last executing test programs: 20.228842555s ago: executing program 3 (id=2797): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) epoll_wait(r2, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) r3 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140)={0x4}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 18.512045319s ago: executing program 3 (id=2812): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1c, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000005d40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000170100000300000001000000000000001800000000000000170100000200000000000000000000002682770bc49816a0ae6b246c030ea95e961921bba70c6e37e752deb7567441ba1f7905956357dd5c1bb3b5801e4c10003eb0dac34fd3c2044a46633f30777d3acd65b80088002512609459de7cb42c8e0d9c9e50e466d90fee39d9"], 0x30, 0x40001}], 0x1, 0x8004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc6, 0x8, 0x0, 0x0, 0xffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4}, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) 18.475563002s ago: executing program 1 (id=2814): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x801) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xcff7}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000007380)=@newtaction={0x3ec4, 0x30, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{0xc8, 0x1, [@m_vlan={0xc4, 0x1b, 0x0, 0x0, {{0x9}, {0x80, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x659}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x401, 0x1, 0x1, 0x6, 0x7}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xdb0}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8001, 0x410, 0x3, 0xde1, 0x10}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x6, 0x1, 0x0, 0x1ff}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x19, 0x6, "cff77e17baf253ee31133b654058ceb6e634d5b89e"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x10c4, 0x1, [@m_connmark={0x10c0, 0x1c, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x3, 0x20000000, 0x7, 0x8}, 0x84}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x1ff, 0x20000000, 0xd48d, 0x4}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0xffff7eae, 0x7, 0x81a, 0xefe2}, 0xb9c2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x7fff, 0x7, 0x4, 0x101}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x9, 0x4, 0xe49d, 0x7}, 0x1c}}]}, {0x1001, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x1a0, 0x1, [@m_gact={0xa4, 0x8, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x401, 0x7, 0x3, 0xfff, 0x9}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x14b, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x749, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x9, 0x10000000, 0x8001, 0xd291}}, @TCA_GACT_PARMS={0x18, 0x2, {0x532, 0x3c, 0x2, 0x1000, 0xab2}}]}, {0x15, 0x6, "420e371041b10a0d521ac11d058b0ad67a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_tunnel_key={0xf8, 0xf, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}]}, {0xbd, 0x6, "ced91c1c3d45ff60b1dc02eb6ea5b46fe9d562e59aedb6e31ea9559c23dad3839a7e1a4d32e42caaaecfed404ccecca8b710c12a2065703075ded4d68aee4b1c75577a8d2c55c02d8ed594ff186524ef50a9df2927ea795ad185a41373562143df6f259c496828cac608f5d5c3718e9c97f636221eb87f7eb444179f5d22136925103c3fa5c057ec5a334d1c1a13b94e36d1ef855a7b8e62ad5a3bc84244da0455ce67342bf0e58befe559a5920866d2cddaddb1bf526f26a7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x2b84, 0x1, [@m_mpls={0xf0, 0x18, 0x0, 0x0, {{0x9}, {0x4}, {0xc1, 0x6, "292a6e9e753e1d36ff74fa10f57744a4b363b3839569b393105ac4e8868e874a63c09485c4d3c0a0b2dd3cd87c4842725c135770bde37312238c551855dd64b7fa6822fdde7649c074c889b1b127135a95c5c037a0a27dc759c826ed198cce07732b9fe18abed7b5a23cb7dbe77ee741f8e99e49fa5eeca57f18b2885d29c017bff818c5f2a90925b933b029dbbf46374049c9ad2e6dfcf4b79b43b42ced8f74be78a431b9db4e1e4e02f5c34a5540e0ac0a83135611ed7d36b1e7129a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_pedit={0x2a90, 0x9ec, 0x0, 0x0, {{0xa}, {0x2a64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x6, 0xfffffffe, 0x1, 0x1, 0xb}, 0x0, 0x7}, [{0x2, 0x3, 0x8, 0x4, 0x6, 0x1}, {0x6, 0x7, 0xfff, 0x7, 0x5, 0xedb}, {0xffffffc6, 0x6e, 0x400, 0x29b79b7c, 0x2b3}, {0x7, 0x838, 0x1a3f38c0, 0x7, 0x0, 0x2}, {0x1, 0x8, 0x1, 0x0, 0x8f8, 0x2}, {0x4d5, 0x96, 0x1, 0x0, 0xffffff14, 0x9}, {0xaae, 0xd, 0x200000, 0x1, 0x6c, 0x80}, {0x3, 0xba16, 0x3, 0x40000, 0x1, 0x6}, {0x9, 0x3, 0x5, 0xbf4, 0x895, 0xfffffe00}, {0x6, 0x80000000, 0xd, 0x4, 0x8, 0x3}, {0x9, 0x4, 0x10001, 0x0, 0x2, 0x200}, {0x4, 0x5, 0x0, 0x3ff, 0x1, 0x5}, {0x7ff, 0x8000, 0xa045, 0x7ff, 0x3, 0x8001}, {0x7, 0x2, 0x1, 0x400, 0x1, 0x9}, {0x8f, 0x6, 0x4, 0x8, 0xb7d, 0x7f}, {0x2, 0xbf2f, 0x78, 0x10000, 0xe, 0x11}, {0x7, 0x8, 0x40, 0x122, 0x205, 0xa}, {0x6, 0x8001, 0xfffffff9, 0x1ff, 0x48bfded0, 0xfffffeff}, {0xfffffff8, 0x9, 0x1, 0x5, 0x7}, {0xde6, 0x7f, 0x7f911025, 0x0, 0x0, 0xf}, {0x3, 0x1ff, 0xfffffff5, 0x80000001, 0x200, 0x7}, {0x8, 0xfffffffc, 0xc1d1, 0x1ff, 0x3, 0x2}, {0x8, 0x4, 0x2, 0x5, 0x3, 0x6}, {0xa1f, 0x8, 0x3, 0x401, 0x7, 0x2}, {0x797, 0x4, 0x3ff, 0x81, 0x0, 0x3}, {0x7fffffff, 0xdbb, 0x5, 0x8f2, 0x4, 0x2}, {0x59, 0x6, 0x6, 0x9, 0x3985772b, 0x8}, {0x4, 0x100, 0x8000, 0x8, 0x6, 0xcc}, {0x44b, 0x2, 0x7, 0xc, 0xffffff7f, 0x8}, {0x4, 0x3, 0x7, 0x8, 0x0, 0x1}, {0x7, 0x6, 0x0, 0xfffffffb, 0x8, 0x4}, {0x800, 0x60403d1c, 0x6, 0x2, 0xac2, 0x6}, {0x6, 0x3, 0x800, 0x7f, 0x80, 0x1}, {0xd19f, 0xfffffff7, 0x8, 0xffff, 0xffffffff, 0x6}, {0x6, 0x2, 0x3, 0x0, 0x16ff0a5b, 0x3}, {0x4, 0x7, 0x8001, 0xfffffffb, 0x9, 0x3ff}, {0x6, 0x7, 0x80, 0x4, 0xe, 0xdba0f42}, {0x1, 0x1, 0xfffffff0, 0xabf, 0x101, 0x6}, {0x5, 0x9, 0x0, 0x2, 0xa22, 0x3}, {0x7, 0x7, 0x40e, 0x2, 0x0, 0x6}, {0x0, 0x2, 0x51f, 0xfff, 0x9, 0x8}, {0x0, 0x7, 0x40, 0x10, 0x2, 0x5}, {0x6, 0xda, 0xfffffffe, 0x800, 0x3, 0x2}, {0xa0, 0x4, 0x64f6, 0x101, 0x401, 0x8}, {0x9, 0x8, 0x4, 0x5, 0xff, 0x8001}, {0x5, 0x8, 0x0, 0x0, 0x3, 0x4}, {0xfffffff7, 0x79, 0x1, 0x6, 0x200, 0x5}, {0x2, 0x1, 0x80, 0xc83, 0x6, 0x80}, {0x5ec6, 0x4, 0x9d3, 0x0, 0x401, 0x5}, {0x5, 0x8, 0x8, 0x0, 0x4, 0x85}, {0x80000000, 0xdc, 0xfffffff4, 0x0, 0xfff, 0x5}, {0xf, 0x5, 0x2f9, 0x0, 0x6, 0x3}, {0x2, 0x4, 0x6, 0x4, 0x6, 0x1}, {0x1, 0x7f, 0x2, 0x3, 0x7}, {0x800, 0x3, 0x6, 0x9, 0x9, 0x1}, {0x6, 0x81, 0x1, 0x8, 0x9a52, 0xfff}, {0x29cb7468, 0x9, 0x6, 0x5, 0x200, 0x81}, {0xf9f, 0x10001, 0x2, 0x7, 0xff, 0x3ff}, {0xb, 0x4, 0x7, 0x579, 0x3ff}, {0xa, 0xffffffff, 0xa4, 0x7, 0xfe, 0x80000001}, {0x6, 0x3, 0x2, 0x3, 0xffffffff, 0x8}, {0x80, 0x45aa, 0x80000001, 0x808, 0xff, 0x6}, {0x2, 0x81, 0x8001, 0x5d, 0x5, 0x10000}, {0x3, 0x4, 0x8, 0xb, 0x2, 0x3}, {0xe4f, 0x6, 0x8, 0x4, 0x9, 0x8001}, {0x2, 0xc000, 0x400, 0x1, 0x3ff, 0x4}, {0x3, 0x8000, 0x6, 0x1, 0x8000, 0x3}, {0x7, 0x4, 0x7f, 0x1, 0x0, 0xb}, {0x9, 0x800, 0x9, 0x9, 0xc, 0x8}, {0x7fffffff, 0xff, 0x61, 0x2, 0x0, 0x9}, {0x4, 0xc27, 0xca, 0x5, 0x3, 0x5}, {0x3ff, 0xffffffc9, 0xc, 0xff, 0xf5f9, 0xd05}, {0x0, 0x2, 0x9, 0x9, 0x80000001, 0x1}, {0x11, 0x1, 0x7, 0x0, 0x9, 0x1}, {0x8, 0x1, 0x5, 0x12f8, 0x81, 0x6}, {0x1, 0x8, 0x3ff, 0x8, 0x2, 0x3ff}, {0x5, 0x10001, 0x89, 0x1ff, 0x7328451e, 0xff}, {0x7fff, 0x2, 0x9, 0x1, 0x87cc, 0x5}, {0x9, 0x8, 0x1, 0x4, 0x0, 0x3}, {0x3, 0xa7d5, 0xffffffff, 0x2a, 0x9, 0xf}, {0x9, 0x2, 0x1, 0x1, 0x7, 0x5}, {0xfffffffe, 0x1, 0xffffffff, 0x4, 0x1000, 0x2}, {0xffffef7a, 0x10000, 0x7, 0x1, 0x9, 0x80000000}, {0x8, 0x8, 0x6, 0x5, 0x7, 0x9}, {0x5, 0xa, 0x8, 0x5, 0x8}, {0x4, 0xffff, 0x6, 0x6, 0x5, 0x279a}, {0x3, 0x7a0, 0x1c, 0x2, 0x6}, {0x80000000, 0x0, 0x2, 0x0, 0x7, 0x2}, {0x7fffffff, 0xfffffff8, 0x3, 0xffffff01, 0x0, 0x3}, {0x5, 0x0, 0xff, 0x80, 0x10, 0xfffffffe}, {0x7, 0xa, 0x2f, 0x0, 0x6, 0x2}, {0x2, 0x9, 0xd868, 0x8001, 0xffff, 0xffffffff}, {0x2be8, 0x0, 0x9, 0x2, 0x8, 0x10}, {0x6, 0x3, 0x7ff, 0x0, 0x1, 0x2}, {0x6, 0x3, 0x26ee, 0x5, 0x6, 0x59}, {0xffff450c, 0x9, 0x3, 0xffff, 0x686}, {0x1, 0x6, 0x80000001, 0x9, 0x0, 0x10}, {0x7, 0xf, 0x7, 0xe84, 0x8, 0x6}, {0x2, 0x100, 0x1000, 0x400000, 0xe613, 0x221}, {0xffff, 0x7f, 0x0, 0xfffffffa, 0x1, 0x8}, {0x0, 0x8, 0x7d, 0x7, 0x8, 0x83c}, {0x4, 0xbedc, 0x6, 0xb, 0xa9c8, 0x75a}, {0x6, 0xffffff98, 0xffff, 0x6bb9762b, 0x2, 0x8001}, {0xfffffbff, 0x6, 0x8, 0x8a, 0x5, 0x81}, {0x6, 0x2, 0x8, 0x800, 0x5, 0x6}, {0x10040000, 0x5, 0x7, 0x7fffffff, 0x4, 0xfffffff9}, {0x8001, 0x0, 0x6, 0x401, 0x401, 0xc}, {0x9, 0x400, 0x2, 0x8, 0x3, 0x10}, {0x1, 0x2, 0x7, 0x4ef2, 0x8, 0x7773}, {0xd, 0x8, 0xff, 0xcb, 0xffffff35, 0x4}, {0xc27, 0x4, 0x1, 0x70e0000, 0xfff, 0x8}, {0x1, 0xc69, 0xfffffff8, 0xf92, 0x2, 0x1}, {0x6, 0xc, 0x51, 0xd, 0xfffffffc, 0x7}, {0x1, 0x3, 0x4, 0x4, 0x4}, {0x9, 0x2, 0xfffff801, 0x9, 0x2, 0xffff}, {0x7, 0x620, 0x7, 0x400, 0x0, 0x9}, {0xa1, 0x10001, 0x5, 0xf, 0x10, 0x9}, {0x5, 0x7fffffff, 0x3, 0x8, 0xf7, 0x800}, {0x7, 0x4, 0x1, 0x37f, 0xe8b, 0xfffffff7}, {0x800, 0x8, 0x4, 0xfffffffb, 0x9, 0x6}, {0x6, 0x2b72, 0x4, 0x9, 0xe}, {0x6, 0x240, 0x1, 0x7, 0xfffffffe, 0xfffff001}, {0x8, 0x3, 0xe89d, 0x16, 0xfffff939, 0x1000}, {0xdd, 0x9, 0x1, 0x80, 0x1, 0x8}, {0x6, 0xfffffff8, 0x6, 0x6, 0x6, 0x8}, {0x4, 0xe8, 0x383, 0x82, 0x0, 0xc054}, {0x0, 0x1ff, 0x5df0, 0x5, 0xc37, 0xc}, {0x6, 0x10, 0x4, 0x1, 0x2, 0x2}], [{0x3}, {0x1, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {}, {0x3}, {0x2, 0x1}, {0x1}, {0x0, 0x36d99b5dccfe475b}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2}, {0x5}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x3}, {0x1}, {0x4}, {0x3}, {0x3}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0xbc79cea73d5f2f7a}, {0x1, 0x1}, {0x2}, {0x4}, {0x5}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x4, 0x567c35511c187c16}, {0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x9976fc7fadd300a3}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x3}, {}, {0x4}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x2, 0x1}, {}, {0x3, 0x6732be8d3805c632}, {0x4}, {0x1}, {0x5, 0x1}, {0x3}, {}, {0x2}, {0x3}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x8, 0xfff, 0x3, 0x8, 0x4}, 0x3, 0xf}, [{0x8b8, 0x7f, 0x2, 0x4, 0x2, 0x9}, {0x9, 0xef, 0xffffbf45, 0x2, 0x0, 0x5}, {0x32c0, 0xfffffffe, 0xfff, 0x2, 0x0, 0x5}, {0x7, 0x1ff, 0xa, 0x10b, 0x1, 0x4}, {0x7, 0x7fff, 0x94cf, 0xe0c7, 0x400, 0x39e4}, {0x9, 0x8, 0x0, 0xd, 0x7, 0x8}, {0x5, 0x4, 0x6, 0x1, 0xfffffadc, 0x7}, {0x100000, 0x9, 0xd, 0x9, 0x6, 0x377d}, {0x0, 0x9, 0x0, 0x6, 0x82a, 0x1}, {0xaa, 0x4f57, 0x2, 0x4, 0x8, 0x5}, {0xfffffffb, 0x1, 0x8, 0x2, 0x4c, 0x6}, {0x9, 0xfffffff8, 0x8, 0xa, 0x7, 0x7ff}, {0xd40, 0x1000, 0x2, 0x13e, 0xfffffffd, 0xfffffffd}, {0x6, 0xf36, 0xfffffff7, 0x8, 0x2, 0xff}, {0x7, 0x6, 0xb693, 0x4, 0x4, 0x10000}, {0x0, 0x41, 0x6, 0x7fff, 0x7, 0x2}, {0x1947c000, 0xa93c, 0x9, 0x1, 0x65, 0x8}, {0x3, 0x80000001, 0x5, 0x0, 0x4, 0xfffffffc}, {0x1ff, 0xffff, 0x4, 0x0, 0xfffffffc, 0x6}, {0x7, 0x114, 0x4, 0x10001000, 0x4, 0x8}, {0x5d9f6853, 0x4, 0x800, 0x2, 0xb}, {0x101, 0xfff, 0xfffffff9, 0x9, 0x3, 0x7}, {0x10, 0x7, 0x7, 0x2, 0x2, 0x4}, {0x9, 0x6, 0x7, 0x5, 0x8, 0x1}, {0x7ca, 0x22, 0x5, 0x4, 0x5, 0xfffffffd}, {0x6, 0x7, 0x80000000, 0x5, 0xfffff505, 0x10000}, {0xffffffff, 0xffff, 0x7fff, 0xf3c50776, 0x7, 0xb5f}, {0x80000001, 0x8, 0x44, 0xc7f, 0x3, 0x7fffffff}, {0xffffff07, 0x9, 0xfc, 0x4, 0x9, 0x2bb2}, {0x10, 0x5, 0x7, 0x6, 0x5, 0xb81}, {0x8, 0x3, 0x7f, 0x6, 0x6a, 0x1}, {0x7, 0x80000000, 0x7, 0x9, 0x90, 0x7fffffff}, {0x40, 0x0, 0xffff, 0x2, 0xd, 0xd}, {0x3, 0x7, 0xd, 0x8, 0x7, 0x9}, {0x8, 0x1, 0x10001, 0x7, 0x5, 0x9}, {0x401, 0xfa7, 0x200, 0x7, 0x5ae, 0x5}, {0x0, 0x80000000, 0x8, 0x2, 0x9, 0xe}, {0x19, 0x1, 0x7, 0x448, 0x7, 0x4}, {0x7, 0xc, 0xfffffff7, 0xc, 0xd, 0x3}, {0x5, 0x3, 0x5, 0x40, 0x9540000, 0x3}, {0x5, 0xc, 0x5, 0x5, 0x9, 0x8}, {0x2, 0x0, 0x3, 0x0, 0x5, 0x3}, {0x800, 0x9, 0x7fffffff, 0x9, 0x3, 0x9}, {0x7, 0x0, 0x56, 0x6, 0x0, 0x8001}, {0x9, 0x8, 0x8, 0x8001, 0x1ff, 0xff}, {0xfffffffa, 0x8, 0x9, 0x5, 0x800, 0x8}, {0x3, 0x1, 0x5, 0x3ded, 0xffff, 0xaf}, {0x1, 0x8000, 0x4, 0x6, 0x8, 0x5}, {0x9, 0x0, 0x6, 0x200, 0x4, 0xef6}, {0x10, 0x69, 0xb0, 0xf, 0x10000, 0xfffffffa}, {0xffff, 0x10, 0x8, 0xec, 0x8000, 0xa2f}, {0x8, 0x5, 0x4, 0x7, 0x5, 0xd7}, {0x6, 0x5, 0x80, 0xffffcfe9, 0x8, 0x7834f733}, {0x1, 0x8001, 0x0, 0x8, 0x81, 0x2}, {0x10, 0x5, 0x8001, 0x6, 0x9, 0xb}, {0xa2c, 0x9, 0x0, 0x6, 0xd, 0x4bfd}, {0x6, 0x7ff, 0x8000, 0x818e, 0x101}, {0x7, 0x8, 0x0, 0x5d5, 0xfffffff8, 0x3}, {0xf973f34c, 0x3, 0xdd, 0x7, 0xfff, 0x7}, {0x3, 0xb, 0x5, 0xfff, 0x3, 0x6}, {0x3b79, 0xe, 0x4, 0x3, 0xb7, 0x4}, {0xffffffff, 0x10, 0x9, 0xfffffffe, 0x2e, 0x3}, {0xfffffff1, 0xffff, 0x3, 0xfffffff4, 0x7, 0x1}, {0x0, 0x1000, 0x81, 0x1, 0x8, 0x3}, {0x3, 0x4, 0x9, 0x8, 0x10, 0x71}, {0xc3249586, 0x80000001, 0x40, 0x4, 0x80, 0x8}, {0xffffff01, 0x200, 0x30c, 0x0, 0x83, 0x7fffffff}, {0x40, 0xb75, 0x7, 0x5, 0xc985, 0x416}, {0x0, 0x1, 0x6, 0x10001, 0x80000000, 0x800}, {0x0, 0xa6, 0x119c, 0x7fff, 0x75e}, {0x1, 0xd97, 0x2a, 0xb55, 0xffffffff, 0xf}, {0x7, 0x80000000, 0x7, 0x9, 0x6, 0x31e}, {0x3ff, 0x6e, 0x0, 0x80000001, 0xb, 0x1}, {0xfffffffa, 0x94f, 0x67925e73, 0x7ff, 0x1, 0x4}, {0x7, 0x7, 0x81, 0x7, 0x200, 0xfffffff7}, {0x2, 0x4, 0x5, 0x1, 0x5, 0xa}, {0x9, 0x9, 0x6, 0x9, 0x4, 0x3}, {0xffffffff, 0x3f49, 0x7, 0x1, 0xffff0000, 0x5}, {0x3, 0xc, 0x3, 0x2, 0x7, 0x4}, {0x6, 0x9, 0x32df, 0x8, 0x1, 0x9}, {0x4a, 0xe, 0x8000, 0x0, 0x7ff, 0x9}, {0x9, 0x9, 0x5, 0xfff, 0x2, 0x3}, {0xe, 0x9, 0x3, 0x0, 0x59d7, 0x8000}, {0x3, 0x45, 0x9, 0xffffff80, 0x5, 0x8001}, {0xffffff3b, 0x5, 0x5, 0xffff, 0x1, 0x6}, {0x7, 0x0, 0x0, 0x3, 0x7, 0xd}, {0xc6b, 0x5, 0xfffffffc, 0xffff, 0x800, 0x1}, {0x0, 0x6, 0x8, 0x7f, 0xb4, 0xfffffffd}, {0x200, 0x5, 0x80, 0xfa, 0x1, 0x5}, {0x2, 0x0, 0x7ff, 0x8, 0x7}, {0x38000, 0xfffffc00, 0x1, 0x7, 0xfffffffd}, {0x10001, 0xfffffb32, 0x9, 0x3, 0x3, 0xa9f}, {0x3d2, 0x8, 0x400, 0x4, 0x9, 0x10001}, {0x6, 0x4, 0x0, 0x80dd, 0x6, 0xff}, {0x0, 0x0, 0x5, 0x4, 0x0, 0xfffffff9}, {0x80000000, 0xb, 0x0, 0x5, 0xcb, 0xaa7}, {0x8, 0xfffffff8, 0xfffffffc, 0x5, 0xae, 0x1}, {0x7, 0xf, 0x3, 0x6, 0x9, 0x1}, {0x2, 0x4, 0x0, 0x4, 0xfffffff9, 0x7fffffff}, {0x5, 0x8, 0x8, 0x7, 0x8001, 0x2}, {0x3, 0x0, 0x3, 0xfffffffb, 0xf38f, 0x5}, {0x2, 0x4, 0x10000, 0x1000, 0x10001, 0xe}, {0x0, 0x1eb, 0x7fff, 0x2, 0x0, 0x55}, {0x7, 0x3, 0x1, 0x5, 0x3, 0x7ff}, {0x9, 0x5, 0xd1, 0x30f, 0x1, 0x40}, {0x5, 0x5, 0x5, 0x0, 0x0, 0x4}, {0x2, 0xe29, 0x5, 0x8, 0x54, 0x539f}, {0x8, 0x9, 0x77, 0xd7, 0x3, 0x1ff}, {0x6, 0x4a, 0x7f, 0x5, 0x1, 0x3}, {0x9, 0x800, 0x0, 0x1, 0xc00000, 0x4}, {0x8, 0x88, 0x4, 0x7, 0x1, 0x81}, {0x5, 0x2, 0x7, 0x3ff, 0x401}, {0x1, 0xa9, 0x5, 0xfffffff7, 0xffff, 0x5}, {0x1, 0x0, 0x6, 0x5, 0x2, 0xfe6}, {0x101, 0x5, 0x8, 0xfffff001, 0x8c3, 0xff000000}, {0x5, 0x3, 0x3ff, 0x0, 0xac06, 0x7}, {0x2, 0x400, 0x9, 0x5a34e9e0, 0x6, 0x3}, {0x3, 0x2, 0x8, 0x6, 0xfffffffa, 0x9}, {0x5, 0xfffffffd, 0x0, 0x7fff, 0x5, 0xffffffff}, {0xfffffffd, 0xd, 0x8e, 0x6, 0x9, 0xffff}, {0x69, 0xfffffffb, 0x27, 0x3, 0x0, 0x5}, {0x31a7, 0x7fffffff, 0xfffffffe, 0x0, 0x80000001, 0x3f9}, {0x2, 0xffff030b, 0x6, 0x5, 0xe, 0xff}, {0x5, 0x7f, 0x1000, 0x1ff, 0x5, 0x6}, {0x7, 0x3, 0x80000000, 0x9, 0xffffffff, 0x6}, {0x6, 0x1, 0x2, 0x4, 0xe83, 0xffffff17}, {0x2, 0xf37, 0x9, 0x7f, 0x6d, 0xfffffffc}, {0x2, 0x3, 0x2, 0x2d62fc88, 0x8000, 0xff}], [{0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {0x3}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x2}, {0x5}, {0x3}, {0x2}, {0x4}, {0x3}, {0x5, 0x1}, {}, {0x5}, {0x4}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x3, 0x1}, {0x1, 0x64d92e7eae2ecc98}, {0x2}, {0x1, 0x735b680bd70fdc88}, {0x7, 0x1}, {0x2}, {0x1}, {0x2}, {0x4}, {0x3}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x6, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x2}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x5}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x4}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0x7, 0x7, 0xfffffffc, 0xe4}, 0x5, 0x8}, [{0x8, 0x0, 0x7, 0x0, 0xf051}, {0x84, 0x5, 0x0, 0xd6, 0x0, 0x7}, {0x6c5, 0x5, 0x6, 0x7f, 0xcb96, 0x80000000}, {0x4, 0x1ff, 0x54, 0x7303be4a, 0x1, 0xfffffffc}, {0x8, 0x2, 0x8a, 0x8, 0x9, 0x9}, {0xffffffff, 0x5, 0x1800, 0x7f, 0x101, 0xfffffff9}, {0x10, 0x1, 0x10000, 0xb, 0x5, 0x10001}, {0xb102, 0x57a6, 0x3, 0x9, 0x6, 0x7}, {0x0, 0xb985b39d, 0x8, 0xfffff8db, 0x0, 0x6}, {0xd8b3, 0x40, 0x7, 0x9, 0x4, 0x1}, {0x7, 0x961, 0x81, 0x2, 0x6, 0xbd1}, {0x0, 0x80, 0x1000, 0x2, 0x3, 0x4}, {0x7f, 0x4, 0x101, 0x400, 0x0, 0x1}, {0x8, 0x1, 0x8, 0x9, 0x8, 0xb5e}, {0x3a, 0x0, 0x4, 0x4, 0x7, 0x3}, {0x8, 0xd, 0x10000, 0x8000, 0x7, 0x1}, {0x78, 0x9, 0x7, 0xf5, 0xc6, 0x4}, {0x4, 0xd67, 0x7, 0x1, 0x7, 0x6}, {0xd65, 0x1, 0x6, 0x9, 0x6, 0xffff16c3}, {0x7fff, 0x0, 0x4, 0x3, 0x508, 0x3ff}, {0x3, 0xa7, 0xf623, 0x37, 0x0, 0xfffffff7}, {0x40, 0x1961ba77, 0x5556298c, 0x7, 0xa2, 0xfffffffd}, {0x6, 0x500000, 0x8, 0xffffffff, 0x7dd7, 0x1000}, {0x79ae, 0x7fff, 0x1, 0x1, 0x0, 0x401}, {0x3, 0x8, 0x401, 0x55, 0x8, 0x1}, {0x6, 0xf, 0x6, 0x4, 0xe0000000, 0x5}, {0x5, 0x8, 0x1, 0x2, 0x5, 0x5}, {0x7, 0x10001, 0x8, 0x0, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5}, {0x2, 0x5, 0x62d, 0x0, 0x4, 0xa}, {0x2, 0x3, 0xe0000000, 0x401, 0x9, 0xa}, {0x200, 0x4, 0x6, 0x2, 0xc0b, 0xd67}, {0xe09, 0x1, 0x999, 0x8ed0, 0x60000000, 0xa}, {0x8, 0x8, 0xff, 0x4, 0x7, 0x52}, {0x7, 0xfffffffc, 0x1, 0xb}, {0x10000, 0x80000000, 0x7, 0x3, 0x5, 0xbfd}, {0xa964, 0x10, 0xc7ad, 0xc1d, 0x81, 0x3}, {0x2, 0xfffff30d, 0x4, 0x1, 0x23, 0xfffff2e7}, {0x2, 0x3, 0x4, 0x4, 0x2, 0x7f}, {0x0, 0x1000, 0x4, 0xc, 0xaf5, 0x7f}, {0x6, 0x8, 0xb, 0x69, 0x9, 0xfff}, {0x10001, 0xc081, 0x6, 0x5, 0x9, 0xd}, {0x9, 0x666800, 0x1240000, 0x1, 0x6, 0x71}, {0x1000, 0x401, 0x40, 0x4, 0x1, 0xfffffffe}, {0x93e, 0x81, 0x4, 0x5, 0xad09}, {0x55, 0x5, 0xfffffffa, 0x9, 0xffff, 0x4}, {0x1, 0xffffffff, 0x1, 0x4, 0x7e2a409d, 0x8}, {0x3ff, 0x2, 0x0, 0x200, 0x80000000, 0xe}, {0x6, 0x6, 0x400, 0x6, 0x8000, 0x6}, {0xb, 0x1, 0x4, 0x81, 0x80000001, 0x3}, {0x3, 0x8, 0x1, 0xaf, 0x5000, 0x9}, {0x0, 0x1, 0x3000, 0x7fff, 0x200, 0x79b6}, {0x5, 0x6756, 0x7, 0x6, 0x8, 0x2}, {0x200, 0x7f, 0x9, 0x71, 0xfffffffe, 0x2}, {0xffffffff, 0x6cbe, 0x9, 0xebd, 0x1ff, 0x6}, {0x5, 0x5, 0x8, 0x5, 0x2, 0xffff6b8b}, {0x7fff, 0x4, 0x4, 0x1, 0xd501, 0xb}, {0xe, 0x80, 0x1ffe000, 0xe, 0x9, 0x60000000}, {0x1, 0x101, 0x8, 0x8c34, 0x6, 0x1}, {0x6, 0x2, 0x0, 0x68, 0x8001, 0x2}, {0xfff, 0x7fff, 0x9, 0x5, 0x4, 0x4000000}, {0x0, 0x1, 0x2, 0x3, 0x6, 0x101}, {0x2000000, 0x344, 0xffffffff, 0xfffffffe, 0xf, 0xb}, {0x2, 0x94a, 0x4, 0x2, 0x592, 0x5c}, {0x8, 0xda7, 0x8, 0x6bd, 0x401, 0xd}, {0x8a4, 0x7fffffff, 0x3, 0x1, 0x5, 0x2}, {0x3, 0x7, 0x3, 0x4, 0x9000, 0xffffffff}, {0x9, 0x4, 0x7, 0x1, 0x8, 0x10}, {0x3, 0x3, 0x2, 0x2, 0x4, 0xfff}, {0x6, 0x2, 0x9, 0x9, 0x1, 0x7}, {0x5, 0x1, 0x5, 0x1, 0x2, 0x2}, {0x7, 0xd8, 0x9, 0x7f, 0xfff, 0x3fc}, {0x7, 0x2738, 0x3, 0x8, 0x9, 0x7f}, {0x7, 0x7f, 0x40, 0x80000000, 0x7}, {0x1, 0x7f, 0x7, 0x2, 0xffffffff, 0x5}, {0x8, 0x1c000, 0x3, 0xd, 0x4, 0x5}, {0x5343, 0x6, 0x7, 0x7fffffff, 0x7fb, 0x1}, {0x7fffffff, 0x18d, 0xfffffffd, 0x7, 0xe}, {0x401, 0x2e96, 0x200, 0x8, 0x0, 0x4}, {0xffffffff, 0xffff, 0x6, 0x42, 0xc, 0x6}, {0x7, 0xc1, 0xc4, 0x7fff, 0xd, 0x8}, {0x4, 0x3b4, 0x3, 0x9, 0x1fe0000, 0xffffffff}, {0x0, 0x5, 0xd1f, 0x200, 0x6}, {0xff84, 0x9, 0x5, 0xc, 0x7f}, {0x5, 0x3, 0x7, 0x8, 0x6517, 0xb19}, {0xffff, 0xfac2, 0x200, 0x80000000, 0x4, 0x7}, {0x80000001, 0xfff, 0x1e71, 0x7, 0xfffffffe, 0x3}, {0x5, 0x100, 0x10000, 0x4a9, 0x87, 0x785e}, {0x401, 0x5, 0x4, 0x400, 0x4d8, 0x18}, {0x7, 0x5, 0x1, 0x7, 0x15, 0x8c}, {0x101, 0xffff, 0x9, 0x1, 0x5, 0xfffffff8}, {0xffff0001, 0xffff, 0xfffffff8, 0x2, 0x0, 0x7ff}, {0x8, 0x2c0, 0x2, 0xfffffffc, 0x1cf, 0xd}, {0x24, 0xfffff0ab, 0x8, 0x80000001, 0x81, 0x40}, {0x551, 0x8, 0xf9b, 0x51b0, 0x0, 0x7}, {0x9, 0x3, 0xffff5887, 0x101, 0x7, 0x8}, {0xb, 0x5, 0x7, 0x7, 0x9, 0x51}, {0x5, 0xfffffff9, 0xec, 0x8001, 0x6, 0x2}, {0x6, 0x2, 0xb9, 0x9, 0x800000, 0x8}, {0x3, 0x2, 0x6, 0x0, 0x8, 0x39}, {0xfffffff9, 0xdd6, 0x4, 0x8, 0x53c, 0x1}, {0x1, 0x9, 0xf, 0x3d, 0x10001, 0x5}, {0x4, 0xad9e, 0x4, 0x4, 0x6, 0x7}, {0x795, 0x7, 0x7, 0x0, 0x9}, {0x7fff, 0x2, 0xfffffffb, 0x2, 0x3, 0x100}, {0x3d, 0x7fffffff, 0xf1e, 0x80000, 0x5, 0x31c}, {0x5, 0x3, 0x0, 0xfffffc01, 0x6717, 0x3}, {0xffffff7c, 0x7, 0x9, 0x6, 0x401, 0x2}, {0x101, 0x0, 0x9, 0x2, 0x0, 0x8}, {0x101, 0x3, 0x80000000, 0x0, 0x2, 0x1}, {0x5, 0x0, 0xaaad, 0xc, 0x4, 0x3}, {0x400, 0xb, 0x6, 0x1ff, 0x401, 0x4}, {0xfffffff7, 0x81, 0x3, 0x9, 0x1, 0x10001}, {0x81, 0x3, 0xffff, 0x1, 0x4, 0x6}, {0x7fffffff, 0x587, 0x4, 0x1b, 0xba83, 0x8}, {0x1ff, 0x7, 0x1, 0x1, 0x1, 0x5}, {0x252cdb6f, 0x4, 0x6, 0x2ad, 0x2, 0x8}, {0xfffffe00, 0x5, 0x3, 0x1, 0xa, 0x100}, {0x3, 0x0, 0x7, 0x6, 0x2, 0x8000}, {0x37, 0x6, 0xffffffff, 0x3, 0x7, 0x7fffffff}, {0xfffffffb, 0xe, 0x5, 0x7, 0xf, 0x1}, {0x10001, 0x3, 0x5b4c, 0x0, 0xdd9, 0xfffffffb}, {0x0, 0x6, 0xfffffff9, 0x200, 0x3, 0x7}, {0x6d, 0x6, 0x3, 0x0, 0x5, 0x7a}, {0x0, 0x8, 0x7, 0x10001, 0x8, 0x5}, {0xffff, 0x0, 0x9, 0x0, 0x100, 0x9}, {0xee07, 0x5, 0xfffffff7, 0xa, 0x8, 0x3}, {0x7fff, 0xfffffff9, 0x8, 0x4, 0x3, 0x9}], [{0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x4}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5}, {0x0, 0x5206a0caa197fcd9}, {0x1}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {0x2, 0xa475ec344e129f0f}, {0x1}, {0x0, 0x1}, {0x4}, {0x7832eba024985a25, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x7}, {0x5}, {0x1}, {0x3}, {0x5}, {0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x2}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x2}, {}, {0x5}, {0x3}, {0x4}, {0x4}, {0x2, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5}, {0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x3ec4}, 0x1, 0x0, 0x0, 0x8840}, 0x404c8c0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x805) close(r0) 18.228030372s ago: executing program 3 (id=2815): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x2a012, r1, 0x0) writev(r1, &(0x7f0000000a80)=[{&(0x7f0000000900)="5fae6aa36dc1436cfecb6098fd3906a671c5932102513081adedc7e19fa77f71c257a63eefcf99448a96d691dd5443989c526bdb3cc44fb92d34810eda2a20c51f6f2e4c709746afae03894bbf2881464111e7fc791fbc98ce0c39253b012e0ab90f16ae5968cb5983e836c985e1f166fd18a48af3eeb0a5403a24aedd592c36ee55ec412fcb7904817db1676134ff28df260511a7449f910af426302718", 0x9e}, {&(0x7f00000009c0)="c0f43c6f8d91621ce795a42cd65a044cc16fe46a1761e3a49e55ef709368c6517c5e59517dd4992e48148581a3c06381e893983e2350773549c94483485aca928e309fb4ff595abfd52dc01f08833a9301a148510151c8d6ab84fc7799fc0d2de1513749f16db7a7139f9ae1113d150405d5c2fcd04ad4b684c84d31b97bcf31c44df6ab529c218c72e2ae0e9c6bdf4e9d4cbcd96c62e834d488991ea398a49e3dc50a0512347c0cf35aad46563e095c301ea69e49cca6624489", 0xba}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c000140000000000000000320"], 0x110}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000064f3ffbf7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@func={0x3, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x2e, 0x61, 0x0, 0x2e, 0x5f, 0x61, 0x30, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000580)=""/5, 0x30, 0x5, 0x0, 0x9, 0x10000}, 0x28) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xd5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) write$cgroup_subtree(r11, 0x0, 0xfffffe5a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x1a, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @generic={0x3, 0xa, 0x6, 0x9, 0x5}, @alu={0x4, 0x1, 0x0, 0x6, 0x8, 0x100, 0xffffffffffffffff}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xf}, @exit, @exit, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x8, 0xe6, &(0x7f00000003c0)=""/230, 0x41000, 0x10, '\x00', r8, 0x1a, r9, 0x8, &(0x7f0000000600)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x7, 0x6, 0xfffffffc}, 0x10, 0x2ea69, r7, 0x8, &(0x7f0000000780)=[r2, r10, r11, r2], &(0x7f00000007c0)=[{0x4, 0x5, 0x4, 0xc}, {0x3, 0x3, 0x8, 0x8}, {0x1, 0x4, 0x7, 0x7}, {0x3, 0x3, 0xd, 0x8}, {0x3, 0x1, 0x5, 0x6}, {0x5, 0x1, 0xc, 0xc}, {0x4, 0x2, 0x0, 0x4}, {0x5, 0x1, 0x4, 0x9}], 0x10, 0x16dc}, 0x94) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="6400000010001fff26bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="21a0ffff030000e34300128009000100626f6e64"], 0x64}, 0x1, 0x0, 0x0, 0x2004001c}, 0x0) 17.93378479s ago: executing program 1 (id=2818): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa1000000fff80007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 17.776327515s ago: executing program 0 (id=2819): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000440)=""/238, 0xee, 0x0, &(0x7f0000000540)=""/133, 0x85}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x4, 0x21, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @alu={0x7, 0x1, 0x1, 0x4, 0x8, 0xfffffffffffffffc, 0x4}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x7ff, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x1, 0xc, 0x1, 0xfffffff5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000880)=[0xffffffffffffffff, 0x1], &(0x7f00000008c0)=[{0x1, 0x4, 0x0, 0xb}, {0x0, 0x2, 0xe, 0xa62296b9d1e0688e}], 0x10, 0x10001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x80000, 0x0, 0x0, 0x100, 0x74, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xb940, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x21, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107, 0x0, 0x0, 0x0, 0xdb}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @cb_func={0x18, 0x6}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x18, 0x1401, 0x1, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6, r0}, 0xc) 17.739661625s ago: executing program 1 (id=2820): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711241000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 17.584452828s ago: executing program 2 (id=2822): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70400000800000085000000491f000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.5284386s ago: executing program 1 (id=2824): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000040028000480080002400000000008000140000000051400030076"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'fo\x00', 0x1, 0x9d3f, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x6c, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [0xb09a], "7f49"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0xf]}, {}, {}, {0x8, 0x22eb, 0x1, {{}, 0x2, {0x0, 0xfffd}}}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001a00)=@filter={'filter\x00', 0x4, 0x4, 0x440, 0xffffffff, 0xd0, 0x1d8, 0xd0, 0xfeffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2, [0xff, 0xffffff00, 0xff], 0x4e20, 0x4e21, 0x4e21, 0x4e22, 0x5, 0x1, 0x9, 0x0, 0x1}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4}, 0x0, 0x138, 0x198, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x26, 0x8, 0x8, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff, 0xffffff00, 0xff, 0xff], [0xffffffff, 0xffffff00, 0xff, 0xff000000], [0xff000000], 0x72, 0x1674}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0xce24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) socket$packet(0x11, 0x2, 0x300) 17.484347388s ago: executing program 2 (id=2825): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000040028000480080002400000000008000140000000051400030076"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x6c, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [0xb09a], "7f49"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0xf]}, {}, {}, {0x8, 0x22eb, 0x1, {{}, 0x2, {0x0, 0xfffd}}}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001a00)=@filter={'filter\x00', 0x4, 0x4, 0x440, 0xffffffff, 0xd0, 0x1d8, 0xd0, 0xfeffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2, [0xff, 0xffffff00, 0xff], 0x4e20, 0x4e21, 0x4e21, 0x4e22, 0x5, 0x1, 0x9, 0x0, 0x1}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4}, 0x0, 0x138, 0x198, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x26, 0x8, 0x8, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff, 0xffffff00, 0xff, 0xff], [0xffffffff, 0xffffff00, 0xff, 0xff000000], [0xff000000], 0x72, 0x1674}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0xce24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) socket$packet(0x11, 0x2, 0x300) 17.483907697s ago: executing program 0 (id=2826): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000002cc0)={{0xffffffffffffffff, &(0x7f00000005c0)='payload\x00', 0x210c1d338cba4b1e, &(0x7f0000000600)={@align=0x6, {0x10, 0x0, 0x100, 0x4}}, 0xff, &(0x7f0000000640)={@_ha_fsid}, &(0x7f0000000680)=0x3}, 0x6, &(0x7f0000002c00)=[{0x2, 0x9d, &(0x7f00000006c0)='\x00', &(0x7f0000000700)="3e0f558d443e6dc8dc4c90f29a3723ee196906a5376dfb612ecaf96ea1b647aba91ac0140cd737612b08ea2dec86da058c512113c16b6654d1929d00f0ce7a0b4db3d5016522cf5b6d35f2e41f9922cbaba493b965a8bb52d2c345e75681f9e5b167e0c9d94ea8c737d274849d2b93944e5e17149ad715939f2ef37b03060425d89d6e323e54e913cc65b331d5fba2d09655190b2a6f0e0d32b95c4b396652e8d2d21076160547f194d8824e8cbd6963dcce7f44aa5ed33836bfed6e8c833d46fbcdc6ee5ece4bc7392a5bd328b36b6bfa2d8069962672a6750bf5452dcb53765b5e2bdf8cf253a30fe11e544a23de06978b41f6e5545adf176464899f233f37cdc3995b8245fc3f8b159b7a7abfe413eb12a09bbf719a7b62c52e2a12635490a8a3885b594d95b0963e8d7b4f47256b1b8c8a719acb783f0e2022161022c472ad7a66dd10952d6eae2053e21f70784a8606d63c2572822dea92a203df97f9092395fb8a354c047558844a27cf2f0f438bf2de8f9bafd0acdbadc1e81af425aa556ebe8e0d783ee039ddfdc2e68284b43f428fa05001b8791dc3eac14a05a5d428b0d3234c92e11b4c14cdbda48e54210b4d19bbd46ac83b8760ec1807d022993d03dcdba0bf66de84751d0aca311676dfc5b89d2b8679365d066351d5d78ba52836e24da940ec7df9864f519dcbc38c3b3cc7efb792da1f871941d54ba7712ae89748fc1c13dd238afa3038b6404c99a37c9d264c5556990614080b01468b08347d6ed466a61338e5c4d6c44e9178e10aa50e908ec8ca8e43c8cfcde3be606c44538e56d7e8ee0feee576d3e1ccf4bfc1b95ad41f7478547342a032d06261b75adc931b7a933a5e797b843d3a02851373293b32f730ae324051f3ebdd17dbb95d4c06ea66d311fcb5c5daad6ef4f9b2fc77827ffa74cd0f72d7deed91608dd1671444f4c21f5c26ae10a8095a6cd15079bb6a39cc07e5b3df92fb243e9e730688eb16f3097c32ff0dfbe589449a6570f8541877b3b652050c78f12110cf57ee134ef8f7f1149a469c1137394c78a821fb41420cbcb84d1f3655d288b8efb4955e4bb2ddf4fe846ef70968ce92b40a4df968dcf25aef4b14e27768bdbcf48747676a6bfcf5981c90c361e730bf6cb28635b4e605fbd84c8943da090390a207d44036859b83e16cd96f611d19f1c1c4f7f8864a73ab31c70674536e15f72104c1835b14dc1a1bb303690fbc1af1b4754dc9fb77538c140e9d23a8a597a08f922eb7fc85947f8de14471cecd42330283f646e8bda1b5de12201cd8dcebcf3367a72c6354921527e27c2fc5bafd5e09ab14d73e516967444d47b8511387a15476f4e674459f86d07d3d3829b9cb544ee1fff8677ab2a3da290eadcee3ff7e6945bbdeb6e325f0f1968ce3093bd7a394849631a2ee48f8aa8eb70a87d2813ff14cd0d2cf658e9f9ed49a33041376170d11c0e378068748bc3a0bcfe422709fb44e4751d6447cb1c1cdcf8a008233eed36a670d1f0796826fcf7a9627b2bd084b12dabc18019045e855460f922ca6cf532f431008253c2e5d00f4f2b13768c062ecac8e4182668688555200a48c255543baa83e2181613271b4b918711bbe617dbda9ca38cfdef9a04cf361fa6df42819709dd3c68c135d491b240d409bb000936fc849d43f9489a4ee010592abbdb8c4f22860873873068d7b56bed0f88a5fbfc005f06b59cbfca1a3c6c23d8f4e8a2668e91e21a63dcf3403be8f2c1497e330073f4cff51e185b4d6ded3887c52f4771c41326136dd99bd010963c1f7cc383066ecab7597b06754d03cc7b3912dee1142c58b3c0831968452b32c2f2952158a149aacfa6c10037bbc4706b56e660a0425469c694df73303c6da487b21920345c27eb50516f8ab1db56b8ccd61ff35b06c0e1cff24be4893078c9be21be59684e98d8ec3e61a3ab2ccf8fe5b80c91dcbb0e5146a33dd55d19d38c969624819dd8b2212a91d77f94f01781affa2db2b1303f25eb13ecab6462990ce6bfdfd9730edb1d3586110f4c9238b862b5a8c72c48b684e9348ebc651aa625474a7a3debd8576837564528eba91e5667beae93fd50d8a0168bee5e00b3fc76f67d42fdd1d5520e5a3b526cab079748c5c6e479a66264e270aa006bf98d5f3b7b0734b865b1e49a487f34b047c3a31ce1dbf55d5e4443d2afcdffef5b59b898edb3b32826405283ad1db8e0213c28bdce6fb7da0f68a0c0127ac0fea2d896916eab4ecd050bf03fc7f8f3de9ca90a9e48353c42787dcf320a44d0fa339d4c0f25f4fa0f082813edd818dc35d1d2e3b91af5932f2a744cc06954a2ed775bd9bdd20cb1f7e6b1301bb58e7e59e23a127384b9c511b844499421a40a0e6c8ca97a0cdbdab263eedbf0b604183b20c8c3923fa12cd51c673fdb9f9948f6ef5be163cbd941bef5e7119a9d1facf731ba3ab06e19afde69965c39705d696c34374a956813a4c66fc7fd7c2d046b8862dffa0c1dc5bfd484ebb28e672b61270e5d586b4280d6fdb0a2f7022679e29abad99db85636d2b1079847fd0dcfafad980d3f801c7a81f1596ea35a983c8dca0987c5ec61d2ac559ea4d2349e10eabc305d151b7f17edfada836d60c520831c4c10b5df1923da964ec91f265325c28fbead3f36bdb4f8bf58d738769b855b56473769c73838c3db132480c7be6b32448afd05b6bba016ebd0641f1c672a54eaa93bcc4504b86d623a3b1af6b084f1be865fdeaa25ade9f96dd02fa9e5912ecbd9c34566501ccf25c924d0abf301f8a17ba99281c3edfa8513a5302c09f13cf413aeebc71bc87b1e69f438684ddae50a111536d146929b4da72bc786db57cd0e5c4bc8fa9f95c666069efde89009bfdffafbecd0cbfdaf22d36008e814783abdc93705cb10fb57f3466737d046b52657b550fee502d064ce895ef08f4342f89b56a653974ecb0e8f52220eb9d6769a8e7df60ebc59b4d08e3ae0a33c7ff08d95c3c795eae26391946d4f65ee0ac59c7c99ab4c30d65dec30483353679597e61a5351ca2112b31257039cb9e8349b64a6a00fc0578aeb60fa1b75b82de5674b5370b3aad416638a165471342187382907b34fdd2af05385626e3a7ae2ffb4539e5790fe26df51f062773d1239eec68b626925c27b6b5a2bd74ddd12a8b4df47ca745f52ad77570d24f95075a970bceeb44ffd6cbdd3ddb061cfaa1ffde6cc24d7342388cb9b0ba45381f0bfe92ae566399af5c5c5c66a483a54e29fa3fca844e0a8be9e1c81e8c2cb8a134b98815d7f1a19ba9ad1a462aa4dda6801d4ffe3ac6811e0016cfea2aede64e59870dcacaf2cd2914bcbbaf3917e575fae3bbe420efd6e68021c8219896579ed7f1a67d1278be31c22e87bb961423754519c57fd60475627539267b91ee3c88020513745357e1782e1e69ba4b46bb5a6e74214c2556e3e65ec322a2740ff9efdba564ec0237ba095cf29ec046e6499b1e1f9421a447518791ef65ecae9c42b8d50ce18c234123b86c7abdbc8114949afa3bdbf3a1cc299c2fcfab43f254efbcea4c113f713c2c78a161e5d8e42ed89187cdcc3c59797f01c327176313ffa9cea90c072e87abb2712cdae7975051233b19a957a59a14ffcd06c25e29590115f258e82a5e549c08a3b40520a7c6dd660ca3f4599ce5182c8f571b6aa1f71143212c04fafd4edbd7d58b1580f99f055fa2c6c73d8a9ab0b789b8bdb518169981d45383e357e1209f94b48ce0a313c6cc572c58382929ef0c2f8e743d3c3aca7b97f34a8418e5515a8551c6672dc87a842c90f63a42fd08c246b2a30a1aa24069dc450cdc8bf50d3643d2235e70ab57be0423a2a46cc65e7434670b19d8d98cbb40faffcbeee86de1054a9e5543b0b21f78ef4f6560edc976405b7ea6eee2f24e5f387e84923e0ccc26a2a77e6152940c4b3fc8a385f4a8476625e2c71d7a4975ecd39f414fccd4ad7cd4722c4fba3ae3507dd8074d676c24c1539ad0069d77c4f45eb895c05bc0a65cf4bc7700e6cedee71de4361edbfbe2fece8c7b917a16736d663aff27872a17025b345846a7140be4200b71bc4ac21e0f6244c53a3fd8256aa1587593ee345f14e614245a9bbbe7abcf934e68a5ebac89767caa6ccfcc680011b56e101aca8ab6dda8ba68e01871fbb44249bede67705b9b21b0921aaec8deb49ec10534cb32d6026e52433188b664bf01f0fd7acbf4b6659a44f70602f595f5c920b7e485903662eec7afedfc010059c07fa2f25ed0563f7119e632ed3b227e02c3b9b7cf42a45ec439f1359d4cbdd45acaaae822f32ae9c44af2714b84e7f0a3b5a5bdafb1a459c4a30d04c4e5940b68c0e5961e5b3e6c395fdbecfdf2b95d5e652b8f8b25913c1157521a3112bf303aac378c845dd52ca0ff6a55d68bc8332e23a75b0774835fb3655fbf53a7fa3b337759a0062cdb2a72986b4551e2b5f1283af868fc344aea49dc168c62133f14f8fe0fa7ee0166d6443e7d5bb1ae3f93faf1a205ae8f608e9624704a35d90bf56a5154284759e2d1474ab27924399d00ae40989ab53cfb701b1a509779518fa5f1285cb5ec54ea94b88669dcb35c09e8a359d11d1960a842453d58bed25922ee2ef249a6f1b41eaba02b017a6894f44bddd864f34de3221da69ee160b61acc18b845c0c27a15f54769dfdc329f7a92c9b0e5bfb71f65c54e4834f5492f50a78a94107b0332e319b0729c7c9abf04df93d756a9537724a5dcc17d108e0b75e208c3be52f505cc800fe2ff394469914b3eb4cceb4459abff7daa0152ff6121ca90d6b41850a36e996627d1dfa8353f7a9a7c82442d4e83004d57c252a629a2608ef976a1648cbe87e4bb4f7a8d505772f7aab859d04e4af6224e45244b3a98cc23ca19cc9ee7ac5dec0a279e86bda34046f592d87e404ab417298df2c6850959a8716b8a5ab8c59f4036565928bce3f2e81a85179015003bffb8122224c45e2c9d360cfebdc9a2d724ecb20d2526d36bd75c3e0d1331a792c766090c1aeb644836949cb6cc63a87f43cd39b8902994ce6ad9bd7a8cf45018639aac1164e8033994b9ad608babd5cb6093403bf73ec54570aa4bf40093694608772189799bbf5d9f1279490823ce6317f6a8affdc92df3e4cb7d762138aa2a4549d435d7912665a5085eb50d388495c4c79d729e8349116e457c72c70248c75d0935d5a38ec94be35a611963898cef3aad32ae4f99e200bef325052d8a1dfa983b0d6aaca01087aca4e145de2d24779622b99bfad602ccfb477175d4126a0c105269e7f12eb7de74be4e33deaa1c7427b095d344a93afb82e26ad3878e02b0e81d4ce2bc3bfcf7ebe62a2d05927bd7803d366ed3d303f2278ed911ad4c29316e485dfc43ff32c8d628b067546c1378d911188330538864f7762c366c085f189b5e1dd031e1b83ac093357366e0dee5d0ea0389c4c0f2ecdced8bca7aec5417109eecff0e5160b37363f3f2e6b5b214e633799bf20d8f0a3b77776d96eb45eb0ab5d80866189546ab298c3ff0372df193242507d55123f0168bc816d473fdd2ddf8bce6a2ee2bd3a67ec17fa4aa1bf839fa85cf94a86e5d233904b590872f69b1b7bdc1bac57beac37d451b0af90a2ddc987552d33eeb4e3b788f269e892da1229875b9fc1ba193a3b05fc11842acd133e231121c31a8525bf7027c8161ab6acbe9023bfde609c8f5f884cf604516e76b3897da3313aef3a1a440fb7b50899e25c56182a86ca027bc405b78f859aa163b96e7e4bae63f78be68012fa89f212ba26704df083aad31d662", 0x1000, 0x28}, {0x3, 0xd6, &(0x7f0000001700)='syz2\x00', &(0x7f0000001740)="e30c284d22ed8f22e8ec49941dc37804c3ab1125e1bc380fb27006238d47797bef3f93875655c69fd82e43d13e6a89b9436d6831fbe7001f69a31834414f908c403589efd98ab7a9c3eb53c2a93e5e651e34b42567339c7df173c1130ef0246f5b83ff6a54060d6f9d830cd85eea465f5967bb8be8b860b540f46753b4245076b1ce4ce3faa390569a2d9d5e231ef168bf0b133c462c0fd91f2326c360", 0x9d, 0xa}, {0x2, 0x3800000, &(0x7f0000001800)='payload\x00', &(0x7f0000001840)="dfe6c8bb1bfeb2597e40af2379a2447a439b5a9883e91e289fc720c1df605b58ab399b6e2db52f8b6366bb68a57dd91272c5b3360d9cdfdac41448db383b488942362f1440368915f2e190bd9cd37482890dc0877f73af57043e9c1bd451e0fc5114141efbfa9996bd4e31c162bfee1158aa9260c019c5733606208b947270e60fba4c3ccb0f9a4c305706e7d7149f4aea35a79355dd0af91326207a8fcafa4ae2c567a4358e653f16c14ffc521d4205861aa7ff70e45976c522d757e8f7750cfa5f4285e70a19f81e4af5fb3862cdd3212e648941", 0xd5, 0x2}, {0x2, 0x91e, &(0x7f0000001940)='syzkaller\x00', &(0x7f0000001980)="fcea25a6ad016819d38e9a9fc8d0df59430460384b7d0e42a0c5b172a0ed3477039dd4c0511850c9aa46013608ac64ab1d4898cb76826592d7d327aa88a85541e9b836985d77fa3edc4bcdefcd713734999d9ab7990abbc420aa39891e41852fdf31dd74382e920b2b28980f97cf2cd94dc855770787307daf64c77bee00e0a363627c56fa4d9c79d0557a73f2f340d48ac7a9467ad550d068fb61efc2659461a8888f737bab934191af3e52feccf4d0a7f79f1da2b41f8b8aed3d1b667115f1c40387b8181c3772e750907e2283028ec512a8634323c2be2a5a707707e6bd3f9ec7977c7ecc62c0fe1ab42adb5863a8033969a093", 0xf5, 0x18}, {0x1, 0x4, &(0x7f0000001a80)='payload\x00', &(0x7f0000001ac0)="72ab4fba5b1b1ed9cb15350497c4015cb2d6c103c89e885fa3a0841cb23d48be4bffd77bd75d04904b3ad0b07fea3a698abdd0b422ce16e4af7026f6e87101c509acc746aaa9c34ad5a3a40a18fc6ef3b22e7b410e03546f577f874771ddbb9f8f2c936a46dec9304918155bc647264b6915", 0x72, 0x8}, {0x2, 0xf, &(0x7f0000001b40)='\x00', &(0x7f0000002b80)="59fb3d2f448259ec9a0407759841c98679dc3ce0c3d8fcbde1c355d1e6c767f0ae858e43cb139f2cc2df130a60ed726bafb10d985568b469314c91e34a2a14e0d1345027d297759cce551eeb7336ea3eecdeca323907", 0x56, 0x32}]}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000002d40)=0x1, 0x4) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000002c0), 0x10) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r1], 0x80}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xb, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5, 0x5}, {0xb}]}]}, {0x0, [0x0, 0x61, 0x61, 0x5f, 0x1e, 0x0, 0x61, 0x5f, 0x0]}}, &(0x7f0000000180)=""/177, 0x3f, 0xb1, 0x0, 0x7f}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x1, 0x0}, 0x8) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0x4) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x18}, 0x18) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0xd9f6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$XFS_IOC_SCRUBV_METADATA(r9, 0xc0285840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1a, 0x11, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x4, 0x1, 0x1, 0x8, 0xa, 0xfffffffffffffffc, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @tracing, r4, 0x8, &(0x7f0000000280)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, r5, r6, 0x1, &(0x7f0000000480)=[r7, r8], &(0x7f00000004c0)=[{0x4, 0x5, 0x3, 0x3}], 0x10, 0x10001}, 0x94) r10 = socket$pppoe(0x18, 0x1, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xd, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x5, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) connect$pppoe(r10, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r10) 17.40604335s ago: executing program 1 (id=2827): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x90, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffff9d5, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x80}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0x7, 0x1, {0x0, 0x86b7}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8}]}, 0x90}}, 0x2) getsockopt(r0, 0x1, 0xd, &(0x7f0000000380)=""/129, &(0x7f00000004c0)=0x81) (async) r2 = socket$kcm(0x10, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000700)) (async) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000180)) (async) unshare(0x22020600) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0x1, 0x0, &(0x7f0000000000)) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffd}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x20, 0x2c, 0x117, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xc8, r6, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xca}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x34}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x84}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x815}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x40010) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="eb673468a1d4b3f1ac274e1633766522438f7d55a7f22df8e28fc6ec8d677cf78b41c22adf922d8bef985d6e2242f74b76e8ca5dabc1927dfeca095f5560d6d775f9ee1ad23211415025ae15790d7c3f2fcb9953bca2f88e0798e851b188cb7c44a90bae28cc85cf22b325ff568f85d0124eea958e8cc8ca5f5983730a7f86af2f24d36ad2db161c3083f4f7e3ec", 0x8e}], 0x1}, 0x10) (async) pipe(&(0x7f0000000400)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="880100001000010000000e0000000000fe8000000000000000000000000000bb000000000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000c73b0000000000000700000000000000040000800000000000000000000000000200000000000000ffffffff2dbd700000008000020004004c00000000000000480002006362632873657270656e742900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e0014"], 0x188}}, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r8) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) (async) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000440)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) 17.382832826s ago: executing program 2 (id=2828): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000040028000480080002400000000008000140000000051400030076"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x6c, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [0xb09a], "7f49"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0xf]}, {}, {}, {0x8, 0x22eb, 0x1, {{}, 0x2, {0x0, 0xfffd}}}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001a00)=@filter={'filter\x00', 0x4, 0x4, 0x440, 0xffffffff, 0xd0, 0x1d8, 0xd0, 0xfeffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2, [0xff, 0xffffff00, 0xff], 0x4e20, 0x4e21, 0x4e21, 0x4e22, 0x5, 0x1, 0x9, 0x0, 0x1}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4}, 0x0, 0x138, 0x198, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x26, 0x8, 0x8, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff, 0xffffff00, 0xff, 0xff], [0xffffffff, 0xffffff00, 0xff, 0xff000000], [0xff000000], 0x72, 0x1674}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0xce24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) socket$packet(0x11, 0x2, 0x300) 17.251464492s ago: executing program 1 (id=2829): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000e000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$802154_raw(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14, &(0x7f0000000240)={&(0x7f0000000140)="b8bc3511d5f8bd212e59651951553e9f93621908b9bbde506de64b285eac5a9ca389f414666e02e8602414728c51252fdbae19935acbf5b282b667f06b0da5945cd33ea60e09f49f06f1cb43e969a3a98147624ee8d95a57a846727100579d8b8723cbed58d57cc2b7730679cb4279d2fc181784fc70cda73baba0ca69f548a41053acee2528294d89", 0x89}, 0x1, 0x0, 0x0, 0x488d0}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x5c, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, 'syzkaller0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x4) socket$kcm(0x2, 0x1000000000000005, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff0000ffffffb703000008000000b70200000085000000a60000009500"/57], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$unix(r11, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/14, 0xe}], 0x1}, 0x2000) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf25130000000c00090000000000000000000500030008000000"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x80) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r7, 0x400442c9, &(0x7f0000000640)={0x800, @broadcast}) r12 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 17.251193531s ago: executing program 4 (id=2830): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa1000000fffd0007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 17.226922371s ago: executing program 3 (id=2831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000400}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000000080), 0x0, 0x40080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fe88"], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 17.1841522s ago: executing program 2 (id=2832): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000300)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x7}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x84) 17.116228223s ago: executing program 4 (id=2833): r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='lp', 0x54) (async) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000006c0)="3256610ce79d5ba6661e963ebdd4a13f920a4a5faf894f3e6c96258f3f94db", 0x1f}], 0x1}}], 0x2, 0xfae1b9584406cb33) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000017c0)={0x2, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) (async) syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @random="152f18a66094", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0xa, 0x14, 0x68, 0x0, 0xc, 0x1, 0x0, @remote, @rand_addr=0x64010101}}}}}, 0x0) 17.071528121s ago: executing program 3 (id=2834): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000101000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) 17.02193481s ago: executing program 2 (id=2835): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900090095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.924375977s ago: executing program 4 (id=2836): sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x20084044) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, 0x0, 0x301}, 0x14}, 0x1, 0x3000000}, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@alg={0xe0, 0x10, 0x800, 0x70bd2c, 0x25dfdbfd, {{'drbg_nopr_ctr_aes128\x00'}, '\x00', '\x00', 0x2000, 0x2400}}, 0xe0}, 0x1, 0x0, 0x0, 0x4008080}, 0x41) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000340)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x2, 0x6, 0x0, @private=0xa210104, @local, {[@generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x0, 0x0, 0x8}}}}}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000180)={{r1}, {@void, @max}}) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, 0x0, &(0x7f0000000380)) socket(0x10, 0x803, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x4, "7bf3c42d7a055c6bd56aed9d71b545a9"}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000380)="27033000bdfd28000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e577578893290592f8697f97b74407798b1b9024abc5c24f06a9aacb41b94bfa8791938ca3f957c4e1cc4103c44d2df92ed94c0811439b445170c9444f1d5cf152d88ec04922505d5ee0412b2d7b2b0f732fc50438cb5f822", 0x94}, {&(0x7f0000000440)="8bfda0fae4fcd4a9de68ad3b1c2d1f978118e2dc38a917456fe3637ae4b53dce1b654f0d36424119e07a1206a64fc55f97860de9851de35a439bd3c1ba2b927d8715049ae53ec70baa1ce412344cc2781932fa9c3e07fbc990f33156fdd8488dd1c998b765c332df92f367ac87f26181049554e75eef138c2c082e813904cce69d4b5bb643498377fa858d22a7ef9c7a9ccf2dc0a5107a672d39ffe8b4fbddeb1f42a8", 0xa3}, {&(0x7f0000000240)="5e82ef7627234e55062c4c902b6fddb40d2a73b0394dc7f1eedb60de68c183e13eff48b339321926dacb4db2728458d7947bf7dbf748f38c3c4573303d8e742bd9d60dc9ab48e0561c3f5f17bc661582113d687bc8cb8dc28ecd3963b80f08af4bc1cf1c38d08332c86308b3f75aeb1148", 0x71}, {&(0x7f00000002c0)="6e53a24a72ed7c399a6d988520a67c260c93b7f99fd0c890646db95b326077f3cc59744b885bffbfb776ff7e8a0cc9934ed8b017f286080756c3a32b05cb39c4e3391ea559e10279c094afdc10176e4e13a513c5650bc915a29e5fa6acda018ff4c2d7eba173aaeeced07b02bad4bfd3a4b628d14f73d47cfc1e3a0003e1f0b1f235042213032073decdc41fb0e2c1bf17abd87e9a15bb74f24f7d3c811e4768ce72a07a4e55d48a2b6d655dc8d5f13461f27341a2c571865d", 0xb9}, {&(0x7f0000000500)="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", 0xcf9}], 0x5}, 0x28004840) 16.900850188s ago: executing program 2 (id=2837): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtclass={0x94, 0x28, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x8}, {0xf, 0x3}, {0xfff1, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x2}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x34, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x400, 0x4, 0x55fd}}, @TCA_HFSC_FSC={0x10, 0x2, {0x2, 0xe, 0xc360a5a}}, @TCA_HFSC_USC={0x10, 0x3, {0x2e6, 0x380}}]}}, @tclass_kind_options=@c_cake={0x9}]}, 0x94}}, 0x44884) r3 = socket(0x1d, 0x2, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x0, 0x4, 0x43, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x7800, 0x10, 0x7, 0xffffffff}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x0, 0x4, 0x43, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x7800, 0x10, 0x7, 0xffffffff}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000080010000000000000009410000004c00180000000062726f6164636173742d6c696e6b0000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"/98], 0x68}}, 0x8080) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000080010000000000000009410000004c00180000000062726f6164636173742d6c696e6b0000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"/98], 0x68}}, 0x8080) socket$inet_sctp(0x2, 0x5, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000080)={r9, @in6={{0xa, 0x4e22, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}, &(0x7f0000000140)=0x84) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000080)={r9, @in6={{0xa, 0x4e22, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}, &(0x7f0000000140)=0x84) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.parent_freezing\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000f40)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) getsockopt$inet_mreqn(r3, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0x5c) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=@deltclass={0x44, 0x29, 0x20, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xa}, {0xe, 0x6}, {0xd, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xe, 0x2}}, @TCA_RATE={0x6, 0x5, {0x4, 0x65}}, @TCA_RATE={0x6, 0x5, {0x8, 0xff}}, @TCA_RATE={0x6, 0x5, {0x97}}]}, 0x44}}, 0x2000c800) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000240)={'veth0_to_hsr\x00', {0x2, 0x4e24, @remote}}) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x5, 0x4) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r11) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002bbd7000fddbdf93253a0000000c00990081000000260000000600650001040000"], 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x240000c1) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002bbd7000fddbdf93253a0000000c00990081000000260000000600650001040000"], 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x240000c1) 16.875115613s ago: executing program 3 (id=2838): socket$netlink(0x10, 0x3, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xd}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44803}, 0xc1da85b4024542ff) socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf250100000008000700e000ac00000001006e65742f6c326361700000000800020005000000080008000a010100"], 0x3c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@newlinkprop={0x38, 0x6c, 0x800, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x100, 0x40440}, [@IFLA_OPERSTATE={0x5, 0x10, 0x9}, @IFLA_NUM_TX_QUEUES={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20000080) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e"], 0x44}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000500040001000000d0a11820159c07cbbd5d87cd34b9e40436082d5e62ada8de31b65955a35ed0157328568ed71ca9a311"], 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r9, 0x1, 0x70bd27}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x34, r6, 0x7, 0x2, 0xfffffffe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2f, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 16.792015129s ago: executing program 4 (id=2839): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) close(0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000a80), 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, &(0x7f00000000c0)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x20000}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r2, &(0x7f0000000a80), 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800000010001fff00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000088520300400012800b000100697036746e6c00003000028014000300fe8000000000000000000000000000aa08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="050009"], 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080) 16.572832196s ago: executing program 4 (id=2840): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$XFS_IOC_FSGETXATTRA(r1, 0x801c582d, &(0x7f0000000140)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 16.317185337s ago: executing program 0 (id=2841): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r1, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) r2 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0x4}) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 16.096262821s ago: executing program 0 (id=2842): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000040028000480080002400000000008000140000000051400030076"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'fo\x00', 0x1, 0x9d3f, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x6c, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [0xb09a], "7f49"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0xf]}, {}, {}, {0x8, 0x22eb, 0x1, {{}, 0x2, {0x0, 0xfffd}}}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001a00)=@filter={'filter\x00', 0x4, 0x4, 0x440, 0xffffffff, 0xd0, 0x1d8, 0xd0, 0xfeffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2, [0xff, 0xffffff00, 0xff], 0x4e20, 0x4e21, 0x4e21, 0x4e22, 0x5, 0x1, 0x9, 0x0, 0x1}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4}, 0x0, 0x138, 0x198, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x26, 0x8, 0x8, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff, 0xffffff00, 0xff, 0xff], [0xffffffff, 0xffffff00, 0xff, 0xff000000], [0xff000000], 0x72, 0x1674}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0xce24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) socket$packet(0x11, 0x2, 0x300) 16.095734609s ago: executing program 4 (id=2843): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x7, &(0x7f00000003c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r3, r4, 0x5, 0x0, @val=@tracing={0x0, 0xfff}}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r5, 0x211d9572}, &(0x7f00000001c0)=0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x38, 0x3, 0x1, 0x5, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @broadcast}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x150, r7, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2d75}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4f5}]}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3119}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3618}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72ba}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a0c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2d5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa0e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x64, r8, 0x1, 0x0, 0xfffffffc, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x44042) 16.006750476s ago: executing program 0 (id=2844): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xeae, 0x0, &(0x7f0000002d40)="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", &(0x7f0000000040), 0x11, 0x0, 0x33, 0x1f7, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x50) 15.79583664s ago: executing program 0 (id=2845): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0130013710ff"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) epoll_create1(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x0, &(0x7f00000005c0), &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x29, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = socket(0x1, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="00008100ffffffffffffaaaaaaaaaaaa81002f0008004500d5"], 0x36) socket$xdp(0x2c, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r7, @ANYRES8=r1, @ANYRES32=r8], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c0000001a00010029bd7000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="8000090014000300020000000000000000000000feffffff08000b009a3ba75814000100fc01"], 0x4c}, 0x1, 0x0, 0x0, 0xc1}, 0x4) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.00848682s ago: executing program 32 (id=2829): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000e000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$802154_raw(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14, &(0x7f0000000240)={&(0x7f0000000140)="b8bc3511d5f8bd212e59651951553e9f93621908b9bbde506de64b285eac5a9ca389f414666e02e8602414728c51252fdbae19935acbf5b282b667f06b0da5945cd33ea60e09f49f06f1cb43e969a3a98147624ee8d95a57a846727100579d8b8723cbed58d57cc2b7730679cb4279d2fc181784fc70cda73baba0ca69f548a41053acee2528294d89", 0x89}, 0x1, 0x0, 0x0, 0x488d0}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x5c, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0xf, 0xa, 'syzkaller0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x4) socket$kcm(0x2, 0x1000000000000005, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff0000ffffffb703000008000000b70200000085000000a60000009500"/57], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$unix(r11, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/14, 0xe}], 0x1}, 0x2000) sendmsg$IEEE802154_ASSOCIATE_RESP(r3, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf25130000000c00090000000000000000000500030008000000"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x80) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r7, 0x400442c9, &(0x7f0000000640)={0x800, @broadcast}) r12 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 1.496279883s ago: executing program 33 (id=2837): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtclass={0x94, 0x28, 0x400, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x8}, {0xf, 0x3}, {0xfff1, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x2}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x34, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x400, 0x4, 0x55fd}}, @TCA_HFSC_FSC={0x10, 0x2, {0x2, 0xe, 0xc360a5a}}, @TCA_HFSC_USC={0x10, 0x3, {0x2e6, 0x380}}]}}, @tclass_kind_options=@c_cake={0x9}]}, 0x94}}, 0x44884) r3 = socket(0x1d, 0x2, 0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x0, 0x4, 0x43, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x7800, 0x10, 0x7, 0xffffffff}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x10, 0x0, 0x4, 0x43, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x7800, 0x10, 0x7, 0xffffffff}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000080010000000000000009410000004c00180000000062726f6164636173742d6c696e6b0000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"/98], 0x68}}, 0x8080) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000080010000000000000009410000004c00180000000062726f6164636173742d6c696e6b0000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"/98], 0x68}}, 0x8080) socket$inet_sctp(0x2, 0x5, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000080)={r9, @in6={{0xa, 0x4e22, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}, &(0x7f0000000140)=0x84) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000080)={r9, @in6={{0xa, 0x4e22, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}, &(0x7f0000000140)=0x84) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.parent_freezing\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000f40)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) getsockopt$inet_mreqn(r3, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0x5c) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=@deltclass={0x44, 0x29, 0x20, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xa}, {0xe, 0x6}, {0xd, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xe, 0x2}}, @TCA_RATE={0x6, 0x5, {0x4, 0x65}}, @TCA_RATE={0x6, 0x5, {0x8, 0xff}}, @TCA_RATE={0x6, 0x5, {0x97}}]}, 0x44}}, 0x2000c800) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000240)={'veth0_to_hsr\x00', {0x2, 0x4e24, @remote}}) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x5, 0x4) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r11) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002bbd7000fddbdf93253a0000000c00990081000000260000000600650001040000"], 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x240000c1) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002bbd7000fddbdf93253a0000000c00990081000000260000000600650001040000"], 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x240000c1) 1.440205573s ago: executing program 34 (id=2838): socket$netlink(0x10, 0x3, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xd}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44803}, 0xc1da85b4024542ff) socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf250100000008000700e000ac00000001006e65742f6c326361700000000800020005000000080008000a010100"], 0x3c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@newlinkprop={0x38, 0x6c, 0x800, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x100, 0x40440}, [@IFLA_OPERSTATE={0x5, 0x10, 0x9}, @IFLA_NUM_TX_QUEUES={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20000080) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e"], 0x44}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000500040001000000d0a11820159c07cbbd5d87cd34b9e40436082d5e62ada8de31b65955a35ed0157328568ed71ca9a311"], 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r9, 0x1, 0x70bd27}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x34, r6, 0x7, 0x2, 0xfffffffe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2f, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 996.556223ms ago: executing program 35 (id=2843): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x7, &(0x7f00000003c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x26, 0x0, @void}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r3, r4, 0x5, 0x0, @val=@tracing={0x0, 0xfff}}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r5, 0x211d9572}, &(0x7f00000001c0)=0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x38, 0x3, 0x1, 0x5, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @broadcast}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x150, r7, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2d75}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4f5}]}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3119}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3618}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x72ba}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a0c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2d5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa0e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x64, r8, 0x1, 0x0, 0xfffffffc, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x44042) 0s ago: executing program 36 (id=2845): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0130013710ff"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) epoll_create1(0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x0, &(0x7f00000005c0), &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x29, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = socket(0x1, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="00008100ffffffffffffaaaaaaaaaaaa81002f0008004500d5"], 0x36) socket$xdp(0x2c, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r7, @ANYRES8=r1, @ANYRES32=r8], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c0000001a00010029bd7000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="8000090014000300020000000000000000000000feffffff08000b009a3ba75814000100fc01"], 0x4c}, 0x1, 0x0, 0x0, 0xc1}, 0x4) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): ][T11742] ? __fget_files+0x2a/0x420 [ 253.480741][T11742] ksys_write+0x150/0x270 [ 253.480769][T11742] ? __pfx_ksys_write+0x10/0x10 [ 253.480805][T11742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.480827][T11742] do_syscall_64+0x15f/0xf80 [ 253.480854][T11742] ? trace_irq_disable+0x3b/0x140 [ 253.480882][T11742] ? clear_bhb_loop+0x40/0x90 [ 253.480908][T11742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.480928][T11742] RIP: 0033:0x7fc12775d60e [ 253.480948][T11742] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 253.480966][T11742] RSP: 002b:00007fc12858ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 253.480989][T11742] RAX: ffffffffffffffda RBX: 00007fc1285906c0 RCX: 00007fc12775d60e [ 253.481004][T11742] RDX: 0000000000000001 RSI: 00007fc1285900a0 RDI: 0000000000000005 [ 253.481016][T11742] RBP: 00007fc128590090 R08: 0000000000000000 R09: 0000000000000000 [ 253.481029][T11742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.481041][T11742] R13: 00007fc127a16128 R14: 00007fc127a16090 R15: 00007ffd6c10c0e8 [ 253.481076][T11742] [ 253.933621][T11758] netlink: 'syz.2.1597': attribute type 10 has an invalid length. [ 253.966417][T11758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.975002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.445643][T11793] openvswitch: netlink: IPv4 tun info is not correct [ 254.557396][T11801] syzkaller0: entered promiscuous mode [ 254.563268][T11801] syzkaller0: entered allmulticast mode [ 254.575516][T11801] tipc: Enabled bearer , priority 0 [ 254.585877][T11798] tipc: Resetting bearer [ 254.610529][T11798] tipc: Disabling bearer [ 255.065237][T11824] netlink: 'syz.4.1619': attribute type 3 has an invalid length. [ 255.100519][T11824] netlink: 'syz.4.1619': attribute type 1 has an invalid length. [ 255.157878][T11828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.311604][T11838] syzkaller0: entered promiscuous mode [ 255.317335][T11838] syzkaller0: entered allmulticast mode [ 255.408354][T11838] tipc: Enabled bearer , priority 0 [ 255.425790][T11835] tipc: Resetting bearer [ 255.468743][T11835] tipc: Disabling bearer [ 255.895275][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.042668][T11874] geneve2: entered promiscuous mode [ 256.053645][ T3468] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.071600][ T3468] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.095343][ T3468] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.116063][ T3468] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.416685][T11892] syzkaller0: entered promiscuous mode [ 256.430835][T11892] syzkaller0: entered allmulticast mode [ 256.481284][T11892] tipc: Enabled bearer , priority 0 [ 256.514232][T11905] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 256.526428][T11890] tipc: Resetting bearer [ 256.581685][T11890] tipc: Disabling bearer [ 257.099391][T11933] netlink: 'syz.0.1648': attribute type 8 has an invalid length. [ 257.197722][T11940] __nla_validate_parse: 6 callbacks suppressed [ 257.197745][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1650'. [ 257.213809][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1650'. [ 257.224205][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1650'. [ 257.235375][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1650'. [ 257.245761][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1650'. [ 257.268881][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1650'. [ 257.288842][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1650'. [ 257.355299][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1650'. [ 257.396479][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1650'. [ 257.434676][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1650'. [ 257.465643][T11940] A link change request failed with some changes committed already. Interface gretap1 may have been left with an inconsistent configuration, please check. [ 257.556600][T11952] syzkaller0: entered promiscuous mode [ 257.572974][T11952] syzkaller0: entered allmulticast mode [ 257.604969][T11952] tipc: Enabled bearer , priority 0 [ 257.644304][T11951] tipc: Resetting bearer [ 257.690756][T11951] tipc: Disabling bearer [ 257.818500][T11968] sit2: entered promiscuous mode [ 258.141726][T11983] lo speed is unknown, defaulting to 1000 [ 258.173424][T11987] netlink: 'syz.3.1663': attribute type 4 has an invalid length. [ 260.675394][T11960] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 261.364253][T12044] &: option downdelay: invalid value (18446744073709547007) [ 261.373399][T12044] &: option downdelay: allowed values 0 - 2147483647 [ 261.388386][T12044] & (unregistering): Released all slaves [ 261.475811][T12051] syzkaller0: entered promiscuous mode [ 261.482681][T12051] syzkaller0: entered allmulticast mode [ 261.505105][T12051] ip6gretap0: entered promiscuous mode [ 261.565825][T12053] netlink: 'syz.3.1682': attribute type 10 has an invalid length. [ 261.574519][T12054] netlink: 'syz.3.1682': attribute type 10 has an invalid length. [ 261.607716][T12053] bond8: option arp_all_targets: invalid value (129) [ 261.616630][T12053] bond8 (unregistering): Released all slaves [ 261.654896][ T25] block nbd1: Possible stuck request ffff888026f3e000: control (read@0,1024B). Runtime 60 seconds [ 261.665949][ T25] block nbd1: Possible stuck request ffff888026f3e1c0: control (read@1024,1024B). Runtime 60 seconds [ 261.672653][T12054] bond8: option arp_all_targets: invalid value (129) [ 261.679932][ T25] block nbd1: Possible stuck request ffff888026f3e380: control (read@2048,1024B). Runtime 60 seconds [ 261.695862][ T25] block nbd1: Possible stuck request ffff888026f3e540: control (read@3072,1024B). Runtime 60 seconds [ 261.709700][T12054] bond8 (unregistering): Released all slaves [ 261.829604][T12065] lo speed is unknown, defaulting to 1000 [ 261.842062][T12066] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 262.266799][T12083] __nla_validate_parse: 69 callbacks suppressed [ 262.266820][T12083] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1689'. [ 262.329657][T12083] unsupported nlmsg_type 40 [ 262.425744][T12073] lo speed is unknown, defaulting to 1000 [ 262.482036][T12091] netlink: 'syz.4.1692': attribute type 1 has an invalid length. [ 262.536171][T12095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1694'. [ 262.652590][T12104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1696'. [ 262.741693][T12111] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1697'. [ 262.756469][T12104] 8021q: adding VLAN 0 to HW filter on device bond7 [ 262.772489][T12106] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 262.780143][T12110] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1697'. [ 262.798161][T12106] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 262.824444][T12106] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 262.929136][T12116] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1698'. [ 263.314695][T12128] netlink: 'syz.1.1703': attribute type 10 has an invalid length. [ 263.501703][T12138] netlink: 'syz.2.1706': attribute type 5 has an invalid length. [ 263.648635][T12140] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1707'. [ 263.664477][T12142] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1709'. [ 263.923003][T12154] block nbd0: reconnected socket [ 264.215162][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1713'. [ 264.367952][T12163] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1714'. [ 264.477960][T12163] bond8: option arp_all_targets: invalid value (129) [ 264.503376][T12163] bond8 (unregistering): Released all slaves [ 264.554584][T12166] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 264.683407][ T5850] block nbd0: Receive control failed (result -32) [ 264.773095][T12179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.782056][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.890839][T12187] netlink: 'syz.0.1718': attribute type 13 has an invalid length. [ 264.933368][T12187] netlink: 'syz.0.1718': attribute type 17 has an invalid length. [ 265.032752][T12186] batman_adv: batadv0: Interface deactivated: vlan2 [ 265.056127][T12201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.593828][ T7953] lo speed is unknown, defaulting to 1000 [ 265.612600][T12187] batman_adv: batadv0: Interface activated: vlan2 [ 265.643670][T12187] ip6gretap0: left promiscuous mode [ 265.665279][T12187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.674025][T12187] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.684571][T12187] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.719866][T12194] bond1: (slave ip6gretap0): Releasing active interface [ 265.752680][ T7378] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.769064][ T5964] lo speed is unknown, defaulting to 1000 [ 265.812773][ T7378] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.833025][ T7378] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.856584][ T7378] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.367574][T12251] 8021q: VLANs not supported on wg0 [ 266.490117][T12253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.364809][T12298] lo speed is unknown, defaulting to 1000 [ 267.647408][T12312] syzkaller0: entered promiscuous mode [ 268.000896][T12314] __nla_validate_parse: 10 callbacks suppressed [ 268.000921][T12314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1748'. [ 268.299235][T12333] openvswitch: netlink: EtherType 0 is less than min 600 [ 268.615524][T12325] veth0_macvtap: left allmulticast mode [ 268.678648][T12325] vti0: left allmulticast mode [ 268.695519][T12325] veth3: left allmulticast mode [ 268.713071][T12325] bond2: left allmulticast mode [ 268.746588][T12325] xfrm2: left allmulticast mode [ 268.832492][T12325] gretap2: left allmulticast mode [ 268.895689][T12325] bond7: left allmulticast mode [ 268.901603][T12338] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1753'. [ 268.941981][T12338] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1753'. [ 268.958630][T12338] netlink: 'syz.0.1753': attribute type 2 has an invalid length. [ 268.968724][T12338] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1753'. [ 269.024557][T12328] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 269.032625][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1751'. [ 269.050967][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1751'. [ 269.060723][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1751'. [ 269.072632][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1751'. [ 269.082388][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1751'. [ 269.092316][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1751'. [ 269.104916][T12329] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.200722][T12350] žÿ: renamed from team_slave_1 [ 269.484281][T12364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.793601][T12341] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.156642][T12405] lo speed is unknown, defaulting to 1000 [ 271.407680][T12420] 8021q: VLANs not supported on wg2 [ 272.803367][T12448] syzkaller0: entered promiscuous mode [ 272.823216][T12448] syzkaller0: entered allmulticast mode [ 273.685783][T12483] block nbd2: server does not support multiple connections per device. [ 273.714937][T12483] block nbd2: shutting down sockets [ 274.669940][T12495] __nla_validate_parse: 21 callbacks suppressed [ 274.669960][T12495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1789'. [ 275.891197][T12463] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 275.928788][T12491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1789'. [ 275.962296][T12493] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1789'. [ 276.306449][T12514] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 276.576390][T12526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1799'. [ 277.156900][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1805'. [ 277.341050][T12559] syzkaller0: entered promiscuous mode [ 277.356037][T12559] syzkaller0: entered allmulticast mode [ 277.584185][T12568] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1811'. [ 277.616893][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1811'. [ 277.637501][T12568] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1811'. [ 277.840257][T12575] syzkaller1: entered promiscuous mode [ 277.850801][T12575] syzkaller1: entered allmulticast mode [ 277.962643][T12578] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 277.990119][T12578] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 278.015017][T12578] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 278.136526][T12589] veth1_to_bridge: entered allmulticast mode [ 278.157390][T12589] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 278.336882][T12597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.355717][T12597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.375908][T12597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.398172][T12597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1821'. [ 278.451639][T12597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.457191][T12598] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 278.492473][T12597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.525262][T12607] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1822'. [ 278.563905][T12601] lo speed is unknown, defaulting to 1000 [ 280.385440][T12669] __nla_validate_parse: 3 callbacks suppressed [ 280.385463][T12669] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1836'. [ 280.613021][T12686] dummy0: mtu less than device minimum [ 280.679414][T12686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 280.735588][T12690] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 280.858280][T12690] lo speed is unknown, defaulting to 1000 [ 281.114507][T12701] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 281.371807][T12707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1845'. [ 281.726267][T12721] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1849'. [ 281.848976][T12727] batadv_slave_0: Caught tx_queue_len zero misconfig [ 281.883986][T12734] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.974592][T12727] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1851'. [ 282.074787][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1855'. [ 282.720777][T12781] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1861'. [ 283.167066][T12804] netlink: 'syz.0.1864': attribute type 3 has an invalid length. [ 283.194575][T12804] netlink: 'syz.0.1864': attribute type 3 has an invalid length. [ 283.267524][T12813] delete_channel: no stack [ 283.353979][T12805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 283.706968][T12826] syzkaller0: entered promiscuous mode [ 283.716869][T12826] syzkaller0: entered allmulticast mode [ 283.733953][T12826] tc action pedit offset must be on 32 bit boundaries [ 284.496731][T12865] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1879'. [ 284.565137][T12866] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1878'. [ 284.579432][T12865] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1879'. [ 284.619245][T12865] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1879'. [ 284.727040][T12865] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.735013][T12865] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.993081][T12865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.030298][T12865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.079231][T12892] netlink: 'syz.0.1883': attribute type 8 has an invalid length. [ 285.212177][T12865] bond0: left allmulticast mode [ 285.217314][T12865] bond_slave_0: left allmulticast mode [ 285.223628][T12865] bond_slave_1: left allmulticast mode [ 285.229321][T12865] bond0: left promiscuous mode [ 285.234368][T12865] bond_slave_0: left promiscuous mode [ 285.245153][T12865] bond_slave_1: left promiscuous mode [ 285.340099][ T42] netdevsim netdevsim1 ªªªªª»: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.368081][ T42] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.389439][ T42] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.419552][ T42] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.527539][T12898] netlink: 'syz.2.1885': attribute type 30 has an invalid length. [ 285.554450][T12898] __nla_validate_parse: 195 callbacks suppressed [ 285.554470][T12898] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1885'. [ 285.678129][T12898] bond5: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 285.763240][T12898] bond5 (unregistering): Released all slaves [ 285.766443][T12912] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1888'. [ 285.786333][T12914] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1889'. [ 285.815277][T12917] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1889'. [ 286.311910][T12935] syzkaller0: entered promiscuous mode [ 286.317796][T12935] syzkaller0: entered allmulticast mode [ 286.881412][T12974] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1907'. [ 286.902402][T12979] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 287.062356][ T42] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.072278][ T42] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.082628][ T42] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.105264][ T42] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.163315][T12995] netlink: 'syz.3.1914': attribute type 3 has an invalid length. [ 287.176285][T12997] netlink: 'syz.3.1914': attribute type 3 has an invalid length. [ 287.184843][T12995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1914'. [ 287.193975][T12997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1914'. [ 287.448153][T13004] nlmon0: Caught tx_queue_len zero misconfig [ 287.717432][T13008] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1918'. [ 287.735324][T13008] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1918'. [ 288.219968][T13025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 288.261159][T13027] FAULT_INJECTION: forcing a failure. [ 288.261159][T13027] name failslab, interval 1, probability 0, space 0, times 0 [ 288.291677][T13027] CPU: 0 UID: 0 PID: 13027 Comm: syz.0.1925 Not tainted syzkaller #0 PREEMPT(full) [ 288.291708][T13027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 288.291720][T13027] Call Trace: [ 288.291728][T13027] [ 288.291737][T13027] dump_stack_lvl+0xe8/0x150 [ 288.291776][T13027] should_fail_ex+0x412/0x560 [ 288.291815][T13027] should_failslab+0xa8/0x100 [ 288.291843][T13027] ? skb_clone+0x212/0x3a0 [ 288.291867][T13027] kmem_cache_alloc_noprof+0x87/0x650 [ 288.291901][T13027] skb_clone+0x212/0x3a0 [ 288.291929][T13027] __netlink_deliver_tap+0x404/0x850 [ 288.291965][T13027] ? netlink_deliver_tap+0x2e/0x1b0 [ 288.291988][T13027] netlink_deliver_tap+0x19c/0x1b0 [ 288.292011][T13027] netlink_sendskb+0x68/0x140 [ 288.292043][T13027] netlink_rcv_skb+0x2b6/0x4b0 [ 288.292066][T13027] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 288.292099][T13027] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 288.292136][T13027] ? netlink_deliver_tap+0x2e/0x1b0 [ 288.292157][T13027] ? netlink_deliver_tap+0x2e/0x1b0 [ 288.292185][T13027] netlink_unicast+0x75c/0x8e0 [ 288.292237][T13027] netlink_sendmsg+0x813/0xb40 [ 288.292271][T13027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.292297][T13027] ? aa_sock_msg_perm+0xf1/0x1b0 [ 288.292321][T13027] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 288.292349][T13027] ____sys_sendmsg+0x972/0x9f0 [ 288.292372][T13027] ? __might_fault+0xaf/0x130 [ 288.292402][T13027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.292436][T13027] ? import_iovec+0x73/0xa0 [ 288.292465][T13027] ___sys_sendmsg+0x2a5/0x360 [ 288.292487][T13027] ? __lock_acquire+0x6b5/0x2cf0 [ 288.292522][T13027] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.292604][T13027] ? __fget_files+0x2a/0x420 [ 288.292631][T13027] ? __fget_files+0x3a0/0x420 [ 288.292671][T13027] __x64_sys_sendmsg+0x1bd/0x2a0 [ 288.292697][T13027] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 288.292732][T13027] ? __pfx_ksys_write+0x10/0x10 [ 288.292768][T13027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.292798][T13027] do_syscall_64+0x15f/0xf80 [ 288.292825][T13027] ? trace_irq_disable+0x3b/0x140 [ 288.292852][T13027] ? clear_bhb_loop+0x40/0x90 [ 288.292877][T13027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.292897][T13027] RIP: 0033:0x7f63b2d9cdd9 [ 288.292923][T13027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.292940][T13027] RSP: 002b:00007f63b3bf3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.292964][T13027] RAX: ffffffffffffffda RBX: 00007f63b3015fa0 RCX: 00007f63b2d9cdd9 [ 288.292978][T13027] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003 [ 288.292992][T13027] RBP: 00007f63b3bf3090 R08: 0000000000000000 R09: 0000000000000000 [ 288.293004][T13027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.293015][T13027] R13: 00007f63b3016038 R14: 00007f63b3015fa0 R15: 00007ffc681db338 [ 288.293050][T13027] [ 288.878064][T13043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1931'. [ 289.939017][T13091] lo speed is unknown, defaulting to 1000 [ 290.317446][T13101] netlink: 'syz.2.1944': attribute type 1 has an invalid length. [ 290.335413][T13103] netlink: 'syz.2.1944': attribute type 1 has an invalid length. [ 290.572334][T13113] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 290.604092][T13115] netlink: 'syz.3.1948': attribute type 10 has an invalid length. [ 290.616830][T13115] team0: Port device vxcan1 added [ 291.040957][T13138] __nla_validate_parse: 3 callbacks suppressed [ 291.040979][T13138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1956'. [ 291.113877][T13138] bond6: Invalid ad_actor_system MAC address. [ 291.129139][T13138] bond6: option ad_actor_system: invalid value (7) [ 291.159434][T13138] bond6 (unregistering): Released all slaves [ 291.288005][T13146] openvswitch: netlink: IP tunnel dst address not specified [ 291.730558][ T25] block nbd1: Possible stuck request ffff888026f3e000: control (read@0,1024B). Runtime 90 seconds [ 291.741369][ T25] block nbd1: Possible stuck request ffff888026f3e1c0: control (read@1024,1024B). Runtime 90 seconds [ 291.752413][ T25] block nbd1: Possible stuck request ffff888026f3e380: control (read@2048,1024B). Runtime 90 seconds [ 291.763490][ T25] block nbd1: Possible stuck request ffff888026f3e540: control (read@3072,1024B). Runtime 90 seconds [ 292.089588][T13177] lo speed is unknown, defaulting to 1000 [ 292.212797][T13183] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1970'. [ 292.400825][T13192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.410831][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.421596][T13192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.430782][ T7384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.439662][T13192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.448632][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.456976][T13192] block nbd2: not configured, cannot reconfigure [ 293.179274][T13200] x_tables: duplicate underflow at hook 2 [ 293.433479][T13212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1980'. [ 293.539076][T13217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1981'. [ 293.751319][T13231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.759893][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.223903][T13258] sock: sock_timestamping_bind_phc: sock not bind to device [ 294.631675][T13274] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.1997'. [ 294.728253][T13263] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1993'. [ 294.748463][T13280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1998'. [ 294.756769][T13263] 0ªX¹¦À: renamed from caif0 [ 294.778306][T13280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1998'. [ 294.798264][T13263] 0ªX¹¦À: entered allmulticast mode [ 294.814958][T13263] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 295.562737][T13309] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2006'. [ 295.601726][T13316] smc: net device wlan0 applied user defined pnetid SYZ0 [ 295.776966][T13332] netlink: 'syz.4.2011': attribute type 30 has an invalid length. [ 296.160854][T13341] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2013'. [ 296.248839][T13341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2013'. [ 296.303399][T13354] netlink: 'syz.0.2013': attribute type 1 has an invalid length. [ 296.513538][T13360] netlink: 'syz.2.2019': attribute type 22 has an invalid length. [ 296.546895][T13360] netlink: 'syz.2.2019': attribute type 22 has an invalid length. [ 296.564471][T13360] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2019'. [ 296.833364][T13365] xt_recent: hitcount (33554435) is larger than allowed maximum (65535) [ 297.222451][T13372] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2022'. [ 297.543946][T13380] Cannot find del_set index 49151 as target [ 297.566406][T13380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2025'. [ 298.169552][T13390] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2027'. [ 298.653776][T13414] hsr0: entered promiscuous mode [ 298.677335][T13411] hsr0: left promiscuous mode [ 298.713026][T13418] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2034'. [ 299.188996][T13439] syzkaller1: entered promiscuous mode [ 299.207013][T13439] syzkaller1: entered allmulticast mode [ 299.264397][T13444] netlink: 'syz.2.2047': attribute type 20 has an invalid length. [ 299.315253][T13447] netlink: 'syz.3.2048': attribute type 8 has an invalid length. [ 299.339212][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2048'. [ 299.379869][T13447] bond0: entered promiscuous mode [ 299.396891][T13447] gretap0: entered promiscuous mode [ 299.411475][T13447] debugfs: 'hsr1' already exists in 'hsr' [ 299.436738][T13447] Cannot create hsr debugfs directory [ 299.452735][T13447] hsr1: entered promiscuous mode [ 299.796461][T13459] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2052'. [ 300.062679][T13463] lo: Caught tx_queue_len zero misconfig [ 300.263801][T13450] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 300.455212][T13475] x_tables: duplicate entry at hook 2 [ 300.657640][T13479] lo speed is unknown, defaulting to 1000 [ 301.107797][ T7376] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.120040][ T7376] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.152157][ T7376] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.175239][ T7376] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.236840][T13498] syzkaller0: entered promiscuous mode [ 301.258019][T13498] syzkaller0: entered allmulticast mode [ 301.285618][T13498] tipc: Enabled bearer , priority 0 [ 301.443519][T13496] tipc: Resetting bearer [ 301.491436][T13496] tipc: Disabling bearer [ 301.779924][T13522] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2072'. [ 301.819657][T13522] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2072'. [ 302.249138][T13541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.276817][T13541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.294087][T13541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.318551][T13541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.346025][T13541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.359933][T13541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.393564][T13541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.410134][T13541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.426250][T13541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.430398][T13550] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2082'. [ 302.472156][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2080'. [ 302.490761][T13541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.508371][T13552] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2080'. [ 302.553051][T13550] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 302.603829][T13550] bond0 (unregistering): Released all slaves [ 302.742904][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2080'. [ 302.763128][T13554] syzkaller0: entered promiscuous mode [ 302.776590][T13552] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2080'. [ 302.778622][T13554] syzkaller0: entered allmulticast mode [ 302.836845][ T42] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.867405][T13553] tipc: Enabled bearer , priority 0 [ 302.888165][ T42] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.904373][ T42] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.922912][T13551] tipc: Resetting bearer [ 302.974950][T13561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2084'. [ 302.985438][T13551] tipc: Disabling bearer [ 303.012310][ T42] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.241410][T13566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2085'. [ 303.242493][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2086'. [ 303.912173][T13598] netlink: 'syz.0.2096': attribute type 10 has an invalid length. [ 303.933163][T13595] netlink: 'syz.2.2095': attribute type 4 has an invalid length. [ 303.986554][T13598] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 304.019277][T13598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.063158][T13598] hsr0: entered promiscuous mode [ 304.079628][T13598] bridge0: port 1(hsr0) entered blocking state [ 304.086626][T13598] bridge0: port 1(hsr0) entered disabled state [ 304.097014][T13598] hsr0: entered allmulticast mode [ 304.105180][T13598] hsr_slave_0: entered allmulticast mode [ 304.111978][T13598] hsr_slave_1: entered allmulticast mode [ 304.468666][T13629] syzkaller1: entered promiscuous mode [ 304.484311][T13629] syzkaller1: entered allmulticast mode [ 304.612753][T13640] netlink: 'syz.4.2107': attribute type 1 has an invalid length. [ 304.668148][T13640] 8021q: adding VLAN 0 to HW filter on device bond8 [ 304.745780][T13643] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 304.755657][T13643] bond8: (slave batadv1): making interface the new active one [ 304.766308][T13643] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 304.851517][T13640] bond8 (unregistering): (slave batadv1): Releasing active interface [ 304.884956][T13640] bond8 (unregistering): Released all slaves [ 305.256129][T13657] lo speed is unknown, defaulting to 1000 [ 305.752315][T13680] netlink: 'syz.2.2120': attribute type 9 has an invalid length. [ 306.168773][T13684] netlink: 'syz.1.2122': attribute type 1 has an invalid length. [ 306.725373][T13721] x_tables: duplicate underflow at hook 1 [ 306.840516][T13725] __nla_validate_parse: 7 callbacks suppressed [ 306.840537][T13725] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2134'. [ 306.856525][T13725] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2134'. [ 307.094109][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'. [ 307.131080][T13748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2139'. [ 307.177470][T13754] FAULT_INJECTION: forcing a failure. [ 307.177470][T13754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.230276][T13754] CPU: 0 UID: 0 PID: 13754 Comm: syz.0.2141 Not tainted syzkaller #0 PREEMPT(full) [ 307.230308][T13754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 307.230321][T13754] Call Trace: [ 307.230330][T13754] [ 307.230339][T13754] dump_stack_lvl+0xe8/0x150 [ 307.230378][T13754] should_fail_ex+0x412/0x560 [ 307.230417][T13754] _copy_to_user+0x31/0xb0 [ 307.230444][T13754] simple_read_from_buffer+0xe1/0x170 [ 307.230472][T13754] proc_fail_nth_read+0x1bb/0x230 [ 307.230505][T13754] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.230531][T13754] ? rw_verify_area+0x2a6/0x4d0 [ 307.230556][T13754] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 307.230580][T13754] vfs_read+0x20c/0xa70 [ 307.230614][T13754] ? __pfx_vfs_read+0x10/0x10 [ 307.230636][T13754] ? aa_sk_perm+0x6d5/0x900 [ 307.230670][T13754] ? fd_install+0x94/0x3d0 [ 307.230700][T13754] ? __pfx_aa_sk_perm+0x10/0x10 [ 307.230728][T13754] ? nr_setsockopt+0xd9/0x410 [ 307.230767][T13754] ksys_read+0x150/0x270 [ 307.230795][T13754] ? __pfx_ksys_read+0x10/0x10 [ 307.230829][T13754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.230851][T13754] do_syscall_64+0x15f/0xf80 [ 307.230878][T13754] ? trace_irq_disable+0x3b/0x140 [ 307.230904][T13754] ? clear_bhb_loop+0x40/0x90 [ 307.230929][T13754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.230948][T13754] RIP: 0033:0x7f63b2d5d60e [ 307.230968][T13754] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 307.230986][T13754] RSP: 002b:00007f63b3bf2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 307.231010][T13754] RAX: ffffffffffffffda RBX: 00007f63b3bf36c0 RCX: 00007f63b2d5d60e [ 307.231025][T13754] RDX: 000000000000000f RSI: 00007f63b3bf30a0 RDI: 0000000000000003 [ 307.231039][T13754] RBP: 00007f63b3bf3090 R08: 0000000000000000 R09: 0000000000000000 [ 307.231051][T13754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.231064][T13754] R13: 00007f63b3016038 R14: 00007f63b3015fa0 R15: 00007ffc681db338 [ 307.231098][T13754] [ 307.802494][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2148'. [ 308.234746][T13806] lo speed is unknown, defaulting to 1000 [ 308.355452][T13821] syzkaller0: entered promiscuous mode [ 308.371099][T13821] syzkaller0: entered allmulticast mode [ 308.435192][T13826] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2156'. [ 308.549780][T13834] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2157'. [ 308.917808][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2155'. [ 310.942909][T13809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 311.222190][T13850] net_ratelimit: 40 callbacks suppressed [ 311.222213][T13850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.258900][T13851] gre2: entered promiscuous mode [ 311.259692][T13855] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2162'. [ 311.403400][T13851] netlink: 'syz.3.2161': attribute type 39 has an invalid length. [ 311.430965][T13862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2164'. [ 311.475177][T13862] netem: change failed [ 311.648223][T13875] IPVS: Error connecting to the multicast addr [ 312.235836][T13893] netlink: 'syz.4.2173': attribute type 2 has an invalid length. [ 312.286731][T13895] __nla_validate_parse: 4 callbacks suppressed [ 312.286752][T13895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2174'. [ 312.345457][T13895] team0: Port device vxcan1 removed [ 313.712545][T13950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2193'. [ 313.829966][T13950] netlink: 'syz.2.2193': attribute type 7 has an invalid length. [ 313.840181][T13950] netlink: 'syz.2.2193': attribute type 8 has an invalid length. [ 313.859836][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2193'. [ 314.211307][T13974] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2199'. [ 314.613449][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2206'. [ 314.699862][T13995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2206'. [ 314.723786][T13992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.765012][T13995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.049003][T14019] netlink: 'syz.4.2210': attribute type 1 has an invalid length. [ 315.089429][T14019] netlink: 728 bytes leftover after parsing attributes in process `syz.4.2210'. [ 315.212218][T14023] syzkaller1: entered promiscuous mode [ 315.224670][T14023] syzkaller1: entered allmulticast mode [ 315.495490][T14036] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2215'. [ 315.718060][T14044] tipc: Enabled bearer , priority 0 [ 315.732734][T14044] syzkaller0: entered promiscuous mode [ 315.748701][T14044] syzkaller0: entered allmulticast mode [ 315.769248][T14044] syz.1.2218 uses old SIOCAX25GETINFO [ 315.783984][T14049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.808944][T14049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.836702][T14044] tipc: Resetting bearer [ 315.979463][T14044] tipc: Disabling bearer [ 316.344691][T14063] xt_CT: You must specify a L4 protocol and not use inversions on it [ 316.359156][T14065] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 316.430783][T14065] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 316.724157][T14082] RDS: rds_bind could not find a transport for 7ad9:52b:9647:bada:f6:691b:481b:fa28, load rds_tcp or rds_rdma? [ 317.314172][T14100] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2233'. [ 317.333951][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.365660][T14100] pim6reg1: entered promiscuous mode [ 317.371493][T14100] pim6reg1: entered allmulticast mode [ 318.312969][T14129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2237'. [ 318.592245][T14139] lo speed is unknown, defaulting to 1000 [ 319.254870][T14178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2246'. [ 319.595749][T14189] netlink: 'syz.2.2247': attribute type 1 has an invalid length. [ 319.794145][T14189] 8021q: adding VLAN 0 to HW filter on device bond6 [ 319.831832][T14192] bond6: (slave syz_tun): Enslaving as a backup interface with an up link [ 319.929086][T14205] pim6reg1: entered promiscuous mode [ 319.937673][T14205] pim6reg1: entered allmulticast mode [ 320.236469][T14214] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 320.248945][T14214] bond7 (unregistering): Released all slaves [ 320.327483][T14216] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2254'. [ 320.402373][T14214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2254'. [ 320.494532][T14214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2254'. [ 320.536344][T14214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2254'. [ 321.445654][T14269] sctp: [Deprecated]: syz.0.2268 (pid 14269) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.445654][T14269] Use struct sctp_sack_info instead [ 321.582441][T14271] bridge0: left promiscuous mode [ 321.818727][ T25] block nbd1: Possible stuck request ffff888026f3e000: control (read@0,1024B). Runtime 120 seconds [ 321.831554][ T25] block nbd1: Possible stuck request ffff888026f3e1c0: control (read@1024,1024B). Runtime 120 seconds [ 321.843014][ T25] block nbd1: Possible stuck request ffff888026f3e380: control (read@2048,1024B). Runtime 120 seconds [ 321.854392][ T25] block nbd1: Possible stuck request ffff888026f3e540: control (read@3072,1024B). Runtime 120 seconds [ 322.976556][T14325] FAULT_INJECTION: forcing a failure. [ 322.976556][T14325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.017693][T14325] CPU: 0 UID: 0 PID: 14325 Comm: syz.2.2282 Not tainted syzkaller #0 PREEMPT(full) [ 323.017724][T14325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 323.017736][T14325] Call Trace: [ 323.017744][T14325] [ 323.017753][T14325] dump_stack_lvl+0xe8/0x150 [ 323.017798][T14325] should_fail_ex+0x412/0x560 [ 323.017838][T14325] _copy_to_user+0x31/0xb0 [ 323.017865][T14325] simple_read_from_buffer+0xe1/0x170 [ 323.017892][T14325] proc_fail_nth_read+0x1bb/0x230 [ 323.017918][T14325] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 323.017943][T14325] ? rw_verify_area+0x2a6/0x4d0 [ 323.017967][T14325] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 323.017991][T14325] vfs_read+0x20c/0xa70 [ 323.018019][T14325] ? __pfx___mutex_lock+0x10/0x10 [ 323.018048][T14325] ? __pfx_vfs_read+0x10/0x10 [ 323.018076][T14325] ? __fget_files+0x2a/0x420 [ 323.018103][T14325] ? __fget_files+0x3a0/0x420 [ 323.018123][T14325] ? __fget_files+0x2a/0x420 [ 323.018155][T14325] ksys_read+0x150/0x270 [ 323.018183][T14325] ? __pfx_ksys_read+0x10/0x10 [ 323.018218][T14325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.018241][T14325] do_syscall_64+0x15f/0xf80 [ 323.018267][T14325] ? trace_irq_disable+0x3b/0x140 [ 323.018295][T14325] ? clear_bhb_loop+0x40/0x90 [ 323.018321][T14325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.018342][T14325] RIP: 0033:0x7f95a515d60e [ 323.018362][T14325] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 323.018379][T14325] RSP: 002b:00007f95a5f87fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 323.018402][T14325] RAX: ffffffffffffffda RBX: 00007f95a5f886c0 RCX: 00007f95a515d60e [ 323.018418][T14325] RDX: 000000000000000f RSI: 00007f95a5f880a0 RDI: 0000000000000006 [ 323.018430][T14325] RBP: 00007f95a5f88090 R08: 0000000000000000 R09: 0000000000000000 [ 323.018442][T14325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.018454][T14325] R13: 00007f95a5416038 R14: 00007f95a5415fa0 R15: 00007ffdd6a055a8 [ 323.018489][T14325] [ 323.322953][T14327] bond7: entered allmulticast mode [ 323.353572][T14327] vxcan3: entered promiscuous mode [ 323.358841][T14327] vxcan3: entered allmulticast mode [ 323.365331][T14327] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 323.377263][T14327] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 323.890378][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.031646][T14358] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2293'. [ 324.142426][T14362] netlink: 'syz.2.2294': attribute type 1 has an invalid length. [ 324.164165][T14362] netlink: 276 bytes leftover after parsing attributes in process `syz.2.2294'. [ 324.216953][T14362] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2294'. [ 324.709678][T14385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2303'. [ 324.745915][T14380] wg2: Caught tx_queue_len zero misconfig [ 325.127744][T14405] netlink: 'syz.1.2308': attribute type 1 has an invalid length. [ 325.144296][T14405] netlink: 'syz.1.2308': attribute type 2 has an invalid length. [ 325.160626][T14405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2308'. [ 325.256095][T14408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.362661][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2309'. [ 325.481812][T14417] syzkaller0: entered promiscuous mode [ 325.491641][T14417] syzkaller0: entered allmulticast mode [ 325.507569][T14417] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2312'. [ 325.619369][T14399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.629465][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.823308][T14428] netlink: 'syz.0.2314': attribute type 39 has an invalid length. [ 326.088014][T14439] netlink: 'syz.4.2320': attribute type 1 has an invalid length. [ 326.103170][T14439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2320'. [ 326.173571][T14445] netlink: 'syz.3.2321': attribute type 39 has an invalid length. [ 326.370867][T14453] netlink: 'syz.2.2323': attribute type 31 has an invalid length. [ 326.575870][T14455] lo speed is unknown, defaulting to 1000 [ 326.673832][T14463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2327'. [ 326.853638][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2332'. [ 327.864502][T14504] team0: No ports can be present during mode change [ 328.131925][T14508] gtp0: entered promiscuous mode [ 328.144633][T14508] gtp0: entered allmulticast mode [ 328.672982][T14532] syzkaller0: entered promiscuous mode [ 329.122132][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.132699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.145335][T14561] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 329.315199][T14568] __nla_validate_parse: 1 callbacks suppressed [ 329.315223][T14568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2363'. [ 329.445703][T14571] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2364'. [ 329.870791][T14590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2371'. [ 329.944536][T14593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.953172][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.215358][T14605] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2375'. [ 330.285784][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2377'. [ 330.337476][T14615] netlink: 'syz.0.2378': attribute type 13 has an invalid length. [ 330.479633][T14624] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 331.140603][T14646] lo speed is unknown, defaulting to 1000 [ 331.810516][T14660] lo speed is unknown, defaulting to 1000 [ 331.884667][T14668] team0: entered promiscuous mode [ 331.919097][T14668] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 332.080764][T14672] lo speed is unknown, defaulting to 1000 [ 332.087905][T14683] set match dimension is over the limit! [ 333.122595][T14702] gtp0: entered promiscuous mode [ 333.134099][T14702] gtp0: entered allmulticast mode [ 333.616975][T14712] netlink: 'syz.3.2402': attribute type 1 has an invalid length. [ 333.646102][T14712] netlink: 'syz.3.2402': attribute type 2 has an invalid length. [ 333.677536][T14712] netlink: 'syz.3.2402': attribute type 1 has an invalid length. [ 333.685885][T14712] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2402'. [ 333.953298][T14715] syzkaller0: entered promiscuous mode [ 333.974042][T14715] syzkaller0: entered allmulticast mode [ 334.032164][T14733] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 336.391807][T14741] syzkaller0: entered promiscuous mode [ 336.397538][T14741] syzkaller0: entered allmulticast mode [ 336.406601][T14744] tipc: Enabled bearer , priority 0 [ 336.515120][T14728] tipc: Resetting bearer [ 336.560900][T14728] tipc: Disabling bearer [ 336.688358][T14759] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2414'. [ 336.700536][T14753] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2412'. [ 336.825435][T14772] netlink: 'syz.3.2417': attribute type 1 has an invalid length. [ 336.828852][T14767] gtp0: entered promiscuous mode [ 336.845804][T14767] gtp0: entered allmulticast mode [ 336.907416][T14772] bond8: entered promiscuous mode [ 336.913980][T14772] 8021q: adding VLAN 0 to HW filter on device bond8 [ 336.917701][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2416'. [ 336.940385][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2416'. [ 336.973286][T14774] bond8: (slave bridge4): making interface the new active one [ 336.984173][T14774] bridge4: entered promiscuous mode [ 337.008011][T14774] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 337.055657][T14778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2418'. [ 337.087875][T14778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2418'. [ 337.097669][T14778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2418'. [ 337.107598][T14778] netlink: 'syz.0.2418': attribute type 5 has an invalid length. [ 337.148898][T14778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2418'. [ 337.266321][T14787] : renamed from veth0_to_bond [ 337.433154][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2424'. [ 337.442703][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2424'. [ 337.611055][T14808] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 337.672776][T14809] tipc: Enabled bearer , priority 0 [ 337.781968][T14814] xt_hashlimit: size too large, truncated to 1048576 [ 337.805498][T14812] xt_hashlimit: size too large, truncated to 1048576 [ 337.845289][T14813] gtp1: entered promiscuous mode [ 337.866835][T14813] gtp1: entered allmulticast mode [ 337.886952][T14814] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 338.193005][T14828] lo speed is unknown, defaulting to 1000 [ 338.585062][T14847] netlink: 'syz.1.2441': attribute type 27 has an invalid length. [ 338.878769][T14851] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 339.203127][T14862] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 339.480609][T14878] vlan5: entered promiscuous mode [ 339.491492][T14878] veth1: entered promiscuous mode [ 339.525210][T14866] lo speed is unknown, defaulting to 1000 [ 339.730730][T14893] block nbd4: not configured, cannot reconfigure [ 339.849392][T14898] batadv_slave_1: entered promiscuous mode [ 340.195384][T14892] batadv_slave_1: left promiscuous mode [ 340.446556][T14915] openvswitch: netlink: Unknown key attributes 2 [ 341.483041][T14962] xt_hashlimit: size too large, truncated to 1048576 [ 341.554791][T14959] gtp2: entered promiscuous mode [ 341.583455][T14959] gtp2: entered allmulticast mode [ 341.611280][T14968] –: renamed from dummy0 [ 341.906925][T14974] __nla_validate_parse: 10 callbacks suppressed [ 341.906948][T14974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2477'. [ 342.658558][T14986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2479'. [ 342.715272][T14978] syzkaller0: entered promiscuous mode [ 342.727818][T14978] syzkaller0: entered allmulticast mode [ 342.928708][T14995] lo: Caught tx_queue_len zero misconfig [ 343.077832][T15001] lo speed is unknown, defaulting to 1000 [ 343.132625][T14994] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2482'. [ 344.510317][T15019] netlink: 'syz.4.2488': attribute type 3 has an invalid length. [ 346.761514][T15013] gtp3: entered promiscuous mode [ 346.766569][T15013] gtp3: entered allmulticast mode [ 347.166348][T15044] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2492'. [ 347.599291][T15046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2494'. [ 348.015728][T15063] IPv6: NLM_F_CREATE should be specified when creating new route [ 348.028330][T15063] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 348.035764][T15063] IPv6: NLM_F_CREATE should be set when creating new route [ 348.043140][T15063] IPv6: NLM_F_CREATE should be set when creating new route [ 348.050442][T15063] IPv6: NLM_F_CREATE should be set when creating new route [ 348.563219][T15075] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2499'. [ 348.641043][T15082] wg1: Master is either lo or non-ether device [ 349.017399][T15096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.071141][T15096] netlink: 'syz.0.2505': attribute type 1 has an invalid length. [ 349.602024][T15124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.610876][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.213276][T13788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.223215][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.244651][T13788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.253111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.299000][T13788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.307529][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.346588][T13788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.348664][T15157] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2517'. [ 350.390179][T15157] netlink: 'syz.4.2517': attribute type 1 has an invalid length. [ 350.399570][T15157] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2517'. [ 350.768100][T15176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2521'. [ 351.084531][T15192] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2525'. [ 351.115106][T15195] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2526'. [ 351.346277][T15202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2529'. [ 351.448108][T15202] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2529'. [ 351.539479][T15210] netlink: 'syz.4.2531': attribute type 1 has an invalid length. [ 351.558083][T15210] netlink: 'syz.4.2531': attribute type 2 has an invalid length. [ 351.742064][T15213] tipc: Enabling of bearer rejected, failed to enable media [ 351.891164][ T25] block nbd1: Possible stuck request ffff888026f3e000: control (read@0,1024B). Runtime 150 seconds [ 351.902541][ T25] block nbd1: Possible stuck request ffff888026f3e1c0: control (read@1024,1024B). Runtime 150 seconds [ 351.915090][ T25] block nbd1: Possible stuck request ffff888026f3e380: control (read@2048,1024B). Runtime 150 seconds [ 351.926346][ T25] block nbd1: Possible stuck request ffff888026f3e540: control (read@3072,1024B). Runtime 150 seconds [ 352.286514][T15233] lo speed is unknown, defaulting to 1000 [ 352.313696][T15229] __nla_validate_parse: 4 callbacks suppressed [ 352.313717][T15229] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2539'. [ 352.816473][T15247] ip6gretap1: entered allmulticast mode [ 353.405640][T15269] syzkaller0: entered promiscuous mode [ 353.423653][T15273] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2551'. [ 353.434697][T15269] syzkaller0: entered allmulticast mode [ 353.452937][T15272] tc action pedit offset must be on 32 bit boundaries [ 353.461598][T15272] tc action pedit offset must be on 32 bit boundaries [ 353.468406][T15272] tc action pedit offset must be on 32 bit boundaries [ 353.475299][T15272] tc action pedit offset must be on 32 bit boundaries [ 353.482134][T15272] tc action pedit offset must be on 32 bit boundaries [ 353.488933][T15272] tc action pedit offset must be on 32 bit boundaries [ 353.495811][T15272] tc action pedit offset must be on 32 bit boundaries [ 353.502654][T15272] tc action pedit offset must be on 32 bit boundaries [ 353.509495][T15272] tc action pedit offset must be on 32 bit boundaries [ 353.516414][T15272] tc action pedit offset must be on 32 bit boundaries [ 353.522690][T15273] netlink: 'syz.0.2551': attribute type 2 has an invalid length. [ 353.838629][T15286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2555'. [ 353.886919][T15287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2555'. [ 353.923814][T15286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2555'. [ 353.925550][T15294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2557'. [ 353.972488][T15287] macsec3: entered promiscuous mode [ 353.987819][T15287] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 354.018074][T15297] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2558'. [ 354.261599][T15301] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2559'. [ 354.281792][T15301] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2559'. [ 354.400785][T15317] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2561'. [ 354.592051][T15328] vti0: left promiscuous mode [ 354.598076][T15328] bond3: left promiscuous mode [ 354.604181][T15328] macsec2: left promiscuous mode [ 354.613066][T15328] hsr1: left promiscuous mode [ 354.662717][T15328] bond8: left promiscuous mode [ 354.676004][T15328] bridge4: left promiscuous mode [ 354.724140][T15328] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 354.740053][T15328] macsec3: left promiscuous mode [ 354.749478][T13786] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.784057][T13786] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.836981][T13786] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.870991][T13786] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.933653][T15345] netlink: 'syz.3.2570': attribute type 1 has an invalid length. [ 354.959933][T15345] netlink: 'syz.3.2570': attribute type 2 has an invalid length. [ 354.979570][T15345] netlink: 'syz.3.2570': attribute type 3 has an invalid length. [ 355.279567][T15357] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 355.459467][T15361] lo speed is unknown, defaulting to 1000 [ 355.632324][T15372] lo speed is unknown, defaulting to 1000 [ 355.639961][ C1] net_ratelimit: 9 callbacks suppressed [ 355.639980][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.745322][T15374] tunl0: Caught tx_queue_len zero misconfig [ 355.819952][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.130166][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.226861][T15387] syzkaller0: entered promiscuous mode [ 356.242814][T15387] syzkaller0: entered allmulticast mode [ 356.276847][T15387] tipc: Enabled bearer , priority 0 [ 356.291376][T15392] team_slave_1: Caught tx_queue_len zero misconfig [ 356.299078][T15386] tipc: Resetting bearer [ 356.344314][T15386] tipc: Disabling bearer [ 356.681458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.684398][T15402] bridge5: entered promiscuous mode [ 356.717958][T15402] bridge5: entered allmulticast mode [ 356.796828][T15409] hsr0: entered promiscuous mode [ 356.989572][T15414] lo speed is unknown, defaulting to 1000 [ 357.052699][T15416] pimreg9: entered allmulticast mode [ 357.312684][T15396] hsr0: left promiscuous mode [ 357.958256][T15444] FAULT_INJECTION: forcing a failure. [ 357.958256][T15444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.975523][T15444] CPU: 1 UID: 0 PID: 15444 Comm: syz.0.2599 Not tainted syzkaller #0 PREEMPT(full) [ 357.975551][T15444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 357.975564][T15444] Call Trace: [ 357.975572][T15444] [ 357.975580][T15444] dump_stack_lvl+0xe8/0x150 [ 357.975618][T15444] should_fail_ex+0x412/0x560 [ 357.975656][T15444] _copy_from_user+0x2d/0xb0 [ 357.975681][T15444] ___sys_sendmsg+0x1c6/0x360 [ 357.975703][T15444] ? __lock_acquire+0x6b5/0x2cf0 [ 357.975737][T15444] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.975794][T15444] ? __fget_files+0x2a/0x420 [ 357.975821][T15444] ? __fget_files+0x3a0/0x420 [ 357.975851][T15444] __x64_sys_sendmsg+0x1bd/0x2a0 [ 357.975877][T15444] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 357.975910][T15444] ? __pfx_ksys_write+0x10/0x10 [ 357.975944][T15444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.975965][T15444] do_syscall_64+0x15f/0xf80 [ 357.975992][T15444] ? trace_irq_disable+0x3b/0x140 [ 357.976018][T15444] ? clear_bhb_loop+0x40/0x90 [ 357.976043][T15444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.976062][T15444] RIP: 0033:0x7f63b2d9cdd9 [ 357.976082][T15444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.976099][T15444] RSP: 002b:00007f63b3bf3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.976121][T15444] RAX: ffffffffffffffda RBX: 00007f63b3015fa0 RCX: 00007f63b2d9cdd9 [ 357.976135][T15444] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 357.976148][T15444] RBP: 00007f63b3bf3090 R08: 0000000000000000 R09: 0000000000000000 [ 357.976160][T15444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.976171][T15444] R13: 00007f63b3016038 R14: 00007f63b3015fa0 R15: 00007ffc681db338 [ 357.976205][T15444] [ 357.986919][T15445] __nla_validate_parse: 8 callbacks suppressed [ 357.986937][T15445] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2598'. [ 358.467814][T15466] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2605'. [ 358.562405][T15466] bond8: entered promiscuous mode [ 358.568206][T15466] 8021q: adding VLAN 0 to HW filter on device bond8 [ 358.583026][T15466] bond8 (unregistering): Released all slaves [ 358.697807][T15476] bond9: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 358.713129][T15476] bond9 (unregistering): Released all slaves [ 359.000735][T15491] netlink: 'syz.3.2611': attribute type 10 has an invalid length. [ 359.016479][T15491] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2611'. [ 359.238010][T15503] openvswitch: netlink: IP tunnel TTL not specified. [ 359.294809][T15508] netlink: 16158 bytes leftover after parsing attributes in process `syz.3.2617'. [ 359.306185][T15503] netlink: 'syz.2.2614': attribute type 58 has an invalid length. [ 359.316026][T15503] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2614'. [ 359.522422][T15517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2619'. [ 359.544575][T15516] netlink: 'syz.1.2620': attribute type 1 has an invalid length. [ 359.760897][T15528] bond9: (slave bridge6): making interface the new active one [ 359.769494][T15528] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 359.862557][T15516] bond9: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 359.988815][T15537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2625'. [ 360.092381][T15544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2627'. [ 360.145777][T15546] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2627'. [ 360.601069][T15565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2632'. [ 360.745764][T15572] netlink: 'syz.0.2634': attribute type 15 has an invalid length. [ 360.766033][T15574] veth0_macvtap: entered allmulticast mode [ 360.781052][T15574] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 360.908072][T15578] lo speed is unknown, defaulting to 1000 [ 361.152507][T15592] veth1_to_team: Caught tx_queue_len zero misconfig [ 362.338033][T15654] netlink: 'syz.2.2654': attribute type 11 has an invalid length. [ 362.373156][T15654] netlink: 'syz.2.2654': attribute type 23 has an invalid length. [ 362.727794][T15675] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.737978][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.918396][T15670] lo speed is unknown, defaulting to 1000 [ 363.109080][T15690] __nla_validate_parse: 8 callbacks suppressed [ 363.109101][T15690] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2663'. [ 363.259469][ T30] audit: type=1800 audit(1777015757.828:4): pid=15696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2664" name="memory.events" dev="tmpfs" ino=2924 res=0 errno=0 [ 363.356697][T15698] netlink: 'syz.4.2663': attribute type 4 has an invalid length. [ 363.388640][T15700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2666'. [ 363.606989][T15715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2668'. [ 363.704588][T15719] netlink: 'syz.4.2671': attribute type 1 has an invalid length. [ 363.861695][T15719] 8021q: adding VLAN 0 to HW filter on device bond9 [ 364.205242][T15741] team0: Port device dummy0 removed [ 364.224723][T15741] bridge_slave_0: left allmulticast mode [ 364.240668][T15741] bridge_slave_0: left promiscuous mode [ 364.251601][T15741] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.276272][T15741] bridge_slave_1: left allmulticast mode [ 364.298959][T15741] bridge_slave_1: left promiscuous mode [ 364.315428][T15741] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.340880][T15741] bond0: (slave bond_slave_0): Releasing backup interface [ 364.365493][T15741] bond0: (slave bond_slave_1): Releasing backup interface [ 364.388887][T15741] team0: Port device team_slave_0 removed [ 364.406111][T15741] team0: Port device team_slave_1 removed [ 364.420121][T15741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.438081][T15741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.457245][T15741] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 364.664492][T15747] lo speed is unknown, defaulting to 1000 [ 364.767642][T15763] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20004 [ 365.042937][T15779] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2684'. [ 365.102507][T15779] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2684'. [ 365.208902][T15779] syz_tun: entered promiscuous mode [ 365.264864][T15779] syz_tun: left promiscuous mode [ 365.364407][T15749] sch_fq: defrate 4294967293 ignored. [ 365.428817][T15783] lo speed is unknown, defaulting to 1000 [ 365.618616][T15782] lo speed is unknown, defaulting to 1000 [ 366.543703][T15826] netlink: 'syz.4.2695': attribute type 11 has an invalid length. [ 366.757000][T15840] lo speed is unknown, defaulting to 1000 [ 367.220554][ T8937] IPVS: starting estimator thread 0... [ 367.319823][T15854] IPVS: using max 29 ests per chain, 69600 per kthread [ 367.335496][T15860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2703'. [ 367.673828][T15871] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2707'. [ 367.871736][T15881] ip6_vti0: Caught tx_queue_len zero misconfig [ 367.891026][T15881] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2710'. [ 367.914514][T15881] netem: incorrect gi model size [ 367.943406][T15881] netem: change failed [ 368.114847][T15894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2712'. [ 368.121902][T15891] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2711'. [ 368.149957][T15891] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2711'. [ 368.177231][T15896] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2713'. [ 368.503572][T15912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2718'. [ 368.535384][T15916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2720'. [ 368.654710][T15926] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2722'. [ 369.243276][T15955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2728'. [ 369.447587][T15963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2733'. [ 369.474271][T15963] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2733'. [ 369.475961][T15965] ip6erspan0: entered allmulticast mode [ 369.679170][T15969] batman_adv: batadv0: Adding interface: gretap4 [ 369.708267][T15969] batman_adv: batadv0: The MTU of interface gretap4 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.735931][T15969] batman_adv: batadv0: Interface activated: gretap4 [ 369.823735][T15986] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 369.831207][T15986] IPv6: NLM_F_CREATE should be set when creating new route [ 369.838495][T15986] IPv6: NLM_F_CREATE should be set when creating new route [ 369.845807][T15986] IPv6: NLM_F_CREATE should be set when creating new route [ 369.979638][T15991] veth1_to_bridge: entered allmulticast mode [ 369.996583][T15996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.000002][T15991] A link change request failed with some changes committed already. Interface veth1_to_bridge may have been left with an inconsistent configuration, please check. [ 370.058949][T15989] syz_tun: entered allmulticast mode [ 370.128313][T15993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.138480][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.172045][T15993] netlink: 'syz.4.2740': attribute type 39 has an invalid length. [ 370.966316][T16043] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.976535][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.036464][T16044] smc: net device veth1_to_team applied user defined pnetid S [ 372.341435][ T5850] block nbd2: Receive control failed (result -1) [ 372.402902][T16068] nbd2: detected capacity change from 0 to 137438953472 [ 372.412103][T10042] block nbd2: Dead connection, failed to find a fallback [ 372.422265][T10042] block nbd2: shutting down sockets [ 372.429270][T10042] blk_print_req_error: 138 callbacks suppressed [ 372.429290][T10042] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 372.445589][T10042] buffer_io_error: 138 callbacks suppressed [ 372.445607][T10042] Buffer I/O error on dev nbd2, logical block 0, async page read [ 372.460681][T10042] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 372.470864][T10042] Buffer I/O error on dev nbd2, logical block 0, async page read [ 372.480733][T10042] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 372.496185][T10042] Buffer I/O error on dev nbd2, logical block 0, async page read [ 372.517771][T10042] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 372.539798][T10042] Buffer I/O error on dev nbd2, logical block 0, async page read [ 372.570392][T10042] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 372.595943][T10042] Buffer I/O error on dev nbd2, logical block 0, async page read [ 372.628318][T10042] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 372.641751][T10042] Buffer I/O error on dev nbd2, logical block 0, async page read [ 372.651055][T10042] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 372.661002][T10042] Buffer I/O error on dev nbd2, logical block 0, async page read [ 372.669167][T10042] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 372.679033][T10042] Buffer I/O error on dev nbd2, logical block 0, async page read [ 372.730140][T10042] ldm_validate_partition_table(): Disk read failed. [ 372.765134][T10042] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 372.808233][T10042] Buffer I/O error on dev nbd2, logical block 0, async page read [ 372.845788][T10042] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 372.910834][T10042] Buffer I/O error on dev nbd2, logical block 0, async page read [ 372.944010][T10042] Dev nbd2: unable to read RDB block 0 [ 372.948310][T16090] netlink: 'syz.4.2766': attribute type 9 has an invalid length. [ 372.980854][T10042] nbd2: unable to read partition table [ 372.998589][T10042] ldm_validate_partition_table(): Disk read failed. [ 373.022945][T10042] Dev nbd2: unable to read RDB block 0 [ 373.031305][T10042] nbd2: unable to read partition table [ 373.228275][T16100] __nla_validate_parse: 10 callbacks suppressed [ 373.228298][T16100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2768'. [ 373.252830][T16100] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2768'. [ 373.391939][T16111] syzkaller0: entered promiscuous mode [ 373.397816][T16111] syzkaller0: entered allmulticast mode [ 373.706009][T16122] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 373.726315][T16122] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 373.748037][T16122] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 373.903431][T16131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2778'. [ 373.938880][T16131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2778'. [ 373.950105][T16131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2778'. [ 374.154030][T16141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2780'. [ 374.305642][T16143] 8021q: VLANs not supported on vcan0 [ 374.313875][T16143] team_slave_1: Caught tx_queue_len zero misconfig [ 374.340497][T16143] netlink: 'syz.0.2783': attribute type 3 has an invalid length. [ 374.606304][T16152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2785'. [ 378.276263][T16201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2799'. [ 378.316500][T16196] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2798'. [ 378.341572][T16196] .70·: renamed from hsr0 [ 378.354296][T16209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2799'. [ 378.389615][T16196] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 378.409983][T16196] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 378.423168][T16196] .70·: entered allmulticast mode [ 378.428404][T16196] hsr_slave_0: entered allmulticast mode [ 378.434468][T16196] hsr_slave_1: entered allmulticast mode [ 378.461220][T16196] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 378.773992][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.094316][T16236] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2806'. [ 379.344202][T16246] netlink: 'syz.4.2809': attribute type 10 has an invalid length. [ 379.354252][T16241] lo speed is unknown, defaulting to 1000 [ 379.363509][T16247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2808'. [ 379.398622][T16246] veth0_vlan: left promiscuous mode [ 379.431191][T16246] veth0_vlan: entered promiscuous mode [ 379.443196][T16246] team0: Device veth0_vlan failed to register rx_handler [ 379.624985][T16250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2810'. [ 379.668738][T16250] gretap0: entered promiscuous mode [ 380.379259][T16268] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2817'. [ 380.729065][T16275] netlink: 'syz.1.2820': attribute type 1 has an invalid length. [ 380.761069][T16275] netlink: 'syz.1.2820': attribute type 2 has an invalid length. [ 380.996892][T16288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2826'. [ 381.013738][T16288] netlink: 'syz.0.2826': attribute type 4 has an invalid length. [ 381.201336][T16303] netlink: 'syz.3.2831': attribute type 4 has an invalid length. [ 381.240729][T16309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.256832][T16309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.275664][T16309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.350643][T16309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.361082][T16309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.447256][T16320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2836'. [ 381.602998][T16327] lo speed is unknown, defaulting to 1000 [ 381.639416][T16333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2839'. [ 381.977350][ T25] block nbd1: Possible stuck request ffff888026f3e000: control (read@0,1024B). Runtime 180 seconds [ 381.988333][ T25] block nbd1: Possible stuck request ffff888026f3e1c0: control (read@1024,1024B). Runtime 180 seconds [ 381.999573][ T25] block nbd1: Possible stuck request ffff888026f3e380: control (read@2048,1024B). Runtime 180 seconds [ 382.011257][ T25] block nbd1: Possible stuck request ffff888026f3e540: control (read@3072,1024B). Runtime 180 seconds [ 382.015024][T16342] syzkaller0: entered promiscuous mode [ 382.059669][T16342] syzkaller0: entered allmulticast mode [ 382.334311][T16357] sctp: [Deprecated]: syz.4.2843 (pid 16357) Use of struct sctp_assoc_value in delayed_ack socket option. [ 382.334311][T16357] Use struct sctp_sack_info instead [ 382.353642][T16357] sctp: [Deprecated]: syz.4.2843 (pid 16357) Use of struct sctp_assoc_value in delayed_ack socket option. [ 382.353642][T16357] Use struct sctp_sack_info instead [ 382.572539][T16371] ÿ: renamed from bond_slave_0 [ 382.643294][T16372] netlink: 'syz.0.2845': attribute type 3 has an invalid length. [ 385.295056][ T5213] udevd[5213]: worker [5862] /devices/virtual/block/nbd1 timeout; kill it [ 385.303993][ T5213] udevd[5213]: seq 16008 '/devices/virtual/block/nbd1' killed [ 396.420937][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 396.429812][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 396.439979][ T5854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 396.448203][ T5854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 396.457121][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 396.498702][T16374] lo speed is unknown, defaulting to 1000 [ 396.608234][T16374] chnl_net:caif_netlink_parms(): no params data found [ 396.682640][T16374] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.690295][T16374] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.697537][T16374] bridge_slave_0: entered allmulticast mode [ 396.705051][T16374] bridge_slave_0: entered promiscuous mode [ 396.713128][T16374] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.720443][T16374] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.727655][T16374] bridge_slave_1: entered allmulticast mode [ 396.735086][T16374] bridge_slave_1: entered promiscuous mode [ 396.763597][T16374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.775867][T16374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.804912][T16374] team0: Port device team_slave_0 added [ 396.813034][T16374] team0: Port device team_slave_1 added [ 396.857803][T16374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.865495][T16374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.892004][T16374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.921217][T16374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.930247][T16374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.983734][T16374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.036401][ T5854] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 397.048203][ T5854] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 397.077156][ T5854] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 397.085946][ T5854] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 397.094659][ T5854] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 397.119011][T16374] hsr_slave_0: entered promiscuous mode [ 397.137761][T16374] hsr_slave_1: entered promiscuous mode [ 397.151787][ T5850] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 397.160989][ T5850] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 397.168935][ T5850] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 397.172292][T16374] debugfs: 'hsr0' already exists in 'hsr' [ 397.182599][T16374] Cannot create hsr debugfs directory [ 397.185460][ T5850] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 397.200597][ T5850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 397.293717][T16384] lo speed is unknown, defaulting to 1000 [ 397.316160][T16386] lo speed is unknown, defaulting to 1000 [ 397.509301][ T5854] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 397.522197][ T5854] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 397.532375][ T5854] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 397.541464][ T5854] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 397.549167][ T5854] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 397.763657][T16389] lo speed is unknown, defaulting to 1000 [ 397.904169][T16384] chnl_net:caif_netlink_parms(): no params data found [ 397.917900][T16386] chnl_net:caif_netlink_parms(): no params data found [ 398.118150][T16384] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.125927][T16384] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.135985][T16384] bridge_slave_0: entered allmulticast mode [ 398.143600][T16384] bridge_slave_0: entered promiscuous mode [ 398.156169][T16386] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.163557][T16386] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.170990][T16386] bridge_slave_0: entered allmulticast mode [ 398.178137][T16386] bridge_slave_0: entered promiscuous mode [ 398.185800][T16384] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.193223][T16384] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.200835][T16384] bridge_slave_1: entered allmulticast mode [ 398.208074][T16384] bridge_slave_1: entered promiscuous mode [ 398.215526][T16389] chnl_net:caif_netlink_parms(): no params data found [ 398.226643][T16386] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.234383][T16386] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.242132][T16386] bridge_slave_1: entered allmulticast mode [ 398.249263][T16386] bridge_slave_1: entered promiscuous mode [ 398.336366][T16386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.364903][T16384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.392761][T16384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.442362][T16386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.492940][ T5854] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 398.503949][ T5854] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 398.514484][ T5854] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 398.524930][ T5854] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 398.532091][ T5864] Bluetooth: hci5: command tx timeout [ 398.548623][ T5864] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 398.592798][T16384] team0: Port device team_slave_0 added [ 398.609095][T16386] team0: Port device team_slave_0 added [ 398.622703][T16384] team0: Port device team_slave_1 added [ 398.643702][T16386] team0: Port device team_slave_1 added [ 398.715527][T16389] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.723663][T16389] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.731321][T16389] bridge_slave_0: entered allmulticast mode [ 398.738538][T16389] bridge_slave_0: entered promiscuous mode [ 398.750209][T16386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.757220][T16386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.783894][T16386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.800493][T16384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.807509][T16384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.833558][T16384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.844944][T16389] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.852843][T16389] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.860708][T16389] bridge_slave_1: entered allmulticast mode [ 398.867893][T16389] bridge_slave_1: entered promiscuous mode [ 398.876068][T16386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.883148][T16386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.909136][T16386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.928292][T16384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.935642][T16384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.962406][T16384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.984845][T16408] lo speed is unknown, defaulting to 1000 [ 399.003145][T16389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.034729][T16389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.094058][T16386] hsr_slave_0: entered promiscuous mode [ 399.100795][T16386] hsr_slave_1: entered promiscuous mode [ 399.107031][T16386] debugfs: 'hsr0' already exists in 'hsr' [ 399.113044][T16386] Cannot create hsr debugfs directory [ 399.151728][T16384] hsr_slave_0: entered promiscuous mode [ 399.158097][T16384] hsr_slave_1: entered promiscuous mode [ 399.164649][T16384] debugfs: 'hsr0' already exists in 'hsr' [ 399.170432][ T5864] Bluetooth: hci6: command tx timeout [ 399.175922][T16384] Cannot create hsr debugfs directory [ 399.183819][T16389] team0: Port device team_slave_0 added [ 399.197684][T16389] team0: Port device team_slave_1 added [ 399.251127][ T5864] Bluetooth: hci7: command tx timeout [ 399.283701][T16389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.291113][T16389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.317455][T16389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.358281][T16389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.365588][T16389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.392071][T16389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.573776][T16389] hsr_slave_0: entered promiscuous mode [ 399.580951][T16389] hsr_slave_1: entered promiscuous mode [ 399.587170][T16389] debugfs: 'hsr0' already exists in 'hsr' [ 399.593268][T16389] Cannot create hsr debugfs directory [ 399.650577][ T5864] Bluetooth: hci8: command tx timeout [ 399.798124][T16408] chnl_net:caif_netlink_parms(): no params data found [ 399.977884][T16408] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.985203][T16408] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.993037][T16408] bridge_slave_0: entered allmulticast mode [ 400.000696][T16408] bridge_slave_0: entered promiscuous mode [ 400.011023][T16408] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.018279][T16408] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.026119][T16408] bridge_slave_1: entered allmulticast mode [ 400.033579][T16408] bridge_slave_1: entered promiscuous mode [ 400.090032][T16408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.111087][T16408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.162745][T16408] team0: Port device team_slave_0 added [ 400.185239][T16408] team0: Port device team_slave_1 added [ 400.227147][T16408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.234271][T16408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.260902][T16408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.283610][T16408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.291135][T16408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.317911][T16408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.373578][T16408] hsr_slave_0: entered promiscuous mode [ 400.380463][T16408] hsr_slave_1: entered promiscuous mode [ 400.386611][T16408] debugfs: 'hsr0' already exists in 'hsr' [ 400.392856][T16408] Cannot create hsr debugfs directory [ 400.610134][ T5850] Bluetooth: hci5: command tx timeout [ 400.610146][ T5864] Bluetooth: hci9: command tx timeout [ 401.249939][ T5864] Bluetooth: hci6: command tx timeout [ 401.330353][ T5864] Bluetooth: hci7: command tx timeout [ 401.730095][ T5864] Bluetooth: hci8: command tx timeout [ 402.689993][ T5850] Bluetooth: hci5: command tx timeout [ 402.690109][ T5864] Bluetooth: hci9: command tx timeout [ 403.340124][ T5850] Bluetooth: hci6: command tx timeout [ 403.410010][ T5850] Bluetooth: hci7: command tx timeout [ 403.810018][ T5850] Bluetooth: hci8: command tx timeout [ 404.770081][ T5850] Bluetooth: hci5: command tx timeout [ 404.770113][ T5864] Bluetooth: hci9: command tx timeout [ 405.410039][ T5864] Bluetooth: hci6: command tx timeout [ 405.490563][ T5864] Bluetooth: hci7: command tx timeout [ 405.890098][ T5864] Bluetooth: hci8: command tx timeout [ 406.849979][ T5864] Bluetooth: hci9: command tx timeout [ 412.052153][ T25] block nbd1: Possible stuck request ffff888026f3e000: control (read@0,1024B). Runtime 210 seconds [ 412.063715][ T25] block nbd1: Possible stuck request ffff888026f3e1c0: control (read@1024,1024B). Runtime 210 seconds [ 412.075065][ T25] block nbd1: Possible stuck request ffff888026f3e380: control (read@2048,1024B). Runtime 210 seconds [ 412.086245][ T25] block nbd1: Possible stuck request ffff888026f3e540: control (read@3072,1024B). Runtime 210 seconds [ 440.212385][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.131464][ T25] block nbd1: Possible stuck request ffff888026f3e000: control (read@0,1024B). Runtime 240 seconds [ 442.142353][ T25] block nbd1: Possible stuck request ffff888026f3e1c0: control (read@1024,1024B). Runtime 240 seconds [ 442.153486][ T25] block nbd1: Possible stuck request ffff888026f3e380: control (read@2048,1024B). Runtime 240 seconds [ 442.164791][ T25] block nbd1: Possible stuck request ffff888026f3e540: control (read@3072,1024B). Runtime 240 seconds [ 442.290040][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 457.030638][ T5850] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 457.046472][ T5850] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 457.055214][ T5850] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 457.063939][ T5850] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 457.077960][ T5853] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 457.080425][ T5854] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 457.105892][ T5854] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 457.115052][ T5854] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 457.126705][ T5854] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 457.136129][ T5854] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 457.151965][T16423] lo speed is unknown, defaulting to 1000 [ 457.240675][T16425] lo speed is unknown, defaulting to 1000 [ 457.362494][T16423] chnl_net:caif_netlink_parms(): no params data found [ 457.553060][ T5854] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 457.573366][ T5854] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 457.585273][ T5854] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 457.595347][ T5854] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 457.603444][ T5854] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 457.660797][T16423] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.668109][T16423] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.676007][T16423] bridge_slave_0: entered allmulticast mode [ 457.685666][T16423] bridge_slave_0: entered promiscuous mode [ 457.706920][T16423] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.720567][T16423] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.722008][ T5850] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 457.727932][T16423] bridge_slave_1: entered allmulticast mode [ 457.730675][T16423] bridge_slave_1: entered promiscuous mode [ 457.751740][ T5850] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 457.761124][ T5850] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 457.773342][ T5850] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 457.784139][ T5850] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 457.853189][T16423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.867664][T16423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.877589][T16425] chnl_net:caif_netlink_parms(): no params data found [ 457.920724][T16436] lo speed is unknown, defaulting to 1000 [ 457.940874][T16423] team0: Port device team_slave_0 added [ 457.964711][T16423] team0: Port device team_slave_1 added [ 458.017426][T16439] lo speed is unknown, defaulting to 1000 [ 458.018151][T16423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.030624][T16423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.057089][T16423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.088417][T16423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.095909][T16423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.122313][T16423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.210797][T16425] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.218022][T16425] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.225581][T16425] bridge_slave_0: entered allmulticast mode [ 458.232879][T16425] bridge_slave_0: entered promiscuous mode [ 458.261106][T16425] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.268334][T16425] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.275741][T16425] bridge_slave_1: entered allmulticast mode [ 458.283412][T16425] bridge_slave_1: entered promiscuous mode [ 458.337440][T16423] hsr_slave_0: entered promiscuous mode [ 458.344039][T16423] hsr_slave_1: entered promiscuous mode [ 458.350597][T16423] debugfs: 'hsr0' already exists in 'hsr' [ 458.356325][T16423] Cannot create hsr debugfs directory [ 458.411033][T16425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.424915][T16425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.587705][ T5850] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 458.603697][ T5850] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 458.613495][ T5850] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 458.625015][ T5850] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 458.625068][T16425] team0: Port device team_slave_0 added [ 458.633884][ T5850] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 458.642068][T16425] team0: Port device team_slave_1 added [ 458.727153][T16425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.735673][T16425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.762435][T16425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.795294][T16425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.803911][T16425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.830128][T16425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.854783][T16439] chnl_net:caif_netlink_parms(): no params data found [ 458.982555][T16436] chnl_net:caif_netlink_parms(): no params data found [ 458.994452][T16448] lo speed is unknown, defaulting to 1000 [ 459.052559][T16425] hsr_slave_0: entered promiscuous mode [ 459.060173][T16425] hsr_slave_1: entered promiscuous mode [ 459.066340][T16425] debugfs: 'hsr0' already exists in 'hsr' [ 459.072263][T16425] Cannot create hsr debugfs directory [ 459.091080][ T5850] Bluetooth: hci10: command tx timeout [ 459.153543][T16439] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.161055][T16439] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.168570][T16439] bridge_slave_0: entered allmulticast mode [ 459.177310][ T5850] Bluetooth: hci11: command tx timeout [ 459.184388][T16439] bridge_slave_0: entered promiscuous mode [ 459.234798][T16439] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.242109][T16439] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.249403][T16439] bridge_slave_1: entered allmulticast mode [ 459.257772][T16439] bridge_slave_1: entered promiscuous mode [ 459.332450][T16436] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.340011][T16436] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.347278][T16436] bridge_slave_0: entered allmulticast mode [ 459.355338][T16436] bridge_slave_0: entered promiscuous mode [ 459.401445][T16436] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.408659][T16436] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.416365][T16436] bridge_slave_1: entered allmulticast mode [ 459.424985][T16436] bridge_slave_1: entered promiscuous mode [ 459.436357][T16439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.480580][T16439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.549024][T16436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.564952][T16439] team0: Port device team_slave_0 added [ 459.573578][T16439] team0: Port device team_slave_1 added [ 459.598477][T16436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.650451][ T5850] Bluetooth: hci12: command tx timeout [ 459.689077][T16439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.696473][T16439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.724290][T16439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.751532][T16436] team0: Port device team_slave_0 added [ 459.760337][T16436] team0: Port device team_slave_1 added [ 459.783603][T16439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.791014][T16439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.817294][T16439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.890187][ T5850] Bluetooth: hci13: command tx timeout [ 459.947499][T16436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.954965][T16436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.981680][T16436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.014200][T16439] hsr_slave_0: entered promiscuous mode [ 460.020830][T16439] hsr_slave_1: entered promiscuous mode [ 460.026996][T16439] debugfs: 'hsr0' already exists in 'hsr' [ 460.032934][T16439] Cannot create hsr debugfs directory [ 460.039388][T16436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.046754][T16436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.073605][T16436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.086720][T16448] chnl_net:caif_netlink_parms(): no params data found [ 460.281057][T16436] hsr_slave_0: entered promiscuous mode [ 460.287583][T16436] hsr_slave_1: entered promiscuous mode [ 460.294499][T16436] debugfs: 'hsr0' already exists in 'hsr' [ 460.300755][T16436] Cannot create hsr debugfs directory [ 460.342775][T16448] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.350132][T16448] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.357653][T16448] bridge_slave_0: entered allmulticast mode [ 460.367110][T16448] bridge_slave_0: entered promiscuous mode [ 460.401492][T16448] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.408746][T16448] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.416244][T16448] bridge_slave_1: entered allmulticast mode [ 460.423647][T16448] bridge_slave_1: entered promiscuous mode [ 460.513370][T16448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.538380][T16448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.611822][T16448] team0: Port device team_slave_0 added [ 460.629238][T16448] team0: Port device team_slave_1 added [ 460.690233][ T5850] Bluetooth: hci14: command tx timeout [ 460.723846][T16448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.731004][T16448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.757356][T16448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.789334][T16448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.796690][T16448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.823008][T16448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.911572][T16448] hsr_slave_0: entered promiscuous mode [ 460.918076][T16448] hsr_slave_1: entered promiscuous mode [ 460.924943][T16448] debugfs: 'hsr0' already exists in 'hsr' [ 460.931069][T16448] Cannot create hsr debugfs directory [ 461.169997][ T5850] Bluetooth: hci10: command tx timeout [ 461.250769][ T5850] Bluetooth: hci11: command tx timeout [ 461.729848][ T5850] Bluetooth: hci12: command tx timeout [ 461.970048][ T5850] Bluetooth: hci13: command tx timeout [ 462.769964][ T5850] Bluetooth: hci14: command tx timeout [ 463.250140][ T5850] Bluetooth: hci10: command tx timeout [ 463.330021][ T5850] Bluetooth: hci11: command tx timeout [ 463.809996][ T5850] Bluetooth: hci12: command tx timeout [ 464.050038][ T5850] Bluetooth: hci13: command tx timeout [ 464.850970][ T5850] Bluetooth: hci14: command tx timeout [ 465.330087][ T5850] Bluetooth: hci10: command tx timeout [ 465.409991][ T5850] Bluetooth: hci11: command tx timeout [ 465.890000][ T5850] Bluetooth: hci12: command tx timeout [ 466.130030][ T5850] Bluetooth: hci13: command tx timeout [ 466.940026][ T5850] Bluetooth: hci14: command tx timeout [ 472.221389][ T25] block nbd1: Possible stuck request ffff888026f3e000: control (read@0,1024B). Runtime 270 seconds [ 472.232364][ T25] block nbd1: Possible stuck request ffff888026f3e1c0: control (read@1024,1024B). Runtime 270 seconds [ 472.243528][ T25] block nbd1: Possible stuck request ffff888026f3e380: control (read@2048,1024B). Runtime 270 seconds [ 472.254673][ T25] block nbd1: Possible stuck request ffff888026f3e540: control (read@3072,1024B). Runtime 270 seconds [ 501.654314][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.290873][ T25] block nbd1: Possible stuck request ffff888026f3e000: control (read@0,1024B). Runtime 300 seconds [ 502.301872][ T25] block nbd1: Possible stuck request ffff888026f3e1c0: control (read@1024,1024B). Runtime 300 seconds [ 502.312960][ T25] block nbd1: Possible stuck request ffff888026f3e380: control (read@2048,1024B). Runtime 300 seconds [ 502.324114][ T25] block nbd1: Possible stuck request ffff888026f3e540: control (read@3072,1024B). Runtime 300 seconds [ 517.220133][ T5853] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 517.234567][ T5853] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 517.244237][ T5853] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 517.265961][ T5864] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 517.279400][T16474] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 517.288000][T16476] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 517.288302][T16474] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 517.304569][T16476] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 517.304692][T16474] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 517.321848][T16474] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 517.415383][T16473] lo speed is unknown, defaulting to 1000 [ 517.423856][T16471] lo speed is unknown, defaulting to 1000 [ 517.698051][ T5853] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 517.712865][ T5853] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 517.723764][ T5853] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 517.735048][ T5853] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 517.744431][ T5853] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 517.755178][ T5853] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 517.787650][ T5850] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 517.796745][ T5850] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 517.805174][ T5850] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 517.813391][ T5850] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 517.948761][T16480] lo speed is unknown, defaulting to 1000 [ 517.993370][T16473] chnl_net:caif_netlink_parms(): no params data found [ 518.008580][T16483] lo speed is unknown, defaulting to 1000 [ 518.121953][T16471] chnl_net:caif_netlink_parms(): no params data found [ 518.248121][T16473] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.255605][T16473] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.263298][T16473] bridge_slave_0: entered allmulticast mode [ 518.271018][T16473] bridge_slave_0: entered promiscuous mode [ 518.320696][T16473] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.329516][T16473] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.337204][T16473] bridge_slave_1: entered allmulticast mode [ 518.344715][T16473] bridge_slave_1: entered promiscuous mode [ 518.358765][T16471] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.366411][T16471] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.373976][T16471] bridge_slave_0: entered allmulticast mode [ 518.381550][T16471] bridge_slave_0: entered promiscuous mode [ 518.406509][T16471] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.413951][T16471] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.421501][T16471] bridge_slave_1: entered allmulticast mode [ 518.428723][T16471] bridge_slave_1: entered promiscuous mode [ 518.450796][T16473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.490186][T16473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.574350][T16473] team0: Port device team_slave_0 added [ 518.596170][T16471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.625195][T16473] team0: Port device team_slave_1 added [ 518.652671][T16476] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 518.665657][T16471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.665984][T16476] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 518.685479][T16476] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 518.697559][T16476] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 518.705817][T16476] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 518.794116][T16471] team0: Port device team_slave_0 added [ 518.813075][T16473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.820302][T16473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.846768][T16473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.861541][T16471] team0: Port device team_slave_1 added [ 518.867490][T16480] chnl_net:caif_netlink_parms(): no params data found [ 518.890025][T16473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.897020][T16473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.923391][T16473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.981919][T16483] chnl_net:caif_netlink_parms(): no params data found [ 519.037971][T16471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.045211][T16471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.071925][T16471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.091208][T16476] Bluetooth: hci5: command 0x0406 tx timeout [ 519.096125][T16471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.104523][T16471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.130792][T16471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.205328][T16499] lo speed is unknown, defaulting to 1000 [ 519.257658][T16473] hsr_slave_0: entered promiscuous mode [ 519.264370][T16473] hsr_slave_1: entered promiscuous mode [ 519.270950][T16473] debugfs: 'hsr0' already exists in 'hsr' [ 519.276724][T16473] Cannot create hsr debugfs directory [ 519.327715][T16483] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.337592][T16483] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.345359][T16483] bridge_slave_0: entered allmulticast mode [ 519.353048][T16483] bridge_slave_0: entered promiscuous mode [ 519.408121][T16483] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.416008][T16483] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.416123][ T5854] Bluetooth: hci15: command tx timeout [ 519.424694][T16483] bridge_slave_1: entered allmulticast mode [ 519.430718][ T5854] Bluetooth: hci16: command tx timeout [ 519.438991][T16483] bridge_slave_1: entered promiscuous mode [ 519.450753][T16480] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.457884][T16480] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.465647][T16480] bridge_slave_0: entered allmulticast mode [ 519.473306][T16480] bridge_slave_0: entered promiscuous mode [ 519.481560][T16480] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.488708][T16480] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.496992][T16480] bridge_slave_1: entered allmulticast mode [ 519.504998][T16480] bridge_slave_1: entered promiscuous mode [ 519.529582][T16471] hsr_slave_0: entered promiscuous mode [ 519.536307][T16471] hsr_slave_1: entered promiscuous mode [ 519.542828][T16471] debugfs: 'hsr0' already exists in 'hsr' [ 519.548561][T16471] Cannot create hsr debugfs directory [ 519.643866][T16483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.656651][T16480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.701292][T16483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.714013][T16480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.810004][ T5854] Bluetooth: hci17: command tx timeout [ 519.840772][T16483] team0: Port device team_slave_0 added [ 519.850248][T16483] team0: Port device team_slave_1 added [ 519.857818][T16480] team0: Port device team_slave_0 added [ 519.889448][T16480] team0: Port device team_slave_1 added [ 519.895699][ T5854] Bluetooth: hci18: command tx timeout [ 519.974520][T16483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.982182][T16483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.008388][T16483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.021471][T16480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.028490][T16480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.055328][T16480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.092281][T16483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.099332][T16483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.125894][T16483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.144610][T16480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.151795][T16480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.178126][T16480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.363328][T16483] hsr_slave_0: entered promiscuous mode [ 520.372159][T16483] hsr_slave_1: entered promiscuous mode [ 520.378515][T16483] debugfs: 'hsr0' already exists in 'hsr' [ 520.384482][T16483] Cannot create hsr debugfs directory [ 520.397838][T16499] chnl_net:caif_netlink_parms(): no params data found [ 520.414392][T16480] hsr_slave_0: entered promiscuous mode [ 520.421577][T16480] hsr_slave_1: entered promiscuous mode [ 520.428125][T16480] debugfs: 'hsr0' already exists in 'hsr' [ 520.434034][T16480] Cannot create hsr debugfs directory [ 520.612158][T16499] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.619362][T16499] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.626877][T16499] bridge_slave_0: entered allmulticast mode [ 520.634709][T16499] bridge_slave_0: entered promiscuous mode [ 520.657136][T16499] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.664970][T16499] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.672898][T16499] bridge_slave_1: entered allmulticast mode [ 520.680906][T16499] bridge_slave_1: entered promiscuous mode [ 520.770163][ T5854] Bluetooth: hci19: command tx timeout [ 520.792933][T16499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.833101][T16499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.941188][T16499] team0: Port device team_slave_0 added [ 520.957368][T16499] team0: Port device team_slave_1 added [ 520.991946][T16499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.001257][T16499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.027887][T16499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.047368][T16499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.054535][T16499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.080824][T16499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.136245][T16499] hsr_slave_0: entered promiscuous mode [ 521.143544][T16499] hsr_slave_1: entered promiscuous mode [ 521.150608][T16499] debugfs: 'hsr0' already exists in 'hsr' [ 521.156390][T16499] Cannot create hsr debugfs directory [ 521.490119][T16476] Bluetooth: hci16: command tx timeout [ 521.497492][ T5854] Bluetooth: hci15: command tx timeout [ 521.891370][ T5854] Bluetooth: hci17: command tx timeout [ 521.970143][ T5854] Bluetooth: hci18: command tx timeout [ 522.850049][T16516] Bluetooth: hci19: command tx timeout [ 523.570125][T16516] Bluetooth: hci16: command tx timeout [ 523.570181][ T5864] Bluetooth: hci15: command tx timeout [ 523.970637][ T5864] Bluetooth: hci17: command tx timeout [ 524.050514][ T5864] Bluetooth: hci18: command tx timeout [ 524.210173][ T5864] Bluetooth: hci8: command 0x0406 tx timeout [ 524.216650][T16516] Bluetooth: hci6: command 0x0406 tx timeout [ 524.222897][ T5864] Bluetooth: hci7: command 0x0406 tx timeout [ 524.223052][T16516] Bluetooth: hci9: command 0x0406 tx timeout [ 524.929824][ T5850] Bluetooth: hci19: command tx timeout [ 525.649945][ T5850] Bluetooth: hci16: command tx timeout [ 525.652333][T16476] Bluetooth: hci15: command tx timeout [ 526.050017][T16476] Bluetooth: hci17: command tx timeout [ 526.130334][T16476] Bluetooth: hci18: command tx timeout [ 527.009988][T16476] Bluetooth: hci19: command tx timeout [ 528.530742][ T31] INFO: task syz.1.2829:16302 blocked for more than 143 seconds. [ 528.538654][ T31] Not tainted syzkaller #0 [ 528.543699][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 528.552523][ T31] task:syz.1.2829 state:D stack:26328 pid:16302 tgid:16300 ppid:5852 task_flags:0x480140 flags:0x00080002 [ 528.564763][ T31] Call Trace: [ 528.568127][ T31] [ 528.571331][ T31] __schedule+0x17b4/0x5680 [ 528.576033][ T31] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 528.581032][ T31] ? schedule+0x90/0x360 [ 528.585323][ T31] schedule+0x164/0x360 [ 528.589509][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 528.595396][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 528.601848][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 528.608259][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 528.614788][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 528.621212][ T31] nbd_set_size+0x454/0x680 [ 528.629356][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 528.649778][ T31] ? nla_memcpy+0x5b/0xc0 [ 528.659825][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 528.677086][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 528.686704][ T31] ? rcu_is_watching+0x15/0xb0 [ 528.695001][ T31] ? trace_kmalloc+0x2a/0xf0 [ 528.704108][ T31] ? __nla_parse+0x40/0x60 [ 528.708616][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 528.715572][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 528.722342][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 528.727984][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 528.734566][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 528.739874][ T31] genl_rcv_msg+0x61c/0x7a0 [ 528.744450][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 528.749481][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 528.755568][ T31] netlink_rcv_skb+0x232/0x4b0 [ 528.760444][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 528.765508][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 528.771136][ T31] ? down_read+0x270/0x2e0 [ 528.775636][ T31] ? genl_rcv+0xd/0x40 [ 528.780113][ T31] genl_rcv+0x28/0x40 [ 528.784177][ T31] netlink_unicast+0x75c/0x8e0 [ 528.788998][ T31] netlink_sendmsg+0x813/0xb40 [ 528.794015][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 528.799367][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 528.804425][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 528.809836][ T31] ____sys_sendmsg+0x972/0x9f0 [ 528.814620][ T31] ? __might_fault+0xaf/0x130 [ 528.819317][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 528.824830][ T31] ? import_iovec+0x73/0xa0 [ 528.829387][ T31] ___sys_sendmsg+0x2a5/0x360 [ 528.834245][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 528.839271][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 528.844728][ T31] ? futex_wait+0x2a2/0x390 [ 528.849323][ T31] ? __fget_files+0x2a/0x420 [ 528.854180][ T31] ? __fget_files+0x3a0/0x420 [ 528.858923][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 528.864136][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 528.869760][ T31] ? rcu_is_watching+0x15/0xb0 [ 528.874555][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.880816][ T31] do_syscall_64+0x15f/0xf80 [ 528.885455][ T31] ? trace_irq_disable+0x3b/0x140 [ 528.890843][ T31] ? clear_bhb_loop+0x40/0x90 [ 528.895559][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.901559][ T31] RIP: 0033:0x7fd62399cdd9 [ 528.906016][ T31] RSP: 002b:00007fd6248f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 528.914503][ T31] RAX: ffffffffffffffda RBX: 00007fd623c15fa0 RCX: 00007fd62399cdd9 [ 528.922549][ T31] RDX: 0000000000000004 RSI: 0000200000000380 RDI: 0000000000000005 [ 528.930859][ T31] RBP: 00007fd623a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 528.938894][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.947007][ T31] R13: 00007fd623c16038 R14: 00007fd623c15fa0 R15: 00007ffef5bf10b8 [ 528.955081][ T31] [ 528.958114][ T31] INFO: task syz.2.2837:16322 blocked for more than 143 seconds. [ 528.966175][ T31] Not tainted syzkaller #0 [ 528.971243][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 528.980091][ T31] task:syz.2.2837 state:D stack:27904 pid:16322 tgid:16321 ppid:5845 task_flags:0x400140 flags:0x00080002 [ 528.992414][ T31] Call Trace: [ 528.995768][ T31] [ 528.998878][ T31] __schedule+0x17b4/0x5680 [ 529.003804][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 529.008828][ T31] ? __pfx___schedule+0x10/0x10 [ 529.014011][ T31] ? schedule+0x90/0x360 [ 529.018315][ T31] schedule+0x164/0x360 [ 529.022709][ T31] schedule_preempt_disabled+0x13/0x30 [ 529.028275][ T31] __mutex_lock+0x7f5/0x1550 [ 529.032998][ T31] ? __mutex_lock+0x606/0x1550 [ 529.037798][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 529.042713][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 529.047822][ T31] ? radix_tree_lookup+0x240/0x290 [ 529.053108][ T31] genl_rcv_msg+0x10b/0x7a0 [ 529.057660][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 529.062873][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 529.068323][ T31] netlink_rcv_skb+0x232/0x4b0 [ 529.073309][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 529.078452][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 529.083872][ T31] ? down_read+0x270/0x2e0 [ 529.088348][ T31] ? genl_rcv+0xd/0x40 [ 529.092861][ T31] genl_rcv+0x28/0x40 [ 529.096926][ T31] netlink_unicast+0x75c/0x8e0 [ 529.101934][ T31] netlink_sendmsg+0x813/0xb40 [ 529.106894][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.112635][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 529.117686][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 529.123231][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.128576][ T31] __sys_sendto+0x672/0x710 [ 529.133197][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 529.138287][ T31] ? exc_page_fault+0x6a/0xc0 [ 529.143183][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 529.148554][ T31] __x64_sys_sendto+0xde/0x100 [ 529.153572][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.159770][ T31] do_syscall_64+0x15f/0xf80 [ 529.164400][ T31] ? trace_irq_disable+0x3b/0x140 [ 529.169430][ T31] ? clear_bhb_loop+0x40/0x90 [ 529.174382][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.180511][ T31] RIP: 0033:0x7f95a515d60e [ 529.184997][ T31] RSP: 002b:00007f95a5f86e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 529.193531][ T31] RAX: ffffffffffffffda RBX: 00007f95a5f886c0 RCX: 00007f95a515d60e [ 529.201590][ T31] RDX: 0000000000000020 RSI: 00007f95a5f87000 RDI: 000000000000000a [ 529.209877][ T31] RBP: 0000000000000000 R08: 00007f95a5f86f04 R09: 000000000000000c [ 529.217926][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 529.226319][ T31] R13: 00007f95a5f86f58 R14: 00007f95a5f87000 R15: 0000000000000000 [ 529.234566][ T31] [ 529.237619][ T31] INFO: task syz.2.2837:16323 blocked for more than 144 seconds. [ 529.245472][ T31] Not tainted syzkaller #0 [ 529.251071][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 529.259976][ T31] task:syz.2.2837 state:D stack:27064 pid:16323 tgid:16321 ppid:5845 task_flags:0x400140 flags:0x00080002 [ 529.271993][ T31] Call Trace: [ 529.275273][ T31] [ 529.278198][ T31] __schedule+0x17b4/0x5680 [ 529.282798][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 529.287781][ T31] ? __pfx___schedule+0x10/0x10 [ 529.292826][ T31] ? schedule+0x90/0x360 [ 529.297117][ T31] schedule+0x164/0x360 [ 529.301396][ T31] schedule_preempt_disabled+0x13/0x30 [ 529.306930][ T31] __mutex_lock+0x7f5/0x1550 [ 529.311640][ T31] ? __mutex_lock+0x606/0x1550 [ 529.316457][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 529.321327][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 529.326435][ T31] ? radix_tree_lookup+0x240/0x290 [ 529.331869][ T31] genl_rcv_msg+0x10b/0x7a0 [ 529.336435][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 529.342047][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 529.347483][ T31] netlink_rcv_skb+0x232/0x4b0 [ 529.352342][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 529.357402][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 529.362941][ T31] ? down_read+0x270/0x2e0 [ 529.367415][ T31] ? genl_rcv+0xd/0x40 [ 529.371687][ T31] genl_rcv+0x28/0x40 [ 529.375724][ T31] netlink_unicast+0x75c/0x8e0 [ 529.380654][ T31] netlink_sendmsg+0x813/0xb40 [ 529.385491][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.390826][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 529.395785][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 529.401214][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.406569][ T31] __sys_sendto+0x672/0x710 [ 529.411245][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 529.416312][ T31] ? exc_page_fault+0x6a/0xc0 [ 529.421121][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 529.426441][ T31] __x64_sys_sendto+0xde/0x100 [ 529.431396][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.437603][ T31] do_syscall_64+0x15f/0xf80 [ 529.442581][ T31] ? trace_irq_disable+0x3b/0x140 [ 529.447665][ T31] ? clear_bhb_loop+0x40/0x90 [ 529.452863][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.458912][ T31] RIP: 0033:0x7f95a515d60e [ 529.463538][ T31] RSP: 002b:00007f95a33f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 529.472201][ T31] RAX: ffffffffffffffda RBX: 00007f95a33f66c0 RCX: 00007f95a515d60e [ 529.480327][ T31] RDX: 0000000000000020 RSI: 00007f95a33f5000 RDI: 0000000000000009 [ 529.488360][ T31] RBP: 0000000000000000 R08: 00007f95a33f4f04 R09: 000000000000000c [ 529.497303][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 529.505648][ T31] R13: 00007f95a33f4f58 R14: 00007f95a33f5000 R15: 0000000000000000 [ 529.513740][ T31] [ 529.516789][ T31] INFO: task syz.3.2838:16325 blocked for more than 144 seconds. [ 529.524903][ T31] Not tainted syzkaller #0 [ 529.530033][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 529.538741][ T31] task:syz.3.2838 state:D stack:28088 pid:16325 tgid:16324 ppid:5846 task_flags:0x400140 flags:0x00080002 [ 529.550844][ T31] Call Trace: [ 529.554160][ T31] [ 529.557122][ T31] __schedule+0x17b4/0x5680 [ 529.561823][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 529.566833][ T31] ? __pfx___schedule+0x10/0x10 [ 529.572028][ T31] ? schedule+0x90/0x360 [ 529.576342][ T31] schedule+0x164/0x360 [ 529.580629][ T31] schedule_preempt_disabled+0x13/0x30 [ 529.586150][ T31] __mutex_lock+0x7f5/0x1550 [ 529.590810][ T31] ? kernel_text_address+0xa5/0xe0 [ 529.595958][ T31] ? __mutex_lock+0x606/0x1550 [ 529.601084][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 529.605837][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 529.611576][ T31] ? stack_trace_save+0xa9/0x100 [ 529.616557][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 529.621600][ T31] ? radix_tree_lookup+0x240/0x290 [ 529.626756][ T31] genl_rcv_msg+0x10b/0x7a0 [ 529.631513][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 529.636683][ T31] netlink_rcv_skb+0x232/0x4b0 [ 529.641654][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 529.646764][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 529.652400][ T31] ? down_read+0x270/0x2e0 [ 529.656908][ T31] ? genl_rcv+0xd/0x40 [ 529.661206][ T31] genl_rcv+0x28/0x40 [ 529.665261][ T31] netlink_unicast+0x75c/0x8e0 [ 529.670127][ T31] netlink_sendmsg+0x813/0xb40 [ 529.674927][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.680623][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 529.685745][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 529.691251][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.696602][ T31] __sys_sendto+0x672/0x710 [ 529.701252][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 529.706344][ T31] ? exc_page_fault+0x6a/0xc0 [ 529.711182][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 529.716537][ T31] __x64_sys_sendto+0xde/0x100 [ 529.721665][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.727816][ T31] do_syscall_64+0x15f/0xf80 [ 529.733412][ T31] ? trace_irq_disable+0x3b/0x140 [ 529.738503][ T31] ? clear_bhb_loop+0x40/0x90 [ 529.743289][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.749220][ T31] RIP: 0033:0x7fc12775d60e [ 529.754003][ T31] RSP: 002b:00007fc1285afe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 529.762610][ T31] RAX: ffffffffffffffda RBX: 00007fc1285b16c0 RCX: 00007fc12775d60e [ 529.770983][ T31] RDX: 0000000000000024 RSI: 00007fc1285b0000 RDI: 0000000000000006 [ 529.779021][ T31] RBP: 0000000000000000 R08: 00007fc1285aff04 R09: 000000000000000c [ 529.787297][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 529.795356][ T31] R13: 00007fc1285aff58 R14: 00007fc1285b0000 R15: 0000000000000000 [ 529.803529][ T31] [ 529.806615][ T31] INFO: task syz.3.2838:16331 blocked for more than 144 seconds. [ 529.815012][ T31] Not tainted syzkaller #0 [ 529.820186][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 529.828995][ T31] task:syz.3.2838 state:D stack:28216 pid:16331 tgid:16324 ppid:5846 task_flags:0x400140 flags:0x00080002 [ 529.841031][ T31] Call Trace: [ 529.844342][ T31] [ 529.847302][ T31] __schedule+0x17b4/0x5680 [ 529.852088][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 529.857120][ T31] ? __pfx___schedule+0x10/0x10 [ 529.862076][ T31] ? schedule+0x90/0x360 [ 529.866334][ T31] schedule+0x164/0x360 [ 529.870647][ T31] schedule_preempt_disabled+0x13/0x30 [ 529.876248][ T31] __mutex_lock+0x7f5/0x1550 [ 529.881093][ T31] ? kernel_text_address+0xa5/0xe0 [ 529.886276][ T31] ? __mutex_lock+0x606/0x1550 [ 529.891696][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 529.896460][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 529.901556][ T31] ? stack_trace_save+0xa9/0x100 [ 529.906523][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 529.911649][ T31] ? radix_tree_lookup+0x240/0x290 [ 529.916817][ T31] genl_rcv_msg+0x10b/0x7a0 [ 529.921434][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 529.926509][ T31] netlink_rcv_skb+0x232/0x4b0 [ 529.931503][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 529.936583][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 529.941953][ T31] ? down_read+0x270/0x2e0 [ 529.946401][ T31] ? genl_rcv+0xd/0x40 [ 529.950527][ T31] genl_rcv+0x28/0x40 [ 529.954548][ T31] netlink_unicast+0x75c/0x8e0 [ 529.959351][ T31] netlink_sendmsg+0x813/0xb40 [ 529.964302][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.969995][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 529.975012][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 529.980412][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.985722][ T31] __sys_sendto+0x672/0x710 [ 529.990281][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 529.995407][ T31] ? rcu_is_watching+0x15/0xb0 [ 530.000266][ T31] __x64_sys_sendto+0xde/0x100 [ 530.005101][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.011432][ T31] do_syscall_64+0x15f/0xf80 [ 530.016068][ T31] ? trace_irq_disable+0x3b/0x140 [ 530.021198][ T31] ? clear_bhb_loop+0x40/0x90 [ 530.025913][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.031919][ T31] RIP: 0033:0x7fc12775d60e [ 530.036371][ T31] RSP: 002b:00007fc12858ee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 530.045075][ T31] RAX: ffffffffffffffda RBX: 00007fc1285906c0 RCX: 00007fc12775d60e [ 530.053688][ T31] RDX: 0000000000000020 RSI: 00007fc12858f000 RDI: 0000000000000009 [ 530.061870][ T31] RBP: 0000000000000000 R08: 00007fc12858ef04 R09: 000000000000000c [ 530.069921][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 530.077907][ T31] R13: 00007fc12858ef58 R14: 00007fc12858f000 R15: 0000000000000000 [ 530.086048][ T31] [ 530.089154][ T31] INFO: task syz.3.2838:16332 blocked for more than 144 seconds. [ 530.097331][ T31] Not tainted syzkaller #0 [ 530.102392][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 530.111239][ T31] task:syz.3.2838 state:D stack:28704 pid:16332 tgid:16324 ppid:5846 task_flags:0x400040 flags:0x00080002 [ 530.123282][ T31] Call Trace: [ 530.126584][ T31] [ 530.129521][ T31] __schedule+0x17b4/0x5680 [ 530.134158][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 530.139146][ T31] ? __pfx___schedule+0x10/0x10 [ 530.144122][ T31] ? schedule+0x90/0x360 [ 530.148439][ T31] schedule+0x164/0x360 [ 530.152792][ T31] schedule_preempt_disabled+0x13/0x30 [ 530.158300][ T31] __mutex_lock+0x7f5/0x1550 [ 530.162992][ T31] ? kernel_text_address+0xa5/0xe0 [ 530.168150][ T31] ? __mutex_lock+0x606/0x1550 [ 530.173097][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 530.177863][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 530.182995][ T31] ? stack_trace_save+0xa9/0x100 [ 530.187967][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 530.193008][ T31] ? radix_tree_lookup+0x240/0x290 [ 530.198154][ T31] genl_rcv_msg+0x10b/0x7a0 [ 530.202757][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 530.207847][ T31] netlink_rcv_skb+0x232/0x4b0 [ 530.212857][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 530.217930][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 530.223323][ T31] ? down_read+0x270/0x2e0 [ 530.227772][ T31] ? genl_rcv+0xd/0x40 [ 530.231936][ T31] genl_rcv+0x28/0x40 [ 530.235953][ T31] netlink_unicast+0x75c/0x8e0 [ 530.240816][ T31] netlink_sendmsg+0x813/0xb40 [ 530.245610][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.250973][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 530.255939][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 530.261438][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.266792][ T31] __sys_sendto+0x672/0x710 [ 530.271404][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 530.276468][ T31] ? fd_install+0x94/0x3d0 [ 530.280973][ T31] ? fd_install+0x306/0x3d0 [ 530.285505][ T31] __x64_sys_sendto+0xde/0x100 [ 530.290437][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.296622][ T31] do_syscall_64+0x15f/0xf80 [ 530.301333][ T31] ? trace_irq_disable+0x3b/0x140 [ 530.306395][ T31] ? clear_bhb_loop+0x40/0x90 [ 530.311151][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.317084][ T31] RIP: 0033:0x7fc12775d60e [ 530.321608][ T31] RSP: 002b:00007fc12856de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 530.330205][ T31] RAX: ffffffffffffffda RBX: 00007fc12856f6c0 RCX: 00007fc12775d60e [ 530.338226][ T31] RDX: 000000000000001c RSI: 00007fc12856e000 RDI: 000000000000000c [ 530.346330][ T31] RBP: 0000000000000000 R08: 00007fc12856df04 R09: 000000000000000c [ 530.354477][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 530.362593][ T31] R13: 00007fc12856df58 R14: 00007fc12856e000 R15: 0000000000000000 [ 530.370965][ T31] [ 530.374060][ T31] INFO: task syz.4.2843:16357 blocked for more than 145 seconds. [ 530.382013][ T31] Not tainted syzkaller #0 [ 530.387086][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 530.395906][ T31] task:syz.4.2843 state:D stack:25632 pid:16357 tgid:16354 ppid:5844 task_flags:0x400140 flags:0x00080002 [ 530.407964][ T31] Call Trace: [ 530.411319][ T31] [ 530.414281][ T31] __schedule+0x17b4/0x5680 [ 530.418806][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 530.423853][ T31] ? __pfx___schedule+0x10/0x10 [ 530.428774][ T31] ? schedule+0x90/0x360 [ 530.433138][ T31] schedule+0x164/0x360 [ 530.437344][ T31] schedule_preempt_disabled+0x13/0x30 [ 530.442936][ T31] __mutex_lock+0x7f5/0x1550 [ 530.447574][ T31] ? __mutex_lock+0x606/0x1550 [ 530.453001][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 530.457740][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 530.462851][ T31] ? radix_tree_lookup+0x240/0x290 [ 530.467991][ T31] genl_rcv_msg+0x10b/0x7a0 [ 530.472575][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 530.477655][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 530.483217][ T31] netlink_rcv_skb+0x232/0x4b0 [ 530.488057][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 530.493197][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 530.498538][ T31] ? down_read+0x270/0x2e0 [ 530.503076][ T31] ? genl_rcv+0xd/0x40 [ 530.507174][ T31] genl_rcv+0x28/0x40 [ 530.511260][ T31] netlink_unicast+0x75c/0x8e0 [ 530.516071][ T31] netlink_sendmsg+0x813/0xb40 [ 530.520978][ T31] ? irqentry_exit+0x218/0x730 [ 530.525796][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.531182][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.536491][ T31] __sys_sendto+0x672/0x710 [ 530.541081][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 530.546143][ T31] ? exc_page_fault+0x6a/0xc0 [ 530.550890][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 530.556370][ T31] __x64_sys_sendto+0xde/0x100 [ 530.561236][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.567357][ T31] do_syscall_64+0x15f/0xf80 [ 530.572125][ T31] ? trace_irq_disable+0x3b/0x140 [ 530.577231][ T31] ? clear_bhb_loop+0x40/0x90 [ 530.581987][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.587905][ T31] RIP: 0033:0x7f78f1f5d60e [ 530.592502][ T31] RSP: 002b:00007f78f2ec9e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 530.601058][ T31] RAX: ffffffffffffffda RBX: 00007f78f2ecb6c0 RCX: 00007f78f1f5d60e [ 530.609060][ T31] RDX: 0000000000000020 RSI: 00007f78f2eca000 RDI: 0000000000000006 [ 530.617268][ T31] RBP: 0000000000000000 R08: 00007f78f2ec9f04 R09: 000000000000000c [ 530.625357][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 530.633515][ T31] R13: 00007f78f2ec9f58 R14: 00007f78f2eca000 R15: 0000000000000000 [ 530.641597][ T31] [ 530.644634][ T31] INFO: task syz.4.2843:16367 blocked for more than 145 seconds. [ 530.652494][ T31] Not tainted syzkaller #0 [ 530.657576][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 530.666363][ T31] task:syz.4.2843 state:D stack:27904 pid:16367 tgid:16354 ppid:5844 task_flags:0x400040 flags:0x00080002 [ 530.678424][ T31] Call Trace: [ 530.681873][ T31] [ 530.684837][ T31] __schedule+0x17b4/0x5680 [ 530.689354][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 530.694616][ T31] ? __pfx___schedule+0x10/0x10 [ 530.699541][ T31] ? schedule+0x90/0x360 [ 530.703978][ T31] schedule+0x164/0x360 [ 530.708201][ T31] schedule_preempt_disabled+0x13/0x30 [ 530.713746][ T31] __mutex_lock+0x7f5/0x1550 [ 530.718373][ T31] ? __mutex_lock+0x606/0x1550 [ 530.723213][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 530.727918][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 530.733036][ T31] ? radix_tree_lookup+0x240/0x290 [ 530.738177][ T31] genl_rcv_msg+0x10b/0x7a0 [ 530.742773][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 530.747852][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 530.753375][ T31] netlink_rcv_skb+0x232/0x4b0 [ 530.758197][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 530.763361][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 530.768710][ T31] ? down_read+0x270/0x2e0 [ 530.773504][ T31] ? genl_rcv+0xd/0x40 [ 530.777673][ T31] genl_rcv+0x28/0x40 [ 530.781919][ T31] netlink_unicast+0x75c/0x8e0 [ 530.786745][ T31] netlink_sendmsg+0x813/0xb40 [ 530.791672][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.797014][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 530.802276][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 530.807620][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.813056][ T31] __sys_sendto+0x672/0x710 [ 530.817639][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 530.822846][ T31] ? fd_install+0x94/0x3d0 [ 530.827339][ T31] ? fd_install+0x306/0x3d0 [ 530.831931][ T31] __x64_sys_sendto+0xde/0x100 [ 530.836715][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.842838][ T31] do_syscall_64+0x15f/0xf80 [ 530.847486][ T31] ? trace_irq_disable+0x3b/0x140 [ 530.852702][ T31] ? clear_bhb_loop+0x40/0x90 [ 530.857427][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.863418][ T31] RIP: 0033:0x7f78f1f5d60e [ 530.867950][ T31] RSP: 002b:00007f78f2ea8e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 530.876562][ T31] RAX: ffffffffffffffda RBX: 00007f78f2eaa6c0 RCX: 00007f78f1f5d60e [ 530.884760][ T31] RDX: 0000000000000020 RSI: 00007f78f2ea9000 RDI: 0000000000000007 [ 530.892825][ T31] RBP: 0000000000000000 R08: 00007f78f2ea8f04 R09: 000000000000000c [ 530.900967][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 530.908978][ T31] R13: 00007f78f2ea8f58 R14: 00007f78f2ea9000 R15: 0000000000000000 [ 530.917072][ T31] [ 530.920258][ T31] INFO: task syz.0.2845:16371 blocked for more than 145 seconds. [ 530.928010][ T31] Not tainted syzkaller #0 [ 530.933118][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 530.941837][ T31] task:syz.0.2845 state:D stack:25928 pid:16371 tgid:16370 ppid:5847 task_flags:0x400140 flags:0x00080002 [ 530.953853][ T31] Call Trace: [ 530.957151][ T31] [ 530.960147][ T31] __schedule+0x17b4/0x5680 [ 530.964685][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 530.969872][ T31] ? __pfx___schedule+0x10/0x10 [ 530.974787][ T31] ? schedule+0x90/0x360 [ 530.979061][ T31] schedule+0x164/0x360 [ 530.983301][ T31] schedule_preempt_disabled+0x13/0x30 [ 530.988800][ T31] __mutex_lock+0x7f5/0x1550 [ 530.993503][ T31] ? __mutex_lock+0x606/0x1550 [ 530.998299][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 531.003078][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 531.008164][ T31] ? radix_tree_lookup+0x240/0x290 [ 531.013688][ T31] genl_rcv_msg+0x10b/0x7a0 [ 531.018273][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 531.023417][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 531.029002][ T31] netlink_rcv_skb+0x232/0x4b0 [ 531.033982][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 531.039058][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 531.044421][ T31] ? down_read+0x270/0x2e0 [ 531.048868][ T31] ? genl_rcv+0xd/0x40 [ 531.053039][ T31] genl_rcv+0x28/0x40 [ 531.057058][ T31] netlink_unicast+0x75c/0x8e0 [ 531.061915][ T31] netlink_sendmsg+0x813/0xb40 [ 531.066725][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.072116][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 531.077101][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 531.082507][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.087971][ T31] __sys_sendto+0x672/0x710 [ 531.093216][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 531.098315][ T31] ? exc_page_fault+0x6a/0xc0 [ 531.103091][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 531.108409][ T31] __x64_sys_sendto+0xde/0x100 [ 531.113253][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.119359][ T31] do_syscall_64+0x15f/0xf80 [ 531.124055][ T31] ? trace_irq_disable+0x3b/0x140 [ 531.129125][ T31] ? clear_bhb_loop+0x40/0x90 [ 531.133915][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.139984][ T31] RIP: 0033:0x7f63b2d5d60e [ 531.144481][ T31] RSP: 002b:00007f63b3bf1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 531.153006][ T31] RAX: ffffffffffffffda RBX: 00007f63b3bf36c0 RCX: 00007f63b2d5d60e [ 531.161048][ T31] RDX: 0000000000000020 RSI: 00007f63b3bf2000 RDI: 0000000000000017 [ 531.169040][ T31] RBP: 0000000000000000 R08: 00007f63b3bf1f04 R09: 000000000000000c [ 531.177196][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 531.185268][ T31] R13: 00007f63b3bf1f58 R14: 00007f63b3bf2000 R15: 0000000000000000 [ 531.193400][ T31] [ 531.196507][ T31] [ 531.196507][ T31] Showing all locks held in the system: [ 531.204312][ T31] 1 lock held by khungtaskd/31: [ 531.209183][ T31] #0: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 531.219186][ T31] 2 locks held by getty/5602: [ 531.223933][ T31] #0: ffff8880373480a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 531.233757][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 531.243956][ T31] 1 lock held by udevd/5862: [ 531.248547][ T31] #0: ffff888026eea350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 531.257989][ T31] 2 locks held by kworker/u8:24/13778: [ 531.263557][ T31] 5 locks held by kworker/u8:35/13792: [ 531.269134][ T31] 6 locks held by syz.1.2829/16302: [ 531.274553][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.282886][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 531.291990][ T31] #2: ffff888026e28260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 531.302450][ T31] #3: ffff888026e23e78 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 531.312041][ T31] #4: ffff888026e23840 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 531.324143][ T31] #5: ffff888026e23878 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 531.336561][ T31] 2 locks held by syz.2.2837/16322: [ 531.341836][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.350173][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 531.359212][ T31] 2 locks held by syz.2.2837/16323: [ 531.364574][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.372896][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 531.381957][ T31] 2 locks held by syz.3.2838/16325: [ 531.387175][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.395484][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 531.404559][ T31] 2 locks held by syz.3.2838/16331: [ 531.409949][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.418207][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 531.427421][ T31] 2 locks held by syz.3.2838/16332: [ 531.432771][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.441073][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 531.450171][ T31] 2 locks held by syz.4.2843/16357: [ 531.455372][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.463631][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 531.472744][ T31] 2 locks held by syz.4.2843/16367: [ 531.477995][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.486280][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 531.495645][ T31] 2 locks held by syz.0.2845/16371: [ 531.500917][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.509149][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 531.518288][ T31] 2 locks held by syz-executor/16374: [ 531.523789][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.532095][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 531.541264][ T31] 2 locks held by syz-executor/16384: [ 531.546687][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.554991][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 531.564070][ T31] 2 locks held by syz-executor/16386: [ 531.569438][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.577698][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 531.586823][ T31] 2 locks held by syz-executor/16389: [ 531.592298][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.600607][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 531.609589][ T31] 2 locks held by syz-executor/16408: [ 531.615038][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.623306][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 531.632435][ T31] 2 locks held by syz-executor/16423: [ 531.637842][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.646086][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 531.655395][ T31] 2 locks held by syz-executor/16425: [ 531.660861][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.669105][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 531.678193][ T31] 2 locks held by syz-executor/16436: [ 531.683628][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.691993][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 531.701046][ T31] 2 locks held by syz-executor/16439: [ 531.706415][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.714691][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 531.723738][ T31] 2 locks held by syz-executor/16448: [ 531.729191][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.737707][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 531.746785][ T31] 2 locks held by syz-executor/16471: [ 531.752226][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.760496][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 531.769467][ T31] 2 locks held by syz-executor/16473: [ 531.774926][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.783226][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 531.792394][ T31] 2 locks held by syz-executor/16480: [ 531.797783][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.806176][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 531.818324][ T31] 2 locks held by syz-executor/16483: [ 531.823762][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.832062][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 531.841235][ T31] 2 locks held by syz-executor/16499: [ 531.846622][ T31] #0: ffffffff8fe53688 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 531.854950][ T31] #1: ffffffff8fe534c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 531.864023][ T31] [ 531.866386][ T31] ============================================= [ 531.866386][ T31] [ 531.874905][ T31] NMI backtrace for cpu 1 [ 531.874921][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 531.874943][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 531.874954][ T31] Call Trace: [ 531.874970][ T31] [ 531.874978][ T31] dump_stack_lvl+0xe8/0x150 [ 531.875014][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 531.875037][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 531.875067][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 531.875091][ T31] sys_info+0x135/0x170 [ 531.875109][ T31] watchdog+0xfd3/0x1030 [ 531.875141][ T31] ? watchdog+0x1c9/0x1030 [ 531.875172][ T31] kthread+0x388/0x470 [ 531.875196][ T31] ? __pfx_watchdog+0x10/0x10 [ 531.875218][ T31] ? __pfx_kthread+0x10/0x10 [ 531.875242][ T31] ret_from_fork+0x514/0xb70 [ 531.875275][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 531.875304][ T31] ? __switch_to+0xc79/0x1410 [ 531.875383][ T31] ? __pfx_kthread+0x10/0x10 [ 531.875407][ T31] ret_from_fork_asm+0x1a/0x30 [ 531.875446][ T31] [ 531.875454][ T31] Sending NMI from CPU 1 to CPUs 0: [ 531.985717][ C0] NMI backtrace for cpu 0 [ 531.985737][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 531.985757][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 531.985767][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 531.985794][ C0] Code: db 70 02 e9 53 f4 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 81 10 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 531.985808][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000246 [ 531.985823][ C0] RAX: 00000000001af081 RBX: ffffffff819aae9a RCX: 0000000080000001 [ 531.985836][ C0] RDX: 0000000000000001 RSI: ffffffff8dfd8f45 RDI: ffffffff8c289f60 [ 531.985847][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 531.985859][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 531.985870][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 531.985882][ C0] FS: 0000000000000000(0000) GS:ffff888125213000(0000) knlGS:0000000000000000 [ 531.985895][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 531.985906][ C0] CR2: 000055b06db4fee8 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 531.985923][ C0] Call Trace: [ 531.985930][ C0] [ 531.985937][ C0] default_idle+0x9/0x20 [ 531.985952][ C0] default_idle_call+0x72/0xb0 [ 531.985967][ C0] do_idle+0x36a/0x5f0 [ 531.985985][ C0] ? __pfx_do_idle+0x10/0x10 [ 531.986005][ C0] cpu_startup_entry+0x43/0x60 [ 531.986021][ C0] rest_init+0x2de/0x300 [ 531.986037][ C0] start_kernel+0x38a/0x3e0 [ 531.986058][ C0] x86_64_start_reservations+0x24/0x30 [ 531.986080][ C0] x86_64_start_kernel+0x143/0x1c0 [ 531.986102][ C0] common_startup_64+0x13e/0x147 [ 531.986130][ C0] [ 532.161860][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 532.168728][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 532.177837][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 532.187922][ T31] Call Trace: [ 532.191209][ T31] [ 532.194149][ T31] vpanic+0x56c/0xa60 [ 532.198170][ T31] ? __pfx___schedule+0x10/0x10 [ 532.203039][ T31] ? __pfx_vpanic+0x10/0x10 [ 532.207553][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 532.213736][ T31] panic+0xc5/0xd0 [ 532.217466][ T31] ? __pfx_panic+0x10/0x10 [ 532.221990][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 532.227419][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 532.233605][ T31] watchdog+0x102c/0x1030 [ 532.237961][ T31] ? watchdog+0x1c9/0x1030 [ 532.242394][ T31] kthread+0x388/0x470 [ 532.246475][ T31] ? __pfx_watchdog+0x10/0x10 [ 532.251169][ T31] ? __pfx_kthread+0x10/0x10 [ 532.255793][ T31] ret_from_fork+0x514/0xb70 [ 532.260411][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 532.265551][ T31] ? __switch_to+0xc79/0x1410 [ 532.270244][ T31] ? __pfx_kthread+0x10/0x10 [ 532.274847][ T31] ret_from_fork_asm+0x1a/0x30 [ 532.279634][ T31] [ 532.283500][ T31] Kernel Offset: disabled [ 532.287880][ T31] Rebooting in 86400 seconds..