last executing test programs: 20.536479011s ago: executing program 0 (id=2367): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000200)=""/168, &(0x7f0000000180)=0xa8) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r2}, 0x20) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000ac0)={'ip6_vti0\x00', &(0x7f0000000bc0)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x61, 0x7ed, 0x10, @mcast1, @mcast1, 0x8000, 0x40, 0x9, 0x7f}}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000100003042bbd70000000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000028000003800128009000100766c616e00000000280002800600010002000000f9ff02800c00010000000000800000000c000100000000000900000008000500", @ANYRES32=r11, @ANYBLOB], 0x60}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000c40)={0x1c0, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20000811}, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@remote, @in6=@private2}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) 20.207790371s ago: executing program 1 (id=2376): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe0b, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) (rerun: 32) 19.8412025s ago: executing program 1 (id=2378): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dc58c00140660"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc9b}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000000300000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="000000001e000000200012880b00010062726964676500002f0002800c0021007d00000000000000edfcf4812c0469214c3fa1022e589732a5acab393bfd499721093e61efb3b5b76e12a0636f8b1d752594d5c5d638c15bd57c002af025d570020055e6b1cb2fcc9d1bb5bd569a7ded597ffc8d09534eb5da4640180ecab24249445c65beb55ae86026e21de1bc17ddafe101000000787a29de4b"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x24008840) r2 = socket(0x23, 0x80805, 0x2) getsockopt$inet6_tcp_buf(r2, 0x6, 0x6, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @empty}]}}]}, 0x5c}}, 0x4040004) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x4, 0xd4, 0x0, 0x0, 0x5, @remote, @mcast2, 0x40, 0x40, 0x6daa255, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl0\x00', 0x0, 0x4, 0xe, 0xc7, 0x6228, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x80, 0x1, 0x1, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000009c0)={'syztnl1\x00', &(0x7f0000000940)={'ip6gre0\x00', 0x0, 0x29, 0x1b, 0x3, 0x0, 0x24, @dev={0xfe, 0x80, '\x00', 0x44}, @private1, 0x7800, 0x8, 0x8, 0xfffffffa}}) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000a00)={@private0, 0x0}, &(0x7f0000000a40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) getsockname$packet(r2, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000b00)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000011c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="5c060000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="3401028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000400000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400f8ffffff40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400fbffffff08000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000108000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400f8ffffff08000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040009000000080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ff7f000008000100", @ANYRES32=0x0, @ANYBLOB="7c0002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004000900010ce839000008000100adef9c551f4e2e1430b3d6b5dfb2369461d9358c35817da5fc722356f55ebe01874de912917a9223f4f0a6d5d626babae4313be647b6766181ef9687cec818aff8722a7dd5ea1a0934c4f5fd6c0275fce607c3e39c2252b1612d3a79d8bce65b8f1983fcfb9bd75ca40678bcec58552cdc0762035c17c8", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=r8, @ANYBLOB="380102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040009000000080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040005000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r12, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400d50d000008000100", @ANYRES32=r13, @ANYBLOB="780002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040080000000"], 0x65c}, 0x1, 0x0, 0x0, 0x800}, 0x28044084) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 19.60616577s ago: executing program 4 (id=2381): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f00000000c0), 0x9) sendfile(r1, r0, 0x0, 0x10000) (async) sendfile(r1, r0, 0x0, 0x10000) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0x4}, 0xfffffffd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000040000000a00000040000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000ccce1924e1e4ebc68f07da0136680323503e2793922f4500b88259dc4103dc78f6f78419c7edbe76e91231de0973241b5835791141a683b4d88e5bac1bb950d2be187bbe1aa9987dd829f934de259ac6d04d4c8a8215047f18f1cd01ea859ea0320b7ee6498f8224c28e0ef54c355206365494abf2583e69436e5906c65d54f8b429c4092762ef0aeac70244639560d40d2b21f0603635d5f076a9c2f67a7ee184c6529b0ab641f7782ccfe1377a112e55671fb43e3c5aaef5278280b341822d4dfe33132c59075161", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000180)={0x3, 0x6, "028592", 0xf7, 0x80}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1000, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x24, 0x5f, 0xf31}, 0x24}}, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000100)=0xc805, 0x4) 19.472001954s ago: executing program 1 (id=2382): bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0xf, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6b12, 0x0, 0x0, 0x0, 0x3}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$igmp(0x2, 0x3, 0x2) (async) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="189500"/24], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000001000000000000000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="000000000500"/28], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f0000000180)={0x3, 0x18, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000e01f00ffdbdf250c00000018000180140002006261746164765f736c6176655f3000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40455d00000900020025797a31000000000900010073797a300000000008000540000000211000"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) unshare(0x20000400) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r8, 0x89e0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r9 = socket(0x80000000000000a, 0x2, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r10, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r7}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r7}, 0x8) pipe(&(0x7f00000001c0)) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r12, 0x20, &(0x7f0000000200)={&(0x7f0000000600)=""/118, 0x76, 0x0, &(0x7f0000001440)=""/4096, 0x1000}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r12, 0x20, &(0x7f0000000200)={&(0x7f0000000600)=""/118, 0x76, 0x0, &(0x7f0000001440)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r13, r11, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r13}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r14, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) write(r10, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) getsockopt$inet6_buf(r9, 0x29, 0x3e, 0x0, &(0x7f00000003c0)) (async) getsockopt$inet6_buf(r9, 0x29, 0x3e, 0x0, &(0x7f00000003c0)) 19.30062547s ago: executing program 0 (id=2384): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="000000e9ffffff00000000000000000004000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000034000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61146100000000001d430000000000007a0a00fe00581c1f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e64"], 0x48}}, 0x0) (async) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 19.264374394s ago: executing program 4 (id=2385): sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000008000500050000000000000000000068fb36e7682b8eef81a9c3d5db790e31383544e4523ce0edb49a93fc553255eb64026d69a16706873d9fee19d8000ce072f6bf4866428122ace102a807fbafb2e6316dce3a5548f666ad428bf1"], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000420000000700000008000000000000", @ANYBLOB="00000000000000000000000000000000000000005a55a9a14924"], 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000020000003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c0000000000000a00000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000ff00000000000000010000000000000084010500fe8000000000000000000000000000bb000004d53c00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d43c00000000000000fe8000000000000000000000000000000000000000000000000800000000000001000000ff010000000000000000000000000001000000006c"], 0x23c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x18, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x140}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xb6}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) connect$unix(r2, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e00010026bd700000000000a197"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x48, 0x3, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xf6d}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0xbe}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0xd}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x24000040) syz_emit_ethernet(0x319, &(0x7f0000000900)={@local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x6, 0x6, "eb12e3", 0x2e3, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@hopopts={0x0, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x4b}, @calipso={0x7, 0x10, {0x2, 0x2, 0xc, 0x7fff, [0x8]}}, @ra={0x5, 0x2, 0x4}]}, @fragment={0x8, 0x0, 0xe, 0x0, 0x0, 0x5, 0x66}, @srh={0x33, 0xe, 0x4, 0x7, 0x8, 0x8, 0xde, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, @dev={0xfe, 0x80, '\x00', 0x34}, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x17, 0x2, [0x40, 0x68d], "a586a389e23895f651bf53ef01d791048a5895ffd86e94bcc50ca38411f20591dcb1ab9da4c05e5aac12d496f43e0d206073728eb6985f9d8ec7a11f1f885620024e3dc6caf8edd722d5e9a016a51e0920568994b40a5273dd209ef289d8b6e87f6053528f5c2aae6b45679360c6"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x9, 0x35], "202f1ee08ce72358bd88a53a5d5cfd0dbe1474d5f28119cf5eb329634c2720277cb67a9fcbc711c9609165c3699a91eb3b3fc1da11c2a3c96a58537eccec57627749a07ed5c4ad0bd08e5a25c3a5418b3f07a9e168fd94c16b2c92bd5ca0d941d17d740f5919ecba38cea8f1ca278ff1d045a610901d6d2ad7e7f90bb422d81220a4744906a5989ed59f13e49ec85ea70f0eec77a4c72de31b798fbe05d7fd689d06f96d"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x9, 0x88], "fc94c21008e9519cbfa4df22a8f9daabc445ce99c07a8051393281d0595f9bf8b592dc05bd5af7ffce13c7da8c7f57008d2cb7200c50fb2755a0a155c88d494005160e93a7e88632938643d95f7df5c41df1303256c293ce0e6aa1bb2a037ba9a0799b9208c6f50eea40c354c5d82b4397a3de5a796ed0d7c8830fb2397157c146918de2df9bfe46bdc08bd6fc247aa99a230a4713f019f215a19a7c3be339e83f0467546a4a722507e00b058a48d3b931ed8bc3286fe0634375b6a497a74a09a59161ce2b"}, {0x8, 0x88be, 0x4, {{0x4, 0x1, 0x4, 0x0, 0x1, 0x1, 0x2, 0x3}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x1, {{0x8, 0x2, 0xc, 0x2, 0x1, 0x1, 0x2, 0x8}, 0x2, {0x0, 0x13c, 0x0, 0x10, 0x0, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x0, "5cd06db27f1f6aa919c300939ae3261187bbeb769e218148"}}}}}}}, 0x0) 19.214990532s ago: executing program 1 (id=2386): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f0000000200)="fb0e339edb54c2638089dfdec0f88e48a4745ebf969d22d6d4bc5371bab5c033b98c641ba53ff456786b80debac7fba591d67743be927990297dd0c80e422d4786d192a165c735df9b8f2f370b8aa5e5ac95"}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x54, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffffb, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0xfffffffffffffe87) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de328758952e00000000", 0x59) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5b000009000000032800"/20], 0x14}}, 0x40) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000004c0)}, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) socket(0x10, 0x2, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$sock_ax25_SIOCDELRT(r9, 0x890c, &(0x7f0000000540)={@default, @bcast, 0x1, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xfd5d, 0x0, 0x1, 0x0, 0x0, 0x4004800}, 0x8004) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8=r9, @ANYRES32=r6, @ANYBLOB="5fe4783c09502e14664b7831ca807e6ec7b39ab362d37c83473bdfc98befb4e93693698b3fe731e17e951afabc954855caee3a265eafafb876762205ffeb5bc2f66710ef5d82e9a79c2245329543ea8b0a9064cb", @ANYRESOCT=r6], &(0x7f0000000100)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x62040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRES8, @ANYRESHEX=r9, @ANYRES16=r8, @ANYRESDEC=r10, @ANYRESHEX=0x0, @ANYRES16=r6], 0x30}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x4000800) 19.158123098s ago: executing program 4 (id=2388): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14, &(0x7f0000000100)={&(0x7f00000003c0)="d682f39c", 0x4}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb894f"], 0x72) 19.111988855s ago: executing program 2 (id=2389): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, 0x0, &(0x7f0000000000)=0x83) (async) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, 0x0, &(0x7f0000000000)=0x83) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000011c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r9}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40954}, 0x20040814) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) (async) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) r10 = socket(0x1, 0x2, 0x0) bind$unix(r10, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000001a40)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000f80)=ANY=[], 0x28, 0x4}}], 0x2, 0x0) (async) sendmmsg$unix(r10, &(0x7f0000001a40)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000f80)=ANY=[], 0x28, 0x4}}], 0x2, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x7c, r5, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40800}, 0x4044) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r11, 0x1, 0xf0bd2a, 0x25dfcbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40208c0}, 0xc180) socket(0x27, 0x2, 0x0) (async) socket(0x27, 0x2, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x32, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x13, 0x1, {{0x0, 0x0, 0x0, 0x12000000, 0x6}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) (async) sendmsg$nl_route_sched(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x32, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x13, 0x1, {{0x0, 0x0, 0x0, 0x12000000, 0x6}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000300)=@ethtool_rxfh={0x1}}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) (async) socket$rds(0x15, 0x5, 0x0) 19.111097719s ago: executing program 0 (id=2390): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x79, "9d4625107f756ac4f28f3b65ca2a123101464bd790a231ee31b0947ecc67ef0450b8eae8011289a0e1d5fa7871e00c4d5a3d895136a9e6a492dec1d9f765880a197b833d2fc13ca5d64e42253f9ba8eb497a112c0efeffc1cd87e8e39ec2c9f2074d58d6e55a1a6474d713162991c1946946cd44281bc0f0f0"}, &(0x7f0000000180)=0x81) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@generic={0x88a2}}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfd}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="b40000001800010000000000000000000200800000010009000000000600150001000000900016808c0001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x14c, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x68}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x3, 0x3}}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x4}, @NL80211_ATTR_SCAN_SSIDS={0x88, 0x2d, 0x0, 0x1, [{0x4}, {0x1a, 0x0, @random="53d26aef820499fc9350443b9ae77f18565c62257abb"}, {0xa, 0x0, @default_ap_ssid}, {0x5, 0x0, @random="c2"}, {0x22, 0x0, @random="cc7336309bee3ec4047b27c577bbb9e1d680c7f8d64022e6796a9fc0caa1"}, {0x14, 0x0, @random="0dd9a50327568599a8161d29b04afbde"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x6c, 0x84, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="6a3767d3a794"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xcda5}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0xb}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xd7c}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40008}, 0x1) 18.793913684s ago: executing program 2 (id=2392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xc}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) splice(r0, &(0x7f00000000c0)=0x7, r1, &(0x7f0000000100)=0x1, 0xf5e, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, 0x0, 0x1, 0xfffffffd, 0x25dfdbfc, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab}}, {0x8}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 18.79102068s ago: executing program 4 (id=2393): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000a00)="00000000076f00001abd8cf0eedf", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 18.671377343s ago: executing program 0 (id=2394): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000300000003"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0d0000007f000000040000000809000000000000", @ANYRES32=r0], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0xa, &(0x7f0000000100)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6c}}, @jmp={0x5, 0x1, 0x7, 0x5, 0x9, 0x6, 0xfffffffffffffffc}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x85) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000100001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1011925784800000140003006e657464657673696d3000000000000014001680100001800c0057c6ee2931c2"], 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0x4800) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000a000000000200000700000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r5, &(0x7f0000000a40), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/89}, 0x20) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x440c0}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1424785c49305fcc750d732e9e10a15a00000215"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f00000001c0), &(0x7f0000000280)=0x8) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x2, 0xfffffffc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) 18.667074799s ago: executing program 3 (id=2395): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3473500000042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 18.559017152s ago: executing program 4 (id=2396): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="260000000000000000ff"], 0x20) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000580)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)=0x10000000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x8102, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)=0x3) close(r4) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010029bd7000ffdbdf25010000000806"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b80000001900010000000000fcffffff0e00000000000000000000000000000000000000000000000000ffffffffffff000000000000ffff0a0000008700000016d2739c488975107090ef68d93f96d0eb5caebc31992b0843878473aafdcce8c7f4d1c41d0984a96a230d5cab0f31239e5a733d8621d59f4781326012fd94364c2a04f5934662ee840f1adcb310c862e0507ba586b7e1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 18.558305701s ago: executing program 2 (id=2397): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) close(r0) 18.528212021s ago: executing program 3 (id=2398): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom$phonet(r0, &(0x7f0000000000)=""/6, 0x6, 0x2000, &(0x7f0000000080)={0x23, 0x0, 0xf, 0x93}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000000008500000056000000850000000800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.434827847s ago: executing program 2 (id=2399): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000080)=0x80, 0x800) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0xff}, &(0x7f0000000200)=0x8) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0xff}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240)={r1, 0x3, 0x9, 0x9}, &(0x7f0000000280)=0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "d172f5", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @ni={0xc46ee13d8e75c188, 0x0, 0x0, 0xc2, 0x2, 0x9}}}}}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x541b, &(0x7f0000000100)) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4}, 0x1c) (async) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4}, 0x1c) socket$inet(0x2, 0x5, 0x7) (async) socket$inet(0x2, 0x5, 0x7) 18.305215499s ago: executing program 3 (id=2400): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @rand_addr=0x64010101}, 0x2}}, 0x26) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="648a6282c6e91b973836904a4a88affa0c371dd1b9c133c5e594714579d6bb3addfd43e78272aef64427ce5467d6994320cf139092452c7944ddab49e459f7e0c73f890e9e2463bd3390e20b1e472bd2aedb47094547a767a098a94a402e6aba65c0ef07eaa87f8663c763d9bb491243eb129eec434e5603956c8333a6ecdf4d3a601b9c8d3d63e3a4a57b38033e2b004f6c3e45f1645c3b7ca0d5ba5eea059b5aa4f0f80ac66904076cc60e47e1afc7d81ad937dee5efc0580e38d96cf0f53808f37d5a8811b07165e8b9aabceac06e4fa7f7668b8832877783a727a1fa8b972bfaeb232cf3e9b500965820f4adf64f1e5e", 0xf2}], 0x1}}], 0x1, 0x4044805) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd09000400000005000000080009000200000008000c00a80a000008000b000000000006000100"], 0x3c}}, 0x20) 18.123318809s ago: executing program 3 (id=2401): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind(r0, 0x0, 0x0) 18.017409567s ago: executing program 2 (id=2402): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000c40)=""/3, &(0x7f0000000c80)=0x3) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x2, 0x1, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x44}}, 0x8001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r5, 0x200, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x48000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40455d00000900020025797a31000000000900010073797a300000000008000540000000211000"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@map=r4, 0x34, 0x0, 0xb, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0]}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000063000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)={0x2004}) epoll_wait(r11, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000180001f72bbd7000fbdbdf250aa48d00fd04c800002000000c00090008000808", @ANYRES32=0x0, @ANYBLOB="140005"], 0x44}, 0x1, 0x2}, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20001000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x44, r6, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000001}, 0x800) 17.99356879s ago: executing program 3 (id=2403): socket(0x2, 0x80805, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$inet_sctp(0x2, 0x5, 0x84) socket$unix(0x1, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20652383656d4d2449155037", 0x55}], 0x1}, 0x4040044) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000000)={0x1ff, 0x2}) 17.815245043s ago: executing program 1 (id=2404): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018200000000000006c0000006c0000000200000000000000000000070000000000000000070000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d700000000000000000000000000000000a1d8faf5bd23dd800008"], 0x0, 0x86}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYRES32=r0], 0x240) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r3, 0x1}, 0x8) 17.017439527s ago: executing program 2 (id=2405): socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000000000000000010008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4a, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r2, &(0x7f0000000400)={&(0x7f0000000040)=@can={0x1d, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000900)=""/69, 0x45}, {&(0x7f0000000200)=""/39, 0x27}], 0x2, &(0x7f00000004c0)=""/109, 0x6d}, 0x40000000) r4 = socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb7f0a0043c5e9b405a902211c0000000000019078acbbac1414aa080090780fff02000000"], 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000080), 0x8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x0, 0x2, 0x0, r5}, @ldst={0x1, 0x2, 0x4}]}, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000480)='svc_stats_latency\x00', r1, 0x0, 0x3}, 0x18) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r9, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x18}}, 0x0) 16.961702927s ago: executing program 0 (id=2406): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50) unshare(0x400) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt(r1, 0xff, 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r2}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000200)={'macvlan1', 0x32, 0x37}, 0xb) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) 16.826985859s ago: executing program 0 (id=2407): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000018008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x0, 0x13, &(0x7f0000000080)=""/1, &(0x7f0000000000)=0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x20800, 0x0) socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f00000002c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r6], 0x28}}, 0x802) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) 16.763277605s ago: executing program 3 (id=2408): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000000)='syzkaller\x00', 0x3}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000000000f00000001000f0e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000008408000000000000180000000000000000000000000000059500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r7, 0x400, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2400a808}, 0x4) r8 = accept4$tipc(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x80000) sendmsg$tipc(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)="e704b39ac9d1ed0586831bd81795b71553516c1be081f7a11fe6fa52b6878001f3f2ce8e784adbec357d7864283c70ce61b5974bed05153f3856b32c2baab85f504623290e173b83654d14f29a86cafcbb2da06aa1f1f135519f81278462124f3d138ffd9ed7081fa0705798ea88f602f27628319b496fc706921d7cbfe50ca769268a01e40631a31c6cf636472276c7bca79f0609ae8d7755dce14697", 0x9d}, {&(0x7f0000000500)="2fa47a09e41cc00523a18dd69a9c00c82e0afe375a82b95f24bf1aa03c93674fa8b7ff15805fa6b47883c71105424cc79de09d1941cdb97afe9050cbd3360bec9d336fed13de5aadd963b408deeb319f25b6a56ceab8b05ecde6dad8a16bbb8155f3f6fb609bfedf7847127d5bbd6db6a4c979c0fbd9a82ebaf60330f5e3b64c4cbe1aedf09c5bd2c86c76c4d5599671d5f7cbbac473df25bd64e1660dfbcb8d10bc71fad0e2a13b18bf3a2288547513af51f2c25028125a0d5a207f32", 0xbd}, {&(0x7f00000005c0)="878a16d046fb8fddd1089b15cbbf2d38247b79ac7971ab8964c9e25ca06c34ffd0a3316a305ecf61e3d914e617f9681fa00164a9b6c6672424441ae6a694f4ef15d2b65f7c36e38718de42a70a58884781fc267a28ffd45b29a1ff9e1dd96e46db145b9ea953c985db097ed5407d6808e5cd6b64bf15bbe95bcf658e", 0x7c}, {&(0x7f0000000640)="e3e7dcda877d6e8bf0beed1324426cdb6de1ffad1c642c8b7fc324eb1eafb3b8db0e2af923798164fd47f9400f7eda26e3994016edfa47e6064d64c32aa0999f43bc363ec525930bbb84322c35d494c3516395fb7ca3b52708b85894d4a3eac33e9326e3e608fd8620c42bf6236d0e2a26336777cf679146dd059f4dcaf6f8f25c1763ebbb943e2e99dd28333815e94dffcdf4a6f6523e9cafc4cb5a519d4cc1", 0xa0}, {&(0x7f0000000700)="09f1f6555ee107dc2d0a99103a96b567ef1e70469e07b797064090d059b865c42b72c1f249cd713836b56d7191af1cb53c57516d6c35269a06c60a1da7c55a11fac451311e74cb803aea2713db61bc0446f6e8181ad018f8853dbb4d25d22e6fce506bf0b9d7555206acb1fc775d8b86e3e3350ae6e1cc9f34aa04ef290b115c0991392531ae2051fa86bab07be6e50d6253a532e088bc62997ca3e52acf9b9855964da0fb5f8a1476c96ced603d2359507f93de0e094cd5fe006bdf816085d3830f5afe63016c6d6072bfd489e8f53892cd9fb85c53069f03978e288f801a2a63d76b6670be24181da88764ae97269123e694", 0xf3}, {&(0x7f0000001480)="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", 0x1000}], 0x6, &(0x7f0000000880)="c0a2adbe0a835494355bfff4d495954d93f1cb145789712676b3a6c207c4fe1a18b0533de268f078d0c9e9e05a42f720f17d74898b9edcb9eaea62504adc5bb4deb20f2d491c6d3e009ecbe2cc5aa4de463b50854d18851fa7ef13bfb192d5ff4b904b32312b4d6f7a378a4458e0831cdca69d1430defe5c499543536f02e16f2c03aad5560e7fff5bf48e2bc167f0d4f9b04491076d18270591d168b3b0dfd792f9a23cb57e5e6c5f7e1bb0b6a2cbd6c5d1c90bbd501a55807b152eb312ddc701b473c5ae1565bd7509fefe98686618c0a3350d40ec83625bfc1bc6afb6dc4e079b", 0xe2, 0x24000001}, 0x90) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r9, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) 15.217621411s ago: executing program 1 (id=2409): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, r1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000040), 0x100000000000026a, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000180)=0x8, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000002766353e2a3458f300c9b8332d00"/37], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r7, 0x5452, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r8 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r9, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) setsockopt(r9, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000000000b00000000000000000100000d003e76bc0661b9c4780000000000000000000009030000000000"], 0x0, 0x46, 0x0, 0xa, 0xb}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) 15.118915258s ago: executing program 4 (id=2410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000300)={0x3c, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0xd, &(0x7f0000000180)=',', 0x1) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f00000000c0)="1c721c3eba50892646093830c21739b7bd938217f7a227c397dda2f0ac1f7b3515817c", 0x23) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r7, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4) recvmmsg(r7, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x9ddabfb24ad26c79, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xa4}}, 0x20050800) 1.185546949s ago: executing program 32 (id=2407): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000018008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x0, 0x13, &(0x7f0000000080)=""/1, &(0x7f0000000000)=0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x20800, 0x0) socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$SIOCGSTAMPNS(r5, 0x8907, &(0x7f00000002c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r6], 0x28}}, 0x802) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) 1.147077501s ago: executing program 33 (id=2405): socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000000000000000010008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4a, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r2, &(0x7f0000000400)={&(0x7f0000000040)=@can={0x1d, 0x0}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000900)=""/69, 0x45}, {&(0x7f0000000200)=""/39, 0x27}], 0x2, &(0x7f00000004c0)=""/109, 0x6d}, 0x40000000) r4 = socket$inet6(0xa, 0x80002, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb7f0a0043c5e9b405a902211c0000000000019078acbbac1414aa080090780fff02000000"], 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000080), 0x8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x0, 0x2, 0x0, r5}, @ldst={0x1, 0x2, 0x4}]}, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000480)='svc_stats_latency\x00', r1, 0x0, 0x3}, 0x18) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r9, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x18}}, 0x0) 1.100164563s ago: executing program 34 (id=2408): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000000)='syzkaller\x00', 0x3}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000000000f00000001000f0e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000008408000000000000180000000000000000000000000000059500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r7, 0x400, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2400a808}, 0x4) r8 = accept4$tipc(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x80000) sendmsg$tipc(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)="e704b39ac9d1ed0586831bd81795b71553516c1be081f7a11fe6fa52b6878001f3f2ce8e784adbec357d7864283c70ce61b5974bed05153f3856b32c2baab85f504623290e173b83654d14f29a86cafcbb2da06aa1f1f135519f81278462124f3d138ffd9ed7081fa0705798ea88f602f27628319b496fc706921d7cbfe50ca769268a01e40631a31c6cf636472276c7bca79f0609ae8d7755dce14697", 0x9d}, {&(0x7f0000000500)="2fa47a09e41cc00523a18dd69a9c00c82e0afe375a82b95f24bf1aa03c93674fa8b7ff15805fa6b47883c71105424cc79de09d1941cdb97afe9050cbd3360bec9d336fed13de5aadd963b408deeb319f25b6a56ceab8b05ecde6dad8a16bbb8155f3f6fb609bfedf7847127d5bbd6db6a4c979c0fbd9a82ebaf60330f5e3b64c4cbe1aedf09c5bd2c86c76c4d5599671d5f7cbbac473df25bd64e1660dfbcb8d10bc71fad0e2a13b18bf3a2288547513af51f2c25028125a0d5a207f32", 0xbd}, {&(0x7f00000005c0)="878a16d046fb8fddd1089b15cbbf2d38247b79ac7971ab8964c9e25ca06c34ffd0a3316a305ecf61e3d914e617f9681fa00164a9b6c6672424441ae6a694f4ef15d2b65f7c36e38718de42a70a58884781fc267a28ffd45b29a1ff9e1dd96e46db145b9ea953c985db097ed5407d6808e5cd6b64bf15bbe95bcf658e", 0x7c}, {&(0x7f0000000640)="e3e7dcda877d6e8bf0beed1324426cdb6de1ffad1c642c8b7fc324eb1eafb3b8db0e2af923798164fd47f9400f7eda26e3994016edfa47e6064d64c32aa0999f43bc363ec525930bbb84322c35d494c3516395fb7ca3b52708b85894d4a3eac33e9326e3e608fd8620c42bf6236d0e2a26336777cf679146dd059f4dcaf6f8f25c1763ebbb943e2e99dd28333815e94dffcdf4a6f6523e9cafc4cb5a519d4cc1", 0xa0}, {&(0x7f0000000700)="09f1f6555ee107dc2d0a99103a96b567ef1e70469e07b797064090d059b865c42b72c1f249cd713836b56d7191af1cb53c57516d6c35269a06c60a1da7c55a11fac451311e74cb803aea2713db61bc0446f6e8181ad018f8853dbb4d25d22e6fce506bf0b9d7555206acb1fc775d8b86e3e3350ae6e1cc9f34aa04ef290b115c0991392531ae2051fa86bab07be6e50d6253a532e088bc62997ca3e52acf9b9855964da0fb5f8a1476c96ced603d2359507f93de0e094cd5fe006bdf816085d3830f5afe63016c6d6072bfd489e8f53892cd9fb85c53069f03978e288f801a2a63d76b6670be24181da88764ae97269123e694", 0xf3}, {&(0x7f0000001480)="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", 0x1000}], 0x6, &(0x7f0000000880)="c0a2adbe0a835494355bfff4d495954d93f1cb145789712676b3a6c207c4fe1a18b0533de268f078d0c9e9e05a42f720f17d74898b9edcb9eaea62504adc5bb4deb20f2d491c6d3e009ecbe2cc5aa4de463b50854d18851fa7ef13bfb192d5ff4b904b32312b4d6f7a378a4458e0831cdca69d1430defe5c499543536f02e16f2c03aad5560e7fff5bf48e2bc167f0d4f9b04491076d18270591d168b3b0dfd792f9a23cb57e5e6c5f7e1bb0b6a2cbd6c5d1c90bbd501a55807b152eb312ddc701b473c5ae1565bd7509fefe98686618c0a3350d40ec83625bfc1bc6afb6dc4e079b", 0xe2, 0x24000001}, 0x90) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r9, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) 51.284036ms ago: executing program 35 (id=2409): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, r1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000040), 0x100000000000026a, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000180)=0x8, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000002766353e2a3458f300c9b8332d00"/37], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r7, 0x5452, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r8 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r9, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) setsockopt(r9, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000000000b00000000000000000100000d003e76bc0661b9c4780000000000000000000009030000000000"], 0x0, 0x46, 0x0, 0xa, 0xb}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) 0s ago: executing program 36 (id=2410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000300)={0x3c, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0xd, &(0x7f0000000180)=',', 0x1) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f00000000c0)="1c721c3eba50892646093830c21739b7bd938217f7a227c397dda2f0ac1f7b3515817c", 0x23) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r7, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4) recvmmsg(r7, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x9ddabfb24ad26c79, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x18, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xa4}}, 0x20050800) kernel console output (not intermixed with test programs): 737484][T10981] bond2: left promiscuous mode [ 309.774153][T10981] bond5: (slave ip6gretap1): Removing an active aggregator [ 309.791051][ T13] bond5: Warning: Found an uninitialized port [ 309.797709][T10981] bond5: (slave ip6gretap1): Releasing backup interface [ 309.825944][T10981] bond5: (slave ip6gretap1): the permanent HWaddr of slave - 5e:c5:83:1a:f9:8e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 309.922413][T10981] bond5: (slave veth7): Releasing backup interface [ 310.008125][T10981] team0: Port device bond7 removed [ 310.048636][T10981] bond8: (slave bridge3): Releasing backup interface [ 310.167386][T10985] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 310.231471][ T49] tipc: Resetting bearer [ 310.482572][T10983] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.486113][T11010] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 310.516091][T11011] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1306'. [ 310.576996][T11017] netlink: 'syz.1.1307': attribute type 1 has an invalid length. [ 310.767140][T10983] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.051753][T10983] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.248843][T10983] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.401455][T11030] veth3: entered promiscuous mode [ 311.460587][T11022] syz.2.1309: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 311.499127][ T58] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.515360][T11022] CPU: 1 UID: 0 PID: 11022 Comm: syz.2.1309 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 311.515392][T11022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 311.515414][T11022] Call Trace: [ 311.515422][T11022] [ 311.515431][T11022] dump_stack_lvl+0x189/0x250 [ 311.515471][T11022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.515497][T11022] ? __pfx__printk+0x10/0x10 [ 311.515526][T11022] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 311.515549][T11022] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 311.515575][T11022] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 311.515603][T11022] warn_alloc+0x214/0x310 [ 311.515642][T11022] ? __pfx_warn_alloc+0x10/0x10 [ 311.515684][T11022] ? __get_vm_area_node+0x28f/0x300 [ 311.515713][T11022] ? xskq_create+0xbf/0x170 [ 311.515744][T11022] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 311.515810][T11022] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 311.515847][T11022] ? __kasan_kmalloc+0x93/0xb0 [ 311.515879][T11022] vmalloc_user_noprof+0xad/0xf0 [ 311.515909][T11022] ? xskq_create+0xbf/0x170 [ 311.515936][T11022] xskq_create+0xbf/0x170 [ 311.515966][T11022] xsk_init_queue+0xb0/0x110 [ 311.515996][T11022] xsk_setsockopt+0x57b/0x8d0 [ 311.516025][T11022] ? __pfx_xsk_setsockopt+0x10/0x10 [ 311.516059][T11022] ? __pfx_aa_sk_perm+0x10/0x10 [ 311.516092][T11022] ? __fget_files+0x2a/0x420 [ 311.516108][T11022] ? aa_sock_opt_perm+0xff/0x1b0 [ 311.516131][T11022] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 311.516153][T11022] ? __pfx_xsk_setsockopt+0x10/0x10 [ 311.516180][T11022] do_sock_setsockopt+0x17c/0x1b0 [ 311.516207][T11022] __x64_sys_setsockopt+0x13f/0x1b0 [ 311.516233][T11022] do_syscall_64+0xfa/0x3b0 [ 311.516261][T11022] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.516288][T11022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.516308][T11022] ? clear_bhb_loop+0x60/0xb0 [ 311.516334][T11022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.516352][T11022] RIP: 0033:0x7f6eca58ebe9 [ 311.516372][T11022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.516390][T11022] RSP: 002b:00007f6ecb424038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 311.516411][T11022] RAX: ffffffffffffffda RBX: 00007f6eca7b5fa0 RCX: 00007f6eca58ebe9 [ 311.516424][T11022] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 311.516436][T11022] RBP: 00007f6eca611e19 R08: 0000000000000004 R09: 0000000000000000 [ 311.516448][T11022] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000 [ 311.516460][T11022] R13: 00007f6eca7b6038 R14: 00007f6eca7b5fa0 R15: 00007ffda04fcae8 [ 311.516496][T11022] [ 311.516516][T11022] Mem-Info: [ 311.696739][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.721567][T11022] active_anon:7394 inactive_anon:0 isolated_anon:0 [ 311.721567][T11022] active_file:3425 inactive_file:39906 isolated_file:0 [ 311.721567][T11022] unevictable:768 dirty:6 writeback:0 [ 311.721567][T11022] slab_reclaimable:11682 slab_unreclaimable:175007 [ 311.721567][T11022] mapped:33204 shmem:1359 pagetables:1006 [ 311.721567][T11022] sec_pagetables:0 bounce:0 [ 311.721567][T11022] kernel_misc_reclaimable:0 [ 311.721567][T11022] free:1234173 free_pcp:28493 free_cma:0 [ 311.844122][ T1137] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.858146][ T1137] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.876651][T11022] Node 0 active_anon:29576kB inactive_anon:0kB active_file:13700kB inactive_file:159420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129616kB dirty:24kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13148kB pagetables:3884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 311.932934][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1314'. [ 311.951887][T11022] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 311.989394][T11039] lo speed is unknown, defaulting to 1000 [ 312.058434][T11022] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 312.152872][T11022] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 312.189280][T11022] Node 0 DMA32 free:1031276kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29816kB inactive_anon:0kB active_file:13700kB inactive_file:157856kB unevictable:1536kB writepending:76kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:93296kB local_pcp:59512kB free_cma:0kB [ 312.234291][T11022] lowmem_reserve[]: 0 0 1 1 1 [ 312.266754][T11022] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 312.314642][T11022] lowmem_reserve[]: 0 0 0 0 0 [ 312.319806][T11022] Node 1 Normal free:3892908kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16040kB local_pcp:7680kB free_cma:0kB [ 312.374511][T11022] lowmem_reserve[]: 0 0 0 0 0 [ 312.380017][T11022] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 312.393685][T11022] Node 0 DMA32: 2094*4kB (UM) 704*8kB (UME) 96*16kB (UME) 171*32kB (UME) 37*64kB (UME) 30*128kB (UME) 12*256kB (UME) 9*512kB (ME) 5*1024kB (UME) 6*2048kB (UME) 239*4096kB (UM) = 1031256kB [ 312.426596][T11022] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 312.452084][T11022] Node 1 Normal: 211*4kB (UME) 44*8kB (UME) 50*16kB (UME) 97*32kB (UME) 41*64kB (UME) 7*128kB (UME) 3*256kB (UM) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3892908kB [ 312.479241][T11022] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 312.489279][T11022] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 312.500289][T11022] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 312.511049][T11022] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 312.511760][T11058] lo speed is unknown, defaulting to 1000 [ 312.522612][T11022] 44687 total pagecache pages [ 312.601474][T11022] 0 pages in swap cache [ 312.605816][T11022] Free swap = 124996kB [ 312.614615][T11022] Total swap = 124996kB [ 312.648953][T11064] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1319'. [ 312.662115][T11022] 2097051 pages RAM [ 312.666084][T11022] 0 pages HighMem/MovableOnly [ 312.671266][T11022] 425656 pages reserved [ 312.688567][T11022] 0 pages cma reserved [ 313.012370][T11073] bridge2: entered promiscuous mode [ 313.202646][T11086] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5) [ 313.258385][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1327'. [ 313.304932][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1328'. [ 313.405049][T11091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.447373][T11091] __nla_validate_parse: 1 callbacks suppressed [ 313.447394][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1330'. [ 313.497189][T11103] batadv0: entered promiscuous mode [ 313.542670][T11105] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 313.571349][T11105] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 313.691377][T11116] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1336'. [ 313.775676][T11124] siw: device registration error -23 [ 313.925316][T11127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1340'. [ 313.993853][T11128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1340'. [ 313.994353][T11125] team0 (unregistering): Port device team_slave_0 removed [ 314.014782][T11125] team0 (unregistering): Port device team_slave_1 removed [ 314.043578][T11127] pim6reg: entered allmulticast mode [ 314.219462][T11136] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 314.248891][T11134] nbd2: detected capacity change from 0 to 63 [ 314.330940][T11144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1344'. [ 314.396792][T11143] veth15: entered promiscuous mode [ 314.459612][T11144] syz_tun (unregistering): left promiscuous mode [ 314.486967][T11146] gretap1: entered promiscuous mode [ 314.499125][T11146] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 314.783726][T11146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1346'. [ 314.889416][T11146] 8021q: adding VLAN 0 to HW filter on device bond4 [ 315.001344][ T5884] block nbd2: Receive control failed (result -32) [ 315.348237][T11194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1356'. [ 315.350532][T11195] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1357'. [ 315.427124][T11195] netlink: 'syz.4.1357': attribute type 2 has an invalid length. [ 315.443521][T11198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1358'. [ 315.467708][T11195] k›*·]‘: entered promiscuous mode [ 315.501116][T11199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1357'. [ 315.611929][T11205] lo speed is unknown, defaulting to 1000 [ 315.628522][T11205] lo speed is unknown, defaulting to 1000 [ 315.645460][T11205] lo speed is unknown, defaulting to 1000 [ 315.731032][T11214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.737845][T11205] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 315.750796][T11208] vlan5: entered allmulticast mode [ 315.770967][T11208] bridge0: entered allmulticast mode [ 315.791828][T11208] bridge4: port 1(vlan5) entered blocking state [ 315.802557][T11208] bridge4: port 1(vlan5) entered disabled state [ 315.812953][T11208] vlan5: entered promiscuous mode [ 315.822591][T11208] bridge0: entered promiscuous mode [ 315.834756][T11210] lo speed is unknown, defaulting to 1000 [ 315.855856][T11205] lo speed is unknown, defaulting to 1000 [ 315.874209][T11208] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 315.882042][T11205] lo speed is unknown, defaulting to 1000 [ 315.904797][T11210] lo speed is unknown, defaulting to 1000 [ 315.915009][T11205] lo speed is unknown, defaulting to 1000 [ 315.944735][T11205] lo speed is unknown, defaulting to 1000 [ 315.959713][T11205] lo speed is unknown, defaulting to 1000 [ 316.385055][T11249] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 316.674088][T11269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.710269][T11267] Bluetooth: MGMT ver 1.23 [ 316.791847][T11276] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 316.813014][T11270] tipc: Enabled bearer , priority 0 [ 316.885764][T11281] vlan2: entered allmulticast mode [ 316.901101][T11281] veth1: entered allmulticast mode [ 316.927357][T11270] tipc: Resetting bearer [ 317.447579][T11323] netlink: 'syz.0.1393': attribute type 4 has an invalid length. [ 317.717404][T11343] lo speed is unknown, defaulting to 1000 [ 317.728652][T11343] lo speed is unknown, defaulting to 1000 [ 317.931203][T11353] bond0: entered promiscuous mode [ 317.936855][T11353] bond_slave_0: entered promiscuous mode [ 317.944306][T11353] bond_slave_1: entered promiscuous mode [ 317.952101][T11353] batadv0: entered promiscuous mode [ 317.964860][T11353] debugfs: 'hsr0' already exists in 'hsr' [ 317.984506][T11353] Cannot create hsr debugfs directory [ 317.993785][T11353] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 318.007778][T11353] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 318.032719][T11353] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 318.441358][T11385] openvswitch: netlink: Flow key attribute not present in set flow. [ 318.566048][T11387] netlink: 'syz.3.1408': attribute type 3 has an invalid length. [ 318.569471][T11390] netlink: 'syz.0.1410': attribute type 1 has an invalid length. [ 318.590757][T11390] __nla_validate_parse: 7 callbacks suppressed [ 318.590778][T11390] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1410'. [ 318.608313][T11390] netlink: 'syz.0.1410': attribute type 1 has an invalid length. [ 318.608341][T11387] netlink: 'syz.3.1408': attribute type 3 has an invalid length. [ 318.940823][T11413] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.1417'. [ 318.974935][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1417'. [ 318.987429][T11421] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.1417'. [ 319.021785][T11421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1417'. [ 319.025299][T11413] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1417'. [ 319.148251][T11408] nbd4: detected capacity change from 0 to 63 [ 319.169152][T11422] block nbd4: NBD_DISCONNECT [ 319.177272][T11422] block nbd4: Disconnected due to user request. [ 319.193247][T11422] block nbd4: shutting down sockets [ 319.227066][T11408] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1415'. [ 319.243569][T11408] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 319.349291][T11439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1425'. [ 319.393113][T11440] : entered promiscuous mode [ 319.571010][T11459] netlink: 'syz.4.1430': attribute type 10 has an invalid length. [ 319.602894][T11459] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1430'. [ 319.813800][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'. [ 320.428509][T11508] netlink: 'syz.1.1437': attribute type 1 has an invalid length. [ 320.542317][T11508] 8021q: adding VLAN 0 to HW filter on device bond9 [ 320.562476][T11514] bond9: (slave gretap3): making interface the new active one [ 320.572765][T11514] bond9: (slave gretap3): Enslaving as an active interface with an up link [ 321.131530][T11536] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 321.137825][T11536] syzkaller0: linktype set to 1 [ 321.412916][T11557] netlink: 'syz.3.1453': attribute type 5 has an invalid length. [ 321.610234][T11574] netlink: 'syz.0.1457': attribute type 12 has an invalid length. [ 321.627694][T11574] netlink: 'syz.0.1457': attribute type 12 has an invalid length. [ 321.723518][T11578] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 321.883370][T11590] netlink: 'syz.0.1461': attribute type 11 has an invalid length. [ 322.247479][T11601] syzkaller0: entered promiscuous mode [ 322.253205][T11601] syzkaller0: entered allmulticast mode [ 322.552895][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.530520][T11670] netlink: 'syz.3.1484': attribute type 1 has an invalid length. [ 324.641706][T11676] __nla_validate_parse: 5 callbacks suppressed [ 324.641729][T11676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1485'. [ 324.666269][T11670] 8021q: adding VLAN 0 to HW filter on device bond7 [ 324.733464][T11673] gretap2: entered promiscuous mode [ 324.743443][T11673] bond7: (slave gretap2): making interface the new active one [ 324.753561][T11673] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 324.775181][T11679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1485'. [ 324.808226][T11659] lo speed is unknown, defaulting to 1000 [ 324.831662][T11676] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 324.848548][T11685] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1487'. [ 324.878022][T11659] lo speed is unknown, defaulting to 1000 [ 324.962448][T11681] lo speed is unknown, defaulting to 1000 [ 324.970561][T11681] lo speed is unknown, defaulting to 1000 [ 325.095835][T11695] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1490'. [ 325.151730][T11698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1491'. [ 325.173708][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1490'. [ 325.224298][T11700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1490'. [ 325.234099][T11700] netlink: 'syz.1.1490': attribute type 6 has an invalid length. [ 325.309150][T11698] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 325.423567][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1490'. [ 325.466625][T11700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1490'. [ 325.502753][T11700] netlink: 'syz.1.1490': attribute type 6 has an invalid length. [ 325.776550][T11730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1498'. [ 325.842296][T11719] ip6gretap0: entered allmulticast mode [ 326.026343][T11742] netlink: 'syz.4.1502': attribute type 12 has an invalid length. [ 326.705638][T11762] lo speed is unknown, defaulting to 1000 [ 326.751087][T11759] netlink: 'syz.4.1509': attribute type 13 has an invalid length. [ 326.852063][T11762] lo speed is unknown, defaulting to 1000 [ 327.047519][T11759] netlink: 'syz.4.1509': attribute type 17 has an invalid length. [ 327.406914][T11759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 328.126903][T11760] lo speed is unknown, defaulting to 1000 [ 328.334057][T11760] lo speed is unknown, defaulting to 1000 [ 330.172412][T11801] __nla_validate_parse: 2 callbacks suppressed [ 330.172446][T11801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1517'. [ 330.795426][T11799] xfrm1: entered allmulticast mode [ 331.852840][T11823] netlink: 'syz.3.1522': attribute type 1 has an invalid length. [ 332.062059][T11828] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1524'. [ 332.067551][T11830] netlink: 'syz.3.1523': attribute type 2 has an invalid length. [ 332.096292][T11830] netlink: 1184 bytes leftover after parsing attributes in process `syz.3.1523'. [ 332.176487][T11833] lo speed is unknown, defaulting to 1000 [ 332.185560][T11833] lo speed is unknown, defaulting to 1000 [ 332.246277][T11841] tipc: Disabling bearer [ 332.295056][T11841] veth0_virt_wifi: renamed from vlan0 [ 332.353144][T11830] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1523'. [ 332.573666][T11859] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1531'. [ 332.594247][T11860] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1531'. [ 332.636892][T11863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1532'. [ 332.896770][T11875] netlink: 'syz.0.1534': attribute type 1 has an invalid length. [ 332.965129][T11879] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.507320][T11895] lo speed is unknown, defaulting to 1000 [ 333.609201][T11895] lo speed is unknown, defaulting to 1000 [ 333.802451][T11919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1542'. [ 333.932604][T11925] tipc: Enabled bearer , priority 0 [ 333.939672][T11926] netlink: 'syz.0.1546': attribute type 3 has an invalid length. [ 333.940779][T11921] syzkaller0: entered promiscuous mode [ 333.967114][T11921] syzkaller0: entered allmulticast mode [ 334.067205][T11921] tipc: Resetting bearer [ 334.243246][T11918] tipc: Resetting bearer [ 334.279382][T11918] tipc: Disabling bearer [ 334.521478][T11951] netlink: 'syz.3.1551': attribute type 25 has an invalid length. [ 334.531768][T11953] openvswitch: netlink: Tunnel attr 1 has unexpected len 3 expected 4 [ 334.586430][T11955] netlink: ct family unspecified [ 334.606575][T11955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.749424][T11962] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1555'. [ 335.491820][T12015] netlink: 'syz.3.1570': attribute type 2 has an invalid length. [ 335.522608][T12017] bond0: (slave 0!): Releasing backup interface [ 335.535316][T12017] !: left promiscuous mode [ 335.566489][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1572'. [ 335.581081][T12017] bond0: (slave bond_slave_0): Releasing backup interface [ 335.605433][T12017] bond_slave_0: left promiscuous mode [ 335.615658][T12017] bond0: (slave bond_slave_1): Releasing backup interface [ 335.633655][T12017] bond_slave_1: left promiscuous mode [ 335.665031][T12017] team0: Port device team_slave_0 removed [ 335.682699][T12017] team0: Port device team_slave_1 removed [ 335.723227][T12015] þ: entered promiscuous mode [ 335.742269][T12031] netlink: 'syz.2.1573': attribute type 13 has an invalid length. [ 335.787051][T12022] veth5: entered promiscuous mode [ 335.926367][T12030] team0: Failed to send options change via netlink (err -105) [ 335.936777][T12030] team0: Mode changed to "activebackup" [ 335.955499][T12032] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1572'. [ 336.117019][T12040] netlink: 'syz.0.1575': attribute type 1 has an invalid length. [ 336.772583][T12064] lo speed is unknown, defaulting to 1000 [ 336.793862][T12064] lo speed is unknown, defaulting to 1000 [ 336.927650][T12074] bond0: (slave ipvlan6): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 336.944746][T12074] bond0: (slave ipvlan6): The slave device specified does not support setting the MAC address [ 336.987091][T12074] bond0: (slave ipvlan6): Error -95 calling set_mac_address [ 337.081462][T12081] tipc: Enabling of bearer rejected, failed to enable media [ 337.614428][T12103] netlink: 'syz.4.1588': attribute type 4 has an invalid length. [ 337.656726][ T7799] lo speed is unknown, defaulting to 1000 [ 337.674638][ T7799] syz2: Port: 1 Link DOWN [ 337.750393][T12107] syzkaller1: entered promiscuous mode [ 337.755931][T12107] syzkaller1: entered allmulticast mode [ 337.819048][T12110] netlink: 'syz.1.1591': attribute type 1 has an invalid length. [ 337.834710][T12110] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1591'. [ 337.847319][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1593'. [ 337.929643][T12124] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 337.931382][T12110] batadv1: entered promiscuous mode [ 337.948066][T12110] batadv1: entered allmulticast mode [ 338.107411][T12128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1597'. [ 338.153064][T12128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1597'. [ 338.167476][T12110] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1591'. [ 338.401678][T12150] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 338.409019][T12150] IPv6: NLM_F_CREATE should be set when creating new route [ 338.434568][T12153] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1604'. [ 338.444157][T12151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 338.633774][T12147] lo speed is unknown, defaulting to 1000 [ 338.652424][T12155] lo speed is unknown, defaulting to 1000 [ 338.670641][T12155] lo speed is unknown, defaulting to 1000 [ 338.712103][T12167] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 338.744980][T12164] netlink: 'syz.3.1607': attribute type 7 has an invalid length. [ 338.759895][T12147] lo speed is unknown, defaulting to 1000 [ 339.021629][T12180] macvlan0: left allmulticast mode [ 339.028775][T12180] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 339.037442][T12180] ipvlan3: left promiscuous mode [ 339.046031][T12180] ip6gretap1: left promiscuous mode [ 339.052245][T12180] hsr1: left allmulticast mode [ 339.057177][T12180] batadv_slave_0: left allmulticast mode [ 339.077818][T12180] tipc: Resetting bearer [ 339.097351][T12180] syzkaller0: left promiscuous mode [ 339.122903][T12180] syzkaller0: left allmulticast mode [ 339.158543][T12180] ipvlan5: left allmulticast mode [ 339.178297][T12180] bond5: left allmulticast mode [ 339.211227][T12180] veth3: left promiscuous mode [ 339.256853][T12180] gretap2: left promiscuous mode [ 339.294583][T12175] lo speed is unknown, defaulting to 1000 [ 339.374773][T12175] lo speed is unknown, defaulting to 1000 [ 339.467197][T12190] netlink: 'syz.2.1612': attribute type 10 has an invalid length. [ 339.477297][T12190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1612'. [ 339.548456][T12190] team0: Port device geneve0 added [ 339.554743][ T6583] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.571942][ T6583] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.609206][ T6583] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.722037][ T6583] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.827611][T12203] bond0: Unable to set up delay as MII monitoring is disabled [ 339.856359][T12203] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1616'. [ 340.665320][T12236] syzkaller1: entered promiscuous mode [ 340.682786][T12236] syzkaller1: entered allmulticast mode [ 340.919495][T12243] __nla_validate_parse: 2 callbacks suppressed [ 340.919517][T12243] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1629'. [ 340.988069][T12253] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1631'. [ 341.100598][T12253] netlink: 'syz.0.1631': attribute type 1 has an invalid length. [ 341.254525][T12261] lo speed is unknown, defaulting to 1000 [ 341.272171][T12261] lo speed is unknown, defaulting to 1000 [ 341.386076][T12269] bond0: (slave ip_vti0): Error: Device type is different from other slaves [ 341.406614][T12269] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1635'. [ 341.543860][T12273] netlink: 'syz.4.1635': attribute type 25 has an invalid length. [ 341.709652][T12284] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1639'. [ 341.796346][T12289] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 341.818757][T12282] lo speed is unknown, defaulting to 1000 [ 341.827246][T12282] lo speed is unknown, defaulting to 1000 [ 341.952185][T12297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.128612][T12261] netlink: 'syz.3.1633': attribute type 13 has an invalid length. [ 342.200322][T12309] netlink: 'syz.0.1646': attribute type 1 has an invalid length. [ 342.292256][T12261] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 343.060081][T12335] sit0: entered promiscuous mode [ 343.071234][T12335] netlink: 'syz.0.1649': attribute type 1 has an invalid length. [ 343.082728][T12335] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1649'. [ 343.105200][T12348] netlink: 'syz.3.1652': attribute type 29 has an invalid length. [ 343.213925][T12354] veth2: entered allmulticast mode [ 343.305907][T12363] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 343.372165][T12363] team0: Port device macvlan0 removed [ 343.427767][T12363] bond7: (slave gretap2): Releasing active interface [ 343.459072][T12369] netlink: 'syz.3.1657': attribute type 10 has an invalid length. [ 343.474327][T12365] netlink: 'syz.0.1656': attribute type 1 has an invalid length. [ 343.498615][T12365] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1656'. [ 343.540860][T12369] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 343.550626][T12369] bond0: (slave wlan1): refused to change device type [ 343.601913][T12377] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1659'. [ 343.873023][T12392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1665'. [ 343.906948][T12392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1665'. [ 343.946222][T12395] xt_policy: too many policy elements [ 344.333438][T12407] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1671'. [ 344.595676][T12426] netlink: 'syz.1.1675': attribute type 4 has an invalid length. [ 344.721212][T12431] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 344.755366][T12431] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 344.861383][T12431] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 344.892699][T12431] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 345.006111][T12431] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 345.042491][T12431] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 345.236037][T12431] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 345.283917][T12431] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 345.366325][T12441] lo speed is unknown, defaulting to 1000 [ 345.404590][T12441] lo speed is unknown, defaulting to 1000 [ 345.770364][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 345.790560][ T36] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 345.818740][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 345.828458][ T36] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 345.882915][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 345.897985][ T49] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 346.036002][ T6580] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 346.045758][ T6580] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 346.142123][T12468] ip6gre1: entered promiscuous mode [ 346.551913][T12492] __nla_validate_parse: 5 callbacks suppressed [ 346.551933][T12492] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1690'. [ 346.581372][T12492] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1690'. [ 346.619942][T12495] IPv6: sit2: Disabled Multicast RS [ 346.627382][T12496] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 346.640508][T12495] sit2: entered allmulticast mode [ 346.863696][T12509] netlink: 29463 bytes leftover after parsing attributes in process `syz.4.1697'. [ 347.436093][T12534] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1704'. [ 347.584350][T12539] lo speed is unknown, defaulting to 1000 [ 347.614860][T12539] lo speed is unknown, defaulting to 1000 [ 347.694316][T12543] netlink: 788 bytes leftover after parsing attributes in process `syz.4.1707'. [ 348.119287][T12553] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1709'. [ 348.128941][T12553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1709'. [ 348.348296][T12563] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1712'. [ 348.574078][T12552] bond0 (unregistering): left promiscuous mode [ 348.581162][T12552] bond_slave_0: left promiscuous mode [ 348.586913][T12552] bond_slave_1: left promiscuous mode [ 348.599534][T12552] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.616604][T12552] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.634815][T12552] bond0 (unregistering): Released all slaves [ 348.667067][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1710'. [ 348.690024][T12539] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1705'. [ 348.700399][T12539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.051737][T12577] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 349.661352][T12587] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 349.674267][T12587] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 349.697721][T12587] hsr0: left allmulticast mode [ 349.707105][T12587] hsr_slave_0: left allmulticast mode [ 349.718149][T12587] hsr_slave_1: left allmulticast mode [ 349.893483][ T36] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.926618][ T36] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.956936][ T36] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.977473][ T36] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.003782][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.044724][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.053598][ T36] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.062492][ T58] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.190717][T12607] lo speed is unknown, defaulting to 1000 [ 350.250764][T12607] lo speed is unknown, defaulting to 1000 [ 350.343155][T12609] lo speed is unknown, defaulting to 1000 [ 350.505532][T12609] lo speed is unknown, defaulting to 1000 [ 350.575764][T12629] syzkaller1: entered promiscuous mode [ 350.582397][T12629] syzkaller1: entered allmulticast mode [ 350.612914][T12630] raw_sendmsg: syz.4.1730 forgot to set AF_INET. Fix it! [ 351.171563][T12607] netlink: 'syz.2.1724': attribute type 13 has an invalid length. [ 351.179944][T12607] netlink: 'syz.2.1724': attribute type 17 has an invalid length. [ 351.203421][T12607] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 351.249498][T12648] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 351.288253][T12648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.889279][T12660] __nla_validate_parse: 12 callbacks suppressed [ 351.889301][T12660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1738'. [ 352.064676][T12662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1739'. [ 352.233473][T12666] netlink: 'syz.2.1741': attribute type 12 has an invalid length. [ 353.272303][T12714] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1755'. [ 353.413643][T12715] lo speed is unknown, defaulting to 1000 [ 353.424297][T12717] netlink: 'syz.0.1756': attribute type 3 has an invalid length. [ 353.455191][T12715] lo speed is unknown, defaulting to 1000 [ 353.597094][T12723] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 353.602903][T12717] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 353.627686][T12720] sit0: left promiscuous mode [ 353.630836][T12723] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1758'. [ 353.692835][T12720] bond0: left promiscuous mode [ 353.701858][T12720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.737206][T12720] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.785074][T12720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 353.842900][ T6034] lo speed is unknown, defaulting to 1000 [ 353.848950][ T6034] syz1: Port: 1 Link ACTIVE [ 353.957415][T12716] syz_tun: left allmulticast mode [ 354.101434][T12712] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1754'. [ 354.187847][T12733] bond0: entered promiscuous mode [ 355.231475][T12769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1768'. [ 355.502153][T12782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1772'. [ 355.531400][T12779] tipc: Enabled bearer , priority 0 [ 356.056782][T12802] syzkaller1: entered promiscuous mode [ 356.068201][T12802] syzkaller1: entered allmulticast mode [ 356.133445][T12806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.165319][T12802] lo speed is unknown, defaulting to 1000 [ 356.177603][T12802] lo speed is unknown, defaulting to 1000 [ 356.429682][T12814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.541205][T12824] netlink: 'syz.2.1787': attribute type 1 has an invalid length. [ 356.588214][T12822] syzkaller0: entered promiscuous mode [ 356.593798][T12822] syzkaller0: entered allmulticast mode [ 356.674817][ T981] tipc: Node number set to 934996504 [ 356.886398][T12840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1793'. [ 357.001521][T12848] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 357.029827][T12851] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 357.041302][T12851] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 357.152074][T12848] lo speed is unknown, defaulting to 1000 [ 357.234299][T12848] lo speed is unknown, defaulting to 1000 [ 357.342410][T12866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1801'. [ 357.567154][T12880] sctp: [Deprecated]: syz.1.1802 (pid 12880) Use of int in max_burst socket option. [ 357.567154][T12880] Use struct sctp_assoc_value instead [ 358.343816][T12901] lo speed is unknown, defaulting to 1000 [ 358.441157][T12901] lo speed is unknown, defaulting to 1000 [ 358.641319][T12914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1814'. [ 358.656320][T12911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1813'. [ 358.673691][T12913] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1814'. [ 358.767580][T12914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1814'. [ 358.813295][T12913] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1814'. [ 359.072059][T12924] netlink: 'syz.2.1815': attribute type 1 has an invalid length. [ 359.137374][T12924] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 359.267851][T12935] netlink: 'syz.1.1816': attribute type 6 has an invalid length. [ 359.496480][T12941] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1819'. [ 359.528739][T12943] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1820'. [ 359.656407][T12950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1823'. [ 359.716104][T12950] openvswitch: netlink: Flow key attr not present in new flow. [ 359.909426][T12966] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1829'. [ 360.006202][T12972] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 360.171788][T12985] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 360.246784][T12985] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 360.293102][T13000] netlink: 'syz.3.1837': attribute type 1 has an invalid length. [ 360.346725][T13000] netlink: 'syz.3.1837': attribute type 1 has an invalid length. [ 360.541717][T13018] netlink: 'syz.0.1841': attribute type 10 has an invalid length. [ 360.568339][T13020] netlink: 'syz.0.1841': attribute type 10 has an invalid length. [ 360.578204][T13018] macvlan0: entered promiscuous mode [ 360.623898][T13018] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 360.865811][T13041] sctp: [Deprecated]: syz.0.1846 (pid 13041) Use of int in maxseg socket option. [ 360.865811][T13041] Use struct sctp_assoc_value instead [ 360.929503][T13042] netlink: 'syz.4.1847': attribute type 1 has an invalid length. [ 361.110945][T13056] netlink: 'syz.0.1850': attribute type 1 has an invalid length. [ 361.128355][T13056] block nbd3: Unsupported socket: shutdown callout must be supported. [ 361.391494][T13078] openvswitch: netlink: Flow key attr not present in new flow. [ 361.462594][T13078] IPv6: Can't replace route, no match found [ 361.563148][T13084] netlink: 'syz.2.1859': attribute type 1 has an invalid length. [ 362.169926][T13112] 8021q: adding VLAN 0 to HW filter on device bond6 [ 362.310894][T13124] netlink: 'syz.0.1870': attribute type 1 has an invalid length. [ 362.585097][T13139] __nla_validate_parse: 11 callbacks suppressed [ 362.585120][T13139] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1878'. [ 362.647799][T13139] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1878'. [ 362.691508][T13139] netlink: 'syz.2.1878': attribute type 5 has an invalid length. [ 362.728435][T13139] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1878'. [ 363.197508][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1881'. [ 364.395584][T13178] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 364.431315][T13170] syzkaller1: entered promiscuous mode [ 364.450747][T13170] syzkaller1: entered allmulticast mode [ 364.755307][T13187] lo speed is unknown, defaulting to 1000 [ 364.772450][T13187] lo speed is unknown, defaulting to 1000 [ 364.824256][T13203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1889'. [ 364.847384][T13207] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 364.853480][T13207] pim6reg0: linktype set to 774 [ 365.092516][T13221] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1893'. [ 365.148768][T13221] 8021q: VLANs not supported on ip6tnl0 [ 365.276222][T13234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.291773][T13237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.411079][T13243] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1897'. [ 365.497034][T13239] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1897'. [ 365.511807][T13239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1897'. [ 365.711918][T13253] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 365.737137][T13253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1902'. [ 365.787596][T13253] pim6reg: entered allmulticast mode [ 365.869882][T13253] pim6reg: left allmulticast mode [ 366.184547][T13276] lo speed is unknown, defaulting to 1000 [ 366.194172][T13276] lo speed is unknown, defaulting to 1000 [ 366.492072][T13288] tipc: Enabled bearer , priority 0 [ 366.531244][T13288] syzkaller0: entered promiscuous mode [ 366.536963][T13288] syzkaller0: entered allmulticast mode [ 366.729420][T13295] tipc: Resetting bearer [ 366.794273][T13286] tipc: Resetting bearer [ 366.812109][T13286] tipc: Disabling bearer [ 367.532704][T13340] netlink: 'syz.4.1927': attribute type 4 has an invalid length. [ 367.542935][T13345] tun0: tun_chr_ioctl cmd 1074025675 [ 367.553052][T13345] tun0: persist enabled [ 367.565365][T13345] tun0: tun_chr_ioctl cmd 1074025675 [ 367.578176][T13345] tun0: persist enabled [ 367.664490][T13347] __nla_validate_parse: 31 callbacks suppressed [ 367.664513][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1929'. [ 367.687570][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1930'. [ 367.961401][T13360] lo speed is unknown, defaulting to 1000 [ 367.979169][T13360] lo speed is unknown, defaulting to 1000 [ 368.259036][T13373] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1936'. [ 368.359008][T13380] IPVS: stopping backup sync thread 13178 ... [ 368.487621][T13383] lo speed is unknown, defaulting to 1000 [ 368.508835][T13383] lo speed is unknown, defaulting to 1000 [ 368.634522][T13387] lo speed is unknown, defaulting to 1000 [ 368.707855][T13387] lo speed is unknown, defaulting to 1000 [ 368.833312][T13397] sctp: [Deprecated]: syz.4.1943 (pid 13397) Use of int in max_burst socket option. [ 368.833312][T13397] Use struct sctp_assoc_value instead [ 368.849250][T13397] IPVS: length: 158 != 8 [ 369.646140][T13425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1951'. [ 370.107771][T13446] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1957'. [ 370.260566][T13446] lo speed is unknown, defaulting to 1000 [ 370.268311][T13446] lo speed is unknown, defaulting to 1000 [ 370.429934][T13454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1960'. [ 370.734072][T13458] pim6reg1: entered allmulticast mode [ 370.817310][T13460] syzkaller0: entered promiscuous mode [ 370.826113][T13460] syzkaller0: entered allmulticast mode [ 370.961006][T13467] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1965'. [ 371.104112][T13469] lo speed is unknown, defaulting to 1000 [ 371.169851][T13469] lo speed is unknown, defaulting to 1000 [ 371.202686][T13478] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1968'. [ 371.358700][T13482] bpq0: left allmulticast mode [ 371.781366][T13485] lo speed is unknown, defaulting to 1000 [ 371.794261][T13485] lo speed is unknown, defaulting to 1000 [ 371.943096][T13495] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.966845][T13495] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.084905][T13495] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.107343][T13495] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.144183][T13502] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1972'. [ 372.243754][T13511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1973'. [ 372.270139][T13495] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.284290][T13495] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.480608][T13495] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.494729][T13495] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.634465][ T6583] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.647033][ T6583] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.669299][T13522] netlink: 'syz.0.1977': attribute type 10 has an invalid length. [ 372.738091][ T6583] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.756062][ T6583] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.783271][ T6583] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.811099][ T6583] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.850992][ T6583] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.863798][ T6583] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.901568][T13527] __nla_validate_parse: 1 callbacks suppressed [ 372.901588][T13527] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1978'. [ 372.926944][T13534] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1980'. [ 372.988997][T13534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1980'. [ 373.227115][T13560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1986'. [ 373.251353][T13560] tipc: Enabled bearer , priority 18 [ 373.348691][T13569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1990'. [ 373.378418][T13569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1990'. [ 373.589859][T13580] tipc: Enabled bearer , priority 0 [ 373.609533][T13580] syzkaller0: entered promiscuous mode [ 373.630498][T13580] syzkaller0: entered allmulticast mode [ 373.936615][T13593] tipc: Resetting bearer [ 374.030305][T13599] netlink: 'syz.3.1999': attribute type 14 has an invalid length. [ 374.372217][T13579] tipc: Resetting bearer [ 374.409443][T13579] tipc: Disabling bearer [ 374.595827][T13615] macsec1: entered allmulticast mode [ 374.648227][T13615] bond0: entered allmulticast mode [ 374.657469][T13615] bond0: left allmulticast mode [ 375.025619][T13625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2005'. [ 375.043025][T13621] lo speed is unknown, defaulting to 1000 [ 375.043717][T13623] netlink: zone id is out of range [ 375.069672][T13623] netlink: zone id is out of range [ 375.087231][T13621] lo speed is unknown, defaulting to 1000 [ 375.090305][T13623] netlink: zone id is out of range [ 375.113815][T13624] netlink: zone id is out of range [ 375.132235][T13623] netlink: zone id is out of range [ 375.132334][T13624] netlink: zone id is out of range [ 375.228362][T13624] netlink: zone id is out of range [ 375.252641][T13624] netlink: zone id is out of range [ 375.255710][T13623] netlink: set zone limit has 4 unknown bytes [ 375.300211][T13628] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2007'. [ 375.361611][T13624] netlink: set zone limit has 4 unknown bytes [ 375.651808][T13634] bond0: option primary_reselect: invalid value (17) [ 375.967004][T13645] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2013'. [ 376.230186][T13658] netlink: 428 bytes leftover after parsing attributes in process `syz.1.2016'. [ 376.357640][T13660] netlink: 'syz.4.2017': attribute type 1 has an invalid length. [ 376.412035][T13660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.819987][T13681] netlink: 'syz.4.2024': attribute type 1 has an invalid length. [ 376.871067][T13683] wg1: entered promiscuous mode [ 376.876066][T13683] wg1: entered allmulticast mode [ 376.922286][T13686] netlink: 'syz.0.2025': attribute type 3 has an invalid length. [ 377.336957][T13701] netlink: 'syz.3.2031': attribute type 4 has an invalid length. [ 377.802037][T13704] ip6gretap0: left allmulticast mode [ 377.862116][T13704] gtp0: left promiscuous mode [ 377.871230][T13704] gtp0: left allmulticast mode [ 377.893442][T13704] bridge2: left promiscuous mode [ 377.900567][T13704] ip6gre1: left promiscuous mode [ 377.964013][ T58] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.027324][ T58] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.041905][T13724] netlink: 'syz.0.2040': attribute type 1 has an invalid length. [ 378.058919][ T58] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.075344][ T58] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.102360][ T58] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.115248][ T58] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.127192][ T58] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.136105][ T58] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.286390][T13739] vlan0: entered allmulticast mode [ 378.293447][T13739] bridge_slave_0: entered allmulticast mode [ 378.363156][T13745] netlink: 'syz.1.2043': attribute type 2 has an invalid length. [ 378.374194][T13745] __nla_validate_parse: 5 callbacks suppressed [ 378.374215][T13745] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2043'. [ 378.422577][T13739] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2042'. [ 378.584809][T13757] netlink: 'syz.4.2046': attribute type 1 has an invalid length. [ 378.664079][T13757] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 378.789501][T13773] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2050'. [ 378.793558][T13776] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2052'. [ 378.930738][T13785] netlink: 'syz.3.2054': attribute type 1 has an invalid length. [ 378.967129][T13785] netlink: 'syz.3.2054': attribute type 2 has an invalid length. [ 379.451588][T13813] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2062'. [ 379.454605][T13814] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2061'. [ 379.639548][T13823] pimreg: entered allmulticast mode [ 379.654665][T13817] syzkaller1: entered promiscuous mode [ 379.679790][T13817] syzkaller1: entered allmulticast mode [ 379.724626][T13825] ip6gre2: entered promiscuous mode [ 379.737685][T13835] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2065'. [ 379.748500][T13835] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2065'. [ 379.758528][T13835] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2065'. [ 379.771729][T13835] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2065'. [ 379.813907][T13823] pimreg: left allmulticast mode [ 380.304878][T13863] lo speed is unknown, defaulting to 1000 [ 380.335581][T13863] lo speed is unknown, defaulting to 1000 [ 381.842104][T13935] netlink: 'syz.3.2094': attribute type 10 has an invalid length. [ 381.854375][T13935] netlink: 'syz.3.2094': attribute type 10 has an invalid length. [ 381.880466][T13935] team0: Port device dummy0 added [ 382.211163][T13948] Bluetooth: MGMT ver 1.23 [ 382.419453][T13954] netlink: 'syz.2.2101': attribute type 7 has an invalid length. [ 382.572329][T13956] netlink: 'syz.1.2092': attribute type 1 has an invalid length. [ 382.594654][T13956] netlink: 'syz.1.2092': attribute type 1 has an invalid length. [ 382.772755][T13964] sctp: [Deprecated]: syz.0.2103 (pid 13964) Use of int in max_burst socket option deprecated. [ 382.772755][T13964] Use struct sctp_assoc_value instead [ 383.104869][T13979] IPv6: NLM_F_CREATE should be specified when creating new route [ 383.874768][T14031] tipc: Enabling of bearer rejected, already enabled [ 383.884854][T14031] syzkaller0: entered promiscuous mode [ 383.892927][T14031] syzkaller0: entered allmulticast mode [ 383.955569][T14034] validate_nla: 1 callbacks suppressed [ 383.955592][T14034] netlink: 'syz.2.2125': attribute type 1 has an invalid length. [ 383.993947][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 384.003339][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.122138][T14039] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 384.246578][T14034] veth7: entered promiscuous mode [ 384.287419][T14034] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 384.353072][T14034] __nla_validate_parse: 43 callbacks suppressed [ 384.353096][T14034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2125'. [ 384.400796][T14059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2130'. [ 384.433035][T14064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2132'. [ 384.453360][T14064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2132'. [ 384.501577][T14059] bond0: (slave macvlan0): Releasing backup interface [ 384.694845][T14059] tipc: Disabling bearer [ 384.730107][T14034] 8021q: adding VLAN 0 to HW filter on device bond3 [ 384.737103][ T6576] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 384.865428][ T6580] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 385.015830][T14076] can: request_module (can-proto-5) failed. [ 385.223914][T14096] sctp: [Deprecated]: syz.3.2137 (pid 14096) Use of struct sctp_assoc_value in delayed_ack socket option. [ 385.223914][T14096] Use struct sctp_sack_info instead [ 385.257718][T14098] siw: device registration error -23 [ 385.287131][T14101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2141'. [ 385.337801][T14101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2141'. [ 385.492609][T14106] tipc: Enabled bearer , priority 0 [ 385.600642][T14106] syzkaller0: entered promiscuous mode [ 385.606338][T14106] syzkaller0: entered allmulticast mode [ 385.615033][T14106] tipc: Resetting bearer [ 385.622780][T14113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2146'. [ 385.741414][T14115] lo speed is unknown, defaulting to 1000 [ 385.762508][T14105] tipc: Resetting bearer [ 386.316869][T14153] syz.1.2157: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 386.380264][T14153] CPU: 0 UID: 0 PID: 14153 Comm: syz.1.2157 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 386.380321][T14153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 386.380349][T14153] Call Trace: [ 386.380365][T14153] [ 386.380376][T14153] dump_stack_lvl+0x189/0x250 [ 386.380413][T14153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.380439][T14153] ? __pfx__printk+0x10/0x10 [ 386.380470][T14153] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 386.380496][T14153] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 386.380524][T14153] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 386.380559][T14153] warn_alloc+0x214/0x310 [ 386.380593][T14153] ? stack_depot_save_flags+0x40/0x860 [ 386.380625][T14153] ? __pfx_warn_alloc+0x10/0x10 [ 386.380659][T14153] ? kasan_save_track+0x4f/0x80 [ 386.380686][T14153] ? xskq_create+0x56/0x170 [ 386.380712][T14153] ? xsk_init_queue+0xb0/0x110 [ 386.380734][T14153] ? xsk_setsockopt+0x4dc/0x8d0 [ 386.380757][T14153] ? do_sock_setsockopt+0x17c/0x1b0 [ 386.380775][T14153] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 386.380793][T14153] ? do_syscall_64+0xfa/0x3b0 [ 386.380821][T14153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.380850][T14153] __vmalloc_node_range_noprof+0x125/0x12f0 [ 386.380919][T14153] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 386.380950][T14153] ? xskq_create+0x56/0x170 [ 386.380981][T14153] ? __kasan_kmalloc+0x93/0xb0 [ 386.381014][T14153] vmalloc_user_noprof+0xad/0xf0 [ 386.381045][T14153] ? xskq_create+0xbf/0x170 [ 386.381073][T14153] xskq_create+0xbf/0x170 [ 386.381104][T14153] xsk_init_queue+0xb0/0x110 [ 386.381134][T14153] xsk_setsockopt+0x4dc/0x8d0 [ 386.381164][T14153] ? __pfx_xsk_setsockopt+0x10/0x10 [ 386.381189][T14153] ? __pfx_aa_sk_perm+0x10/0x10 [ 386.381224][T14153] ? aa_sock_opt_perm+0xff/0x1b0 [ 386.381247][T14153] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 386.381270][T14153] ? __pfx_xsk_setsockopt+0x10/0x10 [ 386.381297][T14153] do_sock_setsockopt+0x17c/0x1b0 [ 386.381323][T14153] __x64_sys_setsockopt+0x13f/0x1b0 [ 386.381350][T14153] do_syscall_64+0xfa/0x3b0 [ 386.381386][T14153] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.381414][T14153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.381435][T14153] ? clear_bhb_loop+0x60/0xb0 [ 386.381462][T14153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.381487][T14153] RIP: 0033:0x7fe0a038ebe9 [ 386.381508][T14153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.381526][T14153] RSP: 002b:00007fe0a1296038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 386.381549][T14153] RAX: ffffffffffffffda RBX: 00007fe0a05b6090 RCX: 00007fe0a038ebe9 [ 386.381564][T14153] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 386.381577][T14153] RBP: 00007fe0a0411e19 R08: 0000000000000004 R09: 0000000000000000 [ 386.381590][T14153] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.381603][T14153] R13: 00007fe0a05b6128 R14: 00007fe0a05b6090 R15: 00007fff4bcdf128 [ 386.381639][T14153] [ 386.381652][T14153] Mem-Info: [ 386.696989][ T981] tipc: Node number set to 3275100725 [ 386.703050][T14153] active_anon:6729 inactive_anon:0 isolated_anon:0 [ 386.703050][T14153] active_file:3425 inactive_file:39937 isolated_file:0 [ 386.703050][T14153] unevictable:768 dirty:72 writeback:0 [ 386.703050][T14153] slab_reclaimable:12428 slab_unreclaimable:179589 [ 386.703050][T14153] mapped:31194 shmem:1359 pagetables:997 [ 386.703050][T14153] sec_pagetables:0 bounce:0 [ 386.703050][T14153] kernel_misc_reclaimable:0 [ 386.703050][T14153] free:1243847 free_pcp:12367 free_cma:0 [ 386.750312][T14153] Node 0 active_anon:26916kB inactive_anon:0kB active_file:13700kB inactive_file:159544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124776kB dirty:284kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13560kB pagetables:3844kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 386.782463][T14153] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 386.813717][T14153] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 386.844222][T14153] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 386.850550][T14153] Node 0 DMA32 free:1065268kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26872kB inactive_anon:0kB active_file:13700kB inactive_file:157980kB unevictable:1536kB writepending:284kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:35124kB local_pcp:25804kB free_cma:0kB [ 386.885495][T14153] lowmem_reserve[]: 0 0 1 1 1 [ 386.890530][T14153] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 386.921775][T14153] lowmem_reserve[]: 0 0 0 0 0 [ 386.926659][T14153] Node 1 Normal free:3894736kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14368kB local_pcp:6912kB free_cma:0kB [ 386.960243][T14153] lowmem_reserve[]: 0 0 0 0 0 [ 386.965201][T14153] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 386.985166][T14153] Node 0 DMA32: 3235*4kB (UME) 1527*8kB (UM) 217*16kB (UME) 89*32kB (UME) 130*64kB (UM) 112*128kB (UME) 48*256kB (UM) 9*512kB (UM) 3*1024kB (U) 8*2048kB (UME) 238*4096kB (UM) = 1065332kB [ 387.004469][T14153] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 387.016928][T14153] Node 1 Normal: 210*4kB (UME) 45*8kB (UME) 50*16kB (UME) 130*32kB (UME) 51*64kB (UME) 6*128kB (UME) 4*256kB (UM) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3894736kB [ 387.035413][T14153] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 387.045559][T14153] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 387.055254][T14153] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 387.065223][T14153] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 387.078943][T14153] 44718 total pagecache pages [ 387.084066][T14153] 0 pages in swap cache [ 387.088711][T14153] Free swap = 124996kB [ 387.092988][T14153] Total swap = 124996kB [ 387.097230][T14153] 2097051 pages RAM [ 387.101533][T14153] 0 pages HighMem/MovableOnly [ 387.106882][T14153] 425656 pages reserved [ 387.114762][T14153] 0 pages cma reserved [ 388.262569][T14105] tipc: Disabling bearer [ 388.273149][T14115] lo speed is unknown, defaulting to 1000 [ 388.435858][T14170] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.639324][T14175] tipc: Enabled bearer , priority 0 [ 388.646406][T14178] !: renamed from dummy0 (while UP) [ 388.810477][T14184] syzkaller0: entered promiscuous mode [ 388.830612][T14184] syzkaller0: entered allmulticast mode [ 388.847028][T14184] tipc: Resetting bearer [ 388.889910][T14185] tipc: Enabling of bearer rejected, already enabled [ 388.945607][T14166] tipc: Resetting bearer [ 390.405601][T14166] tipc: Disabling bearer [ 390.529270][T14202] lo speed is unknown, defaulting to 1000 [ 390.540134][T14202] lo speed is unknown, defaulting to 1000 [ 390.695508][T14216] tipc: Enabling of bearer rejected, already enabled [ 390.743271][T14216] syzkaller0: entered promiscuous mode [ 390.772077][T14216] syzkaller0: entered allmulticast mode [ 390.788281][T14219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2169'. [ 391.039224][T14229] tipc: Resetting bearer [ 391.444283][T14237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.713833][T14269] netlink: 'syz.3.2181': attribute type 1 has an invalid length. [ 391.731392][T14269] netlink: 'syz.3.2181': attribute type 10 has an invalid length. [ 391.749695][T14269] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2181'. [ 391.990944][T14282] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2187'. [ 392.022252][T14282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2187'. [ 392.043407][T14282] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2187'. [ 392.286605][T14292] IPVS: Scheduler module ip_vs_sip not found [ 392.302426][T14273] netlink: 'syz.2.2182': attribute type 1 has an invalid length. [ 392.315101][T14300] unknown channel width for channel at 909000KHz? [ 392.318998][T14292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2189'. [ 392.323646][T14300] unknown channel width for channel at 909000KHz? [ 392.340043][T14273] netlink: 'syz.2.2182': attribute type 4 has an invalid length. [ 392.348114][T14273] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2182'. [ 392.461830][T14307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2194'. [ 392.743095][T14328] sctp: [Deprecated]: syz.3.2198 (pid 14328) Use of int in max_burst socket option. [ 392.743095][T14328] Use struct sctp_assoc_value instead [ 393.043428][T14347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2201'. [ 393.198967][T14353] tap0: tun_chr_ioctl cmd 1074025680 [ 393.204933][T14355] netlink: 'syz.3.2207': attribute type 3 has an invalid length. [ 393.205671][T14353] tap0: tun_chr_ioctl cmd 3221513862 [ 393.221792][T14353] D: renamed from syzkaller0 [ 393.232245][T14353] tap0: tun_chr_ioctl cmd 1074025673 [ 393.451747][ T30] audit: type=1800 audit(1755545543.293:6): pid=14365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2209" name="memory.events" dev="tmpfs" ino=2162 res=0 errno=0 [ 393.586361][T14369] batadv0: entered promiscuous mode [ 393.784867][T14379] lo speed is unknown, defaulting to 1000 [ 393.806644][T14379] lo speed is unknown, defaulting to 1000 [ 394.225281][T14406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2218'. [ 394.272829][T14406] netlink: 'syz.4.2218': attribute type 18 has an invalid length. [ 394.436171][ T6569] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.453745][T14406] netlink: 'syz.4.2218': attribute type 18 has an invalid length. [ 394.485973][ T6569] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.540483][T14421] netlink: 'syz.3.2220': attribute type 11 has an invalid length. [ 394.542287][ T6569] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.581284][T14414] lo speed is unknown, defaulting to 1000 [ 394.604974][ T6569] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.699592][T14421] netlink: 'syz.3.2220': attribute type 23 has an invalid length. [ 394.781083][T14414] lo speed is unknown, defaulting to 1000 [ 394.876741][T14430] netlink: 'syz.2.2222': attribute type 1 has an invalid length. [ 395.506202][T14451] lo speed is unknown, defaulting to 1000 [ 395.537076][T14451] lo speed is unknown, defaulting to 1000 [ 395.836907][T14466] __nla_validate_parse: 6 callbacks suppressed [ 395.836929][T14466] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2234'. [ 395.893045][T14465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.901916][T14465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.925241][T14465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.944667][T14465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.974641][T14465] bond4: (slave gretap1): Releasing backup interface [ 396.047632][T14473] pim6reg1: entered promiscuous mode [ 396.057712][T14473] pim6reg1: entered allmulticast mode [ 396.770824][T14489] lo speed is unknown, defaulting to 1000 [ 396.784777][T14489] lo speed is unknown, defaulting to 1000 [ 396.842718][T14493] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2242'. [ 397.216230][T14496] lo speed is unknown, defaulting to 1000 [ 397.229755][T14496] lo speed is unknown, defaulting to 1000 [ 397.287639][T14499] lo speed is unknown, defaulting to 1000 [ 397.380783][T14499] lo speed is unknown, defaulting to 1000 [ 397.464803][T14507] lo speed is unknown, defaulting to 1000 [ 397.529504][T14507] lo speed is unknown, defaulting to 1000 [ 397.870547][T14529] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 398.011949][T14540] tipc: Enabling of bearer rejected, already enabled [ 398.846702][T14560] netlink: 'syz.0.2255': attribute type 1 has an invalid length. [ 398.943455][T14560] 8021q: adding VLAN 0 to HW filter on device bond7 [ 398.953873][T14564] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 398.983277][T14560] vlan0: entered allmulticast mode [ 398.989500][T14560] veth1: entered allmulticast mode [ 399.015662][T14567] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2257'. [ 399.598814][T14592] gre0: entered allmulticast mode [ 399.730640][T14596] "syz.1.2266" (14596) uses obsolete ecb(arc4) skcipher [ 399.795770][T14602] tipc: Enabling of bearer rejected, already enabled [ 399.994870][T14608] pim6reg1: entered promiscuous mode [ 400.004138][T14608] pim6reg1: entered allmulticast mode [ 400.392191][T14621] tipc: Enabling of bearer rejected, already enabled [ 400.401831][T14621] netlink: 'syz.1.2273': attribute type 1 has an invalid length. [ 400.410006][T14621] netlink: 'syz.1.2273': attribute type 2 has an invalid length. [ 400.418383][T14621] netlink: 16154 bytes leftover after parsing attributes in process `syz.1.2273'. [ 400.431612][T14591] gre0: left allmulticast mode [ 400.523444][T14625] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2275'. [ 400.803056][T14637] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2281'. [ 400.828005][T14637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2281'. [ 401.020025][T14657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2285'. [ 401.322414][T14664] netlink: 'syz.0.2286': attribute type 1 has an invalid length. [ 401.440984][T14664] 8021q: adding VLAN 0 to HW filter on device bond8 [ 401.541380][T14673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.581047][T14673] bond8: (slave batadv0): making interface the new active one [ 401.645712][T14673] bond8: (slave batadv0): Enslaving as an active interface with an up link [ 401.715479][T14691] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2289'. [ 401.750808][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2291'. [ 401.759841][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2291'. [ 401.790363][T14688] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 401.815120][T14681] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 401.867758][T14684] lo speed is unknown, defaulting to 1000 [ 401.890181][T14684] lo speed is unknown, defaulting to 1000 [ 401.934390][T14704] netlink: 'syz.0.2294': attribute type 83 has an invalid length. [ 402.164212][T14701] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.184553][T14720] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2297'. [ 402.196248][T14701] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 402.211052][T14701] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 402.292943][T14724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2295'. [ 402.416703][T14730] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 402.475467][T14701] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.493484][T14701] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 402.514820][T14701] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 402.561722][T14732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2298'. [ 402.600539][T14701] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.610677][T14732] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2298'. [ 402.619782][T14732] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2298'. [ 402.630351][T14737] netlink: 'syz.0.2300': attribute type 2 has an invalid length. [ 402.635226][T14701] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 402.645288][T14737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2300'. [ 402.659817][T14701] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 402.710410][T14701] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.724875][T14701] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 402.736355][T14701] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 403.060673][ T6576] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.085978][ T6576] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 403.111968][ T6576] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 403.228250][ T6576] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.244618][ T6576] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 403.281893][ T6576] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 403.365835][ T6576] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.390440][ T6576] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 403.424385][ T6576] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 403.455925][ T58] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.466654][ T58] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 403.479583][ T58] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 404.320344][T14805] tipc: Enabled bearer , priority 0 [ 404.361817][T14805] syzkaller0: entered promiscuous mode [ 404.373497][T14805] syzkaller0: entered allmulticast mode [ 404.481341][T14805] tipc: Resetting bearer [ 404.548226][T14802] tipc: Resetting bearer [ 404.644083][T14802] tipc: Disabling bearer [ 404.769648][T14840] netlink: 'syz.2.2328': attribute type 1 has an invalid length. [ 404.783107][T14840] netlink: 'syz.2.2328': attribute type 1 has an invalid length. [ 404.791756][T14840] block nbd3: shutting down sockets [ 405.029328][T14857] rdma_rxe: rxe_newlink: failed to add bond0 [ 405.531598][T14887] netlink: 'syz.0.2340': attribute type 1 has an invalid length. [ 405.547083][T14887] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 405.562454][T14887] gretap3: entered promiscuous mode [ 405.604721][T14898] lo: entered allmulticast mode [ 405.702328][T14904] lo speed is unknown, defaulting to 1000 [ 405.711815][T14904] lo speed is unknown, defaulting to 1000 [ 406.029252][T14924] __nla_validate_parse: 9 callbacks suppressed [ 406.029347][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2347'. [ 406.056890][T14924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2347'. [ 406.066700][T14919] bond8: (slave batadv0): Releasing active interface [ 406.177647][T14928] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2349'. [ 406.195246][T14928] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2349'. [ 406.204762][T14928] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2349'. [ 406.217323][T14928] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2349'. [ 406.237168][T14928] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2349'. [ 406.247291][T14928] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2349'. [ 406.261607][T14928] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2349'. [ 406.271388][T14928] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2349'. [ 406.388761][T14933] lo speed is unknown, defaulting to 1000 [ 406.398045][T14933] lo speed is unknown, defaulting to 1000 [ 407.166668][T14959] pim6reg1: entered promiscuous mode [ 407.172881][T14959] pim6reg1: entered allmulticast mode [ 407.221600][T14955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.272242][T14955] siw: device registration error -23 [ 408.035011][T14997] ‚: renamed from bond_slave_0 [ 408.513026][T15019] lo speed is unknown, defaulting to 1000 [ 408.544849][T15019] lo speed is unknown, defaulting to 1000 [ 408.740055][T15035] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 409.771398][T15078] lo speed is unknown, defaulting to 1000 [ 409.803176][T15078] lo speed is unknown, defaulting to 1000 [ 410.583572][T15128] netlink: 'syz.0.2394': attribute type 13 has an invalid length. [ 410.889943][T15140] netlink: 'syz.3.2403': attribute type 15 has an invalid length. [ 411.405675][T15128] tipc: Resetting bearer [ 411.517532][ T7786] lo speed is unknown, defaulting to 1000 [ 411.529994][ T7786] syz1: Port: 1 Link DOWN [ 411.590786][T15145] 8021q: adding VLAN 0 to HW filter on device bond8 [ 411.754257][T15156] nbd: nbd2 already in use [ 411.755641][ T6580] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 411.761314][T15156] block nbd0: NBD_DISCONNECT [ 411.772876][T15156] block nbd0: Send disconnect failed -22 [ 411.778977][T15156] block nbd0: Disconnected due to user request. [ 411.781423][ T6580] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 411.793923][T15156] block nbd0: shutting down sockets [ 413.405390][ T6580] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 413.419082][ T6580] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 413.535790][T15172] lo speed is unknown, defaulting to 1000 [ 413.546627][T15172] lo speed is unknown, defaulting to 1000 [ 427.993653][T15186] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 428.004315][T15186] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 428.016180][T15186] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 428.024755][T15186] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 428.037772][T15186] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 428.060291][ T5884] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 428.067768][ T5884] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 428.078764][ T5884] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 428.091174][ T5884] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 428.100228][ T5884] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 428.120955][T15189] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 428.130246][T15189] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 428.141898][T15189] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 428.150397][T15189] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 428.159833][T15189] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 428.186683][T15184] lo speed is unknown, defaulting to 1000 [ 428.193300][T15189] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 428.203581][T15189] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 428.211957][T15189] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 428.215675][T15184] lo speed is unknown, defaulting to 1000 [ 428.221807][T15187] lo speed is unknown, defaulting to 1000 [ 428.232063][T15189] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 428.240326][T15189] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 428.254570][T15187] lo speed is unknown, defaulting to 1000 [ 428.373352][T15190] lo speed is unknown, defaulting to 1000 [ 428.396344][T15190] lo speed is unknown, defaulting to 1000 [ 428.570465][T15184] chnl_net:caif_netlink_parms(): no params data found [ 428.751045][T15187] chnl_net:caif_netlink_parms(): no params data found [ 428.962371][T15186] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 428.977208][T15186] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 428.986271][T15186] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 428.997094][T15186] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 429.005362][T15186] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 429.054604][T15184] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.066999][T15184] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.075298][T15184] bridge_slave_0: entered allmulticast mode [ 429.088382][T15184] bridge_slave_0: entered promiscuous mode [ 429.148364][T15184] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.155677][T15184] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.168216][T15184] bridge_slave_1: entered allmulticast mode [ 429.176298][T15184] bridge_slave_1: entered promiscuous mode [ 429.264888][T15189] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 429.274903][T15189] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 429.283173][T15189] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 429.292008][T15189] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 429.305688][T15189] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 429.312419][T15184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.331179][T15184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.440987][T15187] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.449347][T15187] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.456947][T15187] bridge_slave_0: entered allmulticast mode [ 429.467244][T15187] bridge_slave_0: entered promiscuous mode [ 429.483006][T15204] lo speed is unknown, defaulting to 1000 [ 429.491458][T15184] team0: Port device team_slave_0 added [ 429.504493][T15204] lo speed is unknown, defaulting to 1000 [ 429.505041][T15190] chnl_net:caif_netlink_parms(): no params data found [ 429.527188][T15187] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.534559][T15187] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.542028][T15187] bridge_slave_1: entered allmulticast mode [ 429.549994][T15187] bridge_slave_1: entered promiscuous mode [ 429.563259][T15184] team0: Port device team_slave_1 added [ 429.618605][T15210] lo speed is unknown, defaulting to 1000 [ 429.658851][T15184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.665889][T15184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.693933][T15184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.711081][T15187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.720513][T15210] lo speed is unknown, defaulting to 1000 [ 429.731879][T15187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.756788][T15184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.763885][T15184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.790422][T15184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.926380][T15187] team0: Port device team_slave_0 added [ 429.935945][T15187] team0: Port device team_slave_1 added [ 430.039889][T15184] hsr_slave_0: entered promiscuous mode [ 430.046477][T15184] hsr_slave_1: entered promiscuous mode [ 430.054271][T15184] debugfs: 'hsr0' already exists in 'hsr' [ 430.060138][T15184] Cannot create hsr debugfs directory [ 430.065906][T15190] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.073691][T15190] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.081602][T15190] bridge_slave_0: entered allmulticast mode [ 430.089527][T15190] bridge_slave_0: entered promiscuous mode [ 430.106455][T15187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.113865][T15187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.140357][T15187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.151620][T15189] Bluetooth: hci5: command tx timeout [ 430.160048][T15187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.167022][T15187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.193541][T15187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.205545][T15190] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.213101][T15190] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.220460][T15190] bridge_slave_1: entered allmulticast mode [ 430.228238][T15190] bridge_slave_1: entered promiscuous mode [ 430.228258][T15189] Bluetooth: hci6: command tx timeout [ 430.275012][T15190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.306042][T15190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.316264][T15189] Bluetooth: hci7: command tx timeout [ 430.423780][T15187] hsr_slave_0: entered promiscuous mode [ 430.431278][T15187] hsr_slave_1: entered promiscuous mode [ 430.437790][T15187] debugfs: 'hsr0' already exists in 'hsr' [ 430.443831][T15187] Cannot create hsr debugfs directory [ 430.500857][T15190] team0: Port device team_slave_0 added [ 430.561675][T15190] team0: Port device team_slave_1 added [ 430.729981][T15190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.737055][T15190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.764621][T15190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.780898][T15190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.788022][T15190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.814571][T15190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.871917][T15204] chnl_net:caif_netlink_parms(): no params data found [ 431.050157][T15190] hsr_slave_0: entered promiscuous mode [ 431.056754][T15190] hsr_slave_1: entered promiscuous mode [ 431.064236][T15190] debugfs: 'hsr0' already exists in 'hsr' [ 431.070174][T15190] Cannot create hsr debugfs directory [ 431.093488][T15210] chnl_net:caif_netlink_parms(): no params data found [ 431.113984][T15189] Bluetooth: hci8: command tx timeout [ 431.336251][T15204] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.344181][T15204] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.351716][T15189] Bluetooth: hci9: command tx timeout [ 431.358539][T15204] bridge_slave_0: entered allmulticast mode [ 431.365996][T15204] bridge_slave_0: entered promiscuous mode [ 431.398305][T15204] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.405555][T15204] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.413269][T15204] bridge_slave_1: entered allmulticast mode [ 431.420960][T15204] bridge_slave_1: entered promiscuous mode [ 431.503879][T15210] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.511337][T15210] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.519892][T15210] bridge_slave_0: entered allmulticast mode [ 431.527428][T15210] bridge_slave_0: entered promiscuous mode [ 431.553566][T15204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.568500][T15204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.615473][T15210] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.622861][T15210] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.630652][T15210] bridge_slave_1: entered allmulticast mode [ 431.638604][T15210] bridge_slave_1: entered promiscuous mode [ 431.678547][T15204] team0: Port device team_slave_0 added [ 431.728741][T15204] team0: Port device team_slave_1 added [ 431.763111][T15210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.812980][T15210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.840075][T15204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.847067][T15204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.873300][T15204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.933745][T15204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.944059][T15204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.971507][T15204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.985127][T15210] team0: Port device team_slave_0 added [ 431.995970][T15210] team0: Port device team_slave_1 added [ 432.098682][T15210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.105742][T15210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.132857][T15210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.166505][T15204] hsr_slave_0: entered promiscuous mode [ 432.173847][T15204] hsr_slave_1: entered promiscuous mode [ 432.180251][T15204] debugfs: 'hsr0' already exists in 'hsr' [ 432.186010][T15204] Cannot create hsr debugfs directory [ 432.192992][T15210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.200398][T15210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.227250][T15210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.248070][T15189] Bluetooth: hci5: command tx timeout [ 432.308037][T15189] Bluetooth: hci6: command tx timeout [ 432.341862][T15210] hsr_slave_0: entered promiscuous mode [ 432.348554][T15210] hsr_slave_1: entered promiscuous mode [ 432.355041][T15210] debugfs: 'hsr0' already exists in 'hsr' [ 432.361607][T15210] Cannot create hsr debugfs directory [ 432.388113][T15189] Bluetooth: hci7: command tx timeout [ 433.188260][T15189] Bluetooth: hci8: command tx timeout [ 433.428222][T15189] Bluetooth: hci9: command tx timeout [ 434.308127][T15189] Bluetooth: hci5: command tx timeout [ 434.388127][T15189] Bluetooth: hci6: command tx timeout [ 434.468158][T15189] Bluetooth: hci7: command tx timeout [ 435.268653][T15189] Bluetooth: hci8: command tx timeout [ 435.508221][T15189] Bluetooth: hci9: command tx timeout [ 436.388336][T15189] Bluetooth: hci5: command tx timeout [ 436.478182][T15189] Bluetooth: hci6: command tx timeout [ 436.548371][T15189] Bluetooth: hci7: command tx timeout [ 437.348252][T15189] Bluetooth: hci8: command tx timeout [ 437.588439][T15189] Bluetooth: hci9: command tx timeout [ 445.432258][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 445.442109][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 488.201233][T15186] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 488.211908][T15186] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 488.220546][T15186] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 488.229215][T15186] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 488.237383][T15186] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 488.329306][T15186] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 488.339083][T15186] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 488.347656][T15186] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 488.356874][T15186] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 488.365967][T15186] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 488.375857][T15231] lo speed is unknown, defaulting to 1000 [ 488.384014][T15231] lo speed is unknown, defaulting to 1000 [ 488.451177][T15189] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 488.467736][T15189] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 488.477748][T15189] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 488.479330][T15233] lo speed is unknown, defaulting to 1000 [ 488.493781][T15189] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 488.496200][T15233] lo speed is unknown, defaulting to 1000 [ 488.514192][T15189] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 488.676789][T15235] lo speed is unknown, defaulting to 1000 [ 488.700714][T15235] lo speed is unknown, defaulting to 1000 [ 488.786393][T15231] chnl_net:caif_netlink_parms(): no params data found [ 488.915544][T15233] chnl_net:caif_netlink_parms(): no params data found [ 489.264066][T15231] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.298620][T15231] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.306111][T15231] bridge_slave_0: entered allmulticast mode [ 489.322377][T15189] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 489.332512][T15189] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 489.340702][T15231] bridge_slave_0: entered promiscuous mode [ 489.341059][T15189] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 489.355147][T15189] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 489.363158][T15189] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 489.384706][T15231] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.399778][T15231] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.407562][T15231] bridge_slave_1: entered allmulticast mode [ 489.415821][T15231] bridge_slave_1: entered promiscuous mode [ 489.564060][T15186] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 489.573683][T15186] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 489.582213][T15186] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 489.590573][T15186] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 489.599723][T15186] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 489.637274][T15231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.680094][T15233] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.687550][T15233] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.703878][T15233] bridge_slave_0: entered allmulticast mode [ 489.714991][T15233] bridge_slave_0: entered promiscuous mode [ 489.726098][T15251] lo speed is unknown, defaulting to 1000 [ 489.735112][T15231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.757421][T15235] chnl_net:caif_netlink_parms(): no params data found [ 489.772465][T15233] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.779887][T15233] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.787243][T15233] bridge_slave_1: entered allmulticast mode [ 489.795771][T15233] bridge_slave_1: entered promiscuous mode [ 489.803001][T15251] lo speed is unknown, defaulting to 1000 [ 489.882449][T15233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.907808][T15231] team0: Port device team_slave_0 added [ 489.927008][T15233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.946154][T15255] lo speed is unknown, defaulting to 1000 [ 489.955794][T15231] team0: Port device team_slave_1 added [ 490.029691][T15255] lo speed is unknown, defaulting to 1000 [ 490.033147][T15233] team0: Port device team_slave_0 added [ 490.083579][T15233] team0: Port device team_slave_1 added [ 490.106597][T15231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.113896][T15231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.141784][T15231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.199521][T15231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.206629][T15231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.233057][T15231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.277367][T15233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.284960][T15233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.311895][T15233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.318538][T15189] Bluetooth: hci10: command tx timeout [ 490.362686][T15233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.370312][T15233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.397121][T15233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.409115][T15189] Bluetooth: hci11: command tx timeout [ 490.435116][T15235] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.442659][T15235] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.450408][T15235] bridge_slave_0: entered allmulticast mode [ 490.457792][T15235] bridge_slave_0: entered promiscuous mode [ 490.471505][T15235] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.479030][T15235] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.486494][T15235] bridge_slave_1: entered allmulticast mode [ 490.494583][T15235] bridge_slave_1: entered promiscuous mode [ 490.542874][T15231] hsr_slave_0: entered promiscuous mode [ 490.548713][T15189] Bluetooth: hci12: command tx timeout [ 490.557081][T15231] hsr_slave_1: entered promiscuous mode [ 490.564574][T15231] debugfs: 'hsr0' already exists in 'hsr' [ 490.571027][T15231] Cannot create hsr debugfs directory [ 490.613896][T15235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.674184][T15235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.736012][T15233] hsr_slave_0: entered promiscuous mode [ 490.744074][T15233] hsr_slave_1: entered promiscuous mode [ 490.751012][T15233] debugfs: 'hsr0' already exists in 'hsr' [ 490.756894][T15233] Cannot create hsr debugfs directory [ 490.829221][T15235] team0: Port device team_slave_0 added [ 490.943134][T15235] team0: Port device team_slave_1 added [ 491.064961][T15235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.073105][T15235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.099855][T15235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.126302][T15251] chnl_net:caif_netlink_parms(): no params data found [ 491.171568][T15235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.179770][T15235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.206777][T15235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.404993][T15255] chnl_net:caif_netlink_parms(): no params data found [ 491.438721][T15189] Bluetooth: hci13: command tx timeout [ 491.512424][T15235] hsr_slave_0: entered promiscuous mode [ 491.519808][T15235] hsr_slave_1: entered promiscuous mode [ 491.526232][T15235] debugfs: 'hsr0' already exists in 'hsr' [ 491.532170][T15235] Cannot create hsr debugfs directory [ 491.603880][T15251] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.611250][T15251] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.619204][T15251] bridge_slave_0: entered allmulticast mode [ 491.626734][T15251] bridge_slave_0: entered promiscuous mode [ 491.668316][T15189] Bluetooth: hci14: command tx timeout [ 491.685936][T15251] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.698878][T15251] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.706190][T15251] bridge_slave_1: entered allmulticast mode [ 491.713872][T15251] bridge_slave_1: entered promiscuous mode [ 491.811727][T15255] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.819802][T15255] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.827131][T15255] bridge_slave_0: entered allmulticast mode [ 491.836665][T15255] bridge_slave_0: entered promiscuous mode [ 491.885941][T15255] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.893331][T15255] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.901428][T15255] bridge_slave_1: entered allmulticast mode [ 491.911161][T15255] bridge_slave_1: entered promiscuous mode [ 491.931214][T15251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.944725][T15251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.055308][T15251] team0: Port device team_slave_0 added [ 492.088642][T15255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.102139][T15255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.122478][T15251] team0: Port device team_slave_1 added [ 492.207330][T15251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.215122][T15251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.242215][T15251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.291719][T15251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.299209][T15251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.326881][T15251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.350623][T15255] team0: Port device team_slave_0 added [ 492.375291][T15255] team0: Port device team_slave_1 added [ 492.388776][T15189] Bluetooth: hci10: command tx timeout [ 492.468435][T15189] Bluetooth: hci11: command tx timeout [ 492.484863][T15255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.492036][T15255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.518928][T15255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.543762][T15251] hsr_slave_0: entered promiscuous mode [ 492.551079][T15251] hsr_slave_1: entered promiscuous mode [ 492.557286][T15251] debugfs: 'hsr0' already exists in 'hsr' [ 492.563314][T15251] Cannot create hsr debugfs directory [ 492.578276][T15255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.585644][T15255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 492.613087][T15255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.629245][T15189] Bluetooth: hci12: command tx timeout [ 492.810894][T15255] hsr_slave_0: entered promiscuous mode [ 492.817438][T15255] hsr_slave_1: entered promiscuous mode [ 492.824041][T15255] debugfs: 'hsr0' already exists in 'hsr' [ 492.830323][T15255] Cannot create hsr debugfs directory [ 493.518579][T15189] Bluetooth: hci13: command tx timeout [ 493.748055][T15189] Bluetooth: hci14: command tx timeout [ 494.468065][T15189] Bluetooth: hci10: command tx timeout [ 494.548306][T15189] Bluetooth: hci11: command tx timeout [ 494.708310][T15189] Bluetooth: hci12: command tx timeout [ 495.588235][T15189] Bluetooth: hci13: command tx timeout [ 495.828086][T15189] Bluetooth: hci14: command tx timeout [ 496.548413][T15189] Bluetooth: hci10: command tx timeout [ 496.629169][T15189] Bluetooth: hci11: command tx timeout [ 496.788114][T15189] Bluetooth: hci12: command tx timeout [ 497.668504][T15189] Bluetooth: hci13: command tx timeout [ 497.908224][T15189] Bluetooth: hci14: command tx timeout [ 506.871410][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 506.880541][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 548.215197][T15186] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 548.229098][T15186] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 548.239648][T15186] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 548.255525][T15186] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 548.264440][T15186] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 548.314502][T15275] lo speed is unknown, defaulting to 1000 [ 548.323149][T15275] lo speed is unknown, defaulting to 1000 [ 548.324077][T15189] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 548.340307][T15189] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 548.349181][T15189] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 548.359464][T15189] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 548.368550][T15189] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 548.452513][T15277] lo speed is unknown, defaulting to 1000 [ 548.475310][T15277] lo speed is unknown, defaulting to 1000 [ 548.613080][T15275] chnl_net:caif_netlink_parms(): no params data found [ 548.802325][T15275] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.810305][T15275] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.817760][T15275] bridge_slave_0: entered allmulticast mode [ 548.826299][T15275] bridge_slave_0: entered promiscuous mode [ 548.839282][T15275] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.846590][T15275] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.854162][T15275] bridge_slave_1: entered allmulticast mode [ 548.862459][T15275] bridge_slave_1: entered promiscuous mode [ 548.916798][T15277] chnl_net:caif_netlink_parms(): no params data found [ 549.017144][T15275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.040910][T15275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.215611][T15275] team0: Port device team_slave_0 added [ 549.234467][T15275] team0: Port device team_slave_1 added [ 549.266544][T15189] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 549.276608][T15189] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 549.285984][T15189] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 549.287121][T15277] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.294433][T15189] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 549.311112][T15189] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 549.314345][T15277] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.337091][T15277] bridge_slave_0: entered allmulticast mode [ 549.344667][T15277] bridge_slave_0: entered promiscuous mode [ 549.371723][T15277] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.379032][T15277] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.386296][T15277] bridge_slave_1: entered allmulticast mode [ 549.395536][T15277] bridge_slave_1: entered promiscuous mode [ 549.435352][T15275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.442574][T15275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.468822][T15275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.499006][T15275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.506093][T15275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.532898][T15275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.556407][T15277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.595918][T15277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.663093][T15292] lo speed is unknown, defaulting to 1000 [ 549.665075][T15275] hsr_slave_0: entered promiscuous mode [ 549.676646][T15275] hsr_slave_1: entered promiscuous mode [ 549.683302][T15275] debugfs: 'hsr0' already exists in 'hsr' [ 549.689906][T15275] Cannot create hsr debugfs directory [ 549.697567][T15277] team0: Port device team_slave_0 added [ 549.706891][T15277] team0: Port device team_slave_1 added [ 549.713927][T15292] lo speed is unknown, defaulting to 1000 [ 549.803095][T15277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.811035][T15277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.838347][T15277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.851733][T15277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.859265][T15277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.885933][T15277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.288738][T15277] hsr_slave_0: entered promiscuous mode [ 550.295707][T15277] hsr_slave_1: entered promiscuous mode [ 550.309736][T15189] Bluetooth: hci15: command tx timeout [ 550.323990][T15186] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 550.334012][T15186] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 550.340500][T15277] debugfs: 'hsr0' already exists in 'hsr' [ 550.342721][T15186] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 550.347093][T15277] Cannot create hsr debugfs directory [ 550.357086][T15186] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 550.368851][T15186] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 550.388210][T15186] Bluetooth: hci16: command tx timeout [ 550.607784][T15189] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 550.616710][T15189] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 550.635712][T15189] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 550.649377][T15189] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 550.659111][T15189] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 550.775854][T15297] lo speed is unknown, defaulting to 1000 [ 550.789747][T15297] lo speed is unknown, defaulting to 1000 [ 550.910460][T15292] chnl_net:caif_netlink_parms(): no params data found [ 550.971601][T15299] lo speed is unknown, defaulting to 1000 [ 550.989609][T15299] lo speed is unknown, defaulting to 1000 [ 551.177041][T15292] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.184733][T15292] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.193197][T15292] bridge_slave_0: entered allmulticast mode [ 551.202019][T15292] bridge_slave_0: entered promiscuous mode [ 551.217054][T15292] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.224454][T15292] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.232060][T15292] bridge_slave_1: entered allmulticast mode [ 551.240658][T15292] bridge_slave_1: entered promiscuous mode [ 551.316156][T15292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.348313][T15189] Bluetooth: hci17: command tx timeout [ 551.380504][T15292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.496442][T15292] team0: Port device team_slave_0 added [ 551.533580][T15292] team0: Port device team_slave_1 added [ 551.557466][T15297] chnl_net:caif_netlink_parms(): no params data found [ 551.612661][T15292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.619917][T15292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.646541][T15292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.699004][T15292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.706497][T15292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.733096][T15292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.917179][T15297] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.924923][T15297] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.932617][T15297] bridge_slave_0: entered allmulticast mode [ 551.941390][T15297] bridge_slave_0: entered promiscuous mode [ 551.950361][T15297] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.957607][T15297] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.965211][T15297] bridge_slave_1: entered allmulticast mode [ 551.973508][T15297] bridge_slave_1: entered promiscuous mode [ 552.072085][T15292] hsr_slave_0: entered promiscuous mode [ 552.080401][T15292] hsr_slave_1: entered promiscuous mode [ 552.086958][T15292] debugfs: 'hsr0' already exists in 'hsr' [ 552.092905][T15292] Cannot create hsr debugfs directory [ 552.117229][T15297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.177669][T15297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.255266][T15299] chnl_net:caif_netlink_parms(): no params data found [ 552.320312][T15297] team0: Port device team_slave_0 added [ 552.330664][T15297] team0: Port device team_slave_1 added [ 552.388341][T15189] Bluetooth: hci18: command tx timeout [ 552.394442][T15189] Bluetooth: hci15: command tx timeout [ 552.447722][T15297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.455374][T15297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.482949][T15189] Bluetooth: hci16: command tx timeout [ 552.487697][T15297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.503331][T15297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.510516][T15297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.536989][T15297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.708585][T15189] Bluetooth: hci19: command tx timeout [ 552.724803][T15299] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.733002][T15299] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.741257][T15299] bridge_slave_0: entered allmulticast mode [ 552.749325][T15299] bridge_slave_0: entered promiscuous mode [ 552.765984][T15297] hsr_slave_0: entered promiscuous mode [ 552.773964][T15297] hsr_slave_1: entered promiscuous mode [ 552.780963][T15297] debugfs: 'hsr0' already exists in 'hsr' [ 552.786815][T15297] Cannot create hsr debugfs directory [ 552.818858][T15299] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.826113][T15299] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.833849][T15299] bridge_slave_1: entered allmulticast mode [ 552.842406][T15299] bridge_slave_1: entered promiscuous mode [ 552.894543][T15299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.947261][T15299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.035550][T15299] team0: Port device team_slave_0 added [ 553.046411][T15299] team0: Port device team_slave_1 added [ 553.135068][T15299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.144117][T15299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.172082][T15299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.219214][T15299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.226241][T15299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.252997][T15299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.369280][T15299] hsr_slave_0: entered promiscuous mode [ 553.376014][T15299] hsr_slave_1: entered promiscuous mode [ 553.383293][T15299] debugfs: 'hsr0' already exists in 'hsr' [ 553.389189][T15299] Cannot create hsr debugfs directory [ 553.430360][T15319] Bluetooth: hci17: command tx timeout [ 554.468607][T15319] Bluetooth: hci15: command tx timeout [ 554.469382][T15320] Bluetooth: hci18: command tx timeout [ 554.548195][T15320] Bluetooth: hci16: command tx timeout [ 554.788217][T15320] Bluetooth: hci19: command tx timeout [ 555.036798][T15320] Bluetooth: hci5: command 0x0406 tx timeout [ 555.038222][T15321] Bluetooth: hci7: command 0x0406 tx timeout [ 555.045615][T15318] Bluetooth: hci6: command 0x0406 tx timeout [ 555.051772][T15321] Bluetooth: hci8: command 0x0406 tx timeout [ 555.055451][T15318] Bluetooth: hci9: command 0x0406 tx timeout [ 555.508345][ T5884] Bluetooth: hci17: command tx timeout [ 556.548238][ T5884] Bluetooth: hci15: command tx timeout [ 556.548249][ T51] Bluetooth: hci18: command tx timeout [ 556.638580][ T5884] Bluetooth: hci16: command tx timeout [ 556.788380][ T31] INFO: task syz.2.2405:15156 blocked for more than 143 seconds. [ 556.796169][ T31] Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 [ 556.804131][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 556.813303][ T31] task:syz.2.2405 state:D stack:25064 pid:15156 tgid:15155 ppid:5867 task_flags:0x400140 flags:0x00004004 [ 556.825754][ T31] Call Trace: [ 556.829212][ T31] [ 556.832175][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 556.836720][ T31] ? validate_chain+0x897/0x2140 [ 556.842266][ T31] ? __lock_acquire+0xab9/0xd20 [ 556.847709][ T31] ? __pfx___schedule+0x10/0x10 [ 556.853163][ T31] ? schedule+0x91/0x360 [ 556.857560][ T31] schedule+0x165/0x360 [ 556.862112][ T31] schedule_timeout+0x9a/0x270 [ 556.867041][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 556.872683][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 556.878143][ T5884] Bluetooth: hci19: command tx timeout [ 556.883773][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.889310][ T31] ? wait_for_completion+0x267/0x5d0 [ 556.894642][ T31] wait_for_completion+0x2bf/0x5d0 [ 556.899997][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 556.905679][ T31] ? flush_workqueue_prep_pwqs+0x47c/0x4f0 [ 556.911736][ T31] ? check_flush_dependency+0x88/0x400 [ 556.917389][ T31] __flush_workqueue+0x6f7/0x14b0 [ 556.922752][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 556.928877][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.934136][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 556.939931][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 556.945897][ T31] ? __wake_up_common_lock+0x190/0x1f0 [ 556.951561][ T31] nbd_disconnect_and_put+0x9e/0x2a0 [ 556.956900][ T31] nbd_genl_disconnect+0x485/0x570 [ 556.962347][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 556.968082][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 556.974548][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 556.980587][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 556.986840][ T31] ? stack_trace_save+0x9c/0xe0 [ 556.991811][ T31] genl_rcv_msg+0x60e/0x790 [ 556.996449][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 557.001766][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 557.007460][ T31] netlink_rcv_skb+0x205/0x470 [ 557.012340][ T31] ? __lock_acquire+0xab9/0xd20 [ 557.017254][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 557.022560][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 557.028403][ T31] ? down_read+0x1ad/0x2e0 [ 557.032987][ T31] genl_rcv+0x28/0x40 [ 557.037108][ T31] netlink_unicast+0x82c/0x9e0 [ 557.042231][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 557.047569][ T31] ? netlink_sendmsg+0x642/0xb30 [ 557.052728][ T31] ? skb_put+0x11b/0x210 [ 557.057015][ T31] netlink_sendmsg+0x805/0xb30 [ 557.090004][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.095398][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 557.128232][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 557.133598][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.155517][ T31] __sock_sendmsg+0x219/0x270 [ 557.160771][ T31] ____sys_sendmsg+0x505/0x830 [ 557.165589][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.171483][ T31] ? import_iovec+0x74/0xa0 [ 557.176040][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 557.180875][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.186134][ T31] ? __fget_files+0x2a/0x420 [ 557.191511][ T31] ? __fget_files+0x3a0/0x420 [ 557.196269][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 557.201460][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 557.206987][ T31] ? rcu_is_watching+0x15/0xb0 [ 557.212495][ T31] ? do_syscall_64+0xbe/0x3b0 [ 557.217227][ T31] do_syscall_64+0xfa/0x3b0 [ 557.221822][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 557.227042][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.233514][ T31] ? clear_bhb_loop+0x60/0xb0 [ 557.238390][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.244327][ T31] RIP: 0033:0x7f6eca58ebe9 [ 557.248952][ T31] RSP: 002b:00007f6ecb424038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.257505][ T31] RAX: ffffffffffffffda RBX: 00007f6eca7b5fa0 RCX: 00007f6eca58ebe9 [ 557.265646][ T31] RDX: 00000000000000c0 RSI: 0000200000000280 RDI: 000000000000000a [ 557.277652][ T31] RBP: 00007f6eca611e19 R08: 0000000000000000 R09: 0000000000000000 [ 557.285853][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.294000][ T31] R13: 00007f6eca7b6038 R14: 00007f6eca7b5fa0 R15: 00007ffda04fcae8 [ 557.302273][ T31] [ 557.305624][ T31] INFO: task syz.0.2407:15161 blocked for more than 143 seconds. [ 557.313754][ T31] Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 [ 557.321579][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 557.331164][ T31] task:syz.0.2407 state:D stack:24008 pid:15161 tgid:15160 ppid:5864 task_flags:0x400140 flags:0x00004004 [ 557.343728][ T31] Call Trace: [ 557.347038][ T31] [ 557.350524][ T31] __schedule+0x1798/0x4cc0 [ 557.355181][ T31] ? __lock_acquire+0xab9/0xd20 [ 557.360473][ T31] ? __lock_acquire+0xab9/0xd20 [ 557.365827][ T31] ? __pfx___schedule+0x10/0x10 [ 557.371269][ T31] ? schedule+0x91/0x360 [ 557.375556][ T31] schedule+0x165/0x360 [ 557.379867][ T31] schedule_preempt_disabled+0x13/0x30 [ 557.385365][ T31] __mutex_lock+0x7e6/0x1360 [ 557.390387][ T31] ? __mutex_lock+0x5b6/0x1360 [ 557.395194][ T31] ? genl_rcv_msg+0x10d/0x790 [ 557.400057][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 557.405132][ T31] ? stack_trace_save+0x9c/0xe0 [ 557.410983][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 557.416482][ T31] ? radix_tree_lookup+0x240/0x290 [ 557.422067][ T31] genl_rcv_msg+0x10d/0x790 [ 557.426720][ T31] ? __lock_acquire+0xab9/0xd20 [ 557.432636][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 557.437733][ T31] netlink_rcv_skb+0x205/0x470 [ 557.442999][ T31] ? __lock_acquire+0xab9/0xd20 [ 557.448356][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 557.453436][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 557.458877][ T31] ? down_read+0x1ad/0x2e0 [ 557.463333][ T31] genl_rcv+0x28/0x40 [ 557.467344][ T31] netlink_unicast+0x82c/0x9e0 [ 557.472447][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 557.478312][ T31] ? netlink_sendmsg+0x642/0xb30 [ 557.483434][ T31] ? skb_put+0x11b/0x210 [ 557.487719][ T31] netlink_sendmsg+0x805/0xb30 [ 557.492805][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.498236][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 557.503362][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 557.509052][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.514385][ T31] __sock_sendmsg+0x219/0x270 [ 557.519780][ T31] ____sys_sendmsg+0x505/0x830 [ 557.524678][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.530238][ T31] ? import_iovec+0x74/0xa0 [ 557.534875][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 557.539987][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.545616][ T31] ? __fget_files+0x2a/0x420 [ 557.550300][ T31] ? __fget_files+0x3a0/0x420 [ 557.554999][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 557.560287][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 557.565975][ T31] ? rcu_is_watching+0x15/0xb0 [ 557.570896][ T31] ? do_syscall_64+0xbe/0x3b0 [ 557.576295][ T31] do_syscall_64+0xfa/0x3b0 [ 557.580998][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 557.586244][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.592949][ T5884] Bluetooth: hci17: command tx timeout [ 557.595530][ T31] ? clear_bhb_loop+0x60/0xb0 [ 557.603993][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.610100][ T31] RIP: 0033:0x7f18ec38ebe9 [ 557.614548][ T31] RSP: 002b:00007f18ed232038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.623310][ T31] RAX: ffffffffffffffda RBX: 00007f18ec5b5fa0 RCX: 00007f18ec38ebe9 [ 557.631863][ T31] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000009 [ 557.640494][ T31] RBP: 00007f18ec411e19 R08: 0000000000000000 R09: 0000000000000000 [ 557.648665][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.656677][ T31] R13: 00007f18ec5b6038 R14: 00007f18ec5b5fa0 R15: 00007ffe0bef8ca8 [ 557.665066][ T31] [ 557.668324][ T31] INFO: task syz.0.2407:15164 blocked for more than 144 seconds. [ 557.676151][ T31] Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 [ 557.684093][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 557.692952][ T31] task:syz.0.2407 state:D stack:26920 pid:15164 tgid:15160 ppid:5864 task_flags:0x400040 flags:0x00004004 [ 557.705276][ T31] Call Trace: [ 557.708640][ T31] [ 557.711598][ T31] __schedule+0x1798/0x4cc0 [ 557.716736][ T31] ? __lock_acquire+0xab9/0xd20 [ 557.721968][ T31] ? __lock_acquire+0xab9/0xd20 [ 557.726871][ T31] ? __pfx___schedule+0x10/0x10 [ 557.731846][ T31] ? schedule+0x91/0x360 [ 557.736317][ T31] schedule+0x165/0x360 [ 557.740732][ T31] schedule_preempt_disabled+0x13/0x30 [ 557.746403][ T31] __mutex_lock+0x7e6/0x1360 [ 557.751155][ T31] ? __mutex_lock+0x5b6/0x1360 [ 557.756052][ T31] ? genl_rcv_msg+0x10d/0x790 [ 557.761016][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 557.766102][ T31] ? stack_trace_save+0x9c/0xe0 [ 557.771338][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 557.776839][ T31] ? radix_tree_lookup+0x240/0x290 [ 557.782274][ T31] genl_rcv_msg+0x10d/0x790 [ 557.786922][ T31] ? __lock_acquire+0xab9/0xd20 [ 557.791876][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 557.797030][ T31] netlink_rcv_skb+0x205/0x470 [ 557.802132][ T31] ? __lock_acquire+0xab9/0xd20 [ 557.807066][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 557.812499][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 557.818040][ T31] ? down_read+0x1ad/0x2e0 [ 557.822498][ T31] genl_rcv+0x28/0x40 [ 557.826509][ T31] netlink_unicast+0x82c/0x9e0 [ 557.831504][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 557.836897][ T31] ? netlink_sendmsg+0x642/0xb30 [ 557.842236][ T31] ? skb_put+0x11b/0x210 [ 557.846532][ T31] netlink_sendmsg+0x805/0xb30 [ 557.851536][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.856895][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 557.862061][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 557.867370][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.872932][ T31] __sock_sendmsg+0x219/0x270 [ 557.878275][ T31] __sys_sendto+0x3bd/0x520 [ 557.883465][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 557.888863][ T31] ? count_memcg_event_mm+0x21/0x260 [ 557.894215][ T31] ? exc_page_fault+0x76/0xf0 [ 557.899160][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 557.904512][ T31] __x64_sys_sendto+0xde/0x100 [ 557.909398][ T31] do_syscall_64+0xfa/0x3b0 [ 557.913927][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 557.919480][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.925629][ T31] ? clear_bhb_loop+0x60/0xb0 [ 557.930442][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.936540][ T31] RIP: 0033:0x7f18ec390a7c [ 557.941114][ T31] RSP: 002b:00007f18ed20fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 557.949625][ T31] RAX: ffffffffffffffda RBX: 00007f18ed20ffc0 RCX: 00007f18ec390a7c [ 557.958180][ T31] RDX: 0000000000000020 RSI: 00007f18ed210010 RDI: 0000000000000009 [ 557.966186][ T31] RBP: 0000000000000000 R08: 00007f18ed20ff14 R09: 000000000000000c [ 557.974376][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 557.982609][ T31] R13: 00007f18ed20ff68 R14: 00007f18ed210010 R15: 0000000000000000 [ 557.990811][ T31] [ 557.993892][ T31] INFO: task syz.3.2408:15168 blocked for more than 144 seconds. [ 558.003802][ T31] Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 [ 558.012674][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 558.021794][ T31] task:syz.3.2408 state:D stack:25704 pid:15168 tgid:15162 ppid:5868 task_flags:0x400140 flags:0x00004004 [ 558.034051][ T31] Call Trace: [ 558.037385][ T31] [ 558.040702][ T31] __schedule+0x1798/0x4cc0 [ 558.045299][ T31] ? __lock_acquire+0xab9/0xd20 [ 558.050709][ T31] ? __lock_acquire+0xab9/0xd20 [ 558.055692][ T31] ? __pfx___schedule+0x10/0x10 [ 558.060718][ T31] ? schedule+0x91/0x360 [ 558.065015][ T31] schedule+0x165/0x360 [ 558.071097][ T31] schedule_preempt_disabled+0x13/0x30 [ 558.077063][ T31] __mutex_lock+0x7e6/0x1360 [ 558.081932][ T31] ? __mutex_lock+0x5b6/0x1360 [ 558.086851][ T31] ? genl_rcv_msg+0x10d/0x790 [ 558.091761][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 558.096832][ T31] ? stack_trace_save+0x9c/0xe0 [ 558.102256][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 558.107768][ T31] ? radix_tree_lookup+0x240/0x290 [ 558.113137][ T31] genl_rcv_msg+0x10d/0x790 [ 558.117681][ T31] ? __lock_acquire+0xab9/0xd20 [ 558.122850][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.130096][ T31] netlink_rcv_skb+0x205/0x470 [ 558.134931][ T31] ? __lock_acquire+0xab9/0xd20 [ 558.139902][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.144964][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 558.150561][ T31] ? down_read+0x1ad/0x2e0 [ 558.155009][ T31] genl_rcv+0x28/0x40 [ 558.159161][ T31] netlink_unicast+0x82c/0x9e0 [ 558.163998][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 558.169517][ T31] ? netlink_sendmsg+0x642/0xb30 [ 558.174516][ T31] ? skb_put+0x11b/0x210 [ 558.178878][ T31] netlink_sendmsg+0x805/0xb30 [ 558.183705][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.189256][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 558.194248][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 558.199771][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.205136][ T31] __sock_sendmsg+0x219/0x270 [ 558.210033][ T31] __sys_sendto+0x3bd/0x520 [ 558.214658][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 558.219838][ T31] ? count_memcg_event_mm+0x21/0x260 [ 558.225267][ T31] ? exc_page_fault+0x76/0xf0 [ 558.230795][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 558.236330][ T31] __x64_sys_sendto+0xde/0x100 [ 558.241467][ T31] do_syscall_64+0xfa/0x3b0 [ 558.246067][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 558.251644][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.257913][ T31] ? clear_bhb_loop+0x60/0xb0 [ 558.262665][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.268849][ T31] RIP: 0033:0x7fd782d90a7c [ 558.273308][ T31] RSP: 002b:00007fd783b4aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 558.281869][ T31] RAX: ffffffffffffffda RBX: 00007fd783b4afc0 RCX: 00007fd782d90a7c [ 558.290094][ T31] RDX: 0000000000000028 RSI: 00007fd783b4b010 RDI: 000000000000000c [ 558.298326][ T31] RBP: 0000000000000000 R08: 00007fd783b4af14 R09: 000000000000000c [ 558.306332][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c [ 558.320907][ T31] R13: 00007fd783b4af68 R14: 00007fd783b4b010 R15: 0000000000000000 [ 558.329537][ T31] [ 558.332628][ T31] INFO: task syz.3.2408:15169 blocked for more than 144 seconds. [ 558.340548][ T31] Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 [ 558.348524][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 558.357329][ T31] task:syz.3.2408 state:D stack:28616 pid:15169 tgid:15162 ppid:5868 task_flags:0x400140 flags:0x00004004 [ 558.369547][ T31] Call Trace: [ 558.372860][ T31] [ 558.375894][ T31] __schedule+0x1798/0x4cc0 [ 558.380531][ T31] ? __lock_acquire+0xab9/0xd20 [ 558.385438][ T31] ? __lock_acquire+0xab9/0xd20 [ 558.390706][ T31] ? __pfx___schedule+0x10/0x10 [ 558.395637][ T31] ? schedule+0x91/0x360 [ 558.399967][ T31] schedule+0x165/0x360 [ 558.404153][ T31] schedule_preempt_disabled+0x13/0x30 [ 558.409932][ T31] __mutex_lock+0x7e6/0x1360 [ 558.414573][ T31] ? __mutex_lock+0x5b6/0x1360 [ 558.419522][ T31] ? genl_rcv_msg+0x10d/0x790 [ 558.424249][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 558.429486][ T31] ? stack_trace_save+0x9c/0xe0 [ 558.434369][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 558.439833][ T31] ? radix_tree_lookup+0x240/0x290 [ 558.445069][ T31] genl_rcv_msg+0x10d/0x790 [ 558.449783][ T31] ? __lock_acquire+0xab9/0xd20 [ 558.454771][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.459925][ T31] netlink_rcv_skb+0x205/0x470 [ 558.464743][ T31] ? __lock_acquire+0xab9/0xd20 [ 558.470030][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.475113][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 558.480606][ T31] ? down_read+0x1ad/0x2e0 [ 558.485042][ T31] genl_rcv+0x28/0x40 [ 558.489258][ T31] netlink_unicast+0x82c/0x9e0 [ 558.494264][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 558.499671][ T31] ? netlink_sendmsg+0x642/0xb30 [ 558.505238][ T31] ? skb_put+0x11b/0x210 [ 558.509746][ T31] netlink_sendmsg+0x805/0xb30 [ 558.514546][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.520213][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 558.525342][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 558.530851][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.536269][ T31] __sock_sendmsg+0x219/0x270 [ 558.541020][ T31] __sys_sendto+0x3bd/0x520 [ 558.545680][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 558.550956][ T31] ? count_memcg_event_mm+0x21/0x260 [ 558.556445][ T31] ? exc_page_fault+0x76/0xf0 [ 558.561333][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 558.566767][ T31] __x64_sys_sendto+0xde/0x100 [ 558.571931][ T31] do_syscall_64+0xfa/0x3b0 [ 558.576566][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 558.581872][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.588191][ T31] ? clear_bhb_loop+0x60/0xb0 [ 558.593002][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.599046][ T31] RIP: 0033:0x7fd782d90a7c [ 558.603597][ T31] RSP: 002b:00007fd783b29ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 558.612474][ T31] RAX: ffffffffffffffda RBX: 00007fd783b29fc0 RCX: 00007fd782d90a7c [ 558.620764][ T31] RDX: 000000000000001c RSI: 00007fd783b2a010 RDI: 000000000000000c [ 558.629225][ T5884] Bluetooth: hci18: command tx timeout [ 558.631380][ T31] RBP: 0000000000000000 R08: 00007fd783b29f14 R09: 000000000000000c [ 558.644663][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c [ 558.652981][ T31] R13: 00007fd783b29f68 R14: 00007fd783b2a010 R15: 0000000000000000 [ 558.661129][ T31] [ 558.664249][ T31] [ 558.664249][ T31] Showing all locks held in the system: [ 558.672163][ T31] 1 lock held by khungtaskd/31: [ 558.677116][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 558.687088][ T31] 2 locks held by getty/5626: [ 558.692829][ T31] #0: ffff88802fb3e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 558.702891][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 558.713301][ T31] 2 locks held by kworker/u9:2/5871: [ 558.718679][ T31] #0: ffff888024fb7948 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 558.730252][ T31] #1: ffffc9000419fbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 558.742559][ T31] 3 locks held by syz.2.2405/15156: [ 558.748320][ T31] #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 558.756751][ T31] #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 558.765828][ T31] #2: ffff888024fb3a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x2f/0x2a0 [ 558.776403][ T31] 2 locks held by syz.0.2407/15161: [ 558.782264][ T31] #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 558.793586][ T31] #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 558.803714][ T31] 2 locks held by syz.0.2407/15164: [ 558.809075][ T31] #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 558.817417][ T31] #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 558.826644][ T31] 2 locks held by syz.3.2408/15168: [ 558.832828][ T31] #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 558.841301][ T31] #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 558.850588][ T31] 2 locks held by syz.3.2408/15169: [ 558.855813][ T31] #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 558.864489][ T31] #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 558.874036][ T31] 2 locks held by syz.1.2409/15172: [ 558.879738][ T31] #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 558.888033][ T31] #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 558.897154][ T31] 2 locks held by syz.4.2410/15177: [ 558.902518][ T31] #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 558.911374][ T31] #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 558.920700][ T31] 2 locks held by syz-executor/15184: [ 558.926320][ T31] #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 558.934627][ T31] #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 558.943796][ T31] 2 locks held by syz-executor/15187: [ 558.948318][ T5884] Bluetooth: hci19: command tx timeout [ 558.949417][ T31] #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 558.963398][ T31] #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 558.972706][ T31] 2 locks held by syz-executor/15190: [ 558.978172][ T31] #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 558.986426][ T31] #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 558.995524][ T31] 2 locks held by syz-executor/15204: [ 559.001229][ T31] #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.009634][ T31] #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 559.019129][ T31] 2 locks held by syz-executor/15210: [ 559.024658][ T31] #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.033330][ T31] #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 559.042577][ T31] 2 locks held by syz-executor/15231: [ 559.048048][ T31] #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.056449][ T31] #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 559.065740][ T31] 2 locks held by syz-executor/15233: [ 559.071383][ T31] #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.079833][ T31] #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 559.089029][ T31] 2 locks held by syz-executor/15235: [ 559.094551][ T31] #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.102896][ T31] #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 559.112419][ T31] 2 locks held by syz-executor/15251: [ 559.118027][ T31] #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.126276][ T31] #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 559.135626][ T31] 2 locks held by syz-executor/15255: [ 559.141081][ T31] #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.149389][ T31] #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 559.158609][ T31] 2 locks held by syz-executor/15275: [ 559.164007][ T31] #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.172314][ T31] #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 559.181537][ T31] 2 locks held by syz-executor/15277: [ 559.187121][ T31] #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.195514][ T31] #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 559.204857][ T31] 2 locks held by syz-executor/15292: [ 559.210551][ T31] #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.218872][ T31] #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 559.227973][ T31] 2 locks held by syz-executor/15297: [ 559.233457][ T31] #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.242212][ T31] #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 559.251288][ T31] 2 locks held by syz-executor/15299: [ 559.256681][ T31] #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 559.264965][ T31] #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 559.274324][ T31] [ 559.276677][ T31] ============================================= [ 559.276677][ T31] [ 559.287166][ T31] NMI backtrace for cpu 1 [ 559.287189][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 559.287214][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 559.287227][ T31] Call Trace: [ 559.287237][ T31] [ 559.287246][ T31] dump_stack_lvl+0x189/0x250 [ 559.287281][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 559.287305][ T31] ? __pfx__printk+0x10/0x10 [ 559.287349][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 559.287377][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 559.287403][ T31] ? __pfx__printk+0x10/0x10 [ 559.287438][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 559.287472][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 559.287500][ T31] watchdog+0xf93/0xfe0 [ 559.287536][ T31] ? watchdog+0x1de/0xfe0 [ 559.287571][ T31] kthread+0x70e/0x8a0 [ 559.287602][ T31] ? __pfx_watchdog+0x10/0x10 [ 559.287628][ T31] ? __pfx_kthread+0x10/0x10 [ 559.287656][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 559.287680][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.287705][ T31] ? __pfx_kthread+0x10/0x10 [ 559.287732][ T31] ret_from_fork+0x3f9/0x770 [ 559.287756][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 559.287791][ T31] ? __switch_to_asm+0x39/0x70 [ 559.287821][ T31] ? __switch_to_asm+0x33/0x70 [ 559.287845][ T31] ? __pfx_kthread+0x10/0x10 [ 559.287871][ T31] ret_from_fork_asm+0x1a/0x30 [ 559.287915][ T31] [ 559.433972][ T31] Sending NMI from CPU 1 to CPUs 0: [ 559.439278][ C0] NMI backtrace for cpu 0 [ 559.439296][ C0] CPU: 0 UID: 0 PID: 7779 Comm: kworker/0:10 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 559.439317][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 559.439329][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 559.439355][ C0] RIP: 0010:lock_is_held_type+0x10b/0x190 [ 559.439381][ C0] Code: 0f 95 c0 31 db 39 c5 0f 94 c3 eb 05 bb 01 00 00 00 48 c7 c7 49 61 ba 8d e8 92 16 00 00 b8 ff ff ff ff 65 0f c1 05 35 24 27 07 <83> f8 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 [ 559.439397][ C0] RSP: 0018:ffffc900030078b8 EFLAGS: 00000057 [ 559.439411][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: a44fba4917712800 [ 559.439423][ C0] RDX: 0000000000000000 RSI: ffffffff8dba6149 RDI: ffffffff8be33400 [ 559.439435][ C0] RBP: 00000000ffffffff R08: ffffffff8ec7fa23 R09: 1ffffffff1d8ff44 [ 559.439447][ C0] R10: dffffc0000000000 R11: fffffbfff1d8ff45 R12: 0000000000000246 [ 559.439459][ C0] R13: ffff88804e981e00 R14: ffffffff8e139fa0 R15: 0000000000000002 [ 559.439472][ C0] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 559.439486][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 559.439498][ C0] CR2: 00005601179f14d8 CR3: 000000000df36000 CR4: 00000000003526f0 [ 559.439514][ C0] Call Trace: [ 559.439520][ C0] [ 559.439533][ C0] __might_resched+0xf5/0x610 [ 559.439555][ C0] ? __pfx___might_resched+0x10/0x10 [ 559.439570][ C0] ? do_raw_spin_lock+0x121/0x290 [ 559.439597][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 559.439620][ C0] wg_ratelimiter_gc_entries+0x3a6/0x450 [ 559.439641][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 559.439659][ C0] process_scheduled_works+0xade/0x17b0 [ 559.439692][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 559.439718][ C0] worker_thread+0x8a0/0xda0 [ 559.439756][ C0] kthread+0x70e/0x8a0 [ 559.439779][ C0] ? __pfx_worker_thread+0x10/0x10 [ 559.439795][ C0] ? __pfx_kthread+0x10/0x10 [ 559.439817][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 559.439839][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.439860][ C0] ? __pfx_kthread+0x10/0x10 [ 559.439881][ C0] ret_from_fork+0x3f9/0x770 [ 559.439901][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 559.439922][ C0] ? __switch_to_asm+0x39/0x70 [ 559.439944][ C0] ? __switch_to_asm+0x33/0x70 [ 559.439966][ C0] ? __pfx_kthread+0x10/0x10 [ 559.439987][ C0] ret_from_fork_asm+0x1a/0x30 [ 559.440020][ C0] [ 559.440658][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 559.692614][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 559.704688][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 559.714756][ T31] Call Trace: [ 559.718074][ T31] [ 559.721104][ T31] dump_stack_lvl+0x99/0x250 [ 559.725746][ T31] ? __asan_memcpy+0x40/0x70 [ 559.730443][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 559.735835][ T31] ? __pfx__printk+0x10/0x10 [ 559.740468][ T31] vpanic+0x281/0x750 [ 559.744500][ T31] ? __pfx_vpanic+0x10/0x10 [ 559.749013][ T31] ? preempt_schedule+0xae/0xc0 [ 559.753883][ T31] ? preempt_schedule_common+0x83/0xd0 [ 559.759362][ T31] panic+0xb9/0xc0 [ 559.763098][ T31] ? __pfx_panic+0x10/0x10 [ 559.767528][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 559.772921][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 559.779178][ T31] watchdog+0xfd2/0xfe0 [ 559.783356][ T31] ? watchdog+0x1de/0xfe0 [ 559.787706][ T31] kthread+0x70e/0x8a0 [ 559.791884][ T31] ? __pfx_watchdog+0x10/0x10 [ 559.796575][ T31] ? __pfx_kthread+0x10/0x10 [ 559.801181][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 559.806408][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.811622][ T31] ? __pfx_kthread+0x10/0x10 [ 559.816314][ T31] ret_from_fork+0x3f9/0x770 [ 559.821184][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 559.826315][ T31] ? __switch_to_asm+0x39/0x70 [ 559.831193][ T31] ? __switch_to_asm+0x33/0x70 [ 559.836062][ T31] ? __pfx_kthread+0x10/0x10 [ 559.840754][ T31] ret_from_fork_asm+0x1a/0x30 [ 559.845727][ T31] [ 559.849227][ T31] Kernel Offset: disabled [ 559.853990][ T31] Rebooting in 86400 seconds..