last executing test programs: 20.15619683s ago: executing program 2 (id=1840): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex, 0x2b, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0}, 0x40) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r1, &(0x7f0000001880)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000280)=""/70, 0x46}, {&(0x7f0000000300)=""/194, 0xc2}, {&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f0000000400)=""/254, 0xfe}, {&(0x7f0000000500)=""/34, 0x22}, {&(0x7f0000000540)=""/157, 0x9d}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/234, 0xea}, {&(0x7f0000001700)=""/81, 0x51}, {&(0x7f0000001780)=""/64, 0x40}], 0xa}, 0x10143) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000ac0)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1e8, 0x1e8, 0xd0, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x3, 0x4}, {0x0, 0x4, 0x3}}}}, {{@ipv6={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff, 0xffffff00, 0xffffffff], [0xff, 0xffffff00, 0xffffffff, 0xff], 'wlan0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x0, 0x4, 0x6, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x8000}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, [0xffffffff, 0xffffff00, 0xffffff, 0x3cfa071f66be0dd3], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'veth1_to_hsr\x00', 'vlan0\x00', {0xff}, {}, 0x3b, 0x78, 0x2, 0x1}, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x22, 'ERROR\x00', 0x0, "9847fdc1479cca6e850542bb97e4096e345c9f1a70b1d8501618472b17cd"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) connect$unix(r1, &(0x7f0000000200)=@file={0x1}, 0x6e) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000019c0)={0xffffffffffffffff, &(0x7f00000018c0)='[\x00', 0x4000, &(0x7f0000001900)={@align=0x7, {0x8, 0x6, 0x9, 0x7fffffff}}, 0x1000, &(0x7f0000001940)={@_ha_fsid}, &(0x7f0000001980)=0x458d}) recvmsg$unix(r3, &(0x7f0000002080)={&(0x7f0000001a00)=@abs, 0x6e, &(0x7f0000002000)=[{&(0x7f0000001a80)=""/177, 0xb1}, {&(0x7f0000001b40)=""/186, 0xba}, {&(0x7f0000001c00)=""/211, 0xd3}, {&(0x7f0000001d00)=""/142, 0x8e}, {&(0x7f0000001dc0)=""/231, 0xe7}, {&(0x7f0000001ec0)=""/3, 0x3}, {&(0x7f0000001f00)=""/197, 0xc5}], 0x7}, 0x1) accept$unix(r0, &(0x7f0000000000), &(0x7f0000000100)=0x6e) 20.108660465s ago: executing program 2 (id=1842): r0 = socket(0x28, 0x5, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f00000002c0)=[{0x3, 0x1, {0x2, 0x1, 0x3}, {0x0, 0xf0}, 0xff, 0x2}, {0x3, 0x0, {0x2, 0x1, 0x1}, {0x2, 0x0, 0x4}, 0xfe, 0xff}, {0x3, 0x0, {0x0, 0x1}, {0x2, 0x0, 0x2}, 0xfd, 0x1}, {0x3, 0x0, {0x0, 0x1, 0x3}, {0x0, 0xff, 0x4}, 0xfe, 0x1}, {0x2, 0x3, {0x2, 0x1}, {0x2, 0x0, 0x3}, 0xfc, 0x1}, {0x2, 0x0, {0x1, 0x1}, {0x2, 0xff, 0x4}, 0x1, 0x89b8a6b9bb2b74db}, {0x2, 0x1, {0x2, 0x0, 0x3}, {0x2, 0xff, 0x2}, 0x1, 0x1}, {0x2, 0x2, {0x0, 0xff, 0xee8446cf8b842142}, {0x2, 0xf0}, 0x2}], 0x100) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r2, 0xe8, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffffffffe6b, 0x0, 0x0, 0xfffffd3a, 0x10, 0x0, 0x0, 0x0}}, 0x7) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2004}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x801) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xbc, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x38, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd464}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xd42}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6d}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x60, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10}, 0x20) 19.902585933s ago: executing program 2 (id=1846): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x130, 0x0, 0x1c8, 0x130, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000200)=[{{&(0x7f0000000040)=@rc={0x1f, @none}, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/29}, {&(0x7f0000000500)=""/219}], 0x0, &(0x7f0000000180)=""/35}, 0x2}], 0x1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57) write$nci(0xffffffffffffffff, &(0x7f0000000600)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x1, 0x2, 0x0, 0x23, "31a9ab8545e23308c1af255d315521c5ce297efdbb46b10ef34937bdad3a6ee0025eab4d404ff42f350856841e1814bac2120d2a0d8eb1917b4fb7bc081ae94c4ed1eb7ba5175e440b84d7dc0334246f80a6e7695c7306b99b0314b19a3f819b1157c8b69a27796bae73b75a42e25350bfcbea599f5fa6a05d14bbb1411b6db0881100ba90fa6a4749d88ac1d7a3ebafd45557abc790cd335ffa0e57c2"}, 0xa0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000000)=0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r6) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f00000002c0)={&(0x7f0000000380)={0x8, 0x0, @broadcast}, 0x10, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000440)="08003b117c123a3dab", 0x9}], 0x2}, 0x20008890) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x10}], 0x1, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073bf7a30000000000800410073697700140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 19.042358412s ago: executing program 0 (id=1859): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) write(r0, &(0x7f00000002c0)="b127776b", 0x4) (fail_nth: 2) 18.821162939s ago: executing program 2 (id=1862): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000), &(0x7f0000000040)=0x4) unshare(0x6a040000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000508010200000000000000000a09"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 18.512853474s ago: executing program 0 (id=1863): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @timestamp={0xd, 0x0, 0x0, 0x1, 0x8, 0x2, 0xeff, 0x4}}}, 0xfdef) r2 = socket(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f0000000040)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r6 = accept4(r5, 0x0, 0x0, 0x80000) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x500, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000100)=0x20) write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) socket$netlink(0x10, 0x3, 0xe) 18.43989921s ago: executing program 3 (id=1864): r0 = socket$netlink(0x10, 0x3, 0xc) (async) r1 = socket(0x1d, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x65, 0x64, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x38, &(0x7f0000000080)=[@in6={0xa, 0x4, 0x800, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, @in6={0xa, 0x4e22, 0x66dc, @local, 0xffffff80}]}, &(0x7f0000000140)=0x10) (async) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffff00}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @local}]}}]}, 0x44}}, 0x0) (async) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x510, 0x0, 0x0, 0x148, 0x0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@empty, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x8, 0x1, 'syz1\x00', 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000080), 0x0) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000200)={0x0, 0xa00, 0x20}, &(0x7f0000002380)=0x18) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100ac14142608000200e0000002080007400000000506001240000300009065357fc61b0fc959c83deab41558ecf284cf9e7ff2489d312058de59833c9b7e001179134e68d79dbdb2bd4a38d45f57"], 0x6c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 18.291259707s ago: executing program 3 (id=1867): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010b00000000010000000e00000008000300", @ANYRES8=r2], 0x1c}}, 0x2000c000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001d90000080007000300000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 17.760883329s ago: executing program 4 (id=1868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000380)={0x8, 0x4e23, @broadcast}, 0x10, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000800)="08003b117c123a3d", 0x8}], 0x2}, 0x20008890) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a010400000000000000000a0000060900010073797a31000000003800048034000180090001006861736800000000240002800800034000000029080001400000000d08000440000000018cc6266d8b893dd1ebc0917c0e08000240aa4300110900022273797a3200000000140000001100010000000000000000000100000a"], 0x8c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000800) 17.669766466s ago: executing program 3 (id=1869): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x9c, 0x40, 0x107, 0xfffffffe, 0x2, {0x1, 0x7c}, [@typed={0x4, 0x64}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @generic="1e1ac9f336cf37e5f7955866a6d3bfdab7c0ceb2cfb1416db2237ba43858245b569bfe633b66f9702f8aaaf91b6755c938cb13eace778280cd50a61bf6854c32cadd9316855f357e02e71bcde82436b2883783ce77b22eedfd5ee9e6b975e3653cfddc1e26cafce9b04a0cd44742187b617c23eccd44"]}, 0x9c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) 17.558885275s ago: executing program 3 (id=1871): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x1, [{{0x2, 0x2, @remote}}]}, 0x110) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x64, r3, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x15}}}]}, 0x64}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x194, r4, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x13}}}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "74f84972a73cf914"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="78a4036929e3d6552abfb77d0b5d29411013c4281552a131f42079e96be065b8"}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b383604c00c57e1036469b05fa5e2b63"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "10193af439fc43df"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "895a2c98dd3cee92"}]}, @NL80211_ATTR_REKEY_DATA={0xb4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="650606ec24fac9c90ba15031edaa52ab"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8312e3ce299b1e0a"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="667227a5090c392c7b62847c8eee35652f41846272522b50eea8a2edb19aa324"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a5d96b7bda38fbf08bee03f4481e1d89d8804b5d1e22c029b92445700abe0541"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b663d59d2387dfa266f67d94506e0a91"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6b38aff37c8b31a4c54a0265cd2c936755bfa2c49a8b247a"}]}, @NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c379a153a149b041"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b81e6911ce169c208108f44ec1d5f952"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xe}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "91de108a7227c716"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="1cce73de16db62df1b890367c39b7664"}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4000}, 0xc044) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000700)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) close(0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = getuid() sendmsg$nl_route(r6, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_getroute={0xc0, 0x1a, 0x100, 0x70bd2b, 0x25dfdbff, {0xa, 0x10, 0x20, 0x8b, 0xfc, 0x4, 0xff, 0x3}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @RTA_UID={0x8, 0x19, r7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x80000000}}, @RTA_GATEWAY={0x14, 0x5, @mcast1}, @RTA_METRICS={0x62, 0x8, 0x0, 0x1, "9a62610d1f58f9c0847b8afaee3da6b3d349923e61ac2ba8532b35772b730233d1d974c0d50e918cae9aa2530343c6565d21951261c8187a13e59f8a755590525da2f9d77824a95d86780ef10dd0e75b4a536bc80d50069a3fee268f106c"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x11) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) 17.552820538s ago: executing program 4 (id=1872): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) 17.488285362s ago: executing program 0 (id=1873): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000040)={0x1, 0x2, '\x00', 0xff, 0x7b}) (fail_nth: 1) 17.466907648s ago: executing program 1 (id=1874): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x640, 0x2e0, 0x0, 0x3b0, 0x2e0, 0x1b0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@uncond, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0x0, 0x0, 0x0, 0xff000000], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x2}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @dev={0xfe, 0x80, '\x00', 0x32}, [], [], 'nicvf0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x1, 0x7ff}}}, {{@ipv6={@loopback, @local, [0xffffff00, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f00000006c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1, 0x4, 0xfffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x64}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x640, 0x2e0, 0x0, 0x3b0, 0x2e0, 0x1b0, 0x570, 0x570, 0x570, 0x570, 0x570, 0x6, 0x0, {[{{@uncond, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0x0, 0x0, 0x0, 0xff000000], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x0, 0x2}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @dev={0xfe, 0x80, '\x00', 0x32}, [], [], 'nicvf0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x1, 0x7ff}}}, {{@ipv6={@loopback, @local, [0xffffff00, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) (async) preadv(r2, &(0x7f00000006c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x1, 0x4, 0xfffffffe) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x64}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) 17.401919714s ago: executing program 1 (id=1875): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x3c9000, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000008, 0x13, r0, 0xb5e81000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000100)=""/187) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x1, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xc, 0x0, 0x4, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000780)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x3}, 0x94) 17.320152931s ago: executing program 4 (id=1876): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f00000000c0)=0xfe, 0x4) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x3a, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111be000000000095"], &(0x7f0000000c40)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r5, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @default, 0x5, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\b', @ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf254c0000001c00a900c3dc9cb3c5d9d648046b446f6b47cf56cd53ea75c6a6ad000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x40080) syz_emit_ethernet(0x56, &(0x7f0000000480)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x7, 0x5, 0x0, @loopback, @private=0xa010100, {[@timestamp_addr={0x44, 0xc, 0x5, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @ssrr={0x89, 0xf, 0xce, [@broadcast, @dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0x18}]}, @generic={0x7, 0x2}]}}, {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 17.315537611s ago: executing program 1 (id=1877): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x3, 0x1, 0xff, 0x8, 0x5, 0xa532}, 0x20) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000080)={0x7, 'geneve0\x00', {0xa}, 0x2}) (async) syz_emit_ethernet(0x46, &(0x7f0000000300)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x88, 0x40, 0x0, {0x5, 0x4, 0x3, 0x5, 0x2, 0x66, 0xc, 0x10, 0x29, 0x8001, @private=0xa010102, @multicast2}, "7da532c7feac523b"}}}}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 17.199003502s ago: executing program 3 (id=1878): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYRESDEC=r0, @ANYBLOB="a70dddff8ac38785bae79e524c87b2fae8423ca956dde3eaf7b2", @ANYBLOB="0000000000000000b709000000de00007b8af8ff00000000bfa200000000000100000000f8ffffffb703000008000000b70000000000000085000100591b9d5ff4a7e6ea8e6718b4cd7d97cfeacc619366c636b6ed3b2169cd7297322444556d81da37d24c31c07e045b159f12e85742ef7341bd07c578ff3801b349c6a6ccc99a9b145b9dbd87d70a0d7f36a808870cfc8fd8a6b8849a3636a4c1f05098f8ac1dee293711f4dfcf119a66b2626b88b342510b9063"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x2000300, 0xe, 0xfffffd83, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0xffffe000) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRES64=r7, @ANYRESOCT=r4, @ANYRES8=r4], 0x94}}, 0x0) r9 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x63, 0x0, 0x1, 0x2f, 0x0, @empty, @multicast2}}}}) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=r8], 0x50) poll(&(0x7f0000000500)=[{r2, 0x2000}, {r3}, {r10, 0x4400}, {r4, 0x4070}, {r6, 0x8196}, {r3, 0x40}], 0x6, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x14}, 0x20) pipe(&(0x7f0000000080)) 17.114284961s ago: executing program 1 (id=1879): sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xa4, 0x18, 0x10, 0x70bd2c, 0x25dfdbfd, {0x11}, [@typed={0x8, 0x2c, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x87, 0xf1, 0x0, 0x0, @binary="a8d92b074f14c6b693e88e28e3755b2f4cd817c304222efcfbfd3a090510caa7274aa3ddecfca1e50d267b4aa0a58c08b403e7066acbd9b33e953e66246d4ad1ecbdd082772a9c2461cbe45eec50bbb91bcd620da886eeca1d8d757ab58e49234da6e35cbf57a6428e173bbcf2c7512649b2222354b89e84afff2d3c6767b044363786"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@getroute={0x14, 0x1a, 0x404, 0x70bd2c, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20044010) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x101, 0x620}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44040}, 0x0) 16.85943322s ago: executing program 1 (id=1880): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0xb6, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e25, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000001440)="95", 0x1}], 0x1}}], 0x2, 0x20000004) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={r3, 0xfffffff6, 0xaff, 0x88000000}, &(0x7f0000000240)=0x10) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001e0063d9b6db1dd4827bffff02000000010000060000000008000f0009"], 0x24}, 0x1, 0x0, 0x0, 0x2052}, 0x0) 16.848356499s ago: executing program 0 (id=1881): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x6}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'dvmrp1\x00', {0x2}, 0x4}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 16.837032578s ago: executing program 3 (id=1882): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000000a000000000200000700000001000000", @ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000075f5bbf890f1640000000f0000000000000000054e603e85f3a546f61655bd6a"], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a01040000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x50, &(0x7f0000000100), 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400), &(0x7f00000003c0)="ef24f5ebdb8760a44e4ead025133c441b407557d0643d3a9c84f5d09a415d96ab771cdca0878355185a045f4fc0d7b77fbc3", 0x10000, r0, 0x4}, 0x38) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000340)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="4010e70100feffffff00010000fe88000000000000000000000000000100000000000000000000000000000000000107144e240005020000003a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000680000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff04000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001032000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080016007f010000"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="70020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x230}, 0x1, 0x0, 0x0, 0x10}, 0x8900) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x1, 0x80000001}) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r9) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r9) sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="0000000086e156e052bebf950b84ecb3b1780e84eb50071172cc004d2af0aaf7e0449290c397063bd941bebd98d837221d4bd48b239790cacfc1b6d2a897c909b68559f038a78f70f55b75bf5aa90f1209081ebee194c7c5144a49618eebce6cfb5230199f6b4b62ef0d57000997d9056da89d7c32cf5d1ed9f5f0395307a8ccbde6a5292af92e970414195376cd07783682d04c7d1a7f1b06487485e3c1999a8c7b262c4d0f76a6fd7be738470e7f", @ANYRES16=r10, @ANYBLOB="01002cbd7000fcdbdf25050000000800040002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x240000d4}, 0x0) 16.821200828s ago: executing program 1 (id=1883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1000}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x8000, 0x20, 0x101, 0xf, {{0xb, 0x4, 0x1, 0x1d, 0x2c, 0x67, 0x0, 0x81, 0x29, 0x0, @empty, @multicast2, {[@timestamp={0x44, 0x14, 0xb5, 0x0, 0x5, [0x1000, 0x8, 0x6, 0xadda]}, @noop]}}}}}) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000180)={@remote, r4}, 0x14) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip_vti0\x00', r4, 0x700, 0x40, 0x3, 0x7fff, {{0x15, 0x4, 0x3, 0x7, 0x54, 0x1d1c, 0x0, 0x9, 0x2f, 0x0, @local, @loopback, {[@noop, @lsrr={0x83, 0x17, 0x52, [@multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback]}, @ssrr={0x89, 0x17, 0xd2, [@local, @empty, @empty, @broadcast, @local]}, @timestamp={0x44, 0x8, 0xd4, 0x0, 0x7, [0x2f91]}, @ra={0x94, 0x4, 0x1}, @end, @noop]}}}}}) (async) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r7, 0x0, 0xc9, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r9, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) r10 = accept4(r3, &(0x7f00000003c0)=@sco={0x1f, @none}, &(0x7f0000000440)=0x80, 0x1400) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADD(r12, 0x0, 0x482, &(0x7f00000004c0)={0x11, @multicast1, 0x4e21, 0x0, 'nq\x00', 0x15, 0xb, 0x7f}, 0x2c) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500), 0x40100, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000700)={{r14, &(0x7f0000000580)='\x00', 0x0, &(0x7f00000005c0)={@align=0x100, {0x3, 0x1, 0xcf, 0x3}}, 0x3, &(0x7f0000000600), &(0x7f0000000640)=0x2}, {[0x3, 0x9, 0x8, 0x9]}, 0x6e, 0x43, &(0x7f0000000680)=""/67}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=@getqdisc={0x3c, 0x26, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xd, 0xfff1}, {0xffef, 0x8}, {0x2}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) r17 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x12808210}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r17, 0x8, 0x70bd28, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, r11, 0x9, '\x00', r16, r15, 0x2, 0x0, 0x2}, 0x50) socket(0x1d, 0x6, 0x23d) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x12008}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xf0, 0x0, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}]}, @CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_MASTER={0xa4, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x30}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x44085}, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000002340)={{r13, &(0x7f0000000c40)='[%@#\x00', 0x464a00, &(0x7f0000000c80)={@_ha_fsid={[0x2, 0x324]}, {0x8ed1, 0x0, 0x80, 0x8}}, 0xf, &(0x7f0000000cc0), &(0x7f0000000d00)=0x5}, 0x6, &(0x7f0000002280)=[{0x2, 0x5, &(0x7f0000000d40)='veth1_vlan\x00', &(0x7f0000000d80)="c422f133cc2425a65687574a72c9258ee5fab632a61ba2b95a561ff14d40e8d816a8f55b7c9096371305390e7acfa31dbad55de0b4923dadd40528047b6aaa004ce2a07714e3ce22c607cd41b0ff297e5ab5625fd1fcdce4228443870404411c29d23ea097372e385673eb438a48f9966753bd6cb125a39eb3a7dcb639e78ebac0829834c34f251484f59ba9d11f38816e314e02d25dbd974934d6b9b9", 0x9d, 0x2}, {0x3, 0x6, &(0x7f0000000e40)='nbd\x00', &(0x7f0000000e80)="5b86e44862a13e4b116031423034f2fd21c50530c6f85b133a39c80622c27244fc8a28c3ff4a0c41ad7edc71186a48de819068d703ca6e8faac3f7b367e61ddfaf65666b5e921b1af7508ca50c010121fa6c152d6f80b3efa89f8cddb9bb4a4a6b568f2d8b48606fe1f1132f02a3ef75b68e764f782e978d34bd678f0838c40e5a3cee01b75d12a4be3d0b0ee53a5944e607e9425f0f876c10942675d1e1a1415fc3c5", 0xa3, 0x10}, {0x1, 0x0, &(0x7f0000000f40)='#{\\-%\x00', &(0x7f0000000f80)="6acc6a01edf65d8396fb0e21f6215d05f66a45594e25a907cedc612acec320d32ad6f187a72b12137540e899d27c758a6e03fa27598f746a046ef7cba4d6ccde480ac5f97aae8d8745d7323ecfea7d193dedc3af5ba5ae036b69fa7f27fd6f4898e1f999d0f96a01cb03e1d1b619403171f16bea44d1c6b8ee576bd9861e5474d44c4925134e5f4635ba49b89ddfb441d02dec2cb3b9152262c04a", 0x9b}, {0x3, 0x9, &(0x7f0000001040)='\x00', &(0x7f0000001080)="46f5c804603bcece4760f35eeebf424296efa39d253045932394ca7b0e5ded7200e604be938aef8ab311dbd030d76e25690cae3fcab65af93635220b6f8714485c017c20ded5f8fb1964d5282d1e6f4fb4aa32f46de09006bd66745f62392b55e664a8d6a4c36e48d5abed4240240d10f2ef19e765d3371b4583cd7f5f6a2dae5e07b3e5a416b2daf6c8c454e45215d71fc80ad3e876b18e4221eff7c728701f1d6e428973bbff44", 0xa8, 0x10}, {0x2, 0x1, &(0x7f0000001140)='-\x00', &(0x7f0000001180)="47a31f529a188cb5d151cffa5347c5ce93bbeda8b2299b2ba453f0ae5e0b76a7c8b4c438996c80a08046ffd915cf9ce54155801b3f4c5ef5e94a1560e20f5758feeb7efb2189ec0c7913161dd5326eb8c74f6c7c7b4c23d20bc9379ec4d3fec7a66793bff0571b4732612c3d9dd766516351afa5e7db40b7e8d132f869927e3a1dbf7da60298c213dcc7bad27f9fec2f08693e44daed2d93d8cb1d9326de2af9ab22046ec4c424f57d9726478691d5665f34b6682d85e0bad37d9968f417", 0xbe}, {0x3, 0x8, &(0x7f0000001240)='\x00', &(0x7f0000001280)="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", 0x1000, 0x28}]}) bpf$PROG_LOAD(0x5, &(0x7f00000035c0)={0x8, 0x19, &(0x7f00000023c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r18}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0xa, 0x1, 0x0, r12}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0x2, 0x9, 0x4, 0x18, 0xffffffffffffffff}, @exit, @map_idx={0x18, 0x3, 0x5, 0x0, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000024c0)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000002500)=""/4096, 0x40f00, 0x8, '\x00', r6, @fallback=0x3f, 0xffffffffffffffff, 0x8, &(0x7f0000003500)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000003540)={0x4, 0x4, 0x36, 0x3}, 0x10, 0x0, r12, 0x0, &(0x7f0000003580)=[r12, r12], 0x0, 0x10, 0xa59}, 0x94) (async) setsockopt$sock_void(r18, 0x1, 0x24, 0x0, 0x0) 16.60399012s ago: executing program 2 (id=1884): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x2021}, [@IFLA_LINK={0x8}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_BROADCAST={0xa, 0x2, @local}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x5, 0x4, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f00000000c0), &(0x7f0000000100)=@tcp6=r4, 0x1}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r3, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 16.554339548s ago: executing program 0 (id=1885): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c000280080001"], 0x4c}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000080)={'HL\x00'}, &(0x7f00000000c0)=0x1e) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe004000000000000800040001000000", 0x24) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x608, 0x570, 0x11, 0x148, 0x0, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'team_slave_0\x00', {0x459, 0x0, 0x48, 0x0, 0x0, 0x3, 0x27, 0x80, 0x0, 0x18}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x668) 16.517365311s ago: executing program 4 (id=1886): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=@base={0x2, 0x4, 0x8, 0x8, 0x1014}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0xa4}}, 0x0) sendmmsg$sock(r3, &(0x7f0000000a40)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x3, 0x3, 0x1}}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)="e1fd8e679c4cd879b63ab2ded1f13d6c41af593dfe85bafa0837b7ea88aee4ef614ac55277eba5d83f54b432c588824283043d46d8dcc6c62794dacb8668c1e1358cf993287f7ab2", 0x48}], 0x1, &(0x7f0000000540)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xd530}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x90}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)="a033090cdcd192eb5eae6fc1ea3781231314aaa5864651cc8d7c0f85356c53545730bf66fc996179e65b9fe3c8f2cf6197f07ec294b89abde882052f44dff3dd717606cf5f6fdbb012f6bdb6ce22075403ffd31d124a316cf15e35f9cc3cb1a7e8aa8974c7ebcc7df4a91db81780d0c87ea62188b65657709fed3ef293bc23d1a45d65a49ef71b4ecdd77ea6834ac8af3be98ac9d6737b71066c8bc921a17eef27fde2887b13b47e3c25bcfc99dd680ce256cafa0d523fbf6a873e3872da375bad761ed95fe639abbe3e76d6845884b0f8d4", 0xd2}, {&(0x7f0000000340)="37bed62eaf46d4ab18f5d715ee71e1fd66d1ebde8699ee04fbc90b90381df8add3043e3812859c3c0b052790e96e08531db53cc92f711379761b127ba511fdb8d97aabd301b0df5f8698a007612580505163ba30bfd2be6032bc4e564cbabee3d8eda9f1d9a9a5f316447463f24752bfedee01bd46fd87e23f164a", 0x7b}, {&(0x7f0000000700)="88683fdb85efd23cac091061c4e8b067f69ecc8cd190d0631adc96f463f58aa95824519aeb06e75ec0e84b15213e8928", 0x30}, {&(0x7f0000000740)="5a82a059b6c15f69b60dc53a100361c59008a8c43c280f4b02fdf5551c8a08a4c9fbc6ae60b6058351ae81612d18045add413a2aecc555064448759702675032b4e3e4ab034ef186a9b3bc65dcc4043b7136cc19a831b0fe18cb9a7401210c7c2a8d9cdb8e8fb6a8a6", 0x69}, {&(0x7f0000000b80)="c6ea983818b0bccfc4052fb454060916f21701e48aeec7e7f774fe87d1579f7b8f4648a8d2e80251b1b3967eb361ea576cd7244cb346313cc29215ec802bc987dcd7ef8d982a1cb1daa7ae46921272f12f23f184d1a420bbd2e4e29303b59f31ce06f1b2d9a2800fd6f8a9fb12b67dfa4e0d59fa2a39345f9427e48b3375d99255ee3def981a4da05699862fea4c93b5f1a6f285ca8047a5ca26b3b8acad11bc4cbc0f71264205a588fba053472784cb0a70723d76a3fe667a0a4a16a006fdc8722ed53910ba59fca72cf2b62b3a590ad5f404d0d7d1eb58e2034626cfc2ef9620b9bda7a353d0229d970b15584d1022097bbc1f893f0d4bc02c7b78ae53b5243dd89587ee30f927a4af313498cd5a56e942fe4db754d679cc5ee297c0365cd310ff6941a3f576061f694e36e27ecdbd55ef2d815391277827360c1b2eac351f73e70fe222e2f578106eaa0ac3951a3a69da3dc17876b1b69fdea27751224a8feadcf6f6c309b6a5580fefe7bb939f0d3a2124a7efa2d2f222506ec40d8d5c8ef706e6d4a6fe3be43ef3ae7d2b3bd6fe13a53fa0a9c8d9205fb6cb427e41994e73d47edf2ebc5af04bbd3df72c0f9f580f0baafe72e489022c6b3bb69d3868b45472af4ec265753b13841aacdb88b665be10fb620ba18bbd1684c3e71920c50363fa469ebcddb84a18cb4f5b480d4c17edf723172a44ad87e4fd00c1231d8821256b414d2732034973cf787d76a3a9d2af457c5e82b5de5adda93383e3192e886fee9cdb8ff17fc23f216427e035cd5f3b61321e2488a0795411f0f7e99fe3aa825a2b9eb820abcfa9d83425e6c92037407f643970bebe8308c716516737f7e02502125672354575bccf92f77e5b393ca7ebc181e48af0ae1a5796c03f5a0f2f5482c9f68ff1f484a6b9cf2125f8e5c8651b529a1bd83afe7653e02ea8f4c3b2d60333d8cbc67ab4c70dfd5d54f133c87165594f834f782dd42e5140accb416d5f00be84a1f3f360fbd6664d6d1a32b6c1ae6cd988f6c40a62f70f4e21b41b0b53fbff937c5941e2569cb4ae34add5b7a9567f111f04838370cc83fb0959ca98d4fc684a5a2fe93582855047e8a7e9929298a8b7f026987e54bee61883746c1b00857f8d19dcb18687d05f5ebe3c24047d73be74ac7a4961c6854833eacfccee18f809d572f4ab3d105f274845fac1ec253e7ab5ddc56b6bfc2551e2799cee5d0fd607526969e6623339fbaf1fc18ee122234fcaab48af12d39f67532dda2f4a3c102c65765b911018688d793e0d18651e81041d87b66a1cbab3d4fece5b1759af75fd747d11514b6c205ea4c4c22e2c8d14c4ac4f7c7c1a926a854f809e801ea5675b1c593af5d13cc4150cd44cd97b8f84a7ad2673e516b0699a73dbc9a829bca88313d7c3db03fe11743a8af8b32fb1939ca95c5679a09922de32f0cdfb498c2836aece79f4ce41aec3af0ba8b2d9a47efadb2ee33216a0be3bee7f515c3d0441e76b1c6661ab026f6ac1a139d92b2cfce78a2ea59ac70a4ab8797f833f88ffc3127b5165c5622d15e0904036e7b9e53b10331a1f7b8f3b11214a65cd1ce757668ba1e7e10fde3b74a2c886226e9da38c34890748c3c30c66bcdec94d4afdcfbfffdebb2a0bee3437c64789fb396aab6e2f50ed16d5e5220860771922b79abf4a20bd3d338614f4efd8bbc7ee9258d913af6d333b9559128372c5dbbba3542fa06b37e295f238ea256103aab9db270967e840a74ae90f28d3855567e47b2dfe597a379f1bf78ccf808bbf6cc0910e440f429eeb12c15157de401d2f4eab8932e46c6770d70a40ae967f332323966caee578bafd46a6c9fc93ee707b4d1612d962029bce21432dec060ca908b2081dec711b6f61e170c4a312be8c75bc452d272c8f64e36f87f164bff9ed26543ae9de7ed4317fd5e9352eb011e9ea0acfbbb54e856a630355fe158b590af24e60ae80001e7cc8805f649c218c253cf23e6f2323194d66b9cf4b946cc47a1bed52c7718e33ac59048cd1737c6bb01755ea5263b544a2459954e6454951a571db0eddd839fffe83a89e833946d25257b54ca22ee06519d7199dc8930d3291876a9cc6777e6a167f91a7c5d851798fdeda03173836cc5e9b385b0178b64dc4627f499aaf037602ee0a37b13fa47e591b841a40844283bfaf3c5d2e72b58204e05e7a389ef690bbe4edf29dab34e500d1a4413cd30902d1f5f218e38e129fc3bd54c8a6968110290fb438f497867ae772b1dbc5c66f84f2323de56ed6174c488529ebf6c1c3d5ecba5d10201343f1e9ba229ec611152ca3ab73a32ae4f1601c929de4733ab029b44d951af5bd5079d95b4e8c65ef676b3ae22a2b61d307e22d5f161e6a6b0bae47f20080da954de544fe5a76518b830985111e66b9e7540dace7fe0ecf8d73e95ec2c1298ff76694b7738dc2664464dbe6df9386d9f7db0f5874c653f02e636a6d619bddaa2e4fecfbdfd1686c85775d25418b80dbfd9e99028b1744af866887ba75711e7d0ad82d66e6191909e4cfc0b335751e2ca1185f4548adddf35333b0b6fb449670b1e57b5ec083b2a9d8092e7350d626dcc30d3790b9adcc4ba3bc4aa91cde0240b7136806a73882c7ff11b8b044064008742246e6a803c020d4090d7005f48f3c4d16357c9631b21dda2e2b46c4c59ebfb79376150c518e4dac8acf2aea513da0bdd262db69a9afbdd63d4cf8d590c306fcc9fa828b646c78d60bd6cc1c53eecf73919358eaa4444597fb6f92b77af1e5998e3a0c99394455d060b5885afa54946af83ef7b7b6bac31e13dd4c6217c03e1b51708705d43b426662e0a4663ef723fb84014b4bb335761347b0d02630e67116f3ca07e93299d9fab923b729ce5df458684fb1577569a764cb0acc53ca5763c75c7e9e41f5f7f243e3cd435bd4f85772736ab7fb954f0bd3b94c88d0990d297ee37603c85d4a2a284220ae04f79cfe2e3c9c156abdc50582701be5e277e07af704d7ca86f1d331cb7514a7ba7cb880acf37c616ac244446358c9bdac622301f2cf1b15da116951146be91033b66249f39c9347ba4e8e6257ae5bc41d0235cbb35d951f30324f463fe7665bac0e855a8d76b16c34662a32e75bfd090a01c1c4e7c0da1981d69b06096ce82aefc89a05288b78f42e3700566afd0360fcfe253886ca15d1949b2af47448c72ae27c0d7d8f952accd592392ba9d19dc2ce92a0ca2addb26162691ea081c28fa3d0a70a7cbefc37c9625f83245d033f35d690884449651436af6545f71a4d2acd8e7d5a4fca5b13f22c045b3b571fcaadd6e2aeef3281ccdf7d4e857e6f3e27ad23ad433b786adf55d531c9d0a18668613984d3999cc73f282dae6d4b6d092b905600f4eb53246bbde49ffab8018c294a1cd8a859980c39c50f47b69877130fc40242d3d4e66e2ddb998cbb425a42df3ae6599326572b2c4df5869a321fa15877a31f43ecdf1b633d58b2fa4f57f897ab62ec16fa7dd35c596ff487fe3bf5cc02fe993e0edb1c3d714a33f3763435b3acef8d8751989ea08546bd84ace03927edb23a9fe20be9a57e7b44590031c0409dbba58309468918b531420a1036809eb916bc61145cbe359c06a7afb59cf154471dc28ca40bf909d002a6b45484128c9a2f2a25f23c885dcbec6929630bf89a8de44ebb76a03be219c66846c29d37c330ecce05a97434cd1892b3c599c61f0e4ede0a1f5a2f4372c8876e0bc389c43d913096782b01eb79969d9756d11778d67f5bae64bb47d2c3adb3db923e9ccfd0851f142f1bcd02c4345a5f538a52c39bdf5d0f6c51b85d71f638e3b6e4857af0e3328257c162f441970aba8c1ca23a863aef839a3af1b7e6e92e2be3c5c56c9f52281a6cc3edfa35c71cb439ea5704b27965219b30def6321783b48508e21e45e66352d77bee2be65ad3d41fdb5a3cfe44efe8055240a108d5b1cb8a98e7981becab4100107ff7f54c1c5b74f26c3489a8bbd88148d537d7b672a1adb822841b430fb8c7b42f83ed370802fc1e51887388995563acbc5159f267165e9dabd2237c0af1cc4a0bca08b8ab0093f0943afa91c38d99308626953082b054475b55c2dff5e986de56670dd4270b9368c7c9fa1321b8dac190162228fce28f711f414565fcb5fd2f175ac4efb10e16ea5d667ca767cd04629d99e24283dfddc2c87971bf8da04be4bc97b2462702b3576aeddc2a68051cf489a21c6e457705f926cecbdd3be36eee5e5c75ca8928e4e551efb6bc2ad07405cf26bf450fd34cb0fd66c8b5bc38f5819e0cd2cba43ff6df4bc1582c3ff6782ea61b78dbe16d063f7cb2b4a16433d4e56ea3de6187ab1ae2907f447dd9c23b7de4dc516541a35ab0e738378741f9e75d6412a821ea6617e1edd5310ad1970a6052cf0834f58dafdd58787525c238386f9562d0d536c017905eec6fde228dfa13d3238039fab511ca7033f4104e24a1f5eebcc39bd73166f038af9de0a1828d92d760380f7adc5f187b53632a3e46ab174aeee20e9226469a69b9cf2ab4b72c9d6afa748b58f7d1b321219768756d7678976bb274f54978a3e2d6c750caacfb7a282e5f3ab532c63d1ca87f0cc0e1301edf0238b9069c491d72fd4d268b9f9fb6c0210928a61c6780b42174d5d05aeb4108945a19a4625d9e74994626c4288aaddf10030baf5a247c593ca48aaf96b8db22e7b283956d8aa97903eda325fe6dc69c548d0d8d6b71e04e30d16c98468528781aa46e197a8db1b59ab29da9dc2ac553972a2cd66f6ffaff33bb955ca812f88b392adc0815690a1957bd650dc88b78119e3882a0c158ff2879d81b1f229e7a0bc9709d956fa87dfffadbafe8d06c772dc673363d84ea887554f3ad986937bd16c597401277fab0a0eedbfc7fa2f26869a3e04925f1c3f26c8c36d91b8001376872b21f8bebe865ee1cb35af50e9dfd9f2c9b34254a90d3f9a5b5bd3a518b51e235028645499b8d0616bca1c59ba3c135012b359c950d685fb86249dc88cfb6118411bb37bc06c5e630c9dca2d5bd89dbead6def882252517e659d3c70f0d464591572a0d63b28e6a36660d90cb8b417d3e56f8fb9b67b07744e1288694eccb23111e17367151c3cf04ecfc3d0d4b554e3760b341652b8b187e4f6ed59e5ec8d12662ce6bcd4fbabb585ffb8cd5d6b91404140c4a0f54e6bdcdf92198e2adf91cf0ffc02ebba3e97e6df7b2dd5aa082565c2eb140ef208fb636811da8cf2dd18ad6e85e9c5566d85ea65ec444a2c98a8d1ef98dcec154532915149e35b71188cb3a7917093d8121dedc6b58661693d55be8acadd59cb65898e22d017f97048cba62c873668b3ac98396855740c8e362b21a457d63a46117e06a40fae870b2edb01710be5be22f76222ee21601082639b0850f69b3087028e67e993e49194e54f48e5fcc27712608fbdf372380c28a3574a4cb0d5dd3a1cf37e94227eec1e96a44b6f85c9445b8daadc46b6cc8254aaded2d39c5349df105e543dabd57294f54e9a95005169f04a0255ea414965f4c3dd9d43112299049a9f760e20e9244b0f8a1c788a979d4b8cde9aa701e2005a9494daafd8c2c9f9bf11a50d990f86383189dfbcb482ccea0d62a68d32bfad2958168b502bece0c4f660b193cbb6c579b55c3b7fa02a237cb6eabe67b2166c02f232603bc19d8623caa9bb6f88a7a04909e9ecc86411d7d1ab552749216d2eb0f31532d9906f85014b01d76431ec17785f928495b58f45d550205bc67c09cdbd91c91916136af1fd49b035807fe9603408eac63a49b559b6e5f", 0x1000}], 0x5, &(0x7f0000000840)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)="72750c146c6b762b1156f961a8e6f38a08c392831f6c6fec94f2a2ae1792100e47f597dc5b31ffe870823b62d836ae1f7d9315b22b3ec08749873cc41c877e326b24a3a691cf30ff3e76dc1fb4df5e6d73da1d862d36f7bf8445e1852f12cad3f7b30dd1cc5b6cc233fe7d626af6064d179d44b9d14ffdae0dae585ab8547ad6a9c9599b67a7cb846e8b1dc60abe6b14c8904311b05ad7c34511f61d89", 0x9d}, {&(0x7f0000000940)="130413ba4b1326c3", 0x8}], 0x2, &(0x7f00000009c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x7f}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x78}}], 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x25dfdbfe, {0x1c, 0x14, 0x0, 0x2, 0x0, 0x2, 0x0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000005}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r6 = socket(0x18, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000b00)={'c', ' *:* ', 'wm\x00'}, 0x9) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r6, &(0x7f0000000700)=[{&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000280)='6', 0x1}], 0x1, &(0x7f0000000480)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0xa, 0x0, 0x8}}], 0x20, 0x54}], 0x1, 0x4004040) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r5, &(0x7f0000000980), 0x0}, 0x20) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r10 = accept4(r9, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/112, 0x70}], 0x1}, 0x2ca998c3}], 0x1, 0x40000021, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000002100)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 16.367393762s ago: executing program 0 (id=1887): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040000005200010001000000fcdbdf240a000000"], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x8800) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req={0xc, 0x0, 0x0, 0x1}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x10, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x2, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffe0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xbbb, 0x0, 0xffffffff, 0x7fffffff, 0x7, 0x8, 0xba, 0x3fe, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x2000c805) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2711, @host}, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00042abd7000fddbf7ffffffffffffff0000e0000042080009000300000006000300ae01220006000300ff01000014002000fe8000000000000000000400000000bb"], 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x4070b924, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0x5, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4000003}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r12, &(0x7f0000000300)='cpuset.cpus\x00', 0x2, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000001440)={'ip6_vti0\x00', &(0x7f0000001400)=@ethtool_sfeatures={0x3b, 0x2, [{0x661c, 0x81}, {0x3, 0x7}]}}) 16.364442296s ago: executing program 2 (id=1888): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000840}, 0x8048011) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000840}, 0x8048011) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x3e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}]}, 0x80}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) (async) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x3e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}]}, 0x80}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000015c0)={&(0x7f0000000380)={0x1210, 0x1d, 0x400, 0x70bd29, 0x25dfdbff, {0xb}, [@nested={0x10c8, 0x7c, 0x0, 0x1, [@generic="0e6d065a92b34f47dc3ec7fb16a33e775f3f4055c76f408890fe6933f62eae876ff5a34d4c7fa719a8c23aeeeee6d2737d88b51053770029add535f59416b748c43e1195230b811828bf1a7f64da351463bfc90de1541171d3cd0de9b4191c2dbdaeebd76dfe79253bb84d5f4ba65023f4879cee2c72dd3da4dc7b4a4aeb6ce9979897c97401c31aa02959a90333e4c29a3e6f30d454f5e38a45814f34bf5547fb1b1fb0c804320977fb6b85f0dc8f3ae9f5c063c2e47c5bbb08136d8832b73291c67752fb433332aca1a523d820565054536b0d160fee9b8f2ab49af27fd19e24fc9199c29cf02f54f5a4c29a36f8e893fe0690f26518939b1f128847abc2b281f7848cd0da3ab3f3e5e3beb9117f9da112ccc56d2585227cf9634511c13f183282b495aa91902220e1812823715c8ac45f383bde61a5d5ef28df51ffa13543794c16375aad71fa6e1f4585b400f3a6d90fd3d20f2ada525e64ef38e917fac915263c4081194c88d72bd9933923ff585fcdcf9d6dbbf6ea8eee2fcfa6e0608c069e36093de73a2d6ca7f3df6f9914fe9af111fccbe162579a186c51dd15b68d260b6037eb2936d172962b1cf2bba8b3c71f90495399c82de8b2a2ec361b2243547b48927fae498d0d92a3e47ec0d0bb2d9097dd81f881aa3d7c895510de4a93e95cc8336a8f0f46faa7a23160cc5a047338099cefa23ad9a4d4070f2c918313f26c5d873044b422df73d4361190162cef49e596194cfa23894456f07bb7100bac2847e57e06ec229341284337db584e181e521c828bd2aa4aa4861d8e4eb86105d9dddbe9eb5a40e843f433f003f5dabe3728ab98f182a0e19e18c22b51590114e06a65865f71b690266005dc288e5a08567c04afc2a1dd86415ed0c2e7aa6e4e031b1b1d15d59fadc9dd1db67854de15bcaf89813d11e702a29c88f627e1d93cab8735084cf98a16b498d12c132a1a4def19418cfc9a099e7f80e0350ee86561b2f6fd48ccbf04e53512ee93873f16cbf06a74055deced6989dceed0eba96854c45a0cde441322d396268c89f4a1e5d2598d9c875f72998c7bf7d6f0b614552093e8d2a022acb1d50f5af8ebbbcc6c08b2d0206bada0702af3e15d68c8c2a8f2669ce1da4d7fa7c52e682f11d207645f18365df56ca27b4d48dc1ac309797d4aaab815b873ba26a0ee66205487374b600b69d041027ff65ffbcc3cdfb3b677d143c3f886d3a57685c55cd1d3abeefa14e1a6d78b0b82edaff36b71c71b41c0dcbcec269640e5c1bf086a82421e726fcd863ffa7cc3eac5c78c1addbeecbccd2a2cf30a36f2387f0747285189e9cebbe8107e9760e39f58ef05ed82e827dc4041892f9b5ad98572357813b90434664833305064b93fb74df31405b8cef31446b501faa85c3f8a58955d684c88e4e9435a65c125ee419bad3b40e804a24082c7f1329179c5be31e430b897e991996adb74b0dd3b6b6950946477fc90140dff20e850454fceb53aad02ced85f1d3984f0388a441dda5cf7bc234f84780e5c66f1c0274ba0ec05b39c23ef793de71e0decb55446a7b7f34d5ffba7fe93b2d89a29b8bd929914f6245f693431deccf6dfa5c0b7dadc4580f72ebbdbb5d888e3b69b235bc724dd782e162fd837a34c1f6a59de2ed96eb168eb2f664525f8d1fa807748ab6229e5d603d309bcc00be1b4c77a0452d78cfbb992191e1f0954a2e2ebe29b537605f6d29a307f4f0bc9aa7781e496bd8edf5efcb70cb39348d6a1afa3b44b4e4c6d798fde6416d032bc3023d22903648b7be56d278dfb31e55f736abd26efe19bca72e8ccb261d4111417cc5bcfb70b741d765fc7d064b098cdf77afecb8d6bae25082a6d35c976658f185424ca1053c54bacbaa2a436dfbda84ac7a1d8b593972261ed7eca534adb0e6caf41384b4ec3d3005e9f3f171ac56af3fb742e7f9d27e6ca63a4226e559fe94f7e44a3dc88defe46b5664e524b929aa68f9ed20b5c99b429c427bc5d230bc7ab904815b359b8bc907ff47b5e0cf3fbacc59cb504964392e26c8e8b1dcd667a7f0846e083b27ca32b64cc63cfd5f89fbe972b99bec84b5d5fa02f17de7bf0ddff91ddffc4412a021078c04a23ebc1d2e5eb375da182e3241f43be76141d168af5131e713b8b48c8306454a6f131aef0a8edf0fc56f66ec26e1ded2ed423826e484125a6366e78fbae1241bcb74f56fa3bf30d9c59e6a6cff7fbd1fd4877699c025ec232fcded06765bf78604acf2e34832d9adacc0bfb218b371338019f2b458c340bfb3e77b98564fd9aba0b3c4e7d4eef77336bdcc789913143cff7af0357035dd6e9de5dd9924f1af8099a6ae6b4f74e9e2cf422d8acb38162691c2aabafd32b80d75c4f7a731021814b0be19b19231182093dfefaa4c1431c176bd849da19bab252094a3efb852fcb8a331b6018521a31fe9e164c91994fc3369700b3c4959e3cec5098a590de56ceebf3945479c1b52c005a8b65087a3f8eef225b8e0df24f45168c7af1958c0b7224bc3916e884758b671d9db52e9f34385d63b13c8fa57068f54f2d836a7c00360c4ede7825513324c1f9ad736fce4842c00cc3190171bcd8a35ae7c505cbae078591904d0b4ca6120e81494b49f744238e317d8b5f5755579d3f5887e08fb2c40f69e6fe9faf4a5afbddda422b6d31affc8e1d50654aaabe2e3edff93de85902a7808f7cfbd1022964548c83e1bdbd50c28000fafe081b19af7fb96d856756259948d9d2f6777504356af472dc618febd595e7f008c96549cd5701d1fb036083333130433dd58de832ef3031095f2a523ae0d305af9696be0e877c159346009e16822a9b5a5334704849ea4cce5405132c0eff5bff0a0acbdf5a1347f6876ebaedfc15563bd38f0449adcf0dd3021b9790f122b396f0ca550e1a9941e0936c9707335b51fb26d10926bd9a8be20aac1815873ebc77b62e33e90224af84e78e9366abcd96feeca91a79263e0be5488a251ba3a71b431e6b174d9aca117cae4ceb14bfdf6e334d4851ad94ad1bf5fd7de19932ec5547e1d5f1916956d6f03dafed674ce5178c5958461715e4aff139ba564a1fea2c7f599434264224f4e8a0351e9b91af357e2ba2f6e5ba7adbf8bc7b8e2739741f5f2a827143ad2479d7dafc49f711e3653ef74098b4a91f8a622d47307ae23588479bac76c78fc9c381245734eca5c687fcfe35c3b2305f29c814a969bb402dd96e86d30ccd98c35d5defd6501f0daa187e108c1309de55b8093aa38525c546f06ff685e10d94eccb9203cda6caac523a06b122c9f424662ada3057a32f07e720e69963bd5abe622a6938d9970ca9dbb77e2de22f8d74682c29c3767eb5c13adb884d32c0a6f418d498f0baaee155b990a0b8a9d234ea4ff8b1b1e6a94ec6fc6e13a4b53ea0da171897f634892f77ab11a67b0696eb3eddc5a439806ffa2a65e6894832fba1fedaea7a9f403fe7db6df579256ba3b66f8e6eec2cc4c350181c0e8cd38340353e425b6aab818af80d3814cfaa847d4f1def4fe70889f9d8146249b0e9b66fd694a35d72bc2fefb00a5f305a49c411cb5412aa813e7419b4ec9fc58f1817e5436c9ee5901f3a42b194132351e48b0977c10ba0bfecdbabe506fdb3e1e45a5a6a0aaf50bc6abdd7b6560883c6fddeb7d13ec5f52abd5507869eb102d19c6f31507039f971dbce6d2559a242741b0aac06440a317e6f4c05a50b05dbc288f9c189a1bc5fb4977e637acb1875af18517c6d7602ecd6b4884ba0040950806a0eb7edce2b2f8b1d48eddda917f895e4addbfc3a66fa23430e4a116e3422c7d5aeef990fed61ad32cde61bc7c063d23263ac22df0abf3205c55ce28ff6b013e43cb93d80810b1d3818d9833086505cd52530d5e3593759e88c1abde5637ff6a49b16e7a5f3e08d97f6f145bd2ceea30830cd84bb4395962c127a0e9a37de89ef7eeb53f048fa4bb65c10ab63221df1320efda0be4796a20cae617c26b4724ed356ceb79b3be27abb36d3bdc96c3cab217c0f048a94127d039a38baebdf4f1f7274a6479a02461a81f142ad4c25ae0007602261b099020e1a448aae533311c84827d744caa2682154bf6b13502384eb4e9b02a0df59c69a581da328c0bc876b34f95f105a4195efa35a53f7f33f0f01a33402dc53f90660e3c178f5c4cafe91f8a208995e65d033fdda1bf4ed26b250aa043c64023c162523b083a755a349b005f20aa03ab3a3b0edb4a6b19c1f9669bdb671a48c7832bc03e2669f809f9af41113c60aedfbf02d8e71bc9268f60afafc3a8654c46b981a0d06f01baaa3b537d504d1cc5fa5be34d66cf9557c8fb003f592345ae25f3427107aad28c772aef17473433be219b2422396a76fb43a831cd350a5eca6eb23eb04b40ee81f131d25619153a3a7e707ceadf24b42191c3999e3843ffa594583848e9ba52f4c12b5c617eca38eff962a22485cf61fc17784f653519f98506a6154fd00a5721103046846a8060c4f2f15305830d4fa314482854aeccb9ed5506c5245abe0f1a9f511ac71d48472164d6ae22f50e6d298063e199ba5a84ca490e33f7f028026f9c8e83b496b8edd2161f0aea3862a4ebfcb526102826081a3268957383855abbaeca0017775a340d0bb044f05f1bf10b778347fa2ec0f0171e71e333cd8822ac78bbedfa8ecd396412618cae7f422b8dc0d76e79b8226b0d71ed7c3fa324e894c2da3943faecfb4dced7c6d3fe9feddaf17ce8416a448279419729acf3e538cd2333027b8e9374be08778bae1f5f9cc140eb625562e160ee73c7d34e12701e679f7a52818cfd8304254903ae19e4609516a03e7d5148d61d6963836d0a9d91cd333c5584c22083ad433e41c8ad1bd6fdf4eae26e555ad90a162ad18cb90eac0d98163f5f9f03366a11c6aee4487582c1757f6180d9336350c185b8426b9fe3a05aacf864173e972ee0cb238ffeb16d04a7db436d64c0c6d36e7fc49cb47afeb0a4737875b6192bac338162db18b3048eacaed43357951f739d61ce8107de684dab50a2d21aa866e66411b1b0e57cc6f5079db68e4e450d6d2584b3c7a6a9b775b26be7cd9a52361647acfc577a1e4eaa8e396604bb1525b2d0eaa804fa6897f7c4a0cdf98ddaf36228547000c8bd0bc83dc2e2d623e3dfcb778a286c1d111a470c9468c2a27fb75b3a67154a0db7c7d7629fa9aba4c29ba8f777ca0b48ec70e7b005b785b19506f7b89d95ccd78188d57565099a9f20eaf25f71ee8d199b9dd82fc740fb838f95477a9315a0b17d303dc131b477938ea8cab25a1f98ae9b6a53fcc1e0e05b02135cb373aa3e11dd8bfb18aa022d8e00c3add5061b039a55d28d44fe6fadfdc585c9d4c1854799f41e1308dcc81732700680a2f8a5bd9927dd93efb775e18baec6744a3b94b38f74f7f8b18cea6d2caf62aff4a809a1e8e7ec53838b525d472c27138c306eec3a5b95b43ae88c1fe3926c688eed207fdcd4c9fd648e50dd5eef12217325eaf710eb640f7b0c9aecba8de201d40b883d98eb6984742bcd61936d57f22d043897ae389edb2e7b1e10e51d8d2938b696b87ef64c9aa19be3a498a0105a80be4bc8ab36c77254984721ca340e489ee24a89a2005ebc0877e0882e03eee379eb200decb66cdec3921ca3ece46e091f5de12810cfd4cfa813c331651682de13c5f8298d0f2071042b4f4239212f8cc046e0b4dba3aabf377e2ed44e11be06dc26deb81f7143c768276cb4f8c6dfabe4a65e3e5635f1b629482c672a78da184751dcee232bf9431351384f24ef0f9", @nested={0x4, 0x13c}, @generic="bc3ce537b2827f85355fc943ec6f8b71e0e0f959340cd23572", @generic="7a35e42391f4e9fe9f1b84932e153669c48c1b8627e62bf9331a6f2d589391f502deeb5851174461395cc7daa5fe071222aaa0bb6a0ca7d76d0cbdf4165be51471638a8632b23c4d6351e10d6bd90cad407a09eb9ce52f14528b33621332e8c131291d4fccda636ad0ee30346bdc88c8efb4e046c0ddf567d92573d2ef6fd79732c64bf13a43fa8703497fedfe8a7476f41cf680400cf8a45ddc14115fde6e076cbb0f", @nested={0x4, 0x5}]}, @nested={0x132, 0xb8, 0x0, 0x1, [@typed={0xc, 0x2a, 0x0, 0x0, @u64=0xea}, @typed={0x8, 0x12d, 0x0, 0x0, @uid=r4}, @nested={0x4, 0xbc}, @generic="1a359862bc25e35d33182ae64f68ca3c7e45718986727753c25170fca80b23f9ff1889faf51610075431e123a4d6738f2bceb27e53677cd71ea9c4a9b0b54f7c168ee2d37a55596b373fc7477f137edc446ade5bd063ad729e939c3262c4adf83b2a206b4eae590bb055924e50f8ddbffc617201fd4219532a998be0f5c52eecf8a32353c8bfeb0324ca85c6ce171b3fffc6aa63a0575cdc21be4813d49cc90dd786f16fd06e51c7358d342e65818246b403891967c77ed704b88cdfd8b34e588a7ba64efb5d89520819814b936c1e41c8df8a8d8909ec08c1d15ab5d1fd4a2973da8202257df90561bd6ab1f24e678a157526a90678", @typed={0x11, 0xdd, 0x0, 0x0, @str='0000:00:10.0\x00'}, @typed={0x8, 0x22, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0x113}]}]}, 0x1210}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x1407, 0x20, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}]}, 0x34}}, 0x20050050) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000001840)={r6, &(0x7f0000001740)='nl80211\x00', 0x101240, &(0x7f0000001780)={@align=0xfff, {0x4, 0xff1d, 0x29, 0x100}}, 0x9, &(0x7f00000017c0)={@_ha_fsid}, &(0x7f0000001800)=0x1b}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000001880), &(0x7f00000018c0)=0x14) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000001880), &(0x7f00000018c0)=0x14) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001900), r0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000001900), r0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001a80)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x17}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x10, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x3, 0x3, 0x5]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x805) sendmsg$NL80211_CMD_SET_POWER_SAVE(r7, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x34, r2, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40081}, 0x25) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001cc0)={r7, r7}, 0xc) getsockname$packet(r7, &(0x7f0000001d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001d80)=0x14) (async) getsockname$packet(r7, &(0x7f0000001d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001d80)=0x14) getpeername$packet(r7, &(0x7f0000001dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001e00)=0x14) sendmsg$nl_route(r7, &(0x7f0000001f40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e40)=@setlink={0x84, 0x13, 0x20, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, 0x10, 0x10888}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x22242}, @IFLA_IFALIAS={0x14, 0x14, 'team_slave_1\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_vlan\x00'}, @IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}]}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_to_bond\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x800) r11 = socket$kcm(0x29, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r11, 0x84009422, &(0x7f0000001f80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r11, 0x84009422, &(0x7f0000001f80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000002380)={0x0, "4ca65359d6be99ddfe3bad45a69c8b40"}) ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f0000003380)={0x19, 0x4, {0x9, @struct={0x8000, 0x9}, 0x0, 0x8000000000000001, 0x9, 0xffffffff80000001, 0xfff, 0x4, 0x14, @struct={0x0, 0x1}, 0x7, 0xfffffff7, [0x4fdc3285, 0x6, 0x400, 0x7, 0x7, 0xffffffff]}, {0x4, @struct={0x7f, 0x8}, 0x0, 0x7fff, 0x3, 0x0, 0x7, 0x9, 0x54, @struct={0x800, 0x6}, 0xfff, 0x4, [0x8000000000000000, 0x101, 0x7, 0xfffffffffffffffd, 0x0, 0x8]}, {0xfffffffffffff800, @usage=0x43, 0x0, 0x80000001, 0x1, 0x3, 0x8, 0x1, 0x40, @usage=0x2, 0x9, 0x43d8, [0x1, 0x4, 0x0, 0xf, 0x8, 0x3]}, {0x3, 0x10000, 0x1}}) ioctl$BTRFS_IOC_BALANCE_V2(r11, 0xc4009420, &(0x7f0000003780)={0xa, 0x1, {0x2a4000000000000, @usage=0x7, r12, 0x9a, 0x3, 0x5, 0x4, 0xffff, 0x2, @struct={0x5, 0x4}, 0x4, 0xffffffed, [0xf, 0x6, 0x0, 0x10, 0x7fff]}, {0x65, @struct={0x0, 0x7}, r13, 0x9, 0xfffffffffffffffc, 0xfffffffffffffff8, 0x12de, 0x100000001, 0x80, @usage=0x9, 0xd, 0x81e, [0x3, 0x3a800000000000, 0x35a6ec55, 0xb4cd, 0x25ec000000000000, 0x2]}, {0x6, @struct={0x7, 0x1454}, r14, 0x8, 0x1, 0x344, 0x8, 0x1, 0x80, @struct={0x9, 0x9}, 0x0, 0x100, [0x80, 0xb44, 0x5b5, 0x400, 0xf1, 0x10]}, {0x79, 0x1, 0x3}}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r11, 0xc4009420, &(0x7f0000003780)={0xa, 0x1, {0x2a4000000000000, @usage=0x7, r12, 0x9a, 0x3, 0x5, 0x4, 0xffff, 0x2, @struct={0x5, 0x4}, 0x4, 0xffffffed, [0xf, 0x6, 0x0, 0x10, 0x7fff]}, {0x65, @struct={0x0, 0x7}, r13, 0x9, 0xfffffffffffffffc, 0xfffffffffffffff8, 0x12de, 0x100000001, 0x80, @usage=0x9, 0xd, 0x81e, [0x3, 0x3a800000000000, 0x35a6ec55, 0xb4cd, 0x25ec000000000000, 0x2]}, {0x6, @struct={0x7, 0x1454}, r14, 0x8, 0x1, 0x344, 0x8, 0x1, 0x80, @struct={0x9, 0x9}, 0x0, 0x100, [0x80, 0xb44, 0x5b5, 0x400, 0xf1, 0x10]}, {0x79, 0x1, 0x3}}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000003e00)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003bc0)={0x1f8, r1, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xe1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x800}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xfd54}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x40}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4aa0}, {0x6, 0x11, 0xa7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x200}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x6a}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9714}, {0x6, 0x11, 0x3}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4044004}, 0x4000) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f0000003e40), 0xc, &(0x7f0000003f40)={&(0x7f0000003ec0)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4005) 15.611403611s ago: executing program 4 (id=1889): unshare(0x66000080) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x800, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pB \x00'}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffff, 0x10}, 0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x20, 0x700, 0x40, 0x2, {{0x15, 0x4, 0x3, 0x33, 0x54, 0x67, 0x0, 0x7f, 0x29, 0x0, @multicast1, @private=0xa010100, {[@cipso={0x86, 0x28, 0x0, [{0x7, 0xf, "fa7d5ad5f7fc2065ebb3b4da58"}, {0x7, 0xb, "0a54105c3cc57b8af6"}, {0x1, 0x2}, {0x7, 0x6, "6b5294aa"}]}, @timestamp_addr={0x44, 0xc, 0x43, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x2b}, 0x80}]}, @lsrr={0x83, 0x7, 0xdd, [@local]}, @ra={0x94, 0x4}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x31, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe}, @exit, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x401}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x0, 0x4, 0x3, 0x4, 0x8, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x889af5f463276fd9}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0xf4, &(0x7f00000003c0)=""/244, 0x41100, 0x4, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x9, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) 15.469322184s ago: executing program 4 (id=1890): r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x400000000000009) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d640500004a52ef0c00000065040400010000000404000001007d60b703000e00000000ea0a00fe00000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198914"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="040028bd7000fcdbdf250500000058000780080001000200000008000100040000000800020009000000080002000180ffff0c00030006000000000000000c0003000900000000000000080001000800000008000200050000000cf9296c94420c024efcffff30000180080003000100000008000300070000000d0001007564703a73797a31000000000c000280080001"], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r6, 0x1, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x4000010) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x28, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x20000010) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x50, r3, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x50}}, 0x0) socketpair(0x9, 0xa, 0x81, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x1d, r9}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x6, 0x0, 0x1, {0x77359400}, {}, {0x3, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x1e, 0x0, 0x0, 0x0, "d9492b399decf25f6747767a20d8a02ddc499f7992d3e0afbcc204a886e45cc1a4ef8686a019194216336543580ffb3698cf66f22481eb6f9221aeef7d36d7a7"}}, 0x80}, 0x1, 0x0, 0x0, 0x4040840}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x300, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000890) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x400c4}, 0xc40) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) 1.197795281s ago: executing program 32 (id=1887): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040000005200010001000000fcdbdf240a000000"], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x8800) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req={0xc, 0x0, 0x0, 0x1}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x18, 0x10, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x2, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffe0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xbbb, 0x0, 0xffffffff, 0x7fffffff, 0x7, 0x8, 0xba, 0x3fe, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x2000c805) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2711, @host}, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00042abd7000fddbf7ffffffffffffff0000e0000042080009000300000006000300ae01220006000300ff01000014002000fe8000000000000000000400000000bb"], 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x4070b924, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0x5, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4000003}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r12, &(0x7f0000000300)='cpuset.cpus\x00', 0x2, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000001440)={'ip6_vti0\x00', &(0x7f0000001400)=@ethtool_sfeatures={0x3b, 0x2, [{0x661c, 0x81}, {0x3, 0x7}]}}) 1.155745244s ago: executing program 33 (id=1883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1000}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x8000, 0x20, 0x101, 0xf, {{0xb, 0x4, 0x1, 0x1d, 0x2c, 0x67, 0x0, 0x81, 0x29, 0x0, @empty, @multicast2, {[@timestamp={0x44, 0x14, 0xb5, 0x0, 0x5, [0x1000, 0x8, 0x6, 0xadda]}, @noop]}}}}}) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000180)={@remote, r4}, 0x14) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip_vti0\x00', r4, 0x700, 0x40, 0x3, 0x7fff, {{0x15, 0x4, 0x3, 0x7, 0x54, 0x1d1c, 0x0, 0x9, 0x2f, 0x0, @local, @loopback, {[@noop, @lsrr={0x83, 0x17, 0x52, [@multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback]}, @ssrr={0x89, 0x17, 0xd2, [@local, @empty, @empty, @broadcast, @local]}, @timestamp={0x44, 0x8, 0xd4, 0x0, 0x7, [0x2f91]}, @ra={0x94, 0x4, 0x1}, @end, @noop]}}}}}) (async) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r7, 0x0, 0xc9, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r9, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) r10 = accept4(r3, &(0x7f00000003c0)=@sco={0x1f, @none}, &(0x7f0000000440)=0x80, 0x1400) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADD(r12, 0x0, 0x482, &(0x7f00000004c0)={0x11, @multicast1, 0x4e21, 0x0, 'nq\x00', 0x15, 0xb, 0x7f}, 0x2c) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000500), 0x40100, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000700)={{r14, &(0x7f0000000580)='\x00', 0x0, &(0x7f00000005c0)={@align=0x100, {0x3, 0x1, 0xcf, 0x3}}, 0x3, &(0x7f0000000600), &(0x7f0000000640)=0x2}, {[0x3, 0x9, 0x8, 0x9]}, 0x6e, 0x43, &(0x7f0000000680)=""/67}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=@getqdisc={0x3c, 0x26, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xd, 0xfff1}, {0xffef, 0x8}, {0x2}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) r17 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x12808210}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r17, 0x8, 0x70bd28, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, r11, 0x9, '\x00', r16, r15, 0x2, 0x0, 0x2}, 0x50) socket(0x1d, 0x6, 0x23d) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x12008}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xf0, 0x0, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}]}, @CTA_EXPECT_CLASS={0x8}, @CTA_EXPECT_MASTER={0xa4, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x30}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x44085}, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000002340)={{r13, &(0x7f0000000c40)='[%@#\x00', 0x464a00, &(0x7f0000000c80)={@_ha_fsid={[0x2, 0x324]}, {0x8ed1, 0x0, 0x80, 0x8}}, 0xf, &(0x7f0000000cc0), &(0x7f0000000d00)=0x5}, 0x6, &(0x7f0000002280)=[{0x2, 0x5, &(0x7f0000000d40)='veth1_vlan\x00', &(0x7f0000000d80)="c422f133cc2425a65687574a72c9258ee5fab632a61ba2b95a561ff14d40e8d816a8f55b7c9096371305390e7acfa31dbad55de0b4923dadd40528047b6aaa004ce2a07714e3ce22c607cd41b0ff297e5ab5625fd1fcdce4228443870404411c29d23ea097372e385673eb438a48f9966753bd6cb125a39eb3a7dcb639e78ebac0829834c34f251484f59ba9d11f38816e314e02d25dbd974934d6b9b9", 0x9d, 0x2}, {0x3, 0x6, &(0x7f0000000e40)='nbd\x00', &(0x7f0000000e80)="5b86e44862a13e4b116031423034f2fd21c50530c6f85b133a39c80622c27244fc8a28c3ff4a0c41ad7edc71186a48de819068d703ca6e8faac3f7b367e61ddfaf65666b5e921b1af7508ca50c010121fa6c152d6f80b3efa89f8cddb9bb4a4a6b568f2d8b48606fe1f1132f02a3ef75b68e764f782e978d34bd678f0838c40e5a3cee01b75d12a4be3d0b0ee53a5944e607e9425f0f876c10942675d1e1a1415fc3c5", 0xa3, 0x10}, {0x1, 0x0, &(0x7f0000000f40)='#{\\-%\x00', &(0x7f0000000f80)="6acc6a01edf65d8396fb0e21f6215d05f66a45594e25a907cedc612acec320d32ad6f187a72b12137540e899d27c758a6e03fa27598f746a046ef7cba4d6ccde480ac5f97aae8d8745d7323ecfea7d193dedc3af5ba5ae036b69fa7f27fd6f4898e1f999d0f96a01cb03e1d1b619403171f16bea44d1c6b8ee576bd9861e5474d44c4925134e5f4635ba49b89ddfb441d02dec2cb3b9152262c04a", 0x9b}, {0x3, 0x9, &(0x7f0000001040)='\x00', &(0x7f0000001080)="46f5c804603bcece4760f35eeebf424296efa39d253045932394ca7b0e5ded7200e604be938aef8ab311dbd030d76e25690cae3fcab65af93635220b6f8714485c017c20ded5f8fb1964d5282d1e6f4fb4aa32f46de09006bd66745f62392b55e664a8d6a4c36e48d5abed4240240d10f2ef19e765d3371b4583cd7f5f6a2dae5e07b3e5a416b2daf6c8c454e45215d71fc80ad3e876b18e4221eff7c728701f1d6e428973bbff44", 0xa8, 0x10}, {0x2, 0x1, &(0x7f0000001140)='-\x00', &(0x7f0000001180)="47a31f529a188cb5d151cffa5347c5ce93bbeda8b2299b2ba453f0ae5e0b76a7c8b4c438996c80a08046ffd915cf9ce54155801b3f4c5ef5e94a1560e20f5758feeb7efb2189ec0c7913161dd5326eb8c74f6c7c7b4c23d20bc9379ec4d3fec7a66793bff0571b4732612c3d9dd766516351afa5e7db40b7e8d132f869927e3a1dbf7da60298c213dcc7bad27f9fec2f08693e44daed2d93d8cb1d9326de2af9ab22046ec4c424f57d9726478691d5665f34b6682d85e0bad37d9968f417", 0xbe}, {0x3, 0x8, &(0x7f0000001240)='\x00', &(0x7f0000001280)="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", 0x1000, 0x28}]}) bpf$PROG_LOAD(0x5, &(0x7f00000035c0)={0x8, 0x19, &(0x7f00000023c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r18}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0xa, 0x1, 0x0, r12}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0x2, 0x9, 0x4, 0x18, 0xffffffffffffffff}, @exit, @map_idx={0x18, 0x3, 0x5, 0x0, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000024c0)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000002500)=""/4096, 0x40f00, 0x8, '\x00', r6, @fallback=0x3f, 0xffffffffffffffff, 0x8, &(0x7f0000003500)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000003540)={0x4, 0x4, 0x36, 0x3}, 0x10, 0x0, r12, 0x0, &(0x7f0000003580)=[r12, r12], 0x0, 0x10, 0xa59}, 0x94) (async) setsockopt$sock_void(r18, 0x1, 0x24, 0x0, 0x0) 1.112902373s ago: executing program 34 (id=1888): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000840}, 0x8048011) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r1, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000840}, 0x8048011) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x3e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}]}, 0x80}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) (async) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x3e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}]}, 0x80}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000015c0)={&(0x7f0000000380)={0x1210, 0x1d, 0x400, 0x70bd29, 0x25dfdbff, {0xb}, [@nested={0x10c8, 0x7c, 0x0, 0x1, [@generic="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", @nested={0x4, 0x13c}, @generic="bc3ce537b2827f85355fc943ec6f8b71e0e0f959340cd23572", @generic="7a35e42391f4e9fe9f1b84932e153669c48c1b8627e62bf9331a6f2d589391f502deeb5851174461395cc7daa5fe071222aaa0bb6a0ca7d76d0cbdf4165be51471638a8632b23c4d6351e10d6bd90cad407a09eb9ce52f14528b33621332e8c131291d4fccda636ad0ee30346bdc88c8efb4e046c0ddf567d92573d2ef6fd79732c64bf13a43fa8703497fedfe8a7476f41cf680400cf8a45ddc14115fde6e076cbb0f", @nested={0x4, 0x5}]}, @nested={0x132, 0xb8, 0x0, 0x1, [@typed={0xc, 0x2a, 0x0, 0x0, @u64=0xea}, @typed={0x8, 0x12d, 0x0, 0x0, @uid=r4}, @nested={0x4, 0xbc}, @generic="1a359862bc25e35d33182ae64f68ca3c7e45718986727753c25170fca80b23f9ff1889faf51610075431e123a4d6738f2bceb27e53677cd71ea9c4a9b0b54f7c168ee2d37a55596b373fc7477f137edc446ade5bd063ad729e939c3262c4adf83b2a206b4eae590bb055924e50f8ddbffc617201fd4219532a998be0f5c52eecf8a32353c8bfeb0324ca85c6ce171b3fffc6aa63a0575cdc21be4813d49cc90dd786f16fd06e51c7358d342e65818246b403891967c77ed704b88cdfd8b34e588a7ba64efb5d89520819814b936c1e41c8df8a8d8909ec08c1d15ab5d1fd4a2973da8202257df90561bd6ab1f24e678a157526a90678", @typed={0x11, 0xdd, 0x0, 0x0, @str='0000:00:10.0\x00'}, @typed={0x8, 0x22, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0x113}]}]}, 0x1210}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x1407, 0x20, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}]}, 0x34}}, 0x20050050) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000001840)={r6, &(0x7f0000001740)='nl80211\x00', 0x101240, &(0x7f0000001780)={@align=0xfff, {0x4, 0xff1d, 0x29, 0x100}}, 0x9, &(0x7f00000017c0)={@_ha_fsid}, &(0x7f0000001800)=0x1b}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000001880), &(0x7f00000018c0)=0x14) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000001880), &(0x7f00000018c0)=0x14) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001900), r0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000001900), r0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r6, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001a80)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x44, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x17}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x10, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x3, 0x3, 0x5]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x805) sendmsg$NL80211_CMD_SET_POWER_SAVE(r7, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x34, r2, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40081}, 0x25) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001cc0)={r7, r7}, 0xc) getsockname$packet(r7, &(0x7f0000001d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001d80)=0x14) (async) getsockname$packet(r7, &(0x7f0000001d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001d80)=0x14) getpeername$packet(r7, &(0x7f0000001dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001e00)=0x14) sendmsg$nl_route(r7, &(0x7f0000001f40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e40)=@setlink={0x84, 0x13, 0x20, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, 0x10, 0x10888}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x22242}, @IFLA_IFALIAS={0x14, 0x14, 'team_slave_1\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_vlan\x00'}, @IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}]}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_to_bond\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x800) r11 = socket$kcm(0x29, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r11, 0x84009422, &(0x7f0000001f80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r11, 0x84009422, &(0x7f0000001f80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000002380)={0x0, "4ca65359d6be99ddfe3bad45a69c8b40"}) ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f0000003380)={0x19, 0x4, {0x9, @struct={0x8000, 0x9}, 0x0, 0x8000000000000001, 0x9, 0xffffffff80000001, 0xfff, 0x4, 0x14, @struct={0x0, 0x1}, 0x7, 0xfffffff7, [0x4fdc3285, 0x6, 0x400, 0x7, 0x7, 0xffffffff]}, {0x4, @struct={0x7f, 0x8}, 0x0, 0x7fff, 0x3, 0x0, 0x7, 0x9, 0x54, @struct={0x800, 0x6}, 0xfff, 0x4, [0x8000000000000000, 0x101, 0x7, 0xfffffffffffffffd, 0x0, 0x8]}, {0xfffffffffffff800, @usage=0x43, 0x0, 0x80000001, 0x1, 0x3, 0x8, 0x1, 0x40, @usage=0x2, 0x9, 0x43d8, [0x1, 0x4, 0x0, 0xf, 0x8, 0x3]}, {0x3, 0x10000, 0x1}}) ioctl$BTRFS_IOC_BALANCE_V2(r11, 0xc4009420, &(0x7f0000003780)={0xa, 0x1, {0x2a4000000000000, @usage=0x7, r12, 0x9a, 0x3, 0x5, 0x4, 0xffff, 0x2, @struct={0x5, 0x4}, 0x4, 0xffffffed, [0xf, 0x6, 0x0, 0x10, 0x7fff]}, {0x65, @struct={0x0, 0x7}, r13, 0x9, 0xfffffffffffffffc, 0xfffffffffffffff8, 0x12de, 0x100000001, 0x80, @usage=0x9, 0xd, 0x81e, [0x3, 0x3a800000000000, 0x35a6ec55, 0xb4cd, 0x25ec000000000000, 0x2]}, {0x6, @struct={0x7, 0x1454}, r14, 0x8, 0x1, 0x344, 0x8, 0x1, 0x80, @struct={0x9, 0x9}, 0x0, 0x100, [0x80, 0xb44, 0x5b5, 0x400, 0xf1, 0x10]}, {0x79, 0x1, 0x3}}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r11, 0xc4009420, &(0x7f0000003780)={0xa, 0x1, {0x2a4000000000000, @usage=0x7, r12, 0x9a, 0x3, 0x5, 0x4, 0xffff, 0x2, @struct={0x5, 0x4}, 0x4, 0xffffffed, [0xf, 0x6, 0x0, 0x10, 0x7fff]}, {0x65, @struct={0x0, 0x7}, r13, 0x9, 0xfffffffffffffffc, 0xfffffffffffffff8, 0x12de, 0x100000001, 0x80, @usage=0x9, 0xd, 0x81e, [0x3, 0x3a800000000000, 0x35a6ec55, 0xb4cd, 0x25ec000000000000, 0x2]}, {0x6, @struct={0x7, 0x1454}, r14, 0x8, 0x1, 0x344, 0x8, 0x1, 0x80, @struct={0x9, 0x9}, 0x0, 0x100, [0x80, 0xb44, 0x5b5, 0x400, 0xf1, 0x10]}, {0x79, 0x1, 0x3}}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000003e00)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003bc0)={0x1f8, r1, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xe1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x800}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xfd54}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x40}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4aa0}, {0x6, 0x11, 0xa7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x200}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x6a}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9714}, {0x6, 0x11, 0x3}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x4044004}, 0x4000) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f0000003e40), 0xc, &(0x7f0000003f40)={&(0x7f0000003ec0)={0x44, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4005) 1.06832793s ago: executing program 35 (id=1882): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000000a000000000200000700000001000000", @ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000075f5bbf890f1640000000f0000000000000000054e603e85f3a546f61655bd6a"], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a01040000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x50, &(0x7f0000000100), 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r0, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400), &(0x7f00000003c0)="ef24f5ebdb8760a44e4ead025133c441b407557d0643d3a9c84f5d09a415d96ab771cdca0878355185a045f4fc0d7b77fbc3", 0x10000, r0, 0x4}, 0x38) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000340)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="4010e70100feffffff00010000fe88000000000000000000000000000100000000000000000000000000000000000107144e240005020000003a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000680000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff04000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001032000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080016007f010000"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="70020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x230}, 0x1, 0x0, 0x0, 0x10}, 0x8900) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x1, 0x80000001}) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r9) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r9) sendmsg$NLBL_MGMT_C_REMOVEDEF(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="0000000086e156e052bebf950b84ecb3b1780e84eb50071172cc004d2af0aaf7e0449290c397063bd941bebd98d837221d4bd48b239790cacfc1b6d2a897c909b68559f038a78f70f55b75bf5aa90f1209081ebee194c7c5144a49618eebce6cfb5230199f6b4b62ef0d57000997d9056da89d7c32cf5d1ed9f5f0395307a8ccbde6a5292af92e970414195376cd07783682d04c7d1a7f1b06487485e3c1999a8c7b262c4d0f76a6fd7be738470e7f", @ANYRES16=r10, @ANYBLOB="01002cbd7000fcdbdf25050000000800040002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x240000d4}, 0x0) 0s ago: executing program 36 (id=1890): r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x400000000000009) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d640500004a52ef0c00000065040400010000000404000001007d60b703000e00000000ea0a00fe00000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198914"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="040028bd7000fcdbdf250500000058000780080001000200000008000100040000000800020009000000080002000180ffff0c00030006000000000000000c0003000900000000000000080001000800000008000200050000000cf9296c94420c024efcffff30000180080003000100000008000300070000000d0001007564703a73797a31000000000c000280080001"], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r6, 0x1, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x4000010) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x28, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x20000010) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x50, r3, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x50}}, 0x0) socketpair(0x9, 0xa, 0x81, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x1d, r9}, 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x6, 0x0, 0x1, {0x77359400}, {}, {0x3, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x1e, 0x0, 0x0, 0x0, "d9492b399decf25f6747767a20d8a02ddc499f7992d3e0afbcc204a886e45cc1a4ef8686a019194216336543580ffb3698cf66f22481eb6f9221aeef7d36d7a7"}}, 0x80}, 0x1, 0x0, 0x0, 0x4040840}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x300, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000890) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)={0x44, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x400c4}, 0xc40) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) kernel console output (not intermixed with test programs): switch: netlink: Either Ethernet header or EtherType is required. [ 183.550148][ T9583] netlink: 'syz.0.895': attribute type 6 has an invalid length. [ 183.558032][ T9583] netlink: 'syz.0.895': attribute type 7 has an invalid length. [ 183.565748][ T9583] netlink: 'syz.0.895': attribute type 8 has an invalid length. [ 183.574033][ T9583] netlink: 'syz.0.895': attribute type 15 has an invalid length. [ 183.823767][ T9585] netlink: 188 bytes leftover after parsing attributes in process `syz.3.896'. [ 183.908414][ T9598] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 183.958078][ T9598] bond5 (unregistering): Released all slaves [ 184.016861][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 184.024910][ C1] lec:lec_tx_timeout: lec0 [ 184.029927][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 184.134742][ T9614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.904'. [ 184.642080][ T9642] can: request_module (can-proto-4) failed. [ 184.771833][ T9654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.077234][ T7925] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 185.298500][ T9672] syzkaller1: entered promiscuous mode [ 185.304676][ T9672] syzkaller1: entered allmulticast mode [ 185.477243][ T5885] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 185.579401][ T9690] lo speed is unknown, defaulting to 1000 [ 185.606014][ T9694] netlink: 'syz.2.920': attribute type 1 has an invalid length. [ 185.684431][ T9694] bond1: entered promiscuous mode [ 185.690347][ T9694] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.735897][ T9694] bridge2: entered promiscuous mode [ 185.742495][ T9694] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 186.007766][ T9710] geneve3: entered promiscuous mode [ 186.026032][ T9710] geneve3: entered allmulticast mode [ 186.065350][ T9722] vlan2: entered promiscuous mode [ 186.073498][ T9722] veth1: entered promiscuous mode [ 186.171444][ T9717] lo speed is unknown, defaulting to 1000 [ 186.739691][ T9748] lo speed is unknown, defaulting to 1000 [ 186.845205][ T9764] bridge_slave_0: entered promiscuous mode [ 187.022030][ T9772] netlink: 'syz.2.934': attribute type 3 has an invalid length. [ 187.227220][ T1820] block nbd0: Possible stuck request ffff888025e58000: control (read@0,1024B). Runtime 90 seconds [ 187.239210][ T1820] block nbd0: Possible stuck request ffff888025e58200: control (read@1024,1024B). Runtime 90 seconds [ 187.250888][ T1820] block nbd0: Possible stuck request ffff888025e58400: control (read@2048,1024B). Runtime 90 seconds [ 187.262265][ T11] block nbd0: Dead connection, failed to find a fallback [ 187.269558][ T11] block nbd0: shutting down sockets [ 187.275010][ T11] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 187.286062][ T1820] block nbd0: Possible stuck request ffff888025e58600: control (read@3072,1024B). Runtime 90 seconds [ 187.297288][ T11] Buffer I/O error on dev nbd0, logical block 1, async page read [ 187.305188][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 187.315000][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 187.322840][ T11] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 187.332472][ T11] Buffer I/O error on dev nbd0, logical block 3, async page read [ 187.340357][ T11] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 187.349919][ T11] Buffer I/O error on dev nbd0, logical block 2, async page read [ 187.358866][ T5835] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 187.368643][ T5835] Buffer I/O error on dev nbd0, logical block 0, async page read [ 187.376469][ T5835] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 187.386089][ T5835] Buffer I/O error on dev nbd0, logical block 1, async page read [ 187.394842][ T5835] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 187.405088][ T5835] Buffer I/O error on dev nbd0, logical block 2, async page read [ 187.413880][ T5835] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 187.423469][ T5835] Buffer I/O error on dev nbd0, logical block 3, async page read [ 187.431361][ T5835] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 187.440916][ T5835] Buffer I/O error on dev nbd0, logical block 0, async page read [ 187.448750][ T5835] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 187.458737][ T5835] Buffer I/O error on dev nbd0, logical block 1, async page read [ 187.467432][ T5835] ldm_validate_partition_table(): Disk read failed. [ 187.474755][ T5835] Dev nbd0: unable to read RDB block 0 [ 187.480981][ T5835] nbd0: unable to read partition table [ 187.502585][ T5835] ldm_validate_partition_table(): Disk read failed. [ 187.517704][ T5835] Dev nbd0: unable to read RDB block 0 [ 187.524064][ T5835] nbd0: unable to read partition table [ 189.037307][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 189.045412][ C1] lec:lec_tx_timeout: lec0 [ 189.050065][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 189.501694][ T9744] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 189.748581][ T9797] lo speed is unknown, defaulting to 1000 [ 190.025411][ T9816] netlink: 'syz.0.944': attribute type 62 has an invalid length. [ 190.183215][ T9824] __nla_validate_parse: 12 callbacks suppressed [ 190.183236][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.946'. [ 190.199111][ T9824] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 190.212975][ T9825] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.947'. [ 190.290442][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.946'. [ 190.622532][ T9843] netlink: 40 bytes leftover after parsing attributes in process `syz.4.952'. [ 190.672153][ T9839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.720254][ T9841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.951'. [ 190.755351][ T9841] ip6gre1: entered promiscuous mode [ 190.762488][ T9853] netlink: 'syz.4.954': attribute type 15 has an invalid length. [ 190.769223][ T9841] ip6gre1: entered allmulticast mode [ 190.786998][ T9853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.954'. [ 190.813503][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.954'. [ 191.027924][ T8827] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.039703][ T8827] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.056111][ T9865] netlink: 100 bytes leftover after parsing attributes in process `syz.2.957'. [ 191.065632][ T5885] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.132064][ T9865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.957'. [ 191.143799][ T796] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.226375][ T9876] openvswitch: netlink: Unknown key attributes 2 [ 191.463360][ T9887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.967'. [ 191.563476][ T796] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 192.885881][ T9971] syzkaller0: entered promiscuous mode [ 192.897137][ T9971] syzkaller0: entered allmulticast mode [ 192.940634][ T9971] bridge0: port 3(macsec0) entered blocking state [ 192.957906][ T9971] bridge0: port 3(macsec0) entered disabled state [ 192.964711][ T9971] macsec0: entered allmulticast mode [ 192.980348][ T9971] macsec0: entered promiscuous mode [ 192.991111][ T9977] sctp: [Deprecated]: syz.3.992 (pid 9977) Use of int in maxseg socket option. [ 192.991111][ T9977] Use struct sctp_assoc_value instead [ 193.079138][ T9989] netlink: 'syz.4.993': attribute type 13 has an invalid length. [ 194.262040][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.281419][ T9997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.298199][ T9997] bond0: (slave sit0): The slave device specified does not support setting the MAC address [ 194.330914][ T9997] bond0: (slave sit0): Error -95 calling set_mac_address [ 194.896867][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5850 ms [ 194.905035][ C1] lec:lec_tx_timeout: lec0 [ 194.910393][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 195.309996][T10056] lo speed is unknown, defaulting to 1000 [ 195.377146][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 195.410292][T10058] __nla_validate_parse: 10 callbacks suppressed [ 195.410312][T10058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1010'. [ 195.455985][T10058] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 195.537025][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 195.577072][ T11] block nbd1: Possible stuck request ffff888025f10000: control (read@0,1024B). Runtime 90 seconds [ 195.587986][ T11] block nbd1: Possible stuck request ffff888025f10200: control (read@1024,1024B). Runtime 90 seconds [ 195.599542][ T11] block nbd1: Possible stuck request ffff888025f10400: control (read@2048,1024B). Runtime 90 seconds [ 195.610680][ T11] block nbd1: Possible stuck request ffff888025f10600: control (read@3072,1024B). Runtime 90 seconds [ 195.984521][T10089] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1015'. [ 195.995893][T10091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1016'. [ 196.286517][T10108] lo speed is unknown, defaulting to 1000 [ 196.350843][T10118] xt_policy: neither incoming nor outgoing policy selected [ 196.364643][T10118] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1021'. [ 196.397769][T10118] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1021'. [ 196.662170][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1023'. [ 196.737186][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1023'. [ 196.871231][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1023'. [ 197.037262][T10137] hsr_slave_1 (unregistering): left promiscuous mode [ 197.064181][T10148] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1025'. [ 197.336414][T10166] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1032'. [ 197.513483][T10177] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 197.644431][T10187] netlink: 'syz.2.1037': attribute type 9 has an invalid length. [ 197.655970][T10187] netlink: 'syz.2.1037': attribute type 6 has an invalid length. [ 197.812499][T10196] netlink: 'syz.4.1041': attribute type 29 has an invalid length. [ 198.162280][T10214] netlink: 'syz.1.1047': attribute type 1 has an invalid length. [ 198.195077][T10219] netlink: 'syz.3.1048': attribute type 12 has an invalid length. [ 198.262555][T10222] netlink: 'syz.1.1049': attribute type 29 has an invalid length. [ 198.546203][T10240] netlink: 'syz.1.1055': attribute type 4 has an invalid length. [ 198.563289][T10240] netlink: 'syz.1.1055': attribute type 4 has an invalid length. [ 198.575354][ T5885] lo speed is unknown, defaulting to 1000 [ 198.583945][ T5885] syz2: Port: 1 Link ACTIVE [ 198.734486][T10248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.909002][T10257] bond5: option packets_per_slave: invalid value (1048582) [ 198.916367][T10257] bond5: option packets_per_slave: allowed values 0 - 65535 [ 198.926118][T10257] bond5 (unregistering): Released all slaves [ 199.174251][T10274] pim6reg99999999: entered allmulticast mode [ 199.421626][T10287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.443310][T10284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.451151][T10287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.463636][T10287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.473466][T10284] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.497387][T10287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.505749][T10287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.522816][T10289] netlink: 'syz.3.1070': attribute type 21 has an invalid length. [ 199.547807][T10287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.556276][T10287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.565956][T10287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.574853][T10284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.794581][T10305] xt_socket: unknown flags 0xfc [ 199.917152][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 199.925227][ C1] lec:lec_tx_timeout: lec0 [ 199.930783][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 200.543903][T10346] tipc: Enabled bearer , priority 0 [ 200.571728][T10346] tipc: Resetting bearer [ 200.584359][T10349] bond3: option mode: unable to set because the bond device is up [ 200.599325][T10350] bond3: option mode: unable to set because the bond device is up [ 200.647409][T10350] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 200.656777][T10351] tipc: Enabled bearer , priority 0 [ 200.681084][T10351] syzkaller0: entered promiscuous mode [ 200.686600][T10351] syzkaller0: entered allmulticast mode [ 200.726682][T10345] tipc: Resetting bearer [ 200.747935][T10351] tipc: Resetting bearer [ 200.761544][T10348] tipc: Resetting bearer [ 200.837437][T10348] tipc: Disabling bearer [ 200.843562][T10357] netlink: 'syz.4.1090': attribute type 1 has an invalid length. [ 200.904457][T10363] __nla_validate_parse: 51 callbacks suppressed [ 200.904475][T10363] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1090'. [ 200.973002][T10365] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1093'. [ 200.985390][T10365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1093'. [ 200.996138][ T6254] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 201.018279][ T6254] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 201.062042][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1095'. [ 201.078953][ T6254] bond0: now running without any active interface! [ 201.321552][T10372] lo speed is unknown, defaulting to 1000 [ 201.476070][ T7925] IPVS: starting estimator thread 0... [ 201.585281][T10396] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1098'. [ 201.634586][T10390] IPVS: using max 27 ests per chain, 64800 per kthread [ 201.723370][ T6252] tipc: Resetting bearer [ 201.928149][T10406] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.040059][T10408] bond5: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 202.050801][T10408] bond5: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 202.199277][T10417] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1103'. [ 202.508407][T10433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1106'. [ 202.741912][T10448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1109'. [ 202.762793][T10448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1109'. [ 202.894750][T10464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1112'. [ 203.394296][T10494] lo speed is unknown, defaulting to 1000 [ 203.596574][T10510] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 203.644976][T10517] netlink: 'syz.1.1127': attribute type 3 has an invalid length. [ 203.839364][T10530] wg1 speed is unknown, defaulting to 1000 [ 203.846250][T10530] wg1 speed is unknown, defaulting to 1000 [ 203.855951][T10530] wg1 speed is unknown, defaulting to 1000 [ 203.869782][T10529] net_ratelimit: 984 callbacks suppressed [ 203.869801][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.884607][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.893236][T10530] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 203.946462][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.004315][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.019982][T10530] wg1 speed is unknown, defaulting to 1000 [ 204.028046][T10530] wg1 speed is unknown, defaulting to 1000 [ 204.035904][T10530] wg1 speed is unknown, defaulting to 1000 [ 204.039465][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.069749][T10530] wg1 speed is unknown, defaulting to 1000 [ 204.081671][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.095900][T10530] wg1 speed is unknown, defaulting to 1000 [ 204.129783][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.165871][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.174908][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.183748][T10529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.497499][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 204.937067][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 204.945179][ C1] lec:lec_tx_timeout: lec0 [ 204.949806][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 205.326308][T10601] netlink: 'syz.4.1151': attribute type 10 has an invalid length. [ 205.442038][T10612] FAULT_INJECTION: forcing a failure. [ 205.442038][T10612] name failslab, interval 1, probability 0, space 0, times 1 [ 205.455062][T10612] CPU: 1 UID: 0 PID: 10612 Comm: syz.3.1154 Not tainted syzkaller #0 PREEMPT(full) [ 205.455089][T10612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 205.455102][T10612] Call Trace: [ 205.455110][T10612] [ 205.455120][T10612] dump_stack_lvl+0xe8/0x150 [ 205.455155][T10612] should_fail_ex+0x412/0x560 [ 205.455191][T10612] should_failslab+0xa8/0x100 [ 205.455219][T10612] ? inet_bind2_bucket_create+0x34/0x510 [ 205.455250][T10612] kmem_cache_alloc_noprof+0x87/0x650 [ 205.455276][T10612] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 205.455304][T10612] inet_bind2_bucket_create+0x34/0x510 [ 205.455339][T10612] inet_csk_get_port+0xf33/0x16d0 [ 205.455365][T10612] ? do_raw_spin_lock+0x12b/0x2f0 [ 205.455396][T10612] ? __inet6_bind+0x30c/0xf60 [ 205.455424][T10612] ? __inet6_bind+0x455/0xf60 [ 205.455454][T10612] __inet6_bind+0x6e5/0xf60 [ 205.455491][T10612] __sys_bind+0x2e3/0x410 [ 205.455528][T10612] ? __pfx___sys_bind+0x10/0x10 [ 205.455574][T10612] ? __pfx_ksys_write+0x10/0x10 [ 205.455608][T10612] __x64_sys_bind+0x7a/0x90 [ 205.455642][T10612] do_syscall_64+0x14d/0xf80 [ 205.455664][T10612] ? trace_irq_disable+0x3b/0x150 [ 205.455694][T10612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.455715][T10612] ? clear_bhb_loop+0x40/0x90 [ 205.455750][T10612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.455772][T10612] RIP: 0033:0x7fa80ad9c799 [ 205.455791][T10612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.455809][T10612] RSP: 002b:00007fa80bc6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 205.455831][T10612] RAX: ffffffffffffffda RBX: 00007fa80b015fa0 RCX: 00007fa80ad9c799 [ 205.455846][T10612] RDX: 000000000000001c RSI: 00002000000002c0 RDI: 0000000000000004 [ 205.455859][T10612] RBP: 00007fa80bc6a090 R08: 0000000000000000 R09: 0000000000000000 [ 205.455872][T10612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.455884][T10612] R13: 00007fa80b016038 R14: 00007fa80b015fa0 R15: 00007fff39f50068 [ 205.455919][T10612] [ 205.666116][ T7925] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 205.831601][T10618] tipc: Resetting bearer [ 205.975666][T10623] bridge4: entered promiscuous mode [ 206.267747][ T7925] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 206.401549][T10645] __nla_validate_parse: 9 callbacks suppressed [ 206.401570][T10645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1161'. [ 206.417096][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 206.649253][T10655] FAULT_INJECTION: forcing a failure. [ 206.649253][T10655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.663641][T10655] CPU: 0 UID: 0 PID: 10655 Comm: syz.1.1165 Not tainted syzkaller #0 PREEMPT(full) [ 206.663666][T10655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 206.663678][T10655] Call Trace: [ 206.663686][T10655] [ 206.663695][T10655] dump_stack_lvl+0xe8/0x150 [ 206.663728][T10655] should_fail_ex+0x412/0x560 [ 206.663764][T10655] _copy_to_user+0x31/0xb0 [ 206.663789][T10655] simple_read_from_buffer+0xe1/0x170 [ 206.663824][T10655] proc_fail_nth_read+0x1bb/0x230 [ 206.663858][T10655] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.663892][T10655] ? rw_verify_area+0x2a6/0x4d0 [ 206.663914][T10655] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.663945][T10655] vfs_read+0x20c/0xa70 [ 206.663963][T10655] ? __local_bh_enable_ip+0xd0/0x130 [ 206.663988][T10655] ? fdget_pos+0x246/0x320 [ 206.664023][T10655] ? __pfx___mutex_lock+0x10/0x10 [ 206.664047][T10655] ? __pfx_vfs_read+0x10/0x10 [ 206.664070][T10655] ? __fget_files+0x2a/0x420 [ 206.664112][T10655] ? __fget_files+0x3a0/0x420 [ 206.664142][T10655] ? __fget_files+0x2a/0x420 [ 206.664180][T10655] ksys_read+0x150/0x270 [ 206.664206][T10655] ? __pfx_ksys_read+0x10/0x10 [ 206.664241][T10655] do_syscall_64+0x14d/0xf80 [ 206.664263][T10655] ? trace_irq_disable+0x3b/0x150 [ 206.664293][T10655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.664315][T10655] ? clear_bhb_loop+0x40/0x90 [ 206.664350][T10655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.664365][T10655] RIP: 0033:0x7f0d7075cfce [ 206.664378][T10655] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 206.664390][T10655] RSP: 002b:00007f0d71595fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.664405][T10655] RAX: ffffffffffffffda RBX: 00007f0d715966c0 RCX: 00007f0d7075cfce [ 206.664416][T10655] RDX: 000000000000000f RSI: 00007f0d715960a0 RDI: 0000000000000005 [ 206.664425][T10655] RBP: 00007f0d71596090 R08: 0000000000000000 R09: 0000000000000000 [ 206.664434][T10655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.664442][T10655] R13: 00007f0d70a16038 R14: 00007f0d70a15fa0 R15: 00007ffd1072a798 [ 206.664466][T10655] [ 206.664823][T10617] tipc: Resetting bearer [ 206.849937][T10657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1166'. [ 206.979149][ T5885] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 207.004503][T10660] netlink: 'syz.4.1167': attribute type 3 has an invalid length. [ 207.409239][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1173'. [ 207.550892][ T64] tipc: Resetting bearer [ 207.684935][T10708] netlink: 'syz.1.1180': attribute type 16 has an invalid length. [ 207.852399][T10717] tipc: Enabling of bearer rejected, failed to enable media [ 207.918700][T10708] netlink: 'syz.1.1180': attribute type 17 has an invalid length. [ 208.111858][T10722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1183'. [ 208.196462][T10731] tunl0: Caught tx_queue_len zero misconfig [ 208.207131][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1187'. [ 208.224916][T10735] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1184'. [ 208.469574][ T3174] IPVS: starting estimator thread 0... [ 208.580091][T10748] IPVS: using max 30 ests per chain, 72000 per kthread [ 209.027046][T10770] lo speed is unknown, defaulting to 1000 [ 209.034623][T10770] wg1 speed is unknown, defaulting to 1000 [ 209.105940][T10788] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1197'. [ 209.414011][T10800] IPv6: syztnl2: Disabled Multicast RS [ 209.767146][T10816] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1202'. [ 209.957220][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 209.965319][ C1] lec:lec_tx_timeout: lec0 [ 209.970332][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 210.083173][T10829] netlink: 'syz.0.1203': attribute type 10 has an invalid length. [ 210.137151][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1206'. [ 210.160410][T10815] lo speed is unknown, defaulting to 1000 [ 210.242279][T10815] wg1 speed is unknown, defaulting to 1000 [ 210.311665][T10843] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 210.630244][T10848] syzkaller1: entered promiscuous mode [ 210.640368][T10848] syzkaller1: entered allmulticast mode [ 210.659087][T10848] net_ratelimit: 54 callbacks suppressed [ 210.659105][T10848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.673848][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.692312][T10848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.704258][ T145] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.717051][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.747859][T10848] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.756737][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.798590][T10815] netlink: 'syz.3.1204': attribute type 1 has an invalid length. [ 210.952493][T10856] lo speed is unknown, defaulting to 1000 [ 211.072413][T10870] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1209'. [ 211.131522][T10856] wg1 speed is unknown, defaulting to 1000 [ 211.372537][T10878] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 211.698651][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 211.701445][ T5143] Bluetooth: hci1: command 0x0406 tx timeout [ 211.707318][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 211.723622][T10905] __nla_validate_parse: 3 callbacks suppressed [ 211.723638][T10905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1220'. [ 211.753121][T10903] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1220'. [ 211.901480][T10911] netlink: 'syz.2.1222': attribute type 1 has an invalid length. [ 212.005590][T10914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1224'. [ 212.027388][T10911] 8021q: adding VLAN 0 to HW filter on device bond3 [ 212.152454][T10916] bond3: (slave geneve3): making interface the new active one [ 212.187587][T10916] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 212.230598][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 212.241813][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 212.270490][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 212.291454][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 212.466950][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1215'. [ 212.476007][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1215'. [ 212.559133][ T64] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.569539][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1215'. [ 212.600765][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1215'. [ 212.644650][T10880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.670664][T10880] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 212.690266][ T64] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.700784][ T64] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.709891][ T64] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.767195][T10914] Set syz1 is full, maxelem 10763 reached [ 213.176404][T10945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.260848][T10930] lo speed is unknown, defaulting to 1000 [ 213.270021][T10930] wg1 speed is unknown, defaulting to 1000 [ 213.336769][T10951] netlink: 'syz.0.1233': attribute type 1 has an invalid length. [ 213.369725][T10951] netlink: 'syz.0.1233': attribute type 2 has an invalid length. [ 213.550177][T10956] lo speed is unknown, defaulting to 1000 [ 213.598313][T10956] wg1 speed is unknown, defaulting to 1000 [ 213.801170][T10979] netlink: 'syz.2.1238': attribute type 4 has an invalid length. [ 213.809601][T10979] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1238'. [ 213.845507][T10966] : renamed from veth0_to_bond (while UP) [ 213.864603][T10979] .`: renamed from bond0 (while UP) [ 213.983024][T10969] lo speed is unknown, defaulting to 1000 [ 214.002902][T10969] wg1 speed is unknown, defaulting to 1000 [ 214.272230][T10985] lo speed is unknown, defaulting to 1000 [ 214.298724][T10985] wg1 speed is unknown, defaulting to 1000 [ 214.511980][T10971] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 214.611616][T11006] x_tables: duplicate underflow at hook 1 [ 214.717029][T11010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1242'. [ 214.859465][T11015] netlink: 'syz.1.1244': attribute type 1 has an invalid length. [ 214.977400][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 214.985520][ C1] lec:lec_tx_timeout: lec0 [ 214.990326][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 215.108604][T11031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1246'. [ 215.677428][T11057] netlink: 'syz.4.1253': attribute type 1 has an invalid length. [ 215.727073][T11057] netlink: 'syz.4.1253': attribute type 2 has an invalid length. [ 215.771799][T11045] net_ratelimit: 9 callbacks suppressed [ 215.771817][T11045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.786771][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.057490][T11081] netlink: 'syz.4.1257': attribute type 4 has an invalid length. [ 216.107219][T11081] netlink: 'syz.4.1257': attribute type 4 has an invalid length. [ 219.283076][T11089] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 219.436395][T11164] vti0: entered promiscuous mode [ 219.463662][T11164] vti0: entered allmulticast mode [ 219.651327][T11185] lo speed is unknown, defaulting to 1000 [ 219.683654][T11185] wg1 speed is unknown, defaulting to 1000 [ 219.730143][T11190] netlink: 'syz.1.1277': attribute type 8 has an invalid length. [ 219.771074][T11190] __nla_validate_parse: 4 callbacks suppressed [ 219.771092][T11190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'. [ 219.813201][T11195] SET target dimension over the limit! [ 220.006853][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 220.014982][ C1] lec:lec_tx_timeout: lec0 [ 220.021141][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 220.315085][T11229] netlink: 'syz.4.1287': attribute type 10 has an invalid length. [ 220.373744][T11230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1287'. [ 220.425519][T11230] bridge_slave_1: left allmulticast mode [ 220.445004][T11230] bridge_slave_1: left promiscuous mode [ 220.466500][T11230] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.518182][T11230] bridge_slave_0: left allmulticast mode [ 220.523939][T11230] bridge_slave_0: left promiscuous mode [ 220.530390][T11230] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.169022][T11245] lo speed is unknown, defaulting to 1000 [ 221.198734][T11241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.245367][T11245] wg1 speed is unknown, defaulting to 1000 [ 221.653245][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1300'. [ 221.655298][T11276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1300'. [ 221.777000][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 221.907589][T11288] syzkaller1: entered promiscuous mode [ 221.921317][T11288] syzkaller1: entered allmulticast mode [ 221.931149][T11289] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1306'. [ 222.105247][T11267] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 222.324186][T11313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1315'. [ 222.463033][T11320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1317'. [ 222.622920][T11327] x_tables: duplicate underflow at hook 3 [ 222.901359][T11343] erspan0: entered promiscuous mode [ 222.944639][ T7925] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 223.239464][T11351] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1331'. [ 223.293752][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1331'. [ 223.302958][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1331'. [ 223.437344][ T796] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 223.783112][T11392] netlink: 'syz.1.1342': attribute type 1 has an invalid length. [ 223.830584][T11392] 8021q: adding VLAN 0 to HW filter on device bond6 [ 223.868211][T11392] bond6: (slave veth3): Enslaving as an active interface with a down link [ 223.917110][T11392] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 223.924403][T11392] bond6: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 224.144886][ T796] IPVS: starting estimator thread 0... [ 224.181702][T11417] netlink: 'syz.2.1346': attribute type 1 has an invalid length. [ 224.194185][T11417] netlink: 'syz.2.1346': attribute type 4 has an invalid length. [ 224.211574][T11409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.251049][T11413] IPVS: using max 24 ests per chain, 57600 per kthread [ 224.747241][T11443] lo speed is unknown, defaulting to 1000 [ 224.754909][T11443] wg1 speed is unknown, defaulting to 1000 [ 224.887600][T11453] netlink: 'syz.0.1359': attribute type 2 has an invalid length. [ 224.896271][T11453] netlink: 'syz.0.1359': attribute type 1 has an invalid length. [ 225.036861][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 225.044967][ C1] lec:lec_tx_timeout: lec0 [ 225.049789][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 225.096203][T11467] __nla_validate_parse: 8 callbacks suppressed [ 225.096223][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'. [ 225.114451][T11467] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1363'. [ 225.225135][T11464] tipc: Enabling of bearer rejected, failed to enable media [ 225.288379][T11479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1365'. [ 225.327525][T11479] openvswitch: netlink: Flow actions attr not present in new flow. [ 225.617762][ T11] block nbd1: Possible stuck request ffff888025f10000: control (read@0,1024B). Runtime 120 seconds [ 225.629329][ T11] block nbd1: Possible stuck request ffff888025f10200: control (read@1024,1024B). Runtime 120 seconds [ 225.640858][ T11] block nbd1: Possible stuck request ffff888025f10400: control (read@2048,1024B). Runtime 120 seconds [ 225.652280][ T11] block nbd1: Possible stuck request ffff888025f10600: control (read@3072,1024B). Runtime 120 seconds [ 226.059635][T11460] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 226.065767][T11460] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 226.133173][T11460] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 226.145547][T11460] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 226.166535][T11511] ip6gre2: entered promiscuous mode [ 226.173872][T11511] ip6gre2: entered allmulticast mode [ 226.192452][T11511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.205439][T11460] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 226.222738][T11460] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 226.257662][ T6249] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 226.266308][ T6249] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 226.287019][ T6464] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 226.294779][ T6464] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 226.301090][T11515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1373'. [ 226.366743][T11460] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 226.387625][T11518] sch_tbf: burst 0 is lower than device bridge2 mtu (1514) ! [ 226.409550][T11460] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 226.437557][ T6464] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 226.686131][T11534] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1376'. [ 226.981425][T11547] geneve3: entered promiscuous mode [ 227.281118][T11560] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1383'. [ 227.532479][T11569] netlink: 'syz.0.1385': attribute type 1 has an invalid length. [ 227.609369][T11569] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1385'. [ 227.629170][T11575] lo speed is unknown, defaulting to 1000 [ 227.673729][T11575] wg1 speed is unknown, defaulting to 1000 [ 227.694846][T11569] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1385'. [ 227.759131][T11569] netlink: 658 bytes leftover after parsing attributes in process `syz.0.1385'. [ 227.849482][T11583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1388'. [ 227.872202][T11585] netlink: 'syz.3.1389': attribute type 21 has an invalid length. [ 228.100599][T11592] netlink: 'syz.0.1390': attribute type 1 has an invalid length. [ 228.114899][T11595] netlink: 'syz.3.1391': attribute type 2 has an invalid length. [ 228.168105][T11595] hmac(sha224): entered promiscuous mode [ 228.489578][T11611] ieee802154 phy0 wpan0: encryption failed: -22 [ 228.591516][T11612] syzkaller0: entered promiscuous mode [ 228.604271][T11612] syzkaller0: entered allmulticast mode [ 228.661606][T11621] reject_tg6_check: 23 callbacks suppressed [ 228.661626][T11621] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 228.817280][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 228.888867][T11633] netlink: 'syz.4.1399': attribute type 1 has an invalid length. [ 228.960384][T11633] 8021q: adding VLAN 0 to HW filter on device bond6 [ 230.039410][T11682] netlink: 'syz.3.1410': attribute type 2 has an invalid length. [ 230.059758][T11685] tipc: Resetting bearer [ 230.099267][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 230.246981][T11698] Can't find ip_set type has [ 230.246981][T11698] :ip,Uo [ 230.284557][T11702] netlink: 'syz.2.1411': attribute type 1 has an invalid length. [ 230.367249][T11709] __nla_validate_parse: 6 callbacks suppressed [ 230.367269][T11709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1411'. [ 230.387278][T11709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1411'. [ 230.675735][T11719] netlink: 'syz.3.1415': attribute type 4 has an invalid length. [ 230.732183][T11719] netlink: 'syz.3.1415': attribute type 4 has an invalid length. [ 230.800190][T11723] netlink: 'syz.2.1416': attribute type 1 has an invalid length. [ 230.851449][T11725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1417'. [ 230.880491][T11684] tipc: Resetting bearer [ 230.895826][T10459] tipc: Resetting bearer [ 230.908078][T11729] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.1417'. [ 231.189830][T11738] netlink: 'syz.2.1419': attribute type 1 has an invalid length. [ 231.208533][T11738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1419'. [ 231.376862][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6330 ms [ 231.384933][ C1] lec:lec_tx_timeout: lec0 [ 231.389910][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 231.497845][T11758] netlink: zone id is out of range [ 231.503084][T11758] netlink: zone id is out of range [ 231.542141][T11758] netlink: zone id is out of range [ 231.587935][T11758] netlink: zone id is out of range [ 231.647004][T11758] netlink: zone id is out of range [ 231.652189][T11758] netlink: zone id is out of range [ 231.806665][T11773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1428'. [ 232.067293][T11788] netlink: 'syz.2.1429': attribute type 5 has an invalid length. [ 232.691042][T11827] Cannot find del_set index 4 as target [ 233.173633][T11848] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1443'. [ 233.215234][T11857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.298233][T11851] block nbd2: server does not support multiple connections per device. [ 233.307645][T11851] block nbd2: shutting down sockets [ 233.358641][T11851] netlink: 'syz.0.1444': attribute type 6 has an invalid length. [ 233.403663][T11851] netlink: 'syz.0.1444': attribute type 1 has an invalid length. [ 233.478146][T11851] gretap2: entered allmulticast mode [ 233.715881][T11877] xt_hashlimit: size too large, truncated to 1048576 [ 233.829433][T11884] syzkaller1: entered promiscuous mode [ 233.848968][T11884] syzkaller1: entered allmulticast mode [ 234.044486][T11898] netlink: 'syz.0.1452': attribute type 1 has an invalid length. [ 234.077437][T11898] netlink: 'syz.0.1452': attribute type 2 has an invalid length. [ 234.085236][T11898] netlink: 'syz.0.1452': attribute type 1 has an invalid length. [ 234.126958][T11898] netlink: 'syz.0.1452': attribute type 3 has an invalid length. [ 234.145021][T11898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1452'. [ 234.249114][T11904] Unsupported ieee802154 address type: 0 [ 234.386348][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1454'. [ 234.434750][T11910] vlan3: entered allmulticast mode [ 234.444914][T11910] bridge5: entered allmulticast mode [ 234.482366][T11910] erspan0: left allmulticast mode [ 234.489180][T11910] erspan0: left promiscuous mode [ 234.495710][T11910] bridge4: port 1(erspan0) entered disabled state [ 234.518803][T11910] bridge5: port 1(erspan0) entered blocking state [ 234.525566][T11910] bridge5: port 1(erspan0) entered disabled state [ 234.532662][T11910] erspan0: entered allmulticast mode [ 234.540806][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'. [ 234.550171][T11916] openvswitch: netlink: Flow actions attr not present in new flow. [ 234.561007][T11910] erspan0: entered promiscuous mode [ 236.717942][T11884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.921314][T11934] atomic_op ffff88803324d198 conn xmit_atomic 0000000000000000 [ 237.136841][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 237.144984][ C1] lec:lec_tx_timeout: lec0 [ 237.151457][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 237.162267][T11955] __nla_validate_parse: 1 callbacks suppressed [ 237.162286][T11955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1472'. [ 237.218152][T11955] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1472'. [ 237.353933][T11967] netlink: 'syz.1.1473': attribute type 7 has an invalid length. [ 237.372555][T11967] netlink: 'syz.1.1473': attribute type 8 has an invalid length. [ 237.614610][T11977] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1478'. [ 237.703763][T11989] netlink: 'syz.3.1481': attribute type 2 has an invalid length. [ 237.755217][T11979] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1480'. [ 237.767134][T11979] openvswitch: netlink: Key type 91 is out of range max 32 [ 237.769005][T11989] xt_HMARK: spi-set and port-set can't be combined [ 238.225257][T12016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1485'. [ 238.280278][T12024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1485'. [ 238.392900][T12030] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1493'. [ 238.416996][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 238.541914][T12033] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1494'. [ 238.565854][T12033] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1494'. [ 238.733863][T12045] netlink: 'syz.3.1498': attribute type 1 has an invalid length. [ 238.745706][T12038] netlink: 'syz.2.1496': attribute type 1 has an invalid length. [ 238.767582][T12053] gtp1: entered promiscuous mode [ 238.772603][T12053] gtp1: entered allmulticast mode [ 238.853003][T12038] bond0: entered promiscuous mode [ 238.861801][T12038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.942817][T12038] bond0: (slave bridge4): making interface the new active one [ 238.951019][T12038] bridge4: entered promiscuous mode [ 238.957966][T12038] bond0: (slave bridge4): Enslaving as an active interface with an up link [ 239.279266][T12077] tipc: Enabled bearer , priority 0 [ 239.300675][T12077] syzkaller0: entered promiscuous mode [ 239.306212][T12077] syzkaller0: entered allmulticast mode [ 239.380060][T12077] tipc: Resetting bearer [ 239.417077][T12075] tipc: Resetting bearer [ 239.490949][T12075] tipc: Disabling bearer [ 239.618363][T12086] lo speed is unknown, defaulting to 1000 [ 239.625919][T12086] wg1 speed is unknown, defaulting to 1000 [ 239.675102][T12102] nbd: must specify a size in bytes for the device [ 239.880956][T12098] syzkaller1: entered promiscuous mode [ 239.886957][T12098] syzkaller1: entered allmulticast mode [ 239.927288][T12116] xt_ecn: cannot match TCP bits for non-tcp packets [ 239.950672][T12118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.173616][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1518'. [ 240.277333][T12127] syzkaller0: entered promiscuous mode [ 240.282955][T12127] syzkaller0: entered allmulticast mode [ 240.518966][T12151] netlink: 'syz.4.1525': attribute type 11 has an invalid length. [ 240.789587][T12166] netlink: 'syz.1.1529': attribute type 21 has an invalid length. [ 240.981823][T12168] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20004 [ 241.624339][T12205] batadv_slave_0: entered promiscuous mode [ 241.800757][T12217] lo speed is unknown, defaulting to 1000 [ 241.809180][T12217] wg1 speed is unknown, defaulting to 1000 [ 242.192740][T12235] netlink: 'syz.1.1552': attribute type 1 has an invalid length. [ 242.286057][T12235] 8021q: adding VLAN 0 to HW filter on device bond7 [ 242.304609][T12201] batadv_slave_0: left promiscuous mode [ 242.433053][T12249] __nla_validate_parse: 10 callbacks suppressed [ 242.433073][T12249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1554'. [ 242.896855][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 242.904971][ C1] lec:lec_tx_timeout: lec0 [ 242.909697][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 242.918815][T12269] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1558'. [ 242.928685][T12269] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1558'. [ 242.959693][T12275] Unsupported ieee802154 address type: 0 [ 243.142139][T12283] syzkaller0: entered promiscuous mode [ 243.166051][T12291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1565'. [ 243.175288][T12283] syzkaller0: entered allmulticast mode [ 243.215476][T12293] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1563'. [ 243.621911][T12312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.721648][T12320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1573'. [ 243.745370][T12321] Unsupported ieee802154 address type: 0 [ 243.923389][T12329] žÿ: renamed from team_slave_1 (while UP) [ 244.050835][T12332] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1577'. [ 244.170140][T12341] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1577'. [ 244.259783][T12344] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.1579'. [ 244.550013][T12358] syzkaller1: entered promiscuous mode [ 244.568716][T12358] syzkaller1: entered allmulticast mode [ 244.834478][T12369] netlink: 'syz.3.1584': attribute type 58 has an invalid length. [ 244.847768][T12371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.883809][T12369] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1584'. [ 245.441503][T12387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.529463][T12387] hsr0: left allmulticast mode [ 245.534301][T12387] hsr_slave_0: left allmulticast mode [ 245.540465][T12387] hsr_slave_1: left allmulticast mode [ 245.601925][ T36] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.610663][ T36] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.625540][ T36] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.648370][ T36] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.669075][ T36] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.687083][ T36] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.695504][ T36] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.723320][ T36] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.830979][T12404] netlink: 'syz.1.1598': attribute type 1 has an invalid length. [ 245.905260][T12404] 8021q: adding VLAN 0 to HW filter on device bond8 [ 245.926569][T12408] vlan2: entered promiscuous mode [ 245.939603][T12400] netlink: 'syz.2.1596': attribute type 2 has an invalid length. [ 245.943744][T12408] bond8: entered promiscuous mode [ 245.953746][T12408] vlan2: entered allmulticast mode [ 245.959106][T12408] bond8: entered allmulticast mode [ 245.966242][T12410] gretap0: entered allmulticast mode [ 245.973034][T12414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.195969][T12430] netlink: 'syz.3.1605': attribute type 4 has an invalid length. [ 246.222904][T12430] netlink: 'syz.3.1605': attribute type 4 has an invalid length. [ 246.838823][T12456] netlink: 'syz.2.1614': attribute type 39 has an invalid length. [ 246.999068][T12460] lo speed is unknown, defaulting to 1000 [ 247.035891][T12460] wg1 speed is unknown, defaulting to 1000 [ 247.041096][T12461] lo speed is unknown, defaulting to 1000 [ 247.064379][T12461] wg1 speed is unknown, defaulting to 1000 [ 247.228502][T12471] m1Ie5nè‹Ò: entered promiscuous mode [ 247.498993][T12493] tipc: Resetting bearer [ 247.530278][T12495] tipc: Enabling of bearer rejected, already enabled [ 247.676224][T12494] tipc: Resetting bearer [ 247.707690][ T8830] tipc: Resetting bearer [ 247.720364][T12509] __nla_validate_parse: 9 callbacks suppressed [ 247.720383][T12509] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1628'. [ 247.797973][T12509] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1628'. [ 247.861225][T12517] xt_hashlimit: size too large, truncated to 1048576 [ 247.887712][T12517] xt_hashlimit: max too large, truncated to 1048576 [ 247.916875][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 247.925045][ C1] lec:lec_tx_timeout: lec0 [ 247.929689][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 247.936335][T12517] xt_hashlimit: size too large, truncated to 1048576 [ 247.943297][T12517] xt_hashlimit: max too large, truncated to 1048576 [ 247.951340][T12517] xt_hashlimit: size too large, truncated to 1048576 [ 247.969372][T12521] netlink: 'syz.4.1631': attribute type 3 has an invalid length. [ 247.982235][T12517] xt_hashlimit: max too large, truncated to 1048576 [ 247.998049][T12517] xt_hashlimit: size too large, truncated to 1048576 [ 248.014414][T12517] xt_hashlimit: max too large, truncated to 1048576 [ 248.028644][T12517] xt_hashlimit: size too large, truncated to 1048576 [ 248.035423][T12517] xt_hashlimit: max too large, truncated to 1048576 [ 248.053783][T12517] xt_hashlimit: size too large, truncated to 1048576 [ 248.079696][T12517] xt_hashlimit: max too large, truncated to 1048576 [ 248.088310][T12517] xt_hashlimit: size too large, truncated to 1048576 [ 248.095125][T12517] xt_hashlimit: max too large, truncated to 1048576 [ 248.105270][T12517] xt_hashlimit: size too large, truncated to 1048576 [ 248.112461][T12517] xt_hashlimit: max too large, truncated to 1048576 [ 248.122177][T12517] xt_hashlimit: size too large, truncated to 1048576 [ 248.169927][T12517] xt_hashlimit: max too large, truncated to 1048576 [ 248.191375][T12517] xt_hashlimit: size too large, truncated to 1048576 [ 248.222958][T12517] xt_hashlimit: max too large, truncated to 1048576 [ 248.245734][T12529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1634'. [ 248.283378][T12529] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1634'. [ 248.676060][T12549] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1639'. [ 248.767378][T12555] vlan2: entered promiscuous mode [ 248.772780][T12555] gretap0: entered promiscuous mode [ 249.025342][T12566] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1646'. [ 249.053522][T12540] netlink: 'syz.1.1636': attribute type 1 has an invalid length. [ 249.167569][T12540] 8021q: adding VLAN 0 to HW filter on device bond9 [ 249.482829][T12583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1649'. [ 249.690870][T12598] delete_channel: no stack [ 249.876208][T12606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1656'. [ 249.887065][T12607] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1656'. [ 249.925991][T12606] openvswitch: netlink: Message has 2 unknown bytes. [ 250.061819][T12616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1659'. [ 250.276887][T12628] bond0: entered promiscuous mode [ 250.296994][T12628] bond_slave_0: entered promiscuous mode [ 250.302919][T12628] bond_slave_1: entered promiscuous mode [ 250.309544][T12627] netlink: 'syz.3.1663': attribute type 4 has an invalid length. [ 250.318826][T12628] batadv0: entered promiscuous mode [ 250.326968][T12628] debugfs: 'hsr1' already exists in 'hsr' [ 250.334455][T12628] Cannot create hsr debugfs directory [ 250.340267][T12628] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 250.367191][ T5885] IPVS: starting estimator thread 0... [ 250.384567][T12628] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 250.410024][T12628] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 250.437451][T12627] .`: renamed from bond0 [ 250.452000][T12630] batadv_slave_0: Caught tx_queue_len zero misconfig [ 250.458275][T12633] IPVS: using max 27 ests per chain, 64800 per kthread [ 250.705553][T12637] syzkaller1: entered promiscuous mode [ 250.726973][T12637] syzkaller1: entered allmulticast mode [ 250.810274][T12644] syzkaller1: entered promiscuous mode [ 250.815847][T12644] syzkaller1: entered allmulticast mode [ 251.231251][T12667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.401957][T12641] 8021q: adding VLAN 0 to HW filter on device bond6 [ 251.440035][T12686] netlink: 'syz.1.1678': attribute type 3 has an invalid length. [ 251.469195][T12648] macsec1: entered promiscuous mode [ 251.474556][T12648] bond6: entered promiscuous mode [ 251.482406][T12648] bond6: left promiscuous mode [ 251.503373][T12688] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 251.632684][T12687] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 251.712783][T12696] netlink: 'syz.0.1680': attribute type 1 has an invalid length. [ 251.730910][T12699] lo speed is unknown, defaulting to 1000 [ 251.771265][T12699] wg1 speed is unknown, defaulting to 1000 [ 252.625157][T12733] pim6reg1: entered allmulticast mode [ 252.827478][T12741] lo speed is unknown, defaulting to 1000 [ 252.846626][T12741] wg1 speed is unknown, defaulting to 1000 [ 252.936835][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 252.944889][ C1] lec:lec_tx_timeout: lec0 [ 252.950889][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 253.810348][T12783] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 254.322651][T12810] xt_TPROXY: Can be used only with -p tcp or -p udp [ 254.417068][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 254.447758][T12813] __nla_validate_parse: 8 callbacks suppressed [ 254.447777][T12813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1710'. [ 254.450594][T12820] Unsupported ieee802154 address type: 0 [ 254.461449][T12813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1710'. [ 254.663303][T12831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1714'. [ 254.678681][T12834] netlink: 'syz.0.1716': attribute type 1 has an invalid length. [ 254.691001][T12834] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1716'. [ 254.813018][T12844] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1717'. [ 255.156146][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1723'. [ 255.187387][T12866] Unsupported ieee802154 address type: 0 [ 255.219579][T12861] tipc: Enabled bearer , priority 0 [ 255.238128][T12861] syzkaller0: entered promiscuous mode [ 255.243650][T12861] syzkaller0: entered allmulticast mode [ 255.478211][T12886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1725'. [ 255.569105][T12861] tipc: Resetting bearer [ 255.574628][T12889] block nbd2: not configured, cannot reconfigure [ 255.688371][T12858] tipc: Resetting bearer [ 255.701699][ T11] block nbd1: Possible stuck request ffff888025f10000: control (read@0,1024B). Runtime 150 seconds [ 255.712602][ T11] block nbd1: Possible stuck request ffff888025f10200: control (read@1024,1024B). Runtime 150 seconds [ 255.723741][ T11] block nbd1: Possible stuck request ffff888025f10400: control (read@2048,1024B). Runtime 150 seconds [ 255.725816][T12858] tipc: Disabling bearer [ 255.738850][ T11] block nbd1: Possible stuck request ffff888025f10600: control (read@3072,1024B). Runtime 150 seconds [ 255.753020][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.948649][T12894] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1730'. [ 256.022996][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 256.059749][T12898] netlink: 'syz.1.1731': attribute type 10 has an invalid length. [ 256.110875][T12899] netlink: 'syz.1.1731': attribute type 10 has an invalid length. [ 256.166289][T12898] team0: Port device dummy0 added [ 256.205129][T12899] team0: Port device dummy0 removed [ 256.228391][T12899] dummy0: entered promiscuous mode [ 256.238620][T12899] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 256.346992][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 256.669915][T12933] tipc: Enabling of bearer rejected, failed to enable media [ 256.933528][T12950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1746'. [ 257.031701][T12955] syzkaller0: entered promiscuous mode [ 257.037349][T12955] syzkaller0: entered allmulticast mode [ 257.539475][T12957] geneve4: entered promiscuous mode [ 257.561545][T12957] geneve4: entered allmulticast mode [ 257.603174][T12984] geneve3: entered promiscuous mode [ 257.636391][ T6250] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 257.666967][ T6250] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 257.676632][ T6249] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 257.702811][ T6249] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 257.739675][T12981] lo speed is unknown, defaulting to 1000 [ 257.747587][T12981] wg1 speed is unknown, defaulting to 1000 [ 257.842477][T12994] veth1_vlan: entered allmulticast mode [ 257.892386][T12994] tipc: Enabled bearer , priority 0 [ 257.914772][T12992] tipc: Disabling bearer [ 257.966935][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 257.975035][ C1] lec:lec_tx_timeout: lec0 [ 257.980195][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 258.592751][T13038] netlink: 'syz.1.1770': attribute type 2 has an invalid length. [ 258.603627][T13038] netlink: 'syz.1.1770': attribute type 1 has an invalid length. [ 259.215755][T13086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.257096][T13086] netlink: 'syz.1.1782': attribute type 10 has an invalid length. [ 259.295834][T13086] bond0: (slave dummy0): Releasing backup interface [ 259.307877][T13086] dummy0: left promiscuous mode [ 259.332025][T13086] team0: Port device dummy0 added [ 259.343694][T13089] Bluetooth: MGMT ver 1.23 [ 259.463311][T13100] __nla_validate_parse: 13 callbacks suppressed [ 259.463330][T13100] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1787'. [ 259.575741][T13108] netlink: 'syz.3.1791': attribute type 1 has an invalid length. [ 259.604736][T13109] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1788'. [ 259.649840][T13108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.673832][T13111] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1789'. [ 259.718111][T13121] tipc: Enabling not permitted [ 259.738039][T13121] tipc: Enabling of bearer rejected, failed to enable media [ 259.936063][T13132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1795'. [ 259.948828][T13132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1795'. [ 259.958111][T13132] netlink: 'syz.2.1795': attribute type 18 has an invalid length. [ 260.001358][T13137] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 260.148119][T13147] sctp: [Deprecated]: syz.1.1799 (pid 13147) Use of int in maxseg socket option. [ 260.148119][T13147] Use struct sctp_assoc_value instead [ 260.180384][T13147] netlink: 'syz.1.1799': attribute type 10 has an invalid length. [ 260.190457][T13154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1800'. [ 260.222187][T13147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.258818][T13147] batadv0: entered promiscuous mode [ 260.278861][T13147] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 260.331664][T13161] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 260.448206][T13168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1806'. [ 260.747916][T13189] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1811'. [ 260.978201][T13200] netlink: 'syz.2.1814': attribute type 13 has an invalid length. [ 261.352636][T13220] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1820'. [ 261.653426][T13232] netlink: 'syz.0.1824': attribute type 11 has an invalid length. [ 261.697461][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'. [ 261.704062][T13234] netlink: 'syz.1.1826': attribute type 1 has an invalid length. [ 261.885978][T13238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.908591][T13238] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.935942][T13238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 261.962663][T13247] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 262.015509][T13251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.044455][T13251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.094773][T13256] lo speed is unknown, defaulting to 1000 [ 262.141750][T13256] wg1 speed is unknown, defaulting to 1000 [ 262.166167][T13250] lo speed is unknown, defaulting to 1000 [ 262.306925][T13250] wg1 speed is unknown, defaulting to 1000 [ 262.806379][T13301] lo speed is unknown, defaulting to 1000 [ 262.812465][T13301] lo speed is unknown, defaulting to 1000 [ 262.819120][T13301] lo speed is unknown, defaulting to 1000 [ 262.868612][T13301] infiniband s¿z0: RDMA CMA: cma_listen_on_dev, error -98 [ 262.986830][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 262.994881][ C1] lec:lec_tx_timeout: lec0 [ 262.999502][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 263.104565][T13301] lo speed is unknown, defaulting to 1000 [ 263.112625][T13315] erspan0: left allmulticast mode [ 263.127272][T13315] erspan0: left promiscuous mode [ 263.132568][T13315] bridge5: port 1(erspan0) entered disabled state [ 263.152348][T13301] lo speed is unknown, defaulting to 1000 [ 263.175097][T13301] lo speed is unknown, defaulting to 1000 [ 263.242569][T13301] lo speed is unknown, defaulting to 1000 [ 263.258902][T13301] lo speed is unknown, defaulting to 1000 [ 263.266681][T13301] lo speed is unknown, defaulting to 1000 [ 263.415402][T13301] lo speed is unknown, defaulting to 1000 [ 263.493353][T13342] lo: Caught tx_queue_len zero misconfig [ 263.543848][T13344] FAULT_INJECTION: forcing a failure. [ 263.543848][T13344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.608495][T13344] CPU: 0 UID: 0 PID: 13344 Comm: syz.0.1859 Not tainted syzkaller #0 PREEMPT(full) [ 263.608521][T13344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 263.608533][T13344] Call Trace: [ 263.608541][T13344] [ 263.608550][T13344] dump_stack_lvl+0xe8/0x150 [ 263.608584][T13344] should_fail_ex+0x412/0x560 [ 263.608617][T13344] _copy_from_iter+0x1d3/0x1670 [ 263.608651][T13344] ? sock_alloc_send_pskb+0x896/0x990 [ 263.608683][T13344] ? __pfx__copy_from_iter+0x10/0x10 [ 263.608721][T13344] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 263.608749][T13344] skb_copy_datagram_from_iter+0xf5/0x710 [ 263.608777][T13344] ? get_pid+0x52/0x80 [ 263.608797][T13344] ? skb_put+0x11b/0x210 [ 263.608821][T13344] unix_dgram_sendmsg+0x521/0x18e0 [ 263.608856][T13344] ? aa_file_perm+0x50e/0x15e0 [ 263.608877][T13344] ? __lock_acquire+0x6b5/0x2cf0 [ 263.608900][T13344] ? aa_file_perm+0x192/0x15e0 [ 263.608927][T13344] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 263.608952][T13344] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 263.608985][T13344] ? __pfx_aa_file_perm+0x10/0x10 [ 263.609029][T13344] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 263.609083][T13344] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 263.609111][T13344] sock_write_iter+0x49b/0x4f0 [ 263.609142][T13344] ? __pfx_sock_write_iter+0x10/0x10 [ 263.609180][T13344] ? bpf_lsm_file_permission+0x9/0x20 [ 263.609206][T13344] ? security_file_permission+0x75/0x260 [ 263.609240][T13344] vfs_write+0x61d/0xb90 [ 263.609272][T13344] ? __pfx_vfs_write+0x10/0x10 [ 263.609305][T13344] ? __fget_files+0x2a/0x420 [ 263.609345][T13344] ksys_write+0x150/0x270 [ 263.609370][T13344] ? __pfx_ksys_write+0x10/0x10 [ 263.609405][T13344] do_syscall_64+0x14d/0xf80 [ 263.609426][T13344] ? trace_irq_disable+0x3b/0x150 [ 263.609456][T13344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.609477][T13344] ? clear_bhb_loop+0x40/0x90 [ 263.609503][T13344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.609523][T13344] RIP: 0033:0x7f721339c799 [ 263.609560][T13344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.609581][T13344] RSP: 002b:00007f72141c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 263.609604][T13344] RAX: ffffffffffffffda RBX: 00007f7213615fa0 RCX: 00007f721339c799 [ 263.609621][T13344] RDX: 0000000000000004 RSI: 00002000000002c0 RDI: 0000000000000003 [ 263.609635][T13344] RBP: 00007f72141c4090 R08: 0000000000000000 R09: 0000000000000000 [ 263.609648][T13344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.609660][T13344] R13: 00007f7213616038 R14: 00007f7213615fa0 R15: 00007ffdec08ece8 [ 263.609694][T13344] [ 264.569871][T13354] lo speed is unknown, defaulting to 1000 [ 264.577493][T13369] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 264.590050][T13354] wg1 speed is unknown, defaulting to 1000 [ 264.715503][T13375] __nla_validate_parse: 9 callbacks suppressed [ 264.715522][T13375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1868'. [ 264.762126][T13377] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1869'. [ 264.777275][T13354] lo speed is unknown, defaulting to 1000 [ 264.822693][T13377] openvswitch: netlink: Flow actions attr not present in new flow. [ 265.157932][T13405] FAULT_INJECTION: forcing a failure. [ 265.157932][T13405] name failslab, interval 1, probability 0, space 0, times 0 [ 265.171024][T13405] CPU: 1 UID: 0 PID: 13405 Comm: syz.0.1873 Not tainted syzkaller #0 PREEMPT(full) [ 265.171050][T13405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 265.171064][T13405] Call Trace: [ 265.171072][T13405] [ 265.171081][T13405] dump_stack_lvl+0xe8/0x150 [ 265.171114][T13405] should_fail_ex+0x412/0x560 [ 265.171150][T13405] should_failslab+0xa8/0x100 [ 265.171178][T13405] __kmalloc_noprof+0xe8/0x760 [ 265.171201][T13405] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 265.171241][T13405] tomoyo_realpath_from_path+0xe3/0x5d0 [ 265.171284][T13405] ? tomoyo_path_number_perm+0x219/0x630 [ 265.171311][T13405] tomoyo_path_number_perm+0x246/0x630 [ 265.171341][T13405] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 265.171372][T13405] ? __lock_acquire+0x6b5/0x2cf0 [ 265.171411][T13405] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 265.171457][T13405] ? __fget_files+0x2a/0x420 [ 265.171491][T13405] ? __fget_files+0x2a/0x420 [ 265.171527][T13405] ? __fget_files+0x3a0/0x420 [ 265.171556][T13405] ? __fget_files+0x2a/0x420 [ 265.171590][T13405] security_file_ioctl+0xc3/0x2a0 [ 265.171619][T13405] __se_sys_ioctl+0x47/0x170 [ 265.171646][T13405] do_syscall_64+0x14d/0xf80 [ 265.171668][T13405] ? trace_irq_disable+0x3b/0x150 [ 265.171697][T13405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.171717][T13405] ? clear_bhb_loop+0x40/0x90 [ 265.171743][T13405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.171764][T13405] RIP: 0033:0x7f721339c799 [ 265.171783][T13405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.171801][T13405] RSP: 002b:00007f72141c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.171823][T13405] RAX: ffffffffffffffda RBX: 00007f7213615fa0 RCX: 00007f721339c799 [ 265.171838][T13405] RDX: 0000200000000040 RSI: 00000000800448d4 RDI: 0000000000000004 [ 265.171853][T13405] RBP: 00007f72141c4090 R08: 0000000000000000 R09: 0000000000000000 [ 265.171866][T13405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.171878][T13405] R13: 00007f7213616038 R14: 00007f7213615fa0 R15: 00007ffdec08ece8 [ 265.171912][T13405] [ 265.171921][T13405] ERROR: Out of memory at tomoyo_realpath_from_path. [ 265.422919][T13408] lo speed is unknown, defaulting to 1000 [ 265.453506][T13412] netlink: 'syz.1.1879': attribute type 1 has an invalid length. [ 265.578636][T13408] wg1 speed is unknown, defaulting to 1000 [ 265.615462][T13408] lo speed is unknown, defaulting to 1000 [ 265.804439][T13430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1882'. [ 265.838437][T13433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1884'. [ 265.862618][T13433] bond0: ARP target 170.170.170.170 is already present [ 265.877201][T13433] bond0: option arp_ip_target: invalid value (2863311530) [ 265.979769][T13440] netlink: 'syz.4.1886': attribute type 2 has an invalid length. [ 266.068736][T13443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1887'. [ 266.149283][T13447] syzkaller0: entered promiscuous mode [ 266.154888][T13447] syzkaller0: entered allmulticast mode [ 266.860762][T13452] lo speed is unknown, defaulting to 1000 [ 266.868556][T13452] wg1 speed is unknown, defaulting to 1000 [ 266.875730][T13452] lo speed is unknown, defaulting to 1000 [ 267.189422][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1890'. [ 267.198713][T13459] netlink: 'syz.4.1890': attribute type 30 has an invalid length. [ 267.206556][T13459] netlink: 'syz.4.1890': attribute type 29 has an invalid length. [ 267.215428][T13459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1890'. [ 268.007087][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 268.015173][ C1] lec:lec_tx_timeout: lec0 [ 268.020575][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 270.172867][ T5192] udevd[5192]: worker [5845] /devices/virtual/block/nbd1 is taking a long time [ 273.026874][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 273.034928][ C1] lec:lec_tx_timeout: lec0 [ 273.039524][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 278.817004][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 278.825070][ C1] lec:lec_tx_timeout: lec0 [ 278.830084][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 281.479986][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 281.489766][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 281.498023][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 281.506273][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 281.527211][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.607796][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 281.622890][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 281.633850][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 281.641635][ T5832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 281.642431][T13464] lo speed is unknown, defaulting to 1000 [ 281.657517][ T5832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 281.665597][ T5844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 281.673870][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 281.674993][T13464] wg1 speed is unknown, defaulting to 1000 [ 281.689560][ T5832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 281.689712][T13464] lo speed is unknown, defaulting to 1000 [ 281.698835][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 281.707913][ T5844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 281.732052][ T5834] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 281.740802][ T5834] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 281.752709][ T5834] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 281.765633][ T5844] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 281.776616][ T5844] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 281.862293][T13467] lo speed is unknown, defaulting to 1000 [ 281.885897][T13466] lo speed is unknown, defaulting to 1000 [ 281.892132][T13467] wg1 speed is unknown, defaulting to 1000 [ 281.899664][T13470] lo speed is unknown, defaulting to 1000 [ 281.914705][T13466] wg1 speed is unknown, defaulting to 1000 [ 281.928249][T13467] lo speed is unknown, defaulting to 1000 [ 281.939158][T13470] wg1 speed is unknown, defaulting to 1000 [ 281.952734][T13466] lo speed is unknown, defaulting to 1000 [ 281.968813][T13470] lo speed is unknown, defaulting to 1000 [ 282.105806][T13464] chnl_net:caif_netlink_parms(): no params data found [ 282.336254][T13464] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.345294][T13464] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.353442][T13464] bridge_slave_0: entered allmulticast mode [ 282.361331][T13464] bridge_slave_0: entered promiscuous mode [ 282.392462][T13464] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.400730][T13464] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.408423][T13464] bridge_slave_1: entered allmulticast mode [ 282.416256][T13464] bridge_slave_1: entered promiscuous mode [ 282.467582][T13470] chnl_net:caif_netlink_parms(): no params data found [ 282.552162][T13464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.567670][T13466] chnl_net:caif_netlink_parms(): no params data found [ 282.615584][ T5844] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 282.619481][T13464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.632969][ T5844] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 282.643428][ T5844] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 282.651650][ T5844] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 282.668305][ T5844] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 282.753747][T13467] chnl_net:caif_netlink_parms(): no params data found [ 282.774974][T13464] team0: Port device team_slave_0 added [ 282.784952][T13464] team0: Port device team_slave_1 added [ 282.894209][T13470] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.902232][T13470] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.909814][T13470] bridge_slave_0: entered allmulticast mode [ 282.917639][T13470] bridge_slave_0: entered promiscuous mode [ 282.924954][T13488] lo speed is unknown, defaulting to 1000 [ 282.928104][T13470] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.938402][T13470] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.945614][T13470] bridge_slave_1: entered allmulticast mode [ 282.953302][T13470] bridge_slave_1: entered promiscuous mode [ 282.961071][T13464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.968378][T13464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.994457][T13464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.027763][T13488] wg1 speed is unknown, defaulting to 1000 [ 283.050232][T13464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.057781][T13464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.083774][T13464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.105046][T13488] lo speed is unknown, defaulting to 1000 [ 283.139735][T13466] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.147344][T13466] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.154669][T13466] bridge_slave_0: entered allmulticast mode [ 283.162223][T13466] bridge_slave_0: entered promiscuous mode [ 283.174608][T13466] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.182673][T13466] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.190003][T13466] bridge_slave_1: entered allmulticast mode [ 283.197490][T13466] bridge_slave_1: entered promiscuous mode [ 283.219926][T13470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.232499][T13470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.263401][T13467] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.270894][T13467] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.278441][T13467] bridge_slave_0: entered allmulticast mode [ 283.285680][T13467] bridge_slave_0: entered promiscuous mode [ 283.294208][T13467] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.301635][T13467] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.309034][T13467] bridge_slave_1: entered allmulticast mode [ 283.316369][T13467] bridge_slave_1: entered promiscuous mode [ 283.395526][T13466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.427442][T13470] team0: Port device team_slave_0 added [ 283.440369][T13466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.455476][T13464] hsr_slave_0: entered promiscuous mode [ 283.462380][T13464] hsr_slave_1: entered promiscuous mode [ 283.468641][T13464] debugfs: 'hsr0' already exists in 'hsr' [ 283.474381][T13464] Cannot create hsr debugfs directory [ 283.485218][T13467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.497217][T13470] team0: Port device team_slave_1 added [ 283.531462][T13467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.571611][T13466] team0: Port device team_slave_0 added [ 283.611867][T13466] team0: Port device team_slave_1 added [ 283.627088][ T5844] Bluetooth: hci5: command tx timeout [ 283.656417][T13470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.663666][T13470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.689993][T13470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.703105][T13470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.710193][T13470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.736232][T13470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.777199][ T5836] Bluetooth: hci6: command tx timeout [ 283.778738][T13467] team0: Port device team_slave_0 added [ 283.784445][ T5844] Bluetooth: hci7: command tx timeout [ 283.815232][T13466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.822393][T13466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.848974][T13466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.859876][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 283.859897][ T5844] Bluetooth: hci8: command tx timeout [ 283.859940][ C1] lec:lec_tx_timeout: lec0 [ 283.868421][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 283.896054][T13467] team0: Port device team_slave_1 added [ 283.919137][T13470] hsr_slave_0: entered promiscuous mode [ 283.926550][T13470] hsr_slave_1: entered promiscuous mode [ 283.933117][T13470] debugfs: 'hsr0' already exists in 'hsr' [ 283.938984][T13470] Cannot create hsr debugfs directory [ 283.945159][T13466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.952964][T13466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.979335][T13466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.016629][T13467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.025111][T13467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.051303][T13467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.090865][T13467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.098256][T13467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.124512][T13467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.195156][T13466] hsr_slave_0: entered promiscuous mode [ 284.202049][T13466] hsr_slave_1: entered promiscuous mode [ 284.208495][T13466] debugfs: 'hsr0' already exists in 'hsr' [ 284.214235][T13466] Cannot create hsr debugfs directory [ 284.379754][T13467] hsr_slave_0: entered promiscuous mode [ 284.386152][T13467] hsr_slave_1: entered promiscuous mode [ 284.392957][T13467] debugfs: 'hsr0' already exists in 'hsr' [ 284.399389][T13467] Cannot create hsr debugfs directory [ 284.405137][T13488] chnl_net:caif_netlink_parms(): no params data found [ 284.730785][T13488] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.740106][T13488] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.747121][ T5844] Bluetooth: hci9: command tx timeout [ 284.753071][T13488] bridge_slave_0: entered allmulticast mode [ 284.760830][T13488] bridge_slave_0: entered promiscuous mode [ 284.787684][T13488] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.794828][T13488] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.802577][T13488] bridge_slave_1: entered allmulticast mode [ 284.810030][T13488] bridge_slave_1: entered promiscuous mode [ 284.884248][T13488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.896559][T13488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.958985][T13488] team0: Port device team_slave_0 added [ 284.973616][T13488] team0: Port device team_slave_1 added [ 285.011560][T13488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.018750][T13488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.045340][T13488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.071415][T13488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.078863][T13488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.105216][T13488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.170062][T13488] hsr_slave_0: entered promiscuous mode [ 285.176429][T13488] hsr_slave_1: entered promiscuous mode [ 285.183551][T13488] debugfs: 'hsr0' already exists in 'hsr' [ 285.189603][T13488] Cannot create hsr debugfs directory [ 285.697133][ T5844] Bluetooth: hci5: command tx timeout [ 285.781497][ T11] block nbd1: Possible stuck request ffff888025f10000: control (read@0,1024B). Runtime 180 seconds [ 285.792416][ T11] block nbd1: Possible stuck request ffff888025f10200: control (read@1024,1024B). Runtime 180 seconds [ 285.803553][ T11] block nbd1: Possible stuck request ffff888025f10400: control (read@2048,1024B). Runtime 180 seconds [ 285.814597][ T11] block nbd1: Possible stuck request ffff888025f10600: control (read@3072,1024B). Runtime 180 seconds [ 285.857874][ T5844] Bluetooth: hci7: command tx timeout [ 285.858395][ T5836] Bluetooth: hci6: command tx timeout [ 285.937029][ T5836] Bluetooth: hci8: command tx timeout [ 286.817007][ T5836] Bluetooth: hci9: command tx timeout [ 287.057038][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 287.776935][ T5836] Bluetooth: hci5: command tx timeout [ 287.937276][ T5836] Bluetooth: hci7: command tx timeout [ 287.937284][ T5844] Bluetooth: hci6: command tx timeout [ 288.017091][ T5836] Bluetooth: hci8: command tx timeout [ 288.407000][ T5192] udevd[5192]: worker [5845] /devices/virtual/block/nbd1 timeout; kill it [ 288.415645][ T5192] udevd[5192]: seq 11444 '/devices/virtual/block/nbd1' killed [ 288.876878][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 288.884926][ C1] lec:lec_tx_timeout: lec0 [ 288.889639][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 288.897070][ T5836] Bluetooth: hci9: command tx timeout [ 289.857013][ T5836] Bluetooth: hci5: command tx timeout [ 290.017241][ T5836] Bluetooth: hci6: command tx timeout [ 290.019733][ T5844] Bluetooth: hci7: command tx timeout [ 290.097095][ T5844] Bluetooth: hci8: command tx timeout [ 290.977101][ T5844] Bluetooth: hci9: command tx timeout [ 293.896868][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 293.904993][ C1] lec:lec_tx_timeout: lec0 [ 293.909724][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 296.657109][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 298.916871][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 298.924912][ C1] lec:lec_tx_timeout: lec0 [ 298.929573][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 303.937081][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 303.945121][ C1] lec:lec_tx_timeout: lec0 [ 303.949932][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 308.956979][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 308.965119][ C1] lec:lec_tx_timeout: lec0 [ 308.969734][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 313.976869][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 313.984922][ C1] lec:lec_tx_timeout: lec0 [ 313.989566][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 315.858134][ T11] block nbd1: Possible stuck request ffff888025f10000: control (read@0,1024B). Runtime 210 seconds [ 315.868993][ T11] block nbd1: Possible stuck request ffff888025f10200: control (read@1024,1024B). Runtime 210 seconds [ 315.880112][ T11] block nbd1: Possible stuck request ffff888025f10400: control (read@2048,1024B). Runtime 210 seconds [ 315.891555][ T11] block nbd1: Possible stuck request ffff888025f10600: control (read@3072,1024B). Runtime 210 seconds [ 317.141865][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.997063][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 319.005105][ C1] lec:lec_tx_timeout: lec0 [ 319.009762][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 324.016871][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 324.024928][ C1] lec:lec_tx_timeout: lec0 [ 324.029539][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 327.378745][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 329.036856][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 329.044896][ C1] lec:lec_tx_timeout: lec0 [ 329.049610][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 335.056846][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6010 ms [ 335.064921][ C1] lec:lec_tx_timeout: lec0 [ 335.069539][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 340.816827][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 340.824882][ C1] lec:lec_tx_timeout: lec0 [ 340.829894][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 342.043505][ T5832] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 342.053536][ T5836] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 342.053601][ T5832] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 342.069733][ T5836] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 342.069901][ T5832] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 342.084671][ T5832] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 342.088236][ T5836] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 342.105110][ T5836] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 342.113143][ T5836] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 342.121719][ T5836] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 342.187549][T13514] lo speed is unknown, defaulting to 1000 [ 342.196645][T13514] wg1 speed is unknown, defaulting to 1000 [ 342.206038][T13514] lo speed is unknown, defaulting to 1000 [ 342.247800][ T5836] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 342.258022][ T5836] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 342.272629][T13515] lo speed is unknown, defaulting to 1000 [ 342.279603][ T5836] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 342.288089][ T5836] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 342.295820][ T5836] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 342.326166][T13515] wg1 speed is unknown, defaulting to 1000 [ 342.360675][T13515] lo speed is unknown, defaulting to 1000 [ 342.404983][ T5834] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 342.419762][ T5834] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 342.427955][ T5834] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 342.439152][ T5834] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 342.447693][ T5834] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 342.490678][T13518] lo speed is unknown, defaulting to 1000 [ 342.514211][T13518] wg1 speed is unknown, defaulting to 1000 [ 342.532640][T13514] chnl_net:caif_netlink_parms(): no params data found [ 342.540062][T13518] lo speed is unknown, defaulting to 1000 [ 342.597973][T13521] lo speed is unknown, defaulting to 1000 [ 342.628238][T13521] wg1 speed is unknown, defaulting to 1000 [ 342.665962][T13521] lo speed is unknown, defaulting to 1000 [ 342.775733][T13514] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.783251][T13514] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.791924][T13514] bridge_slave_0: entered allmulticast mode [ 342.800158][T13514] bridge_slave_0: entered promiscuous mode [ 342.820925][T13514] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.828738][T13514] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.835916][T13514] bridge_slave_1: entered allmulticast mode [ 342.843631][T13514] bridge_slave_1: entered promiscuous mode [ 342.891790][T13515] chnl_net:caif_netlink_parms(): no params data found [ 342.969817][T13514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.007821][T13514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.054102][T13514] team0: Port device team_slave_0 added [ 343.064457][T13514] team0: Port device team_slave_1 added [ 343.104792][T13514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.111885][T13514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.138534][T13514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.164666][T13518] chnl_net:caif_netlink_parms(): no params data found [ 343.184682][T13514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.191722][T13514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.218008][T13514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.263280][T13515] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.270881][T13515] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.278930][T13515] bridge_slave_0: entered allmulticast mode [ 343.286232][T13515] bridge_slave_0: entered promiscuous mode [ 343.331079][T13515] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.338700][T13515] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.347290][T13515] bridge_slave_1: entered allmulticast mode [ 343.354501][T13515] bridge_slave_1: entered promiscuous mode [ 343.403679][T13514] hsr_slave_0: entered promiscuous mode [ 343.410635][T13514] hsr_slave_1: entered promiscuous mode [ 343.417606][T13514] debugfs: 'hsr0' already exists in 'hsr' [ 343.423358][T13514] Cannot create hsr debugfs directory [ 343.514527][ T5836] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 343.523870][ T5836] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 343.526228][T13515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.541095][ T5836] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 343.554751][ T5836] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 343.563064][ T5836] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 343.596645][T13515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.663848][T13518] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.677276][T13518] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.684697][T13518] bridge_slave_0: entered allmulticast mode [ 343.693117][T13518] bridge_slave_0: entered promiscuous mode [ 343.725842][T13515] team0: Port device team_slave_0 added [ 343.737933][T13518] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.745090][T13518] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.752505][T13518] bridge_slave_1: entered allmulticast mode [ 343.759785][T13518] bridge_slave_1: entered promiscuous mode [ 343.778059][T13521] chnl_net:caif_netlink_parms(): no params data found [ 343.791303][T13515] team0: Port device team_slave_1 added [ 343.797113][T13542] lo speed is unknown, defaulting to 1000 [ 343.835792][T13542] wg1 speed is unknown, defaulting to 1000 [ 343.879956][T13542] lo speed is unknown, defaulting to 1000 [ 343.895668][T13515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.902985][T13515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.929344][T13515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.943244][T13518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.971117][T13515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.978293][T13515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.004494][T13515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.022803][T13518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.120354][T13518] team0: Port device team_slave_0 added [ 344.152644][T13521] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.160410][T13521] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.168174][T13521] bridge_slave_0: entered allmulticast mode [ 344.175567][T13521] bridge_slave_0: entered promiscuous mode [ 344.181550][ T5834] Bluetooth: hci11: command tx timeout [ 344.183025][ T5834] Bluetooth: hci10: command tx timeout [ 344.196678][T13518] team0: Port device team_slave_1 added [ 344.224650][T13521] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.232050][T13521] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.239547][T13521] bridge_slave_1: entered allmulticast mode [ 344.247719][T13521] bridge_slave_1: entered promiscuous mode [ 344.314992][T13518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.322155][T13518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.348368][ T5836] Bluetooth: hci12: command tx timeout [ 344.348367][T13518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.380595][T13515] hsr_slave_0: entered promiscuous mode [ 344.387912][T13515] hsr_slave_1: entered promiscuous mode [ 344.394095][T13515] debugfs: 'hsr0' already exists in 'hsr' [ 344.399981][T13515] Cannot create hsr debugfs directory [ 344.416560][T13518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.424095][T13518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.450310][T13518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.489553][T13521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.498744][ T5836] Bluetooth: hci13: command tx timeout [ 344.545046][T13521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.649161][T13521] team0: Port device team_slave_0 added [ 344.684336][T13521] team0: Port device team_slave_1 added [ 344.710798][T13518] hsr_slave_0: entered promiscuous mode [ 344.718453][T13518] hsr_slave_1: entered promiscuous mode [ 344.724580][T13518] debugfs: 'hsr0' already exists in 'hsr' [ 344.730438][T13518] Cannot create hsr debugfs directory [ 344.779312][T13542] chnl_net:caif_netlink_parms(): no params data found [ 344.809506][T13521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.816476][T13521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.844433][T13521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.905167][T13521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.912296][T13521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.938633][T13521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.141721][T13542] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.149032][T13542] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.156181][T13542] bridge_slave_0: entered allmulticast mode [ 345.163760][T13542] bridge_slave_0: entered promiscuous mode [ 345.177626][T13521] hsr_slave_0: entered promiscuous mode [ 345.184317][T13521] hsr_slave_1: entered promiscuous mode [ 345.190519][T13521] debugfs: 'hsr0' already exists in 'hsr' [ 345.196259][T13521] Cannot create hsr debugfs directory [ 345.232355][T13542] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.239718][T13542] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.247264][T13542] bridge_slave_1: entered allmulticast mode [ 345.254515][T13542] bridge_slave_1: entered promiscuous mode [ 345.357700][T13542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.382551][T13542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.440365][T13542] team0: Port device team_slave_0 added [ 345.462538][T13542] team0: Port device team_slave_1 added [ 345.516642][T13542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.524616][T13542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.551034][T13542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.575189][T13542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.582369][T13542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.608644][T13542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.619418][ T5836] Bluetooth: hci14: command tx timeout [ 345.668187][T13542] hsr_slave_0: entered promiscuous mode [ 345.674927][T13542] hsr_slave_1: entered promiscuous mode [ 345.684169][T13542] debugfs: 'hsr0' already exists in 'hsr' [ 345.690203][T13542] Cannot create hsr debugfs directory [ 345.866978][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 345.875017][ C1] lec:lec_tx_timeout: lec0 [ 345.879783][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 345.937431][ T11] block nbd1: Possible stuck request ffff888025f10000: control (read@0,1024B). Runtime 240 seconds [ 345.948224][ T11] block nbd1: Possible stuck request ffff888025f10200: control (read@1024,1024B). Runtime 240 seconds [ 345.959370][ T11] block nbd1: Possible stuck request ffff888025f10400: control (read@2048,1024B). Runtime 240 seconds [ 345.970758][ T11] block nbd1: Possible stuck request ffff888025f10600: control (read@3072,1024B). Runtime 240 seconds [ 346.257467][ T5836] Bluetooth: hci10: command tx timeout [ 346.257475][ T5834] Bluetooth: hci11: command tx timeout [ 346.417179][ T5836] Bluetooth: hci12: command tx timeout [ 346.577191][ T5836] Bluetooth: hci13: command tx timeout [ 347.698317][ T5836] Bluetooth: hci14: command tx timeout [ 348.337132][ T5836] Bluetooth: hci10: command tx timeout [ 348.337141][ T5834] Bluetooth: hci11: command tx timeout [ 348.497020][ T5836] Bluetooth: hci12: command tx timeout [ 348.657114][ T5836] Bluetooth: hci13: command tx timeout [ 349.777236][ T5836] Bluetooth: hci14: command tx timeout [ 350.417008][ T5834] Bluetooth: hci11: command tx timeout [ 350.417005][ T5836] Bluetooth: hci10: command tx timeout [ 350.577030][ T5834] Bluetooth: hci12: command tx timeout [ 350.737094][ T5834] Bluetooth: hci13: command tx timeout [ 350.886840][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 350.894883][ C1] lec:lec_tx_timeout: lec0 [ 350.899712][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 351.856971][ T5834] Bluetooth: hci14: command tx timeout [ 352.977537][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 355.906864][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 355.914955][ C1] lec:lec_tx_timeout: lec0 [ 355.919696][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 360.926859][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 360.934926][ C1] lec:lec_tx_timeout: lec0 [ 360.939731][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 365.946856][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 365.954899][ C1] lec:lec_tx_timeout: lec0 [ 365.959781][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 370.967106][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 370.975154][ C1] lec:lec_tx_timeout: lec0 [ 370.980005][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 375.986937][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 375.994984][ C1] lec:lec_tx_timeout: lec0 [ 375.999639][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 376.017253][ T11] block nbd1: Possible stuck request ffff888025f10000: control (read@0,1024B). Runtime 270 seconds [ 376.028274][ T11] block nbd1: Possible stuck request ffff888025f10200: control (read@1024,1024B). Runtime 270 seconds [ 376.039399][ T11] block nbd1: Possible stuck request ffff888025f10400: control (read@2048,1024B). Runtime 270 seconds [ 376.050524][ T11] block nbd1: Possible stuck request ffff888025f10600: control (read@3072,1024B). Runtime 270 seconds [ 378.581641][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.006838][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 381.014875][ C1] lec:lec_tx_timeout: lec0 [ 381.019567][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 386.026946][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 386.034974][ C1] lec:lec_tx_timeout: lec0 [ 386.039843][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 391.856944][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 391.864997][ C1] lec:lec_tx_timeout: lec0 [ 391.869767][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 396.876912][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 396.884966][ C1] lec:lec_tx_timeout: lec0 [ 396.889710][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 401.896853][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 401.904909][ C1] lec:lec_tx_timeout: lec0 [ 401.909593][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 402.613693][ T5844] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 402.614387][ T5832] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 402.632622][ T5832] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 402.640926][ T5832] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 402.649654][ T5832] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 402.659240][ T5832] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 402.669759][ T5832] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 402.677391][ T5832] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 402.688233][ T5834] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 402.696302][ T5834] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 402.785535][ T5834] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 402.798485][ T5834] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 402.818525][ T5834] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 402.826595][ T5834] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 402.835433][ T5834] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 402.854761][ T5844] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 402.864175][T13565] lo speed is unknown, defaulting to 1000 [ 402.872226][T13564] lo speed is unknown, defaulting to 1000 [ 402.879090][T13565] wg1 speed is unknown, defaulting to 1000 [ 402.886562][T13565] lo speed is unknown, defaulting to 1000 [ 402.893326][ T5844] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 402.903465][T13564] wg1 speed is unknown, defaulting to 1000 [ 402.910304][ T5844] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 402.919045][ T5844] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 402.930360][T13564] lo speed is unknown, defaulting to 1000 [ 402.946994][ T5844] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 402.971537][T13568] lo speed is unknown, defaulting to 1000 [ 403.000916][T13568] wg1 speed is unknown, defaulting to 1000 [ 403.027579][T13568] lo speed is unknown, defaulting to 1000 [ 403.097016][T13570] lo speed is unknown, defaulting to 1000 [ 403.123570][T13570] wg1 speed is unknown, defaulting to 1000 [ 403.158622][T13570] lo speed is unknown, defaulting to 1000 [ 403.370124][T13565] chnl_net:caif_netlink_parms(): no params data found [ 403.414963][T13564] chnl_net:caif_netlink_parms(): no params data found [ 403.581321][ T5844] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 403.590638][ T5844] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 403.598918][ T5844] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 403.607205][ T5844] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 403.616286][ T5844] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 403.649793][T13568] chnl_net:caif_netlink_parms(): no params data found [ 403.756148][T13565] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.763562][T13565] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.771316][T13565] bridge_slave_0: entered allmulticast mode [ 403.784441][T13565] bridge_slave_0: entered promiscuous mode [ 403.820550][T13565] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.828077][T13565] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.835249][T13565] bridge_slave_1: entered allmulticast mode [ 403.842790][T13565] bridge_slave_1: entered promiscuous mode [ 403.866909][T13564] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.874014][T13564] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.883006][T13564] bridge_slave_0: entered allmulticast mode [ 403.891136][T13564] bridge_slave_0: entered promiscuous mode [ 403.898924][T13570] chnl_net:caif_netlink_parms(): no params data found [ 403.937493][T13565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.946893][T13564] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.954029][T13564] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.961581][T13564] bridge_slave_1: entered allmulticast mode [ 403.969050][T13564] bridge_slave_1: entered promiscuous mode [ 404.000740][T13565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.040270][T13584] lo speed is unknown, defaulting to 1000 [ 404.081267][T13584] wg1 speed is unknown, defaulting to 1000 [ 404.111512][T13564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.126899][T13568] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.134194][T13568] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.141857][T13568] bridge_slave_0: entered allmulticast mode [ 404.149306][T13568] bridge_slave_0: entered promiscuous mode [ 404.156507][T13584] lo speed is unknown, defaulting to 1000 [ 404.159712][T13568] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.169598][T13568] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.181895][T13568] bridge_slave_1: entered allmulticast mode [ 404.192754][T13568] bridge_slave_1: entered promiscuous mode [ 404.202134][T13565] team0: Port device team_slave_0 added [ 404.210357][T13565] team0: Port device team_slave_1 added [ 404.228996][T13564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.334468][T13565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.345442][T13565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.372417][T13565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.385877][T13564] team0: Port device team_slave_0 added [ 404.402683][T13570] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.410035][T13570] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.418327][T13570] bridge_slave_0: entered allmulticast mode [ 404.425590][T13570] bridge_slave_0: entered promiscuous mode [ 404.435823][T13568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.447348][T13565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.454328][T13565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.480648][T13565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.494940][T13564] team0: Port device team_slave_1 added [ 404.527514][T13570] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.534766][T13570] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.542408][T13570] bridge_slave_1: entered allmulticast mode [ 404.549952][T13570] bridge_slave_1: entered promiscuous mode [ 404.570845][T13568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.618034][T13564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.625183][T13564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.651467][T13564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.706219][T13565] hsr_slave_0: entered promiscuous mode [ 404.712995][T13565] hsr_slave_1: entered promiscuous mode [ 404.719462][T13565] debugfs: 'hsr0' already exists in 'hsr' [ 404.725190][T13565] Cannot create hsr debugfs directory [ 404.732249][T13564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.739951][T13598] Bluetooth: hci16: command tx timeout [ 404.743355][T13564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.747849][T13598] Bluetooth: hci15: command tx timeout [ 404.775753][T13564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.792818][T13570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.809960][T13568] team0: Port device team_slave_0 added [ 404.835695][T13570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.859116][T13568] team0: Port device team_slave_1 added [ 404.890114][T13568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.897562][T13568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.912003][T13600] Bluetooth: hci17: command tx timeout [ 404.929768][T13568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.942683][T13568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.950192][T13568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.976258][T13568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.987229][T13600] Bluetooth: hci18: command tx timeout [ 405.043507][T13570] team0: Port device team_slave_0 added [ 405.064469][T13564] hsr_slave_0: entered promiscuous mode [ 405.071181][T13564] hsr_slave_1: entered promiscuous mode [ 405.078742][T13564] debugfs: 'hsr0' already exists in 'hsr' [ 405.084476][T13564] Cannot create hsr debugfs directory [ 405.106274][T13570] team0: Port device team_slave_1 added [ 405.152909][T13568] hsr_slave_0: entered promiscuous mode [ 405.159448][T13568] hsr_slave_1: entered promiscuous mode [ 405.165592][T13568] debugfs: 'hsr0' already exists in 'hsr' [ 405.171447][T13568] Cannot create hsr debugfs directory [ 405.260423][T13570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.267615][T13570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.293875][T13570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.307470][T13570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.314448][T13570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.342859][T13570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.534139][T13584] chnl_net:caif_netlink_parms(): no params data found [ 405.596243][T13570] hsr_slave_0: entered promiscuous mode [ 405.603084][T13570] hsr_slave_1: entered promiscuous mode [ 405.609766][T13570] debugfs: 'hsr0' already exists in 'hsr' [ 405.615519][T13570] Cannot create hsr debugfs directory [ 405.697285][T13600] Bluetooth: hci19: command tx timeout [ 405.870630][T13584] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.877897][T13584] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.885045][T13584] bridge_slave_0: entered allmulticast mode [ 405.893148][T13584] bridge_slave_0: entered promiscuous mode [ 405.916023][T13584] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.924372][T13584] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.932262][T13584] bridge_slave_1: entered allmulticast mode [ 405.940683][T13584] bridge_slave_1: entered promiscuous mode [ 405.999593][T13584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.014272][T13584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.076224][T13584] team0: Port device team_slave_0 added [ 406.087240][T13584] team0: Port device team_slave_1 added [ 406.098788][ T11] block nbd1: Possible stuck request ffff888025f10000: control (read@0,1024B). Runtime 300 seconds [ 406.110215][ T11] block nbd1: Possible stuck request ffff888025f10200: control (read@1024,1024B). Runtime 300 seconds [ 406.122396][ T11] block nbd1: Possible stuck request ffff888025f10400: control (read@2048,1024B). Runtime 300 seconds [ 406.135247][ T11] block nbd1: Possible stuck request ffff888025f10600: control (read@3072,1024B). Runtime 300 seconds [ 406.150109][T13584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.158685][T13584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.185101][T13584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.207319][T13584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.214309][T13584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.241006][T13584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.257361][T13600] Bluetooth: hci8: command 0x0406 tx timeout [ 406.264322][T13600] Bluetooth: hci5: command 0x0406 tx timeout [ 406.271697][T13598] Bluetooth: hci6: command 0x0406 tx timeout [ 406.279287][T13600] Bluetooth: hci7: command 0x0406 tx timeout [ 406.285312][T13600] Bluetooth: hci9: command 0x0406 tx timeout [ 406.376584][T13584] hsr_slave_0: entered promiscuous mode [ 406.384154][T13584] hsr_slave_1: entered promiscuous mode [ 406.390680][T13584] debugfs: 'hsr0' already exists in 'hsr' [ 406.396421][T13584] Cannot create hsr debugfs directory [ 406.817045][ T5832] Bluetooth: hci15: command tx timeout [ 406.822584][ T5832] Bluetooth: hci16: command tx timeout [ 406.916829][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 406.924874][ C1] lec:lec_tx_timeout: lec0 [ 406.977291][ T5832] Bluetooth: hci17: command tx timeout [ 407.057067][ T5832] Bluetooth: hci18: command tx timeout [ 407.777191][ T5832] Bluetooth: hci19: command tx timeout [ 408.897204][ T5832] Bluetooth: hci15: command tx timeout [ 408.899612][ T5834] Bluetooth: hci16: command tx timeout [ 409.057217][ T5834] Bluetooth: hci17: command tx timeout [ 409.136985][ T5834] Bluetooth: hci18: command tx timeout [ 409.857021][ T5834] Bluetooth: hci19: command tx timeout [ 410.977035][ T5834] Bluetooth: hci15: command tx timeout [ 410.982603][ T5834] Bluetooth: hci16: command tx timeout [ 411.137020][ T5834] Bluetooth: hci17: command tx timeout [ 411.217214][ T5834] Bluetooth: hci18: command tx timeout [ 411.937057][ T5834] Bluetooth: hci19: command tx timeout [ 427.217343][ T31] INFO: task syz.1.1883:13422 blocked for more than 143 seconds. [ 427.225164][ T31] Not tainted syzkaller #0 [ 427.232211][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 427.241002][ T31] task:syz.1.1883 state:D stack:26240 pid:13422 tgid:13419 ppid:5828 task_flags:0x480140 flags:0x00080002 [ 427.253194][ T31] Call Trace: [ 427.256506][ T31] [ 427.259559][ T31] __schedule+0x15dd/0x52d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 427.264106][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 427.269234][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 427.274303][ T31] ? __pfx___schedule+0x10/0x10 [ 427.279747][ T31] ? schedule+0x90/0x360 [ 427.284038][ T31] schedule+0x164/0x360 [ 427.288596][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 427.294189][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 427.301491][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 427.307688][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 427.313885][ T31] nbd_set_size+0x454/0x680 [ 427.318543][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 427.323636][ T31] ? nla_memcpy+0x5b/0xc0 [ 427.328267][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 427.333620][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 427.386795][ T31] ? rcu_is_watching+0x15/0xb0 [ 427.391628][ T31] ? trace_kmalloc+0x2a/0x110 [ 427.396354][ T31] ? __nla_parse+0x40/0x60 [ 427.410584][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 427.418425][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 427.424833][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 427.440281][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 427.446407][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 427.451605][ T31] genl_rcv_msg+0x61c/0x7a0 [ 427.456158][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 427.461962][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 427.467764][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 427.472741][ T31] netlink_rcv_skb+0x232/0x4b0 [ 427.477780][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 427.482827][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 427.488298][ T31] ? down_read+0x272/0x2e0 [ 427.492755][ T31] ? genl_rcv+0xd/0x40 [ 427.496990][ T31] genl_rcv+0x28/0x40 [ 427.501003][ T31] netlink_unicast+0x80f/0x9b0 [ 427.505782][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 427.511285][ T31] ? netlink_sendmsg+0x650/0xb40 [ 427.516262][ T31] netlink_sendmsg+0x813/0xb40 [ 427.521157][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.526470][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 427.531787][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 427.537329][ T31] ____sys_sendmsg+0x972/0x9f0 [ 427.542145][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 427.547548][ T31] ? import_iovec+0x73/0xa0 [ 427.552091][ T31] ___sys_sendmsg+0x2a5/0x360 [ 427.556918][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.562162][ T31] ? futex_wait+0x29a/0x380 [ 427.566787][ T31] ? __fget_files+0x2a/0x420 [ 427.571419][ T31] ? __fget_files+0x3a0/0x420 [ 427.576113][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 427.581373][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 427.587052][ T31] ? rcu_is_watching+0x15/0xb0 [ 427.591886][ T31] do_syscall_64+0x14d/0xf80 [ 427.596478][ T31] ? trace_irq_disable+0x3b/0x150 [ 427.601703][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.607883][ T31] ? clear_bhb_loop+0x40/0x90 [ 427.612596][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.618756][ T31] RIP: 0033:0x7f0d7079c799 [ 427.623210][ T31] RSP: 002b:00007f0d71575028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.631739][ T31] RAX: ffffffffffffffda RBX: 00007f0d70a16090 RCX: 00007f0d7079c799 [ 427.639908][ T31] RDX: 0000000000000010 RSI: 0000200000000380 RDI: 0000000000000009 [ 427.647939][ T31] RBP: 00007f0d70832c99 R08: 0000000000000000 R09: 0000000000000000 [ 427.655912][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.663985][ T31] R13: 00007f0d70a16128 R14: 00007f0d70a16090 R15: 00007ffd1072a798 [ 427.672105][ T31] [ 427.675185][ T31] INFO: task syz.3.1882:13428 blocked for more than 143 seconds. [ 427.683022][ T31] Not tainted syzkaller #0 [ 427.688186][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 427.698913][ T31] task:syz.3.1882 state:D stack:28648 pid:13428 tgid:13427 ppid:5839 task_flags:0x400140 flags:0x00080002 [ 427.711133][ T31] Call Trace: [ 427.714441][ T31] [ 427.717547][ T31] __schedule+0x15dd/0x52d0 [ 427.722099][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 427.727392][ T31] ? __pfx___schedule+0x10/0x10 [ 427.732280][ T31] ? schedule+0x90/0x360 [ 427.736521][ T31] schedule+0x164/0x360 [ 427.740799][ T31] schedule_preempt_disabled+0x13/0x30 [ 427.746285][ T31] __mutex_lock+0x7fe/0x1300 [ 427.751132][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 427.756353][ T31] ? __mutex_lock+0x5ac/0x1300 [ 427.761318][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 427.766031][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 427.771150][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 427.776120][ T31] ? radix_tree_lookup+0x240/0x290 [ 427.782930][ T31] genl_rcv_msg+0x10b/0x7a0 [ 427.787544][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 427.792614][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 427.797812][ T31] netlink_rcv_skb+0x232/0x4b0 [ 427.802597][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 427.807708][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 427.813074][ T31] ? down_read+0x272/0x2e0 [ 427.817688][ T31] ? genl_rcv+0xd/0x40 [ 427.821819][ T31] genl_rcv+0x28/0x40 [ 427.825817][ T31] netlink_unicast+0x80f/0x9b0 [ 427.830677][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 427.836006][ T31] ? netlink_sendmsg+0x650/0xb40 [ 427.841242][ T31] ? skb_put+0x11b/0x210 [ 427.845523][ T31] netlink_sendmsg+0x813/0xb40 [ 427.850375][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.855692][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 427.861324][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 427.866651][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.872027][ T31] __sys_sendto+0x672/0x710 [ 427.876594][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 427.881767][ T31] ? exc_page_fault+0x6a/0xc0 [ 427.886497][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 427.891872][ T31] __x64_sys_sendto+0xde/0x100 [ 427.896669][ T31] do_syscall_64+0x14d/0xf80 [ 427.901325][ T31] ? trace_irq_disable+0x3b/0x150 [ 427.906379][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.912765][ T31] ? clear_bhb_loop+0x40/0x90 [ 427.917621][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.923526][ T31] RIP: 0033:0x7fa80ad5cfce [ 427.928098][ T31] RSP: 002b:00007fa80bc68e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 427.936569][ T31] RAX: ffffffffffffffda RBX: 00007fa80bc6a6c0 RCX: 00007fa80ad5cfce [ 427.944901][ T31] RDX: 0000000000000024 RSI: 00007fa80bc69000 RDI: 0000000000000009 [ 427.952957][ T31] RBP: 0000000000000000 R08: 00007fa80bc68f04 R09: 000000000000000c [ 427.961093][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 427.969165][ T31] R13: 00007fa80bc68f58 R14: 00007fa80bc69000 R15: 0000000000000000 [ 427.977228][ T31] [ 427.980316][ T31] INFO: task syz.3.1882:13430 blocked for more than 144 seconds. [ 427.988579][ T31] Not tainted syzkaller #0 [ 427.993556][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.002302][ T31] task:syz.3.1882 state:D stack:22328 pid:13430 tgid:13427 ppid:5839 task_flags:0x400140 flags:0x00080002 [ 428.014517][ T31] Call Trace: [ 428.019170][ T31] [ 428.022143][ T31] __schedule+0x15dd/0x52d0 [ 428.026700][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 428.031909][ T31] ? __pfx___schedule+0x10/0x10 [ 428.037160][ T31] ? schedule+0x90/0x360 [ 428.041419][ T31] schedule+0x164/0x360 [ 428.045581][ T31] schedule_preempt_disabled+0x13/0x30 [ 428.051143][ T31] __mutex_lock+0x7fe/0x1300 [ 428.055909][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 428.061382][ T31] ? __mutex_lock+0x5ac/0x1300 [ 428.066199][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 428.071116][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 428.076289][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 428.081601][ T31] ? radix_tree_lookup+0x240/0x290 [ 428.086804][ T31] genl_rcv_msg+0x10b/0x7a0 [ 428.091421][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 428.096460][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 428.101707][ T31] netlink_rcv_skb+0x232/0x4b0 [ 428.106492][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 428.111611][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 428.117214][ T31] ? down_read+0x272/0x2e0 [ 428.121646][ T31] ? genl_rcv+0xd/0x40 [ 428.125723][ T31] genl_rcv+0x28/0x40 [ 428.130043][ T31] netlink_unicast+0x80f/0x9b0 [ 428.134863][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 428.140438][ T31] ? netlink_sendmsg+0x650/0xb40 [ 428.145412][ T31] ? skb_put+0x11b/0x210 [ 428.149882][ T31] netlink_sendmsg+0x813/0xb40 [ 428.154680][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.160168][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 428.165150][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 428.170750][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.176056][ T31] __sys_sendto+0x672/0x710 [ 428.180888][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 428.185989][ T31] ? exc_page_fault+0x6a/0xc0 [ 428.190882][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 428.196237][ T31] __x64_sys_sendto+0xde/0x100 [ 428.201264][ T31] do_syscall_64+0x14d/0xf80 [ 428.205908][ T31] ? trace_irq_disable+0x3b/0x150 [ 428.211158][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.217369][ T31] ? clear_bhb_loop+0x40/0x90 [ 428.222057][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.228217][ T31] RIP: 0033:0x7fa80ad5cfce [ 428.232667][ T31] RSP: 002b:00007fa80bc47e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 428.241291][ T31] RAX: ffffffffffffffda RBX: 00007fa80bc496c0 RCX: 00007fa80ad5cfce [ 428.249509][ T31] RDX: 000000000000001c RSI: 00007fa80bc48000 RDI: 000000000000000f [ 428.257902][ T31] RBP: 0000000000000000 R08: 00007fa80bc47f04 R09: 000000000000000c [ 428.265913][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 428.276788][ T31] R13: 00007fa80bc47f58 R14: 00007fa80bc48000 R15: 0000000000000000 [ 428.284806][ T31] [ 428.287998][ T31] INFO: task syz.3.1882:13438 blocked for more than 144 seconds. [ 428.295758][ T31] Not tainted syzkaller #0 [ 428.303896][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.312875][ T31] task:syz.3.1882 state:D stack:28784 pid:13438 tgid:13427 ppid:5839 task_flags:0x400040 flags:0x00080002 [ 428.324921][ T31] Call Trace: [ 428.328295][ T31] [ 428.331261][ T31] __schedule+0x15dd/0x52d0 [ 428.335781][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 428.341474][ T31] ? __pfx___schedule+0x10/0x10 [ 428.346383][ T31] ? schedule+0x90/0x360 [ 428.351028][ T31] schedule+0x164/0x360 [ 428.355201][ T31] schedule_preempt_disabled+0x13/0x30 [ 428.360931][ T31] __mutex_lock+0x7fe/0x1300 [ 428.365558][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 428.370840][ T31] ? __mutex_lock+0x5ac/0x1300 [ 428.375677][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 428.380422][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 428.385480][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 428.390489][ T31] ? radix_tree_lookup+0x240/0x290 [ 428.395660][ T31] genl_rcv_msg+0x10b/0x7a0 [ 428.400317][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 428.405377][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 428.410423][ T31] netlink_rcv_skb+0x232/0x4b0 [ 428.415233][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 428.420607][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 428.425951][ T31] ? down_read+0x272/0x2e0 [ 428.430496][ T31] ? genl_rcv+0xd/0x40 [ 428.434604][ T31] genl_rcv+0x28/0x40 [ 428.438667][ T31] netlink_unicast+0x80f/0x9b0 [ 428.443506][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 428.448879][ T31] ? netlink_sendmsg+0x650/0xb40 [ 428.453849][ T31] ? skb_put+0x11b/0x210 [ 428.458329][ T31] netlink_sendmsg+0x813/0xb40 [ 428.463122][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.468529][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 428.473528][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 428.478905][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.484216][ T31] __sys_sendto+0x672/0x710 [ 428.488800][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 428.493869][ T31] ? exc_page_fault+0x6a/0xc0 [ 428.498738][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 428.504070][ T31] __x64_sys_sendto+0xde/0x100 [ 428.509035][ T31] do_syscall_64+0x14d/0xf80 [ 428.513660][ T31] ? trace_irq_disable+0x3b/0x150 [ 428.518811][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.524908][ T31] ? clear_bhb_loop+0x40/0x90 [ 428.529675][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.535629][ T31] RIP: 0033:0x7fa80ad5cfce [ 428.540153][ T31] RSP: 002b:00007fa80bc26e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 428.548639][ T31] RAX: ffffffffffffffda RBX: 00007fa80bc286c0 RCX: 00007fa80ad5cfce [ 428.556613][ T31] RDX: 0000000000000024 RSI: 00007fa80bc27000 RDI: 000000000000000f [ 428.564660][ T31] RBP: 0000000000000000 R08: 00007fa80bc26f04 R09: 000000000000000c [ 428.572853][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 428.580936][ T31] R13: 00007fa80bc26f58 R14: 00007fa80bc27000 R15: 0000000000000000 [ 428.589080][ T31] [ 428.592152][ T31] INFO: task syz.0.1887:13443 blocked for more than 144 seconds. [ 428.599949][ T31] Not tainted syzkaller #0 [ 428.604906][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.613641][ T31] task:syz.0.1887 state:D stack:25976 pid:13443 tgid:13442 ppid:5831 task_flags:0x400140 flags:0x00080002 [ 428.625685][ T31] Call Trace: [ 428.629063][ T31] [ 428.632017][ T31] __schedule+0x15dd/0x52d0 [ 428.636533][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 428.641652][ T31] ? __pfx___schedule+0x10/0x10 [ 428.646546][ T31] ? schedule+0x90/0x360 [ 428.650871][ T31] schedule+0x164/0x360 [ 428.655066][ T31] schedule_preempt_disabled+0x13/0x30 [ 428.660669][ T31] __mutex_lock+0x7fe/0x1300 [ 428.665311][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 428.670596][ T31] ? __mutex_lock+0x5ac/0x1300 [ 428.675371][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 428.680361][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 428.685472][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 428.690539][ T31] ? radix_tree_lookup+0x240/0x290 [ 428.695692][ T31] genl_rcv_msg+0x10b/0x7a0 [ 428.700290][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 428.705363][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 428.710394][ T31] netlink_rcv_skb+0x232/0x4b0 [ 428.715202][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 428.720350][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 428.725689][ T31] ? down_read+0x272/0x2e0 [ 428.730334][ T31] ? genl_rcv+0xd/0x40 [ 428.734466][ T31] genl_rcv+0x28/0x40 [ 428.739174][ T31] netlink_unicast+0x80f/0x9b0 [ 428.744000][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 428.749541][ T31] ? netlink_sendmsg+0x650/0xb40 [ 428.754505][ T31] ? skb_put+0x11b/0x210 [ 428.758826][ T31] netlink_sendmsg+0x813/0xb40 [ 428.763621][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.768988][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 428.773964][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 428.779360][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.784683][ T31] __sys_sendto+0x672/0x710 [ 428.789504][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 428.794578][ T31] ? exc_page_fault+0x6a/0xc0 [ 428.799325][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 428.804684][ T31] __x64_sys_sendto+0xde/0x100 [ 428.806540][ T9214] lec:lec_start_xmit: lec0:No lecd attached [ 428.809552][ T31] do_syscall_64+0x14d/0xf80 [ 428.821041][ T31] ? trace_irq_disable+0x3b/0x150 [ 428.826115][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.832254][ T31] ? clear_bhb_loop+0x40/0x90 [ 428.837095][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.843010][ T31] RIP: 0033:0x7f721335cfce [ 428.847587][ T31] RSP: 002b:00007f72141c2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 428.856045][ T31] RAX: ffffffffffffffda RBX: 00007f72141c46c0 RCX: 00007f721335cfce [ 428.864198][ T31] RDX: 0000000000000020 RSI: 00007f72141c3000 RDI: 0000000000000006 [ 428.872234][ T31] RBP: 0000000000000000 R08: 00007f72141c2f04 R09: 000000000000000c [ 428.880322][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 428.888355][ T31] R13: 00007f72141c2f58 R14: 00007f72141c3000 R15: 0000000000000000 [ 428.896354][ T31] [ 428.899748][ T31] INFO: task syz.2.1888:13446 blocked for more than 145 seconds. [ 428.907703][ T31] Not tainted syzkaller #0 [ 428.912722][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.921540][ T31] task:syz.2.1888 state:D stack:28824 pid:13446 tgid:13445 ppid:5827 task_flags:0x400040 flags:0x00080002 [ 428.933604][ T31] Call Trace: [ 428.937339][ T31] [ 428.940294][ T31] __schedule+0x15dd/0x52d0 [ 428.944840][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 428.950035][ T31] ? __pfx___schedule+0x10/0x10 [ 428.955046][ T31] ? schedule+0x90/0x360 [ 428.959669][ T31] schedule+0x164/0x360 [ 428.963840][ T31] schedule_preempt_disabled+0x13/0x30 [ 428.969866][ T31] __mutex_lock+0x7fe/0x1300 [ 428.974566][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 428.980260][ T31] ? __mutex_lock+0x5ac/0x1300 [ 428.985141][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 428.990049][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 428.995131][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 429.000402][ T31] ? radix_tree_lookup+0x240/0x290 [ 429.005541][ T31] genl_rcv_msg+0x10b/0x7a0 [ 429.010420][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.015463][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 429.020750][ T31] netlink_rcv_skb+0x232/0x4b0 [ 429.025566][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.030822][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.036163][ T31] ? down_read+0x272/0x2e0 [ 429.040733][ T31] ? genl_rcv+0xd/0x40 [ 429.044836][ T31] genl_rcv+0x28/0x40 [ 429.048960][ T31] netlink_unicast+0x80f/0x9b0 [ 429.053784][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 429.060109][ T31] ? netlink_sendmsg+0x650/0xb40 [ 429.065057][ T31] ? skb_put+0x11b/0x210 [ 429.069652][ T31] netlink_sendmsg+0x813/0xb40 [ 429.074465][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.080192][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 429.085175][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 429.090569][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.095890][ T31] __sys_sendto+0x672/0x710 [ 429.100535][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 429.105608][ T31] ? exc_page_fault+0x6a/0xc0 [ 429.110485][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 429.115813][ T31] __x64_sys_sendto+0xde/0x100 [ 429.120859][ T31] do_syscall_64+0x14d/0xf80 [ 429.125481][ T31] ? trace_irq_disable+0x3b/0x150 [ 429.130846][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.137407][ T31] ? clear_bhb_loop+0x40/0x90 [ 429.142142][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.148202][ T31] RIP: 0033:0x7eff7c95cfce [ 429.152646][ T31] RSP: 002b:00007eff7d7a2e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 429.161172][ T31] RAX: ffffffffffffffda RBX: 00007eff7d7a46c0 RCX: 00007eff7c95cfce [ 429.169268][ T31] RDX: 0000000000000020 RSI: 00007eff7d7a3000 RDI: 0000000000000004 [ 429.177549][ T31] RBP: 0000000000000000 R08: 00007eff7d7a2f04 R09: 000000000000000c [ 429.185553][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 429.193841][ T31] R13: 00007eff7d7a2f58 R14: 00007eff7d7a3000 R15: 0000000000000000 [ 429.201936][ T31] [ 429.204997][ T31] INFO: task syz.2.1888:13448 blocked for more than 145 seconds. [ 429.212839][ T31] Not tainted syzkaller #0 [ 429.217939][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.226634][ T31] task:syz.2.1888 state:D stack:28752 pid:13448 tgid:13445 ppid:5827 task_flags:0x400040 flags:0x00080002 [ 429.238839][ T31] Call Trace: [ 429.242143][ T31] [ 429.245080][ T31] __schedule+0x15dd/0x52d0 [ 429.249677][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 429.254681][ T31] ? __pfx___schedule+0x10/0x10 [ 429.259611][ T31] ? schedule+0x90/0x360 [ 429.263908][ T31] schedule+0x164/0x360 [ 429.268182][ T31] schedule_preempt_disabled+0x13/0x30 [ 429.273662][ T31] __mutex_lock+0x7fe/0x1300 [ 429.278332][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 429.283561][ T31] ? __mutex_lock+0x5ac/0x1300 [ 429.288491][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 429.293207][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 429.298573][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 429.303547][ T31] ? radix_tree_lookup+0x240/0x290 [ 429.308772][ T31] genl_rcv_msg+0x10b/0x7a0 [ 429.313318][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.318532][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 429.323511][ T31] netlink_rcv_skb+0x232/0x4b0 [ 429.328373][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.333438][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.338818][ T31] ? down_read+0x272/0x2e0 [ 429.343265][ T31] ? genl_rcv+0xd/0x40 [ 429.347597][ T31] genl_rcv+0x28/0x40 [ 429.351610][ T31] netlink_unicast+0x80f/0x9b0 [ 429.356384][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 429.361744][ T31] ? netlink_sendmsg+0x650/0xb40 [ 429.366703][ T31] ? skb_put+0x11b/0x210 [ 429.371042][ T31] netlink_sendmsg+0x813/0xb40 [ 429.375831][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.381257][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 429.386230][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 429.391630][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.397076][ T31] __sys_sendto+0x672/0x710 [ 429.401609][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 429.406654][ T31] ? exc_page_fault+0x6a/0xc0 [ 429.411408][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 429.416808][ T31] __x64_sys_sendto+0xde/0x100 [ 429.421600][ T31] do_syscall_64+0x14d/0xf80 [ 429.426190][ T31] ? trace_irq_disable+0x3b/0x150 [ 429.431343][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.437516][ T31] ? clear_bhb_loop+0x40/0x90 [ 429.442238][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.448256][ T31] RIP: 0033:0x7eff7c95cfce [ 429.452697][ T31] RSP: 002b:00007eff7d781e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 429.461429][ T31] RAX: ffffffffffffffda RBX: 00007eff7d7836c0 RCX: 00007eff7c95cfce [ 429.469517][ T31] RDX: 0000000000000020 RSI: 00007eff7d782000 RDI: 0000000000000003 [ 429.477746][ T31] RBP: 0000000000000000 R08: 00007eff7d781f04 R09: 000000000000000c [ 429.485804][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 429.493913][ T31] R13: 00007eff7d781f58 R14: 00007eff7d782000 R15: 0000000000000000 [ 429.501958][ T31] [ 429.505026][ T31] INFO: task syz.4.1890:13456 blocked for more than 145 seconds. [ 429.512913][ T31] Not tainted syzkaller #0 [ 429.517956][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.526652][ T31] task:syz.4.1890 state:D stack:27880 pid:13456 tgid:13455 ppid:5840 task_flags:0x400040 flags:0x00080002 [ 429.538840][ T31] Call Trace: [ 429.542158][ T31] [ 429.545118][ T31] __schedule+0x15dd/0x52d0 [ 429.549758][ T31] ? __pfx___schedule+0x10/0x10 [ 429.554644][ T31] ? schedule+0x90/0x360 [ 429.559065][ T31] schedule+0x164/0x360 [ 429.563270][ T31] schedule_preempt_disabled+0x13/0x30 [ 429.568996][ T31] __mutex_lock+0x7fe/0x1300 [ 429.573625][ T31] ? __mutex_lock+0x5ac/0x1300 [ 429.578494][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 429.583215][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 429.588350][ T31] ? __dev_queue_xmit+0x28b/0x3870 [ 429.593536][ T31] ? radix_tree_lookup+0x240/0x290 [ 429.598778][ T31] genl_rcv_msg+0x10b/0x7a0 [ 429.603323][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.608425][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 429.613413][ T31] netlink_rcv_skb+0x232/0x4b0 [ 429.618327][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.623404][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.628783][ T31] ? down_read+0x272/0x2e0 [ 429.633211][ T31] ? genl_rcv+0xd/0x40 [ 429.637379][ T31] genl_rcv+0x28/0x40 [ 429.641424][ T31] netlink_unicast+0x80f/0x9b0 [ 429.646209][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 429.651609][ T31] ? netlink_sendmsg+0x650/0xb40 [ 429.656581][ T31] ? skb_put+0x11b/0x210 [ 429.660915][ T31] netlink_sendmsg+0x813/0xb40 [ 429.665721][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.671100][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 429.676089][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 429.681645][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.687017][ T31] __sys_sendto+0x672/0x710 [ 429.691561][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 429.696634][ T31] ? exc_page_fault+0x6a/0xc0 [ 429.701386][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 429.706706][ T31] __x64_sys_sendto+0xde/0x100 [ 429.711585][ T31] do_syscall_64+0x14d/0xf80 [ 429.716175][ T31] ? trace_irq_disable+0x3b/0x150 [ 429.721284][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.727474][ T31] ? clear_bhb_loop+0x40/0x90 [ 429.732202][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.738153][ T31] RIP: 0033:0x7f2c9bf5cfce [ 429.742599][ T31] RSP: 002b:00007f2c9cf36e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 429.751087][ T31] RAX: ffffffffffffffda RBX: 00007f2c9cf386c0 RCX: 00007f2c9bf5cfce [ 429.759147][ T31] RDX: 0000000000000020 RSI: 00007f2c9cf37000 RDI: 0000000000000006 [ 429.767162][ T31] RBP: 0000000000000000 R08: 00007f2c9cf36f04 R09: 000000000000000c [ 429.775157][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 429.783772][ T31] R13: 00007f2c9cf36f58 R14: 00007f2c9cf37000 R15: 0000000000000000 [ 429.792070][ T31] [ 429.795144][ T31] INFO: task syz.4.1890:13457 blocked for more than 145 seconds. [ 429.802999][ T31] Not tainted syzkaller #0 [ 429.808000][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 429.816700][ T31] task:syz.4.1890 state:D stack:27880 pid:13457 tgid:13455 ppid:5840 task_flags:0x400040 flags:0x00080002 [ 429.828769][ T31] Call Trace: [ 429.832084][ T31] [ 429.835052][ T31] __schedule+0x15dd/0x52d0 [ 429.839772][ T31] ? __pfx___schedule+0x10/0x10 [ 429.844667][ T31] ? schedule+0x90/0x360 [ 429.849032][ T31] schedule+0x164/0x360 [ 429.853222][ T31] schedule_preempt_disabled+0x13/0x30 [ 429.859099][ T31] __mutex_lock+0x7fe/0x1300 [ 429.863730][ T31] ? __mutex_lock+0x5ac/0x1300 [ 429.868574][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 429.873288][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 429.878395][ T31] ? __dev_queue_xmit+0x28b/0x3870 [ 429.883546][ T31] ? radix_tree_lookup+0x240/0x290 [ 429.888776][ T31] genl_rcv_msg+0x10b/0x7a0 [ 429.893324][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.898612][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 429.903575][ T31] netlink_rcv_skb+0x232/0x4b0 [ 429.908419][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.913479][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.918862][ T31] ? down_read+0x272/0x2e0 [ 429.923320][ T31] ? genl_rcv+0xd/0x40 [ 429.927475][ T31] genl_rcv+0x28/0x40 [ 429.931489][ T31] netlink_unicast+0x80f/0x9b0 [ 429.936290][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 429.941763][ T31] ? netlink_sendmsg+0x650/0xb40 [ 429.946846][ T31] ? skb_put+0x11b/0x210 [ 429.951134][ T31] netlink_sendmsg+0x813/0xb40 [ 429.955943][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.961439][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 429.966453][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 429.971833][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.977205][ T31] __sys_sendto+0x672/0x710 [ 429.981715][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 429.986850][ T31] ? exc_page_fault+0x6a/0xc0 [ 429.991554][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 429.996907][ T31] __x64_sys_sendto+0xde/0x100 [ 430.001706][ T31] do_syscall_64+0x14d/0xf80 [ 430.006304][ T31] ? trace_irq_disable+0x3b/0x150 [ 430.011654][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.017966][ T31] ? clear_bhb_loop+0x40/0x90 [ 430.022675][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.028660][ T31] RIP: 0033:0x7f2c9bf5cfce [ 430.033106][ T31] RSP: 002b:00007f2c9cf15e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 430.041596][ T31] RAX: ffffffffffffffda RBX: 00007f2c9cf176c0 RCX: 00007f2c9bf5cfce [ 430.049632][ T31] RDX: 0000000000000020 RSI: 00007f2c9cf16000 RDI: 0000000000000007 [ 430.057758][ T31] RBP: 0000000000000000 R08: 00007f2c9cf15f04 R09: 000000000000000c [ 430.065759][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 430.073927][ T31] R13: 00007f2c9cf15f58 R14: 00007f2c9cf16000 R15: 0000000000000000 [ 430.081990][ T31] [ 430.085066][ T31] INFO: task syz.4.1890:13458 blocked for more than 146 seconds. [ 430.092879][ T31] Not tainted syzkaller #0 [ 430.097952][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 430.106641][ T31] task:syz.4.1890 state:D stack:26440 pid:13458 tgid:13455 ppid:5840 task_flags:0x400140 flags:0x00080002 [ 430.118859][ T31] Call Trace: [ 430.122169][ T31] [ 430.125107][ T31] __schedule+0x15dd/0x52d0 [ 430.129724][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 430.134713][ T31] ? __pfx___schedule+0x10/0x10 [ 430.139635][ T31] ? schedule+0x90/0x360 [ 430.143911][ T31] schedule+0x164/0x360 [ 430.148165][ T31] schedule_preempt_disabled+0x13/0x30 [ 430.153656][ T31] __mutex_lock+0x7fe/0x1300 [ 430.158303][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 430.163538][ T31] ? __mutex_lock+0x5ac/0x1300 [ 430.168450][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 430.173175][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 430.178260][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 430.183259][ T31] ? radix_tree_lookup+0x240/0x290 [ 430.188450][ T31] genl_rcv_msg+0x10b/0x7a0 [ 430.192992][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 430.198103][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 430.203111][ T31] netlink_rcv_skb+0x232/0x4b0 [ 430.207988][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 430.213057][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 430.218443][ T31] ? down_read+0x272/0x2e0 [ 430.222889][ T31] ? genl_rcv+0xd/0x40 [ 430.227165][ T31] genl_rcv+0x28/0x40 [ 430.231201][ T31] netlink_unicast+0x80f/0x9b0 [ 430.235981][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 430.241368][ T31] ? netlink_sendmsg+0x650/0xb40 [ 430.246349][ T31] ? skb_put+0x11b/0x210 [ 430.250668][ T31] netlink_sendmsg+0x813/0xb40 [ 430.255471][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.260836][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 430.265825][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 430.271186][ T31] ____sys_sendmsg+0x972/0x9f0 [ 430.275985][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 430.281431][ T31] ? import_iovec+0x73/0xa0 [ 430.285969][ T31] ___sys_sendmsg+0x2a5/0x360 [ 430.290789][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.296031][ T31] ? futex_wake+0x4ac/0x580 [ 430.300638][ T31] ? __fget_files+0x2a/0x420 [ 430.305272][ T31] ? __fget_files+0x3a0/0x420 [ 430.310113][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 430.315114][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 430.320654][ T31] ? rcu_is_watching+0x15/0xb0 [ 430.325463][ T31] do_syscall_64+0x14d/0xf80 [ 430.330127][ T31] ? trace_irq_disable+0x3b/0x150 [ 430.335210][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.341610][ T31] ? clear_bhb_loop+0x40/0x90 [ 430.346342][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.352338][ T31] RIP: 0033:0x7f2c9bf9c799 [ 430.356815][ T31] RSP: 002b:00007f2c9cef6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.365303][ T31] RAX: ffffffffffffffda RBX: 00007f2c9c216180 RCX: 00007f2c9bf9c799 [ 430.373396][ T31] RDX: 0000000004000010 RSI: 00002000000001c0 RDI: 000000000000000a [ 430.381439][ T31] RBP: 00007f2c9c032c99 R08: 0000000000000000 R09: 0000000000000000 [ 430.389541][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.397584][ T31] R13: 00007f2c9c216218 R14: 00007f2c9c216180 R15: 00007fffe4e9ea98 [ 430.405596][ T31] [ 430.408679][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 430.417898][ T31] [ 430.417898][ T31] Showing all locks held in the system: [ 430.425633][ T31] 1 lock held by khungtaskd/31: [ 430.430621][ T31] #0: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 430.440589][ T31] 2 locks held by getty/5582: [ 430.445266][ T31] #0: ffff888034be30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 430.455257][ T31] #1: ffffc9000322b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 430.465477][ T31] 1 lock held by udevd/5845: [ 430.470170][ T31] #0: ffff888025e32358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 430.479535][ T31] 5 locks held by kworker/u8:49/10459: [ 430.485019][ T31] 6 locks held by syz.1.1883/13422: [ 430.490311][ T31] #0: ffffffff8fc36210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.498771][ T31] #1: ffffffff8fc36048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 430.507891][ T31] #2: ffff888025da6a78 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 430.518330][ T31] #3: ffff888025e13ff0 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 430.527861][ T31] #4: ffff888025e13990 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 430.539974][ T31] #5: ffff888025e139c8 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 430.552362][ T31] 2 locks held by syz.3.1882/13428: [ 430.557723][ T31] #0: ffffffff8fc36210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.565937][ T31] #1: ffffffff8fc36048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 430.575021][ T31] 2 locks held by syz.3.1882/13430: [ 430.580373][ T31] #0: ffffffff8fc36210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.588682][ T31] #1: ffffffff8fc36048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 430.597741][ T31] 2 locks held by syz.3.1882/13438: [ 430.602948][ T31] #0: ffffffff8fc36210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.611260][ T31] #1: ffffffff8fc36048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 430.620319][ T31] 2 locks held by syz.0.1887/13443: [ 430.625521][ T31] #0: ffffffff8fc36210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.633818][ T31] #1: ffffffff8fc36048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 430.642897][ T31] 2 locks held by syz.2.1888/13446: [ 430.648192][ T31] #0: ffffffff8fc36210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.656434][ T31] #1: ffffffff8fc36048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 430.665557][ T31] 2 locks held by syz.2.1888/13448: [ 430.670911][ T31] #0: ffffffff8fc36210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.679247][ T31] #1: ffffffff8fc36048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 430.688329][ T31] 2 locks held by syz.4.1890/13456: [ 430.693528][ T31] #0: ffffffff8fc36210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.701819][ T31] #1: ffffffff8fc36048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 430.710877][ T31] 2 locks held by syz.4.1890/13457: [ 430.716076][ T31] #0: ffffffff8fc36210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.724451][ T31] #1: ffffffff8fc36048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 430.733497][ T31] 2 locks held by syz.4.1890/13458: [ 430.738803][ T31] #0: ffffffff8fc36210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.747119][ T31] #1: ffffffff8fc36048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 430.756113][ T31] 2 locks held by syz-executor/13464: [ 430.761625][ T31] #0: ffffffff8fc36210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.769921][ T31] #1: ffffffff8fc36048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 430.779166][ T31] 2 locks held by syz-executor/13466: [ 430.784564][ T31] #0: ffffffff8fc36210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.792867][ T31] #1: ffffffff8fc36048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 430.802009][ T31] 2 locks held by syz-executor/13467: [ 430.807464][ T31] #0: ffffffff8fc36210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.815700][ T31] #1: ffffffff8fc36048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 430.825258][ T31] 2 locks held by syz-executor/13470: [ 430.830768][ T31] #0: ffffffff8fc36210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.839059][ T31] #1: ffffffff8fc36048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 430.848118][ T31] 2 locks held by syz-executor/13488: [ 430.853484][ T31] #0: ffffffff8fc36210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.861747][ T31] #1: ffffffff8fc36048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 430.870814][ T31] 2 locks held by syz-executor/13514: [ 430.876195][ T31] #0: ffffffff8fc36210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.884485][ T31] #1: ffffffff8fc36048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 430.893715][ T31] 2 locks held by syz-executor/13515: [ 430.899413][ T31] #0: ffffffff8fc36210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.907704][ T31] #1: ffffffff8fc36048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 430.916682][ T31] 2 locks held by syz-executor/13518: [ 430.922099][ T31] #0: ffffffff8fc36210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.930373][ T31] #1: ffffffff8fc36048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 430.939508][ T31] 2 locks held by syz-executor/13521: [ 430.944909][ T31] #0: ffffffff8fc36210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.953185][ T31] #1: ffffffff8fc36048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 430.962248][ T31] 2 locks held by syz-executor/13542: [ 430.967688][ T31] #0: ffffffff8fc36210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.975925][ T31] #1: ffffffff8fc36048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 430.985079][ T31] 2 locks held by syz-executor/13564: [ 430.990513][ T31] #0: ffffffff8fc36210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 430.998938][ T31] #1: ffffffff8fc36048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 431.008082][ T31] 2 locks held by syz-executor/13565: [ 431.013476][ T31] #0: ffffffff8fc36210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.021771][ T31] #1: ffffffff8fc36048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 431.030826][ T31] 2 locks held by syz-executor/13568: [ 431.036232][ T31] #0: ffffffff8fc36210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.044548][ T31] #1: ffffffff8fc36048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 431.053636][ T31] 2 locks held by syz-executor/13570: [ 431.059350][ T31] #0: ffffffff8fc36210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.067620][ T31] #1: ffffffff8fc36048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 431.076618][ T31] 2 locks held by syz-executor/13584: [ 431.082094][ T31] #0: ffffffff8fc36210 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 431.090368][ T31] #1: ffffffff8fc36048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 431.099444][ T31] [ 431.101787][ T31] ============================================= [ 431.101787][ T31] [ 431.110447][ T31] NMI backtrace for cpu 1 [ 431.110472][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 431.110495][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.110509][ T31] Call Trace: [ 431.110517][ T31] [ 431.110526][ T31] dump_stack_lvl+0xe8/0x150 [ 431.110561][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 431.110592][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 431.110622][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 431.110656][ T31] sys_info+0x135/0x170 [ 431.110681][ T31] watchdog+0xfd9/0x1030 [ 431.110720][ T31] ? watchdog+0x21a/0x1030 [ 431.110760][ T31] kthread+0x388/0x470 [ 431.110783][ T31] ? __pfx_watchdog+0x10/0x10 [ 431.110823][ T31] ? __pfx_kthread+0x10/0x10 [ 431.110845][ T31] ret_from_fork+0x51e/0xb90 [ 431.110886][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 431.110929][ T31] ? __switch_to+0xc7d/0x1450 [ 431.110956][ T31] ? __pfx_kthread+0x10/0x10 [ 431.110978][ T31] ret_from_fork_asm+0x1a/0x30 [ 431.111026][ T31] [ 431.111034][ T31] Sending NMI from CPU 1 to CPUs 0: [ 431.220870][ C0] NMI backtrace for cpu 0 [ 431.220898][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 431.220918][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.220930][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 431.220954][ C0] Code: 5e 6e 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 f2 19 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 431.220970][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000242 [ 431.220986][ C0] RAX: 00000000001d8761 RBX: ffffffff819a900a RCX: 0000000080000001 [ 431.220999][ C0] RDX: 0000000000000001 RSI: ffffffff8df230bd RDI: ffffffff8c27c180 [ 431.221012][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 431.221026][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: 0000000000000000 [ 431.221039][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 1ffffffff1c929d8 [ 431.221052][ C0] FS: 0000000000000000(0000) GS:ffff888125461000(0000) knlGS:0000000000000000 [ 431.221066][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 431.221078][ C0] CR2: 000055c054dd3168 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 431.221094][ C0] Call Trace: [ 431.221101][ C0] [ 431.221107][ C0] default_idle+0x9/0x20 [ 431.221128][ C0] default_idle_call+0x72/0xb0 [ 431.221150][ C0] do_idle+0x36a/0x5f0 [ 431.221177][ C0] ? __pfx_do_idle+0x10/0x10 [ 431.221206][ C0] cpu_startup_entry+0x43/0x60 [ 431.221230][ C0] rest_init+0x2de/0x300 [ 431.221254][ C0] start_kernel+0x385/0x3d0 [ 431.221278][ C0] x86_64_start_reservations+0x24/0x30 [ 431.221297][ C0] x86_64_start_kernel+0x143/0x1c0 [ 431.221317][ C0] common_startup_64+0x13e/0x147 [ 431.221343][ C0] [ 431.396495][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 431.403352][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 431.412461][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.422516][ T31] Call Trace: [ 431.425820][ T31] [ 431.428758][ T31] vpanic+0x56c/0xa60 [ 431.432770][ T31] ? __pfx___schedule+0x10/0x10 [ 431.437642][ T31] ? __pfx_vpanic+0x10/0x10 [ 431.442167][ T31] ? __pfx_console_unlock+0x10/0x10 [ 431.447402][ T31] panic+0xc5/0xd0 [ 431.451408][ T31] ? __pfx_panic+0x10/0x10 [ 431.456027][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 431.461438][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 431.467632][ T31] watchdog+0x1023/0x1030 [ 431.472023][ T31] ? watchdog+0x21a/0x1030 [ 431.476469][ T31] kthread+0x388/0x470 [ 431.480555][ T31] ? __pfx_watchdog+0x10/0x10 [ 431.485253][ T31] ? __pfx_kthread+0x10/0x10 [ 431.489858][ T31] ret_from_fork+0x51e/0xb90 [ 431.494483][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 431.499622][ T31] ? __switch_to+0xc7d/0x1450 [ 431.504357][ T31] ? __pfx_kthread+0x10/0x10 [ 431.508961][ T31] ret_from_fork_asm+0x1a/0x30 [ 431.513765][ T31] [ 431.517325][ T31] Kernel Offset: disabled [ 431.521668][ T31] Rebooting in 86400 seconds..