706] hsr_slave_1: entered promiscuous mode [ 625.662338][T22706] debugfs: 'hsr0' already exists in 'hsr' [ 625.668279][T22706] Cannot create hsr debugfs directory [ 625.889805][T22716] vxcan1 speed is unknown, defaulting to 1000 [ 626.232431][T22716] chnl_net:caif_netlink_parms(): no params data found [ 626.355294][T22716] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.362736][T22716] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.370412][T22716] bridge_slave_0: entered allmulticast mode [ 626.379352][T22716] bridge_slave_0: entered promiscuous mode [ 626.394193][T22716] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.401835][T22716] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.409405][T22716] bridge_slave_1: entered allmulticast mode [ 626.420640][T22708] Bluetooth: hci15: command tx timeout [ 626.429804][T22716] bridge_slave_1: entered promiscuous mode [ 626.483073][T22716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.497526][T22716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.508374][T22708] Bluetooth: hci17: command tx timeout [ 626.518485][T22708] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 626.532489][T22708] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 626.541845][T22708] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 626.550043][T22708] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 626.558754][T22708] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 626.570886][ T5833] Bluetooth: hci6: command 0x0406 tx timeout [ 626.570906][T22728] Bluetooth: hci2: command 0x0406 tx timeout [ 626.577081][ T5833] Bluetooth: hci7: command 0x0406 tx timeout [ 626.609100][T22716] team0: Port device team_slave_0 added [ 626.621422][T22716] team0: Port device team_slave_1 added [ 626.677900][T22716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.685347][T22716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.711926][T22716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.725086][T22716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.732663][T22716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.759181][T22716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.841439][T22716] hsr_slave_0: entered promiscuous mode [ 626.848640][T22716] hsr_slave_1: entered promiscuous mode [ 626.855515][T22716] debugfs: 'hsr0' already exists in 'hsr' [ 626.862250][T22716] Cannot create hsr debugfs directory [ 626.977472][T22726] vxcan1 speed is unknown, defaulting to 1000 [ 627.315077][T22726] chnl_net:caif_netlink_parms(): no params data found [ 627.462483][T22726] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.469639][T22726] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.477170][T22726] bridge_slave_0: entered allmulticast mode [ 627.485147][T22726] bridge_slave_0: entered promiscuous mode [ 627.494890][T22726] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.502192][T22726] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.509556][T22726] bridge_slave_1: entered allmulticast mode [ 627.517692][T22726] bridge_slave_1: entered promiscuous mode [ 627.531907][ T5837] Bluetooth: hci16: command tx timeout [ 627.557647][T22726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.571313][T22726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.604936][T22726] team0: Port device team_slave_0 added [ 627.614902][T22726] team0: Port device team_slave_1 added [ 627.643365][T22726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.650834][T22726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.677308][T22726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.691420][ T5837] Bluetooth: hci18: command tx timeout [ 627.698172][T22726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.705292][T22726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.732299][T22726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.781141][T22726] hsr_slave_0: entered promiscuous mode [ 627.787907][T22726] hsr_slave_1: entered promiscuous mode [ 627.794614][T22726] debugfs: 'hsr0' already exists in 'hsr' [ 627.800625][T22726] Cannot create hsr debugfs directory [ 627.841084][T22289] net_ratelimit: 163 callbacks suppressed [ 627.841103][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 627.881167][T22287] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 627.900617][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 627.920337][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 627.942424][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 627.971424][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 627.990476][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 627.998274][T22289] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 628.110709][T22289] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 628.118484][T22289] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 628.490633][ T5837] Bluetooth: hci15: command tx timeout [ 628.570614][ T5837] Bluetooth: hci17: command tx timeout [ 628.650839][ T5837] Bluetooth: hci19: command tx timeout [ 629.616352][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.623468][ T5837] Bluetooth: hci16: command tx timeout [ 629.632615][ T1305] lec:lec_start_xmit: lec0:No lecd attached [ 629.771077][ T52] Bluetooth: hci18: command tx timeout [ 630.570894][ T52] Bluetooth: hci15: command tx timeout [ 630.650651][ T52] Bluetooth: hci17: command tx timeout [ 630.740695][ T52] Bluetooth: hci19: command tx timeout [ 631.693807][ T52] Bluetooth: hci9: command 0x0406 tx timeout [ 631.693848][T22729] Bluetooth: hci8: command 0x0406 tx timeout [ 631.705923][ T5147] Bluetooth: hci16: command tx timeout [ 631.850863][ T5837] Bluetooth: hci18: command tx timeout [ 632.730572][ T5837] Bluetooth: hci17: command tx timeout [ 632.811908][ T5837] Bluetooth: hci19: command tx timeout [ 632.891534][T22286] net_ratelimit: 96 callbacks suppressed [ 632.891553][T22286] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 632.905793][T22286] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 633.020502][T22251] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 633.028321][T22251] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 633.140673][T22283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 633.148470][T22283] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 633.260403][T22283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 633.268577][T22283] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 633.390562][T22283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 633.398358][T22283] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 633.930965][ T5837] Bluetooth: hci18: command tx timeout [ 634.092796][ T31] INFO: task syz.2.4454:22524 blocked for more than 143 seconds. [ 634.100850][ T31] Not tainted syzkaller #0 [ 634.105834][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 634.114901][ T31] task:syz.2.4454 state:D stack:26304 pid:22524 tgid:22523 ppid:16650 task_flags:0x400140 flags:0x00080002 [ 634.127121][ T31] Call Trace: [ 634.130699][ T31] [ 634.133755][ T31] __schedule+0x14ea/0x5050 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 634.138348][ T31] ? __pfx___schedule+0x10/0x10 [ 634.143599][ T31] ? schedule+0x90/0x360 [ 634.147897][ T31] schedule+0x164/0x360 [ 634.152213][ T31] schedule_preempt_disabled+0x13/0x30 [ 634.158631][ T31] __mutex_lock+0x7fe/0x1300 [ 634.163507][ T31] ? __mutex_lock+0x5ac/0x1300 [ 634.168344][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 634.173549][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 634.178645][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 634.184234][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 634.189935][ T31] ? radix_tree_lookup+0x240/0x290 [ 634.195756][ T31] genl_rcv_msg+0x10b/0x7a0 [ 634.200480][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.205816][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 634.212183][ T31] netlink_rcv_skb+0x232/0x4b0 [ 634.217103][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.222308][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 634.229015][ T31] ? genl_rcv+0x19/0x40 [ 634.234429][ T31] ? down_read+0x272/0x2e0 [ 634.238999][ T31] ? genl_rcv+0xd/0x40 [ 634.245621][ T31] genl_rcv+0x28/0x40 [ 634.249673][ T31] netlink_unicast+0x80f/0x9b0 [ 634.256877][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 634.263272][ T31] ? __alloc_skb+0x193/0x390 [ 634.267921][ T31] ? netlink_sendmsg+0x650/0xb40 [ 634.273809][ T31] ? skb_put+0x11b/0x210 [ 634.278114][ T31] netlink_sendmsg+0x813/0xb40 [ 634.283603][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.289079][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 634.319294][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 634.327179][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.349780][ T31] ____sys_sendmsg+0xa68/0xad0 [ 634.354757][ T31] ? __might_fault+0xaf/0x130 [ 634.359591][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 634.365015][ T31] ? import_iovec+0x73/0xa0 [ 634.369578][ T31] ___sys_sendmsg+0x2a5/0x360 [ 634.374448][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 634.379450][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.385325][ T31] ? futex_wake+0x4ac/0x580 [ 634.390047][ T31] ? __fget_files+0x2a/0x420 [ 634.395361][ T31] ? __fget_files+0x3a0/0x420 [ 634.400078][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 634.405233][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 634.411306][ T31] ? rcu_is_watching+0x15/0xb0 [ 634.416145][ T31] do_syscall_64+0xe2/0xf80 [ 634.420848][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.426998][ T31] ? trace_irq_disable+0x37/0x100 [ 634.432211][ T31] ? clear_bhb_loop+0x60/0xb0 [ 634.436944][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.443047][ T31] RIP: 0033:0x7fa25319aeb9 [ 634.447520][ T31] RSP: 002b:00007fa25403b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.456119][ T31] RAX: ffffffffffffffda RBX: 00007fa253415fa0 RCX: 00007fa25319aeb9 [ 634.464422][ T31] RDX: 0000000000004050 RSI: 0000200000003f80 RDI: 0000000000000004 [ 634.472567][ T31] RBP: 00007fa253208c1f R08: 0000000000000000 R09: 0000000000000000 [ 634.480866][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.488886][ T31] R13: 00007fa253416038 R14: 00007fa253415fa0 R15: 00007fff8b0b01e8 [ 634.497140][ T31] [ 634.500264][ T31] INFO: task syz.2.4454:22525 blocked for more than 143 seconds. [ 634.508194][ T31] Not tainted syzkaller #0 [ 634.513261][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 634.522009][ T31] task:syz.2.4454 state:D stack:26200 pid:22525 tgid:22523 ppid:16650 task_flags:0x480140 flags:0x00080002 [ 634.534046][ T31] Call Trace: [ 634.537441][ T31] [ 634.540454][ T31] __schedule+0x14ea/0x5050 [ 634.545022][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 634.550003][ T31] ? __pfx___schedule+0x10/0x10 [ 634.555102][ T31] ? schedule+0x90/0x360 [ 634.559401][ T31] schedule+0x164/0x360 [ 634.563661][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 634.569263][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 634.575681][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 634.582171][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 634.588388][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 634.594816][ T31] nbd_set_size+0x516/0x6d0 [ 634.599383][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 634.604553][ T31] ? nla_memcpy+0x5b/0xc0 [ 634.608941][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 634.614363][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 634.620221][ T31] ? rcu_is_watching+0x15/0xb0 [ 634.625025][ T31] ? __nla_parse+0x40/0x60 [ 634.629473][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 634.636017][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 634.641692][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 634.647824][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 634.653090][ T31] genl_rcv_msg+0x61c/0x7a0 [ 634.657662][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.662916][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 634.669049][ T31] netlink_rcv_skb+0x232/0x4b0 [ 634.673981][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.679072][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 634.684495][ T31] ? genl_rcv+0x19/0x40 [ 634.688737][ T31] ? down_read+0x272/0x2e0 [ 634.693346][ T31] ? genl_rcv+0xd/0x40 [ 634.697572][ T31] genl_rcv+0x28/0x40 [ 634.701678][ T31] netlink_unicast+0x80f/0x9b0 [ 634.706579][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 634.712074][ T31] ? __alloc_skb+0x193/0x390 [ 634.716887][ T31] ? netlink_sendmsg+0x650/0xb40 [ 634.722003][ T31] ? skb_put+0x11b/0x210 [ 634.726293][ T31] netlink_sendmsg+0x813/0xb40 [ 634.732285][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.737681][ T31] ? lruvec_stat_mod_folio+0x70/0x4b0 [ 634.743238][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 634.748297][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 634.753772][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.759197][ T31] ____sys_sendmsg+0xa68/0xad0 [ 634.764118][ T31] ? __might_fault+0xaf/0x130 [ 634.768858][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 634.774495][ T31] ? import_iovec+0x73/0xa0 [ 634.779064][ T31] ___sys_sendmsg+0x2a5/0x360 [ 634.783874][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 634.788885][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.794315][ T31] ? __fget_files+0x2a/0x420 [ 634.798967][ T31] ? __fget_files+0x3a0/0x420 [ 634.803959][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 634.808959][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 634.814723][ T31] ? __se_sys_rt_sigprocmask+0x22f/0x2a0 [ 634.820493][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 634.826039][ T31] do_syscall_64+0xe2/0xf80 [ 634.830811][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.837013][ T31] ? trace_irq_disable+0x37/0x100 [ 634.842129][ T31] ? clear_bhb_loop+0x60/0xb0 [ 634.846931][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.852942][ T31] RIP: 0033:0x7fa25319aeb9 [ 634.857427][ T31] RSP: 002b:00007fa25401a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.866484][ T31] RAX: ffffffffffffffda RBX: 00007fa253416090 RCX: 00007fa25319aeb9 [ 634.874782][ T31] RDX: 0000000000004050 RSI: 0000200000003f80 RDI: 0000000000000004 [ 634.883017][ T31] RBP: 00007fa253208c1f R08: 0000000000000000 R09: 0000000000000000 [ 634.891471][ T5837] Bluetooth: hci19: command tx timeout [ 634.897021][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.905248][ T31] R13: 00007fa253416128 R14: 00007fa253416090 R15: 00007fff8b0b01e8 [ 634.913380][ T31] [ 634.916482][ T31] INFO: task syz.0.4459:22544 blocked for more than 144 seconds. [ 634.924365][ T31] Not tainted syzkaller #0 [ 634.929534][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 634.938294][ T31] task:syz.0.4459 state:D stack:26048 pid:22544 tgid:22543 ppid:17634 task_flags:0x400140 flags:0x00080002 [ 634.950653][ T31] Call Trace: [ 634.953981][ T31] [ 634.957064][ T31] __schedule+0x14ea/0x5050 [ 634.961710][ T31] ? __pfx___schedule+0x10/0x10 [ 634.966604][ T31] ? schedule+0x90/0x360 [ 634.971014][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5340 ms [ 634.971038][ C1] lec:lec_tx_timeout: lec0 [ 634.971267][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 634.990626][ T31] schedule+0x164/0x360 [ 634.994956][ T31] schedule_preempt_disabled+0x13/0x30 [ 635.000724][ T31] __mutex_lock+0x7fe/0x1300 [ 635.005639][ T31] ? __mutex_lock+0x5ac/0x1300 [ 635.010709][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 635.015447][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 635.020610][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 635.025653][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 635.031460][ T31] ? radix_tree_lookup+0x240/0x290 [ 635.036727][ T31] genl_rcv_msg+0x10b/0x7a0 [ 635.041370][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.046446][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 635.051976][ T31] netlink_rcv_skb+0x232/0x4b0 [ 635.056805][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.061956][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 635.067479][ T31] ? genl_rcv+0x19/0x40 [ 635.071771][ T31] ? down_read+0x272/0x2e0 [ 635.076615][ T31] ? genl_rcv+0xd/0x40 [ 635.080964][ T31] genl_rcv+0x28/0x40 [ 635.084987][ T31] netlink_unicast+0x80f/0x9b0 [ 635.089782][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 635.095343][ T31] ? __alloc_skb+0x193/0x390 [ 635.099988][ T31] ? netlink_sendmsg+0x650/0xb40 [ 635.105298][ T31] ? skb_put+0x11b/0x210 [ 635.109763][ T31] netlink_sendmsg+0x813/0xb40 [ 635.114963][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.120496][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 635.125497][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 635.131198][ T31] __sys_sendto+0x709/0x7a0 [ 635.135795][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 635.140946][ T31] ? exc_page_fault+0x6a/0xc0 [ 635.145731][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 635.151272][ T31] __x64_sys_sendto+0xde/0x100 [ 635.156146][ T31] do_syscall_64+0xe2/0xf80 [ 635.160748][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.166857][ T31] ? trace_irq_disable+0x37/0x100 [ 635.172012][ T31] ? clear_bhb_loop+0x60/0xb0 [ 635.176747][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.182743][ T31] RIP: 0033:0x7f4bc5f5b78e [ 635.187194][ T31] RSP: 002b:00007f4bc6eb6e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 635.195759][ T31] RAX: ffffffffffffffda RBX: 00007f4bc6eb86c0 RCX: 00007f4bc5f5b78e [ 635.204041][ T31] RDX: 0000000000000020 RSI: 00007f4bc6eb7000 RDI: 0000000000000007 [ 635.212920][ T31] RBP: 0000000000000000 R08: 00007f4bc6eb6f04 R09: 000000000000000c [ 635.221125][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 635.229418][ T31] R13: 00007f4bc6eb6f58 R14: 00007f4bc6eb7000 R15: 0000000000000000 [ 635.237643][ T31] [ 635.240763][ T31] INFO: task syz.3.4464:22558 blocked for more than 144 seconds. [ 635.248509][ T31] Not tainted syzkaller #0 [ 635.257911][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 635.266847][ T31] task:syz.3.4464 state:D stack:27840 pid:22558 tgid:22557 ppid:17177 task_flags:0x400040 flags:0x00080002 [ 635.279023][ T31] Call Trace: [ 635.282399][ T31] [ 635.285590][ T31] __schedule+0x14ea/0x5050 [ 635.290445][ T31] ? __pfx___schedule+0x10/0x10 [ 635.295349][ T31] ? schedule+0x90/0x360 [ 635.299621][ T31] schedule+0x164/0x360 [ 635.303910][ T31] schedule_preempt_disabled+0x13/0x30 [ 635.309405][ T31] __mutex_lock+0x7fe/0x1300 [ 635.314235][ T31] ? __mutex_lock+0x5ac/0x1300 [ 635.319052][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 635.323877][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 635.329208][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 635.334692][ T31] ? radix_tree_lookup+0x240/0x290 [ 635.339873][ T31] genl_rcv_msg+0x10b/0x7a0 [ 635.344489][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.349647][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 635.354736][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 635.360203][ T31] netlink_rcv_skb+0x232/0x4b0 [ 635.365014][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.370099][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 635.378545][ T31] ? genl_rcv+0x19/0x40 [ 635.382906][ T31] ? down_read+0x272/0x2e0 [ 635.387372][ T31] ? genl_rcv+0xd/0x40 [ 635.391556][ T31] genl_rcv+0x28/0x40 [ 635.395583][ T31] netlink_unicast+0x80f/0x9b0 [ 635.400494][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 635.405831][ T31] ? __alloc_skb+0x193/0x390 [ 635.410617][ T31] ? netlink_sendmsg+0x650/0xb40 [ 635.415796][ T31] ? skb_put+0x11b/0x210 [ 635.420057][ T31] netlink_sendmsg+0x813/0xb40 [ 635.424958][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.430418][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 635.435497][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 635.440966][ T31] __sys_sendto+0x709/0x7a0 [ 635.445602][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 635.450824][ T31] ? exc_page_fault+0x6a/0xc0 [ 635.455673][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 635.461053][ T31] __x64_sys_sendto+0xde/0x100 [ 635.465863][ T31] do_syscall_64+0xe2/0xf80 [ 635.470446][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.476804][ T31] ? trace_irq_disable+0x37/0x100 [ 635.482047][ T31] ? clear_bhb_loop+0x60/0xb0 [ 635.486854][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.492902][ T31] RIP: 0033:0x7fc41515b78e [ 635.497366][ T31] RSP: 002b:00007fc41612de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 635.505881][ T31] RAX: ffffffffffffffda RBX: 00007fc41612f6c0 RCX: 00007fc41515b78e [ 635.513925][ T31] RDX: 0000000000000020 RSI: 00007fc41612e000 RDI: 0000000000000004 [ 635.522120][ T31] RBP: 0000000000000000 R08: 00007fc41612df04 R09: 000000000000000c [ 635.530129][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 635.538213][ T31] R13: 00007fc41612df58 R14: 00007fc41612e000 R15: 0000000000000000 [ 635.546470][ T31] [ 635.549563][ T31] INFO: task syz.1.4465:22565 blocked for more than 144 seconds. [ 635.557553][ T31] Not tainted syzkaller #0 [ 635.562960][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 635.571821][ T31] task:syz.1.4465 state:D stack:25112 pid:22565 tgid:22564 ppid:18709 task_flags:0x400140 flags:0x00080002 [ 635.583891][ T31] Call Trace: [ 635.587206][ T31] [ 635.590249][ T31] __schedule+0x14ea/0x5050 [ 635.594811][ T31] ? __pfx___schedule+0x10/0x10 [ 635.599709][ T31] ? schedule+0x90/0x360 [ 635.604110][ T31] schedule+0x164/0x360 [ 635.608424][ T31] schedule_preempt_disabled+0x13/0x30 [ 635.614132][ T31] __mutex_lock+0x7fe/0x1300 [ 635.618903][ T31] ? __mutex_lock+0x5ac/0x1300 [ 635.623832][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 635.628559][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 635.633735][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 635.638894][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 635.644359][ T31] ? radix_tree_lookup+0x240/0x290 [ 635.649516][ T31] genl_rcv_msg+0x10b/0x7a0 [ 635.654182][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.659294][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 635.664464][ T31] netlink_rcv_skb+0x232/0x4b0 [ 635.669276][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.674441][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 635.679772][ T31] ? genl_rcv+0x19/0x40 [ 635.684183][ T31] ? down_read+0x272/0x2e0 [ 635.688643][ T31] ? genl_rcv+0xd/0x40 [ 635.692982][ T31] genl_rcv+0x28/0x40 [ 635.697196][ T31] netlink_unicast+0x80f/0x9b0 [ 635.702120][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 635.707461][ T31] ? __alloc_skb+0x193/0x390 [ 635.712198][ T31] ? netlink_sendmsg+0x650/0xb40 [ 635.717256][ T31] ? skb_put+0x11b/0x210 [ 635.721771][ T31] netlink_sendmsg+0x813/0xb40 [ 635.726603][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.732059][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 635.737152][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 635.742637][ T31] __sys_sendto+0x709/0x7a0 [ 635.747187][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 635.752436][ T31] ? fd_install+0x94/0x3d0 [ 635.756892][ T31] ? fd_install+0x306/0x3d0 [ 635.761661][ T31] __x64_sys_sendto+0xde/0x100 [ 635.766505][ T31] do_syscall_64+0xe2/0xf80 [ 635.771203][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.777328][ T31] ? trace_irq_disable+0x37/0x100 [ 635.782450][ T31] ? clear_bhb_loop+0x60/0xb0 [ 635.787167][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.793206][ T31] RIP: 0033:0x7f3c0d15b78e [ 635.797680][ T31] RSP: 002b:00007f3c0e014e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 635.806338][ T31] RAX: ffffffffffffffda RBX: 00007f3c0e0166c0 RCX: 00007f3c0d15b78e [ 635.814441][ T31] RDX: 0000000000000020 RSI: 00007f3c0e015000 RDI: 000000000000000a [ 635.822551][ T31] RBP: 0000000000000000 R08: 00007f3c0e014f04 R09: 000000000000000c [ 635.830931][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 635.838964][ T31] R13: 00007f3c0e014f58 R14: 00007f3c0e015000 R15: 0000000000000000 [ 635.847017][ T31] [ 635.850096][ T31] INFO: task syz.4.4469:22574 blocked for more than 145 seconds. [ 635.858083][ T31] Not tainted syzkaller #0 [ 635.863235][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 635.873163][ T31] task:syz.4.4469 state:D stack:27840 pid:22574 tgid:22573 ppid:18177 task_flags:0x400040 flags:0x00080002 [ 635.885400][ T31] Call Trace: [ 635.888782][ T31] [ 635.892485][ T31] __schedule+0x14ea/0x5050 [ 635.897122][ T31] ? __pfx___schedule+0x10/0x10 [ 635.902063][ T31] ? schedule+0x90/0x360 [ 635.906338][ T31] schedule+0x164/0x360 [ 635.910582][ T31] schedule_preempt_disabled+0x13/0x30 [ 635.916106][ T31] __mutex_lock+0x7fe/0x1300 [ 635.920853][ T31] ? __mutex_lock+0x5ac/0x1300 [ 635.925859][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 635.930769][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 635.935978][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 635.941309][ T31] ? radix_tree_lookup+0x240/0x290 [ 635.946473][ T31] genl_rcv_msg+0x10b/0x7a0 [ 635.951144][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.956206][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 635.961449][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 635.966869][ T31] netlink_rcv_skb+0x232/0x4b0 [ 635.971887][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.976983][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 635.982707][ T31] ? genl_rcv+0x19/0x40 [ 635.987035][ T31] ? down_read+0x272/0x2e0 [ 635.991888][ T31] ? genl_rcv+0xd/0x40 [ 635.996024][ T31] genl_rcv+0x28/0x40 [ 636.000071][ T31] netlink_unicast+0x80f/0x9b0 [ 636.005844][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 636.012977][ T31] ? __alloc_skb+0x193/0x390 [ 636.017634][ T31] ? netlink_sendmsg+0x650/0xb40 [ 636.023976][ T31] ? skb_put+0x11b/0x210 [ 636.028361][ T31] netlink_sendmsg+0x813/0xb40 [ 636.033325][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.038653][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 636.043739][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 636.049075][ T31] __sys_sendto+0x709/0x7a0 [ 636.053700][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 636.058964][ T31] ? exc_page_fault+0x6a/0xc0 [ 636.063774][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 636.069111][ T31] __x64_sys_sendto+0xde/0x100 [ 636.074078][ T31] do_syscall_64+0xe2/0xf80 [ 636.078626][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.084850][ T31] ? trace_irq_disable+0x37/0x100 [ 636.089917][ T31] ? clear_bhb_loop+0x60/0xb0 [ 636.097084][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.103456][ T31] RIP: 0033:0x7fa62a15b78e [ 636.107913][ T31] RSP: 002b:00007fa62b021e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 636.116684][ T31] RAX: ffffffffffffffda RBX: 00007fa62b0236c0 RCX: 00007fa62a15b78e [ 636.124833][ T31] RDX: 000000000000001c RSI: 00007fa62b022000 RDI: 0000000000000009 [ 636.133172][ T31] RBP: 0000000000000000 R08: 00007fa62b021f04 R09: 000000000000000c [ 636.141245][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 636.149255][ T31] R13: 00007fa62b021f58 R14: 00007fa62b022000 R15: 0000000000000000 [ 636.157597][ T31] [ 636.160820][ T31] [ 636.160820][ T31] Showing all locks held in the system: [ 636.168702][ T31] 1 lock held by khungtaskd/31: [ 636.173920][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 636.184046][ T31] 2 locks held by getty/5583: [ 636.188778][ T31] #0: ffff88814d25c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 636.198819][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 636.209245][ T31] 1 lock held by udevd/15615: [ 636.214176][ T31] #0: ffff88802526b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 636.223556][ T31] 1 lock held by udevd/15640: [ 636.228284][ T31] #0: ffff888025184358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 636.237846][ T31] 2 locks held by syz.2.4454/22524: [ 636.243333][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.252030][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.261122][ T31] 6 locks held by syz.2.4454/22525: [ 636.266357][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.275067][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.284144][ T31] #2: ffff88802517ca78 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 636.294668][ T31] #3: ffff88814239ace0 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2ba/0x6d0 [ 636.304587][ T31] #4: ffff88814239a680 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 636.316778][ T31] #5: ffff88814239a6b8 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 636.329294][ T31] 2 locks held by syz.0.4459/22544: [ 636.334698][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.343168][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.352295][ T31] 2 locks held by syz.3.4464/22558: [ 636.357500][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.365823][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.374911][ T31] 2 locks held by syz.1.4465/22565: [ 636.380141][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.388552][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.397742][ T31] 2 locks held by syz.4.4469/22574: [ 636.403075][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.411522][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.420756][ T31] 2 locks held by syz-executor/22582: [ 636.426249][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.434715][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.443892][ T31] 2 locks held by syz-executor/22592: [ 636.449269][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.457612][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.466762][ T31] 2 locks held by syz-executor/22594: [ 636.472237][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.480605][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.489647][ T31] 2 locks held by syz-executor/22612: [ 636.495399][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.503823][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.512941][ T31] 2 locks held by syz-executor/22614: [ 636.518394][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.526731][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.535904][ T31] 2 locks held by syz-executor/22635: [ 636.542251][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.550843][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.559933][ T31] 2 locks held by syz-executor/22644: [ 636.565434][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.573857][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.583001][ T31] 2 locks held by syz-executor/22653: [ 636.588395][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.596703][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.605795][ T31] 2 locks held by syz-executor/22662: [ 636.611240][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.619478][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.628582][ T31] 2 locks held by syz-executor/22671: [ 636.634005][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.642501][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.651765][ T31] 2 locks held by syz-executor/22688: [ 636.657187][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.665542][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.674660][ T31] 2 locks held by syz-executor/22697: [ 636.680051][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.688488][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.702248][ T31] 2 locks held by syz-executor/22706: [ 636.707773][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.716984][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.726908][ T31] 2 locks held by syz-executor/22716: [ 636.732962][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.741662][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.750909][ T31] 2 locks held by syz-executor/22726: [ 636.756399][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 636.764827][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 636.774006][ T31] 2 locks held by dhcpcd/22740: [ 636.778868][ T31] #0: ffff88806d3f6260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 636.788675][ T31] #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 636.799748][ T31] [ 636.806928][ T31] ============================================= [ 636.806928][ T31] [ 636.816849][ T31] NMI backtrace for cpu 0 [ 636.816863][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 636.816880][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 636.816890][ T31] Call Trace: [ 636.816896][ T31] [ 636.816902][ T31] dump_stack_lvl+0xe8/0x150 [ 636.816926][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 636.816948][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 636.816973][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 636.816996][ T31] sys_info+0x135/0x170 [ 636.817014][ T31] watchdog+0xf90/0xfe0 [ 636.817033][ T31] ? watchdog+0x209/0xfe0 [ 636.817054][ T31] kthread+0x726/0x8b0 [ 636.817074][ T31] ? __pfx_watchdog+0x10/0x10 [ 636.817089][ T31] ? __pfx_kthread+0x10/0x10 [ 636.817108][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 636.817121][ T31] ? __pfx_kthread+0x10/0x10 [ 636.817138][ T31] ret_from_fork+0x51b/0xa40 [ 636.817154][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 636.817167][ T31] ? __switch_to+0xc82/0x1410 [ 636.817190][ T31] ? __pfx_kthread+0x10/0x10 [ 636.817208][ T31] ret_from_fork_asm+0x1a/0x30 [ 636.817239][ T31] [ 636.817244][ T31] Sending NMI from CPU 0 to CPUs 1: [ 636.939516][ C1] NMI backtrace for cpu 1 [ 636.939535][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 636.939556][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 636.939568][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 636.939592][ C1] Code: b8 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 69 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 636.939607][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 636.939623][ C1] RAX: 000000000024e929 RBX: ffffffff8199570d RCX: 0000000080000001 [ 636.939636][ C1] RDX: 0000000000000001 RSI: ffffffff8dcc99c0 RDI: ffffffff8c073a00 [ 636.939648][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 636.939661][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8fef1b70 [ 636.939674][ C1] R13: 1ffff11003a54b70 R14: 0000000000000001 R15: 0000000000000001 [ 636.939687][ C1] FS: 0000000000000000(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 636.939701][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 636.939713][ C1] CR2: 0000556c0dc2d168 CR3: 000000000e346000 CR4: 00000000003526f0 [ 636.939730][ C1] Call Trace: [ 636.939739][ C1] [ 636.939746][ C1] default_idle+0x9/0x20 [ 636.939767][ C1] default_idle_call+0x72/0xb0 [ 636.939791][ C1] do_idle+0x1bd/0x500 [ 636.939805][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 636.939828][ C1] ? __pfx_do_idle+0x10/0x10 [ 636.939855][ C1] cpu_startup_entry+0x43/0x60 [ 636.939874][ C1] start_secondary+0x101/0x110 [ 636.939900][ C1] common_startup_64+0x13e/0x147 [ 636.939930][ C1] [ 636.941235][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 636.941285][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 636.941347][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 636.941380][ T31] Call Trace: [ 636.941403][ T31] [ 636.941432][ T31] vpanic+0x1e0/0x670 [ 636.941505][ T31] panic+0xc5/0xd0 [ 636.941569][ T31] ? __pfx_panic+0x10/0x10 [ 636.941651][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 636.941779][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 636.941881][ T31] watchdog+0xfda/0xfe0 [ 636.941963][ T31] ? watchdog+0x209/0xfe0 [ 636.942038][ T31] kthread+0x726/0x8b0 [ 636.942112][ T31] ? __pfx_watchdog+0x10/0x10 [ 636.942165][ T31] ? __pfx_kthread+0x10/0x10 [ 636.942239][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 636.942291][ T31] ? __pfx_kthread+0x10/0x10 [ 636.942356][ T31] ret_from_fork+0x51b/0xa40 [ 636.942413][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 636.942459][ T31] ? __switch_to+0xc82/0x1410 [ 636.942536][ T31] ? __pfx_kthread+0x10/0x10 [ 636.942606][ T31] ret_from_fork_asm+0x1a/0x30 [ 636.942732][ T31] [ 637.222853][ T31] Kernel Offset: disabled [ 637.227182][ T31] Rebooting in 86400 seconds..