last executing test programs: 26.612495649s ago: executing program 0 (id=3161): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f00000010c0)={0xa, 0x4, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, &(0x7f0000001080), 0x0, &(0x7f00000011c0)}, 0x9fc) 26.460825506s ago: executing program 0 (id=3164): r0 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000080)={'sit0\x00', 0x0}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 26.25208937s ago: executing program 0 (id=3166): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x8, 0x0, &(0x7f0000000140)) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000002480)=ANY=[@ANYBLOB="142200001400000126bd7000ffdbdf251f060410010071078e638f9482fd715d4870213b0c60140e4a3eea24f42e2d22f7369493148686589cad9be96973932a892b1c6b9c02276f8e355a040b8cd27db3c743b72646eadca6766d22604157f88a4d840d3f913bf0c06a49af72b71ceb3e4bba74ca88243b410794bc7cbf7382b3f76cef043fd3c4cd04df38ab79debcb64ef40ba27d1d5ff0f1e4d4722847358d26ea9a8a09e3df48de71c5064f64a8e4f98b30819dcf82bee2a292037a21a08503f92e3fe589bbe98189df3bd4a125821622fb0317be5c247d1c1b490a64e8d71ad634478691c8fcf2f28e00cb463a362b1aba6bbc633051405185cb380997cae6633d6c1cecb7a65fc9a379931babc0d157cc187775fd490ec47ccd875b89f8da331b35dcbe0f77594bafca8d8de984db52971e224d17947e7b073d8d438ca0e1e742495284e987b7065b799b72f611f247e2fc6937e4af500f0035b753687fdba7f6242944a84c2b82caa67dfdf04d90752f1888d2cb3840f2611b55255eba6b52c6237f2be5d38be405a5112955d12b58b195ecc0688569a01a95ccca06a5850103442cf38a148e80f1f5ab48ac0131294e4e2b1fb21cfada43daf306bfbac0cd34f7631b499cd1b23a4a39f732380577c1027aefadc5ad704726978031ba5ce5c90d863883d17d398199813fcbcd80a0e0f464214ed8fb6209e2de82e369d9797ac05de760a82387d5cd90371502324e054777843d0bd880ab7b608e77791fffb1f818168726f757c73b9856ee2a15fe79295d770d617491654ce8629a02db1706d2b3c2aff5167f69569764d95643388c7f561e9083b3b1ecf291d71ee4bd8c840839762258458bdaf46a6191699ba5766e9630d20cdcc005c718db46606fcc82902d961c370065e78f49781c944ffe664da9d7c8926f754d79383bb380ed96f4b4bd5b4e9ee06eaca767497dcde83c27492f099a0082b0e1324da4d3fa853f69e08a1be01d66aa4cfbf7df450a743497bc1c9f5d51318d2efabebcaa29a4f47b00d63fbdb2a4e61cc105543780af6888462be52975b652aba9e0b7cdf2b71b2bead843692d4ac16959478767ddf40afb188fdfa5424bb68b4fef30bd18fb608eead0336ebf94b7bc7f1c85118d9c1a02c9b6753b044213a0d2a0802d0800494500ba25730054039130922399c51d9583c235e314f0469c4aa2602f2ec0b981a4a96c0dc4f04c562b7f0e3c98f03c89a5fb7d36bf311cc159614ff3596b9cb6da532da5a82b578b8a9255016021b306eaa4dd442a9b852ba274d3d519fd7c9148b9d1935f7f99cbeee9eb2f4ca5c7d0935eeba10b9fade0a363fbd0c95875de61518dd855c5824c575e2f3ef16470b557f1b25554210fc7c6a2205599b05c3b5717e80172e83636334024138dd582568a68c03ec42752bf7be98b0bf9bc82b3adb53ab5fab7f5a74857f28db9fe1b066a57098b5f64078e9b5c5f064127aa29015f33d97b77f58601c5462169c390bd6308da7ef81b30dbde54004e406e73652889013a47b83ec4ac22116b4eada9e13ea92109fe6f625ee670b3758c723f9756e0aa968c38781b69dada7531610fbec91c2eaa199d70f7d28b0e85b6b7efed82bd11055db788e3fdf1b73e1e6e6a16e038ca3b071dbdbdd873f5ef043b39bad89d678d3a411aee813ad8ac2b5d3608119fd76217123185bd80c10a140a314cd8cdd40ef9502b87d50dc48d3965feeb4cf7815fe432868714703a769e6130f2468487ce5f7887f7570f1b3ce9e8aec38801eeb094e25d83af6c7bd7937b6c760b47c30fdda495fe67e33209d9e1f9aafcdcbed4b57d68d7d996fbc6883e3d85e6f473eaa8c60e5489923ba510b65c41e51dfe902bac052480bf81f04b0eb80bbd394898309d014c9de3a837cff0d6fcac536f2baffd0ae96d8dd9de5e05c9d4cc16ed8b374830cbb72df71b53817c3ab0e5bf50d9d8ee046a580b978e2dc19da8994f9c6aad552d77ee11201252d1f2b739324c0aa0ca29b59d72e5471fb7af179a5e3d3b5c204fee6a968eb521d0bd7d0e817b7e80dd6491e169076de4dfdbb17ead9c5264685c05ccbd59fa5094d6475604943f161184e924011df8d61bd83f799d2a8b3cbe101a69719a9752671a9723c9b169e5a3296c2ae5343a657af77c5a954e302dae4c6d9b9bc87c5b4b00d4f6e8cfaf8a85396162b4fc624ebf5afb8ab4149a37c9c03509d4ed2af9f49576984ac80bb88dd5f6aae8d4556cf2b458ce1f707961e33864a4d30ec6cd6542737e780cbf825d7d3528efa1f452a383b1e60969e3a4a45240601b93dd7a0b332bd5a14def3ed7cc2817333942fdaa7e99e3bf3bc7cf5eefc9b17a755b1eea25a6821747b79a893381773d518f85b8fa7bb9737a054864774cc709c092f001f65938a45cac9eba06bfa1e02201f4b9269d27a50eb4f69c463f6b579a697ca3a8f7df29c63ac35c3be814517310ea3d1694595b614cc8fa0e76a1621f8c63edfb110ab5a44748fa96830f5976d5d10c40b8feb003f284d4256444d71091716d8c9654bcac6062b36ccc2ea5afd3aea723cda905e220db125a4625efed61603a0c527dea994620bfde30707f734e5aeb3a19fd67aa4092afe5e411e7d1bd04307bb5477fb353d6e593a5e07b678932447089378e56b15581c4616832c883edfca06070babee64b7b7de83c26a4d11afff1279ebf4a13fe93605e63bc44f09f3f909c9774eae7cdf3dfaf4ba1c583132aa75fee1a47e5b9e7261729af0c426582644deae422770f32d20426a667c65cc5cd0c47c4dba5dd697134b7bc33a37d2f690c5d787fe6a2fa079f4b03e6c82a194b41477c93738ff0d329fa3463c6e2dcf450c7a6650216f1b0ace986a93e441304966f48f0006898e8001a9e0e97a68e894f3a7a2f84cfe96507ce4c44f5704d1f0b43f10e10c9bfb9388a879fff6885ef79d13e44f9315ffc7f4843e8c47d397a86efa876d50431da47a20a17c5b575825ee3afd18fe4bc1b0fca45223638fbadd54a95b0e10123522e41a9f8c3d533196772073ee0378ee227156594174347f82a148455f6b00cb186bc29509dc6af758a7266cb02a1d3890b473811b1e253985ebb08ed4cca065884825a6893e9569e26d7fbdaca42371d4f06cba35ee5e9334a5654c7c71b62733220b983e2d18ff1a3ae95b31a7ca9918967f0ff314efbc94dcc98404e4592c4b819c05e05b24fc0ce598f332efdc3714b674cc4e97edc58adc341abae668d3d77b6aa199a3f3a6d3d3bccf58eba6f578ae13c9f0351cd2cb1f4482e25211628d05f69b5c0981845ff340a2cd16d04a8cd89fd988a3d7e1948d5338a0cf340d69de268d04bb1794a843b93efbfcf9bb4eaa118e0e8d1f62e810fe7a15563092060e7dbd793a4c5920291f7f612956df081d3f17da66af900c36c552719f392d5081603c7f4514f997615adcb75b68e3d22063077ab8901c972f11ca75db187b89bf218f616e15d09dfde6f5cc4315dab39ffeae49bd859dfd6b52ead2f4b07988681cf4f905b8549a305153a1343994baf58c58b9ee1c3b79062f8a8b2addd08f545abe19f70de9861c1b77f0d422442105adf4472305aaeafe9a174ed1523db9bfa738e296ce22a4392e5b9bbe03892641e1e7075600d47b4011672d2f82ca30e4615e01d32bada8929742fd12028b673d34631e0dae45a8c7bc87dbcc2402ea202edc47a6732cfe1ee3a35a1fda3edbf238ba6145fb510bacc2b945857b79bce88afaf87775b4568fb3e6c713ec811efad2bd148e1c4d0d6f3a008bfd14fa67a0973f0e52b5a73d202b04e5979f0111e4cffc7442dcbd5891e8b83cfa790d6df2d1df52d210c5fad22c2ab8b1acd9782e1144f2e128e3354758e505ee7848cece2f8adb9cef1c052ddf30ee4be2e2eaeeb15e692d854b05e285a0beb1ff52008d8a962514d564d29f72efa4a8537e84f2d575dc3f3083d5369af034a139aa8c46ac2732dc8ce8086aac36bb7243372e2679ed273139f2d819759add41d536bb31da100410551b0f549b431ee7b8ab60bff46462e18fc08a62169c27463e5e0cf34324be3309bb2b31baff67a7f348c95eec6d74257bfe0922399e89b2f3b1ba4693c26e64fccf34b86c1ba4fc7ae427d0b28b30055a30c3ab12a638d886799705863ec696026c305e0207275c3791c3078a1fe2e6445a248058cbc419a508df3861c4b78be7750111c0e4a536a5b7a77f70e06c7234f8d6e94c3180f953a2d7e5db8a8f3f3a490c44b6ca1e6ccd70560dd609e18b2ceb52da7050d0276933645b2b20938e272cbc50cf3d0c27a5c1726384f54ec5317c93f469e8bacd13ed2db67236d3e21fce81bc2c67335a8bfd4a8af4f5d4b87a8a536b458f2b6bebdb9f4b1b62f2ef95d433296d26df06e6902c378a83fe205bce213eef267decc837ffbb7e0e5b60cb05dca5ea1770499a5f53baf79a57c3ddf4a9b54909c0c9e5bcf86087cf0432581027278dc55c9d4c19f39c2dab286f49681f462f994b27c6abd8892eb45e6bb2f2d36aee0fb84b63edb6db68943c74ebbb33ecd5edc34b6f11c1f1d3c1c6561332691833b2ebae5870fb17f2d31aa2ece321c3cb166a10b062a0327a7957e2268b889ad013557d7a62adbaa2e0089b7c47b8465532b733572510fd3ce45ca7225a1b7ddf65e86f288b1834479f73604b8fbea508fc37752503c44442d7c75f9b2c5eb02f12aa57a68c0b3efb6527fcd54515eaa13245aba34acb7a15c082b3c47fb8329c33cb1e5ec6ca40998490782a9bb6c8da2bd8ce58e71db6cdbf98d3853e6d941e93dec16b5d2ad5214a4d9bf4904c77962ec8a9f426a5ffd22a66d4bbe66f55ec047c040103d3625dbf004e352039acc25b1721c3f75bcdbc31cb7d8a48ccaa993e70f3c3275bccfd91a5ee2c4d64e9f71555f69970d0fa0026d7463006fcfedc4d85b6842860ae6f57e732541c54a2b6cd65df6012c79eda6148076211ab9def7002d4f4d84362bdaa8eb222fa36ab4118ebdbe7116823e979861af7bc95ba4d7c8efed52a2c9b0d2fda90f146ea6439a37f9d7807c38a090f2b5ae54c918f99ae22ed3cdc833524bf5a0c5872159af1a00bfe0a8e71e6b97aa46245d199cca4bfaf032c0948a173f74bbfaf174a28837c6b3451c321e5713d12b7a4e6ec85f5d6437e9fdb5aa2bc1c84da502922c78cd960f2ae8903ad1c052c5d5a765c78dec97944a73eb1aaf5b6d2d16f0f41a4d5177057df904efed5409e96127859a6c391620dc1f03ed651ba52174bab77abd1072b493bc2e2c9cb58f260f3f8e34f01676ef055ed2bd89457eaa53ae9cc35f8ad177b738c88f87d739a4f528b43d278035ab1e963bee549f2c0817f7167db272a97c980cd6162171c0641a4f65514aaf9545fb99decd0b825ee71c63ba96b9800c7ee00972c006cc375edc36a5f1e172551d80e731fb65d13a2184e07106c95f3bee35fed0efdbe8c918087d10cf5be471d8650a83914d6c21620a9fe27ef0f5bf2f6283cf68595c09e6e19ba95298e7beb93bf79f76984e4ad5e47638be5723d5b7882641f9d8a837c1ff6aee951ea3731078eb9b7ff124401f1a26050fdbb14751c9f62a8c76b886aa7511741ede8a025cf2e99e0e88375c8c921d93123c2ac6fbae4dfa70c95fa9de745a94f964fafd8869666a8041418e4e7013060796dca1153170becfdf30b2c969baa3fb84a64a1187f46fed6b77db1cf6f8c28063d9f352eb945316b2705704aca4c2bf109a82e6ae0ec9a5ef3bcfa228f19e05c3a00ffedc09a97ed078f7c2e78b32a85a925c000100b585405ca0a280d15db8cf4b1fac601ea17952b1429e9950fdca8d8b3bb934fcca83d3eb47ace7c4e0eaa12f497c8dc228e6cdd1ddd3fb8656b9e4ac82054d7f3a560619fb5042ededd0e09539b82f3f068a03f82aad8e3254000100599444cd48fc4821c49db01f6254b85f0a07179b6a647d34c3cf5bd5a279115e8142cceb73819ceab4fd55a53d47782408f5215962d6da01e5f370a161b0f963f7263191ac4ee007870dc6fa0a2771f904100100f6d5db93f42e70ec891d8a6d2a4d5dc9ba5ed5f14dfbacc80a8ce45c4274613d447b922fba79f9cf71ee82b8325891cbbf641e80d0834e15a3dc3b665b7f62dee2b6268e1c398f145daec632c34e234b70844f91322c0993ad89f79b30ee29358454e0a8519364eee25a9bb4bece8169a9581b4cc3a746269811d0566d8ae7ee3aadfd3274752f9cc9284a994487cdea349769b5076338c5b5f4c5534c72b5e24fa141245f42ee617c6ab3941041ab88d99cb458a0952886a75440357d0de5507959f01f8221f7c85e3cf1587338fd74045fb3b3c51b0504fde0c6da9ed6d1551d453d4de4145e793f179ba0436b2f464c13c03d164658ead63b5dd0ce6853acb8cf9da6b0390b82130d79916081b3218bfbe5b6453c8039e3b4a90125b1f7d3db2e7db37c50589fb2a99b6c939e01f45bd78ecf598175a71c6c5f4b17db360626545d837acd0cb77c0d5d7ca7e9ced3f2e8bebd6abe4fc1851c7ea66276188d051380d4387c3d91881d7762120c0b202e47d5438144e54f8235714e2516d32e0d6b182ce6458ef53461b6c0923c2d10e0d8b3c1d383740ba572a71a123b49b576663fc448e4d8f92dc94d7bd88cce5584cf729fdd2e8e0d0edd89550e63f2ee2773ecb2221f216440dc500ab850f92dfc611ed10923514145ecfe193f410ada4800e60a6daac7870a4a600131a4efcca560322a1ec5a997316e57a22a476459f4db46197867efdc3a30cfa29d16659bcd7d6c4dc5128dc3e11e14912dcae631564fcb418be7b6929764f675ec993393be8f2bd358b998d0c3ba9ebcc5f674dbf540cbfe70bb316e0b149290ddc429170eae61247d85f57eb11c499f10ae4ec5a9cd7cb3ecdbabd9de108aa9f3c040d2ecda05cdcfe545481e6c7ab9d774494f9bc1768fbc7a13563e04eda3a6b6e193932cebe8b0345b31d16fc71240f51b0fc70667d0fa6298d2ba6ca46b683686b93ac5f871f15277868324647e6901c253aa6477c332411c7067aa9247248fcd9c4743bfb0596946b9751133bd95a03f34dbfa94924638c01b6a8f8542a10c2c3e72b2b6ee6da56f7d7ccf9ead73e7873e6de785916c0c272501e50267e3d6d03df6a934d8afa1ee97317b654cb08367def5be9cee6fbddbec00d27688ca2b3feb900903915c91ecb3735e3f954bbeef51d9fbdd10e7b633d7e85e5be228f53dc1efb57ee144c8a508a969e460f93170e2e6ab54115d8807088b2baea920c3d0dac08e83c1f06c158e8d8811af5beb931b006a8d811d2884f8f1bad90e57d868a4272a90d011322230c39d50057fdcbd07e7f1af66b5bdecd73f2feb6ffc0fc80df886c4d18e49241eee391207e281c38bcdba9a31ee2ee400a3fa87778a7521f19b7fa8f90717919ea5d9f8b75df7beda075f70a5f6e75e7a1b2cd1c6fac3b11f0c8fbb6716bb44668d12a9977eeac2a2a4b177fed2469e9c46ca4a7639423c0c0ee08662bffa1a35028a3a10cbd6c4f7b0e35b57f8d0052f7381861e9da9b16440138fa512c1ff20d8feecb5cad40587eb7713703b2419f6fed36071393a8b94b10b26fbd5904e64453f0185298c4f329d35cff74934a5e038790b82775ecc3e5f53f81924eb4ce9279fbddc7407f426298cd00fa9a6feadf384fefe498f7f52ab2c3de63bb6f848b28f769e04ccb45de5f228018b42a02d45562e2ec9a8f4cbb548152debaa3b9ef489cefc1d4ad471da743ab0ad3a22032e78e306c72253b065d38769163476036d1db45eebd4c5bdb2120f65731b6ed0a3937d9f6d3f8a5107f34820da511930e9e33e11bb15d37825745fb6caaf8dffd2327d12cd05a4fc689d2368514acd21c1ab48b478fc96e67186a3b9a4db6b82e094d25fa098720b3a7093b4c03e8a7a40a73f1cbfdcdd8c5ed4a5d6ded3dc69b05d418dc2f612783aa1658015aaa195c59c80d358c179f97c369c9208fdb64f4a48a7e55cf9ca45dbd10e7e9838cbd65b9ec6bc05de3dc1fcfc4268d7ffd74cbc9e288707b4f2852f2c1d2da1955a710b321949bc38e0584d893c259d6e8de1a60d719f93428da31364d46dca314b4a972ab7285f3a8bda770a5a72b6f3b3c7caa333efc0ed2495005e362a1cc2c8b08b40283ff15b3e541af354a5929b2c68bd462b0c365379ede743e22097954b316ef399fc7c2b477142b75afddec629595fd5523a208322cbffea46eeffeece7c39e5395f94919171b702ce1196364a701c4823d22a9aee3166197fabd0367a105bd94b30565f737a6baa15899c1eb8a5a6126d3adf70fcea1b1a3cbc922339697b5af5c0788598b729b1a037c7b447e8601013ba1694cd87d903995c8d2232b8da855872bb21f07b283628064f9e673f58e2bd6365b6427ed58ca15429d620b04aa853f25c0d3bdefd429c5952ba8b58456ca4538447cd9263738412b5ebd3d221a8939b2be2752ad9e25b1da16f1184c3a3ac2e872c78eb2d70237e5e02dcdb67877fa8f7b4144e21d16edfd01b6fbb34893e71ce70adea8157da905b8be3dff834e530d8eab15ee010446d6338c391879c2263a570f7fcba58e546a81a651ee32ed17085f5f5fd40399af32822f1fdf51dec0182e841f7443e6ce5460d39b78ed1a60fa7ef58a043757ef2c63e061ea4d878b96fe1b17a6eb3cbefdbb64ea289e524284fb2e9215e7bd1066c1f220c9cf96cc2c51c8201554d19f28294d60894a8c58cb7ac7b3e0d7cbc3e38f9a5134dace4f90b2e2d2bebbcebe944d918a8e698fe7c404343a1537b6380270540d00e8c3616e86f85758062c3b203f35051f5c63ffc14fe414ac9ff068d0f6b3b1d1bc98df095f62850fce861f4556c466d22895fb20cc4ee75e76fd8fb7e354f98798f0e865ce93a437a3ffe0f752a8c7bee4ed3fbaaafc8fb73bd7c77fee86c8aec6ad37973668ec4c3b47e0f9fae825abb3ec5819d304a6e0714cb9b395ce12fc1161e915eaa8af55c7663b6b5f1d37c3d1d5cdd5cc13c5bea99e4fe807276f6febadddd6320dc40e426961688127075123dd5f4e5b652f432c8b1a9b6040fae77db2045ac727ee80ca46ad1f53a9c5cf2d6590153568e3903245fb028cc05f350b77bef27a5dee1588c278d75b20900ed98dc3a587ea998d500458707fc7fbfba53d2dded3c2e5fbc8f37f5a3616fbc2a034cae9c8127af27219a8b664adcb06209805691e1851a4d625c94b0422415a3743c49118671518725eeb192bcab9e4fdfedc4694f42c30289c401d29ee69941cd826b9398c83786169850ca0183d2e792a1584378412c6ff8cf3263d2bb8e328005ff5be89168a71fd11f7fb03346fe686c4cae151b78de2b93299e163748b640be154672f8abc7cb5634d225ac08067c8f2b4e0aabbdb3c5293f8964516e2be3eab5c7147ebd512994f94e4ba3f81134a07a64dcb30d4c170e59c41b23f2dd494ca53aa270be21a69892f3e6379179ded7dce9954dd3786f0aa5bd618493c4f7c622de80462257d77feecb7bd1aed965524c1b09f8174ba1f0213e569e08a5de7c2290d65e8cdb8d95a315c56e0bb697c611cb1e827cfc40131c1f3d537059279638020c20939709a1948d555571c1876d47773eb15c0d720e328aab6592374d5c2d08adf0953e6509ec07126ff42677e36bda190e489a4ac99c441a527998278fb55684c20a2b7585de9e9ef0d657bf709bf584388d500913278cc51e55cf5d1b79109c8b02e8b726115fedaeb0d7c5c71aff81b672ebc5dbcb5f5fa19b56d9783ada17051e7b303c2828f6ee3ed8ff5c5e1c56d94271cf3833a8d1a65f37d7b53eaaaf4aba2117b348b6a54ae409fbdbaa50c498cd35855d4e84c76375afd5bc349d26f0386c5c6e8b173358824da1d42942bbc02a48eded07013cf1e3ebae5a37026efd2be0fd4aa6264d0416e4c52328940ebe6a31455e8adeb12160e10f981a68595886a15bf03be92430a327d516bddde1ee7820bf9616479756420a9ec2c6c521d6875d53fa162f0a6b1fe50a2b496a360cac25765aac4e76cf9af8722680ec01c8356a35d530e721cbb582197d2097dc9f0f6d880a3620c2b3934a9308822166d5c0b33fbaa6e438646d35bd2284c8535f8d8badb9f8b04587ef7d59305bb3c7b93c898416a5cce231892ef731bbb21b4374164b639ffbe48421bfdefeb846adbe816143efb7e3db17a4c8a4236453c62729e5b440515eedee0025c810211c48705f988cb92f7330cf69f13f010a3e48e4a4fd969cf7ef69a2846638579c3ec1781253dce73b53a53402178c28bf13b67c4a42ef560ec24940e260306b5eca05cde010cad8517116439b3eb8eb81afb62cd1f6ab01ae9d6eb8f49beef8f53d2403454f9fad6292184530a85ceaded0bd3922284d74386cce1210fe612cbb1fc8c3e739ba196f72bc818531be83f19f6f7ec5757d51f56d3a9125dd1851802cb76f36190e1c978c7634741bb8da80c0d3c3e332c171455149ca9bbb92eb2a31b9e99ef29599c00b1f3aad6761c40b74c110538753215bc01f5cc9b0bdad884074266fea9c29013eebbadbe03079f43c7f3b0f8a746a7b7d0231e702e31d3400dec910e10cc69f3e0d9ec6c6ede20fa3d2bb5b257358188e15cc25436a79db2144675fd43abfc4eddea77a83c29773f31704eae18c0f8f0df9046bdacdcad36e5e719e61f5370db40c2d49dd3bdabb2262d203656d185c19d48bf370faed89a7a0ee992d643618e2f6f106966f173bb1fe4e4b323ca6ae9f83fb31df0394ed4dcde9192073f49a8671e4f6d6228ac1cade32f52d9745f821941c6395cad8ec4af8f51f2066b93b1a9edeb9faf4d52f611a308ff6af24632fe2b93e13dd7e9fa2975a20362cd7a04fbd68b0a6e6db55613e650e144c41e836daba321f8de2b10c3cf67a885c83087c8cd5dee22edd4564e08493f7f4d24ac4f17f056ee9b29b5b123fee4e451b4eb4e16f67a42468e688606b55bd9a0476e4c6fc1c20f64896d75c0f45e03b1925fbbf9efb1d75252cf764b97daa37dabba971ff6659827add21b298652dd144f36b249ecc0ffd311e9996885753a14796fba20d5312ed5df70392c26a901f9d8c8de83e7d3371052bd18b44ec30ca5b2581847a573fee0c55fd2a10a2281a78f953d38612bd07c2a8a3c9172b097682b6e3c6534427418055c698bf43bf05e9b60e652f5b1c814c88a277c9ecca211557aad39379a7f3e9135364607f2ea312b67b7513619bfdbb4e5ddbba836dab65446e61cd6712d2a1fb1d24269fc92ebcb4a4b860ecf1a37e81218b016cf7da52f0420eb1b2f634ae0afdd4169da1138c5fc1f8669abd496a736f1ef572afc08a6c977e7d2bf98f4e9a9f71fe5eea575a10961f73647de501bc57e7af96980197da4557894fb8cafd66a11dd4a41ad43918a7634de097d376b75c5cc123da984cc1f59c0ba0b02d3131fd62a76963194185a39968d440f4fd00c9beeee7dee8372ba1590d82e7ac4d277038eb1927f08f490329fffd1ad662ff6c0115f22f37a985f3583f60e088db310715677921418436c31110308001fca2b8989b24b1d761028b9a58a056090af4289110f750003af74d9bd929e9be2f9b11a2b093bcd552b13976a6f26430ea081c46f5daf66246ebb55358a3899c936cda501953360e26dd48c11cf5b6ca8fc97917aa22d2b1166d8e21c7aca6cc6410252d630d4cc676bc417a3779783ce80c0ac93f2b9f8661d929002f2311d4e4afd8048013aa2c3f91ea505193f15f960ef94d6138f31b0a13661a366c7d9610614625b0cb98ec1ffd0a2669bbca496ed1c99c4a106900010004afc41813b99269b764036790264ba0b588ca898bd45dd903cf23f80e33eb3f552af70dd9448c2ab6965101ab38ba0390588095b383b1056642c3732b15aa91254f5d11a674c88f6cba1b68d77fd9d165221eddf8ff357a022c444e63eeeaca178b125b35000000c5000100ab26bc7cc8f31917f6142cc52245d8ad35cfa685c08964fa27d88ed23472fe5178182ab108987fe409f259049994d95820c53542771d38760252314042037444e808c040219a6e9f90e0b77585ad92b05f7cf23155dcd276338a45e8c54dadd704cad03bf76841f6b3d002d4fea34a4167e0e4494b3d433670e1b899fbb95812450c4d2217cd2da02ca00d355dc251de254be1f670c1270534bcddf0be0ef9d0f3617f802190fd3f13b2b32b91c7a1bc5d782745bf04336dcc45e2bb0d6f9cd0ba00000011000100f5f4747a6160ced06a8a1a529c0000000000dec2be2361e1147c7a0548f84cff385f82a6146b85a43151f429e67bc60eef79f5812dda14741056bbc2ffc52069ecd558dfa339ad933fd5afdb3bc2391881e1acabf2a0be45b0b92350cf9b17734280f67bc3513a53757fdf555c194b842cce2bf25a25186a680310b668d7474102613ca78cdd9f430f1def8023949bf1de891faa53ee51da58684528a56641f30dc6395bcf441e8c0929b29b6ee9c374fa043cc53b996a0f1755e18d5c2dea3963ed41c7a72feaad8031cc8b80af44a1d223c38bb8aca472cdfbef62789652f69304db3f2f1c4562b705c3ad719a"], 0x2214}, 0x1, 0x0, 0x0, 0x20001004}, 0x4800) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)=ANY=[@ANYBLOB='..', @ANYRES16=r1, @ANYRES32=r1]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x2, {0x1, 0xf0, 0x2}, 0x1}, 0x18) writev(r4, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) connect$can_j1939(r4, &(0x7f00000001c0)={0x1d, r6, 0x0, {0x0, 0x0, 0x7}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$can_j1939(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x1d, r7, 0x1, {0x2, 0xf0, 0x1}, 0xfe}, 0x18, &(0x7f0000000300)={&(0x7f0000000280)="57d0c4378cc232991dd54adb105e1147a78ad259b3168e5983640243a0ad071cae9098d84dd773006f1e20688e22ebd86aeebde63d8f26d3b9ec6b58e5d48e79e28b5bbdcc1969946cf719e43af813458141f86616", 0x55}, 0x1, 0x0, 0x0, 0xc0}, 0x400c000) (async) sendmsg$can_j1939(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x1d, r7, 0x1, {0x2, 0xf0, 0x1}, 0xfe}, 0x18, &(0x7f0000000300)={&(0x7f0000000280)="57d0c4378cc232991dd54adb105e1147a78ad259b3168e5983640243a0ad071cae9098d84dd773006f1e20688e22ebd86aeebde63d8f26d3b9ec6b58e5d48e79e28b5bbdcc1969946cf719e43af813458141f86616", 0x55}, 0x1, 0x0, 0x0, 0xc0}, 0x400c000) bpf$TOKEN_CREATE(0x24, &(0x7f0000003000)={0x0, r3}, 0x8) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) (async) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) r8 = epoll_create(0xc) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x40000000}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_init_net_socket$ax25(0x3, 0x3, 0xcb) ioctl$SIOCAX25GETUID(r10, 0x89e0, &(0x7f0000001100)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) ioctl$SIOCAX25GETUID(r10, 0x89e0, &(0x7f0000001100)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x70bd2d, 0x25dfdbfe, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x0, 0x7, 0x6}]}, {0x4}, {0xc}, {0x26, 0x8, {0x0, 0x2}}}}]}]}, 0x84}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x70bd2d, 0x25dfdbfe, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x0, 0x7, 0x6}]}, {0x4}, {0xc}, {0x26, 0x8, {0x0, 0x2}}}}]}]}, 0x84}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r11, 0x8917, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r0) 25.926111118s ago: executing program 0 (id=3168): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept$alg(r1, 0x0, 0x0) recvmsg(r2, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x39}, 0x40000102) sendmmsg$alg(r2, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4001044}], 0x1, 0x24008844) sendmmsg$inet(r2, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ec0767137af7e7d890debdedb6aba1a8b4ede604461087e87bc1e54d08a4c58d94481c59aaedb0d8e7dcf67b286f2eb812797a31410d9f1522c112a7fa390a471160d1c4d0832a4639", 0x49}, {&(0x7f0000000100)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2", 0x21}], 0x2}}], 0x1, 0x8058) sendmsg$can_j1939(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20044804}, 0x4000000) 17.997208727s ago: executing program 1 (id=3249): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r6, 0x1, 0x2a, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) r9 = socket(0x10, 0x803, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) sendto$inet6(r10, &(0x7f00000002c0)="ef80fb91a1b546138f891c133e842e6fb1a1a91847a7714dcf4fe5f3e73324d24ad881d8396ef16073e295adb05f125b231946793157ad22654e28da4b3b29529d72ac20f00530a4f8a560ce70bedd2fb05449ef048f3df4", 0x58, 0x20000000, &(0x7f00000004c0)={0xa, 0x4e20, 0x6, @remote, 0x614a}, 0x1c) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xe0000000}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x29, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x80}, {}, {}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @exit, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x5}, @tail_call, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2b}, @map_fd], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x1000, &(0x7f0000001300)=""/4096, 0x40f00, 0x1, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[{0x3, 0x2, 0x3, 0x8}], 0x10, 0x2}, 0x94) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000280)=r12) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 17.834511813s ago: executing program 3 (id=3251): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0xe0b, 0x0, 0x4, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xd9}, @TCA_FQ_PLIMIT={0x8}]}}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000001a0001000000000000000000818000000003000000000000140001"], 0x30}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 17.390458683s ago: executing program 4 (id=3254): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x2}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bond\x00', 0x10) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200)=r3, 0x4) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f00000000c0)) 17.250200089s ago: executing program 3 (id=3255): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800800101"], 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_PLIMIT={0x0, 0x1, 0x6}, @TCA_FQ_PLIMIT={0x0, 0x1, 0x5}]}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) 17.184951799s ago: executing program 1 (id=3257): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xf8, r2, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xd}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x35}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xf007}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x37}, @NL80211_ATTR_REG_RULES={0x9c, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x519}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa55}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x100}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7f}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10001}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x24048854}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 17.023488027s ago: executing program 4 (id=3258): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket(0x2b, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000001540)=ANY=[@ANYRES32, @ANYBLOB='`:\x00\x00\x00\x00']) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x1, 0x3, 0x2, 0x7b}, {0x4, 0x0, 0x1000, 0x5, 0x476f, 0x44c3}, 0x6, 0x3ff, 0x97c}}, @TCA_TBF_RATE64={0xc, 0x4, 0xa23ea5332583d0e6}, @TCA_TBF_PRATE64={0xc, 0x5, 0xdc646a0a12796d31}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x3a7a, 0xcb8f}}}}]}, 0x44}}, 0x4010804) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 17.016630377s ago: executing program 2 (id=3259): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r1}, {0x0, 0xffffffffffffffff, 0x0, 0x7, 0x1}, {0x4, 0x0, 0x1}, 0x0, 0x6e6bb6, 0x0, 0x0, 0x2}, {{@in=@rand_addr=0x64010101, 0x0, 0x2b}, 0x0, @in6=@local, 0x0, 0x2, 0x2, 0x5, 0x0, 0x100006, 0x100000}}, 0xe8) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000300)={0xf1, {0x1, 0x43bc, 0x0, 0x1, 0x4}}) sendmsg$can_bcm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x3, 0x7ab0715dca68fed7, 0xfffffffd, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x2, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000040)={0x11, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0xa}]}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8927, &(0x7f0000000040)={0x6, 'wlan0\x00'}) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x503, 0x0, 0x703, {0x0, 0x0, 0x0, 0x0, 0x40220, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x8001}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=@expire={0x428, 0x18, 0x200, 0x70bd2a, 0x25dfdbff, {{{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 0x4e20, 0x78c4, 0xa, 0x80, 0x80, 0x33, r7, r1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d5, 0xff}, @in=@multicast1, {0xe, 0x0, 0x3, 0x0, 0x9, 0x7, 0x5, 0xfffffffffffffffd}, {0x1, 0x3, 0x2, 0xfffffffffffffffa}, {0x8, 0x5}, 0x70bd25, 0x3500, 0xa, 0x2, 0x10}}, [@replay_val={0x10, 0xa, {0x70bd2a, 0x70bd27, 0x2}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd27}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e23, @in=@multicast1}}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd29, 0x70bd2a, 0x70bd27, 0x70bd25, 0x5, [0x9a, 0x0, 0x500c, 0x80000001, 0x6]}}, @migrate={0x180, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x22}, @in6=@mcast1, @in=@broadcast, @in=@empty, 0xff, 0x3, 0x0, 0x3505, 0x2, 0x2}, {@in6=@remote, @in=@broadcast, @in=@empty, @in=@empty, 0xff, 0x1, 0x0, 0x3503, 0x2, 0xa}, {@in=@multicast1, @in=@broadcast, @in6=@loopback, @in=@local, 0xff, 0x0, 0x0, 0x3507, 0x2, 0x2}, {@in6=@private0, @in6=@loopback, @in=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6c, 0x0, 0x0, 0x3503, 0xa, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@mcast2, 0x32, 0x1, 0x0, 0x3505, 0x2, 0x2}]}, @extra_flags={0x8, 0x18, 0x6}, @tfcpad={0x8, 0x16, 0x5}, @migrate={0x134, 0x11, [{@in=@local, @in=@multicast1, @in=@empty, @in6=@private2, 0x3c, 0x2, 0x0, 0x3501, 0xa, 0xa}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, @in=@loopback, @in=@remote, @in6=@private0, 0xff, 0x4, 0x0, 0x0, 0x2, 0xa}, {@in6=@mcast2, @in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010102, @in6=@remote, 0x2b, 0x4, 0x0, 0x3503, 0xa, 0x2}, {@in6=@remote, @in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x2b, 0x7, 0x0, 0x0, 0xa}]}]}, 0x428}}, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_TIOCOUTQ(r8, 0x5411, &(0x7f0000000080)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmmsg$alg(r11, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r9, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r12, 0x200, 0x70bd2e, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20080011}, 0x94) 16.903311169s ago: executing program 1 (id=3260): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="d60a0000000000006111a000000000001800000001000000000000000000000095000000000000009f2df8e87abb1a540c40170189e113c536ba0c55d0857051fbe39a70744b2b3b311f307df2b46fc25991e3c9ac33fc1ec4bb491bb7fd3c51347a394dc9eca4c41667c625d2b60bae0f2ef881fe0b9f7882b69875260f5b0d09085a3e9ec34e9d231e5d5b7c8803fe9ebe853ac1a2e67cd189353b57ab26eb6d6a2cc4b2b6c40451164b786e86a464a2027e27adb316d8232e047e9ba9ca7fb9312c17a7f3b1a016f40894e575136a56337b38ca97a2f056a27d63bafecec14b3dff2f921dfe2b"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 16.746280066s ago: executing program 1 (id=3261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c000000020000000000000018e8ffff1f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 16.74581787s ago: executing program 3 (id=3262): r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r4, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x9) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r7, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r7], 0x28}}, 0x802) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r8, 0x104, 0x4, &(0x7f0000000000)=0xffff7ffd, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r7) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x4, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r9 = accept4(r7, &(0x7f0000000180)=@tipc=@id, &(0x7f0000000200)=0x80, 0x80000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r10, 0x800, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x32}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) 16.655843129s ago: executing program 2 (id=3263): r0 = socket(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x7d, 0x8, 0x2}, 0x48) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000001080008001d000000", 0x24) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="170000000000000001000000ff01000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000b4ea5673996be49f253c2bd47e5c3d6bd34445d40b51f7055a546ee0a981cde3f69b55a39d2e49df6eb512be2edc5e3e083c329d97a8dd2e6be715eabe3d545e89a89842c4c69bdaeddc5cc4c766e853f2c25e4b24f3cbb3ab6fa73341aea82cb742bd855fea0957ac957f18654e9463c5f00331323c2a5e181c4ff30d448625074e1426", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffd365753f7b52c046f7ac21b49a6ac17b2d0ee8853aafa9dceb15d0bb61ce5f1d18168936b8383b17195232b1b6c7b236c0c56833f1c610c5a439f72c4e474be088066baac176ef099165b7f87cc93650152de4b50067a4e75549d425d0ec6cb5de6dd155cb77b8df1cd154", @ANYBLOB="37979862a323c8ccfc9d88a185f62fa95712c0231037b899db5049de3b83e2c3042122003c87234308004b547d30669cc9cf2068676b07f7519cb1123007adeeef4558fc", @ANYRES32, @ANYBLOB="405022e188b3d560c35f5f3d92d41d450ac9e25dcc88d6fa3382b0e1b420df0a613c59a77628a5579874b7dfe017080e87a80629a1512135f64faa950fe8f4eb51247d2e4d5516136de0fd453f8d8ce08371cc7b98838c36e9d939881c08290268e36a1f44364315524617189ec8753a4890c130fde78d51eed59ad286867fde4f56409185790324fb3b18a857160a06e8dfaa98526498cdb52d8c885cca133cbac1c26bc2cfb7e62195af03b3405b20f196fe48a1847a2f2f063649c400a06673c63c3bc347781cd8e44d7855147c45"], 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) write$cgroup_pid(r5, &(0x7f0000000300), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x2a, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0xbf}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40000000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}}, @alu={0x4, 0x0, 0x0, 0x1, 0xf5358af6f1b70dcd, 0x30, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @jmp={0x5, 0x1, 0x7, 0x5, 0x8, 0x6, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r7) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2c, r8, 0x4a3e4f761dcd662d, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0x9, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=0xffffffffffffffff, 0x6, 0x1, 0x3ff, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000980), &(0x7f0000000240), &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r10, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x24, r12, 0x1104, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x44890) r13 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r13, 0x1000) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r14, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r15 = accept4(r14, 0x0, 0x0, 0x80800) sendmmsg$alg(r15, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_raw(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1}, 0x120) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@map=r1, r9, 0x1, 0x0, 0x0, @void, @value=r6, @void, @void, r11}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r1, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r0}, 0x20) 16.508638693s ago: executing program 3 (id=3264): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x4000) 16.424798032s ago: executing program 2 (id=3265): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000170a0101"], 0x14}, 0x1, 0x0, 0x0, 0x2200c000}, 0x8000) 16.381602287s ago: executing program 4 (id=3266): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x0, 0xfffffffc}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xd}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x3b, &(0x7f0000000140)=""/59, 0x41000, 0x4, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000180)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x6, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000280)=[r3], &(0x7f0000000300)=[{0x5, 0x4, 0xd, 0x1}, {0x2, 0x2, 0xf, 0x4}, {0x0, 0x1, 0x10, 0x3}, {0x3, 0x4, 0x6, 0x3}], 0x10, 0x3}, 0x94) 16.357149015s ago: executing program 2 (id=3267): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000080)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x2}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x8, 0x1, 'osf\x00'}, @NFTA_COMPAT_REV={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x34, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xd, 0x9}, {0xe, 0x9}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0) 16.300863743s ago: executing program 1 (id=3268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) (async) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r3, 0x0, 0x0, 0x80000) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002400128009000100626f6e0a000000001400028008000a000000000008000b090017", @ANYRES32=r3], 0x44}, 0x1, 0x2000000000000000}, 0x8845) 16.125841685s ago: executing program 3 (id=3269): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x80000) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000b40)={0x0, @in6={{0xa, 0x4e21, 0x4, @mcast1}}, 0xa0, 0x777, 0x2, 0x2, 0x9}, &(0x7f0000000c00)=0x98) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x2, 0x0, 0xfffffffe, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="44010000100001000000000000000000fe800000000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900"/233, @ANYRES32=r2], 0x144}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000055) connect$pppl2tp(r3, &(0x7f0000000600)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e2a, @remote}, 0x1, 0x8001, 0x4, 0x4}}, 0x26) getsockopt(r2, 0x111, 0x402, 0x0, &(0x7f0000000080)) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRES16=r3, @ANYBLOB="35d0bc01fa9915f9c65cccd2b9f0a9dfa367f1e884efde78cef3102bc715cf2a7dcdc604e8114f96a6ea68716427d14f372a0d2324f0d8dd9d55e53a4a1284e9db2a8a9a210dc4ce7768a3bc859d6566764166ae53750e4357b6", @ANYRES16=r0, @ANYRESHEX], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20008000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYRES16=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c357825577583a5fde8a3427cc42f7d63c6cf", 0x40) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYRESDEC=r7, @ANYRESDEC=0x0], 0x20}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r8 = accept4(r7, 0x0, 0x0, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'macvlan1\x00', 0x3}, 0x18) sendmmsg$alg(r8, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000540)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000006c0)="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", 0x16f}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000a40)=""/85, 0xffffffffffffff70}], 0x2}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x48810) 16.061017855s ago: executing program 3 (id=3270): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080007000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 16.01782015s ago: executing program 1 (id=3271): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r0, &(0x7f0000000040)="fa3d20c1e14f1ef36d79c8d104d4819600fd9efdd2ebcc85d3b69045607f37e91c62c6045b817b830ba764b374f9fdd166005f6e59f0ddaf1a5bea22aaebfd4c10e063a0d0271de1715fe1d54782a8ae4a6231173ee23879136f565bc92d3d52e00cf1b2c2299efe72960d", &(0x7f00000000c0)=""/171, 0x4}, 0x20) sendfile(r0, 0xffffffffffffffff, &(0x7f00000001c0)=0x5, 0xffff) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x140e, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x2400c004) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000340)=""/108, &(0x7f00000003c0)=0x6c) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x78, r4, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000002) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x9571b1f40b7ac837}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@delchain={0x3c, 0x65, 0x800, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0x9, 0x9}, {0xc, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x8, 0xb3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c840}, 0x4000040) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x74, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x53}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "80caea761b7b0daeb63262d046"}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "9fab15a804e1fb"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000014) sendto$inet(r0, &(0x7f0000000900)="03a5ce79", 0x4, 0x8040, &(0x7f0000000940)={0x2, 0x4e20, @private=0xa010100}, 0x10) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000980)) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000d80)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000dc0), &(0x7f0000000e00)=0xc) read(r0, &(0x7f0000000e40)=""/161, 0xa1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f00), r0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001fc0)={r0, &(0x7f0000000f40)="3064c63bec7d34955d07f69fddd0b4335f213f3357d81f3f33251ba124e63235c80edb136697d2450b3126d354cec7ad3ccf263a2a8b1cd311d809e22fc907a38ad93550459e465182216aab0c0de9d87e666c948343a19e45ba57b68841545737bdaebf", &(0x7f0000000fc0)=""/4096, 0x4}, 0x20) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002000)={0x0, 0xcf, "e2c9e41885a96c214ff3a709152d950f99a5b7a8db129c1c817521373d7d4b3f69d6d9845d679994955946547a985f620ea6fad92b0f4cd9975e899506a8574dedbb285f9b8862ad76fbd78e3cbf74649c586c8b48f978ac6973ca4f11a397d1efc1688f7c57598fa5d8bb9977e29e3593f492290e5d931873491f9173068a65029fa5689ed4cf10adf19f5612463ae2787336938c0c3158eae15d8ca31b664b421c6988e8f641751e2ac9e5551b31f5e52bff2638190931c5b509b2238582d8f40a0b2b426dbb40c4fad4a139cde0"}, &(0x7f0000002100)=0xd7) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r7, 0x0, 0x41, &(0x7f0000002140)={'mangle\x00', 0xea, "771b4a7c60f1bd967ebe8ca4198e22e5683583055dc811d98941faf6f5d41fe90b605e93e74fa23c0c01329d4e3f3e394ad816928af7beb75213c1fb09500df7286f37c99b7ad98a5eae06f9925ac6331a0d763629faa9cc1eb8ed49eeac1b60b8e9d93c1678cde56be36e2bfb248812fae2fc3281f2eacc8c66524474b870822e7c61595a75d132339c769b77fa8dbbbcdedbc0ef3db8f042ab0766a60426a2df136830e8e1db5687af68a5058fa25da0d17f065c5c190d475fa18e393a0d7f46a0094eaec3e8c9371956a00cda9baf4aa9ba91d86c29a9db4fafab99697a3666bfa2d9fe369689b791"}, &(0x7f0000002280)=0x10e) r8 = openat$cgroup_ro(r0, &(0x7f00000022c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$SIOCAX25GETUID(r8, 0x89e0, &(0x7f0000002300)={0x3, @null, r3}) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002340)=[{{0x4, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x2, 0x1}}, {{0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x1}}], 0x28) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000023c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x3c, r9, 0x14, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4804}, 0x8000) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x4c, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2a}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x200}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x34040815) 15.942713924s ago: executing program 2 (id=3272): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000fedbdf253d00000008000300", @ANYRES32=r1, @ANYBLOB="0c0099000388005d000100004008005d00010000001400000000000000000000bec28d32"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r2 = socket$rds(0x15, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9}, 0x48) (async) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-neon\x00'}, 0x58) (async, rerun: 64) close(r2) (async, rerun: 64) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r5}]}, 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) (async) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) (async, rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0x9) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2202, 0x0) (async, rerun: 64) ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x1) (rerun: 64) 15.772207597s ago: executing program 2 (id=3273): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0xde, &(0x7f0000000340)=""/222}, 0x94) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) (rerun: 32) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x28}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x21}}}}}, 0x30}}, 0x4800) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r1}, 0x38) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) (async, rerun: 64) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0) (rerun: 64) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r7, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xffff, 0x27, 0x9, 0xffffffff}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0xc009) recvmmsg(r5, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x500}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40010101, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, 0x0, 0x0) (async, rerun: 32) ioctl$FICLONE(r4, 0x40049409, r0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x15, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf9fd, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @exit, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r8, 0x1, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x8010) 15.756358732s ago: executing program 4 (id=3274): r0 = socket(0x2d, 0x2, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x11d, 0x1, 0x0, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x4300, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r2, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r2, 0x4) 15.644557181s ago: executing program 0 (id=3169): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000000)=0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f00040000009500000000000000f28be2594e68041a7550d1ffffff7f53367af3ebe4c75541403b4e"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) 15.525937623s ago: executing program 4 (id=3275): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r1, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f00000002c0)=0x7) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @empty}}, 0x1000000, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69ad, 0x80002, 0x81}, 0x9c) 15.320355781s ago: executing program 0 (id=3277): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) r3 = socket$unix(0x1, 0x1, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f0000000200)) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netpci0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2a, 0xbfffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff03, 0x20000002, 0xf79, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async, rerun: 64) r8 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 32) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'veth1_vlan\x00', @local}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) (async, rerun: 32) readv(r11, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) (rerun: 32) r12 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 64) r13 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 64) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r13, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000000000000200000000000000", @ANYRES32=r2, @ANYBLOB="18001d8014000080060005006b0000000500060001000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 15.178302528s ago: executing program 4 (id=3278): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fe80000000000000000000000000003bfe8000000000000000000000000000aa0000000000000c9c0a00103000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000400ae00009000000000000000070000000001000003000000000000000000000000000000fdffffffffffffff0500000000000000ffffffffffffffffffffffff000000000000000000000000000000b3d22be28cefc23853d5e56131fa0000000000050000000000000000000000000000000101020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a370500142c00fe8000000000000000000000000000bbfc0200000000000000000000000000010000000069f92f413423cdd45cf953f3260fac866007c5224c17b179014a60ed859ba719415cd7e0f36955b8c673496230327837ec9de8d8838dc63b7d5fc0e2fd43e4f77471eb45b41f3ace84c952269ce1871073a6cbd1d3f8ec6f81e3ef4187c633020793a6aa437b0c08ed342a63e84ecb8973372e651a7e5f0f6ad2105769d8b6f7a006ae1f07331fb65eca887948995e73b18d572c02725e7f03bfff5b23d79bee453aaf62f099ff4f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x13, 0xa, 0x201}, 0x14}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x10, 0x1402, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="55da29b3c5740b0257ad59962d99ed67c64bd0dfb1a972afbb65dc31d20273", @ANYRES32=0x0], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x48810) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r3, 0x0, 0x0, 0x80800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r8], 0x54}}, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x1058, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x5, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x7, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xfc, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x400, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x7, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x0, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) connect$inet6(r4, &(0x7f0000000bc0)={0xa, 0x4e21, 0x496, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}, 0x1c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4040) sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001d00), r4) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d40)={0x98, r10, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaa08}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x885}, 0x80) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/69, 0x2}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r12) sendmsg$NLBL_MGMT_C_LISTDEF(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x1c, r13, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4180) 142.67287ms ago: executing program 32 (id=3277): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) r3 = socket$unix(0x1, 0x1, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f0000000200)) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'netpci0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2a, 0xbfffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff03, 0x20000002, 0xf79, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async, rerun: 64) r8 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 32) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 32) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'veth1_vlan\x00', @local}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) (async, rerun: 32) readv(r11, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) (rerun: 32) r12 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 64) r13 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 64) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r13, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000000000000200000000000000", @ANYRES32=r2, @ANYBLOB="18001d8014000080060005006b0000000500060001000000"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 92.369135ms ago: executing program 33 (id=3271): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r0, &(0x7f0000000040)="fa3d20c1e14f1ef36d79c8d104d4819600fd9efdd2ebcc85d3b69045607f37e91c62c6045b817b830ba764b374f9fdd166005f6e59f0ddaf1a5bea22aaebfd4c10e063a0d0271de1715fe1d54782a8ae4a6231173ee23879136f565bc92d3d52e00cf1b2c2299efe72960d", &(0x7f00000000c0)=""/171, 0x4}, 0x20) sendfile(r0, 0xffffffffffffffff, &(0x7f00000001c0)=0x5, 0xffff) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x140e, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x2400c004) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000340)=""/108, &(0x7f00000003c0)=0x6c) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0xc) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x78, r4, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000002) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x9571b1f40b7ac837}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@delchain={0x3c, 0x65, 0x800, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0x9, 0x9}, {0xc, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x8, 0xb3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c840}, 0x4000040) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x74, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x53}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "80caea761b7b0daeb63262d046"}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "9fab15a804e1fb"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000014) sendto$inet(r0, &(0x7f0000000900)="03a5ce79", 0x4, 0x8040, &(0x7f0000000940)={0x2, 0x4e20, @private=0xa010100}, 0x10) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000980)) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000d80)) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000dc0), &(0x7f0000000e00)=0xc) read(r0, &(0x7f0000000e40)=""/161, 0xa1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f00), r0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001fc0)={r0, &(0x7f0000000f40)="3064c63bec7d34955d07f69fddd0b4335f213f3357d81f3f33251ba124e63235c80edb136697d2450b3126d354cec7ad3ccf263a2a8b1cd311d809e22fc907a38ad93550459e465182216aab0c0de9d87e666c948343a19e45ba57b68841545737bdaebf", &(0x7f0000000fc0)=""/4096, 0x4}, 0x20) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000002000)={0x0, 0xcf, "e2c9e41885a96c214ff3a709152d950f99a5b7a8db129c1c817521373d7d4b3f69d6d9845d679994955946547a985f620ea6fad92b0f4cd9975e899506a8574dedbb285f9b8862ad76fbd78e3cbf74649c586c8b48f978ac6973ca4f11a397d1efc1688f7c57598fa5d8bb9977e29e3593f492290e5d931873491f9173068a65029fa5689ed4cf10adf19f5612463ae2787336938c0c3158eae15d8ca31b664b421c6988e8f641751e2ac9e5551b31f5e52bff2638190931c5b509b2238582d8f40a0b2b426dbb40c4fad4a139cde0"}, &(0x7f0000002100)=0xd7) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_ENTRIES(r7, 0x0, 0x41, &(0x7f0000002140)={'mangle\x00', 0xea, "771b4a7c60f1bd967ebe8ca4198e22e5683583055dc811d98941faf6f5d41fe90b605e93e74fa23c0c01329d4e3f3e394ad816928af7beb75213c1fb09500df7286f37c99b7ad98a5eae06f9925ac6331a0d763629faa9cc1eb8ed49eeac1b60b8e9d93c1678cde56be36e2bfb248812fae2fc3281f2eacc8c66524474b870822e7c61595a75d132339c769b77fa8dbbbcdedbc0ef3db8f042ab0766a60426a2df136830e8e1db5687af68a5058fa25da0d17f065c5c190d475fa18e393a0d7f46a0094eaec3e8c9371956a00cda9baf4aa9ba91d86c29a9db4fafab99697a3666bfa2d9fe369689b791"}, &(0x7f0000002280)=0x10e) r8 = openat$cgroup_ro(r0, &(0x7f00000022c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) ioctl$SIOCAX25GETUID(r8, 0x89e0, &(0x7f0000002300)={0x3, @null, r3}) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000002340)=[{{0x4, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x0, 0x1, 0x1}, {0x2, 0x1}}, {{0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x1, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x1}}], 0x28) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000023c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x3c, r9, 0x14, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4804}, 0x8000) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002580)={&(0x7f0000002500)={0x4c, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2a}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x200}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x34040815) 50.526651ms ago: executing program 34 (id=3270): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080007000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) 0s ago: executing program 35 (id=3278): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fe80000000000000000000000000003bfe8000000000000000000000000000aa0000000000000c9c0a00103000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000400ae00009000000000000000070000000001000003000000000000000000000000000000fdffffffffffffff0500000000000000ffffffffffffffffffffffff000000000000000000000000000000b3d22be28cefc23853d5e56131fa0000000000050000000000000000000000000000000101020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a370500142c00fe8000000000000000000000000000bbfc0200000000000000000000000000010000000069f92f413423cdd45cf953f3260fac866007c5224c17b179014a60ed859ba719415cd7e0f36955b8c673496230327837ec9de8d8838dc63b7d5fc0e2fd43e4f77471eb45b41f3ace84c952269ce1871073a6cbd1d3f8ec6f81e3ef4187c633020793a6aa437b0c08ed342a63e84ecb8973372e651a7e5f0f6ad2105769d8b6f7a006ae1f07331fb65eca887948995e73b18d572c02725e7f03bfff5b23d79bee453aaf62f099ff4f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x13, 0xa, 0x201}, 0x14}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x10, 0x1402, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="55da29b3c5740b0257ad59962d99ed67c64bd0dfb1a972afbb65dc31d20273", @ANYRES32=0x0], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x48810) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r3, 0x0, 0x0, 0x80800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r8], 0x54}}, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0x1058, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0x1, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x5, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x9, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xb, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x40, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x7, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0xfffffffe, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xfc, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x2, 0x6, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x6, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x5, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xe, 0x7, 0x5, 0xfff, 0x8, 0x3, 0x7f, 0xfff, 0x4, 0x894, 0x9, 0x6, 0x4, 0x100, 0x6, 0x8001, 0x5, 0x2, 0x2, 0x7, 0x7ff, 0x2a651f85, 0x8, 0xee, 0x8f6, 0x400, 0x8, 0xd67, 0x6, 0x8, 0x8, 0x80000001, 0x45c, 0x1, 0x3ff, 0xff5f, 0x1, 0x294, 0x4, 0x7, 0x9, 0x200, 0x7, 0x3, 0x0, 0x4, 0x5, 0x2, 0xfffffffe, 0x80000, 0x2, 0x1fd, 0x9, 0x5, 0xea, 0x1, 0x5, 0xf175, 0xc7, 0x1, 0x1000, 0xfffffde2, 0x800, 0xddf, 0x10, 0xdf1d, 0x6, 0x10, 0x3ff, 0x2, 0x0, 0x1, 0x0, 0x10, 0xbf3b, 0x5, 0x3, 0x4dd, 0x200, 0x4, 0x8, 0x4, 0x6, 0x5, 0x2, 0x5, 0xc, 0x81, 0xb41f, 0x9, 0x6, 0x41, 0x2, 0x9, 0x1, 0x6, 0x51e0, 0x103, 0x4, 0x78, 0x1, 0x3ff, 0x8000, 0x2, 0xda, 0x1, 0x6, 0x0, 0x200000, 0x3, 0x9, 0x5, 0x97, 0x800, 0x3, 0x7, 0x0, 0x0, 0x903, 0xf, 0x100, 0x7, 0x100, 0x1, 0x3, 0x2, 0x200, 0x7ff, 0x1, 0xc54, 0x879, 0x73, 0x81, 0x1000, 0x7e5, 0x583, 0x401, 0x0, 0xe0000000, 0x0, 0x4, 0xd, 0x192d, 0x247, 0x0, 0x985, 0x0, 0xf470, 0xfffffffa, 0x2b7, 0x3, 0x3, 0x8, 0x4, 0x1, 0x2, 0x8, 0x1, 0x4, 0x0, 0xff, 0x4, 0x80000000, 0xfffffffc, 0x7, 0x3ff, 0x8, 0x4, 0x4, 0x4, 0x8, 0x1, 0x6, 0x4fb, 0x1, 0x8, 0x200, 0x2, 0x252d5040, 0xda, 0x8, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x3800, 0x3, 0x2, 0x1000, 0x2, 0x0, 0x8, 0x4, 0xfffffff9, 0x100, 0x9, 0x9, 0x8, 0x10, 0x5, 0x9, 0x9, 0x8, 0x6, 0x5, 0x9, 0xa8, 0x5, 0x3, 0x10, 0x3, 0x7, 0x9, 0xf4b6, 0x2, 0x6a, 0x2, 0x3, 0x5, 0x8, 0x40, 0x3b, 0x4800000, 0x800, 0xdae, 0x9, 0x0, 0xfff, 0x9, 0xf, 0x26, 0x1, 0x2, 0x6, 0x6, 0x6, 0x0, 0xffffffff, 0x7, 0xfffffff9, 0xffffffff, 0xfffffff6, 0x10000, 0x3, 0x8000, 0x3231, 0x74e, 0x9, 0x8009, 0x1, 0xe7e1, 0x3db2, 0x375b, 0x9, 0x80]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x1, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x5, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x7, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x400, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x0, 0x5, 0x9, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x3, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x6, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0x1058}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) connect$inet6(r4, &(0x7f0000000bc0)={0xa, 0x4e21, 0x496, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}, 0x1c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4040) sendmmsg$alg(r4, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001d00), r4) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d40)={0x98, r10, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaa08}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x885}, 0x80) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, &(0x7f00000000c0)=""/69, 0x2}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r12) sendmsg$NLBL_MGMT_C_LISTDEF(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x1c, r13, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4180) kernel console output (not intermixed with test programs): r parsing attributes in process `syz.2.2379'. [ 307.195636][T14533] block nbd3: not configured, cannot reconfigure [ 307.410989][ T9244] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.420614][ T9244] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.440325][ T9244] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.458086][ T9244] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.472072][T14544] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2383'. [ 307.554643][T14553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2388'. [ 307.565091][T14554] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2388'. [ 307.739368][T14572] pim6reg: entered allmulticast mode [ 307.757620][T14572] pim6reg: left allmulticast mode [ 308.067886][T14599] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2402'. [ 308.079981][T14599] FAULT_INJECTION: forcing a failure. [ 308.079981][T14599] name failslab, interval 1, probability 0, space 0, times 0 [ 308.092704][T14599] CPU: 1 UID: 0 PID: 14599 Comm: syz.3.2402 Not tainted syzkaller #0 PREEMPT(full) [ 308.092726][T14599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 308.092738][T14599] Call Trace: [ 308.092746][T14599] [ 308.092754][T14599] dump_stack_lvl+0xe8/0x150 [ 308.092783][T14599] should_fail_ex+0x412/0x560 [ 308.092810][T14599] should_failslab+0xa8/0x100 [ 308.092833][T14599] kmem_cache_alloc_noprof+0x87/0x6e0 [ 308.092861][T14599] ? skb_clone+0x212/0x3a0 [ 308.092891][T14599] skb_clone+0x212/0x3a0 [ 308.092913][T14599] ? dev_queue_xmit_nit+0x268/0xad0 [ 308.092937][T14599] dev_queue_xmit_nit+0x29a/0xad0 [ 308.092959][T14599] ? dev_queue_xmit_nit+0x2d/0xad0 [ 308.092981][T14599] ? stack_trace_save+0xa9/0x100 [ 308.093009][T14599] dev_hard_start_xmit+0x1c1/0x7f0 [ 308.093049][T14599] __dev_queue_xmit+0x168f/0x3850 [ 308.093085][T14599] ? __dev_queue_xmit+0x274/0x3850 [ 308.093121][T14599] ? __pfx___dev_queue_xmit+0x10/0x10 [ 308.093183][T14599] __bpf_redirect+0x9a6/0x12a0 [ 308.093213][T14599] bpf_clone_redirect+0x313/0x4b0 [ 308.093241][T14599] ? bpf_test_run+0x1d1/0x830 [ 308.093258][T14599] bpf_prog_cfa4bf6e1e03aea2+0x5f/0x68 [ 308.093279][T14599] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 308.093313][T14599] ? __pfx___schedule+0x10/0x10 [ 308.093328][T14599] ? ktime_get+0x45/0x200 [ 308.093362][T14599] ? preempt_schedule_thunk+0x16/0x30 [ 308.093395][T14599] ? preempt_schedule_common+0x82/0xd0 [ 308.093412][T14599] ? bpf_test_run+0x1d1/0x830 [ 308.093432][T14599] ? bpf_test_timer_continue+0x10c/0x320 [ 308.093462][T14599] bpf_test_run+0x354/0x830 [ 308.093501][T14599] ? __pfx_bpf_test_run+0x10/0x10 [ 308.093533][T14599] ? __kasan_krealloc+0xeb/0x110 [ 308.093552][T14599] ? eth_type_trans+0x35e/0x6d0 [ 308.093581][T14599] ? convert___skb_to_skb+0x3d/0x5b0 [ 308.093601][T14599] bpf_prog_test_run_skb+0xd66/0x1d50 [ 308.093631][T14599] ? __fget_files+0x2a/0x420 [ 308.093650][T14599] ? __fget_files+0x3a0/0x420 [ 308.093667][T14599] ? __fget_files+0x2a/0x420 [ 308.093691][T14599] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 308.093709][T14599] bpf_prog_test_run+0x2c7/0x340 [ 308.093731][T14599] __sys_bpf+0x5cb/0x920 [ 308.093750][T14599] ? __pfx___sys_bpf+0x10/0x10 [ 308.093781][T14599] ? ksys_write+0x242/0x270 [ 308.093807][T14599] ? __pfx_ksys_write+0x10/0x10 [ 308.093838][T14599] __x64_sys_bpf+0x7c/0x90 [ 308.093863][T14599] do_syscall_64+0xe2/0xf80 [ 308.093881][T14599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.093897][T14599] ? trace_irq_disable+0x37/0x100 [ 308.093914][T14599] ? clear_bhb_loop+0x60/0xb0 [ 308.093936][T14599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.093952][T14599] RIP: 0033:0x7ff99a59aeb9 [ 308.093968][T14599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.093984][T14599] RSP: 002b:00007ff99b4d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.094002][T14599] RAX: ffffffffffffffda RBX: 00007ff99a815fa0 RCX: 00007ff99a59aeb9 [ 308.094015][T14599] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 308.094026][T14599] RBP: 00007ff99b4d7090 R08: 0000000000000000 R09: 0000000000000000 [ 308.094038][T14599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 308.094048][T14599] R13: 00007ff99a816038 R14: 00007ff99a815fa0 R15: 00007ffc2699f4b8 [ 308.094078][T14599] [ 308.477738][T14606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2404'. [ 308.639345][T14613] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 308.883545][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 308.891624][ C1] lec:lec_tx_timeout: lec0 [ 308.896288][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 308.999942][T14643] nftables ruleset with unbound chain [ 309.403234][T14664] tipc: Enabling of bearer rejected, failed to enable media [ 310.489339][T14732] netlink: 'syz.3.2439': attribute type 10 has an invalid length. [ 310.750220][T14748] netlink: 'syz.3.2446': attribute type 1 has an invalid length. [ 310.772820][T14748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.143274][T14777] xt_hashlimit: size too large, truncated to 1048576 [ 311.545597][T14809] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 312.107379][T14848] __nla_validate_parse: 12 callbacks suppressed [ 312.107397][T14848] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2476'. [ 312.133196][T14848] block nbd4: not configured, cannot reconfigure [ 312.219769][T14856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2479'. [ 312.344818][T14862] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.356466][T14862] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.535536][T14862] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.561774][T14862] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.640531][T14875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2482'. [ 312.761181][T14862] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.774718][T14862] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.932231][T14862] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.961487][T14862] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.987162][T14894] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2487'. [ 313.211312][T14911] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2492'. [ 313.267078][ T9250] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.283850][ T9250] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.403113][ T9250] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.422420][ T9250] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.429314][T14921] netlink: 'syz.2.2494': attribute type 2 has an invalid length. [ 313.461682][ T9250] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.476337][ T9250] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.551379][ T9250] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.603707][ T9250] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.740732][T14936] syzkaller0: entered promiscuous mode [ 313.763985][T14936] syzkaller0: entered allmulticast mode [ 313.811675][T14936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2500'. [ 313.832898][T14936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2500'. [ 313.903508][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 313.911580][ C1] lec:lec_tx_timeout: lec0 [ 313.916503][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 314.024785][T14951] ieee802154 phy0 wpan0: encryption failed: -22 [ 314.100500][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2508'. [ 314.278107][T14977] syzkaller1: entered promiscuous mode [ 314.287744][T14977] syzkaller1: entered allmulticast mode [ 314.322420][T14977] xt_connbytes: Forcing CT accounting to be enabled [ 314.455021][T14994] xt_TPROXY: Can be used only with -p tcp or -p udp [ 314.490990][T14995] sctp: [Deprecated]: syz.0.2516 (pid 14995) Use of int in maxseg socket option. [ 314.490990][T14995] Use struct sctp_assoc_value instead [ 314.613830][T15002] 8021q: adding VLAN 0 to HW filter on device bond13 [ 314.656137][T15000] block nbd1: server does not support multiple connections per device. [ 314.666159][T15000] block nbd1: shutting down sockets [ 314.996924][T15037] bridge0: port 1(ipvlan2) entered blocking state [ 315.014443][T15037] bridge0: port 1(ipvlan2) entered disabled state [ 315.021295][T15037] ipvlan2: entered allmulticast mode [ 315.027182][T15037] bridge0: entered allmulticast mode [ 315.037035][T15037] ipvlan2: left allmulticast mode [ 315.042668][T15037] bridge0: left allmulticast mode [ 315.073768][T15041] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.081148][T15041] IPv6: NLM_F_CREATE should be set when creating new route [ 315.090304][T15046] ip6gre2: entered allmulticast mode [ 315.098571][T15045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2534'. [ 315.127100][T15044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2534'. [ 315.403147][T15068] bond4 (unregistering): Released all slaves [ 315.826450][T15095] bond0: Caught tx_queue_len zero misconfig [ 316.190858][T15115] bond11: Removing last arp target with arp_interval on [ 316.268116][T15127] netlink: 'syz.1.2557': attribute type 21 has an invalid length. [ 316.609648][T15164] tipc: Enabled bearer , priority 0 [ 316.685129][T15170] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.720028][T15167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.832745][T15177] netlink: 'syz.2.2572': attribute type 1 has an invalid length. [ 317.026822][T15190] xt_HMARK: spi-set and port-set can't be combined [ 317.141348][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.591943][T15232] __nla_validate_parse: 9 callbacks suppressed [ 317.591962][T15232] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2587'. [ 317.696264][T15239] netlink: 'syz.4.2589': attribute type 4 has an invalid length. [ 317.754404][T15239] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2589'. [ 317.804849][T15249] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2592'. [ 317.835760][T15249] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2592'. [ 317.883973][T15249] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2592'. [ 317.906387][T15249] netlink: 'syz.0.2592': attribute type 11 has an invalid length. [ 318.181810][T15273] gtp0: entered promiscuous mode [ 318.187325][T15273] gtp0: entered allmulticast mode [ 318.210155][T15280] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2601'. [ 318.230299][T15280] bond2: option mode: unable to set because the bond device has slaves [ 318.240673][T15280] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 318.253236][T15280] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.292505][T15284] tipc: Enabled bearer , priority 0 [ 318.300152][T15284] syzkaller0: entered promiscuous mode [ 318.306015][T15284] syzkaller0: entered allmulticast mode [ 318.327261][T15284] tipc: Resetting bearer [ 318.448870][T15291] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2603'. [ 318.493824][T15293] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2605'. [ 318.505406][T15293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2605'. [ 318.516972][T15293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2605'. [ 318.599586][T15271] tipc: Resetting bearer [ 318.627602][T15271] tipc: Disabling bearer [ 318.923758][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 318.931868][ C1] lec:lec_tx_timeout: lec0 [ 318.936699][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 318.991658][T15329] : renamed from hsr0 (while UP) [ 319.093852][T15338] syzkaller0: entered promiscuous mode [ 319.099484][T15338] syzkaller0: entered allmulticast mode [ 319.108460][T15339] netlink: 'syz.2.2619': attribute type 1 has an invalid length. [ 319.116927][T15338] netlink: 'syz.2.2619': attribute type 1 has an invalid length. [ 319.401092][T15358] netlink: 'syz.4.2625': attribute type 1 has an invalid length. [ 319.480524][T15361] netlink: 'syz.4.2629': attribute type 1 has an invalid length. [ 319.528677][T15361] bond5: (slave ip6gretap1): making interface the new active one [ 319.537114][T15361] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 319.590753][T15374] netlink: zone id is out of range [ 319.597962][T15376] netlink: 'syz.2.2631': attribute type 28 has an invalid length. [ 319.608828][T15376] netlink: 'syz.2.2631': attribute type 3 has an invalid length. [ 319.609577][T15374] netlink: zone id is out of range [ 319.626790][T15374] netlink: zone id is out of range [ 319.632008][T15374] netlink: zone id is out of range [ 319.637361][T15374] netlink: zone id is out of range [ 319.642827][T15374] netlink: zone id is out of range [ 319.648499][T15374] netlink: zone id is out of range [ 319.655051][T15374] netlink: zone id is out of range [ 319.762963][T15387] netlink: 'syz.4.2634': attribute type 4 has an invalid length. [ 319.832329][T15395] 8021q: adding VLAN 0 to HW filter on device bond8 [ 319.851010][T15392] syzkaller0: entered promiscuous mode [ 319.859633][T15392] syzkaller0: entered allmulticast mode [ 319.895038][T15395] bond8: (slave veth13): Enslaving as an active interface with a down link [ 319.926515][T15395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.933706][T15395] bond8: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 320.609029][T15449] 8021q: VLANs not supported on ip6_vti0 [ 320.616583][T15455] 8021q: VLANs not supported on ip6_vti0 [ 320.976355][ T56] block nbd0: Possible stuck request ffff888024a98000: control (read@0,1024B). Runtime 30 seconds [ 320.988162][ T56] block nbd0: Possible stuck request ffff888024a98200: control (read@1024,1024B). Runtime 30 seconds [ 320.999493][ T56] block nbd0: Possible stuck request ffff888024a98400: control (read@2048,1024B). Runtime 30 seconds [ 321.010499][ T56] block nbd0: Possible stuck request ffff888024a98600: control (read@3072,1024B). Runtime 30 seconds [ 321.323028][T15500] validate_nla: 1 callbacks suppressed [ 321.323046][T15500] netlink: 'syz.4.2665': attribute type 1 has an invalid length. [ 321.352322][T15500] netlink: 'syz.4.2665': attribute type 2 has an invalid length. [ 321.688988][T15520] bridge0: port 1(ipvlan3) entered blocking state [ 321.696310][T15520] bridge0: port 1(ipvlan3) entered disabled state [ 321.702949][T15520] ipvlan3: entered allmulticast mode [ 321.711745][T15520] bridge0: entered allmulticast mode [ 321.718565][T15522] net_ratelimit: 135 callbacks suppressed [ 321.718579][T15522] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 321.720674][T15523] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 321.744303][T15520] ipvlan3: left allmulticast mode [ 321.749427][T15520] bridge0: left allmulticast mode [ 321.968619][T15533] team1: entered promiscuous mode [ 321.974121][T15533] team1: entered allmulticast mode [ 322.249276][T15556] macvtap2: entered promiscuous mode [ 322.258587][T15556] macvtap2: entered allmulticast mode [ 322.466041][T15573] openvswitch: netlink: IP tunnel dst address not specified [ 322.549097][T15577] tipc: Enabled bearer , priority 0 [ 322.561645][T15577] syzkaller0: entered promiscuous mode [ 322.571818][T15577] syzkaller0: entered allmulticast mode [ 322.594775][T15577] tipc: Resetting bearer [ 322.601967][T15576] tipc: Resetting bearer [ 322.617081][T15576] tipc: Disabling bearer [ 322.684617][T15587] tipc: Enabled bearer , priority 10 [ 322.959029][T15612] netlink: 'syz.2.2702': attribute type 1 has an invalid length. [ 323.066108][T15616] bond4: (slave veth11): Enslaving as an active interface with a down link [ 323.078124][T15612] __nla_validate_parse: 26 callbacks suppressed [ 323.078141][T15612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2702'. [ 323.097845][T15612] 8021q: adding VLAN 0 to HW filter on device bond4 [ 323.170232][T15624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2706'. [ 323.310031][T15633] tipc: Enabling of bearer rejected, already enabled [ 323.322460][T15633] tipc: Resetting bearer [ 323.378157][T15635] syzkaller1: entered promiscuous mode [ 323.400008][T15635] syzkaller1: entered allmulticast mode [ 323.456640][T15635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2711'. [ 323.722025][T15667] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2720'. [ 323.943719][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 323.951859][ C1] lec:lec_tx_timeout: lec0 [ 323.956814][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 324.368573][T15710] netlink: 'syz.0.2734': attribute type 12 has an invalid length. [ 324.452822][T15720] x_tables: duplicate underflow at hook 1 [ 324.471780][T15721] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 324.488623][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2741'. [ 324.499396][T15723] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2741'. [ 324.523057][T15727] netlink: 'syz.3.2742': attribute type 1 has an invalid length. [ 324.539597][T15721] netlink: 'syz.2.2738': attribute type 6 has an invalid length. [ 324.640637][T15731] bond12: (slave veth11): Enslaving as an active interface with a down link [ 324.660256][T15738] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2745'. [ 325.223348][T15769] netlink: 'syz.4.2757': attribute type 1 has an invalid length. [ 325.235420][T15769] netlink: 'syz.4.2757': attribute type 1 has an invalid length. [ 325.247872][T15769] netlink: 'syz.4.2757': attribute type 1 has an invalid length. [ 325.248816][T15772] netlink: 25160 bytes leftover after parsing attributes in process `syz.2.2759'. [ 325.269487][T15769] netlink: 'syz.4.2757': attribute type 2 has an invalid length. [ 325.277591][T15769] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2757'. [ 325.290054][T15772] netlink: 25160 bytes leftover after parsing attributes in process `syz.2.2759'. [ 325.461728][T15789] x_tables: duplicate underflow at hook 1 [ 325.580265][T15797] lo: entered promiscuous mode [ 325.588425][T15797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.095886][T15913] gre0: Caught tx_queue_len zero misconfig [ 327.233289][T15919] validate_nla: 1 callbacks suppressed [ 327.233309][T15919] netlink: 'syz.3.2800': attribute type 1 has an invalid length. [ 327.247742][T15919] netlink: 'syz.3.2800': attribute type 11 has an invalid length. [ 327.259969][T15918] netlink: 'syz.0.2801': attribute type 1 has an invalid length. [ 327.275068][T15919] netlink: 'syz.3.2800': attribute type 1 has an invalid length. [ 327.334455][T15919] 8021q: adding VLAN 0 to HW filter on device bond13 [ 327.567241][T15927] bond13: (slave veth13): Enslaving as an active interface with a down link [ 327.654996][T15919] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 327.672853][T15919] bond13: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 327.734333][T15944] openvswitch: netlink: Flow actions attr not present in new flow. [ 327.770928][T15931] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 327.785889][T15931] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 327.795365][T15931] gretap3: entered promiscuous mode [ 327.800665][T15931] gretap3: entered allmulticast mode [ 328.278872][T15975] __nla_validate_parse: 9 callbacks suppressed [ 328.278900][T15975] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2813'. [ 328.330964][T15975] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2813'. [ 328.584762][T15992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2817'. [ 328.613727][T15992] bridge_slave_1: left allmulticast mode [ 328.627724][T15992] bridge_slave_1: left promiscuous mode [ 328.644518][T15992] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.668238][T15989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2817'. [ 328.711971][T15992] bridge_slave_0: left allmulticast mode [ 328.722467][T15992] bridge_slave_0: left promiscuous mode [ 328.776452][T15992] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.912768][T15989] netlink: 'syz.1.2817': attribute type 1 has an invalid length. [ 328.921612][T15989] netlink: 'syz.1.2817': attribute type 2 has an invalid length. [ 328.963480][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 328.971542][ C1] lec:lec_tx_timeout: lec0 [ 328.976235][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 329.138488][T16015] team_slave_1: Caught tx_queue_len zero misconfig [ 329.197851][T16013] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 329.219387][ T9246] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aaaa error=-28 [ 329.220090][T16013] bond1: (slave macvlan3): making interface the new active one [ 329.247021][T16013] bond1: (slave macvlan3): Enslaving as an active interface with an up link [ 329.405127][T16031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.419596][T16030] tipc: Enabled bearer , priority 0 [ 329.434436][T16030] syzkaller0: entered promiscuous mode [ 329.450534][T16030] syzkaller0: entered allmulticast mode [ 329.461796][T16034] 8021q: VLANs not supported on lo [ 329.470447][T16034] : renamed from dummy0 (while UP) [ 329.476995][T16037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2829'. [ 329.522354][T16030] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 329.575232][T16030] tipc: Resetting bearer [ 329.581562][T16044] netlink: 'syz.3.2824': attribute type 153 has an invalid length. [ 329.648444][T16028] tipc: Resetting bearer [ 329.669318][T16028] tipc: Disabling bearer [ 329.851805][T16059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2832'. [ 329.910386][T16059] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2832'. [ 330.016954][T16065] netlink: 'syz.1.2834': attribute type 1 has an invalid length. [ 330.143178][T16075] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.2837'. [ 330.222744][T16080] ipt_REJECT: TCP_RESET invalid for non-tcp [ 330.349067][T16086] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2840'. [ 330.374393][T16086] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2840'. [ 330.888280][T16112] netlink: 'syz.3.2846': attribute type 1 has an invalid length. [ 331.011224][T16120] siw: device registration error -23 [ 331.081367][T16122] syzkaller1: entered promiscuous mode [ 331.110075][T16122] syzkaller1: entered allmulticast mode [ 331.455777][T16143] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.656828][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 331.678776][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 331.687625][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 331.723640][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 331.731916][T16152] netlink: 'syz.2.2859': attribute type 1 has an invalid length. [ 331.744209][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 331.768703][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 331.805529][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 331.827097][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 331.851679][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 331.875166][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 332.062212][T16165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 332.195021][T16176] tipc: Enabled bearer , priority 0 [ 332.221544][T16176] syzkaller0: entered promiscuous mode [ 332.229093][T16176] syzkaller0: entered allmulticast mode [ 332.389071][T16175] tipc: Resetting bearer [ 332.487338][T16175] tipc: Disabling bearer [ 332.515182][T16196] netlink: 'syz.4.2866': attribute type 6 has an invalid length. [ 333.304689][T16231] syzkaller1: entered promiscuous mode [ 333.310213][T16231] syzkaller1: entered allmulticast mode [ 333.500013][T16236] __nla_validate_parse: 7 callbacks suppressed [ 333.500030][T16236] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2874'. [ 333.544977][T16236] gretap0: entered promiscuous mode [ 333.613232][T16233] gretap0: left promiscuous mode [ 333.632609][T16233] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 333.745994][T16247] tipc: Enabled bearer , priority 0 [ 333.788024][T16247] syzkaller0: entered promiscuous mode [ 333.814981][T16247] syzkaller0: entered allmulticast mode [ 333.953495][T16265] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2882'. [ 333.980995][T16246] tipc: Resetting bearer [ 333.983698][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 333.994806][ C1] lec:lec_tx_timeout: lec0 [ 333.999644][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 334.019420][ T5834] Bluetooth: hci5: command tx timeout [ 334.074224][T16246] tipc: Disabling bearer [ 334.229208][T16278] netlink: 'syz.0.2887': attribute type 58 has an invalid length. [ 334.259135][T16278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2887'. [ 334.295616][T16283] netlink: 'syz.0.2887': attribute type 58 has an invalid length. [ 334.336707][T16289] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 334.349635][T16283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2887'. [ 334.418771][T16149] chnl_net:caif_netlink_parms(): no params data found [ 334.612354][T16301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2894'. [ 334.717315][T16306] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2896'. [ 334.746279][T16149] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.753994][T16149] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.761217][T16149] bridge_slave_0: entered allmulticast mode [ 334.769932][T16149] bridge_slave_0: entered promiscuous mode [ 334.785580][T16316] syzkaller1: entered promiscuous mode [ 334.786291][T16317] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2899'. [ 334.791083][T16316] syzkaller1: entered allmulticast mode [ 334.819495][T16315] tipc: Enabling of bearer rejected, already enabled [ 334.830971][T16149] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.844763][T16149] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.856693][T16149] bridge_slave_1: entered allmulticast mode [ 334.876022][T16149] bridge_slave_1: entered promiscuous mode [ 334.972314][T16306] IPVS: persistence engine module ip_vs_pe_Â not found [ 335.031521][T16149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.075797][T16149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.137940][T16337] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2902'. [ 335.271834][T16149] team0: Port device team_slave_0 added [ 335.280893][T16149] team0: Port device team_slave_1 added [ 335.496266][T16149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.503261][T16149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.541860][T16149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.555906][T16359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2907'. [ 335.565361][T16359] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2907'. [ 335.575226][T16359] netlink: 'syz.3.2907': attribute type 5 has an invalid length. [ 335.589798][T16149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.603719][T16149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.671339][T16149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.829733][T16149] hsr_slave_0: entered promiscuous mode [ 335.837424][T16149] hsr_slave_1: entered promiscuous mode [ 335.906709][T16383] syzkaller0: entered promiscuous mode [ 335.912339][T16383] syzkaller0: entered allmulticast mode [ 335.979554][T16384] macsec0: entered promiscuous mode [ 335.985451][T16384] macsec0: entered allmulticast mode [ 335.991406][T16384] veth1_macvtap: entered allmulticast mode [ 335.997778][T16384] macsec0: left promiscuous mode [ 336.003000][T16384] macsec0: left allmulticast mode [ 336.008743][T16384] veth1_macvtap: left allmulticast mode [ 336.093614][ T5834] Bluetooth: hci5: command 0x041b tx timeout [ 336.174779][T16149] bond0: (slave netdevsim0): Releasing backup interface [ 336.370666][T16360] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 336.395909][T16149] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 336.456425][T16149] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 336.479259][T16149] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 336.498583][T16149] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 336.819850][T16149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.851254][T16149] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.866099][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.873409][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.932519][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.939704][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.041294][T16421] IPv6: addrconf: prefix option has invalid lifetime [ 337.048081][T16421] IPv6: addrconf: prefix option has invalid lifetime [ 337.332615][T16430] syzkaller0: entered promiscuous mode [ 337.344127][T16430] syzkaller0: entered allmulticast mode [ 337.356312][T16434] tipc: Enabling of bearer rejected, already enabled [ 337.404740][T16430] bond14: Unable to set down delay as MII monitoring is disabled [ 337.425517][T16430] bond14 (unregistering): Released all slaves [ 337.632689][T16149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.704922][T16449] netlink: 'syz.0.2928': attribute type 1 has an invalid length. [ 337.803297][T16449] 8021q: adding VLAN 0 to HW filter on device bond9 [ 337.820134][T16453] tipc: Enabling of bearer rejected, already enabled [ 337.888476][T16149] veth0_vlan: entered promiscuous mode [ 337.915379][T16149] veth1_vlan: entered promiscuous mode [ 338.021078][T16461] syzkaller0: entered promiscuous mode [ 338.038052][T16461] syzkaller0: entered allmulticast mode [ 338.060898][T16149] veth0_macvtap: entered promiscuous mode [ 338.164206][T16149] veth1_macvtap: entered promiscuous mode [ 338.174162][ T5834] Bluetooth: hci5: command 0x041b tx timeout [ 338.269312][T16149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.298353][T16149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.386184][ T9250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.400343][ T9250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.462222][ T9250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.497986][ T9250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.580211][ T9250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.602051][ T9250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.662534][ T9250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.683319][ T9250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.716458][T16486] tipc: Enabling of bearer rejected, already enabled [ 339.013486][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 339.021573][ C1] lec:lec_tx_timeout: lec0 [ 339.027123][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 339.275007][T16508] __nla_validate_parse: 7 callbacks suppressed [ 339.275026][T16508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2945'. [ 339.296112][T16510] netlink: 'syz.0.2946': attribute type 2 has an invalid length. [ 339.304269][T16510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2946'. [ 339.326088][T16508] netlink: 'syz.2.2945': attribute type 32 has an invalid length. [ 339.347702][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.356205][T16508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2945'. [ 339.366119][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.374017][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.382814][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.395940][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.492343][T16508] bond6: Setting coupled_control to off (0) [ 339.663228][T16525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2949'. [ 340.166405][T16552] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2957'. [ 340.198626][T16552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2957'. [ 340.230915][ T13] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.242707][T16563] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2956'. [ 340.259544][ T5834] Bluetooth: hci5: command 0x041b tx timeout [ 340.265784][ T13] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.277507][ T13] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 41708 - 0 [ 340.309495][T16562] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2958'. [ 340.351122][T16552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2957'. [ 340.385817][ T13] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.392846][T16566] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2956'. [ 340.403753][ T13] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.456312][ T13] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 41708 - 0 [ 340.649331][ T13] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.674954][ T13] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.719260][ T13] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 41708 - 0 [ 340.798905][ T13] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.809115][ T13] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.820783][ T13] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 41708 - 0 [ 340.888956][T16587] syzkaller0: entered promiscuous mode [ 340.896721][T16587] syzkaller0: entered allmulticast mode [ 341.464859][ T5834] Bluetooth: hci2: command tx timeout [ 342.232512][ T13] bridge_slave_0: left allmulticast mode [ 342.241977][ T13] bridge_slave_0: left promiscuous mode [ 342.251488][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.338373][ T5834] Bluetooth: hci5: command 0x041b tx timeout [ 342.449291][ T13] bond8 (unregistering): (slave ip6gretap1): Releasing backup interface [ 342.459060][ T13] bond8 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 3e:e0:30:be:aa:a2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 342.946504][ T13] bond5 (unregistering): (slave bridge5): Releasing active interface [ 342.954708][ T13] bond5 (unregistering): (slave bridge5): the permanent HWaddr of slave - aa:98:54:8d:7c:06 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 343.032400][ T13] bond5 (unregistering): (slave bridge6): Releasing active interface [ 343.092658][T16576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 343.103997][ T13] bond5 (unregistering): (slave bridge7): Releasing active interface [ 343.243074][ T13] bond5 (unregistering): (slave bridge8): Releasing active interface [ 343.304695][ T13] bond5 (unregistering): (slave bridge9): Releasing active interface [ 343.516153][ T13] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.529903][ T13] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.538904][ T5834] Bluetooth: hci2: command tx timeout [ 343.549761][ T13] ` (unregistering): (slave .): Releasing backup interface [ 343.560479][ T13] ` (unregistering): Released all slaves [ 343.585078][ T13] bond0 (unregistering): Released all slaves [ 343.587619][ T7008] smc: removing ib device syz2 [ 343.601894][ T13] bond1 (unregistering): Released all slaves [ 343.619158][ T13] bond2 (unregistering): Released all slaves [ 343.640823][ T13] bond3 (unregistering): Released all slaves [ 343.744568][ T13] bond4 (unregistering): Released all slaves [ 343.759505][ T13] bond5 (unregistering): Released all slaves [ 343.772806][ T13] bond6 (unregistering): Released all slaves [ 343.862546][ T13] bond7 (unregistering): (slave veth7): Releasing active interface [ 343.872800][ T13] bond7 (unregistering): Released all slaves [ 343.887240][ T13] bond8 (unregistering): (slave veth9): Releasing backup interface [ 343.897105][ T13] bond8 (unregistering): Released all slaves [ 343.986361][ T13] bond9 (unregistering): Released all slaves [ 344.000064][ T13] bond10 (unregistering): Released all slaves [ 344.013747][ T13] bond11 (unregistering): Released all slaves [ 344.028927][ T13] bond12 (unregistering): (slave veth11): Releasing active interface [ 344.034344][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 344.045085][ C1] lec:lec_tx_timeout: lec0 [ 344.049599][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 344.057693][ T13] bond12 (unregistering): Released all slaves [ 344.148597][ T13] bond13 (unregistering): (slave veth13): Releasing active interface [ 344.158668][ T13] bond13 (unregistering): Released all slaves [ 344.339632][T16637] __nla_validate_parse: 1 callbacks suppressed [ 344.339648][T16637] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2972'. [ 344.505781][T16648] netlink: 'syz.0.2974': attribute type 2 has an invalid length. [ 344.541563][T16649] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2975'. [ 344.587430][T16652] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2976'. [ 344.798443][T16653] only policy match revision 0 supported [ 344.798463][T16653] unable to load match [ 344.879614][T16665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2977'. [ 344.909506][T16511] chnl_net:caif_netlink_parms(): no params data found [ 345.056726][T16670] syz_tun: entered allmulticast mode [ 345.136512][T16673] netlink: 'syz.1.2980': attribute type 1 has an invalid length. [ 345.307353][T16670] xt_CT: You must specify a L4 protocol and not use inversions on it [ 345.308368][T16667] syzkaller0: entered promiscuous mode [ 345.322658][T16667] syzkaller0: entered allmulticast mode [ 345.424760][T16667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2978'. [ 345.537006][T16667] syz_tun (unregistering): left allmulticast mode [ 345.603333][T16699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2986'. [ 345.617644][ T5834] Bluetooth: hci2: command tx timeout [ 345.631349][T16699] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 346.010555][T16715] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2988'. [ 347.497913][T16511] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.505444][T16511] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.512654][T16511] bridge_slave_0: entered allmulticast mode [ 347.520611][T16511] bridge_slave_0: entered promiscuous mode [ 347.528420][T16511] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.536230][T16511] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.544140][T16511] bridge_slave_1: entered allmulticast mode [ 347.551793][T16511] bridge_slave_1: entered promiscuous mode [ 347.612594][T16511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.650004][T16511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.694066][ T5834] Bluetooth: hci2: command tx timeout [ 347.745344][T16511] team0: Port device team_slave_0 added [ 347.776711][T16511] team0: Port device team_slave_1 added [ 347.908337][ T13] tipc: Disabling bearer [ 347.936904][ T13] tipc: Left network mode [ 347.945023][T16511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.962198][T16511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.034846][T16511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.100424][T16511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.110775][T16511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.145428][T16511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.215331][T16755] netlink: 'syz.4.2999': attribute type 1 has an invalid length. [ 348.375948][T16768] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3001'. [ 348.604369][T16511] hsr_slave_0: entered promiscuous mode [ 348.619955][T16511] hsr_slave_1: entered promiscuous mode [ 348.632037][T16511] debugfs: 'hsr0' already exists in 'hsr' [ 348.647141][T16511] Cannot create hsr debugfs directory [ 348.712528][T16793] netlink: 'syz.2.3005': attribute type 4 has an invalid length. [ 348.937430][T16801] 8021q: VLANs not supported on ip_vti0 [ 349.517838][T16829] vlan2: entered allmulticast mode [ 349.523008][T16829] geneve1: entered allmulticast mode [ 349.583268][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.605614][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.679105][ T13] veth0_macvtap: left promiscuous mode [ 349.691448][ T13] veth1_vlan: left promiscuous mode [ 350.413434][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6360 ms [ 350.421544][ C1] lec:lec_tx_timeout: lec0 [ 350.427284][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 350.544312][T16859] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3021'. [ 351.069122][ T56] block nbd0: Possible stuck request ffff888024a98000: control (read@0,1024B). Runtime 60 seconds [ 351.079949][ T56] block nbd0: Possible stuck request ffff888024a98200: control (read@1024,1024B). Runtime 60 seconds [ 351.094273][ T56] block nbd0: Possible stuck request ffff888024a98400: control (read@2048,1024B). Runtime 60 seconds [ 351.105605][ T56] block nbd0: Possible stuck request ffff888024a98600: control (read@3072,1024B). Runtime 60 seconds [ 351.226146][T16895] netlink: 'syz.2.3031': attribute type 4 has an invalid length. [ 351.251103][T16511] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 351.296015][T16511] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 351.336701][T16511] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 351.356821][T16902] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 351.394313][T16511] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 351.437138][T16908] : entered promiscuous mode [ 351.447990][ T13] IPVS: stop unused estimator thread 0... [ 351.608055][T16917] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3034'. [ 351.666957][T16920] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.3035'. [ 351.727671][T16511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.797896][T16511] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.841693][ T9246] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.848975][ T9246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.874168][ T9250] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.881343][ T9250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.015656][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3036'. [ 352.057899][T16943] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3040'. [ 352.236425][T16954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.266590][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3042'. [ 352.285034][T16958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3043'. [ 352.303418][T16952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3042'. [ 352.313819][T16958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3043'. [ 352.394756][T16962] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3042'. [ 352.418016][ T7008] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.466126][T16511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.483538][ T7008] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.492397][ T7008] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.536212][ T7008] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.663161][T16511] veth0_vlan: entered promiscuous mode [ 352.695724][T16511] veth1_vlan: entered promiscuous mode [ 352.760987][T16511] veth0_macvtap: entered promiscuous mode [ 352.780107][T16511] veth1_macvtap: entered promiscuous mode [ 352.824991][T16511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.858198][T16511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.911047][ T9250] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.948102][ T9250] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.972874][ T9250] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.984008][ T9250] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.258480][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.300743][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.356722][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.366514][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.374710][T16996] netlink: 'syz.0.3052': attribute type 4 has an invalid length. [ 353.414205][T16999] netlink: 'syz.2.3054': attribute type 4 has an invalid length. [ 353.441897][T16999] netlink: 'syz.2.3054': attribute type 4 has an invalid length. [ 353.484585][T16999] netlink: 'syz.2.3054': attribute type 1 has an invalid length. [ 353.652319][T17014] bond7: (slave xfrm2): The slave device specified does not support setting the MAC address [ 353.715941][T17014] bond7: (slave xfrm2): Setting fail_over_mac to active for active-backup mode [ 353.748150][T17014] bond7: (slave xfrm2): making interface the new active one [ 353.759035][T17014] bond7: (slave xfrm2): Enslaving as an active interface with an up link [ 353.783323][T16999] bond7 (unregistering): (slave xfrm2): Releasing backup interface [ 353.807755][T16999] bond7 (unregistering): Released all slaves [ 354.342245][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 354.351398][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 354.368983][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 354.379107][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 354.392537][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 354.669813][T17068] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 355.229043][T17103] s5ÿÿø: renamed from vlan1 [ 355.243079][T17103] tipc: Enabling of bearer rejected, failed to enable media [ 355.274032][T17103] tipc: Enabling of bearer rejected, failed to enable media [ 355.494716][T17121] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 355.530405][T17115] bond1: Unable to set up delay as MII monitoring is disabled [ 355.575162][T17115] bond1 (unregistering): Released all slaves [ 355.592179][T17126] __nla_validate_parse: 5 callbacks suppressed [ 355.592195][T17126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3075'. [ 355.608295][T17126] netlink: 'syz.1.3075': attribute type 7 has an invalid length. [ 355.658682][T17131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3075'. [ 355.749525][T17138] xt_l2tp: wrong L2TP version: 0 [ 355.780212][T17126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3075'. [ 355.790632][T17131] bridge_slave_1: left allmulticast mode [ 355.811740][T17126] netlink: 'syz.1.3075': attribute type 7 has an invalid length. [ 355.835322][T17131] bridge_slave_1: left promiscuous mode [ 355.886506][T17131] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.942385][T17131] bridge_slave_0: left allmulticast mode [ 355.959518][T17131] bridge_slave_0: left promiscuous mode [ 355.976829][T17131] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.152940][T17150] netlink: 'syz.0.3082': attribute type 1 has an invalid length. [ 356.173408][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 356.181449][ C1] lec:lec_tx_timeout: lec0 [ 356.186783][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 356.272222][T17158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.284747][T17150] 8021q: adding VLAN 0 to HW filter on device bond10 [ 356.416091][T17162] syzkaller0: entered promiscuous mode [ 356.421625][T17162] syzkaller0: entered allmulticast mode [ 356.445058][T17170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3086'. [ 356.497007][ T5834] Bluetooth: hci1: command tx timeout [ 356.506444][T17178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3086'. [ 356.508462][T17170] bridge0: entered promiscuous mode [ 356.521230][T17170] macsec2: entered promiscuous mode [ 356.527661][T17170] macsec2: entered allmulticast mode [ 356.532969][T17170] bridge0: entered allmulticast mode [ 356.539068][T17170] bridge0: port 1(macsec2) entered blocking state [ 356.546090][T17170] bridge0: port 1(macsec2) entered disabled state [ 356.561452][T17170] bridge0: left allmulticast mode [ 356.568207][T17170] bridge0: left promiscuous mode [ 356.612206][T17060] chnl_net:caif_netlink_parms(): no params data found [ 356.634913][T17162] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 356.653909][T17178] bridge0: entered promiscuous mode [ 356.661402][T17178] macsec2: entered promiscuous mode [ 356.667037][T17178] macsec2: entered allmulticast mode [ 356.672423][T17178] bridge0: entered allmulticast mode [ 356.679252][T17178] bridge0: port 1(macsec2) entered blocking state [ 356.686226][T17178] bridge0: port 1(macsec2) entered disabled state [ 356.696422][T17178] bridge0: left allmulticast mode [ 356.701655][T17178] bridge0: left promiscuous mode [ 356.918156][T17192] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3089'. [ 357.083001][T17060] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.110575][T17060] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.138761][T17060] bridge_slave_0: entered allmulticast mode [ 357.159267][T17060] bridge_slave_0: entered promiscuous mode [ 357.191152][T17208] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3090'. [ 357.216037][T17060] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.231933][T17060] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.240922][T17211] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 357.250040][T17060] bridge_slave_1: entered allmulticast mode [ 357.258154][T17060] bridge_slave_1: entered promiscuous mode [ 357.439257][T17060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.502533][T17060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.595813][T17060] team0: Port device team_slave_0 added [ 357.617360][T17060] team0: Port device team_slave_1 added [ 357.770661][T17060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.779567][T17239] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3096'. [ 357.803982][T17060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.830252][T17239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3096'. [ 357.856574][T17060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.870380][T17060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.877480][T17060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.903599][ T5196] udevd[5196]: worker [13393] /devices/virtual/block/nbd0 is taking a long time [ 357.976574][T17060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.159149][T17060] hsr_slave_0: entered promiscuous mode [ 358.170437][T17060] hsr_slave_1: entered promiscuous mode [ 358.207730][T17060] debugfs: 'hsr0' already exists in 'hsr' [ 358.226352][T17060] Cannot create hsr debugfs directory [ 358.535355][T17272] tipc: Enabled bearer , priority 0 [ 358.567997][T17275] openvswitch: netlink: Key type 31 is not supported [ 358.578588][T17277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3109'. [ 358.584437][ T5834] Bluetooth: hci1: command tx timeout [ 358.609590][T17272] tipc: Resetting bearer [ 358.697443][T17271] tipc: Disabling bearer [ 358.759954][T17060] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.801203][T17060] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.997806][T17060] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.031449][T17060] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.149516][T17060] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.172452][T17060] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.287463][T17060] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.325134][T17060] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.410490][T17330] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 359.568346][T17340] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 359.705118][T17346] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 359.775633][T17355] netlink: 'syz.2.3126': attribute type 1 has an invalid length. [ 359.841240][T17355] bond7: entered promiscuous mode [ 359.851100][T17355] 8021q: adding VLAN 0 to HW filter on device bond7 [ 359.858915][T17349] tipc: Enabled bearer , priority 0 [ 359.926836][T17356] bond7: (slave bridge0): making interface the new active one [ 359.938075][T17356] bridge0: entered promiscuous mode [ 359.964881][T17356] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 359.980591][T17349] tipc: Resetting bearer [ 360.007430][T17348] tipc: Disabling bearer [ 360.027706][T17060] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 360.085666][T17060] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 360.099414][T17060] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 360.121475][T17060] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 360.439717][T17060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.655421][ T5834] Bluetooth: hci1: command tx timeout [ 360.662793][T17060] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.679445][ T9246] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.686644][ T9246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.077858][T17387] netlink: 'syz.2.3133': attribute type 10 has an invalid length. [ 361.936994][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 361.945045][ C1] lec:lec_tx_timeout: lec0 [ 361.949790][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 362.236465][ T7008] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.243670][ T7008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.351644][T17430] netlink: 'syz.3.3142': attribute type 1 has an invalid length. [ 362.372990][T17060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 362.431009][T17430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 362.529938][T17430] bond1: (slave veth3): Enslaving as an active interface with a down link [ 362.630828][T17443] bond1: (slave veth0_to_bond): making interface the new active one [ 362.685028][T17443] veth0_to_bond: entered promiscuous mode [ 362.701327][T17443] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 362.734898][ T5834] Bluetooth: hci1: command tx timeout [ 362.839948][T17463] __nla_validate_parse: 5 callbacks suppressed [ 362.839963][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3147'. [ 362.852714][T17449] bond1: (slave veth5): Enslaving as an active interface with a down link [ 362.855765][T17463] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 362.879305][T17449] netlink: 'syz.3.3142': attribute type 1 has an invalid length. [ 362.899399][T17449] netlink: 'syz.3.3142': attribute type 2 has an invalid length. [ 362.923725][T17463] sit0: entered promiscuous mode [ 362.936187][T17463] netlink: 'syz.2.3147': attribute type 1 has an invalid length. [ 362.986592][T17463] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3147'. [ 363.055441][T17471] veth0: entered promiscuous mode [ 363.086176][T17060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.099009][T17471] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3148'. [ 363.194779][T17471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3148'. [ 363.212330][T17471] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3148'. [ 363.253514][T17471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3148'. [ 363.312477][T17469] veth0: left promiscuous mode [ 363.439965][T17492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3153'. [ 363.467048][T17492] netlink: 'syz.0.3153': attribute type 2 has an invalid length. [ 363.521683][T17501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3155'. [ 363.812107][T17524] netlink: 'syz.1.3158': attribute type 9 has an invalid length. [ 363.859994][T17521] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3159'. [ 363.870512][T17524] netlink: 'syz.1.3158': attribute type 11 has an invalid length. [ 363.891948][T17524] netlink: 'syz.1.3158': attribute type 12 has an invalid length. [ 363.913741][T17524] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.3158'. [ 363.981918][T17060] veth0_vlan: entered promiscuous mode [ 364.076092][T17060] veth1_vlan: entered promiscuous mode [ 364.154709][T17060] veth0_macvtap: entered promiscuous mode [ 364.186939][T17060] veth1_macvtap: entered promiscuous mode [ 364.255773][T17060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.286233][T17060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.324480][ T3430] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.333315][ T3430] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.352111][ T3430] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.429615][ T3430] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.660088][ T9248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.713797][ T9248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.812321][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.832544][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.504227][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.514608][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.522291][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.531135][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.541161][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.559831][T17595] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 366.051711][ T5824] syz_tun (unregistering): left allmulticast mode [ 366.061785][ T916] IPVS: starting estimator thread 0... [ 366.164766][T17631] IPVS: using max 31 ests per chain, 74400 per kthread [ 366.206590][T17639] tipc: Enabling of bearer rejected, failed to enable media [ 366.774767][T17669] ipt_ECN: cannot use operation on non-tcp rule [ 366.798758][T17669] ipt_ECN: cannot use operation on non-tcp rule [ 366.963865][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 366.971950][ C1] lec:lec_tx_timeout: lec0 [ 366.977430][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 367.050442][T17675] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.054732][T17687] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 367.059489][T17675] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.080907][T17685] validate_nla: 1 callbacks suppressed [ 367.080931][T17685] netlink: 'syz.1.3189': attribute type 30 has an invalid length. [ 367.299174][T17675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.320614][T17675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.534377][ T9248] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.544001][ T9248] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.620106][ T5834] Bluetooth: hci4: command tx timeout [ 367.629585][ T9248] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.644231][T17704] netlink: 'syz.2.3194': attribute type 9 has an invalid length. [ 367.665418][ T9248] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.689645][T17704] netlink: 'syz.2.3194': attribute type 11 has an invalid length. [ 367.702825][T17704] netlink: 'syz.2.3194': attribute type 12 has an invalid length. [ 367.856175][T17713] tipc: Enabling of bearer rejected, failed to enable media [ 367.968575][T17722] __nla_validate_parse: 11 callbacks suppressed [ 367.968594][T17722] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3197'. [ 367.998706][T17727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3198'. [ 368.112456][T17722] bond8: (slave sit0): Device is not bonding slave [ 368.122582][T17722] bond8: option active_slave: invalid value (sit0) [ 368.137754][T17722] bond8 (unregistering): Released all slaves [ 368.216397][T17736] 8021q: adding VLAN 0 to HW filter on device bond1 [ 368.246768][T17597] chnl_net:caif_netlink_parms(): no params data found [ 368.396889][T17748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3200'. [ 368.408776][T17748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3200'. [ 368.419125][T17744] tipc: Failed to remove unknown binding: 66,1,1/0:3065814339/3065814341 [ 368.609359][T17760] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3205'. [ 368.674522][T17597] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.681898][T17597] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.689942][T17597] bridge_slave_0: entered allmulticast mode [ 368.698100][T17597] bridge_slave_0: entered promiscuous mode [ 368.761874][T17597] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.779626][T17597] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.810060][T17597] bridge_slave_1: entered allmulticast mode [ 368.828664][T17597] bridge_slave_1: entered promiscuous mode [ 368.929152][T17597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.957366][T17597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.100660][T17597] team0: Port device team_slave_0 added [ 369.125981][T17597] team0: Port device team_slave_1 added [ 369.207825][T17788] tipc: Enabling of bearer rejected, failed to enable media [ 369.232104][T17792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3212'. [ 369.253101][T17597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.260972][T17792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3212'. [ 369.280237][T17597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.337379][T17597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.382169][T17802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3214'. [ 369.395303][T17597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.414754][T17597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.458352][T17597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.641800][T17597] hsr_slave_0: entered promiscuous mode [ 369.684689][T17597] hsr_slave_1: entered promiscuous mode [ 369.690967][T17597] debugfs: 'hsr0' already exists in 'hsr' [ 369.698081][ T5834] Bluetooth: hci4: command tx timeout [ 369.704787][T17597] Cannot create hsr debugfs directory [ 369.771141][T17817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3216'. [ 369.852385][T17820] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3216'. [ 369.938059][T17820] netlink: 'syz.4.3216': attribute type 8 has an invalid length. [ 369.981521][T17820] bridge0: entered promiscuous mode [ 370.000908][T17820] bridge0: left promiscuous mode [ 370.192723][ T3430] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.217181][T17838] Cannot find add_set index 0 as target [ 370.259943][T17838] veth3: entered promiscuous mode [ 370.268458][T17838] veth3: entered allmulticast mode [ 370.282296][ T3430] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.304524][ T3430] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.349281][T17597] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.421336][ T3430] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.499494][T17838] veth5: entered promiscuous mode [ 370.526469][T17838] veth5: entered allmulticast mode [ 370.613109][T17597] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.676157][T17861] tipc: Enabling of bearer rejected, failed to enable media [ 370.797659][T17597] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.977996][T17886] netlink: 'syz.4.3232': attribute type 1 has an invalid length. [ 371.037007][T17597] bond0: (slave netdevsim0): Releasing backup interface [ 371.081227][T17597] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.397327][T17597] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 371.430480][T17597] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 371.456634][T17597] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 371.518879][T17597] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 371.578760][T17918] FAULT_INJECTION: forcing a failure. [ 371.578760][T17918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.591121][T17914] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 371.606964][T17914] bond2 (unregistering): Released all slaves [ 371.630774][T17918] CPU: 1 UID: 0 PID: 17918 Comm: syz.3.3239 Not tainted syzkaller #0 PREEMPT(full) [ 371.630815][T17918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 371.630840][T17918] Call Trace: [ 371.630849][T17918] [ 371.630857][T17918] dump_stack_lvl+0xe8/0x150 [ 371.630890][T17918] should_fail_ex+0x412/0x560 [ 371.630926][T17918] _copy_from_user+0x2d/0xb0 [ 371.630958][T17918] kstrtouint_from_user+0xd6/0x180 [ 371.631005][T17918] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 371.631050][T17918] proc_fail_nth_write+0x8e/0x210 [ 371.631089][T17918] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 371.631126][T17918] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 371.631157][T17918] vfs_write+0x29a/0xb90 [ 371.631197][T17918] ? __pfx_vfs_write+0x10/0x10 [ 371.631229][T17918] ? __fget_files+0x2a/0x420 [ 371.631256][T17918] ? __fget_files+0x3a0/0x420 [ 371.631277][T17918] ? __fget_files+0x2a/0x420 [ 371.631309][T17918] ksys_write+0x150/0x270 [ 371.631340][T17918] ? __pfx_ksys_write+0x10/0x10 [ 371.631383][T17918] do_syscall_64+0xe2/0xf80 [ 371.631405][T17918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.631424][T17918] ? trace_irq_disable+0x37/0x100 [ 371.631444][T17918] ? clear_bhb_loop+0x60/0xb0 [ 371.631469][T17918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.631494][T17918] RIP: 0033:0x7ffb71b5b78e [ 371.631513][T17918] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 371.631530][T17918] RSP: 002b:00007ffb72a08fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 371.631553][T17918] RAX: ffffffffffffffda RBX: 00007ffb72a096c0 RCX: 00007ffb71b5b78e [ 371.631568][T17918] RDX: 0000000000000001 RSI: 00007ffb72a090a0 RDI: 0000000000000005 [ 371.631580][T17918] RBP: 00007ffb72a09090 R08: 0000000000000000 R09: 0000000000000000 [ 371.631591][T17918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.631603][T17918] R13: 00007ffb71e16038 R14: 00007ffb71e15fa0 R15: 00007fff3a2da928 [ 371.631639][T17918] [ 371.881590][ T797] IPVS: starting estimator thread 0... [ 371.882293][ T5834] Bluetooth: hci4: command tx timeout [ 371.964758][T17935] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 371.984528][T17928] IPVS: using max 29 ests per chain, 69600 per kthread [ 371.993427][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 372.001471][ C1] lec:lec_tx_timeout: lec0 [ 372.006197][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 372.162892][T17945] tipc: Enabling of bearer rejected, failed to enable media [ 372.187939][T17597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.217379][T17597] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.230239][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.237428][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.303153][ T3430] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.310367][ T3430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.508646][T17597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 373.097689][T17597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.216422][T17597] veth0_vlan: entered promiscuous mode [ 373.239967][T17597] veth1_vlan: entered promiscuous mode [ 373.441883][T18007] netlink: 'syz.4.3254': attribute type 20 has an invalid length. [ 373.487750][T17597] veth0_macvtap: entered promiscuous mode [ 373.494277][T18007] __nla_validate_parse: 20 callbacks suppressed [ 373.494292][T18007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3254'. [ 373.539275][T17597] veth1_macvtap: entered promiscuous mode [ 373.594666][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.646620][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.664043][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.672936][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.754861][T18016] 8021q: adding VLAN 0 to HW filter on device bond2 [ 373.763220][T18023] netlink: 'syz.2.3259': attribute type 1 has an invalid length. [ 373.822296][T18018] bond3 (unregistering): Released all slaves [ 373.898185][T18023] bond8: entered promiscuous mode [ 373.912328][T18023] 8021q: adding VLAN 0 to HW filter on device bond8 [ 373.936950][ T5834] Bluetooth: hci4: command tx timeout [ 373.963052][T18027] bond8: (slave bridge5): making interface the new active one [ 373.970865][T18027] bridge5: entered promiscuous mode [ 373.977931][T18027] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 373.987960][T18028] tipc: Started in network mode [ 373.992892][T18028] tipc: Node identity a61bfc3097f2, cluster identity 4711 [ 374.001793][T18028] tipc: Enabled bearer , priority 0 [ 374.011312][T18021] syzkaller0: entered promiscuous mode [ 374.024360][T18021] syzkaller0: entered allmulticast mode [ 374.035217][T17597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.096894][T18021] tipc: Resetting bearer [ 374.119864][T17597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.162383][T18019] tipc: Resetting bearer [ 374.190723][T18019] tipc: Disabling bearer [ 374.209227][ T9246] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.273021][T18045] netlink: 'syz.3.3264': attribute type 10 has an invalid length. [ 374.326335][ T9246] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.339401][ T9246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.386537][T18045] veth0_vlan: left promiscuous mode [ 374.405965][T18045] veth0_vlan: entered promiscuous mode [ 374.422393][T18052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3267'. [ 374.442022][T18045] team0: Device veth0_vlan failed to register rx_handler [ 374.483746][ T9246] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.777477][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.801892][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.846663][T18067] netlink: 'syz.3.3270': attribute type 3 has an invalid length. [ 374.863753][T18067] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3270'. [ 374.873678][ T12] veth0_to_bond: left promiscuous mode [ 374.897868][ T9248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.913862][ T9248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.194048][T18092] bond1 (unregistering): Released all slaves [ 375.530805][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 375.541762][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 375.549832][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 375.560927][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 375.569733][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 376.172246][T18109] chnl_net:caif_netlink_parms(): no params data found [ 376.252845][T18109] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.260502][T18109] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.268027][T18109] bridge_slave_0: entered allmulticast mode [ 376.276101][T18109] bridge_slave_0: entered promiscuous mode [ 376.284358][T18109] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.291523][T18109] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.299358][T18109] bridge_slave_1: entered allmulticast mode [ 376.306861][T18109] bridge_slave_1: entered promiscuous mode [ 376.341598][T18109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.354652][T18109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.387171][T18109] team0: Port device team_slave_0 added [ 376.395388][T18109] team0: Port device team_slave_1 added [ 376.424460][T18109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.431416][T18109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.457844][T18109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.470023][T18109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.477502][T18109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.504085][T18109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.550725][T18109] hsr_slave_0: entered promiscuous mode [ 376.557486][T18109] hsr_slave_1: entered promiscuous mode [ 376.564048][T18109] debugfs: 'hsr0' already exists in 'hsr' [ 376.569829][T18109] Cannot create hsr debugfs directory [ 376.692232][T18109] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.777099][T18109] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.846842][T18109] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.908389][T18109] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.013434][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 377.021475][ C1] lec:lec_tx_timeout: lec0 [ 377.026909][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 377.613480][ T5834] Bluetooth: hci0: command tx timeout [ 379.693797][ T5834] Bluetooth: hci0: command tx timeout [ 381.136084][ T56] block nbd0: Possible stuck request ffff888024a98000: control (read@0,1024B). Runtime 90 seconds [ 381.146800][ T56] block nbd0: Possible stuck request ffff888024a98200: control (read@1024,1024B). Runtime 90 seconds [ 381.157906][ T56] block nbd0: Possible stuck request ffff888024a98400: control (read@2048,1024B). Runtime 90 seconds [ 381.169408][ T56] block nbd0: Possible stuck request ffff888024a98600: control (read@3072,1024B). Runtime 90 seconds [ 381.777094][ T5834] Bluetooth: hci0: command tx timeout [ 382.033674][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 382.041694][ C1] lec:lec_tx_timeout: lec0 [ 382.046451][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 383.853902][ T5834] Bluetooth: hci0: command tx timeout [ 388.173423][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6130 ms [ 388.181468][ C1] lec:lec_tx_timeout: lec0 [ 388.186593][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 390.822604][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 390.831722][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 390.840194][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 390.849064][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 390.858695][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 390.934339][ T5827] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 390.943840][ T5827] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 390.954064][ T5827] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 390.963261][ T5827] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 390.971867][ T5827] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 390.994212][ T5834] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 391.002626][ T5834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 391.011591][ T5834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 391.019953][ T5834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 391.027645][ T5834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 391.104916][ T5827] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 391.123906][ T5827] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 391.134323][ T5827] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 391.154139][ T5827] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 391.162181][ T5827] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 391.734407][T18133] chnl_net:caif_netlink_parms(): no params data found [ 391.965462][T18133] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.972633][T18133] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.981295][T18133] bridge_slave_0: entered allmulticast mode [ 391.989882][T18133] bridge_slave_0: entered promiscuous mode [ 392.026560][T18133] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.043559][T18133] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.050768][T18133] bridge_slave_1: entered allmulticast mode [ 392.065299][T18133] bridge_slave_1: entered promiscuous mode [ 392.133070][T18133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.183547][T18133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.277533][T18135] chnl_net:caif_netlink_parms(): no params data found [ 392.302221][T18133] team0: Port device team_slave_0 added [ 392.334635][T18133] team0: Port device team_slave_1 added [ 392.416355][T18133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.423850][T18133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.450206][T18133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.480722][T18133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.488161][T18133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.516181][T18133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.553347][T18135] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.560596][T18135] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.568129][T18135] bridge_slave_0: entered allmulticast mode [ 392.575531][T18135] bridge_slave_0: entered promiscuous mode [ 392.583448][T18135] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.590569][T18135] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.598933][T18135] bridge_slave_1: entered allmulticast mode [ 392.606294][T18135] bridge_slave_1: entered promiscuous mode [ 392.645729][T18133] hsr_slave_0: entered promiscuous mode [ 392.652186][T18133] hsr_slave_1: entered promiscuous mode [ 392.659540][T18133] debugfs: 'hsr0' already exists in 'hsr' [ 392.667228][T18133] Cannot create hsr debugfs directory [ 392.694610][T18135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.712751][T18135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.779682][T18135] team0: Port device team_slave_0 added [ 392.804101][T18135] team0: Port device team_slave_1 added [ 392.887934][T18135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.896501][T18135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.923789][ T5827] Bluetooth: hci3: command tx timeout [ 392.930338][T18135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.966382][T18135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.974423][T18135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.000903][T18135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.053612][ T5827] Bluetooth: hci7: command tx timeout [ 393.059435][ T5827] Bluetooth: hci6: command tx timeout [ 393.072443][T18137] chnl_net:caif_netlink_parms(): no params data found [ 393.164768][T18135] hsr_slave_0: entered promiscuous mode [ 393.171391][T18135] hsr_slave_1: entered promiscuous mode [ 393.177914][T18135] debugfs: 'hsr0' already exists in 'hsr' [ 393.184129][T18135] Cannot create hsr debugfs directory [ 393.223573][ T5827] Bluetooth: hci8: command tx timeout [ 393.231124][T18139] chnl_net:caif_netlink_parms(): no params data found [ 393.358263][T18137] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.367120][T18137] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.375051][T18137] bridge_slave_0: entered allmulticast mode [ 393.382265][T18137] bridge_slave_0: entered promiscuous mode [ 393.412656][T18137] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.420813][T18137] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.428453][T18137] bridge_slave_1: entered allmulticast mode [ 393.435699][T18137] bridge_slave_1: entered promiscuous mode [ 393.507102][T18137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.530010][T18139] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.537280][T18139] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.544951][T18139] bridge_slave_0: entered allmulticast mode [ 393.552112][T18139] bridge_slave_0: entered promiscuous mode [ 393.562775][T18137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.586611][T18139] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.593835][T18139] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.600959][T18139] bridge_slave_1: entered allmulticast mode [ 393.608388][T18139] bridge_slave_1: entered promiscuous mode [ 393.659523][T18137] team0: Port device team_slave_0 added [ 393.683101][T18137] team0: Port device team_slave_1 added [ 393.699039][T18139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.712977][T18139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.779496][T18137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.786783][T18137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.813195][T18137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.837232][T18139] team0: Port device team_slave_0 added [ 393.844052][T18137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.851006][T18137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.877857][T18137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.897751][T18139] team0: Port device team_slave_1 added [ 393.933414][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 393.941422][ C1] lec:lec_tx_timeout: lec0 [ 393.951222][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 394.013280][T18139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.021320][T18139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.050496][T18139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.066051][T18139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.073006][T18139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.100760][T18139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.127537][T18137] hsr_slave_0: entered promiscuous mode [ 394.144187][T18137] hsr_slave_1: entered promiscuous mode [ 394.150304][T18137] debugfs: 'hsr0' already exists in 'hsr' [ 394.163457][T18137] Cannot create hsr debugfs directory [ 394.312061][T18139] hsr_slave_0: entered promiscuous mode [ 394.320333][T18139] hsr_slave_1: entered promiscuous mode [ 394.327571][T18139] debugfs: 'hsr0' already exists in 'hsr' [ 394.333324][T18139] Cannot create hsr debugfs directory [ 394.973921][ T5827] Bluetooth: hci3: command tx timeout [ 395.133532][ T5834] Bluetooth: hci6: command tx timeout [ 395.139094][ T5827] Bluetooth: hci7: command tx timeout [ 395.293838][ T5827] Bluetooth: hci8: command tx timeout [ 397.053803][ T5827] Bluetooth: hci3: command tx timeout [ 397.213561][ T5834] Bluetooth: hci6: command tx timeout [ 397.219046][ T5827] Bluetooth: hci7: command tx timeout [ 397.374109][ T5827] Bluetooth: hci8: command tx timeout [ 398.963490][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 398.971604][ C1] lec:lec_tx_timeout: lec0 [ 398.976395][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 399.133918][ T5827] Bluetooth: hci3: command tx timeout [ 399.293601][ T5827] Bluetooth: hci7: command tx timeout [ 399.293611][ T5834] Bluetooth: hci6: command tx timeout [ 399.453922][ T5834] Bluetooth: hci8: command tx timeout [ 403.983436][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 403.991506][ C1] lec:lec_tx_timeout: lec0 [ 403.996297][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 409.003699][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 409.011739][ C1] lec:lec_tx_timeout: lec0 [ 409.016392][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 411.214640][ T56] block nbd0: Possible stuck request ffff888024a98000: control (read@0,1024B). Runtime 120 seconds [ 411.225989][ T56] block nbd0: Possible stuck request ffff888024a98200: control (read@1024,1024B). Runtime 120 seconds [ 411.237519][ T56] block nbd0: Possible stuck request ffff888024a98400: control (read@2048,1024B). Runtime 120 seconds [ 411.248766][ T56] block nbd0: Possible stuck request ffff888024a98600: control (read@3072,1024B). Runtime 120 seconds [ 414.023538][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 414.031572][ C1] lec:lec_tx_timeout: lec0 [ 414.036415][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 419.853488][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 419.861539][ C1] lec:lec_tx_timeout: lec0 [ 419.866842][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 424.873424][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 424.881551][ C1] lec:lec_tx_timeout: lec0 [ 424.886439][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 429.903408][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 429.911477][ C1] lec:lec_tx_timeout: lec0 [ 429.916563][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 434.923450][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 434.931487][ C1] lec:lec_tx_timeout: lec0 [ 434.936106][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 436.076855][ T5827] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 436.085262][ T5827] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 436.092895][ T5827] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 436.102600][ T5827] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 436.110896][ T5827] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 436.487660][T18166] chnl_net:caif_netlink_parms(): no params data found [ 436.559416][T18166] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.566815][T18166] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.574754][T18166] bridge_slave_0: entered allmulticast mode [ 436.581917][T18166] bridge_slave_0: entered promiscuous mode [ 436.590814][T18166] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.598170][T18166] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.605945][T18166] bridge_slave_1: entered allmulticast mode [ 436.613142][T18166] bridge_slave_1: entered promiscuous mode [ 436.643956][T18166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.657628][T18166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.687665][T18166] team0: Port device team_slave_0 added [ 436.696010][T18166] team0: Port device team_slave_1 added [ 436.720621][T18166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.728094][T18166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.754770][T18166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.768240][T18166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.775378][T18166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.802018][T18166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.849997][T18166] hsr_slave_0: entered promiscuous mode [ 436.856886][T18166] hsr_slave_1: entered promiscuous mode [ 436.862986][T18166] debugfs: 'hsr0' already exists in 'hsr' [ 436.869030][T18166] Cannot create hsr debugfs directory [ 438.173513][ T5834] Bluetooth: hci9: command tx timeout [ 439.943388][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 439.951419][ C1] lec:lec_tx_timeout: lec0 [ 439.956454][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 440.253753][ T5834] Bluetooth: hci9: command tx timeout [ 441.295392][ T56] block nbd0: Possible stuck request ffff888024a98000: control (read@0,1024B). Runtime 150 seconds [ 441.306304][ T56] block nbd0: Possible stuck request ffff888024a98200: control (read@1024,1024B). Runtime 150 seconds [ 441.317722][ T56] block nbd0: Possible stuck request ffff888024a98400: control (read@2048,1024B). Runtime 150 seconds [ 441.328787][ T56] block nbd0: Possible stuck request ffff888024a98600: control (read@3072,1024B). Runtime 150 seconds [ 442.333814][ T5834] Bluetooth: hci9: command tx timeout [ 444.413490][ T5834] Bluetooth: hci9: command tx timeout [ 444.963475][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 444.971551][ C1] lec:lec_tx_timeout: lec0 [ 444.976553][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 449.983655][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 449.991713][ C1] lec:lec_tx_timeout: lec0 [ 449.996339][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 451.657058][ T5827] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 451.674719][ T5827] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 451.684680][ T5827] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 451.692846][ T5827] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 451.701858][ T5827] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 451.796383][ T5827] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 451.807408][ T5827] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 451.815713][ T5827] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 451.823812][ T5827] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 451.832044][ T5827] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 451.864425][ T5827] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 451.875985][ T5827] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 451.884483][ T5827] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 451.893295][ T5827] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 451.901765][ T5827] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 451.949403][ T5834] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 451.960074][ T5834] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 451.970332][ T5834] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 451.978614][ T5834] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 451.991388][ T5834] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 452.531516][T18178] chnl_net:caif_netlink_parms(): no params data found [ 452.861285][T18178] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.884286][T18178] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.891527][T18178] bridge_slave_0: entered allmulticast mode [ 452.900648][T18178] bridge_slave_0: entered promiscuous mode [ 452.926946][T18178] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.934770][T18178] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.942081][T18178] bridge_slave_1: entered allmulticast mode [ 452.951902][T18178] bridge_slave_1: entered promiscuous mode [ 453.030372][T18178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.044613][T18178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.160224][T18178] team0: Port device team_slave_0 added [ 453.177213][T18178] team0: Port device team_slave_1 added [ 453.241282][T18178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.248669][T18178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.275318][T18178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.286936][T18180] chnl_net:caif_netlink_parms(): no params data found [ 453.311497][T18178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.318712][T18178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.346546][T18178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.466543][T18178] hsr_slave_0: entered promiscuous mode [ 453.473284][T18178] hsr_slave_1: entered promiscuous mode [ 453.479885][T18178] debugfs: 'hsr0' already exists in 'hsr' [ 453.485853][T18178] Cannot create hsr debugfs directory [ 453.541319][T18180] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.549071][T18180] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.557034][T18180] bridge_slave_0: entered allmulticast mode [ 453.564757][T18180] bridge_slave_0: entered promiscuous mode [ 453.605532][T18180] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.612819][T18180] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.628659][T18180] bridge_slave_1: entered allmulticast mode [ 453.635934][T18180] bridge_slave_1: entered promiscuous mode [ 453.717724][T18180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.747424][T18180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.774880][ T5827] Bluetooth: hci10: command tx timeout [ 453.828870][T18182] chnl_net:caif_netlink_parms(): no params data found [ 453.855276][ T5827] Bluetooth: hci11: command tx timeout [ 453.862166][T18180] team0: Port device team_slave_0 added [ 453.877135][T18180] team0: Port device team_slave_1 added [ 453.897921][T18184] chnl_net:caif_netlink_parms(): no params data found [ 453.934213][ T5827] Bluetooth: hci12: command tx timeout [ 453.986501][T18180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.994055][T18180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.021554][T18180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.056383][T18180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.063728][T18180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.090672][T18180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.102578][ T5827] Bluetooth: hci13: command tx timeout [ 454.201610][T18180] hsr_slave_0: entered promiscuous mode [ 454.208389][T18180] hsr_slave_1: entered promiscuous mode [ 454.214917][T18180] debugfs: 'hsr0' already exists in 'hsr' [ 454.220655][T18180] Cannot create hsr debugfs directory [ 454.251313][T18182] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.259535][T18182] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.268010][T18182] bridge_slave_0: entered allmulticast mode [ 454.276048][T18182] bridge_slave_0: entered promiscuous mode [ 454.302337][T18182] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.309792][T18182] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.317361][T18182] bridge_slave_1: entered allmulticast mode [ 454.325185][T18182] bridge_slave_1: entered promiscuous mode [ 454.342615][T18184] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.350916][T18184] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.358290][T18184] bridge_slave_0: entered allmulticast mode [ 454.366077][T18184] bridge_slave_0: entered promiscuous mode [ 454.394846][T18184] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.401959][T18184] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.409349][T18184] bridge_slave_1: entered allmulticast mode [ 454.416759][T18184] bridge_slave_1: entered promiscuous mode [ 454.475573][T18182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.487556][T18182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.507116][T18184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.521408][T18184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.586052][T18184] team0: Port device team_slave_0 added [ 454.604722][T18182] team0: Port device team_slave_0 added [ 454.618907][T18184] team0: Port device team_slave_1 added [ 454.637733][T18182] team0: Port device team_slave_1 added [ 454.707699][T18184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.714836][T18184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.743034][T18184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.756898][T18184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.764338][T18184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.790586][T18184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.848099][T18182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.858327][T18182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.884835][T18182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.922184][T18182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.929201][T18182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.955662][T18182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.998719][T18184] hsr_slave_0: entered promiscuous mode [ 455.004348][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 455.004373][ C1] lec:lec_tx_timeout: lec0 [ 455.017925][T18184] hsr_slave_1: entered promiscuous mode [ 455.024635][T18184] debugfs: 'hsr0' already exists in 'hsr' [ 455.030377][T18184] Cannot create hsr debugfs directory [ 455.137320][T18182] hsr_slave_0: entered promiscuous mode [ 455.145591][T18182] hsr_slave_1: entered promiscuous mode [ 455.152288][T18182] debugfs: 'hsr0' already exists in 'hsr' [ 455.158635][T18182] Cannot create hsr debugfs directory [ 455.853646][ T5827] Bluetooth: hci10: command tx timeout [ 455.934947][ T5827] Bluetooth: hci11: command tx timeout [ 456.013992][ T5834] Bluetooth: hci12: command tx timeout [ 456.173698][ T5827] Bluetooth: hci13: command tx timeout [ 457.934062][ T5827] Bluetooth: hci10: command tx timeout [ 458.023685][ T5827] Bluetooth: hci11: command tx timeout [ 458.094063][ T5827] Bluetooth: hci12: command tx timeout [ 458.253939][ T5827] Bluetooth: hci13: command tx timeout [ 460.013566][ T5827] Bluetooth: hci10: command tx timeout [ 460.093987][ T5827] Bluetooth: hci11: command tx timeout [ 460.173494][ T5827] Bluetooth: hci12: command tx timeout [ 460.333877][ T5827] Bluetooth: hci13: command tx timeout [ 462.575082][ T5838] Bluetooth: hci5: command 0x041b tx timeout [ 462.581177][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 471.374775][ T56] block nbd0: Possible stuck request ffff888024a98000: control (read@0,1024B). Runtime 180 seconds [ 471.386095][ T56] block nbd0: Possible stuck request ffff888024a98200: control (read@1024,1024B). Runtime 180 seconds [ 471.397141][ T56] block nbd0: Possible stuck request ffff888024a98400: control (read@2048,1024B). Runtime 180 seconds [ 471.408370][ T56] block nbd0: Possible stuck request ffff888024a98600: control (read@3072,1024B). Runtime 180 seconds [ 471.616842][ T5196] udevd[5196]: worker [13393] /devices/virtual/block/nbd0 timeout; kill it [ 471.625687][ T5196] udevd[5196]: seq 17305 '/devices/virtual/block/nbd0' killed [ 477.939826][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 488.173988][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 496.101144][ T5834] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 496.109412][ T5834] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 496.117879][ T5834] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 496.128595][ T5834] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 496.136373][ T5834] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 496.524671][T18211] chnl_net:caif_netlink_parms(): no params data found [ 496.599160][T18211] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.606912][T18211] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.614205][T18211] bridge_slave_0: entered allmulticast mode [ 496.621469][T18211] bridge_slave_0: entered promiscuous mode [ 496.629429][T18211] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.637475][T18211] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.644661][T18211] bridge_slave_1: entered allmulticast mode [ 496.651844][T18211] bridge_slave_1: entered promiscuous mode [ 496.681212][T18211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.694468][T18211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.725366][T18211] team0: Port device team_slave_0 added [ 496.733427][T18211] team0: Port device team_slave_1 added [ 496.758909][T18211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.766240][T18211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.792436][T18211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.804821][T18211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.811761][T18211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.838716][T18211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.882111][T18211] hsr_slave_0: entered promiscuous mode [ 496.888660][T18211] hsr_slave_1: entered promiscuous mode [ 496.896749][T18211] debugfs: 'hsr0' already exists in 'hsr' [ 496.902493][T18211] Cannot create hsr debugfs directory [ 498.173556][ T5834] Bluetooth: hci14: command tx timeout [ 498.415038][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 500.253693][ T5827] Bluetooth: hci14: command tx timeout [ 501.460816][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 501.470836][ T56] block nbd0: Possible stuck request ffff888024a98000: control (read@0,1024B). Runtime 210 seconds [ 501.482045][ T56] block nbd0: Possible stuck request ffff888024a98200: control (read@1024,1024B). Runtime 210 seconds [ 501.493184][ T56] block nbd0: Possible stuck request ffff888024a98400: control (read@2048,1024B). Runtime 210 seconds [ 501.505733][ T56] block nbd0: Possible stuck request ffff888024a98600: control (read@3072,1024B). Runtime 210 seconds [ 502.333597][ T5827] Bluetooth: hci14: command tx timeout [ 504.413701][ T5827] Bluetooth: hci14: command tx timeout [ 506.813465][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 506.821498][ C1] lec:lec_tx_timeout: lec0 [ 512.269124][T18219] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 512.280282][T18219] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 512.288873][T18219] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 512.297028][T18219] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 512.306448][T18219] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 512.340389][T18220] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 512.350547][T18220] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 512.358838][T18220] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 512.374372][T18220] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 512.383034][T18220] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 512.443194][T18228] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 512.455219][T18228] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 512.464832][T18228] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 512.472584][T18228] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 512.480899][T18235] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 512.481962][T18228] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 512.500064][T18228] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 512.508630][T18235] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 512.510194][T18228] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 512.524707][T18220] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 513.058452][T18225] chnl_net:caif_netlink_parms(): no params data found [ 513.201682][T18225] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.211519][T18225] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.220109][T18225] bridge_slave_0: entered allmulticast mode [ 513.229662][T18225] bridge_slave_0: entered promiscuous mode [ 513.254869][T18225] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.264175][T18225] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.271430][T18225] bridge_slave_1: entered allmulticast mode [ 513.299696][T18225] bridge_slave_1: entered promiscuous mode [ 513.383729][T18225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.405257][T18225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.502296][T18225] team0: Port device team_slave_0 added [ 513.526348][T18225] team0: Port device team_slave_1 added [ 513.580224][T18225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.590447][T18225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.620346][T18225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.644732][T18225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.651805][T18225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.679032][T18225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.779775][T18220] Bluetooth: hci7: command 0x0406 tx timeout [ 513.786723][T18220] Bluetooth: hci6: command 0x0406 tx timeout [ 513.789608][T18219] Bluetooth: hci8: command 0x0406 tx timeout [ 513.792817][T18220] Bluetooth: hci3: command 0x0406 tx timeout [ 513.866640][T18225] hsr_slave_0: entered promiscuous mode [ 513.873754][T18225] hsr_slave_1: entered promiscuous mode [ 513.880280][T18225] debugfs: 'hsr0' already exists in 'hsr' [ 513.886628][T18225] Cannot create hsr debugfs directory [ 514.037040][T18226] chnl_net:caif_netlink_parms(): no params data found [ 514.299419][T18226] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.307481][T18226] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.315676][T18226] bridge_slave_0: entered allmulticast mode [ 514.322877][T18226] bridge_slave_0: entered promiscuous mode [ 514.330890][T18226] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.340727][ T5838] Bluetooth: hci15: command tx timeout [ 514.347320][T18226] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.355761][T18226] bridge_slave_1: entered allmulticast mode [ 514.363029][T18226] bridge_slave_1: entered promiscuous mode [ 514.370838][T18230] chnl_net:caif_netlink_parms(): no params data found [ 514.442612][T18226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.491847][T18226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.501118][ T5838] Bluetooth: hci16: command tx timeout [ 514.534562][T18231] chnl_net:caif_netlink_parms(): no params data found [ 514.583815][ T52] Bluetooth: hci18: command tx timeout [ 514.589854][ T5838] Bluetooth: hci17: command tx timeout [ 514.610030][T18226] team0: Port device team_slave_0 added [ 514.640036][T18226] team0: Port device team_slave_1 added [ 514.651904][T18230] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.661587][T18230] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.669213][T18230] bridge_slave_0: entered allmulticast mode [ 514.676589][T18230] bridge_slave_0: entered promiscuous mode [ 514.718521][T18230] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.725972][T18230] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.733126][T18230] bridge_slave_1: entered allmulticast mode [ 514.740762][T18230] bridge_slave_1: entered promiscuous mode [ 514.774172][T18226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.781123][T18226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.807766][T18226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.828388][T18230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.841115][T18230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.851347][T18226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.858774][T18226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.886585][T18226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.957122][T18230] team0: Port device team_slave_0 added [ 514.989909][T18231] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.997544][T18231] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.004887][T18231] bridge_slave_0: entered allmulticast mode [ 515.012083][T18231] bridge_slave_0: entered promiscuous mode [ 515.021656][T18230] team0: Port device team_slave_1 added [ 515.046596][T18231] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.054415][T18231] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.061760][T18231] bridge_slave_1: entered allmulticast mode [ 515.070366][T18231] bridge_slave_1: entered promiscuous mode [ 515.105128][T18226] hsr_slave_0: entered promiscuous mode [ 515.111641][T18226] hsr_slave_1: entered promiscuous mode [ 515.118032][T18226] debugfs: 'hsr0' already exists in 'hsr' [ 515.124234][T18226] Cannot create hsr debugfs directory [ 515.157786][T18230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.165109][T18230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.192387][T18230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.205522][T18230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.212474][T18230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.239258][T18230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.279057][T18231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.310991][T18231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.390930][T18230] hsr_slave_0: entered promiscuous mode [ 515.398019][T18230] hsr_slave_1: entered promiscuous mode [ 515.404770][T18230] debugfs: 'hsr0' already exists in 'hsr' [ 515.410516][T18230] Cannot create hsr debugfs directory [ 515.418535][T18231] team0: Port device team_slave_0 added [ 515.426774][T18231] team0: Port device team_slave_1 added [ 515.487991][T18231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.495550][T18231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.522304][T18231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.535726][T18231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.542706][T18231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.569609][T18231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.710555][T18231] hsr_slave_0: entered promiscuous mode [ 515.717834][T18231] hsr_slave_1: entered promiscuous mode [ 515.724337][T18231] debugfs: 'hsr0' already exists in 'hsr' [ 515.730081][T18231] Cannot create hsr debugfs directory [ 516.416468][ T5838] Bluetooth: hci15: command tx timeout [ 516.573773][ T5838] Bluetooth: hci16: command tx timeout [ 516.653557][ T5838] Bluetooth: hci17: command tx timeout [ 516.659085][ T5838] Bluetooth: hci18: command tx timeout [ 518.493662][ T5838] Bluetooth: hci15: command tx timeout [ 518.654006][ T5838] Bluetooth: hci16: command tx timeout [ 518.733984][ T52] Bluetooth: hci18: command tx timeout [ 518.734000][ T5838] Bluetooth: hci17: command tx timeout [ 520.575387][ T5838] Bluetooth: hci15: command tx timeout [ 520.733472][ T5838] Bluetooth: hci16: command tx timeout [ 520.813525][ T5838] Bluetooth: hci18: command tx timeout [ 520.824108][ T5838] Bluetooth: hci17: command tx timeout [ 522.576607][ T31] INFO: task dhcpcd:5490 blocked for more than 143 seconds. [ 522.584736][ T31] Not tainted syzkaller #0 [ 522.589674][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 522.598453][ T31] task:dhcpcd state:D stack:23864 pid:5490 tgid:5490 ppid:1 task_flags:0x400140 flags:0x00080000 [ 522.610551][ T31] Call Trace: [ 522.614184][ T31] [ 522.617117][ T31] __schedule+0x14ea/0x5050 [ 522.621641][ T31] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 522.627203][ T31] ? schedule+0x90/0x360 [ 522.631466][ T31] schedule+0x164/0x360 [ 522.635992][ T31] schedule_preempt_disabled+0x13/0x30 [ 522.642344][ T31] __mutex_lock+0x7fe/0x1300 [ 522.647999][ T31] ? __mutex_lock+0x5ac/0x1300 [ 522.652826][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 522.658172][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 522.663236][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 522.668542][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 522.674446][ T31] ? radix_tree_lookup+0x240/0x290 [ 522.679590][ T31] genl_rcv_msg+0x10b/0x7a0 [ 522.684461][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 522.689531][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 522.695659][ T31] netlink_rcv_skb+0x232/0x4b0 [ 522.700453][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 522.723909][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 522.729221][ T31] ? genl_rcv+0x19/0x40 [ 522.750255][ T31] ? down_read+0x272/0x2e0 [ 522.755192][ T31] ? genl_rcv+0xd/0x40 [ 522.759300][ T31] genl_rcv+0x28/0x40 [ 522.764018][ T31] netlink_unicast+0x80f/0x9b0 [ 522.768845][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 522.774518][ T31] ? __alloc_skb+0x193/0x390 [ 522.779137][ T31] ? netlink_sendmsg+0x650/0xb40 [ 522.792119][ T31] ? skb_put+0x11b/0x210 [ 522.796939][ T31] netlink_sendmsg+0x813/0xb40 [ 522.801745][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.808311][ T31] ? tomoyo_path_number_perm+0x501/0x630 [ 522.818040][ T31] ? security_file_ioctl+0xc3/0x2a0 [ 522.823263][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 522.828805][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 522.834689][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.840006][ T31] ____sys_sendmsg+0xa68/0xad0 [ 522.845171][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 522.851546][ T31] ? import_iovec+0x73/0xa0 [ 522.856701][ T31] ___sys_sendmsg+0x2a5/0x360 [ 522.861424][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 522.866698][ T31] ? __rtnl_unlock+0xc8/0xf0 [ 522.871401][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 522.876581][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 522.882075][ T31] ? __secure_computing+0xe1/0x2a0 [ 522.887557][ T31] do_syscall_64+0xe2/0xf80 [ 522.892065][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.898718][ T31] ? clear_bhb_loop+0x60/0xb0 [ 522.903473][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.909377][ T31] RIP: 0033:0x7f3687a2d407 [ 522.914208][ T31] RSP: 002b:00007ffe15b23b70 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 522.922640][ T31] RAX: ffffffffffffffda RBX: 00007f36879a3740 RCX: 00007f3687a2d407 [ 522.930759][ T31] RDX: 0000000000000000 RSI: 00007ffe15b23bf0 RDI: 000000000000000e [ 522.938914][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 522.947236][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d8f790be10 [ 522.956236][ T31] R13: 000000000000000e R14: 00007ffe15b2c150 R15: 000055d92b1c2420 [ 522.964376][ T31] [ 522.967505][ T31] INFO: task syz.3.3270:18067 blocked for more than 143 seconds. [ 522.975785][ T31] Not tainted syzkaller #0 [ 522.980741][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 522.989462][ T31] task:syz.3.3270 state:D stack:26200 pid:18067 tgid:18065 ppid:16511 task_flags:0x480140 flags:0x00080002 [ 523.001594][ T31] Call Trace: [ 523.005244][ T31] [ 523.008175][ T31] __schedule+0x14ea/0x5050 [ 523.012669][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 523.017791][ T31] ? __pfx___schedule+0x10/0x10 [ 523.022671][ T31] ? schedule+0x90/0x360 [ 523.026971][ T31] schedule+0x164/0x360 [ 523.031186][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 523.037192][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 523.043332][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 523.049672][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 523.056857][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 523.063056][ T31] nbd_set_size+0x516/0x6d0 [ 523.067850][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 523.072900][ T31] ? nla_memcpy+0x5b/0xc0 [ 523.077427][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 523.082777][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 523.088649][ T31] ? rcu_is_watching+0x15/0xb0 [ 523.093896][ T31] ? __nla_parse+0x40/0x60 [ 523.098361][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 523.104942][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 523.110522][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 523.116768][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 523.121737][ T31] genl_rcv_msg+0x61c/0x7a0 [ 523.126536][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 523.131596][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 523.137530][ T31] netlink_rcv_skb+0x232/0x4b0 [ 523.142323][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 523.147558][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 523.152866][ T31] ? genl_rcv+0x19/0x40 [ 523.158361][ T31] ? down_read+0x272/0x2e0 [ 523.162807][ T31] ? genl_rcv+0xd/0x40 [ 523.166962][ T31] genl_rcv+0x28/0x40 [ 523.170989][ T31] netlink_unicast+0x80f/0x9b0 [ 523.175969][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 523.181319][ T31] ? __alloc_skb+0x193/0x390 [ 523.186300][ T31] ? netlink_sendmsg+0x650/0xb40 [ 523.191263][ T31] ? skb_put+0x11b/0x210 [ 523.195690][ T31] netlink_sendmsg+0x813/0xb40 [ 523.200495][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.205846][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 523.210811][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 523.217034][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.222352][ T31] ____sys_sendmsg+0xa68/0xad0 [ 523.227226][ T31] ? __might_fault+0xaf/0x130 [ 523.231934][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 523.237377][ T31] ? import_iovec+0x73/0xa0 [ 523.241910][ T31] ___sys_sendmsg+0x2a5/0x360 [ 523.246874][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 523.251866][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 523.257295][ T31] ? futex_wait+0x29a/0x380 [ 523.262676][ T31] ? __fget_files+0x2a/0x420 [ 523.267366][ T31] ? __fget_files+0x3a0/0x420 [ 523.272096][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 523.277396][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 523.282867][ T31] ? rcu_is_watching+0x15/0xb0 [ 523.287744][ T31] do_syscall_64+0xe2/0xf80 [ 523.292279][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.303957][ T31] ? trace_irq_disable+0x37/0x100 [ 523.309036][ T31] ? clear_bhb_loop+0x60/0xb0 [ 523.313920][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.319862][ T31] RIP: 0033:0x7ffb71b9aeb9 [ 523.324362][ T31] RSP: 002b:00007ffb72a09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.332810][ T31] RAX: ffffffffffffffda RBX: 00007ffb71e15fa0 RCX: 00007ffb71b9aeb9 [ 523.341314][ T31] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000004 [ 523.349376][ T31] RBP: 00007ffb71c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 523.357526][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.366623][ T31] R13: 00007ffb71e16038 R14: 00007ffb71e15fa0 R15: 00007fff3a2da928 [ 523.375191][ T31] [ 523.378350][ T31] INFO: task syz.1.3271:18069 blocked for more than 144 seconds. [ 523.389635][ T31] Not tainted syzkaller #0 [ 523.397315][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 523.407270][ T31] task:syz.1.3271 state:D stack:26304 pid:18069 tgid:18066 ppid:16149 task_flags:0x400140 flags:0x00080002 [ 523.419316][ T31] Call Trace: [ 523.422618][ T31] [ 523.426210][ T31] __schedule+0x14ea/0x5050 [ 523.430751][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 523.436101][ T31] ? __pfx___schedule+0x10/0x10 [ 523.440977][ T31] ? schedule+0x90/0x360 [ 523.445559][ T31] schedule+0x164/0x360 [ 523.449728][ T31] schedule_preempt_disabled+0x13/0x30 [ 523.455742][ T31] __mutex_lock+0x7fe/0x1300 [ 523.460358][ T31] ? __mutex_lock+0x5ac/0x1300 [ 523.465703][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 523.470449][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 523.475608][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 523.480755][ T31] ? radix_tree_lookup+0x240/0x290 [ 523.486229][ T31] genl_rcv_msg+0x10b/0x7a0 [ 523.490747][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 523.496060][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 523.501066][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 523.506691][ T31] netlink_rcv_skb+0x232/0x4b0 [ 523.511476][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 523.517119][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 523.522429][ T31] ? genl_rcv+0x19/0x40 [ 523.526660][ T31] ? down_read+0x272/0x2e0 [ 523.531105][ T31] ? genl_rcv+0xd/0x40 [ 523.535507][ T31] genl_rcv+0x28/0x40 [ 523.539500][ T31] netlink_unicast+0x80f/0x9b0 [ 523.544672][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 523.550000][ T31] ? __alloc_skb+0x193/0x390 [ 523.554768][ T31] ? netlink_sendmsg+0x650/0xb40 [ 523.559832][ T31] ? skb_put+0x11b/0x210 [ 523.564263][ T31] netlink_sendmsg+0x813/0xb40 [ 523.569587][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.575345][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 523.580417][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 523.585765][ T31] __sys_sendto+0x709/0x7a0 [ 523.590289][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 523.595469][ T31] ? fd_install+0x94/0x3d0 [ 523.599904][ T31] ? fd_install+0x306/0x3d0 [ 523.604903][ T31] __x64_sys_sendto+0xde/0x100 [ 523.609699][ T31] do_syscall_64+0xe2/0xf80 [ 523.614384][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.620466][ T31] ? trace_irq_disable+0x37/0x100 [ 523.625665][ T31] ? clear_bhb_loop+0x60/0xb0 [ 523.630366][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.636623][ T31] RIP: 0033:0x7f2434d5b78e [ 523.641063][ T31] RSP: 002b:00007f2435c94e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 523.649643][ T31] RAX: ffffffffffffffda RBX: 00007f2435c966c0 RCX: 00007f2434d5b78e [ 523.657753][ T31] RDX: 0000000000000020 RSI: 00007f2435c95000 RDI: 0000000000000004 [ 523.666015][ T31] RBP: 0000000000000000 R08: 00007f2435c94f04 R09: 000000000000000c [ 523.674714][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 523.682720][ T31] R13: 00007f2435c94f58 R14: 00007f2435c95000 R15: 0000000000000000 [ 523.690808][ T31] [ 523.694387][ T31] INFO: task syz.1.3271:18079 blocked for more than 144 seconds. [ 523.702120][ T31] Not tainted syzkaller #0 [ 523.707113][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 523.716016][ T31] task:syz.1.3271 state:D stack:27840 pid:18079 tgid:18066 ppid:16149 task_flags:0x400040 flags:0x00080002 [ 523.728369][ T31] Call Trace: [ 523.731695][ T31] [ 523.734719][ T31] __schedule+0x14ea/0x5050 [ 523.739272][ T31] ? __pfx___schedule+0x10/0x10 [ 523.744228][ T31] ? schedule+0x90/0x360 [ 523.748504][ T31] schedule+0x164/0x360 [ 523.752700][ T31] schedule_preempt_disabled+0x13/0x30 [ 523.758459][ T31] __mutex_lock+0x7fe/0x1300 [ 523.763053][ T31] ? __mutex_lock+0x5ac/0x1300 [ 523.768034][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 523.773458][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 523.778532][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 523.784056][ T31] ? radix_tree_lookup+0x240/0x290 [ 523.789211][ T31] genl_rcv_msg+0x10b/0x7a0 [ 523.793802][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 523.798854][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 523.803876][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 523.809293][ T31] netlink_rcv_skb+0x232/0x4b0 [ 523.814376][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 523.819446][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 523.824969][ T31] ? genl_rcv+0x19/0x40 [ 523.829153][ T31] ? down_read+0x272/0x2e0 [ 523.833820][ T31] ? genl_rcv+0xd/0x40 [ 523.837937][ T31] genl_rcv+0x28/0x40 [ 523.841929][ T31] netlink_unicast+0x80f/0x9b0 [ 523.847064][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 523.852376][ T31] ? __alloc_skb+0x193/0x390 [ 523.857509][ T31] ? netlink_sendmsg+0x650/0xb40 [ 523.862472][ T31] ? skb_put+0x11b/0x210 [ 523.866916][ T31] netlink_sendmsg+0x813/0xb40 [ 523.871737][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.878729][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 523.883794][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 523.889210][ T31] __sys_sendto+0x709/0x7a0 [ 523.893789][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 523.898866][ T31] ? fd_install+0x94/0x3d0 [ 523.903282][ T31] ? fd_install+0x306/0x3d0 [ 523.908205][ T31] __x64_sys_sendto+0xde/0x100 [ 523.912980][ T31] do_syscall_64+0xe2/0xf80 [ 523.917574][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.923742][ T31] ? trace_irq_disable+0x37/0x100 [ 523.928789][ T31] ? clear_bhb_loop+0x60/0xb0 [ 523.934853][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.940789][ T31] RIP: 0033:0x7f2434d5b78e [ 523.945287][ T31] RSP: 002b:00007f2435c73e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 523.953830][ T31] RAX: ffffffffffffffda RBX: 00007f2435c756c0 RCX: 00007f2434d5b78e [ 523.961830][ T31] RDX: 0000000000000020 RSI: 00007f2435c74000 RDI: 0000000000000005 [ 523.970131][ T31] RBP: 0000000000000000 R08: 00007f2435c73f04 R09: 000000000000000c [ 523.978779][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 523.986980][ T31] R13: 00007f2435c73f58 R14: 00007f2435c74000 R15: 0000000000000000 [ 523.995361][ T31] [ 523.998437][ T31] INFO: task syz.1.3271:18080 blocked for more than 144 seconds. [ 524.006332][ T31] Not tainted syzkaller #0 [ 524.011293][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 524.020246][ T31] task:syz.1.3271 state:D stack:27840 pid:18080 tgid:18066 ppid:16149 task_flags:0x400140 flags:0x00080002 [ 524.032477][ T31] Call Trace: [ 524.035832][ T31] [ 524.038787][ T31] __schedule+0x14ea/0x5050 [ 524.043595][ T31] ? __pfx___schedule+0x10/0x10 [ 524.048491][ T31] ? schedule+0x90/0x360 [ 524.052748][ T31] schedule+0x164/0x360 [ 524.057242][ T31] schedule_preempt_disabled+0x13/0x30 [ 524.062723][ T31] __mutex_lock+0x7fe/0x1300 [ 524.067389][ T31] ? __mutex_lock+0x5ac/0x1300 [ 524.072180][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 524.076982][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 524.082645][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 524.088197][ T31] ? radix_tree_lookup+0x240/0x290 [ 524.093500][ T31] genl_rcv_msg+0x10b/0x7a0 [ 524.098045][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 524.103109][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 524.108177][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 524.113849][ T31] netlink_rcv_skb+0x232/0x4b0 [ 524.118641][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 524.123785][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 524.129101][ T31] ? genl_rcv+0x19/0x40 [ 524.133344][ T31] ? down_read+0x272/0x2e0 [ 524.137812][ T31] ? genl_rcv+0xd/0x40 [ 524.141955][ T31] genl_rcv+0x28/0x40 [ 524.146350][ T31] netlink_unicast+0x80f/0x9b0 [ 524.151165][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 524.157015][ T31] ? __alloc_skb+0x193/0x390 [ 524.161640][ T31] ? netlink_sendmsg+0x650/0xb40 [ 524.166975][ T31] ? skb_put+0x11b/0x210 [ 524.171268][ T31] netlink_sendmsg+0x813/0xb40 [ 524.176355][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.182963][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 524.188678][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 524.194280][ T31] __sys_sendto+0x709/0x7a0 [ 524.198813][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 524.204213][ T31] ? rcu_is_watching+0x15/0xb0 [ 524.209010][ T31] __x64_sys_sendto+0xde/0x100 [ 524.214712][ T31] do_syscall_64+0xe2/0xf80 [ 524.219260][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.225410][ T31] ? trace_irq_disable+0x37/0x100 [ 524.230459][ T31] ? clear_bhb_loop+0x60/0xb0 [ 524.235472][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.241376][ T31] RIP: 0033:0x7f2434d5b78e [ 524.245893][ T31] RSP: 002b:00007f2435c52e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 524.254994][ T31] RAX: ffffffffffffffda RBX: 00007f2435c546c0 RCX: 00007f2434d5b78e [ 524.263018][ T31] RDX: 0000000000000024 RSI: 00007f2435c53000 RDI: 0000000000000007 [ 524.271592][ T31] RBP: 0000000000000000 R08: 00007f2435c52f04 R09: 000000000000000c [ 524.279677][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 524.288260][ T31] R13: 00007f2435c52f58 R14: 00007f2435c53000 R15: 0000000000000000 [ 524.296699][ T31] [ 524.299821][ T31] INFO: task syz.0.3277:18108 blocked for more than 145 seconds. [ 524.307735][ T31] Not tainted syzkaller #0 [ 524.312694][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 524.321486][ T31] task:syz.0.3277 state:D stack:27840 pid:18108 tgid:18106 ppid:17597 task_flags:0x400040 flags:0x00080002 [ 524.334230][ T31] Call Trace: [ 524.337530][ T31] [ 524.340476][ T31] __schedule+0x14ea/0x5050 [ 524.345095][ T31] ? __pfx___schedule+0x10/0x10 [ 524.349976][ T31] ? schedule+0x90/0x360 [ 524.354311][ T31] schedule+0x164/0x360 [ 524.358484][ T31] schedule_preempt_disabled+0x13/0x30 [ 524.364253][ T31] __mutex_lock+0x7fe/0x1300 [ 524.368856][ T31] ? __mutex_lock+0x5ac/0x1300 [ 524.373879][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 524.378595][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 524.383740][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 524.389395][ T31] ? radix_tree_lookup+0x240/0x290 [ 524.394863][ T31] genl_rcv_msg+0x10b/0x7a0 [ 524.399391][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 524.404489][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 524.409466][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 524.415110][ T31] netlink_rcv_skb+0x232/0x4b0 [ 524.419903][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 524.425408][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 524.430717][ T31] ? genl_rcv+0x19/0x40 [ 524.434973][ T31] ? down_read+0x272/0x2e0 [ 524.439407][ T31] ? genl_rcv+0xd/0x40 [ 524.443609][ T31] genl_rcv+0x28/0x40 [ 524.447629][ T31] netlink_unicast+0x80f/0x9b0 [ 524.452450][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 524.458031][ T31] ? __alloc_skb+0x193/0x390 [ 524.462621][ T31] ? netlink_sendmsg+0x650/0xb40 [ 524.467654][ T31] ? skb_put+0x11b/0x210 [ 524.471927][ T31] netlink_sendmsg+0x813/0xb40 [ 524.476790][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.482106][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 524.487438][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 524.493100][ T31] __sys_sendto+0x709/0x7a0 [ 524.497878][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 524.502956][ T31] ? exc_page_fault+0x6a/0xc0 [ 524.507744][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 524.513084][ T31] __x64_sys_sendto+0xde/0x100 [ 524.518162][ T31] do_syscall_64+0xe2/0xf80 [ 524.522705][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.528924][ T31] ? trace_irq_disable+0x37/0x100 [ 524.534057][ T31] ? clear_bhb_loop+0x60/0xb0 [ 524.538763][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.544981][ T31] RIP: 0033:0x7f7876b5b78e [ 524.549414][ T31] RSP: 002b:00007f78779d6e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 524.557925][ T31] RAX: ffffffffffffffda RBX: 00007f78779d86c0 RCX: 00007f7876b5b78e [ 524.565981][ T31] RDX: 0000000000000020 RSI: 00007f78779d7000 RDI: 0000000000000003 [ 524.574438][ T31] RBP: 0000000000000000 R08: 00007f78779d6f04 R09: 000000000000000c [ 524.582424][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 524.590470][ T31] R13: 00007f78779d6f58 R14: 00007f78779d7000 R15: 0000000000000000 [ 524.599093][ T31] [ 524.602181][ T31] INFO: task syz-executor:18109 blocked for more than 145 seconds. [ 524.610758][ T31] Not tainted syzkaller #0 [ 524.615763][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 524.624480][ T31] task:syz-executor state:D stack:22832 pid:18109 tgid:18109 ppid:1 task_flags:0x400140 flags:0x00080002 [ 524.636717][ T31] Call Trace: [ 524.639995][ T31] [ 524.642931][ T31] __schedule+0x14ea/0x5050 [ 524.647538][ T31] ? __pfx___schedule+0x10/0x10 [ 524.652428][ T31] ? schedule+0x90/0x360 [ 524.657067][ T31] schedule+0x164/0x360 [ 524.661270][ T31] schedule_preempt_disabled+0x13/0x30 [ 524.667048][ T31] __mutex_lock+0x7fe/0x1300 [ 524.671670][ T31] ? __mutex_lock+0x5ac/0x1300 [ 524.676608][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 524.681312][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 524.686411][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 524.691379][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 524.697583][ T31] ? radix_tree_lookup+0x240/0x290 [ 524.702727][ T31] genl_rcv_msg+0x10b/0x7a0 [ 524.707475][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 524.712499][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 524.717542][ T31] netlink_rcv_skb+0x232/0x4b0 [ 524.722322][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 524.727762][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 524.733049][ T31] ? genl_rcv+0x19/0x40 [ 524.737605][ T31] ? down_read+0x272/0x2e0 [ 524.742047][ T31] ? genl_rcv+0xd/0x40 [ 524.746237][ T31] genl_rcv+0x28/0x40 [ 524.750240][ T31] netlink_unicast+0x80f/0x9b0 [ 524.755231][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 524.760517][ T31] ? __alloc_skb+0x193/0x390 [ 524.765164][ T31] ? netlink_sendmsg+0x650/0xb40 [ 524.770109][ T31] ? skb_put+0x11b/0x210 [ 524.774436][ T31] netlink_sendmsg+0x813/0xb40 [ 524.779220][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 524.784792][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 524.789767][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 524.795179][ T31] __sys_sendto+0x709/0x7a0 [ 524.800217][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 524.805385][ T31] ? fd_install+0x94/0x3d0 [ 524.809829][ T31] ? fd_install+0x306/0x3d0 [ 524.815085][ T31] __x64_sys_sendto+0xde/0x100 [ 524.819878][ T31] do_syscall_64+0xe2/0xf80 [ 524.824448][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.830526][ T31] ? trace_irq_disable+0x37/0x100 [ 524.835786][ T31] ? clear_bhb_loop+0x60/0xb0 [ 524.840474][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.846695][ T31] RIP: 0033:0x7f0725b5b78e [ 524.851125][ T31] RSP: 002b:00007ffefc78dd98 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 524.859682][ T31] RAX: ffffffffffffffda RBX: 000055558ad28500 RCX: 00007f0725b5b78e [ 524.867732][ T31] RDX: 0000000000000020 RSI: 00007f0726944670 RDI: 0000000000000005 [ 524.876007][ T31] RBP: 0000000000000001 R08: 00007ffefc78de14 R09: 000000000000000c [ 524.884040][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 524.892026][ T31] R13: 00007ffefc78de68 R14: 00007f0726944670 R15: 0000000000000000 [ 524.900802][ T31] [ 524.904145][ T31] INFO: task syz.4.3278:18116 blocked for more than 145 seconds. [ 524.911879][ T31] Not tainted syzkaller #0 [ 524.918297][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 524.927660][ T31] task:syz.4.3278 state:D stack:25528 pid:18116 tgid:18115 ppid:17060 task_flags:0x400140 flags:0x00080002 [ 524.939906][ T31] Call Trace: [ 524.943224][ T31] [ 524.946345][ T31] __schedule+0x14ea/0x5050 [ 524.950987][ T31] ? __pfx___schedule+0x10/0x10 [ 524.956236][ T31] ? schedule+0x90/0x360 [ 524.960484][ T31] schedule+0x164/0x360 [ 524.964950][ T31] schedule_preempt_disabled+0x13/0x30 [ 524.970441][ T31] __mutex_lock+0x7fe/0x1300 [ 524.975744][ T31] ? __mutex_lock+0x5ac/0x1300 [ 524.980553][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 524.985468][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 524.990498][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 524.995668][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 525.002101][ T31] ? radix_tree_lookup+0x240/0x290 [ 525.007351][ T31] genl_rcv_msg+0x10b/0x7a0 [ 525.011897][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.017514][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 525.022492][ T31] netlink_rcv_skb+0x232/0x4b0 [ 525.027390][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.032449][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 525.038013][ T31] ? genl_rcv+0x19/0x40 [ 525.042245][ T31] ? down_read+0x272/0x2e0 [ 525.046975][ T31] ? genl_rcv+0xd/0x40 [ 525.051095][ T31] genl_rcv+0x28/0x40 [ 525.055555][ T31] netlink_unicast+0x80f/0x9b0 [ 525.060377][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 525.065756][ T31] ? __alloc_skb+0x193/0x390 [ 525.070359][ T31] ? netlink_sendmsg+0x650/0xb40 [ 525.075690][ T31] ? skb_put+0x11b/0x210 [ 525.079938][ T31] netlink_sendmsg+0x813/0xb40 [ 525.084770][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.090072][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 525.095217][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 525.100520][ T31] __sys_sendto+0x709/0x7a0 [ 525.106186][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 525.111264][ T31] ? exc_page_fault+0x6a/0xc0 [ 525.116125][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 525.121443][ T31] __x64_sys_sendto+0xde/0x100 [ 525.126355][ T31] do_syscall_64+0xe2/0xf80 [ 525.130891][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.137681][ T31] ? trace_irq_disable+0x37/0x100 [ 525.142735][ T31] ? clear_bhb_loop+0x60/0xb0 [ 525.147684][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.153745][ T31] RIP: 0033:0x7feee135b78e [ 525.158186][ T31] RSP: 002b:00007feee21d1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 525.166991][ T31] RAX: ffffffffffffffda RBX: 00007feee21d36c0 RCX: 00007feee135b78e [ 525.175123][ T31] RDX: 0000000000000024 RSI: 00007feee21d2000 RDI: 0000000000000008 [ 525.183110][ T31] RBP: 0000000000000000 R08: 00007feee21d1f04 R09: 000000000000000c [ 525.191315][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 525.199594][ T31] R13: 00007feee21d1f58 R14: 00007feee21d2000 R15: 0000000000000000 [ 525.208635][ T31] [ 525.211684][ T31] INFO: task syz.4.3278:18120 blocked for more than 145 seconds. [ 525.219603][ T31] Not tainted syzkaller #0 [ 525.224808][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 525.233617][ T31] task:syz.4.3278 state:D stack:24536 pid:18120 tgid:18115 ppid:17060 task_flags:0x400140 flags:0x00080002 [ 525.245603][ T31] Call Trace: [ 525.248876][ T31] [ 525.251810][ T31] __schedule+0x14ea/0x5050 [ 525.256779][ T31] ? __pfx___schedule+0x10/0x10 [ 525.261642][ T31] ? schedule+0x90/0x360 [ 525.265992][ T31] schedule+0x164/0x360 [ 525.270164][ T31] schedule_preempt_disabled+0x13/0x30 [ 525.275780][ T31] __mutex_lock+0x7fe/0x1300 [ 525.280388][ T31] ? __mutex_lock+0x5ac/0x1300 [ 525.285474][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 525.290173][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 525.295580][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 525.300565][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 525.306129][ T31] ? radix_tree_lookup+0x240/0x290 [ 525.312275][ T31] genl_rcv_msg+0x10b/0x7a0 [ 525.317185][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.322215][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 525.327295][ T31] netlink_rcv_skb+0x232/0x4b0 [ 525.332086][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.337299][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 525.342609][ T31] ? genl_rcv+0x19/0x40 [ 525.347123][ T31] ? down_read+0x272/0x2e0 [ 525.351551][ T31] ? genl_rcv+0xd/0x40 [ 525.355799][ T31] genl_rcv+0x28/0x40 [ 525.359811][ T31] netlink_unicast+0x80f/0x9b0 [ 525.364701][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 525.370013][ T31] ? __alloc_skb+0x193/0x390 [ 525.377314][ T31] ? netlink_sendmsg+0x650/0xb40 [ 525.382290][ T31] ? skb_put+0x11b/0x210 [ 525.386933][ T31] netlink_sendmsg+0x813/0xb40 [ 525.391720][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.397821][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 525.402778][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 525.408417][ T31] __sys_sendto+0x709/0x7a0 [ 525.413986][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 525.419039][ T31] ? do_futex+0x395/0x420 [ 525.423479][ T31] ? rcu_is_watching+0x15/0xb0 [ 525.428259][ T31] __x64_sys_sendto+0xde/0x100 [ 525.433022][ T31] do_syscall_64+0xe2/0xf80 [ 525.437700][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.444004][ T31] ? trace_irq_disable+0x37/0x100 [ 525.449043][ T31] ? clear_bhb_loop+0x60/0xb0 [ 525.455207][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.461123][ T31] RIP: 0033:0x7feee135b78e [ 525.465706][ T31] RSP: 002b:00007feee218fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 525.474583][ T31] RAX: ffffffffffffffda RBX: 00007feee21916c0 RCX: 00007feee135b78e [ 525.482574][ T31] RDX: 0000000000000024 RSI: 00007feee2190000 RDI: 000000000000000e [ 525.490752][ T31] RBP: 0000000000000000 R08: 00007feee218ff04 R09: 000000000000000c [ 525.498815][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 525.507208][ T31] R13: 00007feee218ff58 R14: 00007feee2190000 R15: 0000000000000000 [ 525.516023][ T31] [ 525.519122][ T31] [ 525.519122][ T31] Showing all locks held in the system: [ 525.526948][ T31] 1 lock held by khungtaskd/31: [ 525.531895][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 525.542115][ T31] 2 locks held by dhcpcd/5490: [ 525.546956][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 525.555406][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 525.564882][ T31] 2 locks held by getty/5585: [ 525.569582][ T31] #0: ffff8880347dd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 525.579651][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 525.589993][ T31] 1 lock held by udevd/13393: [ 525.594873][ T31] #0: ffff8881427a2358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 525.604526][ T31] 6 locks held by syz.3.3270/18067: [ 525.609724][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 525.619414][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 525.628762][ T31] #2: ffff88802494ba78 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 525.639473][ T31] #3: ffff8881417b3ff0 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2ba/0x6d0 [ 525.649027][ T31] #4: ffff8881417b3990 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 525.661177][ T31] #5: ffff8881417b39c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 525.673877][ T31] 2 locks held by syz.1.3271/18069: [ 525.679096][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 525.687394][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 525.696671][ T31] 2 locks held by syz.1.3271/18079: [ 525.701894][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 525.710441][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 525.720468][ T31] 2 locks held by syz.1.3271/18080: [ 525.725757][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 525.734382][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 525.743472][ T31] 2 locks held by syz.0.3277/18108: [ 525.748695][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 525.757075][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 525.766396][ T31] 2 locks held by syz-executor/18109: [ 525.771767][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 525.783357][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 525.792473][ T31] 2 locks held by syz.4.3278/18116: [ 525.798091][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 525.806439][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 525.815590][ T31] 2 locks held by syz.4.3278/18120: [ 525.821778][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 525.830353][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 525.839497][ T31] 2 locks held by syz-executor/18133: [ 525.844923][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 525.853104][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 525.862848][ T31] 2 locks held by syz-executor/18135: [ 525.868291][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 525.877084][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 525.886553][ T31] 2 locks held by syz-executor/18137: [ 525.891946][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 525.900353][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 525.909432][ T31] 2 locks held by syz-executor/18139: [ 525.915319][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 525.924771][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 525.934354][ T31] 2 locks held by syz-executor/18166: [ 525.939765][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 525.948448][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 525.957667][ T31] 2 locks held by syz-executor/18178: [ 525.963088][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 525.971437][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 525.980781][ T31] 2 locks held by syz-executor/18180: [ 525.986225][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 525.994558][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.003858][ T31] 2 locks held by syz-executor/18182: [ 526.009266][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.018040][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.028221][ T31] 2 locks held by syz-executor/18184: [ 526.034041][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.042297][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.051499][ T31] 2 locks held by syz-executor/18211: [ 526.057005][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.065477][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.074649][ T31] 2 locks held by syz-executor/18225: [ 526.080028][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.088410][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.097916][ T31] 2 locks held by syz-executor/18226: [ 526.103282][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.111632][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.120766][ T31] 2 locks held by syz-executor/18230: [ 526.126363][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.135401][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.144711][ T31] 2 locks held by syz-executor/18231: [ 526.150105][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 526.158554][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 526.168103][ T31] [ 526.170462][ T31] ============================================= [ 526.170462][ T31] [ 526.179410][ T31] NMI backtrace for cpu 0 [ 526.179426][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 526.179446][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 526.179458][ T31] Call Trace: [ 526.179465][ T31] [ 526.179473][ T31] dump_stack_lvl+0xe8/0x150 [ 526.179499][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 526.179525][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 526.179575][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 526.179606][ T31] sys_info+0x135/0x170 [ 526.179630][ T31] watchdog+0xf90/0xfe0 [ 526.179656][ T31] ? watchdog+0x209/0xfe0 [ 526.179684][ T31] kthread+0x726/0x8b0 [ 526.179711][ T31] ? __pfx_watchdog+0x10/0x10 [ 526.179732][ T31] ? __pfx_kthread+0x10/0x10 [ 526.179758][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 526.179788][ T31] ? __pfx_kthread+0x10/0x10 [ 526.179812][ T31] ret_from_fork+0x51b/0xa40 [ 526.179856][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 526.179886][ T31] ? __switch_to+0xc82/0x1410 [ 526.179917][ T31] ? __pfx_kthread+0x10/0x10 [ 526.179941][ T31] ret_from_fork_asm+0x1a/0x30 [ 526.179984][ T31] [ 526.179994][ T31] Sending NMI from CPU 0 to CPUs 1: [ 526.301969][ C1] NMI backtrace for cpu 1 [ 526.301986][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 526.302005][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 526.302016][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 526.302040][ C1] Code: a8 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 67 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 526.302055][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 526.302071][ C1] RAX: 00000000002580b7 RBX: ffffffff8199570d RCX: 0000000080000001 [ 526.302084][ C1] RDX: 0000000000000001 RSI: ffffffff8dcc914f RDI: ffffffff8c073980 [ 526.302096][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 526.302109][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8fef1a70 [ 526.302123][ C1] R13: 1ffff110039dcb70 R14: 0000000000000001 R15: 0000000000000001 [ 526.302134][ C1] FS: 0000000000000000(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 526.302162][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 526.302173][ C1] CR2: 00007f05d1ff7e9c CR3: 000000000e346000 CR4: 00000000003526f0 [ 526.302189][ C1] Call Trace: [ 526.302196][ C1] [ 526.302203][ C1] default_idle+0x9/0x20 [ 526.302233][ C1] default_idle_call+0x72/0xb0 [ 526.302253][ C1] do_idle+0x1bd/0x500 [ 526.302267][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 526.302295][ C1] ? __pfx_do_idle+0x10/0x10 [ 526.302312][ C1] cpu_startup_entry+0x43/0x60 [ 526.302325][ C1] start_secondary+0x101/0x110 [ 526.302347][ C1] common_startup_64+0x13e/0x147 [ 526.302372][ C1] [ 526.472304][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 526.479157][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 526.488258][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 526.498308][ T31] Call Trace: [ 526.501608][ T31] [ 526.504543][ T31] vpanic+0x1e0/0x670 [ 526.508532][ T31] panic+0xc5/0xd0 [ 526.512272][ T31] ? __pfx_panic+0x10/0x10 [ 526.516690][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 526.522078][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 526.528256][ T31] watchdog+0xfda/0xfe0 [ 526.532452][ T31] ? watchdog+0x209/0xfe0 [ 526.536820][ T31] kthread+0x726/0x8b0 [ 526.540913][ T31] ? __pfx_watchdog+0x10/0x10 [ 526.545593][ T31] ? __pfx_kthread+0x10/0x10 [ 526.550180][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 526.555380][ T31] ? __pfx_kthread+0x10/0x10 [ 526.559968][ T31] ret_from_fork+0x51b/0xa40 [ 526.564561][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 526.569677][ T31] ? __switch_to+0xc82/0x1410 [ 526.574372][ T31] ? __pfx_kthread+0x10/0x10 [ 526.578988][ T31] ret_from_fork_asm+0x1a/0x30 [ 526.583794][ T31] [ 526.587408][ T31] Kernel Offset: disabled [ 526.591747][ T31] Rebooting in 86400 seconds..