last executing test programs: 22.206367503s ago: executing program 3 (id=5766): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x4e22, 0x0, 0x4e20, 0x800, 0xa, 0x80, 0xfcec0d021cdabe7f, 0x5c, 0x0, 0xee00}, {0x7fffffff, 0x81, 0x9, 0x4, 0x5, 0x5, 0x9080000000000000}, {0x7, 0xffffffff, 0x9, 0x3}, 0xfffffffe, 0x6e6bb2, 0x1, 0x1, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0xff}, 0xa, @in6=@empty, 0x0, 0x1, 0x0, 0xfa, 0xfffffffa, 0xe10, 0x81}}, 0xe8) r1 = socket$inet6(0xa, 0xa, 0xeaa3) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2d, 0x5a, 0x0, 0x80a5, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x10, 0x404b, 0xffffff63}}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x250, r2, 0x300, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x234, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x179}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3006}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xfffe, 0x81, 0x5, 0x8}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x123}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x250}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) getsockopt(r1, 0x9, 0x6, &(0x7f0000000600)=""/28, &(0x7f0000000640)=0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=@RTM_NEWMDB={0x58, 0x54, 0x2, 0x70bd27, 0x25dfdbfc, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x0, {@in6_addr=@empty, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x1, 0x3, {@in6_addr=@private0, 0x9edd}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x42c108365a6f0aa2}, 0x51) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000b00)={{r0, &(0x7f0000000800)='bpf_hash_func\x00', 0x408502, &(0x7f0000000840)={@_ha_fsid={[0x4, 0xfffffffb]}, {0x2, 0x4, 0x2, 0x9}}, 0x1, &(0x7f0000000880), &(0x7f00000008c0)=0x30a67292}, 0x2, &(0x7f0000000ac0)=[{0x2, 0x2, &(0x7f0000000900)='#K$#\x00', &(0x7f0000000940)="254b8e15f52be1c46dd2f0aca2409e16e08b73d736413953624bc9e3a8bc45966ef25bf3776e701f52808bf8366e001c54bbc31949b75138c6620dea89c60ce415cb17473ccf3586163a4f66386c5eb050b8c5a0d46648d838b61c0cb5c2b9960476bcd3d502fb16f8bbf57c55b56f0346562dcb308747319b727d3d012aa1ae33e462afd8d57a575d285dcf2b29e77598da6139e3ae8e30cc34ff1f3b5618aa6648b67ea9dcf0a01cfe2ce1a47a3c3a709e", 0xb2, 0x8}, {0x0, 0x81, &(0x7f0000000a00)='-:\x00', &(0x7f0000000a40)="2574b4204834f827a32d7c7b1d8e05f67d66518acc4ed8d7de21751d765fcbd2964ffc7ed81476aa9c2aa80983b7b35972d4253738fb7115f4e04dd4bba648e79bd0ee9ae91acfc34e8f1a43413c48605f1892de0ccca3ff89a603adfecd55afe3dab0d462f1219ce857cce4cb044065cca5028a028bfff439b346", 0x7b}]}) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000000b80)=0x80000001, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000bc0)={0x0, 0x1}, &(0x7f0000000c00)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000c40)={0xfff, 0xfff5, 0x8001, 0x8, 0x5, 0xcb83dc80, 0x9, 0x0, 0x0}, &(0x7f0000000c80)=0x20) getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000cc0)={r8, 0x1ff, 0x7, 0xfff, 0x30, 0x81, 0xd61, 0x9, {r9, @in={{0x2, 0x4e21, @empty}}, 0x7, 0x9, 0x45e, 0x9, 0xb}}, &(0x7f0000000d80)=0xb0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000dc0), &(0x7f0000000e00)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@bloom_filter={0x1e, 0xffffffff, 0x5, 0xb0, 0x294, r7, 0xd, '\x00', r4, r7, 0x2, 0x2, 0x1, 0xd}, 0x50) sendto$rose(r7, &(0x7f0000000ec0)="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", 0x1000, 0x4048011, &(0x7f0000001ec0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x3c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x1}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x2}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x2}]}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x1}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x11) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000002000)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmsg$NL80211_CMD_DEL_MPATH(r7, &(0x7f0000002180)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002140)={&(0x7f0000002080)={0x88, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x40014}, 0x4000011) bind$inet(r7, &(0x7f00000021c0)={0x2, 0x4e20, @loopback}, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000002240), r7) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x44, r10, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x572}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008001) getsockopt(r1, 0x5, 0x9, &(0x7f0000002380)=""/75, &(0x7f0000002400)=0x4b) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000002480)={0x5, &(0x7f0000002440)=[{0x2, 0xde, 0x8, 0x2}, {0xf, 0xa, 0x3, 0xc}, {0x8, 0x5, 0xf7, 0xf08}, {0x6, 0x62, 0xff, 0x5}, {0x32, 0x7, 0xf9}]}, 0x10) socket(0xa, 0x4, 0x7) syz_genetlink_get_family_id$mptcp(&(0x7f00000024c0), r7) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000002500)=""/125, &(0x7f0000002580)=0x7d) 21.700589247s ago: executing program 3 (id=5772): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x300, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xfffd}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x40}}, 0x54) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001015010400000000000000842cf123c4", @ANYRESDEC, @ANYRESDEC], 0x50}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f00000000c0)='{\x00', 0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000580)=0x63, 0x2) sendto$rxrpc(r1, 0x0, 0x0, 0x40850, &(0x7f0000000340)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x1, @loopback, 0x9}}, 0x24) r3 = getpid() sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@RTM_GETNSID={0x24, 0x5a, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x82}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x110}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) socket$igmp6(0xa, 0x3, 0x2) 21.515462685s ago: executing program 3 (id=5774): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x4d4, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1e}}}, 0xe8) close(r0) recvfrom$inet6(r0, &(0x7f0000000000)=""/134, 0x86, 0x1, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) 21.485159398s ago: executing program 2 (id=5775): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000000000000631a46aecd320000000000009500a50500001f00000000000000000000100000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x80802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffc}, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0) read(r1, 0x0, 0x0) sendto(r0, &(0x7f00000000c0)="2c6615147cb3ff43720f42a7fde68224de967e9da8858303b06b47c1f5dcaa9ed9d419abba30026c", 0x28, 0x0, &(0x7f0000000100)=@in6={0xa, 0x4e23, 0xf, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x80) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r5) sendmsg$NFC_CMD_DEP_LINK_UP(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fbdbdf250400000006000a0001000000080001006b9838"], 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r7, 0xc0385869, 0x0) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) r11 = socket$unix(0x1, 0x1, 0x0) bind$unix(r11, &(0x7f00000000c0)=@abs={0x1}, 0x6e) bind$unix(r11, &(0x7f0000000140)=@file={0x1, './file1\x00'}, 0x2) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 21.301597815s ago: executing program 3 (id=5778): ioctl$XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000040)='@]#-\x00', 0x8000, &(0x7f00000000c0)={@_ha_fsid={[0x3, 0x400]}, {0x6, 0x2, 0x5, 0x80}}, 0x4, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1c00000}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="6643ccc5de1e9fc596000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20) (async) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x10003, 0x0) (async) connect$unix(r0, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) 21.024981883s ago: executing program 3 (id=5782): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x30, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14}}, 0xc0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b80)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001"], 0xa0}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000640)={0x0, @aes128, 0x0, @desc4}) connect$inet6(r4, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e63, 0xe3, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4007daa}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x5, 0x0, 0x5, @mcast2, @private2, 0x10, 0x7800, 0x5b248, 0x2}}) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x32, &(0x7f0000000480)={@private0, r5}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xd, 0x38, &(0x7f0000000100)="d3c4f27923ed5e2b61a9862d8e", &(0x7f0000000180)=""/56, 0x5, 0x0, 0x60, 0x8f, &(0x7f0000000240)="0ef446ddf85c7ae4569b53962144a2181d0ee4885adb75a9c7bea56e94fdc765816a93019c33d2b7ef527afb1f643a19feac99b2ae7dcebe8f11b5c63543ad67ec338a322b9fe9c43f5c8c8866ee3dc1d655657de07675ea8f886d02c070db22", &(0x7f0000000500)="b8fd54c99a1c0cd722ddd69768a612bf1bf2ae72ba9962dc57a6c79b17f78d60b6c651e302e4cd85fc717a80ce5a5fe91a4d3fcb035bfb29a54bc060c9a2be328436186b71b6385a93644ff506f82eede582fe9b753a608d3bdd1c2c254e078fbdbc51a5cf358108852394c8a8ecaef187c0c2337834db2f211201d73d8c40271a29bd95ffc8ac1b1facb215fe5915", 0x0, 0x0, 0x6b1}, 0x50) connect$nfc_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x27, r3, 0x1, 0x5}, 0x10) 20.960472961s ago: executing program 0 (id=5784): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000050000006d000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) (rerun: 64) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000400)={r4, 0x1, 0x6}, 0x10) (async) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d80000001e0081054e81f782db4cb904021d080006007c09e8fe08a10a000e800a00142603600e1208000fc00e", 0x2d}], 0x1}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) (async) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="20002dbd7000fbdbdf251200000006001a0103000000180011800400060004000600040007000400030004000200a70bb23621863d2fa689eebd3d"], 0x34}, 0x1, 0x0, 0x0, 0x2000000}, 0x85) (async, rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) (async) r10 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r10, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xdc, 0x6, @local}, 0x14) (async) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x1d, r9}, 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x8, 0x257, {}, {r11, r12/1000+10000}, {0x1, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x1}, 0x32, 0x0, 0x0, 0x0, "6e033748d8439e1ff6f16890590e874f0b28c20bddb6f6db4e647fd5544f3809a2afaa65cb65a49f3f5869fd0752917472fc46f1d22f5fa680f4a836b522a5a1"}}, 0x80}}, 0x20044840) 20.849945388s ago: executing program 3 (id=5785): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000400000000000003100000400001802c0004001400010002000000ac14140f000000000000000014000200df000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000400102010100000000000000000a0000010e000600736e6d705f74726170000000"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x8040, 0x1, 0x2007fffc, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r3) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x6}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x2000801) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r5) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0103701b122a34bf6a0e04"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40440d0) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0xe01, 0x70bd2a, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x80) 20.706305323s ago: executing program 0 (id=5789): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0d0}, 0x4048051) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000240)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x9, @bearer=@l2={'eth', 0x3a, 'vcan0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0xaeeb030467afc1f3) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000004c0)={r0, &(0x7f00000003c0)='ethtool\x00', 0x141080, &(0x7f0000000400)={@_ha_fsid={[0xa, 0x81]}, {0x6, 0x3, 0xd, 0x8}}, 0x3, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0x9}) connect$pppl2tp(r3, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast2}, 0x0, 0x1, 0x4, 0x2}}, 0x26) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000580), r3) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r4, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4810) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r5, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}]}, 0x28}, 0x1, 0x0, 0x0, 0x404c001}, 0x800) connect$pppl2tp(r3, &(0x7f0000000800)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x1, 0x2, 0x0, {0xa, 0x4e21, 0x6, @loopback, 0x1}}}, 0x32) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, 0x17, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, r7, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7c68}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x101}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x2e}]}, 0x44}, 0x1, 0x0, 0x0, 0x8850}, 0x2000c050) sendto$packet(r3, &(0x7f0000000b00)="81a82a648e1743144567a437bdec6d59c00c9e4dce771c8c006f321821a1c3436126a98c53ff4b0533db2146226d3c9a95abfd1396e5172f396c2d31201f02c2f9fc60965e8dce998240ccbb10b6ae36", 0x50, 0x1, &(0x7f0000000b80)={0x11, 0x1c, r8, 0x1, 0x7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) recvmsg(r0, &(0x7f0000003200)={&(0x7f0000000bc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000003140)=[{&(0x7f0000000c40)=""/255, 0xff}, {&(0x7f0000000d40)=""/38, 0x26}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/239, 0xef}, {&(0x7f0000001e80)=""/92, 0x5c}, {&(0x7f0000001f00)=""/236, 0xec}, {&(0x7f0000002000)=""/40, 0x28}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/255, 0xff}], 0x9}, 0x10000) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000003340)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003300)={&(0x7f0000003280)={0x5c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20020080}, 0x4044045) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000003440)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x1004808}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x28, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x4000001) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000034c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r10, &(0x7f0000003580)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003540)={&(0x7f0000003500)={0x1c, r11, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x800) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000003680)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003640)={&(0x7f0000003600)={0x20, r5, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0xa6, 0x63}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x5) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000003700)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r10, &(0x7f00000037c0)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x80000000}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40080) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r9, &(0x7f00000038c0)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003880)={&(0x7f0000003840)={0x40, 0x4, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x4}]}]}, 0x40}}, 0x800) 20.646850112s ago: executing program 4 (id=5790): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0x1, &(0x7f00000000c0)="859f1cf951ae1b14aa45e45dcf8c94198e997a2bf8f44e3caa7d67bf246eee233a", &(0x7f0000000100)=""/219}, 0x20) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x14, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x6d}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) (async) r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x10, r2}, 0x18) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="ddbe"], 0x54}}, 0x0) 20.539165761s ago: executing program 4 (id=5791): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) poll(&(0x7f0000000140)=[{r1, 0x200}], 0x1, 0x30) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="50aea4aa4bf593e5758c7ea8656c973ef892d6e02778527d13142699d012507c0e5e9430ac9f1498b49598340f9d152f712841f3d452616e91692a5ea94d8de31db9fb45205642187f1eb1ec2466d91c69129ea2bf162a2eaaf6f4409537aaf2c42d891d800f41916281a42521", @ANYRES64=r2, @ANYRES64=0x0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @fallback=0x28}, 0x94) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000180)={0x1, 0x1, 0xffffffff, 0x6, 0xffff0001, 0x4}) 20.455711783s ago: executing program 4 (id=5792): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x2, 0x80805, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0x150, 0x210, 0xfeffffff, 0x150, 0x210, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'vlan1\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @rand_addr, @empty, @port, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @loopback}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x7a, &(0x7f0000000080)={0x0, 0x4, "179da51e"}, &(0x7f00000000c0)=0xc) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000500)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e22, @loopback}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7d, 0x6}) (rerun: 32) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x1, 0x7fff, 0x100, r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 20.388326725s ago: executing program 4 (id=5793): r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'ip6gretap0\x00', {0x2, 0x0, @multicast1}}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x81}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000010}, 0x4058) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f0000000200)=0x4, 0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0xd3, 0x4) r4 = accept4(r2, &(0x7f0000000240)=@in={0x2, 0x0, @remote}, &(0x7f00000002c0)=0x80, 0x80000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r2) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1bc, r5, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1a8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_BITS={0x198, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe3e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6d3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '&][&\\^+}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa25}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[#,\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{\xc4\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4044891}, 0x40040d0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f00000005c0)={0x18, 0x0, {0x1, @link_local, 'veth1\x00'}}) ioctl$OCFS2_IOC_REFLINK(r4, 0x40186f04, &(0x7f0000000680)={&(0x7f0000000600)='\x00', &(0x7f0000000640)='veth1\x00', 0x200}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x7, 0x4) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r4) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r6, 0x10, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x8000) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xb0, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0xc31}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket(0x1e, 0x800, 0xc) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000980), 0x4) syz_emit_ethernet(0x5a, &(0x7f00000009c0)={@remote, @remote, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@canfd={0xd, {{0x4, 0x1, 0x0, 0x1}, 0x3d, 0x3, 0x0, 0x0, "b47da3b77ed0fc7f086025811906a784e92e7aa59db1ff97850adfdbc98a8446ccd5831972b2bcdcd509b991d0d238842816a3d2da2200e59386fb6b91fa59d1"}}}}, &(0x7f0000000a40)={0x1, 0x1, [0xaeb, 0x90, 0xbd8, 0x48b]}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r7, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x2, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x809b}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xfffffffc}]}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4084) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r8, 0x891a, &(0x7f0000000bc0)={'syzkaller1\x00', {0x2, 0x4e23, @multicast2}}) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000c40)={r0}, 0x8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000c80)=@o_path={&(0x7f0000000c00)='./file0\x00', r9, 0x4000, r4}, 0x18) sendmsg$IPCTNL_MSG_EXP_DELETE(r9, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x58, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) ioctl$BTRFS_IOC_GET_FEATURES(r8, 0x80189439, &(0x7f0000000e00)) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x10, 0x3f5, 0x800, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48004}, 0x60080) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r9) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000002280)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002240)={&(0x7f0000000fc0)={0x1244, r10, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x43}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6480}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x204, 0x3, 0x0, 0x1, [{0xc0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xbb, 0x2, "a5285445bc868faa38ac737a3924a6fa2dc22fd62284590bf55cc7d467adfb9ed9ecc477436247476914d9d48bbc265926182feab89877f42cf705519cd5469e3a7884d1086ff48572f5f0210f22e923223235c3ac4009a53d9f75465ecc54ea1d296a7a5390cee64db0a1a25d4061a981a435ffac77f5b6ad3f68c71b008cbdab16a25a5ac7207aac5d6c46b383e029a8acdd3e08d085c1c0a18f29e81f16a816f11d4c532c120adfc798adfa43208be05425ecd11daa"}}, {0x48, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x41, 0x1, "dc6ab3a8035cfc6e95e7ccdbbe5cdf38e246840d08e2179fb5811e0a426911bdf626b811d2b0652c3ec8f51ef735291e517bf030d5cb24e576902f1842"}}, {0xf8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xf4, 0x2, "953b1d426e8373b7bc8f7de6d5cb40b8f1ac16fa28978668422590015a06d78cfdb6f640c99ee072b8867adeca8a9e1caad9998dda36842a523f30c01dd7e5c72e7ad361e0ab2c58fa66925ab3f15b0b23b7ca738977160ab826481a79f19232ee99988eeeaf9041c96ba5dbdcfcef6276baa97f6983a7b681e75270f23b7d47d16e6cdc6f36f0b1e33012affc99547676566d0a4261809ed64acb661b826826a58923cc70984db5406b8d03436c2fcdf1c26bcf85fc92ce8964ff758511bace144d71e7cbc7c28f1af7c8df98188ae750987e8c0b5b6ff477c6b75df7f03b2e6c1614bd2c0bb38796e0ecd39750c5f9"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x100c, 0x3, 0x0, 0x1, [{0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x1244}, 0x1, 0x0, 0x0, 0x804}, 0x0) 18.302656969s ago: executing program 4 (id=5795): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x2, 0x2}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x16, 0xfc0, 0x66, 0x0, 0xb, 0x73, 0x0, @private=0xa010100, @broadcast}, "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"}}, 0xfce) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@empty}]}, 0x1c}}, 0x0) recvmmsg(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000400)=""/203, 0xcb}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000740)=""/191, 0xbf}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 18.237107309s ago: executing program 0 (id=5797): ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x8}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8000009}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r1 = epoll_create(0x3) preadv(r1, &(0x7f0000000380)=[{}, {&(0x7f0000000180)=""/188, 0xbc}, {&(0x7f00000000c0)=""/111, 0x6f}, {&(0x7f0000000240)=""/56, 0x38}, {&(0x7f0000000440)=""/165, 0xa5}, {&(0x7f00000002c0)=""/78, 0x4e}], 0x6, 0x8, 0xfffffff7) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x8}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8000009}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) (async) epoll_create(0x3) (async) preadv(r1, &(0x7f0000000380)=[{}, {&(0x7f0000000180)=""/188, 0xbc}, {&(0x7f00000000c0)=""/111, 0x6f}, {&(0x7f0000000240)=""/56, 0x38}, {&(0x7f0000000440)=""/165, 0xa5}, {&(0x7f00000002c0)=""/78, 0x4e}], 0x6, 0x8, 0xfffffff7) (async) 18.203272569s ago: executing program 2 (id=5799): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) shutdown(r0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x14, r2, 0x1, 0x0, 0x25dfdbfb, {0x54}}, 0x9}}, 0x4841) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000240)={0x7, 0x7, 0x2}, &(0x7f0000000280)=0x28) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f00000000c0), 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2b43042deb6535eb4b97e061e2b615414516b7704cf4ac722c91260e0dce3425a5b29d69eca90f11c4b08af1ca567eeb75d24aeec199e49f1b2e32493bf31a750e353705239dd46a1e3d95d7bf60e026197f6b3b1fff40bef0ffe41ec0ba4fdc5b98fd05a24ba37d9094ce941a1d164bc3617a6312d1da326734e5002448e0859e882dc475fe1905f31ab41a43fee2520ff692a4d41bcfa540507f7f744c385d4c1c34c1fbd04a6cf637befbc9a022a985e40b58724aabe2"], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x40c8080) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="3fab000046d43ab2f39252"], 0x14}}, 0x0) close(r1) 18.050536816s ago: executing program 0 (id=5800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x14, r4, 0x10, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20044810) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40c8011) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0xec}}, 0x0) 17.927618564s ago: executing program 2 (id=5802): socket$kcm(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f00000035c0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="b180dccc16eb676ff09b3e4ef26f701d", 0x10}, {&(0x7f0000001ac0)="185f70788926e08ce31809863a7db4d975e887eea5dcd974fef9c6ed45a821773237e5d2d329c07c7e1bb2e75ecccfb76e11781c5daab14253f6959a0400da0bf98a0ab829816250cf32206089785600f7c3ee056ab6fdd436f0c3e71740000000d5d70f35c3c55403e6a22e4560ac69", 0x70}], 0x2, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10}], 0x1, 0x84) recvmsg$can_raw(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000440)=""/127, 0x7f}, {&(0x7f0000000840)=""/205, 0xcd}], 0x2}, 0x40) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, 0x0, 0xb, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_REV={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x40800) r3 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a340977770a89"], 0xa) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 17.833782423s ago: executing program 0 (id=5803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x50}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448df, &(0x7f00000002c0)) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000001500)=@newlink={0x30, 0x10, 0x301, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}, @IFLA_NET_NS_PID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4041}, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xfce6, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x14, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}]}, 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) read(r7, &(0x7f0000000080)=""/38, 0x26) (async) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg$inet6(r5, &(0x7f0000003480)=[{{&(0x7f0000000640)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, 0x0}}], 0x1, 0x20008080) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x124, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0xf4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x78, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffe5c82a8e}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40000400}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "429391b7ce42d77e417ef83268d60a06e6fcfd4b894b701d7987cd13df3147ae"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a985ed22bfeb23de7e3786b90973240619aa4ee11899aa9ca33cb00c757d60a5"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6ba3d45e1fd14207e8a1ddf7cb1bd553"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfc}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2217fb7ce1b95890b64faca136e892f3"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x124}, 0x1, 0x0, 0x0, 0x404c010}, 0x8840) 17.751720096s ago: executing program 1 (id=5804): mmap(&(0x7f00002e3000/0x3000)=nil, 0x3000, 0x3000004, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)="991347c388249d2e", 0x8}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r6, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r7) sendmsg$alg(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}, 0x4040880) sendmsg$nl_route_sched(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001dc0)=@newchain={0x80, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xd}, {0x9, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x7, 0xa}}]}}, @filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @loopback}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffffff, 0x0, 0xffffff00, 0xffffff00]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x44000) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x806000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000240), 0x12) r11 = openat$cgroup_procs(r9, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r11, r11, 0x0, 0x9) r12 = socket$rds(0x15, 0x5, 0x0) bind$rds(r12, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x4a) 17.51680496s ago: executing program 2 (id=5805): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x1, 0x3, 0x80000001}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 17.40989604s ago: executing program 0 (id=5806): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000700)={0x1, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @local}}}, 0x108) (async) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000700)={0x1, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @local}}}, 0x108) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) socket$unix(0x1, 0x4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) listen(r4, 0x7) (async) listen(r4, 0x7) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000bedbdfa503004000080001000000000010000380"], 0x2c}, 0x1, 0x0, 0x0, 0x140}, 0x20008040) 17.354392724s ago: executing program 2 (id=5807): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r0, 0x0, 0x0, 0x800, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f0000000000)=""/194, 0x5}) r2 = socket$inet(0x10, 0x3, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000140), 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r4, 0x104, 0x5, &(0x7f0000000300)=0xffffff6c, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000192c0)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000019340)=@deltclass={0xc58, 0x29, 0x4, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xe, 0xffe0}, {0xa, 0xb}, {0xa, 0x9}}, [@tclass_kind_options=@c_htb={{0x8}, {0xc20, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x6, 0x80, 0x7, 0x2, 0x2, 0x380a, 0x8, 0x200, 0x0, 0x5, 0x0, 0x0, 0x80000000, 0x2, 0x3, 0x200, 0x667c, 0x40, 0x4, 0x8000, 0x7f, 0xfffffe00, 0x6, 0xfff, 0xc, 0x1, 0xfffff801, 0x14ad, 0x3, 0x7, 0x732, 0x8001, 0x0, 0xff, 0x0, 0x1ff, 0x6, 0x40e4, 0x3, 0x7, 0xc000, 0x42a, 0x25e, 0x1, 0x9, 0xf, 0x2, 0xfebb, 0x0, 0x7f, 0x5, 0xffffffff, 0x9, 0x81, 0x7ff, 0x1, 0x8, 0x7, 0x80000001, 0x6, 0x7, 0x1, 0x7f, 0x99d, 0x3ff, 0x81, 0xfffffffc, 0x7, 0x1, 0xfffffffc, 0x1, 0x9, 0x4, 0xb, 0x7f, 0x3, 0x4, 0x3, 0x15f6, 0x3, 0x8, 0x7, 0x6, 0xffff7a5d, 0x8, 0x4, 0x1, 0x3ff, 0x2, 0x5, 0x401, 0x16, 0x603, 0x7fff, 0x2, 0x5, 0x7, 0x5, 0xd8f2, 0x0, 0xb3, 0x6, 0x1, 0x70, 0x5, 0x817, 0x3bbc00a3, 0x8, 0x5b, 0x1, 0x3, 0x7, 0x7, 0x3, 0x3, 0x9, 0x1ff, 0x1000, 0xfffff20e, 0xaa0, 0x2, 0xfffffcac, 0x9, 0x1ff, 0x9, 0x2, 0x3e, 0x10, 0x3f8, 0x3, 0x4, 0x8000, 0x6, 0x654, 0x1e5, 0x4, 0x9, 0xfffffff8, 0x0, 0xffffffff, 0x4, 0x678f, 0xffffff04, 0x80000001, 0x8a18, 0xe2, 0x6, 0x3ff, 0x6, 0x40, 0x200, 0x8000, 0xb3, 0x4, 0x3, 0x7, 0x6, 0x5, 0x0, 0x5, 0x1, 0x7, 0xcfa, 0xb, 0x4, 0x5, 0x9ba, 0x6, 0xc0, 0x80, 0x6, 0x1, 0x5, 0x7, 0x6, 0x4, 0x4, 0x1, 0x1, 0x3, 0x7ff, 0x6, 0x8, 0x843, 0x5, 0x5, 0xa43, 0x2, 0x0, 0xfffffff8, 0x8c, 0xff, 0xd6, 0x10, 0x7fffffff, 0xe0, 0x8, 0x0, 0x1, 0xfffffffd, 0x800, 0x401, 0xfffffff3, 0x8001, 0x9, 0x79, 0x0, 0x7ab, 0x10001, 0x6, 0x4, 0x691, 0x7f, 0x5, 0x8000, 0x96, 0x3, 0x3, 0x4, 0x80000000, 0x3, 0x5a0bd2ac, 0x10000, 0x3, 0x7, 0xf1f8, 0xda6, 0x0, 0x10000, 0x7, 0x67, 0x1, 0x7, 0x0, 0x0, 0x6, 0x100, 0x4, 0x27911aac, 0xfffff137, 0xb, 0x1000, 0x2, 0x1, 0x0, 0x80, 0x80000000, 0x7fff, 0x9, 0x10001, 0x2, 0x2, 0x90a1, 0xdaf, 0x3, 0x2]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0xffff, 0xe, 0x9563, 0x93, 0x8, 0x7, 0x445, 0x5, 0x10000, 0x7, 0xd, 0x8000, 0x688, 0x3, 0x170, 0x10001, 0x800, 0x4, 0x8, 0xeb, 0x8, 0x9, 0x0, 0x5, 0xd23e, 0x9, 0xd, 0x8, 0x1, 0x80000001, 0x8, 0x6, 0xea, 0x8d45, 0x1000, 0x100, 0x8, 0x10001, 0xf, 0x7fff, 0x10000, 0x5, 0x4, 0x7fffffff, 0x6, 0x4, 0x2, 0x5, 0x4375, 0xfffffffb, 0x70e1, 0x2, 0x9, 0xffffffff, 0x80, 0x401, 0x3, 0x0, 0x6, 0x5, 0x4, 0x3, 0x7, 0xff, 0x5, 0x9, 0x80, 0x600, 0x266c, 0x2, 0x8, 0x8, 0x0, 0x6, 0x2, 0x1, 0x2, 0x7ff, 0x40, 0x80000001, 0x800000, 0x6, 0x4, 0x80000000, 0x8e31, 0x40, 0x2, 0x3, 0x6, 0x200, 0x800, 0x5, 0x6, 0x8, 0xffffffe0, 0x3, 0x52e, 0x0, 0x2, 0x711cfe2c, 0x90, 0x3, 0x0, 0x7, 0x1, 0x80, 0x0, 0x8, 0x9, 0x9, 0x6e7, 0x4a2, 0x9, 0x9, 0xfffffbff, 0x4, 0xa5c00000, 0x9, 0x2, 0x5, 0xfff, 0x3, 0x466, 0x0, 0x1000, 0x1ff, 0x60b, 0x80000001, 0xa, 0x8, 0x3a, 0x4, 0xa3, 0x5, 0xcbaa, 0x4, 0x200, 0xfffff801, 0x0, 0x8000, 0x2, 0x3, 0x6, 0x9, 0x3, 0x80, 0x6, 0x9, 0x8acc, 0x9, 0xc, 0x30d, 0x0, 0x1, 0x8, 0x101, 0x9, 0x5, 0xd7, 0x0, 0x8, 0xb1, 0x40000, 0x5, 0x8001, 0x5, 0xf, 0xc, 0xffff, 0x1, 0x3c3ef5b7, 0x94fd, 0x9, 0x5, 0x3, 0x81, 0x8, 0x4, 0x8, 0x1, 0xa68a, 0x0, 0xb54e, 0x8, 0x99, 0x2, 0xfff, 0x100, 0x7, 0x621a, 0x3, 0x3, 0x0, 0x1000, 0x6, 0x96, 0x7, 0x8, 0x6, 0x3, 0xa, 0x7, 0x1, 0x5, 0x6, 0x78ff, 0x10, 0x5, 0x70e, 0x1, 0xb511, 0x8, 0x4, 0x3, 0x6, 0x1, 0x6, 0xe, 0xb6c, 0x401, 0x6, 0x200, 0x89, 0x3, 0x944, 0xb, 0xdfa, 0x9, 0x1, 0x6, 0xfffff237, 0x49, 0x8, 0x5, 0x0, 0x400, 0xd0, 0x6, 0x2, 0x3ff, 0x3, 0x7, 0x2, 0x0, 0x5, 0x4, 0xfffff000, 0x100, 0x2, 0x1, 0x3, 0x3, 0x9, 0x1, 0x8, 0x7ff]}, @TCA_HTB_CEIL64={0xc}, @TCA_HTB_CTAB={0x404, 0x3, [0x5, 0x3, 0x2, 0x7, 0x80, 0x4, 0x6, 0x0, 0x400, 0x80, 0x4, 0x9, 0x3, 0x3, 0x0, 0xfffffffb, 0x6, 0x1, 0x6, 0x4, 0x4, 0xd, 0x1, 0x2, 0x3, 0x1, 0x3c6b, 0x0, 0x9, 0xb, 0x4, 0x480, 0x6, 0x2, 0x0, 0xfffffff9, 0x9, 0x1, 0x10, 0x5, 0x20b, 0x1, 0x0, 0x1c, 0x2, 0x9, 0x6, 0x5, 0x33c13d41, 0x4, 0x1, 0x85, 0xa81, 0x4, 0x7fffffff, 0x6, 0x0, 0x3, 0x9, 0xdc, 0xfff, 0x10, 0x1, 0x3, 0x7c, 0x8, 0xa0, 0x8ce6, 0x3, 0xb, 0x6, 0x8000, 0x7, 0x45, 0x7, 0x9, 0xfff, 0x6, 0x3, 0x3, 0x2, 0xfbb, 0x5dc, 0x0, 0x2, 0xae, 0x8c, 0x4, 0xe, 0x7, 0x5, 0x8, 0x7, 0x2, 0x2, 0x6, 0x0, 0x5, 0x7, 0x1ff, 0x401, 0xfffffff8, 0x2dc5, 0x1f8, 0x5, 0x5, 0x0, 0x5, 0x4d, 0xce, 0x0, 0x2, 0x8001, 0x7e521fd3, 0xf4d9, 0xc, 0x400, 0x9, 0x3, 0x1, 0xe, 0x3, 0x8, 0x6, 0x71e2490d, 0x5, 0x400, 0xfffffff2, 0x3, 0xfffffff7, 0x7, 0x2, 0x1, 0x4, 0x0, 0x4, 0x81, 0x7fff, 0x9, 0xe5, 0x10000, 0x96, 0x80000001, 0x0, 0x7, 0xffffffff, 0xa46, 0x800, 0x80, 0x2, 0x7, 0xff, 0x5, 0x0, 0x9, 0x7fffffff, 0x400, 0xfffffffa, 0x401, 0x9, 0x8, 0x80000000, 0x1, 0x5, 0x6, 0x0, 0x825, 0x40, 0x0, 0xad, 0xd, 0xe, 0x8, 0xfffffff8, 0x1000, 0x5, 0x7, 0x10000, 0x4, 0xdf79, 0x5, 0x1, 0x912, 0x40, 0xc559, 0xb, 0x6, 0x2, 0x4c1, 0xe4, 0x4, 0x8, 0x7fffffff, 0x96c, 0x1, 0xafc5, 0x9, 0xfffffffb, 0xd485, 0x1, 0x7, 0x0, 0x8, 0xbab0, 0x4, 0x3, 0x2000, 0x5, 0x4, 0x1, 0x80000000, 0x1, 0x6, 0x3, 0x10, 0x4, 0x5, 0x3, 0x0, 0x7ff, 0x1, 0x57e, 0x400, 0x6, 0x5, 0x5, 0x4, 0x8, 0xa, 0x3f, 0x1, 0x1, 0x7, 0x6, 0x4, 0xa930, 0x1, 0x0, 0x1, 0x3, 0x10001, 0x5, 0xffffff83, 0x101, 0x7f, 0xc8ec, 0x9, 0xfffffffb, 0x4, 0x7fff, 0x3ff, 0x1, 0x5, 0x7, 0x80000000, 0xffffff01]}]}}, @tclass_kind_options=@c_cake={0x9}]}, 0xc58}}, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read(r6, &(0x7f0000000080)=""/22, 0x16) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000006900030500000000000000000081"], 0x18}}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x271c, &(0x7f00000002c0)=""/102399, &(0x7f0000000280)=0x18fff) 17.269779043s ago: executing program 4 (id=5808): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4044400) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept(r0, &(0x7f00000003c0)=@ethernet={0x0, @multicast}, &(0x7f0000000180)=0x80) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000004c0)={@ipv4={""/10, ""/2, @multicast1}, 0x0}, &(0x7f0000000500)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="00032bbd7000ffdbdf25190000000c00018008000100", @ANYRES32=r3, @ANYBLOB="6c000180140002007767320000000000000000000001000088b25725614baac7fc92e2820b1402006e6963766630000000000000000800000800010000", @ANYRES32=0x0, @ANYBLOB="1400020062726964676530000000000000000000080003000100000008000100", @ANYRES32=r4, @ANYBLOB="14000200636169663000"/20], 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40008) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e640000000004000280080003"], 0x3c}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r6, 0x12, 0x7, 0x0, &(0x7f00000000c0)) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r8, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="d796a70930a19dcb3e5a316af8618268c2f67c50130ca577fd41933a988713d7b7dabcdab1f84147faf2b80a507b9c93338a1aec285ad54bf82eeff7ee7831a601375c818be9f0019d77017f4fccba6b97b7f53ae5eb3d0bb3e57140c0649bd7eedbbd50cd618b11be2a98892d75575b8ad7e898c38c2938c7f8f5b91142a813647d", @ANYRES8=r0, @ANYRES8=r8], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, 0x24}, 0x94) 17.202107397s ago: executing program 2 (id=5809): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vxcan1\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x3a, 0x7, [{}, {}, {}, {}, {}, {}, {}]}}) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x4c, 0x0, &(0x7f0000001000)) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000240)={{r0, &(0x7f0000000140)='\x00', 0x10040, &(0x7f0000000180)={@_ha_fsid={[0x2, 0x10]}, {0x0, 0x8, 0xf7, 0xa}}, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x3a9}, {[0x1d46, 0x9, 0x10, 0xffff]}, 0x4, 0x1000, &(0x7f0000000640)=""/4096}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf250b000000f7940300", @ANYRES32=r5, @ANYBLOB="20005080110001009fc99462abff97d79173e1f5470000000500020002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000095}, 0x24040080) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}]]}, 0x40}, 0x1, 0x0, 0x0, 0xd37697ff28093c0e}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r4, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x6a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0xc004}, 0x2f85b49b426113a7) 16.801773555s ago: executing program 1 (id=5810): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9, 0x80012, r0, 0xf1ee3000) getsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x2bd, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@empty, @local, 0x0}, &(0x7f0000000340)=0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xb, 0x0, 0xffffffffffffffff, 0xe8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x17, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffe12, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x90, &(0x7f0000000240)=""/144, 0x40f00, 0x10, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x1, 0x7ff, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000480)=[r4], &(0x7f00000004c0)=[{0x5, 0x5, 0xa, 0x5}, {0x5, 0x3, 0x3, 0x5}, {0x4, 0x1, 0x7, 0x2}, {0x3, 0x3, 0xc, 0x9}, {0x5, 0x4, 0x3, 0xa}], 0x10, 0x8}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r5, 0x11, 0x1, &(0x7f0000000600)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000640)={'wg2\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x438, 0x308, 0x160, 0xc8, 0x220, 0x220, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x6, &(0x7f0000000680), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}, 0xff000000, 0xffffffff, 'batadv0\x00', 'veth1_virt_wifi\x00', {}, {}, 0x5c, 0x2}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x60000000, 0x1, @rand_addr=0x64010102, 0x4e21}}}, {{@ip={@loopback, @private=0xa010100, 0xffffff00, 0xff, 'ip6_vti0\x00', 'veth0_to_hsr\x00', {}, {}, 0x33, 0x2, 0x39}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xcd, 0x2}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x8000, 0x7a, 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x2}}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x42}, 0xff, 0xffffffff, 'pimreg1\x00', 'tunl0\x00', {}, {}, 0x89, 0x0, 0x1}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x10}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x40}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000c80)=@get={0x1, &(0x7f0000000bc0)=""/156, 0x5}) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000cc0)) (async) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r7, &(0x7f0000000d00), &(0x7f0000000d80)=0x6e) (async) accept$unix(r7, &(0x7f0000000d00), &(0x7f0000000d80)=0x6e) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x60014bcf6c5730cd}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)=@newqdisc={0xb0, 0x24, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xa, 0x2}, {0xfff1, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x8}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x3}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x6}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x3}]}}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6d4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7c}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8000}, @qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x51, 0x3}}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20044801}, 0x20004001) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000f40)={0x0, 0x2c, 0x6}, &(0x7f0000000f80)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000f40)={0x0, 0x2c, 0x6}, &(0x7f0000000f80)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000fc0)={r9, 0x3, 0x30, 0xc51b, 0x3}, &(0x7f0000001000)=0x18) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000fc0)={r9, 0x3, 0x30, 0xc51b, 0x3}, &(0x7f0000001000)=0x18) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000001040)=r9, 0x4) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r5, &(0x7f0000001080)) (async) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r5, &(0x7f0000001080)) socket$xdp(0x2c, 0x3, 0x0) (async) r11 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000010c0)={@private, @loopback, 0x0}, &(0x7f0000001100)=0xc) bind$xdp(r11, &(0x7f0000001140)={0x2c, 0x1, r12, 0x21}, 0x10) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, &(0x7f0000001180)=""/96, &(0x7f0000001200)=0x60) openat$cgroup(0xffffffffffffffff, &(0x7f0000001240)='syz1\x00', 0x200002, 0x0) (async) r13 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001240)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r13, &(0x7f0000001280)='cgroup.threads\x00', 0x2, 0x0) (async) openat$cgroup_procs(r13, &(0x7f0000001280)='cgroup.threads\x00', 0x2, 0x0) r14 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCGARP(r14, 0x8954, &(0x7f00000012c0)={{0x2, 0x4e20, @remote}, {0x6, @local}, 0x40, {0x2, 0x4e23, @remote}, 'dummy0\x00'}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x5c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 16.550550781s ago: executing program 1 (id=5811): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x80800) (async, rerun: 32) r1 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCOUTQ(r1, 0x5411, 0x0) (async, rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) recvmmsg(r2, &(0x7f0000000240)=[{{&(0x7f0000000000)=@can, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/120, 0x78}], 0x1, &(0x7f0000000140)=""/215, 0xd7}, 0x9}], 0x1, 0x120, &(0x7f0000000280)={0x0, 0x3938700}) 15.5655537s ago: executing program 1 (id=5812): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket(0x22, 0x2, 0x3) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x9e54f29ff072a93b}, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_FLOW={0x8, 0xb, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x18) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @private}, &(0x7f0000000380)=0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r3, &(0x7f0000000300)="838934a28f073dc79087d10ec509ff89", &(0x7f00000003c0)=@tcp=r4, 0x2}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000640)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r6, 0x408, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x8001, 0x9, 0x2, 0x0]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8811}, 0x11) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 15.40354064s ago: executing program 1 (id=5813): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003, {0x0, 0xf0}}, 0x18) (async) recvfrom$inet(r0, 0x0, 0x0, 0x40, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x18, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) close(0x3) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) 15.264568401s ago: executing program 1 (id=5814): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) (async) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x120, 0x111, 0x4b4, 0x120, 0xd4feffff, 0x230, 0x20a, 0x278, 0x230, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x7}, @common=@unspec=@state={{0x28}, {0x3}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [0x0, 0xffffff00, 0x0, 0xffffffff], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x40, 0x7fffffff, 0x0, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffe}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) pwritev(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)="80fd01000040", 0x6}], 0x1, 0x0, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000002500090122bd7008fcffffff020000000b003d807bfa472f962330000800030034"], 0x38}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) (async) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000002500090122bd7008fcffffff020000000b003d807bfa472f962330000800030034"], 0x38}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/user\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/user\x00') setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) (async) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8, 0x0, r7, 0xfffffffe}, 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8, 0x0, r7, 0xfffffffe}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000280)=""/82, 0x52}, {&(0x7f0000000300)=""/60, 0x3c}, {&(0x7f0000000340)=""/78, 0x4e}], 0x4, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x40010100) 2.214278131s ago: executing program 32 (id=5806): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000700)={0x1, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @local}}}, 0x108) (async) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000700)={0x1, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @local}}}, 0x108) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) socket$unix(0x1, 0x4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) listen(r4, 0x7) (async) listen(r4, 0x7) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000bedbdfa503004000080001000000000010000380"], 0x2c}, 0x1, 0x0, 0x0, 0x140}, 0x20008040) 2.164453207s ago: executing program 33 (id=5809): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vxcan1\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x3a, 0x7, [{}, {}, {}, {}, {}, {}, {}]}}) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x4c, 0x0, &(0x7f0000001000)) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000240)={{r0, &(0x7f0000000140)='\x00', 0x10040, &(0x7f0000000180)={@_ha_fsid={[0x2, 0x10]}, {0x0, 0x8, 0xf7, 0xa}}, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x3a9}, {[0x1d46, 0x9, 0x10, 0xffff]}, 0x4, 0x1000, &(0x7f0000000640)=""/4096}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf250b000000f7940300", @ANYRES32=r5, @ANYBLOB="20005080110001009fc99462abff97d79173e1f5470000000500020002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000095}, 0x24040080) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x40, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}]]}, 0x40}, 0x1, 0x0, 0x0, 0xd37697ff28093c0e}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r4, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x6a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0xc004}, 0x2f85b49b426113a7) 2.072020813s ago: executing program 34 (id=5808): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4044400) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept(r0, &(0x7f00000003c0)=@ethernet={0x0, @multicast}, &(0x7f0000000180)=0x80) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000004c0)={@ipv4={""/10, ""/2, @multicast1}, 0x0}, &(0x7f0000000500)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="00032bbd7000ffdbdf25190000000c00018008000100", @ANYRES32=r3, @ANYBLOB="6c000180140002007767320000000000000000000001000088b25725614baac7fc92e2820b1402006e6963766630000000000000000800000800010000", @ANYRES32=0x0, @ANYBLOB="1400020062726964676530000000000000000000080003000100000008000100", @ANYRES32=r4, @ANYBLOB="14000200636169663000"/20], 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40008) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e640000000004000280080003"], 0x3c}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_DEFER_SETUP(r6, 0x12, 0x7, 0x0, &(0x7f00000000c0)) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}], 0x1}, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r8, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="d796a70930a19dcb3e5a316af8618268c2f67c50130ca577fd41933a988713d7b7dabcdab1f84147faf2b80a507b9c93338a1aec285ad54bf82eeff7ee7831a601375c818be9f0019d77017f4fccba6b97b7f53ae5eb3d0bb3e57140c0649bd7eedbbd50cd618b11be2a98892d75575b8ad7e898c38c2938c7f8f5b91142a813647d", @ANYRES8=r0, @ANYRES8=r8], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, 0x24}, 0x94) 0s ago: executing program 35 (id=5814): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) (async) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r1, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x120, 0x111, 0x4b4, 0x120, 0xd4feffff, 0x230, 0x20a, 0x278, 0x230, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x7}, @common=@unspec=@state={{0x28}, {0x3}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [0x0, 0xffffff00, 0x0, 0xffffffff], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x40, 0x7fffffff, 0x0, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffe}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) pwritev(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)="80fd01000040", 0x6}], 0x1, 0x0, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000002500090122bd7008fcffffff020000000b003d807bfa472f962330000800030034"], 0x38}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) (async) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000002500090122bd7008fcffffff020000000b003d807bfa472f962330000800030034"], 0x38}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/user\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/user\x00') setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) (async) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8, 0x0, r7, 0xfffffffe}, 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8, 0x0, r7, 0xfffffffe}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000280)=""/82, 0x52}, {&(0x7f0000000300)=""/60, 0x3c}, {&(0x7f0000000340)=""/78, 0x4e}], 0x4, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x40010100) kernel console output (not intermixed with test programs): T23065] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4538'. [ 602.856553][T23063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4537'. [ 603.033024][T23078] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4542'. [ 603.449456][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 603.487897][T23111] netlink: 'syz.4.4553': attribute type 12 has an invalid length. [ 603.518987][T23111] bond4: option primary_reselect: invalid value (255) [ 603.531236][T23111] bond4 (unregistering): Released all slaves [ 603.653147][T23120] netlink: 'syz.2.4555': attribute type 10 has an invalid length. [ 603.679937][T23120] team0: Device ipvlan1 failed to register rx_handler [ 603.887213][T23139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 603.968930][T23145] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 604.092761][T23149] syzkaller1: entered promiscuous mode [ 604.111942][T23149] syzkaller1: entered allmulticast mode [ 604.148354][T23156] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4567'. [ 604.179923][T23156] netlink: 'syz.2.4567': attribute type 8 has an invalid length. [ 604.414938][T23172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4570'. [ 604.458391][T23173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4569'. [ 604.489280][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 604.602738][T23180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4571'. [ 604.787331][T23188] netlink: 'syz.4.4574': attribute type 1 has an invalid length. [ 604.876090][T23188] 8021q: adding VLAN 0 to HW filter on device bond4 [ 604.907752][T23192] netlink: 'syz.2.4575': attribute type 1 has an invalid length. [ 605.177804][T23203] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 605.367913][T23207] netlink: 'syz.4.4580': attribute type 58 has an invalid length. [ 605.513263][T23217] xt_policy: output policy not valid in PREROUTING and INPUT [ 605.513273][T23225] xt_policy: output policy not valid in PREROUTING and INPUT [ 605.529369][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 605.539697][T23216] bond0: entered promiscuous mode [ 605.547157][T23216] gretap0: entered promiscuous mode [ 605.555164][T23216] debugfs: 'hsr1' already exists in 'hsr' [ 605.583412][T23216] Cannot create hsr debugfs directory [ 605.588952][T23216] hsr1: entered promiscuous mode [ 605.613060][T23223] veth0: entered promiscuous mode [ 605.621040][T23221] veth0: left promiscuous mode [ 605.754909][T23236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.039499][T23259] bridge0: entered allmulticast mode [ 606.552250][T23295] x_tables: duplicate underflow at hook 1 [ 606.559011][T23295] x_tables: duplicate underflow at hook 1 [ 606.569281][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 606.687795][T23299] validate_nla: 4 callbacks suppressed [ 606.687814][T23299] netlink: 'syz.4.4610': attribute type 7 has an invalid length. [ 607.233540][T23324] vlan1: entered promiscuous mode [ 607.454490][T23343] netlink: 'syz.3.4624': attribute type 1 has an invalid length. [ 607.542505][T23343] 8021q: adding VLAN 0 to HW filter on device bond6 [ 607.578922][T23346] bond6: (slave geneve2): making interface the new active one [ 607.593959][T23346] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 607.609435][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 607.660793][T23350] syzkaller0: entered promiscuous mode [ 607.677406][T23350] syzkaller0: entered allmulticast mode [ 607.775177][T23360] __nla_validate_parse: 16 callbacks suppressed [ 607.775197][T23360] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4627'. [ 607.912211][T23363] netlink: 'syz.0.4628': attribute type 10 has an invalid length. [ 607.921072][T23363] bond0: (slave wlan1): Opening slave failed [ 607.974800][T16076] block nbd3: Receive control failed (result -32) [ 608.104308][T23379] netlink: 'syz.4.4634': attribute type 10 has an invalid length. [ 608.221118][T23385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.337471][T23391] 8021q: VLANs not supported on xfrm0 [ 608.532737][T23400] netlink: 796 bytes leftover after parsing attributes in process `syz.0.4641'. [ 608.544140][T23400] netlink: 'syz.0.4641': attribute type 1 has an invalid length. [ 608.562397][T23400] netlink: 'syz.0.4641': attribute type 2 has an invalid length. [ 608.649334][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 608.667962][T23387] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.4637'. [ 608.678708][T23402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4642'. [ 608.762438][T23413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 608.769784][T23413] IPv6: NLM_F_CREATE should be set when creating new route [ 608.777049][T23413] IPv6: NLM_F_CREATE should be set when creating new route [ 608.784339][T23413] IPv6: NLM_F_CREATE should be set when creating new route [ 608.817052][T23413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 608.901589][T23417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4647'. [ 608.944196][T23417] xfrm1: entered promiscuous mode [ 608.957453][T23417] xfrm1: entered allmulticast mode [ 608.970703][T23417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4647'. [ 609.114253][T23424] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4651'. [ 609.136284][T23429] netlink: 'syz.4.4650': attribute type 1 has an invalid length. [ 609.270328][T23438] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4654'. [ 609.288790][T23438] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4654'. [ 609.306733][T23439] mac80211_hwsim hwsim42 syzkaller0: left promiscuous mode [ 609.314138][T23439] mac80211_hwsim hwsim42 syzkaller0: left allmulticast mode [ 609.614812][T23459] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 609.677009][T23463] netlink: 'syz.3.4662': attribute type 1 has an invalid length. [ 609.689284][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 609.785615][T23465] bond7: (slave gretap1): making interface the new active one [ 609.797781][T23465] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 609.836174][T23471] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4664'. [ 609.995570][T23480] netlink: 'syz.0.4667': attribute type 1 has an invalid length. [ 610.005458][T23480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 610.090628][T23487] netlink: 'syz.3.4668': attribute type 1 has an invalid length. [ 610.375095][T23496] 8021q: adding VLAN 0 to HW filter on device bond11 [ 610.390318][T23500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 610.464867][T23496] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 610.494267][T23511] xt_TCPMSS: Only works on TCP SYN packets [ 610.502282][T23496] bond11: (slave batadv1): making interface the new active one [ 610.514509][T23496] bond11: (slave batadv1): Enslaving as an active interface with an up link [ 610.739280][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 611.243163][T23550] A link change request failed with some changes committed already. Interface 26A٨ may have been left with an inconsistent configuration, please check. [ 611.318704][T23559] A link change request failed with some changes committed already. Interface 26A٨ may have been left with an inconsistent configuration, please check. [ 611.405860][T23560] vlan2: entered allmulticast mode [ 611.779303][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 612.809236][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 613.849592][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 614.889270][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 615.929297][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 616.969212][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 618.009185][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 619.049179][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 620.089189][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 621.129176][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 622.169681][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 623.209176][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 624.249208][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 624.734294][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.742823][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 625.289338][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 626.329223][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 627.369186][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 628.409182][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 629.449209][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 630.249521][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms [ 630.257598][ C0] lec:lec_tx_timeout: lec0 [ 630.489243][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 631.529309][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 632.569278][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 633.609310][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 634.649289][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 635.689224][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 636.729203][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 637.725646][T23591] validate_nla: 4 callbacks suppressed [ 637.725667][T23591] netlink: 'syz.3.4698': attribute type 4 has an invalid length. [ 637.743019][T23591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.765609][T23591] netlink: 'syz.3.4698': attribute type 4 has an invalid length. [ 637.769681][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 638.108557][T23608] netlink: 'syz.1.4703': attribute type 1 has an invalid length. [ 638.125545][T23608] netlink: 'syz.1.4703': attribute type 7 has an invalid length. [ 638.138192][T23608] netlink: 'syz.1.4703': attribute type 8 has an invalid length. [ 638.158977][T23608] __nla_validate_parse: 8 callbacks suppressed [ 638.167874][T23608] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4703'. [ 638.178366][T23608] NCSI netlink: No device for ifindex 65584 [ 638.188023][T23610] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4706'. [ 638.266713][T23617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4706'. [ 638.276106][T23617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4706'. [ 638.288254][T23617] netlink: 'syz.4.4706': attribute type 12 has an invalid length. [ 638.329344][T23617] netlink: 'syz.4.4706': attribute type 11 has an invalid length. [ 638.415725][T23625] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4709'. [ 638.573555][T23634] netlink: 'syz.2.4712': attribute type 3 has an invalid length. [ 638.592474][T23634] netlink: 'syz.2.4712': attribute type 1 has an invalid length. [ 638.604836][T23636] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4713'. [ 638.614496][T23634] netlink: 212 bytes leftover after parsing attributes in process `syz.2.4712'. [ 638.623326][T23628] syzkaller1: entered promiscuous mode [ 638.626561][T23634] NCSI netlink: No device for ifindex 813332851 [ 638.638055][T23630] netlink: 'syz.0.4711': attribute type 1 has an invalid length. [ 638.647317][T23628] syzkaller1: entered allmulticast mode [ 638.809536][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 638.984367][T23658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4716'. [ 639.677140][T23696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4734'. [ 639.728290][T23697] tipc: Enabled bearer , priority 0 [ 639.849246][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 639.924090][T23697] syzkaller0: entered promiscuous mode [ 639.963070][T23712] IPv6: addrconf: prefix option has invalid lifetime [ 639.969866][T23712] IPv6: addrconf: prefix option has invalid lifetime [ 639.976390][T23708] xt_hashlimit: size too large, truncated to 1048576 [ 639.992787][T23697] syzkaller0: entered allmulticast mode [ 639.999399][T23712] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4736'. [ 640.030889][T23697] tipc: Resetting bearer [ 640.173159][T23690] tipc: Resetting bearer [ 640.889172][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 641.929242][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 642.111324][T23690] tipc: Disabling bearer [ 642.123126][T23737] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 642.401305][T23762] xt_cgroup: invalid path, errno=-2 [ 642.958652][T23782] bridge_slave_1: left allmulticast mode [ 642.965556][T23782] bridge_slave_1: left promiscuous mode [ 642.969494][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 643.003359][T23782] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.063996][T23782] bridge_slave_0: left allmulticast mode [ 643.072957][T23782] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.173264][T23795] __nla_validate_parse: 6 callbacks suppressed [ 643.173284][T23795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4761'. [ 643.659744][T23819] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 643.674770][T23819] syzkaller1: linktype set to 823 [ 643.766135][T23824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4769'. [ 643.796210][T23824] validate_nla: 3 callbacks suppressed [ 643.796230][T23824] netlink: 'syz.1.4769': attribute type 10 has an invalid length. [ 643.895025][T23824] batman_adv: batadv0: Adding interface: netdevsim0 [ 643.905839][T23830] netlink: 'syz.4.4772': attribute type 29 has an invalid length. [ 643.914895][T23824] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.948354][T23824] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 644.009165][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 644.126430][T23838] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4775'. [ 644.414996][T18108] bond0: (slave bond_slave_0): interface is now down [ 644.429847][T18108] bond0: (slave bond_slave_1): interface is now down [ 644.456893][T18108] bond0: now running without any active interface! [ 644.576752][T23863] netlink: 'syz.2.4781': attribute type 10 has an invalid length. [ 644.588529][T23863] team0: Device vxcan1 is of different type [ 644.873585][T23872] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4785'. [ 644.908491][T23874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4786'. [ 644.935894][T23874] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4786'. [ 644.958435][T23874] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4786'. [ 644.999969][T23874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4786'. [ 645.030500][T23874] tap0: tun_chr_ioctl cmd 2148553947 [ 645.048607][T23877] syzkaller1: entered promiscuous mode [ 645.054320][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 645.066895][T23877] syzkaller1: entered allmulticast mode [ 645.461228][T23897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4792'. [ 645.470641][T23895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4792'. [ 645.517723][T23899] syz_tun: entered allmulticast mode [ 645.594703][T23899] syz_tun (unregistering): left allmulticast mode [ 645.621452][T23904] netlink: 'syz.1.4795': attribute type 1 has an invalid length. [ 645.715360][T23904] bond12: entered promiscuous mode [ 645.733908][T23904] 8021q: adding VLAN 0 to HW filter on device bond12 [ 645.756925][T23908] ipvlan3: entered allmulticast mode [ 645.762529][T23908] bond12: entered allmulticast mode [ 645.908774][T23904] bond12: (slave bridge0): making interface the new active one [ 645.916760][T23904] bridge0: entered promiscuous mode [ 645.923651][T23904] bridge0: entered allmulticast mode [ 645.931942][T23904] bond12: (slave bridge0): Enslaving as an active interface with an up link [ 645.941728][T11965] lec:lec_start_xmit: lec0:No lecd attached [ 646.089208][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 646.146687][T23925] netlink: 'syz.1.4799': attribute type 2 has an invalid length. [ 646.328283][T23938] netlink: 'syz.0.4806': attribute type 7 has an invalid length. [ 646.373059][T23938] netlink: 'syz.0.4806': attribute type 8 has an invalid length. [ 646.395702][T23938] netlink: 'syz.0.4806': attribute type 2 has an invalid length. [ 646.856123][T23972] xt_CT: You must specify a L4 protocol and not use inversions on it [ 647.034889][T23984] netlink: 'syz.4.4819': attribute type 1 has an invalid length. [ 647.119195][T23984] 8021q: adding VLAN 0 to HW filter on device bond6 [ 647.129642][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 647.142539][T23987] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 647.167829][T23984] bond6: entered promiscuous mode [ 647.173207][T23984] bond6: entered allmulticast mode [ 647.255350][T23997] erspan0: entered allmulticast mode [ 647.277798][T23997] ieee802154 phy1 wpan1: encryption failed: -22 [ 647.484518][T24006] openvswitch: netlink: Missing valid actions attribute. [ 647.491772][T24006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 647.741534][T24014] netlink: 'syz.0.4831': attribute type 13 has an invalid length. [ 647.768421][T24014] erspan0: left allmulticast mode [ 647.810931][T24014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 648.074895][T24038] bond4: option all_slaves_active: invalid value (222) [ 648.097719][T24038] bond4 (unregistering): Released all slaves [ 648.169279][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 648.195894][T24047] __nla_validate_parse: 21 callbacks suppressed [ 648.195914][T24047] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4838'. [ 648.756344][T24077] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4850'. [ 648.766359][T24077] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4850'. [ 648.777041][T24077] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4850'. [ 648.993708][T24084] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 649.186556][T24095] tipc: Enabling of bearer rejected, failed to enable media [ 649.209144][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 649.285839][T24101] validate_nla: 3 callbacks suppressed [ 649.285860][T24101] netlink: 'syz.2.4860': attribute type 1 has an invalid length. [ 649.355380][T24101] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4860'. [ 649.398271][T24101] netlink: 'syz.2.4860': attribute type 1 has an invalid length. [ 649.420758][T24101] netlink: 'syz.2.4860': attribute type 8 has an invalid length. [ 649.428650][T24101] netlink: 582 bytes leftover after parsing attributes in process `syz.2.4860'. [ 649.441156][T24101] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4860'. [ 649.934496][T24145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4871'. [ 650.024311][T24158] netlink: 'syz.2.4875': attribute type 1 has an invalid length. [ 650.058675][T24159] netlink: 'syz.2.4875': attribute type 1 has an invalid length. [ 650.085316][T24158] netlink: 'syz.2.4875': attribute type 2 has an invalid length. [ 650.102105][T24158] netlink: 'syz.2.4875': attribute type 1 has an invalid length. [ 650.152593][T24159] netlink: 'syz.2.4875': attribute type 2 has an invalid length. [ 650.184801][T24154] x_tables: duplicate underflow at hook 1 [ 650.217547][T24159] netlink: 'syz.2.4875': attribute type 1 has an invalid length. [ 650.249316][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 650.527052][T24185] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 651.090233][T24222] syzkaller0: entered promiscuous mode [ 651.098212][T24222] syzkaller0: entered allmulticast mode [ 651.143657][T24224] netlink: 'syz.3.4891': attribute type 33 has an invalid length. [ 651.170435][T24224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4891'. [ 651.289495][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5350 ms [ 651.297648][ C0] lec:lec_tx_timeout: lec0 [ 651.302231][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 651.450771][T24239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4898'. [ 651.848748][T24264] xt_bpf: check failed: parse error [ 652.329339][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 653.328909][T24368] __nla_validate_parse: 9 callbacks suppressed [ 653.328931][T24368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4937'. [ 653.369144][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 653.612424][T24380] bond7: entered promiscuous mode [ 653.620331][T24380] 8021q: adding VLAN 0 to HW filter on device bond7 [ 653.631127][T24384] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4941'. [ 653.682972][T24380] bond7: (slave bridge6): making interface the new active one [ 653.703484][T24380] bridge6: entered promiscuous mode [ 653.711797][T24380] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 653.795859][T24389] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.811421][T24389] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 653.837018][T24391] ip6tnl0: Caught tx_queue_len zero misconfig [ 653.986475][T24389] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.002681][T24389] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 654.168234][T24389] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.196637][T24389] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 654.230693][T24412] veth0_macvtap: left promiscuous mode [ 654.241176][T24412] : entered allmulticast mode [ 654.263857][T24412] : refused to change device tx_queue_len [ 654.349612][T24389] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.361392][T24389] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 654.409179][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 654.420280][T24416] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4952'. [ 654.465642][T24416] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4952'. [ 654.626502][ T58] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 654.635811][ T58] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 654.673802][ T58] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 654.693497][ T58] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 654.734549][ T58] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 654.745488][ T58] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 654.754277][T24428] lo: entered allmulticast mode [ 654.788529][ T58] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 654.801497][ T58] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 654.817096][T24427] lo: left allmulticast mode [ 655.147337][T24446] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4959'. [ 655.285394][T24456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4963'. [ 655.296832][T24456] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4963'. [ 655.450673][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 655.497838][T24475] x_tables: duplicate underflow at hook 2 [ 655.590679][T24479] openvswitch: netlink: IP tunnel TTL not specified. [ 655.835516][T24494] sctp: [Deprecated]: syz.2.4974 (pid 24494) Use of int in max_burst socket option. [ 655.835516][T24494] Use struct sctp_assoc_value instead [ 655.875933][T24495] validate_nla: 3 callbacks suppressed [ 655.875951][T24495] netlink: 'syz.0.4972': attribute type 3 has an invalid length. [ 655.902587][T24499] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.4973'. [ 655.916611][T24500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4973'. [ 655.939886][T23592] blk_print_req_error: 138 callbacks suppressed [ 655.939906][T23592] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.966308][T24500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4973'. [ 655.984571][T23592] buffer_io_error: 138 callbacks suppressed [ 655.984589][T23592] Buffer I/O error on dev nbd0, logical block 0, async page read [ 656.030673][T23592] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 656.046992][T23592] Buffer I/O error on dev nbd0, logical block 1, async page read [ 656.068813][T23592] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 656.095234][T23592] Buffer I/O error on dev nbd0, logical block 2, async page read [ 656.122359][T23592] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 656.145957][T23592] Buffer I/O error on dev nbd0, logical block 3, async page read [ 656.180425][T23592] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 656.200036][T23592] Buffer I/O error on dev nbd0, logical block 0, async page read [ 656.252378][T23592] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 656.270187][T23592] Buffer I/O error on dev nbd0, logical block 1, async page read [ 656.299626][T23592] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 656.336314][T23592] Buffer I/O error on dev nbd0, logical block 2, async page read [ 656.397293][T23592] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 656.450150][T23592] Buffer I/O error on dev nbd0, logical block 3, async page read [ 656.475800][T23592] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 656.489326][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 656.503169][T23592] Buffer I/O error on dev nbd0, logical block 0, async page read [ 656.521385][T23592] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 656.540864][T23592] Buffer I/O error on dev nbd0, logical block 1, async page read [ 656.583241][T23592] ldm_validate_partition_table(): Disk read failed. [ 656.628825][T23592] Dev nbd0: unable to read RDB block 0 [ 656.650974][T23592] nbd0: unable to read partition table [ 656.694252][T23592] ldm_validate_partition_table(): Disk read failed. [ 656.705410][T23592] Dev nbd0: unable to read RDB block 0 [ 656.730522][T23592] nbd0: unable to read partition table [ 656.754880][T24527] netlink: 'syz.1.4980': attribute type 6 has an invalid length. [ 656.785200][T23592] block nbd0: NBD_DISCONNECT [ 656.816498][T23592] block nbd0: Send disconnect failed -32 [ 656.918508][T24534] netlink: get zone limit has 4 unknown bytes [ 657.518167][T24553] bond13: (slave gre0): Device is not bonding slave [ 657.527362][T24553] bond13: option active_slave: invalid value (gre0) [ 657.534349][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 657.571621][T24553] bond13 (unregistering): Released all slaves [ 658.116407][T24596] block nbd0: Unsupported socket: should be TCP or UNIX. [ 658.384230][T24613] netlink: 'syz.3.5011': attribute type 1 has an invalid length. [ 658.456495][T24615] netlink: 'syz.2.5012': attribute type 2 has an invalid length. [ 658.471842][T24615] __nla_validate_parse: 14 callbacks suppressed [ 658.471861][T24615] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5012'. [ 658.569601][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 658.964506][T24636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5018'. [ 659.047779][T24636] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 659.334921][T24656] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5025'. [ 659.414296][T24659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5026'. [ 659.561897][T24668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5028'. [ 659.609132][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 659.755594][T24676] netlink: 'syz.3.5031': attribute type 10 has an invalid length. [ 659.811081][T24679] netlink: 'syz.1.5032': attribute type 11 has an invalid length. [ 659.877824][T24679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5032'. [ 660.107660][T24686] netlink: 'syz.4.5036': attribute type 2 has an invalid length. [ 660.120331][T24686] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5036'. [ 660.266313][T24695] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 660.293710][T24692] SET target dimension over the limit! [ 660.439682][T24695] 8021q: VLANs not supported on gre0 [ 660.478270][T24704] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5043'. [ 660.527866][T24705] netlink: 576 bytes leftover after parsing attributes in process `syz.1.5042'. [ 660.649230][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 661.000924][T24731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5049'. [ 661.102394][T24734] xt_addrtype: ipv6 does not support BROADCAST matching [ 661.273232][T24748] netlink: 'syz.1.5054': attribute type 32 has an invalid length. [ 661.663728][T24764] lo speed is unknown, defaulting to 1000 [ 661.683287][T24761] IPVS: sh: FWM 3 0x00000003 - no destination available [ 661.690508][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 661.724438][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 662.254959][T24779] lo: entered promiscuous mode [ 662.275860][T24779] tunl0: entered promiscuous mode [ 662.308434][T24789] sctp: [Deprecated]: syz.4.5064 (pid 24789) Use of int in maxseg socket option. [ 662.308434][T24789] Use struct sctp_assoc_value instead [ 662.384842][T24779] gre0: entered promiscuous mode [ 662.438383][T24779] gretap0: entered promiscuous mode [ 662.541748][T24779] erspan0: entered promiscuous mode [ 662.577871][T24779] ip_vti0: entered promiscuous mode [ 662.729118][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 663.113531][T24814] bond0: entered promiscuous mode [ 663.118789][T24814] bridge_slave_1: entered promiscuous mode [ 663.147218][T24814] bond0: left promiscuous mode [ 663.168038][T24814] bridge_slave_1: left promiscuous mode [ 663.496208][T24832] netlink: 'syz.3.5077': attribute type 1 has an invalid length. [ 663.509541][T24832] __nla_validate_parse: 4 callbacks suppressed [ 663.509560][T24832] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5077'. [ 663.745513][T24842] lo: left promiscuous mode [ 663.750742][T24842] tunl0: left promiscuous mode [ 663.756073][T24842] gre0: left promiscuous mode [ 663.762253][T24842] gretap0: left promiscuous mode [ 663.767748][T24842] erspan0: left promiscuous mode [ 663.769525][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 663.777772][T24842] ip_vti0: left promiscuous mode [ 663.803715][T24847] netlink: 'syz.1.5080': attribute type 10 has an invalid length. [ 663.868343][T24842] bridge_slave_0: left promiscuous mode [ 663.897571][T24842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 663.914217][T24842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.934468][T24842] 0: left allmulticast mode [ 663.995573][T24842] gtp0: left promiscuous mode [ 664.001523][T24842] gtp0: left allmulticast mode [ 664.021240][T24842] bond3: left promiscuous mode [ 664.028785][T24842] veth5: left promiscuous mode [ 664.039614][T24842] bond6: left promiscuous mode [ 664.073226][T24842] gtp1: left promiscuous mode [ 664.077958][T24842] gtp1: left allmulticast mode [ 664.093442][T24842] bond12: left promiscuous mode [ 664.098337][T24842] bridge0: left promiscuous mode [ 664.106402][T24842] ipvlan3: left allmulticast mode [ 664.116548][T24842] bond12: left allmulticast mode [ 664.121755][T24842] bridge0: left allmulticast mode [ 664.132467][T24849] : renamed from team_slave_1 [ 664.141036][ T6248] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.150794][ T6248] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.160549][ T6248] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.179861][ T6248] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.219252][ T6248] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.246281][ T6248] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.275670][ T6248] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.303082][ T6248] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.306349][T24852] sctp: [Deprecated]: syz.1.5085 (pid 24852) Use of int in maxseg socket option. [ 664.306349][T24852] Use struct sctp_assoc_value instead [ 664.404707][T24856] tipc: Enabling of bearer rejected, already enabled [ 664.418051][T24855] lo: Caught tx_queue_len zero misconfig [ 664.478494][T24857] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 664.501682][T24864] tipc: Enabled bearer , priority 0 [ 664.509490][T24864] syzkaller0: entered promiscuous mode [ 664.515003][T24864] syzkaller0: entered allmulticast mode [ 664.649732][T24862] tipc: Resetting bearer [ 664.693543][T24862] tipc: Disabling bearer [ 664.703106][T24867] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 664.754670][T24867] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5089'. [ 664.809124][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 664.920117][T24885] netlink: 'syz.0.5094': attribute type 26 has an invalid length. [ 664.937627][T24885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5094'. [ 664.966487][T24885] netlink: 'syz.0.5094': attribute type 26 has an invalid length. [ 664.985838][T24885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5094'. [ 665.120621][T24900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5099'. [ 665.143691][T24900] netlink: 'syz.0.5099': attribute type 1 has an invalid length. [ 665.187119][T24900] netlink: 'syz.0.5099': attribute type 2 has an invalid length. [ 665.514182][T24929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5108'. [ 665.534251][T24929] netlink: 'syz.3.5108': attribute type 1 has an invalid length. [ 665.548521][T24929] netlink: 'syz.3.5108': attribute type 2 has an invalid length. [ 665.726410][T24941] netlink: 'syz.3.5111': attribute type 1 has an invalid length. [ 665.742346][T24941] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.5111'. [ 665.829535][T24945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 665.849207][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 665.881734][T24947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5113'. [ 666.238757][T24971] netlink: 184 bytes leftover after parsing attributes in process `syz.1.5120'. [ 666.633006][T24987] syzkaller1: entered promiscuous mode [ 666.642691][T24987] syzkaller1: entered allmulticast mode [ 666.838387][T25008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5132'. [ 666.889132][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 667.083419][T25022] validate_nla: 2 callbacks suppressed [ 667.083440][T25022] netlink: 'syz.3.5137': attribute type 26 has an invalid length. [ 667.098316][T25022] netlink: 'syz.3.5137': attribute type 26 has an invalid length. [ 667.535192][T25054] netlink: 'syz.0.5148': attribute type 2 has an invalid length. [ 667.595930][T25058] tipc: Enabled bearer , priority 0 [ 667.675943][T25067] tipc: Resetting bearer [ 667.819618][T25076] netlink: 'syz.3.5154': attribute type 1 has an invalid length. [ 667.877747][T25057] tipc: Disabling bearer [ 667.929189][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 667.984028][T25076] bond9: entered promiscuous mode [ 668.021146][T25076] 8021q: adding VLAN 0 to HW filter on device bond9 [ 668.061152][T25093] netlink: 'syz.1.5155': attribute type 21 has an invalid length. [ 668.137563][T25087] 8021q: adding VLAN 0 to HW filter on device bond9 [ 668.179987][T25087] bond9: (slave vcan0): The slave device specified does not support setting the MAC address [ 668.219153][T25087] bond9: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 668.253261][T25087] bond9: (slave vcan0): making interface the new active one [ 668.262099][T25087] vcan0: entered promiscuous mode [ 668.270931][T25087] bond9: (slave vcan0): Enslaving as an active interface with an up link [ 668.435284][T25112] openvswitch: netlink: Missing key (keys=40, expected=100) [ 668.674181][T25126] netlink: 'syz.3.5168': attribute type 1 has an invalid length. [ 668.714395][T25126] __nla_validate_parse: 8 callbacks suppressed [ 668.714414][T25126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5168'. [ 668.916595][T25136] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5170'. [ 668.969322][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 668.981874][T25138] bond0: Device is already in use. [ 669.012321][T25138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5171'. [ 669.073057][T25138] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 669.093869][T25142] netlink: 'syz.0.5174': attribute type 1 has an invalid length. [ 669.107607][T25142] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5174'. [ 669.118038][T25144] xt_l2tp: wrong L2TP version: 0 [ 669.276759][T25153] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5177'. [ 669.321219][T25155] netlink: 'syz.1.5176': attribute type 1 has an invalid length. [ 669.329662][T25155] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5176'. [ 669.341049][T25155] netlink: 'syz.1.5176': attribute type 1 has an invalid length. [ 669.353153][T25155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5176'. [ 669.353190][T25150] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 669.376959][T25162] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5176'. [ 669.382790][T25150] bond4 (unregistering): Released all slaves [ 669.426879][T25153] bond8: entered promiscuous mode [ 669.433238][T25153] 8021q: adding VLAN 0 to HW filter on device bond8 [ 669.447672][T25164] syzkaller0: entered promiscuous mode [ 669.469861][T25164] syzkaller0: entered allmulticast mode [ 669.486582][T25153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5177'. [ 669.671204][T25176] netlink: 'syz.0.5184': attribute type 1 has an invalid length. [ 669.885458][T25184] xt_hashlimit: size too large, truncated to 1048576 [ 670.009293][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 670.199966][T25203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5191'. [ 670.548315][T25221] bond13: Invalid ad_actor_system MAC address. [ 670.607129][T25221] bond13: option ad_actor_system: invalid value (1) [ 670.641890][T25221] bond13 (unregistering): Released all slaves [ 670.784934][T25229] syzkaller0: entered promiscuous mode [ 670.804771][T25229] syzkaller0: entered allmulticast mode [ 670.973323][T25254] bond10: entered promiscuous mode [ 670.978828][T25254] 8021q: adding VLAN 0 to HW filter on device bond10 [ 671.021638][T25254] 8021q: adding VLAN 0 to HW filter on device bond10 [ 671.042176][T25254] bond10: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 671.049869][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 671.070090][T25254] bond10: (slave ip6gre1): Error -95 calling set_mac_address [ 671.097707][T25259] macvlan2: entered promiscuous mode [ 671.118951][T25259] macvlan2: entered allmulticast mode [ 671.126239][T25259] bond10: (slave macvlan2): Opening slave failed [ 671.256723][T25267] x_tables: unsorted underflow at hook 3 [ 672.087731][T25318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 672.090218][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 672.593039][T25338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.869239][T25364] tipc: Enabling of bearer rejected, already enabled [ 672.901020][T25367] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 673.135928][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 673.195512][T25394] veth0_to_team: entered promiscuous mode [ 673.203699][T25394] team_slave_1: entered promiscuous mode [ 673.219896][T25394] team_slave_1: left promiscuous mode [ 673.249533][T25394] veth0_to_team: left promiscuous mode [ 673.340979][T25412] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 673.364750][T25412] validate_nla: 8 callbacks suppressed [ 673.364770][T25412] netlink: 'syz.4.5246': attribute type 1 has an invalid length. [ 674.092634][T25456] syzkaller0: entered promiscuous mode [ 674.101309][T25462] netlink: 'syz.2.5261': attribute type 1 has an invalid length. [ 674.110286][T25456] syzkaller0: entered allmulticast mode [ 674.148546][T25462] bond5: (slave gretap1): making interface the new active one [ 674.156996][T25462] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 674.169267][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 674.251309][T25475] __nla_validate_parse: 20 callbacks suppressed [ 674.251332][T25475] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.5259'. [ 674.350697][T25479] netlink: 'syz.2.5263': attribute type 1 has an invalid length. [ 674.358989][T25466] sctp: [Deprecated]: syz.3.5262 (pid 25466) Use of int in maxseg socket option. [ 674.358989][T25466] Use struct sctp_assoc_value instead [ 674.425427][T25474] syzkaller1: entered promiscuous mode [ 674.437264][T25474] syzkaller1: entered allmulticast mode [ 674.527768][T25489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5266'. [ 674.540575][T25489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5266'. [ 674.552276][T25489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5266'. [ 674.703245][T25491] syzkaller0: entered promiscuous mode [ 674.708911][T25491] syzkaller0: entered allmulticast mode [ 674.795565][T25501] bond8 (unregistering): Released all slaves [ 674.829286][T25499] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5270'. [ 674.928210][T25506] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5273'. [ 674.944494][T25506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5273'. [ 675.209220][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 675.323091][T25534] 8021q: VLANs not supported on sit0 [ 675.475807][T25545] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5281'. [ 675.548034][T25548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5283'. [ 675.582296][T25548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5283'. [ 675.732692][T25564] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 675.752428][T25567] netlink: 'syz.4.5287': attribute type 4 has an invalid length. [ 675.774494][T25567] netlink: 'syz.4.5287': attribute type 4 has an invalid length. [ 675.820253][T25571] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 675.936690][T25575] netlink: 'syz.4.5292': attribute type 1 has an invalid length. [ 676.057070][T25577] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.064610][T25577] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.249146][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 676.386511][T25597] syzkaller0: entered promiscuous mode [ 676.393951][T25597] syzkaller0: entered allmulticast mode [ 676.735673][T25619] bond0: entered allmulticast mode [ 676.742130][T25619] bond_slave_0: entered allmulticast mode [ 676.748056][T25619] bond_slave_1: entered allmulticast mode [ 676.755350][T25619] bridge_slave_1: entered allmulticast mode [ 676.761835][T25619] bridge0: entered allmulticast mode [ 676.980645][T25634] netlink: 'syz.1.5310': attribute type 21 has an invalid length. [ 677.231706][T25654] block nbd0: not configured, cannot reconfigure [ 677.289230][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 678.265517][T25730] veth1: entered promiscuous mode [ 678.308233][T25730] veth1: entered allmulticast mode [ 678.329151][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 678.421774][T25680] lec:lec_atm_close: lec0: Shut down! [ 678.604571][T25750] netlink: 'syz.0.5337': attribute type 21 has an invalid length. [ 678.628179][T25750] IPv6: NLM_F_CREATE should be specified when creating new route [ 678.791193][T25760] netlink: zone id is out of range [ 678.840936][T25760] netlink: zone id is out of range [ 678.860218][T25756] netlink: set zone limit has 4 unknown bytes [ 679.128826][ T30] audit: type=1800 audit(1773306423.993:10): pid=25779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5347" name="memory.events" dev="tmpfs" ino=2521 res=0 errno=0 [ 679.369156][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 679.381158][T25786] netlink: 'syz.0.5346': attribute type 1 has an invalid length. [ 679.718439][T25818] __nla_validate_parse: 44 callbacks suppressed [ 679.718462][T25818] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.5354'. [ 679.809560][T25824] netlink: 'syz.1.5355': attribute type 2 has an invalid length. [ 679.842067][T25824] netlink: 'syz.1.5355': attribute type 1 has an invalid length. [ 679.851222][T25824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5355'. [ 679.870950][T25824] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5355'. [ 680.373142][T25859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5367'. [ 680.409143][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 680.432083][T25861] openvswitch: netlink: Missing valid actions attribute. [ 680.449916][T25861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.710379][T25871] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 681.273415][T25912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5382'. [ 681.416601][T25921] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20001 [ 681.449143][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 681.566414][T25936] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5390'. [ 681.579438][T25935] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5390'. [ 681.579628][T25934] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.5388'. [ 681.606898][T25934] netlink: 'syz.1.5388': attribute type 4 has an invalid length. [ 681.653706][T25938] netlink: 'syz.3.5391': attribute type 2 has an invalid length. [ 681.680004][T25934] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5388'. [ 681.706908][T25934] .`: renamed from bond0 [ 681.875639][T25949] netlink: 'syz.3.5397': attribute type 1 has an invalid length. [ 681.887177][T25949] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 681.934743][T25960] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5398'. [ 682.100113][T25971] netlink: 'syz.3.5401': attribute type 1 has an invalid length. [ 682.243359][T25971] 8021q: adding VLAN 0 to HW filter on device bond12 [ 682.257728][T25982] x_tables: unsorted underflow at hook 2 [ 682.269800][T25982] netlink: 'syz.2.5406': attribute type 1 has an invalid length. [ 682.489253][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 682.633756][T26001] lo speed is unknown, defaulting to 1000 [ 682.658213][T26011] bridge0: port 3(veth0_to_bridge) entered blocking state [ 682.667743][T26011] bridge0: port 3(veth0_to_bridge) entered disabled state [ 682.676574][T26011] veth0_to_bridge: entered allmulticast mode [ 682.693432][T26011] veth0_to_bridge: entered promiscuous mode [ 682.719189][T26002] lo speed is unknown, defaulting to 1000 [ 683.107795][T26035] syzkaller0: entered promiscuous mode [ 683.130324][T26035] syzkaller0: entered allmulticast mode [ 683.288056][T26052] openvswitch: netlink: Flow key attr not present in new flow. [ 683.308105][T26049] syzkaller0: entered promiscuous mode [ 683.314601][T26049] syzkaller0: entered allmulticast mode [ 683.429170][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 683.437343][ C0] lec:lec_tx_timeout: lec0 [ 683.510399][T26062] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 683.529121][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 683.755340][T26073] netlink: 'syz.3.5429': attribute type 3 has an invalid length. [ 684.122204][T26103] netlink: 'syz.4.5437': attribute type 10 has an invalid length. [ 684.349899][T26107] bond9: entered allmulticast mode [ 684.356448][T26107] vcan0: entered allmulticast mode [ 684.375449][T26106] bond9: left allmulticast mode [ 684.388105][T26106] vcan0: left allmulticast mode [ 684.569222][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 684.712921][T26140] netlink: 'syz.3.5447': attribute type 9 has an invalid length. [ 685.609222][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 685.623892][T26174] __nla_validate_parse: 11 callbacks suppressed [ 685.623912][T26174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5455'. [ 685.719639][T26174] netlink: 'syz.1.5455': attribute type 1 has an invalid length. [ 686.003631][T26188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5462'. [ 686.198297][T26202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5463'. [ 686.213854][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.225915][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 686.596281][T26220] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.5467'. [ 686.640342][T26220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5467'. [ 686.649375][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 687.279928][T26253] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5473'. [ 687.645315][T26272] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5479'. [ 687.689110][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 687.864328][T26279] netlink: 'syz.2.5481': attribute type 1 has an invalid length. [ 687.961113][T26283] dvmrp0: entered allmulticast mode [ 687.967880][T26285] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5484'. [ 688.002609][T26279] bond6: (slave bridge7): making interface the new active one [ 688.011892][T26279] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 688.112213][T26290] xt_hashlimit: overflow, try lower: 3/0 [ 688.160212][T26295] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5486'. [ 688.293534][T26304] netlink: 'syz.1.5489': attribute type 10 has an invalid length. [ 688.335714][T26310] netlink: 'syz.2.5491': attribute type 58 has an invalid length. [ 688.360496][T26310] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5491'. [ 688.729445][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 689.013430][T26361] netlink: 'syz.4.5504': attribute type 16 has an invalid length. [ 689.024970][T26361] netlink: 'syz.4.5504': attribute type 17 has an invalid length. [ 689.047855][T26346] syzkaller0: entered promiscuous mode [ 689.070669][T26346] syzkaller0: entered allmulticast mode [ 689.302478][T26376] netlink: 'syz.0.5506': attribute type 1 has an invalid length. [ 689.769146][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 690.712394][T26361] erspan0: left allmulticast mode [ 690.780273][T26361] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.802652][T26361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 690.809451][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 690.863667][T26376] bond8: entered promiscuous mode [ 690.869710][T26376] 8021q: adding VLAN 0 to HW filter on device bond8 [ 690.905779][T26378] bond8: (slave bridge13): making interface the new active one [ 690.916381][T26378] bridge13: entered promiscuous mode [ 690.925469][T26378] bond8: (slave bridge13): Enslaving as an active interface with an up link [ 691.092018][T26392] netlink: 'syz.1.5509': attribute type 4 has an invalid length. [ 691.291302][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5060 ms [ 691.299440][ C0] lec:lec_tx_timeout: lec0 [ 691.320997][T26409] __nla_validate_parse: 68 callbacks suppressed [ 691.321017][T26409] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5514'. [ 691.414331][T26422] netlink: 'syz.4.5517': attribute type 2 has an invalid length. [ 691.462683][T26422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5517'. [ 691.669867][T26436] netlink: 'syz.2.5519': attribute type 4 has an invalid length. [ 691.731981][T26411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5515'. [ 691.849270][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 691.894184][T26447] x_tables: duplicate underflow at hook 1 [ 691.984873][T26453] sctp: [Deprecated]: syz.3.5523 (pid 26453) Use of int in max_burst socket option. [ 691.984873][T26453] Use struct sctp_assoc_value instead [ 692.025991][T26452] sctp: [Deprecated]: syz.3.5523 (pid 26452) Use of int in max_burst socket option. [ 692.025991][T26452] Use struct sctp_assoc_value instead [ 692.076974][T26455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5524'. [ 692.671903][T26493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5532'. [ 692.806056][T26494] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5532'. [ 692.889223][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 693.082618][T26520] x_tables: duplicate entry at hook 2 [ 693.345154][T26549] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5550'. [ 693.367266][T26552] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5550'. [ 693.659603][T26573] netlink: 'syz.4.5555': attribute type 4 has an invalid length. [ 693.701245][T26574] netlink: 'syz.4.5555': attribute type 4 has an invalid length. [ 693.730081][T26576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5557'. [ 693.745126][T26576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5557'. [ 693.784180][T26579] xt_TCPMSS: Only works on TCP SYN packets [ 693.929215][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 694.224681][T26620] netlink: 'syz.0.5565': attribute type 7 has an invalid length. [ 694.241459][T26621] block nbd0: not configured, cannot reconfigure [ 694.258487][T26621] netlink: 'syz.2.5566': attribute type 4 has an invalid length. [ 694.276613][T26620] netlink: 'syz.0.5565': attribute type 8 has an invalid length. [ 694.330335][T26620] bond0: entered promiscuous mode [ 694.341607][T26620] bond_slave_0: entered promiscuous mode [ 694.351352][T26620] bond_slave_1: entered promiscuous mode [ 694.368693][T26620] bridge_slave_1: entered promiscuous mode [ 694.376940][T26620] bridge0: entered promiscuous mode [ 694.389625][T26620] bond0: left allmulticast mode [ 694.402456][T26620] bond_slave_0: left allmulticast mode [ 694.416248][T26620] bond_slave_1: left allmulticast mode [ 694.442410][T26620] bridge_slave_1: left allmulticast mode [ 694.466929][T26620] bridge0: left allmulticast mode [ 694.523289][T18529] syz1: Port: 1 Link DOWN [ 694.765690][T26646] bond0: Caught tx_queue_len zero misconfig [ 694.806976][T26648] Cannot find del_set index 4 as target [ 694.969150][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 695.272550][T26683] Can't find ip_set type [ 695.443448][T26697] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 695.527503][T26704] netlink: 'syz.0.5592': attribute type 4 has an invalid length. [ 695.562681][T26704] .`: renamed from bond0 [ 696.009285][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 696.023211][T26732] netlink: 'syz.0.5599': attribute type 1 has an invalid length. [ 696.132467][T26732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.552335][T26761] netlink: 'syz.2.5607': attribute type 4 has an invalid length. [ 696.567523][T26761] __nla_validate_parse: 16 callbacks suppressed [ 696.567545][T26761] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5607'. [ 696.616469][T26761] .`: renamed from bond0 (while UP) [ 696.728174][T26767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5610'. [ 696.827980][T26767] bond13: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 696.842745][T26767] bond13 (unregistering): Released all slaves [ 696.866934][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 696.876681][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 696.887380][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 696.907125][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 696.918091][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 696.948333][T26768] bond13: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 697.041273][T16076] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 697.049288][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 697.077391][T16076] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 697.090857][T16076] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 697.102736][T16076] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 697.110251][T26768] bond13 (unregistering): Released all slaves [ 697.125628][T16076] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 697.366265][T26792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5611'. [ 697.435649][T26772] lo speed is unknown, defaulting to 1000 [ 697.514936][T26797] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5614'. [ 697.524506][T26797] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5614'. [ 697.739630][T26810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5618'. [ 697.775644][T26813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5617'. [ 697.846443][T26806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5617'. [ 697.862235][T26806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5617'. [ 697.912662][T26822] netlink: 'syz.1.5617': attribute type 4 has an invalid length. [ 697.965032][T26813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.002039][T26822] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5617'. [ 698.089224][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 698.173617][T26772] chnl_net:caif_netlink_parms(): no params data found [ 698.311835][T26836] veth0: entered promiscuous mode [ 698.339354][T26836] veth0: left promiscuous mode [ 698.372759][T26840] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 698.426017][T26772] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.433663][T26772] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.441038][T26772] bridge_slave_0: entered allmulticast mode [ 698.448940][T26772] bridge_slave_0: entered promiscuous mode [ 698.458341][T26772] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.465650][T26772] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.473216][T26772] bridge_slave_1: entered allmulticast mode [ 698.481470][T26772] bridge_slave_1: entered promiscuous mode [ 698.546479][T26772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.575385][T26772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.681336][T26772] team0: Port device team_slave_0 added [ 698.722023][T26772] team0: Port device team_slave_1 added [ 698.947496][T26772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.035853][T26772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.109257][T26772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.129266][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 699.134546][T26772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.154694][T26772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.204958][T26772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.216694][ T5835] Bluetooth: hci1: command tx timeout [ 699.353381][T26870] syzkaller0: entered promiscuous mode [ 699.358962][T26870] syzkaller0: entered allmulticast mode [ 699.430603][T26880] netlink: zone id is out of range [ 699.441759][T26772] hsr_slave_0: entered promiscuous mode [ 699.448021][T26880] netlink: zone id is out of range [ 699.452003][T26772] hsr_slave_1: entered promiscuous mode [ 699.456342][T26880] netlink: zone id is out of range [ 699.464414][T26880] netlink: zone id is out of range [ 699.470558][T26880] netlink: zone id is out of range [ 699.475779][T26880] netlink: zone id is out of range [ 699.486241][T26772] debugfs: 'hsr0' already exists in 'hsr' [ 699.495923][T26772] Cannot create hsr debugfs directory [ 699.698909][T26893] netlink: 'syz.4.5635': attribute type 2 has an invalid length. [ 699.864651][T26772] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.890428][T26772] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.987542][T26772] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.998054][T26772] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.027580][T26906] tipc: Enabled bearer , priority 0 [ 700.036648][T26906] syzkaller0: entered promiscuous mode [ 700.042863][T26906] syzkaller0: entered allmulticast mode [ 700.088783][T26772] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.105919][T26772] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.139475][T26909] tipc: Resetting bearer [ 700.270800][T26772] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.282125][T26772] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.311543][T26905] tipc: Resetting bearer [ 700.358352][T26905] tipc: Disabling bearer [ 700.714766][T26772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 700.736680][T26929] netlink: 'syz.2.5644': attribute type 1 has an invalid length. [ 700.764422][T26772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 700.785098][T26772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 700.808712][T26772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 701.051403][T26772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.093338][T26772] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.112730][ T6248] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.119992][ T6248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.161963][T18116] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.169226][T18116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.209201][ C0] net_ratelimit: 55 callbacks suppressed [ 701.209221][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 701.283024][T26953] syzkaller0: entered promiscuous mode [ 701.288576][T26953] syzkaller0: entered allmulticast mode [ 701.295688][ T5835] Bluetooth: hci1: command tx timeout [ 701.304755][T26953] 0: reclassify loop, rule prio 0, protocol 800 [ 701.825398][T26772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.968147][T26772] veth0_vlan: entered promiscuous mode [ 702.050667][T26772] veth1_vlan: entered promiscuous mode [ 702.249217][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 702.294392][T27003] bond0: entered promiscuous mode [ 702.313549][T27003] bond0: entered allmulticast mode [ 702.332127][T27003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.378538][T26772] veth0_macvtap: entered promiscuous mode [ 702.435209][T27020] __nla_validate_parse: 7 callbacks suppressed [ 702.435230][T27020] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5664'. [ 702.444837][T26772] veth1_macvtap: entered promiscuous mode [ 702.518133][T26772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.519481][T27022] nbd0: detected capacity change from 0 to 127 [ 702.541790][T27025] netlink: 'syz.2.5666': attribute type 10 has an invalid length. [ 702.551661][T27025] team0: Device vxcan1 is of different type [ 702.571081][ T5835] block nbd0: Receive control failed (result -104) [ 702.587924][T27024] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 702.595060][T26772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.653106][ T6248] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.670035][ T6248] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.695453][ T6248] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.724822][ T6248] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.804357][T27033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5668'. [ 702.916973][T27041] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 703.021629][T27044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5672'. [ 703.031878][T27041] veth9: entered allmulticast mode [ 703.068137][T27042] veth11: entered allmulticast mode [ 703.077808][ T6248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.092174][ T6248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.223378][T27057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5674'. [ 703.286051][T27080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.294152][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 703.305341][T27066] pim6reg: entered allmulticast mode [ 703.318573][T27080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.370278][ T5835] Bluetooth: hci1: command tx timeout [ 703.423922][T27066] pim6reg: left allmulticast mode [ 703.461186][T27099] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5608'. [ 703.705433][T27110] SET target dimension over the limit! [ 703.760123][T27116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5682'. [ 703.772254][T27116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5682'. [ 703.985772][T27132] netlink: 'syz.0.5685': attribute type 1 has an invalid length. [ 704.192218][T27142] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 704.306973][T27153] netlink: 'syz.0.5691': attribute type 1 has an invalid length. [ 704.324712][T27153] netlink: 'syz.0.5691': attribute type 1 has an invalid length. [ 704.332807][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 704.441303][T27155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5692'. [ 704.557340][T27164] sch_fq: defrate 53322 ignored. [ 704.797370][T27178] netlink: 'syz.4.5700': attribute type 1 has an invalid length. [ 704.959716][T27182] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5701'. [ 704.965576][T27189] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 704.989265][T27182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5701'. [ 705.113431][T27195] pimreg3: entered allmulticast mode [ 705.239742][T27209] netlink: 'syz.3.5707': attribute type 1 has an invalid length. [ 705.369266][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 705.434199][T27211] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address [ 705.452739][ T5835] Bluetooth: hci1: command tx timeout [ 705.460148][T27211] bond13: (slave vxcan1): Error -95 calling set_mac_address [ 705.540294][T27209] bond13: (slave bridge6): Enslaving as an active interface with a down link [ 705.648270][T27238] netlink: 'syz.2.5717': attribute type 1 has an invalid length. [ 705.671178][T27228] bond13: (slave gretap2): making interface the new active one [ 705.682930][T27228] bond13: (slave gretap2): Enslaving as an active interface with an up link [ 705.834513][T27249] netlink: 'syz.1.5720': attribute type 11 has an invalid length. [ 705.938866][T27256] netlink: 'syz.0.5722': attribute type 3 has an invalid length. [ 706.130241][T27271] netlink: 'syz.3.5728': attribute type 2 has an invalid length. [ 706.243699][T27280] netlink: 'syz.1.5731': attribute type 10 has an invalid length. [ 706.292669][T27282] xt_nat: multiple ranges no longer supported [ 706.409287][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 706.759178][T27305] netlink: 'syz.4.5740': attribute type 7 has an invalid length. [ 706.985517][T27320] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 707.452871][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 707.497274][T27353] tipc: Enabled bearer , priority 0 [ 707.505314][T27353] syzkaller0: entered promiscuous mode [ 707.512752][T27353] syzkaller0: entered allmulticast mode [ 707.544419][T27353] tipc: Resetting bearer [ 707.562565][T27352] tipc: Resetting bearer [ 707.593950][T27352] tipc: Disabling bearer [ 707.828481][T27366] ip6_vti0: entered promiscuous mode [ 707.837080][T27366] __nla_validate_parse: 16 callbacks suppressed [ 707.837098][T27366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5761'. [ 707.956170][T27372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5763'. [ 708.091566][T27374] lo speed is unknown, defaulting to 1000 [ 708.333772][T27392] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 708.489133][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 708.524635][T27403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5771'. [ 708.544253][T27398] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 708.556098][T27398] bond7: option packets_per_slave: allowed values 0 - 65535 [ 708.585336][T27398] bond7 (unregistering): Released all slaves [ 708.689278][T27403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5771'. [ 708.884197][T27416] netlink: 'syz.2.5775': attribute type 10 has an invalid length. [ 709.076684][T27436] bond0: entered allmulticast mode [ 709.082487][T27436] bond_slave_0: entered allmulticast mode [ 709.094129][T27436] bond_slave_1: entered allmulticast mode [ 709.140174][T27439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5779'. [ 709.529192][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 709.625372][T27476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5790'. [ 709.643313][T27476] vxcan2: entered allmulticast mode [ 709.656221][T27467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5787'. [ 709.768030][T27488] bond0: (slave bridge_slave_1): Releasing backup interface [ 709.780568][T27488] bond6: (slave veth0_to_bond): Releasing active interface [ 709.800779][T27488] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 710.569114][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 710.748763][T11965] lec:lec_start_xmit: lec0:No lecd attached [ 711.609215][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 711.801927][T27416] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 712.073364][T27503] syzkaller1: entered promiscuous mode [ 712.099354][T27503] syzkaller1: entered allmulticast mode [ 712.152513][T27510] nbd: socks must be embedded in a SOCK_ITEM attr [ 712.317923][T16076] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 712.329464][T16076] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 712.339880][T16076] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 712.355216][T16076] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 712.363023][T16076] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 712.415672][T27521] netlink: 'syz.0.5803': attribute type 9 has an invalid length. [ 712.450977][T27521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5803'. [ 712.491006][T27526] veth0_to_bridge (unregistering): left allmulticast mode [ 712.499492][T27526] veth0_to_bridge (unregistering): left promiscuous mode [ 712.518769][T27526] bridge0: port 3(veth0_to_bridge) entered disabled state [ 712.548206][T27528] ieee802154 phy1 wpan1: encryption failed: -22 [ 712.558182][T27526] bridge_slave_0 (unregistering): left promiscuous mode [ 712.565848][T27526] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.652279][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 712.680489][T27518] lo speed is unknown, defaulting to 1000 [ 712.835678][T27535] netlink: 'syz.0.5806': attribute type 3 has an invalid length. [ 713.036640][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.049379][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.076314][T27542] netlink: 'syz.2.5809': attribute type 10 has an invalid length. [ 713.086924][T27542] wlan1: mtu less than device minimum [ 713.092633][T27542] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 713.131544][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.142319][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.235621][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.247311][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.312928][T27518] chnl_net:caif_netlink_parms(): no params data found [ 713.370192][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.381059][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.511500][T27518] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.520277][T27518] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.527686][T27518] bridge_slave_0: entered allmulticast mode [ 713.543016][T27518] bridge_slave_0: entered promiscuous mode [ 713.553066][T27518] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.561718][T27518] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.570501][T27518] bridge_slave_1: entered allmulticast mode [ 713.578960][T27518] bridge_slave_1: entered promiscuous mode [ 713.586271][T27557] x_tables: duplicate underflow at hook 1 [ 713.635999][T27518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.689528][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 713.712517][T27518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.787493][T27518] team0: Port device team_slave_0 added [ 713.915657][ T58] bond2 (unregistering): (slave ip6erspan0): Releasing active interface [ 714.005173][ T58] gretap0 (unregistering): left promiscuous mode [ 714.024740][ T58] bond7 (unregistering): (slave gretap1): Releasing active interface [ 714.045514][ T58] bond13 (unregistering): (slave gretap2): Releasing active interface [ 714.074895][ T58] dvmrp6 (unregistering): left allmulticast mode [ 714.093811][ T58] bond6 (unregistering): (slave geneve2): Releasing active interface [ 714.393916][ T58] bond13 (unregistering): (slave bridge6): Releasing active interface [ 714.411160][ T5835] Bluetooth: hci5: command tx timeout [ 714.434122][ T58] bond0 (unregistering): left promiscuous mode [ 714.444924][ T58] bond0 (unregistering): Released all slaves [ 714.456910][ T58] bond1 (unregistering): Released all slaves [ 714.476105][ T58] bond2 (unregistering): Released all slaves [ 714.492192][ T58] bond3 (unregistering): Released all slaves [ 714.506926][ T58] bond4 (unregistering): Released all slaves [ 714.526240][ T58] bond5 (unregistering): Released all slaves [ 714.544234][ T58] bond6 (unregistering): Released all slaves [ 714.558960][ T58] bond7 (unregistering): Released all slaves [ 714.594834][ T58] bond8 (unregistering): Released all slaves [ 714.615248][ T58] bond9 (unregistering): (slave vcan0): Releasing backup interface [ 714.623356][ T58] vcan0: left promiscuous mode [ 714.630408][ T58] bond9 (unregistering): Released all slaves [ 714.654256][ T58] bond10 (unregistering): Released all slaves [ 714.676406][ T58] bond11 (unregistering): Released all slaves [ 714.695786][ T58] bond12 (unregistering): Released all slaves [ 714.711056][ T58] bond13 (unregistering): Released all slaves [ 714.727847][T27518] team0: Port device team_slave_1 added [ 714.745110][T27564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5812'. [ 714.768862][T27563] netlink: 212048 bytes leftover after parsing attributes in process `syz.1.5812'. [ 714.807375][T27518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.845610][T27518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.873675][T27518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.886460][T27518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.893771][T27518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.979623][T27518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.010575][ T58] : left promiscuous mode [ 715.105224][T27518] hsr_slave_0: entered promiscuous mode [ 715.112521][T27518] hsr_slave_1: entered promiscuous mode [ 715.118921][T27518] debugfs: 'hsr0' already exists in 'hsr' [ 715.126738][T27518] Cannot create hsr debugfs directory [ 715.132614][T27573] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 715.141735][ T58] tipc: Disabling bearer [ 715.147297][ T58] tipc: Disabling bearer [ 715.154259][ T58] tipc: Left network mode [ 715.711724][ T58] hsr_slave_0: left promiscuous mode [ 715.717783][ T58] hsr_slave_1: left promiscuous mode [ 715.726850][ T58] veth1_macvtap: left promiscuous mode [ 715.733137][ T58] veth0_macvtap: left promiscuous mode [ 715.738687][ T58] veth1_vlan: left promiscuous mode [ 715.744305][ T58] veth0_vlan: left promiscuous mode [ 716.250509][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 716.258578][ C0] lec:lec_tx_timeout: lec0 [ 716.320220][ T58] IPVS: stop unused estimator thread 0... [ 716.489570][ T5835] Bluetooth: hci5: command tx timeout [ 718.579531][ T5835] Bluetooth: hci5: command tx timeout [ 720.649528][ T5835] Bluetooth: hci5: command tx timeout [ 728.370312][T16076] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 728.381015][T16076] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 728.389916][T16076] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 728.397926][T16076] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 728.424077][T20160] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 728.432096][T20160] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 728.442302][T20160] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 728.452606][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 728.466533][T20160] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 728.475873][T20160] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 728.550479][T27580] lo speed is unknown, defaulting to 1000 [ 728.583360][T20160] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 728.593927][T20160] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 728.604503][T20160] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 728.614337][T20160] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 728.623288][T20160] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 728.635650][T27582] lo speed is unknown, defaulting to 1000 [ 728.843929][T27585] lo speed is unknown, defaulting to 1000 [ 729.270185][T27582] chnl_net:caif_netlink_parms(): no params data found [ 729.378033][T27580] chnl_net:caif_netlink_parms(): no params data found [ 729.631061][T27585] chnl_net:caif_netlink_parms(): no params data found [ 729.646010][T27580] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.653617][T27580] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.661569][T27580] bridge_slave_0: entered allmulticast mode [ 729.670769][T27580] bridge_slave_0: entered promiscuous mode [ 729.678440][T27582] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.686781][T27582] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.696597][T27582] bridge_slave_0: entered allmulticast mode [ 729.704731][T27582] bridge_slave_0: entered promiscuous mode [ 729.736884][T27580] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.744522][T27580] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.752282][T27580] bridge_slave_1: entered allmulticast mode [ 729.760460][T27580] bridge_slave_1: entered promiscuous mode [ 729.768557][T27582] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.776437][T27582] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.784102][T27582] bridge_slave_1: entered allmulticast mode [ 729.792084][T27582] bridge_slave_1: entered promiscuous mode [ 729.910776][T27580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.936978][T27582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.951181][T27580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.977344][T27582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.078055][T27580] team0: Port device team_slave_0 added [ 730.086033][T27585] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.097454][T27585] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.106851][T27585] bridge_slave_0: entered allmulticast mode [ 730.115299][T27585] bridge_slave_0: entered promiscuous mode [ 730.124429][T27585] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.132567][T27585] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.140128][T27585] bridge_slave_1: entered allmulticast mode [ 730.148106][T27585] bridge_slave_1: entered promiscuous mode [ 730.157459][T27582] team0: Port device team_slave_0 added [ 730.176348][T27580] team0: Port device team_slave_1 added [ 730.253137][T27582] team0: Port device team_slave_1 added [ 730.275288][T27585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.323111][T27580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 730.333076][T27580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.360169][T27580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 730.418279][T27585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.430003][T27580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 730.437881][T27580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.466418][T27580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 730.494454][T20160] Bluetooth: hci3: command tx timeout [ 730.560649][T27582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 730.567662][T27582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.594652][T20160] Bluetooth: hci6: command tx timeout [ 730.604723][T27582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 730.646681][T27582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 730.656152][T27582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.687109][T27582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 730.695005][T16076] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 730.712742][T27580] hsr_slave_0: entered promiscuous mode [ 730.713759][T16076] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 730.723389][T27580] hsr_slave_1: entered promiscuous mode [ 730.731014][T16076] Bluetooth: hci7: command tx timeout [ 730.738950][T16076] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 730.750052][T27580] debugfs: 'hsr0' already exists in 'hsr' [ 730.755947][T27580] Cannot create hsr debugfs directory [ 730.757347][T16076] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 730.772219][T27585] team0: Port device team_slave_0 added [ 730.780470][T16076] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 730.812750][T27585] team0: Port device team_slave_1 added [ 730.938611][T27585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 730.947181][T27585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.975746][T27585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 730.996248][T27582] hsr_slave_0: entered promiscuous mode [ 731.004868][T27582] hsr_slave_1: entered promiscuous mode [ 731.013048][T27582] debugfs: 'hsr0' already exists in 'hsr' [ 731.018843][T27582] Cannot create hsr debugfs directory [ 731.070325][T27585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.077324][T27585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.106146][T27585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.266022][T27606] lo speed is unknown, defaulting to 1000 [ 731.374690][T27585] hsr_slave_0: entered promiscuous mode [ 731.383042][T27585] hsr_slave_1: entered promiscuous mode [ 731.391681][T27585] debugfs: 'hsr0' already exists in 'hsr' [ 731.397467][T27585] Cannot create hsr debugfs directory [ 732.084362][T27606] chnl_net:caif_netlink_parms(): no params data found [ 732.340237][T27606] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.347587][T27606] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.358660][T27606] bridge_slave_0: entered allmulticast mode [ 732.374122][T27606] bridge_slave_0: entered promiscuous mode [ 732.395996][T27606] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.408925][T27606] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.429656][T27606] bridge_slave_1: entered allmulticast mode [ 732.440495][T27606] bridge_slave_1: entered promiscuous mode [ 732.570122][T20160] Bluetooth: hci3: command tx timeout [ 732.591084][T27606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.607819][T27606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.649286][T20160] Bluetooth: hci6: command tx timeout [ 732.662487][T27606] team0: Port device team_slave_0 added [ 732.671429][T27606] team0: Port device team_slave_1 added [ 732.708404][T27606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.716045][T27606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.742664][T27606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.757483][T27606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.765984][T27606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.793262][T27606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.809435][T20160] Bluetooth: hci8: command tx timeout [ 732.810795][T16076] Bluetooth: hci7: command tx timeout [ 732.874433][T27606] hsr_slave_0: entered promiscuous mode [ 732.881665][T27606] hsr_slave_1: entered promiscuous mode [ 732.888186][T27606] debugfs: 'hsr0' already exists in 'hsr' [ 732.896049][T27606] Cannot create hsr debugfs directory [ 732.912319][ T1691] block nbd0: Possible stuck request ffff888027415000: control (read@0,1024B). Runtime 30 seconds [ 732.924978][ T1691] block nbd0: Possible stuck request ffff888027415200: control (read@1024,1024B). Runtime 30 seconds [ 732.936206][ T1691] block nbd0: Possible stuck request ffff888027415400: control (read@2048,1024B). Runtime 30 seconds [ 732.947619][ T1691] block nbd0: Possible stuck request ffff888027415600: control (read@3072,1024B). Runtime 30 seconds [ 734.649466][T16076] Bluetooth: hci3: command tx timeout [ 734.729570][T16076] Bluetooth: hci6: command tx timeout [ 734.889492][T16076] Bluetooth: hci8: command tx timeout [ 734.890350][T20160] Bluetooth: hci7: command tx timeout [ 736.729537][T20160] Bluetooth: hci3: command tx timeout [ 736.809469][T20160] Bluetooth: hci6: command tx timeout [ 736.969662][T20160] Bluetooth: hci7: command tx timeout [ 736.969701][T16076] Bluetooth: hci8: command tx timeout [ 739.049931][T16076] Bluetooth: hci8: command tx timeout [ 747.614700][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.625399][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 747.956703][T18113] dvmrp0 (unregistering): left allmulticast mode [ 748.046032][T18113] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 748.065060][T18113] bond1 (unregistering): (slave bridge1): the permanent HWaddr of slave - f2:21:89:8e:08:d0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 748.141601][T18113] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 748.408214][T18113] bond6 (unregistering): (slave bridge0): Releasing backup interface [ 748.423518][T18113] bridge0 (unregistering): left promiscuous mode [ 748.516407][T18113] bond1 (unregistering): Released all slaves [ 748.545496][T18113] bond2 (unregistering): Released all slaves [ 748.591157][T18113] bond3 (unregistering): Released all slaves [ 748.618262][T18113] bond4 (unregistering): (slave veth5): Releasing active interface [ 748.643144][T18113] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 748.663184][T18113] bond4 (unregistering): Released all slaves [ 748.685138][T18113] bond5 (unregistering): (slave veth13): Releasing active interface [ 748.696456][T18113] bond5 (unregistering): Released all slaves [ 748.732884][T18113] bond6 (unregistering): Released all slaves [ 748.836569][T18113] 9: left promiscuous mode [ 748.914399][T18113] 9: left promiscuous mode [ 748.957406][T18113] tipc: Left network mode [ 749.350435][T18113] hsr_slave_0: left promiscuous mode [ 749.357316][T18113] hsr_slave_1: left promiscuous mode [ 749.364908][T18113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 749.377332][T18113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.394543][T18113] veth1_vlan: left allmulticast mode [ 749.400179][T18113] veth0_macvtap: left promiscuous mode [ 749.405780][T18113] veth1_vlan: left promiscuous mode [ 749.411849][T18113] veth0_vlan: left promiscuous mode [ 749.923255][T18113] team0 (unregistering): Port device team_slave_1 removed [ 749.958534][T18113] team0 (unregistering): Port device team_slave_0 removed [ 750.387335][T18113] IPVS: stop unused estimator thread 0... [ 753.289385][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 753.297462][ C0] lec:lec_tx_timeout: lec0 [ 762.980247][ T1691] block nbd0: Possible stuck request ffff888027415000: control (read@0,1024B). Runtime 60 seconds [ 762.991194][ T1691] block nbd0: Possible stuck request ffff888027415200: control (read@1024,1024B). Runtime 60 seconds [ 763.003260][ T1691] block nbd0: Possible stuck request ffff888027415400: control (read@2048,1024B). Runtime 60 seconds [ 763.014546][ T1691] block nbd0: Possible stuck request ffff888027415600: control (read@3072,1024B). Runtime 60 seconds [ 765.534663][ T5191] udevd[5191]: worker [26780] /devices/virtual/block/nbd0 is taking a long time [ 772.590130][T20160] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 772.599500][T20160] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 772.607298][T20160] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 772.616001][T20160] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 772.625000][T20160] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 772.704611][T27615] lo speed is unknown, defaulting to 1000 [ 772.886362][T27615] chnl_net:caif_netlink_parms(): no params data found [ 773.026063][T27615] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.033773][T27615] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.041252][T27615] bridge_slave_0: entered allmulticast mode [ 773.050007][T27615] bridge_slave_0: entered promiscuous mode [ 773.058745][T27615] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.066182][T27615] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.073759][T27615] bridge_slave_1: entered allmulticast mode [ 773.082152][T27615] bridge_slave_1: entered promiscuous mode [ 773.122137][T27615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.135892][T27615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.176844][T27615] team0: Port device team_slave_0 added [ 773.187434][T27615] team0: Port device team_slave_1 added [ 773.223720][T27615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.232003][T27615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.259605][T27615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.273034][T27615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.281680][T27615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.309829][T27615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.380454][T27615] hsr_slave_0: entered promiscuous mode [ 773.388244][T27615] hsr_slave_1: entered promiscuous mode [ 773.397327][T27615] debugfs: 'hsr0' already exists in 'hsr' [ 773.403395][T27615] Cannot create hsr debugfs directory [ 774.650185][T20160] Bluetooth: hci9: command tx timeout [ 776.729511][T20160] Bluetooth: hci9: command tx timeout [ 778.809516][T20160] Bluetooth: hci9: command tx timeout [ 780.890021][T20160] Bluetooth: hci9: command tx timeout [ 788.781841][T16076] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 788.792250][T16076] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 788.801077][T16076] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 788.810604][T16076] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 788.823117][T16076] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 788.900088][T16076] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 788.910597][T16076] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 788.918454][T16076] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 788.927633][T16076] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 788.936834][T16076] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 788.957487][ T5835] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 788.968630][ T5835] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 788.976725][ T5835] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 788.984982][ T5835] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 788.992912][ T5835] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 789.036789][T27626] lo speed is unknown, defaulting to 1000 [ 789.114354][T27628] lo speed is unknown, defaulting to 1000 [ 789.174310][T27630] lo speed is unknown, defaulting to 1000 [ 789.655491][T27626] chnl_net:caif_netlink_parms(): no params data found [ 789.734831][T27628] chnl_net:caif_netlink_parms(): no params data found [ 789.968540][T27630] chnl_net:caif_netlink_parms(): no params data found [ 790.105367][T27628] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.114326][T27628] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.121857][T27628] bridge_slave_0: entered allmulticast mode [ 790.130405][T27628] bridge_slave_0: entered promiscuous mode [ 790.139724][T27628] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.146906][T27628] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.154362][T27628] bridge_slave_1: entered allmulticast mode [ 790.162755][T27628] bridge_slave_1: entered promiscuous mode [ 790.229169][T27626] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.236924][T27626] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.245677][T27626] bridge_slave_0: entered allmulticast mode [ 790.254419][T27626] bridge_slave_0: entered promiscuous mode [ 790.290854][T27628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.301787][T27626] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.320569][T27626] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.327852][T27626] bridge_slave_1: entered allmulticast mode [ 790.348565][T27626] bridge_slave_1: entered promiscuous mode [ 790.414326][T27628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.478874][T27630] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.488317][T27630] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.496672][T27630] bridge_slave_0: entered allmulticast mode [ 790.506645][T27630] bridge_slave_0: entered promiscuous mode [ 790.547487][T27626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.564238][T27630] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.573718][T27630] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.584864][T27630] bridge_slave_1: entered allmulticast mode [ 790.593038][T27630] bridge_slave_1: entered promiscuous mode [ 790.602658][T27628] team0: Port device team_slave_0 added [ 790.636402][T27626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.650821][T27628] team0: Port device team_slave_1 added [ 790.735450][T27630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.836143][T27630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.849581][T27626] team0: Port device team_slave_0 added [ 790.856379][T27628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.864558][T27628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 790.893178][T16076] Bluetooth: hci10: command tx timeout [ 790.899476][T27628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 790.931976][T27626] team0: Port device team_slave_1 added [ 790.952193][T27628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.960576][T27628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 790.987535][T27628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.041553][ T5835] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 791.050709][ T5835] Bluetooth: hci11: command tx timeout [ 791.056984][ T5835] Bluetooth: hci12: command tx timeout [ 791.066585][T20160] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 791.075784][T20160] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 791.087093][T20160] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 791.095485][T20160] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 791.104143][T27630] team0: Port device team_slave_0 added [ 791.184516][T27630] team0: Port device team_slave_1 added [ 791.195873][T27626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.204117][T27626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.234717][T27626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.248191][T27626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.257462][T27626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.284455][T27626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.448664][T27628] hsr_slave_0: entered promiscuous mode [ 791.458776][T27628] hsr_slave_1: entered promiscuous mode [ 791.466457][T27628] debugfs: 'hsr0' already exists in 'hsr' [ 791.472625][T27628] Cannot create hsr debugfs directory [ 791.479262][T27630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.492593][T27630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.520668][T27630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.535322][T27630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.542748][T27630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.570284][T27630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.582239][T27651] lo speed is unknown, defaulting to 1000 [ 791.638029][T27626] hsr_slave_0: entered promiscuous mode [ 791.645437][T27626] hsr_slave_1: entered promiscuous mode [ 791.652342][T27626] debugfs: 'hsr0' already exists in 'hsr' [ 791.658122][T27626] Cannot create hsr debugfs directory [ 791.969288][T27630] hsr_slave_0: entered promiscuous mode [ 791.977921][T27630] hsr_slave_1: entered promiscuous mode [ 791.992000][T27630] debugfs: 'hsr0' already exists in 'hsr' [ 791.997779][T27630] Cannot create hsr debugfs directory [ 792.617852][T27651] chnl_net:caif_netlink_parms(): no params data found [ 792.848034][T27651] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.855462][T27651] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.863017][T27651] bridge_slave_0: entered allmulticast mode [ 792.875028][T27651] bridge_slave_0: entered promiscuous mode [ 792.904004][T27651] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.911728][T27651] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.919908][T27651] bridge_slave_1: entered allmulticast mode [ 792.927905][T27651] bridge_slave_1: entered promiscuous mode [ 792.971641][T20160] Bluetooth: hci10: command tx timeout [ 793.035726][T27651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 793.060661][T27651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.069940][ T1691] block nbd0: Possible stuck request ffff888027415000: control (read@0,1024B). Runtime 90 seconds [ 793.081273][ T1691] block nbd0: Possible stuck request ffff888027415200: control (read@1024,1024B). Runtime 90 seconds [ 793.092394][ T1691] block nbd0: Possible stuck request ffff888027415400: control (read@2048,1024B). Runtime 90 seconds [ 793.103914][ T1691] block nbd0: Possible stuck request ffff888027415600: control (read@3072,1024B). Runtime 90 seconds [ 793.129629][T16076] Bluetooth: hci11: command tx timeout [ 793.135201][T16076] Bluetooth: hci13: command tx timeout [ 793.143176][T20160] Bluetooth: hci12: command tx timeout [ 793.197666][T27651] team0: Port device team_slave_0 added [ 793.224227][T27651] team0: Port device team_slave_1 added [ 793.281213][T27651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.288219][T27651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.318369][T27651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.331812][T27651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.338802][T27651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.372269][T27651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.476211][T27651] hsr_slave_0: entered promiscuous mode [ 793.504973][T27651] hsr_slave_1: entered promiscuous mode [ 793.513847][T27651] debugfs: 'hsr0' already exists in 'hsr' [ 793.519816][T27651] Cannot create hsr debugfs directory [ 795.052939][T20160] Bluetooth: hci10: command tx timeout [ 795.209523][T20160] Bluetooth: hci12: command tx timeout [ 795.215098][T20160] Bluetooth: hci13: command tx timeout [ 795.221419][T16076] Bluetooth: hci11: command tx timeout [ 797.129535][T20160] Bluetooth: hci10: command tx timeout [ 797.290121][T27584] Bluetooth: hci11: command tx timeout [ 797.295752][T27584] Bluetooth: hci12: command tx timeout [ 797.301898][T20160] Bluetooth: hci13: command tx timeout [ 799.369817][T20160] Bluetooth: hci13: command tx timeout [ 809.060245][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.069200][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 814.248990][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5180 ms [ 814.257071][ C0] lec:lec_tx_timeout: lec0 [ 821.371119][T20160] Bluetooth: hci1: command 0x0406 tx timeout [ 823.142725][ T1691] block nbd0: Possible stuck request ffff888027415000: control (read@0,1024B). Runtime 120 seconds [ 823.154913][ T1691] block nbd0: Possible stuck request ffff888027415200: control (read@1024,1024B). Runtime 120 seconds [ 823.166121][ T1691] block nbd0: Possible stuck request ffff888027415400: control (read@2048,1024B). Runtime 120 seconds [ 823.177640][ T1691] block nbd0: Possible stuck request ffff888027415600: control (read@3072,1024B). Runtime 120 seconds [ 833.186776][T20160] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 833.201985][T20160] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 833.210550][T20160] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 833.222381][T20160] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 833.230806][T20160] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 833.285425][T27660] lo speed is unknown, defaulting to 1000 [ 833.480216][T27660] chnl_net:caif_netlink_parms(): no params data found [ 833.629468][T27660] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.636774][T27660] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.644339][T27660] bridge_slave_0: entered allmulticast mode [ 833.657021][T27660] bridge_slave_0: entered promiscuous mode [ 833.672018][T27660] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.679982][T27660] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.687294][T27660] bridge_slave_1: entered allmulticast mode [ 833.706593][T27660] bridge_slave_1: entered promiscuous mode [ 833.782135][T27660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.795931][T27660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.839525][T27660] team0: Port device team_slave_0 added [ 833.848461][T27660] team0: Port device team_slave_1 added [ 833.891356][T27660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.898352][T27660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.926331][T27660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.939699][T27660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.946762][T27660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.974067][T27660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.053054][T27660] hsr_slave_0: entered promiscuous mode [ 834.060920][T27660] hsr_slave_1: entered promiscuous mode [ 834.067719][T27660] debugfs: 'hsr0' already exists in 'hsr' [ 834.074050][T27660] Cannot create hsr debugfs directory [ 835.289693][T20160] Bluetooth: hci14: command tx timeout [ 836.732931][T16076] Bluetooth: hci5: command 0x0406 tx timeout [ 837.369329][T27584] Bluetooth: hci14: command tx timeout [ 839.449677][T27584] Bluetooth: hci14: command tx timeout [ 841.529928][T27584] Bluetooth: hci14: command tx timeout [ 848.710503][T16076] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 848.720413][T16076] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 848.728587][T16076] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 848.745507][T16076] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 848.753616][T16076] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 848.799868][T27669] lo speed is unknown, defaulting to 1000 [ 848.983915][T27669] chnl_net:caif_netlink_parms(): no params data found [ 849.093245][T27669] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.100811][T27669] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.108061][T27669] bridge_slave_0: entered allmulticast mode [ 849.116552][T27669] bridge_slave_0: entered promiscuous mode [ 849.126621][T27669] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.134294][T27669] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.141652][T27669] bridge_slave_1: entered allmulticast mode [ 849.150066][T27669] bridge_slave_1: entered promiscuous mode [ 849.192076][T27669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.205702][T27669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.249153][T27669] team0: Port device team_slave_0 added [ 849.258857][T27669] team0: Port device team_slave_1 added [ 849.297145][T27669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.304595][T27669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.331878][T27669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.345297][T27669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.353091][T27669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.385509][T27669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.471441][T27669] hsr_slave_0: entered promiscuous mode [ 849.478355][T27669] hsr_slave_1: entered promiscuous mode [ 849.486306][T27669] debugfs: 'hsr0' already exists in 'hsr' [ 849.493279][T27669] Cannot create hsr debugfs directory [ 849.901479][T16076] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 849.912883][T16076] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 849.921927][T16076] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 849.931123][T16076] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 849.944059][T16076] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 849.993865][T27584] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 850.028715][ T5838] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 850.043789][ T5838] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 850.055763][ T5838] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 850.068692][ T5838] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 850.140806][T27679] lo speed is unknown, defaulting to 1000 [ 850.197402][T27681] lo speed is unknown, defaulting to 1000 [ 850.660467][T27679] chnl_net:caif_netlink_parms(): no params data found [ 850.810792][ T5838] Bluetooth: hci15: command tx timeout [ 850.862177][T27681] chnl_net:caif_netlink_parms(): no params data found [ 850.983799][T16076] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 850.994368][T16076] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 851.002671][T16076] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 851.011262][T16076] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 851.021489][T16076] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 851.096742][T27679] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.105564][T27679] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.113613][T27679] bridge_slave_0: entered allmulticast mode [ 851.122061][T27679] bridge_slave_0: entered promiscuous mode [ 851.131198][T27679] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.138383][T27679] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.145828][T27679] bridge_slave_1: entered allmulticast mode [ 851.154120][T27679] bridge_slave_1: entered promiscuous mode [ 851.265288][T27679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 851.277097][T27681] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.285548][T27681] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.293513][T27681] bridge_slave_0: entered allmulticast mode [ 851.302378][T27681] bridge_slave_0: entered promiscuous mode [ 851.313380][T27679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 851.323766][T27681] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.332067][T27681] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.339434][T27681] bridge_slave_1: entered allmulticast mode [ 851.347405][T27681] bridge_slave_1: entered promiscuous mode [ 851.463009][T27679] team0: Port device team_slave_0 added [ 851.475063][T27681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 851.486054][T27695] lo speed is unknown, defaulting to 1000 [ 851.493704][T27679] team0: Port device team_slave_1 added [ 851.536713][T27681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 851.588589][T27679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.596068][T27679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.623695][T27679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.666228][T27679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.674262][T27679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.702529][T27679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.746418][T27681] team0: Port device team_slave_0 added [ 851.792709][T27681] team0: Port device team_slave_1 added [ 851.909157][T27679] hsr_slave_0: entered promiscuous mode [ 851.917331][T27679] hsr_slave_1: entered promiscuous mode [ 851.926592][T27679] debugfs: 'hsr0' already exists in 'hsr' [ 851.938560][T27679] Cannot create hsr debugfs directory [ 851.979940][T27681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.987847][T27681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.015068][ T5838] Bluetooth: hci16: command tx timeout [ 852.021683][T27681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 852.052530][T27681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.059901][T27681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.086978][T27681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.092932][T16076] Bluetooth: hci7: command 0x0406 tx timeout [ 852.105396][ T5838] Bluetooth: hci6: command 0x0406 tx timeout [ 852.107316][T16076] Bluetooth: hci3: command 0x0406 tx timeout [ 852.180054][T20160] Bluetooth: hci17: command tx timeout [ 852.273829][T27681] hsr_slave_0: entered promiscuous mode [ 852.283402][T27681] hsr_slave_1: entered promiscuous mode [ 852.295218][T27681] debugfs: 'hsr0' already exists in 'hsr' [ 852.303595][T27681] Cannot create hsr debugfs directory [ 852.613715][T27695] chnl_net:caif_netlink_parms(): no params data found [ 852.892588][T20160] Bluetooth: hci15: command tx timeout [ 852.948216][T27695] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.957153][T27695] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.965958][T27695] bridge_slave_0: entered allmulticast mode [ 852.982909][T27695] bridge_slave_0: entered promiscuous mode [ 852.992122][T27695] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.999416][T27695] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.007132][T27695] bridge_slave_1: entered allmulticast mode [ 853.017716][T27695] bridge_slave_1: entered promiscuous mode [ 853.049495][T20160] Bluetooth: hci18: command tx timeout [ 853.080453][T27695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 853.104417][T27695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.209595][ T1691] block nbd0: Possible stuck request ffff888027415000: control (read@0,1024B). Runtime 150 seconds [ 853.223795][ T1691] block nbd0: Possible stuck request ffff888027415200: control (read@1024,1024B). Runtime 150 seconds [ 853.235843][ T1691] block nbd0: Possible stuck request ffff888027415400: control (read@2048,1024B). Runtime 150 seconds [ 853.247483][ T1691] block nbd0: Possible stuck request ffff888027415600: control (read@3072,1024B). Runtime 150 seconds [ 853.267491][T27695] team0: Port device team_slave_0 added [ 853.296539][T27695] team0: Port device team_slave_1 added [ 853.366073][T27695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.376217][T27695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.404647][T27695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.417963][T27695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 853.425078][T27695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.451986][T27695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 853.538321][T27695] hsr_slave_0: entered promiscuous mode [ 853.551107][T27695] hsr_slave_1: entered promiscuous mode [ 853.557631][T27695] debugfs: 'hsr0' already exists in 'hsr' [ 853.564559][T27695] Cannot create hsr debugfs directory [ 854.091068][T20160] Bluetooth: hci16: command tx timeout [ 854.250187][T20160] Bluetooth: hci17: command tx timeout [ 854.969782][T20160] Bluetooth: hci15: command tx timeout [ 855.131766][T27584] Bluetooth: hci18: command tx timeout [ 856.179783][ T5835] Bluetooth: hci16: command tx timeout [ 856.329569][ T5835] Bluetooth: hci17: command tx timeout [ 857.049588][ T5835] Bluetooth: hci15: command tx timeout [ 857.209496][ T5835] Bluetooth: hci18: command tx timeout [ 857.215059][ T5835] Bluetooth: hci8: command 0x0406 tx timeout [ 858.249342][T20160] Bluetooth: hci16: command tx timeout [ 858.409627][T20160] Bluetooth: hci17: command tx timeout [ 858.972105][ T31] INFO: task dhcpcd:5485 blocked for more than 143 seconds. [ 858.979677][ T31] Not tainted syzkaller #0 [ 858.987164][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 858.997646][ T31] task:dhcpcd state:D stack:25248 pid:5485 tgid:5485 ppid:1 task_flags:0x400140 flags:0x00080000 [ 859.010287][ T31] Call Trace: [ 859.013611][ T31] [ 859.016589][ T31] __schedule+0x15dd/0x52d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 859.022019][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 859.028410][ T31] ? __pfx___schedule+0x10/0x10 [ 859.039750][ T31] ? schedule+0x90/0x360 [ 859.044094][ T31] schedule+0x164/0x360 [ 859.048610][ T31] schedule_preempt_disabled+0x13/0x30 [ 859.073522][ T31] __mutex_lock+0x7fe/0x1300 [ 859.134342][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 859.166235][ T31] ? __mutex_lock+0x5ac/0x1300 [ 859.189597][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 859.194480][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 859.208985][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 859.214006][ T31] ? radix_tree_lookup+0x240/0x290 [ 859.221032][ T31] genl_rcv_msg+0x10b/0x7a0 [ 859.225606][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 859.231198][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 859.236216][ T31] netlink_rcv_skb+0x232/0x4b0 [ 859.241539][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 859.246617][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 859.252745][ T31] ? down_read+0x272/0x2e0 [ 859.257512][ T31] ? genl_rcv+0xd/0x40 [ 859.262136][ T31] genl_rcv+0x28/0x40 [ 859.266183][ T31] netlink_unicast+0x80f/0x9b0 [ 859.271442][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 859.276789][ T31] ? netlink_sendmsg+0x650/0xb40 [ 859.282710][ T31] ? skb_put+0x11b/0x210 [ 859.287115][ T31] netlink_sendmsg+0x813/0xb40 [ 859.292401][T20160] Bluetooth: hci18: command tx timeout [ 859.298358][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 859.304143][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 859.309838][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 859.315216][ T31] ____sys_sendmsg+0x972/0x9f0 [ 859.320571][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 859.326011][ T31] ? import_iovec+0x73/0xa0 [ 859.331029][ T31] ___sys_sendmsg+0x2a5/0x360 [ 859.335781][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 859.342316][ T31] ? __rtnl_unlock+0xc8/0xf0 [ 859.347053][ T31] ? __seccomp_filter+0x3e9/0x1ef0 [ 859.352652][ T31] ? __pfx___seccomp_filter+0x10/0x10 [ 859.358424][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 859.363937][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 859.370342][ T31] ? __secure_computing+0xe1/0x2a0 [ 859.375511][ T31] do_syscall_64+0x14d/0xf80 [ 859.380736][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.386859][ T31] ? clear_bhb_loop+0x40/0x90 [ 859.392126][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.398084][ T31] RIP: 0033:0x7f868232c407 [ 859.403476][ T31] RSP: 002b:00007fffcdd9aad0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 859.412298][ T31] RAX: ffffffffffffffda RBX: 00007f86822a2780 RCX: 00007f868232c407 [ 859.420668][ T31] RDX: 0000000000000000 RSI: 00007fffcdd9ab50 RDI: 000000000000000e [ 859.428683][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 859.437439][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000560e130c6e10 [ 859.445873][ T31] R13: 000000000000000e R14: 00007fffcddaf010 R15: 0000560e393c8620 [ 859.457576][ T31] [ 859.464974][ T31] INFO: task syz.0.5806:27535 blocked for more than 143 seconds. [ 859.474674][ T31] Not tainted syzkaller #0 [ 859.492929][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 859.502705][ T31] task:syz.0.5806 state:D stack:26216 pid:27535 tgid:27534 ppid:26772 task_flags:0x480140 flags:0x00080002 [ 859.515048][ T31] Call Trace: [ 859.518695][ T31] [ 859.525422][ T31] __schedule+0x15dd/0x52d0 [ 859.534055][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 859.540721][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 859.545818][ T31] ? __pfx___schedule+0x10/0x10 [ 859.550805][ T31] ? schedule+0x90/0x360 [ 859.555111][ T31] schedule+0x164/0x360 [ 859.559808][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 859.565809][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 859.572066][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 859.578223][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 859.584703][ T31] nbd_set_size+0x454/0x680 [ 859.589411][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 859.594497][ T31] ? nla_memcpy+0x5b/0xc0 [ 859.598898][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 859.604553][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 859.611081][ T31] ? rcu_is_watching+0x15/0xb0 [ 859.615910][ T31] ? trace_kmalloc+0x2a/0x110 [ 859.621332][ T31] ? __nla_parse+0x40/0x60 [ 859.628594][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 859.637272][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 859.647791][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 859.654414][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 859.659830][ T31] genl_rcv_msg+0x61c/0x7a0 [ 859.665059][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 859.673454][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 859.680796][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 859.686977][ T31] netlink_rcv_skb+0x232/0x4b0 [ 859.693071][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 859.698149][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 859.704388][ T31] ? down_read+0x272/0x2e0 [ 859.708866][ T31] ? genl_rcv+0xd/0x40 [ 859.713065][ T31] genl_rcv+0x28/0x40 [ 859.717086][ T31] netlink_unicast+0x80f/0x9b0 [ 859.722140][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 859.727477][ T31] ? netlink_sendmsg+0x650/0xb40 [ 859.733166][ T31] ? skb_put+0x11b/0x210 [ 859.737541][ T31] netlink_sendmsg+0x813/0xb40 [ 859.742536][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 859.747882][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 859.753008][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 859.758348][ T31] ____sys_sendmsg+0x972/0x9f0 [ 859.763691][ T31] ? futex_unqueue+0x211/0x240 [ 859.768810][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 859.777598][ T31] ? import_iovec+0x73/0xa0 [ 859.782376][ T31] ___sys_sendmsg+0x2a5/0x360 [ 859.787132][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 859.794019][ T31] ? futex_wait+0x29a/0x380 [ 859.798710][ T31] ? __fget_files+0x2a/0x420 [ 859.803925][ T31] ? __fget_files+0x3a0/0x420 [ 859.808679][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 859.814270][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 859.820265][ T31] ? rcu_is_watching+0x15/0xb0 [ 859.825185][ T31] do_syscall_64+0x14d/0xf80 [ 859.830420][ T31] ? trace_irq_disable+0x3b/0x150 [ 859.835513][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.842416][ T31] ? clear_bhb_loop+0x40/0x90 [ 859.847173][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.854051][ T31] RIP: 0033:0x7f609f59c799 [ 859.858521][ T31] RSP: 002b:00007f60a0529028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 859.867991][ T31] RAX: ffffffffffffffda RBX: 00007f609f815fa0 RCX: 00007f609f59c799 [ 859.876422][ T31] RDX: 0000000020008040 RSI: 0000200000000040 RDI: 0000000000000006 [ 859.885351][ T31] RBP: 00007f609f632c99 R08: 0000000000000000 R09: 0000000000000000 [ 859.896406][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 859.906421][ T31] R13: 00007f609f816038 R14: 00007f609f815fa0 R15: 00007ffd38a35d28 [ 859.915012][ T31] [ 859.918093][ T31] INFO: task syz.4.5808:27543 blocked for more than 144 seconds. [ 859.952845][ T31] Not tainted syzkaller #0 [ 859.957858][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 859.966954][ T31] task:syz.4.5808 state:D stack:27880 pid:27543 tgid:27540 ppid:17025 task_flags:0x400040 flags:0x00080002 [ 859.979764][ T31] Call Trace: [ 859.983283][ T31] [ 859.986258][ T31] __schedule+0x15dd/0x52d0 [ 859.991976][ T31] ? __pfx___schedule+0x10/0x10 [ 859.996916][ T31] ? schedule+0x90/0x360 [ 860.001593][ T31] schedule+0x164/0x360 [ 860.005810][ T31] schedule_preempt_disabled+0x13/0x30 [ 860.018759][ T31] __mutex_lock+0x7fe/0x1300 [ 860.024008][ T31] ? __mutex_lock+0x5ac/0x1300 [ 860.029100][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 860.033851][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 860.039046][ T31] ? radix_tree_lookup+0x240/0x290 [ 860.044220][ T31] genl_rcv_msg+0x10b/0x7a0 [ 860.048776][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 860.054225][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 860.059561][ T31] netlink_rcv_skb+0x232/0x4b0 [ 860.064385][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 860.069605][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 860.075413][ T31] ? down_read+0x272/0x2e0 [ 860.079978][ T31] ? genl_rcv+0xd/0x40 [ 860.085532][ T31] genl_rcv+0x28/0x40 [ 860.091170][ T31] netlink_unicast+0x80f/0x9b0 [ 860.097312][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 860.104087][ T31] ? netlink_sendmsg+0x650/0xb40 [ 860.109495][ T31] ? skb_put+0x11b/0x210 [ 860.113884][ T31] netlink_sendmsg+0x813/0xb40 [ 860.118733][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 860.125144][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 860.130619][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 860.135958][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 860.141928][ T31] __sys_sendto+0x672/0x710 [ 860.146605][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 860.152173][ T31] ? exc_page_fault+0x6a/0xc0 [ 860.156917][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 860.162683][ T31] __x64_sys_sendto+0xde/0x100 [ 860.167541][ T31] do_syscall_64+0x14d/0xf80 [ 860.174380][ T31] ? trace_irq_disable+0x3b/0x150 [ 860.180146][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.186282][ T31] ? clear_bhb_loop+0x40/0x90 [ 860.191505][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.197446][ T31] RIP: 0033:0x7fe4f155cfce [ 860.202399][ T31] RSP: 002b:00007fe4f236de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 860.213534][ T31] RAX: ffffffffffffffda RBX: 00007fe4f236f6c0 RCX: 00007fe4f155cfce [ 860.223499][ T31] RDX: 0000000000000020 RSI: 00007fe4f236e000 RDI: 0000000000000004 [ 860.234961][ T31] RBP: 0000000000000000 R08: 00007fe4f236df04 R09: 000000000000000c [ 860.244352][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 860.258437][ T31] R13: 00007fe4f236df58 R14: 00007fe4f236e000 R15: 0000000000000000 [ 860.267197][ T31] [ 860.271115][ T31] INFO: task syz.2.5809:27542 blocked for more than 144 seconds. [ 860.282560][ T31] Not tainted syzkaller #0 [ 860.287538][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 860.297957][ T31] task:syz.2.5809 state:D stack:23384 pid:27542 tgid:27541 ppid:17716 task_flags:0x400140 flags:0x00080002 [ 860.322045][ T31] Call Trace: [ 860.325381][ T31] [ 860.328377][ T31] __schedule+0x15dd/0x52d0 [ 860.335701][ T31] ? __pfx___schedule+0x10/0x10 [ 860.346502][ T31] ? schedule+0x90/0x360 [ 860.351610][ T31] schedule+0x164/0x360 [ 860.357016][ T31] schedule_preempt_disabled+0x13/0x30 [ 860.363017][ T31] __mutex_lock+0x7fe/0x1300 [ 860.367685][ T31] ? __mutex_lock+0x5ac/0x1300 [ 860.372980][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 860.377747][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 860.384073][ T31] ? radix_tree_lookup+0x240/0x290 [ 860.391056][ T31] genl_rcv_msg+0x10b/0x7a0 [ 860.396842][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 860.402441][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 860.407513][ T31] netlink_rcv_skb+0x232/0x4b0 [ 860.416473][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 860.422100][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 860.427810][ T31] ? down_read+0x272/0x2e0 [ 860.433773][ T31] ? genl_rcv+0xd/0x40 [ 860.438211][ T31] genl_rcv+0x28/0x40 [ 860.442744][ T31] netlink_unicast+0x80f/0x9b0 [ 860.447597][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 860.453611][ T31] ? netlink_sendmsg+0x650/0xb40 [ 860.458628][ T31] ? skb_put+0x11b/0x210 [ 860.463565][ T31] netlink_sendmsg+0x813/0xb40 [ 860.479420][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 860.485436][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 860.491054][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 860.496391][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 860.502177][ T31] __sys_sendto+0x672/0x710 [ 860.506745][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 860.513180][ T31] ? exc_page_fault+0x6a/0xc0 [ 860.518024][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 860.523871][ T31] __x64_sys_sendto+0xde/0x100 [ 860.528708][ T31] do_syscall_64+0x14d/0xf80 [ 860.533820][ T31] ? trace_irq_disable+0x3b/0x150 [ 860.538911][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.546954][ T31] ? clear_bhb_loop+0x40/0x90 [ 860.551991][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.557982][ T31] RIP: 0033:0x7fbf0875cfce [ 860.563140][ T31] RSP: 002b:00007fbf095d9e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 860.576157][ T31] RAX: ffffffffffffffda RBX: 00007fbf095db6c0 RCX: 00007fbf0875cfce [ 860.585023][ T31] RDX: 0000000000000020 RSI: 00007fbf095da000 RDI: 0000000000000004 [ 860.593366][ T31] RBP: 0000000000000000 R08: 00007fbf095d9f04 R09: 000000000000000c [ 860.602075][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 860.610402][ T31] R13: 00007fbf095d9f58 R14: 00007fbf095da000 R15: 0000000000000000 [ 860.618460][ T31] [ 860.623550][ T31] INFO: task syz.2.5809:27547 blocked for more than 145 seconds. [ 860.644020][ T31] Not tainted syzkaller #0 [ 860.650744][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 860.660061][ T31] task:syz.2.5809 state:D stack:26440 pid:27547 tgid:27541 ppid:17716 task_flags:0x400040 flags:0x00080002 [ 860.672344][ T31] Call Trace: [ 860.675662][ T31] [ 860.678635][ T31] __schedule+0x15dd/0x52d0 [ 860.683848][ T31] ? __pfx___schedule+0x10/0x10 [ 860.689404][ T31] ? schedule+0x90/0x360 [ 860.693722][ T31] schedule+0x164/0x360 [ 860.697961][ T31] schedule_preempt_disabled+0x13/0x30 [ 860.704451][ T31] __mutex_lock+0x7fe/0x1300 [ 860.709349][ T31] ? __mutex_lock+0x5ac/0x1300 [ 860.714180][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 860.718898][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 860.724578][ T31] ? radix_tree_lookup+0x240/0x290 [ 860.730622][ T31] genl_rcv_msg+0x10b/0x7a0 [ 860.735183][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 860.740722][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 860.745722][ T31] netlink_rcv_skb+0x232/0x4b0 [ 860.750954][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 860.756026][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 860.762215][ T31] ? down_read+0x272/0x2e0 [ 860.766683][ T31] ? genl_rcv+0xd/0x40 [ 860.771253][ T31] genl_rcv+0x28/0x40 [ 860.775284][ T31] netlink_unicast+0x80f/0x9b0 [ 860.780520][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 860.785879][ T31] ? netlink_sendmsg+0x650/0xb40 [ 860.791460][ T31] ? skb_put+0x11b/0x210 [ 860.795766][ T31] netlink_sendmsg+0x813/0xb40 [ 860.801085][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 860.806427][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 860.811818][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 860.817149][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 860.822696][ T31] __sys_sendto+0x672/0x710 [ 860.827316][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 860.832691][ T31] ? fd_install+0x94/0x3d0 [ 860.838460][ T31] ? fd_install+0x306/0x3d0 [ 860.844329][ T31] __x64_sys_sendto+0xde/0x100 [ 860.849607][ T31] do_syscall_64+0x14d/0xf80 [ 860.854267][ T31] ? trace_irq_disable+0x3b/0x150 [ 860.859797][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.865928][ T31] ? clear_bhb_loop+0x40/0x90 [ 860.873220][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.879654][ T31] RIP: 0033:0x7fbf0875cfce [ 860.884120][ T31] RSP: 002b:00007fbf095b8e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 860.893661][ T31] RAX: ffffffffffffffda RBX: 00007fbf095ba6c0 RCX: 00007fbf0875cfce [ 860.902042][ T31] RDX: 0000000000000020 RSI: 00007fbf095b9000 RDI: 0000000000000006 [ 860.910994][ T31] RBP: 0000000000000000 R08: 00007fbf095b8f04 R09: 000000000000000c [ 860.919552][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 860.927610][ T31] R13: 00007fbf095b8f58 R14: 00007fbf095b9000 R15: 0000000000000000 [ 860.936150][ T31] [ 860.939782][ T31] INFO: task syz.1.5814:27573 blocked for more than 145 seconds. [ 860.947537][ T31] Not tainted syzkaller #0 [ 860.968998][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 860.981327][ T31] task:syz.1.5814 state:D stack:26560 pid:27573 tgid:27572 ppid:18295 task_flags:0x400140 flags:0x00080002 [ 861.001156][ T31] Call Trace: [ 861.006142][ T31] [ 861.009565][ T31] __schedule+0x15dd/0x52d0 [ 861.014497][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 861.020390][ T31] ? __pfx___schedule+0x10/0x10 [ 861.025311][ T31] ? schedule+0x90/0x360 [ 861.030130][ T31] schedule+0x164/0x360 [ 861.034354][ T31] schedule_preempt_disabled+0x13/0x30 [ 861.040514][ T31] __mutex_lock+0x7fe/0x1300 [ 861.045158][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 861.052053][ T31] ? __mutex_lock+0x5ac/0x1300 [ 861.056874][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 861.061990][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 861.067074][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 861.076264][ T31] ? radix_tree_lookup+0x240/0x290 [ 861.083307][ T31] genl_rcv_msg+0x10b/0x7a0 [ 861.087927][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 861.093544][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 861.103254][ T31] netlink_rcv_skb+0x232/0x4b0 [ 861.108426][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 861.114051][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 861.119739][ T31] ? down_read+0x272/0x2e0 [ 861.124242][ T31] ? genl_rcv+0xd/0x40 [ 861.128384][ T31] genl_rcv+0x28/0x40 [ 861.134439][ T31] netlink_unicast+0x80f/0x9b0 [ 861.139599][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 861.146527][ T31] ? netlink_sendmsg+0x650/0xb40 [ 861.152975][ T31] ? skb_put+0x11b/0x210 [ 861.158654][ T31] netlink_sendmsg+0x813/0xb40 [ 861.165543][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.171180][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 861.176194][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 861.183250][ T31] ____sys_sendmsg+0x972/0x9f0 [ 861.188092][ T31] ? futex_unqueue+0x211/0x240 [ 861.195922][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 861.202060][ T31] ? import_iovec+0x73/0xa0 [ 861.206655][ T31] ___sys_sendmsg+0x2a5/0x360 [ 861.213550][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 861.218825][ T31] ? futex_wait+0x29a/0x380 [ 861.225905][ T31] ? __fget_files+0x2a/0x420 [ 861.232091][ T31] ? __fget_files+0x3a0/0x420 [ 861.236888][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 861.242282][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 861.247829][ T31] ? rcu_is_watching+0x15/0xb0 [ 861.252992][ T31] do_syscall_64+0x14d/0xf80 [ 861.257688][ T31] ? trace_irq_disable+0x3b/0x150 [ 861.263242][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.271858][ T31] ? clear_bhb_loop+0x40/0x90 [ 861.276966][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.283278][ T31] RIP: 0033:0x7f695bf9c799 [ 861.287772][ T31] RSP: 002b:00007f695cf0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 861.299930][ T31] RAX: ffffffffffffffda RBX: 00007f695c215fa0 RCX: 00007f695bf9c799 [ 861.308475][ T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000009 [ 861.318490][ T31] RBP: 00007f695c032c99 R08: 0000000000000000 R09: 0000000000000000 [ 861.331771][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.340164][ T31] R13: 00007f695c216038 R14: 00007f695c215fa0 R15: 00007ffc1f441108 [ 861.348257][ T31] [ 861.351699][ T31] [ 861.351699][ T31] Showing all locks held in the system: [ 861.360124][ T31] 1 lock held by khungtaskd/31: [ 861.365030][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 861.377253][ T31] 2 locks held by dhcpcd/5485: [ 861.386711][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 861.395319][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 861.406563][ T31] 2 locks held by getty/5581: [ 861.412039][ T31] #0: ffff8880365330a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 861.422777][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 861.433279][ T31] 15 locks held by kworker/u8:6/18111: [ 861.443529][ T31] 1 lock held by udevd/26780: [ 861.448283][ T31] #0: ffff888026ef7358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 861.458159][ T31] 2 locks held by syz-executor/27518: [ 861.465258][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 861.474295][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 861.485310][ T31] 6 locks held by syz.0.5806/27535: [ 861.491000][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 861.499972][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 861.509709][ T31] #2: ffff888026efca78 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 861.520970][ T31] #3: ffff888026f5c978 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 861.536029][ T31] #4: ffff888026f5c318 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 861.548631][ T31] #5: ffff888026f5c350 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 861.562566][ T31] 2 locks held by syz.4.5808/27543: [ 861.568149][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 861.576518][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 861.586091][ T31] 2 locks held by syz.2.5809/27542: [ 861.591808][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 861.600294][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 861.610161][ T31] 2 locks held by syz.2.5809/27547: [ 861.615433][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 861.624278][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 861.633655][ T31] 2 locks held by syz.1.5814/27573: [ 861.638912][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 861.647539][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 861.657068][ T31] 2 locks held by syz-executor/27580: [ 861.662869][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 861.672736][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 861.682400][ T31] 2 locks held by syz-executor/27582: [ 861.687849][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 861.697165][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 861.707801][ T31] 2 locks held by syz-executor/27585: [ 861.714155][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 861.722659][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 861.731794][ T31] 2 locks held by syz-executor/27606: [ 861.740647][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 861.750470][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 861.760848][ T31] 2 locks held by syz-executor/27615: [ 861.766275][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 861.775032][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 861.784447][ T31] 2 locks held by syz-executor/27626: [ 861.790101][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 861.798381][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 861.807934][ T31] 2 locks held by syz-executor/27628: [ 861.814271][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 861.825647][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 861.834988][ T31] 2 locks held by syz-executor/27630: [ 861.840713][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 861.856093][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 861.865689][ T31] 2 locks held by syz-executor/27651: [ 861.871542][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 861.880108][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 861.889516][ T31] 2 locks held by syz-executor/27660: [ 861.896220][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 861.904892][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 861.916718][ T31] 2 locks held by syz-executor/27669: [ 861.922446][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 861.935502][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 861.945069][ T31] 2 locks held by syz-executor/27679: [ 861.950975][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 861.959636][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 861.968714][ T31] 2 locks held by syz-executor/27681: [ 861.974900][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 861.983980][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 861.993280][ T31] 2 locks held by syz-executor/27695: [ 861.998694][ T31] #0: ffffffff8fc3b570 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 862.007133][ T31] #1: ffffffff8fc3b388 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 862.016923][ T31] [ 862.051088][ T31] ============================================= [ 862.051088][ T31] [ 862.059688][ T31] NMI backtrace for cpu 0 [ 862.059719][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 862.059742][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 862.059756][ T31] Call Trace: [ 862.059765][ T31] [ 862.059776][ T31] dump_stack_lvl+0xe8/0x150 [ 862.059818][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 862.059845][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 862.059874][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 862.059905][ T31] sys_info+0x135/0x170 [ 862.059993][ T31] watchdog+0xfd9/0x1030 [ 862.060033][ T31] ? watchdog+0x21a/0x1030 [ 862.060073][ T31] kthread+0x388/0x470 [ 862.060105][ T31] ? __pfx_watchdog+0x10/0x10 [ 862.060134][ T31] ? __pfx_kthread+0x10/0x10 [ 862.060157][ T31] ret_from_fork+0x51e/0xb90 [ 862.060196][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 862.060223][ T31] ? __switch_to+0xc7d/0x1450 [ 862.060262][ T31] ? __pfx_kthread+0x10/0x10 [ 862.060285][ T31] ret_from_fork_asm+0x1a/0x30 [ 862.060335][ T31] [ 862.060345][ T31] Sending NMI from CPU 0 to CPUs 1: [ 862.175728][ C1] NMI backtrace for cpu 1 [ 862.175746][ C1] CPU: 1 UID: 0 PID: 18113 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 862.175767][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 862.175780][ C1] Workqueue: bat_events batadv_bla_periodic_work [ 862.175896][ C1] RIP: 0010:__kasan_check_byte+0x2d/0x40 [ 862.175922][ C1] Code: d6 41 56 53 48 89 f3 49 89 fe e8 8e 15 00 00 84 c0 75 16 be 01 00 00 00 4c 89 f7 31 d2 48 89 d9 89 c3 e8 06 05 00 00 89 d8 5b <41> 5e c3 cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 [ 862.175939][ C1] RSP: 0018:ffffc90002f87878 EFLAGS: 00000202 [ 862.175954][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000080000001 [ 862.175966][ C1] RDX: 0000000000000000 RSI: ffffffff8b7606d9 RDI: 1ffffffff1cec05c [ 862.175979][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 862.175990][ C1] R10: dffffc0000000000 R11: fffff520005f0f24 R12: 0000000000000002 [ 862.176002][ C1] R13: ffffffff8e7602e0 R14: ffffffff8e7602e0 R15: 0000000000000000 [ 862.176016][ C1] FS: 0000000000000000(0000) GS:ffff888125561000(0000) knlGS:0000000000000000 [ 862.176049][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 862.176062][ C1] CR2: 00007f490764bdcb CR3: 00000000760aa000 CR4: 00000000003526f0 [ 862.176079][ C1] Call Trace: [ 862.176086][ C1] [ 862.176095][ C1] lock_acquire+0x79/0x2e0 [ 862.176121][ C1] ? batadv_bla_purge_claims+0x108/0x6d0 [ 862.176144][ C1] batadv_bla_purge_claims+0x129/0x6d0 [ 862.176163][ C1] ? batadv_bla_purge_claims+0x108/0x6d0 [ 862.176185][ C1] ? batadv_bla_purge_claims+0x108/0x6d0 [ 862.176209][ C1] batadv_bla_periodic_work+0xbd/0xae0 [ 862.176229][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 862.176249][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 862.176271][ C1] ? __pfx_batadv_bla_periodic_work+0x10/0x10 [ 862.176303][ C1] ? process_scheduled_works+0xa25/0x1830 [ 862.176333][ C1] ? process_scheduled_works+0xa25/0x1830 [ 862.176357][ C1] process_scheduled_works+0xb02/0x1830 [ 862.176397][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 862.176424][ C1] ? assign_work+0x3d5/0x5e0 [ 862.176449][ C1] worker_thread+0xa50/0xfc0 [ 862.176489][ C1] kthread+0x388/0x470 [ 862.176506][ C1] ? __pfx_worker_thread+0x10/0x10 [ 862.176529][ C1] ? __pfx_kthread+0x10/0x10 [ 862.176546][ C1] ret_from_fork+0x51e/0xb90 [ 862.176571][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 862.176593][ C1] ? __switch_to+0xc7d/0x1450 [ 862.176615][ C1] ? __pfx_kthread+0x10/0x10 [ 862.176632][ C1] ret_from_fork_asm+0x1a/0x30 [ 862.176669][ C1] [ 862.441648][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 862.448592][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 862.457741][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 862.467830][ T31] Call Trace: [ 862.471144][ T31] [ 862.474147][ T31] vpanic+0x56c/0xa60 [ 862.478184][ T31] ? __pfx___schedule+0x10/0x10 [ 862.483076][ T31] ? __pfx_vpanic+0x10/0x10 [ 862.487629][ T31] ? __pfx_console_unlock+0x10/0x10 [ 862.492915][ T31] panic+0xc5/0xd0 [ 862.496689][ T31] ? __pfx_panic+0x10/0x10 [ 862.501162][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 862.506619][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 862.512823][ T31] watchdog+0x1023/0x1030 [ 862.517204][ T31] ? watchdog+0x21a/0x1030 [ 862.521709][ T31] kthread+0x388/0x470 [ 862.525804][ T31] ? __pfx_watchdog+0x10/0x10 [ 862.530513][ T31] ? __pfx_kthread+0x10/0x10 [ 862.535133][ T31] ret_from_fork+0x51e/0xb90 [ 862.539749][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 862.544893][ T31] ? __switch_to+0xc7d/0x1450 [ 862.549601][ T31] ? __pfx_kthread+0x10/0x10 [ 862.554212][ T31] ret_from_fork_asm+0x1a/0x30 [ 862.559026][ T31] [ 862.562657][ T31] Kernel Offset: disabled [ 862.566998][ T31] Rebooting in 86400 seconds..