last executing test programs: 20.02542408s ago: executing program 0 (id=4104): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xe, &(0x7f0000000340)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @jmp={0x5, 0x1, 0x0, 0x0, 0x6, 0xc, 0x4}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x42}, @jmp={0x5, 0x1, 0xd, 0x19, 0x3, 0xfffffffffffffff0, 0x57d0a1dc7b0b8da}], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xd, 0x8, 0xfffffff9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0xffffffffffffffff], &(0x7f00000004c0)=[{0x2, 0x3, 0x2, 0x7}], 0x10, 0xffff8000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000005c0)={r2, 0x1, 0xb31, 0x7}) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x290403) ioctl$XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875) r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000040)=0x6e, 0x80800) openat$cgroup_ro(r3, &(0x7f0000000600)='cpuacct.usage_all\x00', 0x0, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x9a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, r5}, 0x94) ioctl$OCFS2_IOC_REFLINK(r4, 0x40186f04, &(0x7f0000000300)={&(0x7f0000000280)='\x00', &(0x7f00000002c0)='\x00', 0x6}) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffda) socket$packet(0x11, 0x3, 0x300) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d3, &(0x7f0000000100)) 19.90347388s ago: executing program 0 (id=4106): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'veth1_to_bridge\x00', &(0x7f0000000140)=@ethtool_gfeatures}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x8c}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r5, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0x4, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xa8, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc04308", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x4010, r6, 0x952de000) 18.499857514s ago: executing program 4 (id=4122): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r4, 0x351d4d5b9375e359, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x5, 'syz0\x00'}]}]}, 0x24}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x5) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r8 = accept4$unix(r6, 0x0, 0x0, 0x0) recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r10, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r12, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000080)={0x28, r11, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x114}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x4040) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r5, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "53e873e83d"}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "d4296b18ad3ff2"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "afee18f188"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e4fb067a79acfa7b77603ff91b"}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000084}, 0x40000) 18.344873651s ago: executing program 3 (id=4125): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x5, 0x30}, &(0x7f0000000080)=0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0x10}, 0x94) 17.855541573s ago: executing program 3 (id=4127): socket(0xa, 0x3, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000004e40)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_RULE_COMPAT={0x4}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x44, 0xe, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000e0001034000000340000000500000003000000000000110300000000000000000000000000000400000000000000000100000400000000000000000200000000000000a4219c48003ef8763544c8459755af312fc36c3d5786c2edfa803a81f2208af3667b6e272fedc9a96ca4922c7d3d1576f30dea83fcbaabfe1c59f68f811cb77148ed98d351ab7158286e87f0ceea8e0e4915b78ead66ecad9483a1257642907bb4ea7b5c5e23685b1ab456e95791d3c542b5e31c990e60847a72ab39b5f52ca080d445000b35b727e3ff7fcdb568eea01be6c5889b502e8691018d1e83b639fd48a868"], 0x0, 0x51}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe1, '\x00', 0x0, r2, 0x1, 0x5}, 0x48) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket(0x2d, 0x2, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x110, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$unix(0x1, 0x1, 0x0) listen(r6, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x44) r7 = socket(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800"/547], 0x610) r8 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r5, 0xc038586a, &(0x7f0000000300)={r1, &(0x7f0000000080)='/&\xaf\x00', 0x200080, &(0x7f00000000c0)={@_ha_fsid={[0x1, 0xf54]}, {0xff, 0x6, 0x89, 0x3}}, 0x4, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x8001}) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x40, @private1, 0x1}]}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000000400)={r11, 0x7, 0xff}, 0x8) 17.504342888s ago: executing program 0 (id=4131): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x94, 0x6, 0xffffff76, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x1, 0x1, 0xcf7, 0x10000}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$nl_xfrm(r0, &(0x7f00000017c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001780)={&(0x7f0000000400)=@allocspi={0x1368, 0x16, 0x200, 0x70bd28, 0x25dfdbfc, {{{@in6=@private1, @in=@empty, 0x4e20, 0x7, 0x4e23, 0x200, 0x2, 0x0, 0x80, 0x1, r1, r2}, {@in6=@loopback, 0x4d3, 0x32}, @in6=@private0, {0x5, 0x3, 0xea, 0xeb, 0x9, 0x7fff, 0xffffffffffffff48, 0x5}, {0x3, 0x9, 0x3, 0xffff}, {0x3, 0x8537343, 0x81}, 0x70bd27, 0x3504, 0x2, 0x0, 0x0, 0x48}, 0x80000001, 0x4}, [@algo_comp={0x1048, 0x3, {{'lzjh\x00'}, 0x8000, "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"}}, @migrate={0x1cc, 0x11, [{@in6=@private0, @in6=@private0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, 0x2b, 0x3, 0x0, 0x3502, 0x2, 0x2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x23}, @in6=@empty, 0x32, 0x0, 0x0, 0x3503, 0xa, 0x2}, {@in=@multicast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@loopback, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x32, 0x2, 0x0, 0x3501, 0x2, 0xa}, {@in6=@mcast2, @in=@local, @in=@multicast2, @in6=@loopback, 0x3c, 0x2, 0x0, 0x3507, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x41}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x4, 0x0, 0x3505, 0xa, 0xa}, {@in6=@mcast1, @in=@loopback, @in6=@private1, @in=@local, 0x63, 0x2, 0x0, 0x3507, 0xa, 0x2}]}, @mark={0xc, 0x15, {0x35075d}}, @migrate={0x50, 0x11, [{@in=@multicast1, @in=@private=0xa010101, @in6=@loopback, @in=@broadcast, 0x6c, 0x3, 0x0, 0x3504, 0x2, 0x2}]}]}, 0x1368}, 0x1, 0x0, 0x0, 0x4000004}, 0x20040010) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x11, 0x4, 0x0, 0x28, 0x4, 0x0, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x95, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2000}, {@private=0xa010101, 0x401}, {@local, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x5, [{@rand_addr=0x64010100, 0x9}, {@private=0xa010101, 0xfffffffd}]}]}}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17.497494465s ago: executing program 4 (id=4133): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) (async, rerun: 64) socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x140, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r3, 0x0) recvmsg(r3, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001580)=""/3, 0x3}], 0x1}, 0x10000) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r4, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x44, r1, 0x300, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}}, 0x0) (async) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f00000000c0)={0xe, 0x40, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 17.396988288s ago: executing program 1 (id=4134): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r1, 0x400, 0x70bd26, 0x21dfdbfd}, 0x5}, 0x1, 0x0, 0x0, 0x20000000}, 0x48800) 17.371975789s ago: executing program 4 (id=4135): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x1, 0x6, @broadcast}, 0x10) (async) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={r3, 0x1, 0x6, @multicast}, 0x10) (async) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x34}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x2c}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003840)={0x3c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0xd7}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @uid}, @typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}}]}, @nested={0x4, 0x2}]}, 0x3c}}, 0xc000) (async) r6 = socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1cc7fe4e49419283000000000040040000ee04000400"], 0x1c}}, 0x0) (async) connect$bt_sco(r6, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 17.232972174s ago: executing program 1 (id=4137): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.swap.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.swap.events\x00', 0x275a, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000400)={'broute\x00', 0x0, 0x0, 0x0, [0x4, 0x10000, 0x9, 0x4, 0x800, 0xffffffffffffffff]}, &(0x7f0000000480)=0x78) setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000100)=r2, 0x8) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000100)=r2, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={r2, 0x8001, 0x8000, 0xfff}) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x208a4800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, 0x1, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40005) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001a80), r4) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a80), r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c3320e006e713f13e71e3ed7590556cdfdd47e0f", @ANYRES16=r5, @ANYBLOB="0100000000010000000001000000040001801c0002800c00018008000100070000000c0001800800010006000000"], 0x34}}, 0x20004000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, r5, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x10001}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x8bc}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x8081}, 0x0) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r0, 0x1, 0x3d, &(0x7f00000000c0), 0x4) 17.200135142s ago: executing program 0 (id=4138): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x0, 0x81, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x6, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0x7fffffff, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x800, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x87, 0x10, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0x2, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}]}]}}]}, 0x43c}}, 0x4000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x0, 0x81, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x6, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0x7fffffff, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x800, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x87, 0x10, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0x2, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}]}]}}]}, 0x43c}}, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 17.13301979s ago: executing program 2 (id=4139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x104, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)={0x18, r3, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x4, 0xe}]}, 0x18}}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) 16.988934346s ago: executing program 2 (id=4140): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8005}, 0x840) socketpair(0x2, 0x800, 0x9, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x2, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x88000}, 0x40000) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb4, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x44405) sendto$inet6(r2, &(0x7f0000000480)="1c6b20485f2a9c5b750700517e4613d228aee6786270205bf1ca84a94004492bf98a211742695a556192e3395a4f9230e73f000379e39515731381e24ccc86ddb7efe758e901fec80c8621d816487450bd18bc3ed525153c74175933ccbbce8aa2d1d19ff2e00820db75b5bd7a2d73", 0x6f, 0x858, &(0x7f0000000500)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x42}, 0x2d}, 0x1c) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x15, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8844}, 0x1) ioctl$OCFS2_IOC_MOVE_EXT(r2, 0x40406f06, &(0x7f0000000640)={0x400, 0x2, 0x6, 0x8, 0x6}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r3) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x80, r6, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x48c4) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, r7, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa48f}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48040}, 0x4040080) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000940), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, r5, 0x610, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xb, 0xa, 'TIPCv2\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x2001c055) syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xd0, r8, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7c4d, 0x73}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x158}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xffffff4a}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3bf}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x100}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x18cc}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0xd0}, 0x1, 0x0, 0x0, 0x4008840}, 0x4) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x44010) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x2c, 0x0, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x51}, 0x0) socket$alg(0x26, 0x5, 0x0) r9 = socket(0x25, 0x1, 0x3aad) getsockname$packet(r9, &(0x7f0000000ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000f00)=0x14) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f80), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000fc0)=0x0) sendmsg$NFC_CMD_VENDOR(r10, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, r11, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x24000045) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f00000010c0)={0x2, 'pim6reg\x00', {0xfffffc00}, 0x1}) 16.988734402s ago: executing program 0 (id=4141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a0007"], 0x1ac}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 16.978380286s ago: executing program 4 (id=4142): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xffff}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xffff}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) (async) 16.97004102s ago: executing program 3 (id=4143): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000100)={0x0, 0x38, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x81}, 0x4000010) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000100)={0x0, 0x38, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x81}, 0x4000010) (async) 16.865789395s ago: executing program 1 (id=4144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_LEVEL={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 16.801628162s ago: executing program 3 (id=4145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007000000000008000900000000000600020001e0000008000a0000000000080017"], 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xfd}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x80, 0x4) recvmsg$kcm(r3, &(0x7f0000000480)={&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/23, 0x17}], 0x1, &(0x7f0000000400)=""/117, 0x75}, 0x30000) r4 = accept4$x25(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x12, 0x800) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000280), 0x4) 16.797591032s ago: executing program 0 (id=4146): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="180000000914010028bd7000fedbdf64d5c7d574eb66f3250b9523c20befb3eaa3e9d13b0e64c39098ab5033662eb8db8a8f7eb640b195058287433f848d5e852eb22ff83660af39f8578ab42a453d027eb744bdd72b32186aca356deef810f8b435b7279891ecbabf0fa2ab2b3193ad168fdd37b16b1ccbe1125f81541a68a1a466c7f4abcc8dc660a7f437c530f1e1fb1b8659db452cc460d1cdc2be4a6408495b9009630400bc306853a702559c73b6b65b15d6833b42420fa7a5dc3ffa78083e06da1adbdebcb56455360bab90d8790fe67b842496ac9292a2a5dbd1d84d631302b1b0681a612519fb386ae375085714a7d49b08502e"], 0x18}}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r3, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f00000000c0)=0x3ff, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r11, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57) setsockopt$inet_tcp_int(r11, 0x6, 0x1, &(0x7f0000000000)=0x3, 0x4) sendto$inet(r11, &(0x7f00000002c0)="ab", 0x1, 0x4008825, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01012cbd7000fddbdf25030000000c00040002000000000200000c00030000000000000000001c0007800c00018008000100", @ANYRES32=r10, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c0006000300000000000000080001000000000008000100000000000800010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x24004004}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 16.737245152s ago: executing program 1 (id=4147): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000430001000000000000000000000000000f000100aaaaaaaaaac437836d223000"], 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x90) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r3, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r5], 0x34}}, 0x4008000) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}]}, 0x20}, 0x1, 0x7}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r9, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x0, 0x43, 0xa0, 0x0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x11, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0x8}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x7, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0xa}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x7, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg$kcm(r11, &(0x7f0000000340)={&(0x7f0000000400)=@nfc_llcp, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/238, 0xee}], 0x1, &(0x7f0000000480)=""/148, 0x94}, 0x10120) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r13, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 16.669625199s ago: executing program 2 (id=4148): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 16.668950025s ago: executing program 3 (id=4149): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd2c, 0xffeffffe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) accept4$unix(r3, 0x0, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f000000ae80)=@ipv4_delroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x8}, [@RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x24}}, 0x0) (rerun: 64) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @void, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x2000, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0xffffff07, 0x11}, @generic={0x2, 0x8, "d588380003c1"}]}}}}}}, 0x44) 16.467471162s ago: executing program 4 (id=4150): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) (async) 16.427515182s ago: executing program 2 (id=4151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006880)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) (async) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000820}, 0x4041080) (async) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x1ce8, 0x2c, 0x200, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x1cb8, 0x2, [@TCA_ROUTE4_ACT={0x2a8, 0x6, [@m_mpls={0xdc, 0x12, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x81}, @TCA_MPLS_BOS={0x5}]}, {0x9f, 0x6, "3925ba3f38d807a60715ac1ba5e63077534d4466778b8a9c3c6db7ad1c8c99511a5e96d8c321e47d4eccf056c50f85531f39ee10f28bc6ecfae97972508f960d6f6bac6f72abeb78cced1dde5cff1def283011de39a22acbc697e544751bbaf253556956030051de10b6d6ad7f4012df8bd5c2dedcae0c15659b85ee1f32dcfe25553e3eef5f6c330df9cf6a3b0b1b8e06c4289d06349109a59e26"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x100, 0x10, 0x0, 0x0, {{0x7}, {0xc0, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xe452}, @TCA_IPT_TARG={0x57, 0x6, {0x6, 'security\x00', 0x6d, 0x5, "2c6c5d02b7663b65fa6d80cba29b7cf2dc0e39fbc93cef82894d9bc9811c09966b87a84c5d57534873a6cdc67b"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x1c, 0x6, "366924859599fc918647efee67c4f61e9c1007888ef6db22"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0xc8, 0x11, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x0, 0x0, 0x3}}]}, {0x81, 0x6, "6d3582a022affdf85d0e954b9b8a056c64f8bf14c2bfbde444338b94b0fc99a2b77e28a90fd406412df66e22a736312eb1ca30f846f99dfea7f21ebd2f580803ef8e636cb5fc7509bbb5eca805c078f044fc957849ae8e14f01654f796087a71ba55514319417d5a4d3b694bd93a488b3faad419c7a2c804cc98e1587b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_ROUTE4_ACT={0x11a0, 0x6, [@m_mpls={0x10c, 0xf, 0x0, 0x0, {{0x9}, {0x68, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xf4b6c}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88fb}, @TCA_MPLS_LABEL={0x8, 0x5, 0x273b1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xc5b9d}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TTL={0x5, 0x7, 0xe6}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7f, 0x8, 0x2, 0x7, 0x4}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88fb}, @TCA_MPLS_BOS={0x5}]}, {0x7b, 0x6, "842b4a6c4103e29659013db3a3d2ae628be1aebf6c4e7b67d6a8dbf1aec6a4a4419a93456380bf74f09277d0caee498b69ac4e057d812f8b171ed22451d330db3bc36450087733daba0bd8af79f61ad018fe30cf781bac67350aed9421976cd6d6390a5928599e91e9faca786b7d5517f51f29f1f53ff0"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_simple={0x1090, 0x17, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x200, 0x10000000, 0x2}}, @TCA_DEF_DATA={0x9, 0x3, '\'\\&@\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0xad96, 0x1, 0x3, 0x2}}, @TCA_DEF_DATA={0xc, 0x3, 'nl80211\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x1, 0x3, 0xbc1b, 0x8001}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x4b}, @TCA_ROUTE4_POLICE={0x864, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffffffffffff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3b1, 0x80000000, 0x0, 0x6, 0x6, 0xa, 0x9, 0x6, 0x5, 0xce9, 0x3b, 0x10001, 0x3, 0x1ff, 0xb59, 0xfff, 0x400, 0x602, 0x2, 0x6, 0x10001, 0x0, 0x5, 0x7, 0xfffffff8, 0x7fff, 0x81, 0x346e, 0x1, 0x6, 0x4040000, 0x5, 0x9, 0x3, 0x8, 0xdeb4, 0x4b000, 0x7, 0x0, 0x5e, 0x7, 0x8, 0xe92, 0x3, 0x400, 0xb, 0x8, 0x6, 0x10000, 0xa3c1, 0x6, 0xd8f6, 0x6, 0x0, 0x2, 0x2, 0x6, 0x690, 0x81, 0xe, 0x6, 0x3, 0x99d7, 0x0, 0x8, 0xc5, 0x1, 0x5ab, 0xfffffff7, 0x7fffffff, 0x3, 0x2, 0x10000, 0x6, 0xe, 0x8, 0x10, 0x2, 0xfffd, 0x4, 0x7bd0, 0xa, 0x100, 0xd432, 0x0, 0xffff, 0x3, 0x3ff, 0x3, 0x8, 0xb0c, 0x6, 0x10000, 0x2, 0x40, 0x0, 0x0, 0x5, 0xc, 0x1, 0xfffffff8, 0x100, 0x2, 0x4e6d, 0x6cbd, 0x2, 0x66f, 0x6d561371, 0x0, 0x3, 0x0, 0x6, 0x2, 0x1, 0x1, 0x3, 0x4, 0x2, 0x8, 0x2, 0x6, 0x8bf, 0x2, 0x40, 0x5, 0xfffffffb, 0x3, 0x2, 0x9, 0x8, 0x800, 0xc, 0x4, 0xf496, 0x7, 0xb, 0x49b, 0x0, 0x4, 0x2, 0x5, 0xb, 0x81, 0xdbe9, 0xfffffff8, 0x5, 0x7, 0xc1, 0x8, 0x0, 0x8001, 0x9, 0x3, 0x12, 0x1, 0x3ff, 0x0, 0x7f, 0x5, 0x8, 0x8, 0x0, 0x8, 0xc, 0xa2, 0xfff, 0x9, 0x5, 0x2, 0x9, 0xfffffff3, 0x7, 0xcb6e, 0x3, 0x9, 0x3ab, 0x3, 0x7ff, 0xffff, 0x4, 0xabd3, 0x0, 0x7, 0x54, 0x0, 0xff, 0x6, 0x3, 0x7, 0x2, 0xe, 0x4de4ba7e, 0x4ee4, 0xa, 0x2, 0x5, 0x7, 0x9, 0x9, 0x6, 0x9, 0x6, 0xffffff53, 0x10, 0xb, 0x5, 0x9, 0x6, 0x5, 0x7f, 0xa, 0x8, 0xd, 0x4, 0x80000001, 0xbf, 0xe, 0x81, 0x4, 0x8, 0x2, 0x3, 0x2, 0xff, 0x10000, 0x5, 0x80000000, 0x6, 0x9, 0x8001, 0x5, 0x8, 0x1, 0xf, 0xc4, 0x80000001, 0x5, 0x7, 0xfffffffe, 0x2, 0xffffffc0, 0x9, 0x6, 0x3ff, 0x1, 0x6, 0x1, 0x40, 0x175, 0x0, 0x3, 0x0, 0x28607bc7, 0xe, 0x5, 0x200]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x2, 0x3, 0x4, 0x401, {0x4, 0x1, 0x2, 0x2, 0x9, 0x2}, {0x5, 0x0, 0x6c9, 0x7, 0x8, 0x100}, 0x0, 0x1ff, 0x3}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6d3, 0x9, 0x10, 0x0, 0x10, 0x7, 0x6, 0x80000000, 0x401, 0x8, 0x1, 0x1ff, 0x2, 0x0, 0x8, 0xe6e, 0xc8d9, 0x1, 0xffff7614, 0x1, 0x2, 0x0, 0x6, 0x10000000, 0x5, 0x8, 0xffffd65c, 0x5, 0x7, 0x4, 0xffffffff, 0x4, 0x4a, 0x7, 0x8, 0xdb46, 0x8, 0x5, 0xe827, 0x2, 0x6, 0x9, 0x3, 0x9, 0x2, 0x6c7, 0x1000, 0x3, 0x8, 0x8, 0x1, 0x2, 0x7, 0xd4, 0x3, 0x8000, 0x8, 0x3, 0x6, 0x8, 0x4, 0xfff, 0xffff, 0xeaa, 0xa35, 0xd, 0x6e6, 0x5, 0x1, 0x9, 0x5, 0x5, 0x9, 0x8c, 0x800, 0x9, 0x80, 0x4, 0xfffff29a, 0x7, 0x10, 0x200, 0x5, 0x9, 0x8, 0x2, 0x10000, 0x1, 0x9, 0x0, 0x3, 0x4, 0x94, 0xc7, 0x2, 0xffff, 0x3, 0xfffffffd, 0x5, 0x2, 0x9, 0x6, 0x9c400000, 0x6, 0x38, 0x2, 0xf, 0x5, 0x81, 0x200, 0xc83d, 0x4a5, 0x9, 0x6, 0xfffffff0, 0x7, 0x6, 0x6, 0x400, 0x1, 0x9e3, 0x9, 0x3, 0x5f, 0x24, 0x0, 0xf, 0x29, 0x1000, 0x7, 0x0, 0x2, 0x8f, 0x4, 0x8, 0x8, 0x4, 0x8, 0x6, 0x3, 0x1, 0x2, 0xffffbb69, 0x2, 0x7, 0x829, 0x81, 0x2, 0x7ff, 0x3, 0x1, 0x8, 0x9, 0x0, 0x4, 0x2, 0x4, 0x100, 0x758, 0x9e, 0x8001, 0xff, 0x5, 0x7fd6, 0x2, 0x2, 0x75ef, 0x1, 0x401, 0x0, 0x8, 0xff, 0x8a2efa8d, 0x81, 0x7fffffff, 0x8, 0x7, 0x9, 0x6, 0x6, 0xfffffeff, 0x0, 0x5, 0x0, 0x4, 0x100, 0x1f0, 0xf, 0x1000000, 0xfff, 0x2, 0xf, 0x110, 0x1, 0xffffffff, 0xcd14, 0x4, 0x6, 0x35, 0x1, 0xd79, 0x7, 0x3, 0x0, 0xa668, 0x101, 0x99, 0x10, 0xc, 0xe06, 0x8, 0x5, 0x9, 0x9, 0x5, 0x39e6, 0xfffffffd, 0x2, 0x7, 0x9b, 0x10001, 0x6, 0x0, 0xd4, 0x2, 0xf2e, 0x3, 0x2, 0x9, 0xf, 0x6, 0x9, 0x6, 0x9, 0x6, 0x3, 0x5, 0x81, 0x2, 0x5, 0x7, 0xd, 0x12, 0x2, 0x5, 0x4, 0x3, 0x2, 0x6, 0x81, 0x1, 0x4, 0x0, 0xfffffffb, 0x5, 0x9]}]}]}}]}, 0x1ce8}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000800) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0xec5, 0x5, 0xb, 0x480, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3, 0x5}, 0x50) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r11}, &(0x7f0000000200), &(0x7f00000003c0)=r12}, 0x20) (async) r13 = socket(0x400000000010, 0x3, 0x0) (async) r14 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r15, {0xc, 0x3}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) (async) r17 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r17, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x1a, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002000000000000002b53ffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000000000b725bffffcffffff18410000feffffff0000000000000000181100000000000000", @ANYRES32=r10, @ANYBLOB="000000000000000018230000", @ANYRES32=r11, @ANYBLOB="00000000040000009500000000000000521408000000000018000000060000000000000000000100bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x63, &(0x7f00000004c0)=""/99, 0x41000, 0x4, '\x00', r15, 0x0, r16, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x3, 0xd, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000680)=[r17, r18, 0x1, r19], &(0x7f00000006c0)=[{0xb463, 0x0, 0xf, 0x7}, {0x2, 0x5, 0x7, 0x7}, {0x0, 0x3, 0x1, 0x9}, {0x0, 0x1, 0xc, 0x7}], 0x10, 0x5}, 0x94) 16.288742664s ago: executing program 4 (id=4152): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0xa, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e1f, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fe}}, 0x0, 0x3}, &(0x7f0000003c00)=0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x4014) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300000a000000000000000000000003000600000000000200000000000000000000000000000002000100000000000000000600000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r6 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195e", 0x2a, 0x400c010, &(0x7f0000000080)={0x11, 0xf8, r7, 0x1, 0xe5, 0x6, @local}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x12, 0x2, 0x1, 0x104}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000540)={'gretap0\x00', r7, 0x80, 0x80, 0x2, 0x6, {{0x6, 0x4, 0x3, 0x28, 0x18, 0x65, 0x0, 0x81, 0x4, 0x0, @multicast2, @multicast2, {[@end]}}}}}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="44008000", @ANYRES16=r2, @ANYBLOB="000126bd7000fbdbdf256600000008000300", @ANYRES32=r3, @ANYBLOB="0800b7007f0000000800b7000200000008009f0005000000080022010e0000000800b7009a000000"], 0x44}, 0x1, 0x0, 0x0, 0x28040044}, 0x2000c009) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x44}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_4ADDR={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000100000100"/20, @ANYRES32=r10, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000f"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r11, 0x1}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x70, r11, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x28}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x48000}, 0x41) sendmsg$NL80211_CMD_GET_POWER_SAVE(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r2, 0x304, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x49}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000014) r12 = socket(0x10, 0x3, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000140)={0x0, 0xfffffffffffffed0, &(0x7f0000000100)={&(0x7f0000000700)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x0) sendmmsg(r12, &(0x7f0000000000), 0x4000000000001f2, 0x0) 15.836324096s ago: executing program 1 (id=4153): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000240)={@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, 0x2, 0x6, 0x4, 0x500, 0x8000000000000001, 0x800000, r4}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x1fc8, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x1f98, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x9, 0xfff3}}, @TCA_BASIC_EMATCHES={0x408, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1f4, 0x2, 0x0, 0x1, [@TCF_EM_META={0xac, 0x3, 0x0, 0x0, {{0xfff, 0x4, 0x3}, [@TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_VAR="db13e3a8c12e", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="5924a373bc6f443c8cff"]}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_VAR="fd36f74c", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="c0161158759cad83"]}, @TCA_EM_META_RVALUE={0x26, 0x3, [@TCF_META_TYPE_VAR="e75a095d838af1", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="bd4ee182", @TCF_META_TYPE_VAR="4435ed12c28353cf97", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="2fb59a87b476d0", @TCF_META_TYPE_VAR="e0b269"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x400, 0x9, 0x2}, {0x8001}}}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="c724", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="7c93e7", @TCF_META_TYPE_VAR="df2f", @TCF_META_TYPE_VAR="3adc05550bb9"]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="20443c47c583d47680", @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x6e1a, 0x1, 0x1}, {0x101, 0x1, 0x5, 0x3, 0x9, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x200, 0x1, 0x7f}, {0x7ff, 0xa712, 0x8, 0x1, 0xb}}}, @TCF_EM_CONTAINER={0x98, 0x3, 0x0, 0x0, {{0x8796, 0x0, 0x4}, "bdba77747a1c4112f59bc4cf73f74be986bb6979a05bd042c2443d53a8f616cbfaedde66bc43841a210c49ec412560f9db477e4f818acdccf534fd0480418ec5b85de1f2c94f2e7b0729bf106af1ad564c9f95b5d505663cca3c255336771b478c70320867fb736d45e6aa5b25c746fc6a764e79aabacc23fb297d0291774a9591a5181b8c885e2b6e"}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x4, 0x3, 0x2}, {0x0, 0x100, 0xc, 0x7}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x3, 0x2, 0x10}, {0x3, 0x3, 0x2, "51cb3e"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x80, 0x7, 0x200}, {{0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPT={0x38, 0x1, 0x0, 0x0, {{0xcd8, 0x9, 0x800}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}]}, @TCA_EMATCH_TREE_LIST={0x54, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x1, 0x2, 0x8f7}, {0x81, 0xa, 0x2, "cf2174a69f123c1da088"}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x89d}, {0x71, 0x0, 0x80000001, 0x7fffffff}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0xfffc}, {0x163, 0x2, 0x1, 0x4, 0x3, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x1ac, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xd, 0x1, 0x1}, {0x4, 0x7, 0xa, 0x0, 0x8, 0x3, 0x1}}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xc, 0x9, 0xe}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xb92e, 0x7, 0x4}, {{0x2, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x100, 0x3, 0x10}, {0x2, 0x8, 0x9, 0x58}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7, 0x8, 0x7f}, {0x3, 0x2, 0x2}}}, @TCF_EM_META={0x88, 0x2, 0x0, 0x0, {{0x8, 0x4, 0x2}, [@TCA_EM_META_RVALUE={0x1f, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="37db9aba", @TCF_META_TYPE_VAR="7925de4eebe63f0af658", @TCF_META_TYPE_VAR="79c9de8327eba7191e"]}, @TCA_EM_META_LVALUE={0x25, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="22d9f8894d4d1699d6ac", @TCF_META_TYPE_VAR="67afc04a4c85", @TCF_META_TYPE_VAR="4c19ed864a45fa", @TCF_META_TYPE_VAR='a<', @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3ff, 0x2, 0x2}, {0x7af, 0x1, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0xc8, 0x1}, {0x3, 0x6, 0x2}}}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR='Kd', @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="cb256a8e7540", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="f4de96411e"]}]}}, @TCF_EM_META={0x54, 0x3, 0x0, 0x0, {{0x100, 0x4, 0xcec}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x3}, {0x2, 0x7, 0x1}}}, @TCA_EM_META_RVALUE={0x22, 0x3, [@TCF_META_TYPE_VAR="f60c19", @TCF_META_TYPE_VAR="9cb6", @TCF_META_TYPE_VAR="1222054c1df61e14c94f", @TCF_META_TYPE_VAR="df5356a5f6", @TCF_META_TYPE_VAR='\n5', @TCF_META_TYPE_VAR="bd2a4a380f8e5a88"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x18, 0x1}, {0x3, 0x8, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4}, {0xb821, 0xb8, 0x2}}}]}}, @TCF_EM_IPT={0x50, 0x3, 0x0, 0x0, {{0x5, 0x9, 0x401}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xff}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4b}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x6b2, 0x2, 0xffff}, {0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7f}}]}, @TCA_BASIC_EMATCHES={0x2b4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1, 0x8, 0x875}, {0x4, 0x3, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x400}}, @TCA_EMATCH_TREE_LIST={0xe8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xd543, 0x7, 0x5}, {{0x3}, {0x2, 0x1}}}}, @TCF_EM_META={0x40, 0x3, 0x0, 0x0, {{0x400}, [@TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="9a51", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="6b9230bb1bb19514", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x1}, {0x7, 0x8, 0x1}}}]}}, @TCF_EM_IPT={0x5c, 0x1, 0x0, 0x0, {{0x7, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xf0}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xff}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_CONTAINER={0x34, 0x3, 0x0, 0x0, {{0xfff4, 0x0, 0x81}, "2e8fa06c734edfbbf33601494be9462eefd53b9fa51b201f06d059043932b70939de9b2f62"}}]}, @TCA_EMATCH_TREE_LIST={0x19c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x50, 0x3, 0x0, 0x0, {{0x8, 0x0, 0xfc01}, "f26f3f27e52d02ecd44b800404c0513d4edbfaba4d889a83e9dc2f118df29f269442ef632082d44f21d4030d7359e98d49b285fb0d90a37ff6c3c055ede9c81d30"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0xf9}, {0x5, 0x1, 0x4, 0x7e09}}}, @TCF_EM_IPT={0x114, 0x1, 0x0, 0x0, {{0x2, 0x9, 0xfffc}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xcc, 0x5, "c5d129d17f726762653eddeb41d02154b4a69acef08398b18d1676ff73be6807c87fde45a75d7fb565921bc41599fd1e8ea11805d226d54120f9de71ead85d88b687411b17ac29026ed5f8dcd606be2f5153f95f375765c42c506ed19f2eac71e1ac456276895a85e4043a9fae89b4fbc915a35c5d7358f7364ae810f6babd99ec336a3e7de36ff7d546a9baf1691609239f69c7af9f0e8b9d394d65232e6b9f2535d6206be748e05d0b76677174edc5d5876de0f04ae148c002b8c6b1273b83c72c68b088bddfa3"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xc4c6, 0x1, 0x1}, {0x9, 0x0, 0xb2a, 0x2, 0x8, 0x2, 0x2}}}]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xffe0}}, @TCA_BASIC_POLICE={0x448, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2cb0}, @TCA_POLICE_RATE64={0xc, 0x8, 0x800000000000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x4, 0xa, 0xa5b, 0x1, 0x7, 0xe, 0xffffff10, 0xfff, 0xe, 0xd, 0xc9, 0x7, 0x5147, 0x1, 0x3, 0x5, 0x10001, 0x2, 0xfffffffb, 0x4, 0xd6e, 0x8, 0x3ff, 0x8, 0x4, 0x1, 0x0, 0xffffe000, 0x8, 0x0, 0x9, 0x5, 0x1, 0x1, 0x2, 0xfffffffd, 0xf45, 0x0, 0x0, 0x1, 0x1, 0x9, 0x7, 0x2, 0x7ff, 0x9, 0x2, 0x7, 0x10, 0x5, 0xac54, 0x9, 0x8, 0x1, 0x1, 0xfffffffe, 0x10001, 0x7, 0x9, 0x10000, 0x4, 0x7, 0x4, 0x17b, 0x9, 0x4, 0x8000, 0x2, 0x200, 0x14822fb3, 0x3, 0x8, 0xc0, 0x3, 0x10, 0x63c85e98, 0x1ceb, 0x5, 0xc, 0x400, 0xc, 0x15, 0x1ff, 0x7, 0x1, 0xb, 0x4, 0x6, 0x64ecac40, 0x7, 0x0, 0x1000, 0x1, 0x9, 0x5, 0x745, 0x2, 0xf80, 0x10001, 0x5, 0x9e57, 0x411, 0x80, 0x10000, 0x8, 0xff, 0x7, 0x5e413e0b, 0x7ff, 0x800, 0x6, 0x2, 0x6, 0x2, 0x3, 0x4, 0x3, 0x72, 0xffffffff, 0xffff7fff, 0x6c, 0x3, 0xb46, 0x0, 0x9, 0x4, 0x4, 0xfffffff7, 0x7a, 0x1, 0x9, 0x8, 0x6, 0xff, 0x8, 0x9, 0x7, 0xfffffffc, 0x200, 0x28000, 0x5, 0x27, 0x9, 0x1ff, 0x2c, 0x6, 0x7, 0x8, 0x9, 0xa3f, 0x0, 0x4, 0x0, 0xd476, 0x16b, 0x2, 0x3, 0x0, 0x0, 0x11, 0x9, 0x1bf, 0x800, 0x4, 0x1, 0x0, 0x3, 0x8, 0x9, 0x97, 0x80000001, 0x23, 0xbf5, 0x9, 0x9, 0x8, 0x0, 0x9, 0x1, 0x1, 0x80000001, 0xffffffd3, 0x4, 0x1c0000, 0x9, 0xffffffff, 0xffff8000, 0x6, 0x8, 0x1, 0xf0, 0xd1, 0x4, 0x7, 0x0, 0x3ff, 0x2, 0x7, 0x4, 0x6859, 0x9184, 0x5, 0xfffffe00, 0xffff, 0x3ff, 0x7fffffff, 0x81, 0x5fe, 0x4c3, 0x2, 0xf, 0x1000, 0x1, 0x8a6, 0x8, 0x3, 0x2, 0x7, 0x100, 0x2, 0x48000000, 0x5, 0xe, 0x7f, 0xc8, 0x4, 0xdb, 0xff, 0x5, 0x1ff, 0xe, 0x7f04, 0x4, 0x46, 0x6, 0x1ff, 0x7, 0x5, 0x7, 0x1800000, 0xfffffff7, 0xfffffffb, 0x1, 0xa8, 0x2, 0x9, 0x6, 0x2, 0x80000001, 0x5, 0x100, 0x1, 0x1, 0x7e, 0x7ff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4be9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffd}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]}, @TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc76}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xbd9}}]}, @TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7}, {0xc, 0x3, 0x4, 0x6}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1ff, 0x8, 0x2000}, {0x2, 0x5}}}]}]}, @TCA_BASIC_POLICE={0x1430, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xea31, 0x0, 0x48d00, 0x5, 0xb3, 0x1, 0x3cc8, 0x28cb, 0x0, 0x5, 0x8, 0x7, 0x1, 0x2, 0x6, 0x3ff, 0x2, 0xefe3, 0x0, 0x1, 0x8, 0x8, 0x2, 0xffffd920, 0x8, 0x418, 0x7, 0x40, 0x1197, 0x1000, 0x2, 0x0, 0x8, 0x8, 0x9, 0x9d, 0x1, 0x6, 0x4, 0x9, 0x7fff, 0x3, 0x4, 0x100, 0x100, 0xff, 0x3, 0x6, 0x6, 0x192d, 0x3ff, 0xf, 0x3, 0x6, 0x401, 0x3, 0x7f, 0x7c, 0x6, 0x7, 0x0, 0x9, 0x6, 0x1, 0x1c00000, 0x1, 0x4ba, 0x80, 0xfffff001, 0x4, 0x3, 0x5, 0x9, 0x9, 0x7, 0x7f, 0x2, 0x5, 0x8c00, 0xfffffff7, 0x5, 0x33d8f00a, 0x3, 0xa9d, 0x2, 0x8, 0x100, 0x9, 0xc, 0x1, 0x6, 0x9, 0xc3, 0x10000, 0x9, 0x2, 0x3, 0xfffff800, 0x3, 0x7, 0x5, 0x9, 0x9, 0x45, 0x49, 0x3, 0xffff, 0x7fffffff, 0x10, 0xc6d6, 0x10001, 0x8, 0x2, 0xd, 0x80, 0xa4, 0xd447, 0x2c00000, 0x4, 0xa000000, 0x5, 0x5, 0x99, 0x0, 0x2, 0xfff, 0x9, 0x5, 0xfffffffe, 0x7f, 0xfffffffb, 0x5, 0x5, 0x0, 0xfffffff9, 0x116c, 0x81, 0x6, 0x1000, 0x2122, 0x6, 0x8, 0x9, 0x6, 0x8, 0x1ff, 0x3, 0x7f, 0x7, 0x8, 0x400, 0x0, 0x0, 0x5, 0x5, 0x4, 0x1, 0x0, 0xf, 0x7, 0x9, 0xff, 0x9, 0xc2, 0x80, 0xd, 0x8, 0xfff, 0x5, 0x1, 0x191a, 0x80000001, 0x3, 0xf0d, 0x18000, 0x4, 0x1, 0x101, 0x8, 0x4, 0x7, 0x4, 0x4, 0x8, 0x9, 0x7, 0x10000, 0xfffffff7, 0xbc4, 0xe1e9, 0x3, 0xc12, 0xffff2064, 0x8, 0x255, 0x7, 0x1, 0x6, 0x7, 0xfff, 0x4, 0x7ff, 0x3, 0x0, 0x5, 0x0, 0x9, 0x4, 0x2, 0xffff, 0xffffff2e, 0x4, 0x9, 0xff, 0x5, 0x4, 0x9, 0x100, 0x3f8de63c, 0xd77, 0x4, 0x0, 0x1, 0xa, 0x80, 0x6, 0x63, 0xfffffffa, 0x9, 0x8, 0xfffffff9, 0x9, 0x6, 0x400, 0x6952, 0x10000, 0x97, 0x9, 0x8, 0xff, 0x7aa2, 0xfffffffd, 0x0, 0x4, 0x7, 0x7, 0x4, 0x0, 0x8, 0x9, 0x7, 0x5, 0x4, 0xb9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1deb992b, 0x1, 0x7, 0x4, 0x100, 0x4, 0x1, 0x5, 0xf09c, 0x6e800, 0x800, 0xfffffff9, 0x9, 0x2, 0x7, 0x9, 0x6, 0x763a5995, 0x2, 0x0, 0x5, 0xfffffff7, 0x0, 0x9, 0x5, 0x401, 0xd15, 0x5, 0x1, 0x1, 0x8, 0x100, 0x9, 0x1, 0x2, 0x6, 0xe, 0x80, 0x200, 0xca1, 0xffffffff, 0x1e, 0x10, 0x16d6, 0x0, 0x2, 0x3, 0x6, 0xffff, 0x2, 0x4, 0x4, 0x5, 0xd9, 0x5, 0x6, 0x407c, 0x10, 0x2, 0x10000, 0x1, 0x9, 0x993a, 0x6, 0x3fffc0, 0x4a8c, 0xfffffffa, 0x3, 0x3, 0x2, 0xdb, 0x616, 0x4, 0x6, 0x800, 0x5, 0x7b00, 0x7, 0x2, 0x1, 0x7, 0x3, 0x1, 0xffffffff, 0x6, 0xff, 0x0, 0x7, 0x4, 0xffff, 0x6, 0x20000, 0x1, 0x8000, 0x1, 0x0, 0x2, 0x1, 0x1000, 0x4, 0x8, 0x0, 0x8, 0x6, 0x5, 0xc, 0x79ff, 0xfffffffa, 0x9, 0x0, 0x10, 0xc, 0x5, 0x5, 0x2, 0xa, 0xa3, 0x5, 0x5, 0x5, 0x325, 0xfffffff9, 0x0, 0x0, 0x8, 0x10000, 0x9d7, 0x5, 0x80000001, 0x6, 0xb3, 0xffffff00, 0x3ff, 0xfff, 0x40, 0x401, 0x7, 0xffff0000, 0x8001, 0xfdf, 0xffffffff, 0xc, 0x1, 0x9, 0x6, 0x3, 0xffff, 0x927, 0x5, 0x1, 0x85, 0x1, 0x3, 0x2, 0xffff, 0x1000006, 0x3, 0xffff7428, 0x4, 0x544b, 0x4, 0x9, 0x10000, 0x9c0f, 0x9, 0xd, 0x5, 0x8, 0xb, 0xfffffff9, 0x5, 0x4000, 0xed, 0xe8000, 0xffffff55, 0x7fe1177a, 0x4, 0x10001, 0xff, 0xc, 0xfff, 0x7, 0xb, 0x3, 0x7, 0xc44, 0x9, 0x81, 0x6, 0x1, 0xe165, 0xf5, 0x6, 0x3, 0x58, 0x7, 0x2, 0x9, 0x5c, 0xe, 0x1, 0x7, 0x6b4, 0xfffffff8, 0x4, 0x9f4d, 0xd2a, 0xe, 0x2b69be31, 0x17, 0x1, 0x5, 0xf, 0x101, 0x7, 0x2, 0x6, 0x9, 0x5, 0x7, 0x6, 0x1, 0xfffffffd, 0x7, 0xc55a, 0x10001, 0x10, 0x0, 0x7fffffff, 0x6, 0x4, 0x6, 0x80, 0x6, 0x5, 0x7, 0x28, 0xffffffff, 0x9, 0x9, 0xfffffffc, 0x2, 0x3, 0x86, 0xfff, 0x1ff, 0x80, 0xb, 0x4, 0xd, 0x4, 0xe00000, 0x0, 0x8, 0x0, 0xfff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x1ff, 0x6, 0x7fffffff, 0x6, 0x1, 0x8, 0x7f, 0x4e7, 0x7, 0x80000000, 0x6, 0x9, 0x0, 0x4, 0xfffff52c, 0x8, 0x3ff, 0x38f7767e, 0xda, 0x2, 0x8, 0x4, 0x3, 0x0, 0x9, 0x4, 0x4, 0x5, 0x2f80, 0xe7d, 0x4, 0x9, 0x4, 0x1, 0x10000, 0x7fff, 0xbec, 0x72, 0xf71, 0x3, 0x8, 0x5bf9, 0x3, 0x7, 0x5, 0x8, 0x1000, 0x8000, 0x3, 0x2, 0x80000000, 0xfffffffc, 0x0, 0x2, 0x3, 0x800, 0x10000, 0x8, 0x2, 0x1, 0x9, 0x9c2, 0x2, 0x9, 0xfffffff9, 0xf, 0xfff, 0x7, 0x1000, 0x3, 0x0, 0x3, 0x6, 0x800e, 0x24, 0x3, 0x0, 0x81, 0x811, 0x6, 0x10, 0x6, 0x2, 0xb, 0x0, 0x7fff, 0x81, 0x2, 0x2, 0x0, 0x5, 0x4, 0x9, 0x3, 0xfffffffb, 0x4, 0x2, 0x8, 0x7, 0x80000001, 0x3, 0x5, 0x5, 0xd, 0xcb51, 0x1, 0x81, 0x3, 0x3, 0x7, 0x8, 0x7, 0x7, 0x9, 0x1800, 0x41, 0x81, 0xb, 0x4, 0x8, 0xb7, 0x7, 0x93e, 0xaa0f, 0x7f, 0x8, 0x19b5, 0x800, 0x1ff, 0x200, 0x100, 0x59, 0x4, 0x6, 0x3, 0x2, 0x200, 0x8, 0x1, 0x6, 0x1, 0x3, 0xaeb8, 0x2, 0xb, 0x6, 0xffffffff, 0xfff, 0x4, 0xf, 0x6, 0x989a, 0x4, 0x10001, 0x5, 0x1, 0x6, 0x1, 0x80000000, 0x7, 0x3, 0x3, 0x5, 0xff, 0xa4e0, 0x3, 0x6, 0x8, 0x3, 0x6, 0x0, 0x0, 0x5000, 0x400, 0x6, 0xfcf3, 0x3, 0x892, 0x81, 0x9, 0x0, 0xfffffffa, 0xa357, 0xfff, 0x7f, 0x800, 0x10000, 0x9, 0x0, 0x2, 0xfffffffc, 0x100, 0x3, 0x6, 0x1, 0x9, 0x100, 0x6, 0x3, 0x2, 0x8000, 0xd, 0x5, 0x1, 0x8, 0x9, 0x101, 0x846faf83, 0x7, 0xf, 0x0, 0x100, 0x2, 0x2, 0x3, 0xb, 0x3, 0x800, 0x8, 0x0, 0x2, 0x6, 0x5, 0x7, 0xcd000000, 0xffffff11, 0x9, 0x4, 0x0, 0x1d3, 0x40, 0x9, 0xfff, 0xffffff01, 0x1, 0x8, 0x8, 0x400, 0x2, 0xf, 0x0, 0x4, 0xfffffffb, 0x53, 0x1, 0x9a9, 0x7fff, 0x401, 0x9, 0x1, 0x5, 0x0, 0x100, 0x7, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x800, 0x5, 0x7, 0x6, 0x80, 0x6, 0xd9c, 0xfffffe01, 0x9, 0x6, 0x81, 0x3, 0x3, 0x7f, 0x3254000, 0x7, 0x9, 0xfa3, 0x3, 0x5, 0x40, 0xa426, 0x2, 0x9, 0x4, 0x7fffffff, 0x1, 0x5, 0x7, 0x7, 0x1, 0x10000, 0x0, 0x2, 0x100, 0x6, 0xfffffffc, 0x7, 0x2, 0x88, 0x2, 0x5, 0x80, 0x80a363d, 0x9, 0x2, 0x3, 0xb5, 0x8, 0x7, 0x9, 0x101, 0x8, 0x8, 0xd54, 0x1, 0x0, 0xfffff7a8, 0x9, 0x6, 0x6, 0x0, 0x10000, 0x9, 0x10001, 0x4, 0x4, 0x6, 0x6, 0xa, 0x7, 0x7, 0xfffffffc, 0x3, 0x8, 0x3, 0x7, 0x0, 0x8, 0x6a87f3cb, 0x81, 0x4ebe, 0x0, 0x6, 0x7, 0x9, 0x0, 0x10001, 0x515, 0x9, 0x1, 0x8, 0x0, 0x7, 0xdc9, 0x361, 0x0, 0x1, 0x1, 0x9, 0x4, 0x7fff, 0x3c4, 0xae, 0x9, 0x5, 0x6, 0x401, 0x1, 0x7, 0xfffffff7, 0xffffffe5, 0x5, 0x8001, 0xa6f, 0xbc, 0x8, 0x1, 0x400, 0x4, 0x9, 0x4, 0x7, 0x10001, 0x6c65, 0x5, 0xdde, 0x400, 0x4, 0x4, 0x8, 0x80, 0xd, 0x7, 0x3, 0x9, 0x5, 0x0, 0x7fffffff, 0x7, 0x100, 0x80000001, 0x9, 0x5, 0x0, 0x946, 0x2, 0x401, 0x9, 0x0, 0xdda, 0x4, 0xdd61, 0x9, 0x2, 0x1ff, 0x2, 0x4, 0x4, 0x101, 0xfffffffe, 0x2, 0x2, 0xa4, 0x4, 0x6, 0x0, 0x0, 0xe, 0xffffbc9d, 0x10, 0xe8c, 0x0, 0x8, 0x1140d9d2, 0xf80f, 0x3, 0x6, 0x9, 0x2, 0x2, 0x6, 0x8, 0xe5, 0x4, 0x9, 0x7f, 0x200, 0xe084, 0x9, 0x7, 0x8, 0x1, 0x9, 0x7, 0x8, 0x7, 0x8, 0x350, 0xddc1, 0x8, 0x6, 0x3, 0x3ff, 0x25, 0x0, 0xfffffc01, 0xffffffff, 0x6, 0xa576, 0x67, 0x8000000, 0x2cf, 0x8, 0xfffffffc, 0x5, 0x9, 0x4, 0x8, 0xd, 0xfffffffd, 0xffffffff, 0x6, 0x7fff, 0x2, 0x6e, 0x3, 0x61a, 0xbf0, 0x3, 0x7, 0x6, 0x3, 0x0, 0x3, 0x4, 0x5, 0x6a, 0x0, 0xa4, 0x200, 0x4, 0xf, 0x2, 0x8, 0xed, 0x1, 0xf7b, 0x0, 0x8000, 0x6, 0x0, 0x4, 0x6e3, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x47f, 0x1, 0x3, 0x7, 0x8001, 0x2, 0x2, 0x80000000, 0x4, 0x8, 0x2, 0x4e2, 0x2, 0xfffffff9, 0x1000, 0xe345, 0xffffffff, 0x6cb5, 0x5, 0x4, 0xffffffff, 0x8, 0x9, 0x9, 0xf3, 0xfffffffe, 0x5ee, 0x0, 0x200, 0x2, 0x1, 0x2, 0x7, 0x7f, 0x3, 0x2, 0x2, 0x1, 0xda, 0xd16, 0x8, 0x4, 0x4, 0x5, 0x4, 0x9, 0x1ff, 0x3a0b, 0x1ff, 0x80, 0xe, 0x9, 0x7fff, 0x5, 0x1, 0x1, 0xfffffffd, 0x3, 0x3, 0x7d1, 0x9, 0x0, 0x2, 0x9, 0x8, 0xd, 0x40, 0xd, 0x38, 0xffff7fff, 0x5, 0x3, 0x6, 0x10, 0x7, 0x66e5, 0x4, 0x4, 0xff, 0x0, 0x0, 0x9, 0xfffffff0, 0x7, 0x1, 0x9, 0x3, 0x4, 0x8aa4, 0x80000000, 0x81, 0x8a7, 0x75, 0x9, 0x9, 0x0, 0x9, 0x1f94, 0x3, 0x8, 0x4, 0x8000, 0x3, 0x400, 0xd27b, 0x6, 0x4c, 0x400, 0x9, 0x8000, 0x7f, 0x3, 0x9, 0x80000000, 0x4, 0x0, 0x2, 0x9, 0x3, 0x5, 0x0, 0x927, 0x3, 0x10001, 0x9, 0x5, 0x2, 0x7f, 0xe, 0x3, 0x725, 0xa3d3, 0x1, 0x6, 0x2, 0x9, 0x1, 0xad6, 0x3, 0x7, 0xc0d, 0xce, 0x7, 0xc7b0, 0x4, 0x80000001, 0x1, 0x8, 0x8, 0xb31, 0x3, 0x343, 0x0, 0x80000000, 0x6, 0x8, 0x445, 0x1, 0x8, 0x7d14, 0x80, 0x1, 0x1ff, 0x1, 0xfff, 0x9, 0x7f, 0x2, 0x2, 0x8, 0x4, 0x0, 0x6, 0x3, 0x0, 0x8, 0x7, 0x401, 0x6, 0x400, 0x100, 0xe5b3, 0x6, 0x8, 0x1ff, 0x2f, 0x401, 0x4, 0x9, 0x2, 0x6, 0x6, 0x7fffffff, 0x432, 0x3, 0x44, 0x9, 0xc71, 0x7, 0x6, 0x0, 0x6, 0x7fff, 0x0, 0x1a, 0x7, 0x2c9, 0x0, 0x1, 0x3, 0x10000, 0x5, 0x5, 0x7, 0x10001, 0xfffffffc, 0xfff, 0xae6, 0x8, 0x7194, 0x7, 0x3, 0x9, 0xfffffff8, 0xffffff56, 0x401, 0x6, 0x1, 0xf0000000, 0xfffffffd, 0x0, 0x6, 0x2, 0x4, 0x9, 0x7, 0x10000, 0x2, 0xcb5c, 0x0, 0x8, 0x8, 0x1, 0x8, 0x200, 0x5, 0xff, 0x8, 0x3, 0x8, 0x4, 0x9, 0xc, 0x4, 0x5, 0x7ff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}]}}]}, 0x1fc8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 15.79560952s ago: executing program 3 (id=4154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000fc0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x7, 0x772a, 0xffffffffe, 0x1]}, &(0x7f0000000000)=0x78) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040026ae86bd70005e37aa6fec69dd206987759dbbcaaf78ffdbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c0017000201aaaaaaaaaaaa0c0006000000000000000000080001000300000008000300", @ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x9}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c4}, 0x4001) 15.737365181s ago: executing program 2 (id=4155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xb5, 0xbe, &(0x7f0000000140)="8d8cadaf702d23ad8f3d473b7528d01f22ef6a503b38de3588d0d3a60780c5b82809351db65a43fe61f637760db14c77642967f891fc07f5abc81fb9166bca1301334ba182470434d11270de3653d3907466a82660c64562445609b3411ec7a42b2b2b60e3df4dbc48124760e2bef4abe404c82b7970f0a0e3bf07a70822b188e07245f213bb966b3ff5e5247798efe854adcaf899dfc99f7095813e76961d0243959ddc8d825f958103825b9ef70b5be2e6c473c4", &(0x7f0000000300)=""/190, 0x5d, 0x0, 0xb5, 0xc7, &(0x7f00000003c0)="852e98f2f5cd10aaafda7893cfdada659409a7c414b7fbf3643745ac88c06a7f000153249194df3845e158255ba5597de3e5837fd198cd5803e1efd568fbadbc1d3f439e3868430848da37b05897a11284ec981a1fcff3a6f8cae8ecd2fe6614ea0f6ef6d4f396b111d182d8c853badda94b1dab8f254039b316b5977f9bdb2e88bbbfeba9bfcb919e9445be8ad61c1414cef242e7d74d5c43ecebf5d9c9bb4d108f3288101b57580396bb508470acd206e9131a56", &(0x7f0000000480)="975dd7a98351deef79ff6decb1731d5bbdb6f1d178825881f926f851c119a45a5a1a9a591dae77466da0d49839ac838539207c49ccba7791734d2e7e2fc23666b1ee55f6181378034aaa25a5733affb6052065c08fb28d46cc6f4d11da6630ed5b8696d3c1535c95343733e246a0ecfa2fd54c749548e447a66d55e90024e3f826282d523f6b739c00780f14ae16e5232e7fb5dcbc81da3a328b8e4799928995093bfba0943d8cec5525e367a1f27c35f702219196ad42fe11db083b25a3036c9935e8fb32b416", 0x2, 0x0, 0x5}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="2b637075202d626c6b696f202d6e650a49ae12d013ebc3f87ccc75745f700a696f202b6e657420aab19db9328bb91a23ddef93019add9bf1d98fed629c8aa45b6114c5f8ebabb761ca6a6746a4282ca99d3b163c99b50723a06d5d54ce4fff0e6a89f6fab50756"], 0x1b) sendmsg$netlink(r3, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000107000000000000000007"], 0x18}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) 15.705704498s ago: executing program 1 (id=4156): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='&'], 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, r3, 0x1, 0x70bd27, 0x25dfdc03}, 0x14}, 0x1, 0x400000000000000}, 0x48090) 15.702335278s ago: executing program 2 (id=4157): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB], 0x40}}, 0x48010) 1.143219465s ago: executing program 32 (id=4146): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="180000000914010028bd7000fedbdf64d5c7d574eb66f3250b9523c20befb3eaa3e9d13b0e64c39098ab5033662eb8db8a8f7eb640b195058287433f848d5e852eb22ff83660af39f8578ab42a453d027eb744bdd72b32186aca356deef810f8b435b7279891ecbabf0fa2ab2b3193ad168fdd37b16b1ccbe1125f81541a68a1a466c7f4abcc8dc660a7f437c530f1e1fb1b8659db452cc460d1cdc2be4a6408495b9009630400bc306853a702559c73b6b65b15d6833b42420fa7a5dc3ffa78083e06da1adbdebcb56455360bab90d8790fe67b842496ac9292a2a5dbd1d84d631302b1b0681a612519fb386ae375085714a7d49b08502e"], 0x18}}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r3, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f00000000c0)=0x3ff, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r11, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r11, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57) setsockopt$inet_tcp_int(r11, 0x6, 0x1, &(0x7f0000000000)=0x3, 0x4) sendto$inet(r11, &(0x7f00000002c0)="ab", 0x1, 0x4008825, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01012cbd7000fddbdf25030000000c00040002000000000200000c00030000000000000000001c0007800c00018008000100", @ANYRES32=r10, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c0006000300000000000000080001000000000008000100000000000800010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x24004004}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1.12468797s ago: executing program 33 (id=4152): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0xa, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e1f, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fe}}, 0x0, 0x3}, &(0x7f0000003c00)=0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x4014) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300000a000000000000000000000003000600000000000200000000000000000000000000000002000100000000000000000600000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r6 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195e", 0x2a, 0x400c010, &(0x7f0000000080)={0x11, 0xf8, r7, 0x1, 0xe5, 0x6, @local}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x12, 0x2, 0x1, 0x104}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000540)={'gretap0\x00', r7, 0x80, 0x80, 0x2, 0x6, {{0x6, 0x4, 0x3, 0x28, 0x18, 0x65, 0x0, 0x81, 0x4, 0x0, @multicast2, @multicast2, {[@end]}}}}}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="44008000", @ANYRES16=r2, @ANYBLOB="000126bd7000fbdbdf256600000008000300", @ANYRES32=r3, @ANYBLOB="0800b7007f0000000800b7000200000008009f0005000000080022010e0000000800b7009a000000"], 0x44}, 0x1, 0x0, 0x0, 0x28040044}, 0x2000c009) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x44}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_4ADDR={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000100000100"/20, @ANYRES32=r10, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000f"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r11, 0x1}, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x70, r11, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x28}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x48000}, 0x41) sendmsg$NL80211_CMD_GET_POWER_SAVE(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r2, 0x304, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x49}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000014) r12 = socket(0x10, 0x3, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000140)={0x0, 0xfffffffffffffed0, &(0x7f0000000100)={&(0x7f0000000700)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x0) sendmmsg(r12, &(0x7f0000000000), 0x4000000000001f2, 0x0) 82.700018ms ago: executing program 34 (id=4156): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='&'], 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, r3, 0x1, 0x70bd27, 0x25dfdc03}, 0x14}, 0x1, 0x400000000000000}, 0x48090) 40.90865ms ago: executing program 35 (id=4157): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB], 0x40}}, 0x48010) 0s ago: executing program 36 (id=4154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x90}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000fc0)={'filter\x00', 0x0, 0x0, 0x0, [0x8, 0x7, 0x7, 0x772a, 0xffffffffe, 0x1]}, &(0x7f0000000000)=0x78) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040026ae86bd70005e37aa6fec69dd206987759dbbcaaf78ffdbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000020000000c0017000201aaaaaaaaaaaa0c0006000000000000000000080001000300000008000300", @ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x9}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c4}, 0x4001) kernel console output (not intermixed with test programs): 373] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 378.718817][T17502] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 378.727410][T17497] geneve2: entered promiscuous mode [ 378.751187][ T6019] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 46959 - 0 [ 378.784123][ T6019] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 46959 - 0 [ 378.830772][ T6019] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 46959 - 0 [ 378.851546][ T6019] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 46959 - 0 [ 378.876185][T17500] can: request_module (can-proto-0) failed. [ 378.890873][T17517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3128'. [ 378.906074][T17512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3128'. [ 378.920117][T17517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3128'. [ 378.929990][T17512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3128'. [ 379.082979][T17523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.107408][T17373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.151398][T17373] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.214282][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.221481][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.277739][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.284947][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.546893][T17373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.567831][T17549] syzkaller0: entered promiscuous mode [ 379.574024][T17549] syzkaller0: entered allmulticast mode [ 379.642699][T17373] veth0_vlan: entered promiscuous mode [ 379.655663][T17373] veth1_vlan: entered promiscuous mode [ 379.693914][T17373] veth0_macvtap: entered promiscuous mode [ 379.717474][T17373] veth1_macvtap: entered promiscuous mode [ 379.742778][T17551] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3138'. [ 379.774016][ T9750] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 379.784746][ T9750] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 379.797143][T17373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.807190][ T5965] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 379.837476][T17373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.864308][ T9750] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.891718][ T9750] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.914322][ T9750] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.939364][ T9750] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.085450][ T9756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.117241][ T9756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.168221][T14564] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 380.228615][ T9750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.236553][ T9750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.519527][ T5837] Bluetooth: hci2: command tx timeout [ 380.543902][T17593] netlink: 'syz.4.3150': attribute type 1 has an invalid length. [ 380.607452][ T5965] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 380.697242][T17593] bond1: entered promiscuous mode [ 380.723896][T17593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 380.755932][T17607] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.763258][T17607] IPv6: NLM_F_CREATE should be set when creating new route [ 380.842015][T17593] bond1: (slave bridge1): making interface the new active one [ 380.873587][T17593] bridge1: entered promiscuous mode [ 380.895806][T17593] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 381.098629][T17634] netlink: 'syz.2.3161': attribute type 1 has an invalid length. [ 381.106422][T17634] netlink: 'syz.2.3161': attribute type 2 has an invalid length. [ 381.150677][T17634] netlink: 'syz.2.3161': attribute type 1 has an invalid length. [ 381.168999][T17634] netlink: 'syz.2.3161': attribute type 3 has an invalid length. [ 381.344421][T17654] syzkaller0: entered promiscuous mode [ 381.358470][T17654] syzkaller0: entered allmulticast mode [ 381.414447][T17656] netlink: 'syz.2.3168': attribute type 11 has an invalid length. [ 381.518732][T17666] netlink: 'syz.4.3170': attribute type 7 has an invalid length. [ 381.640708][T17672] Cannot find map_set index 65533 as target [ 381.785802][T17682] syzkaller0: entered promiscuous mode [ 381.792720][T17682] syzkaller0: entered allmulticast mode [ 381.992641][T17697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.598082][ T5143] Bluetooth: hci2: command tx timeout [ 382.605695][ T5143] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 382.622679][ T5143] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 382.633511][ T5143] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 382.642196][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 382.650226][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.818842][ T5143] block nbd2: Receive control failed (result -32) [ 383.097163][T17731] chnl_net:caif_netlink_parms(): no params data found [ 383.234982][T17768] __nla_validate_parse: 10 callbacks suppressed [ 383.235002][T17768] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3199'. [ 383.260140][T17731] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.267546][T17731] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.275430][T17731] bridge_slave_0: entered allmulticast mode [ 383.284300][T17731] bridge_slave_0: entered promiscuous mode [ 383.296595][T17731] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.304259][T17731] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.312492][T17731] bridge_slave_1: entered allmulticast mode [ 383.321540][T17731] bridge_slave_1: entered promiscuous mode [ 383.429872][T17731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.456883][T17731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.478172][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 383.566031][T17731] team0: Port device team_slave_0 added [ 383.633461][T17731] team0: Port device team_slave_1 added [ 383.692337][T17731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.715553][T17731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.770551][T17731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.819898][T17790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3201'. [ 383.840395][T17731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.858060][T17731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.910343][T17790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3201'. [ 383.946499][T17731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.963437][T17792] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 384.501340][T17731] hsr_slave_0: entered promiscuous mode [ 384.521045][T17731] hsr_slave_1: entered promiscuous mode [ 384.532685][T17731] debugfs: 'hsr0' already exists in 'hsr' [ 384.552978][T17731] Cannot create hsr debugfs directory [ 384.595276][T17810] dvmrp0: entered allmulticast mode [ 384.602840][T17811] syzkaller1: entered promiscuous mode [ 384.610487][T17811] syzkaller1: entered allmulticast mode [ 384.679431][ T5143] Bluetooth: hci2: command tx timeout [ 384.752281][T17820] sctp: [Deprecated]: syz.1.3214 (pid 17820) Use of int in maxseg socket option. [ 384.752281][T17820] Use struct sctp_assoc_value instead [ 384.769656][ T5143] Bluetooth: hci0: command tx timeout [ 384.929231][T17731] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.941442][T17731] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.109262][T17731] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.139099][T17731] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.268980][T17731] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.309643][T17731] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.366655][T17844] netlink: 'syz.3.3220': attribute type 11 has an invalid length. [ 385.394328][T17731] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.409871][T17731] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.634363][T17863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3225'. [ 385.667500][T17731] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 385.700408][T17731] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 385.719689][T17731] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 385.744037][T17731] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 386.025396][T17731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.137628][T17892] netlink: 'syz.4.3231': attribute type 1 has an invalid length. [ 386.244362][T17864] lec:lec_atm_close: lec0: Shut down! [ 386.284523][T17892] bond2: entered promiscuous mode [ 386.290367][T17892] bond2: entered allmulticast mode [ 386.296151][T17892] 8021q: adding VLAN 0 to HW filter on device bond2 [ 386.366985][T17731] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.419467][ T9750] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.426634][ T9750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.476449][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.483659][ T6012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.592192][T17905] netlink: 'syz.1.3235': attribute type 3 has an invalid length. [ 386.798632][T17912] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3237'. [ 386.823043][T17920] netlink: 'syz.2.3240': attribute type 22 has an invalid length. [ 386.840318][ T5143] Bluetooth: hci0: command tx timeout [ 386.857131][T17920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3240'. [ 386.902568][T17916] syzkaller0: entered promiscuous mode [ 386.917340][T17916] syzkaller0: entered allmulticast mode [ 387.011334][ T86] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.031064][ T86] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.529934][T17948] Bluetooth: MGMT ver 1.23 [ 388.726831][ T86] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.735651][ T86] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.918322][ T5143] Bluetooth: hci0: command tx timeout [ 390.674381][T17731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.678132][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 390.761419][ T29] lec:lec_start_xmit: lec0:No lecd attached [ 390.818606][T17977] netlink: 'syz.1.3252': attribute type 1 has an invalid length. [ 390.831300][T17731] veth0_vlan: entered promiscuous mode [ 390.852142][T17980] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3253'. [ 390.873279][T17980] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3253'. [ 390.883736][T17980] netlink: 'syz.2.3253': attribute type 6 has an invalid length. [ 390.894157][T17980] netlink: 'syz.2.3253': attribute type 5 has an invalid length. [ 390.902474][T17980] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3253'. [ 390.933416][T17731] veth1_vlan: entered promiscuous mode [ 390.998355][ T5143] Bluetooth: hci0: command tx timeout [ 391.022436][T17731] veth0_macvtap: entered promiscuous mode [ 391.066231][T17731] veth1_macvtap: entered promiscuous mode [ 391.134138][T17993] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3257'. [ 391.158341][T17993] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3257'. [ 391.192138][T17731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.280957][T17731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.423181][T18011] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3261'. [ 391.426424][T18012] ip6_vti0 speed is unknown, defaulting to 1000 [ 391.432800][ T221] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.467842][ T221] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.499180][T18012] ip6_vti0 speed is unknown, defaulting to 1000 [ 391.507776][ T221] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.530977][ T221] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.582280][T18012] ip6_vti0 speed is unknown, defaulting to 1000 [ 391.709376][T18022] syzkaller1: entered promiscuous mode [ 391.716288][T18022] syzkaller1: entered allmulticast mode [ 391.850223][ T6019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.865925][ T6019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.869195][T18032] netlink: 'syz.2.3264': attribute type 4 has an invalid length. [ 391.971910][T18037] netlink: 'syz.2.3264': attribute type 4 has an invalid length. [ 392.176676][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.206231][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.229195][T18035] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3266'. [ 392.302803][T18012] infiniband syz2: set down [ 392.309590][T18012] infiniband syz2: added ip6_vti0 [ 392.316783][T18012] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 392.332731][T18040] syzkaller0: entered promiscuous mode [ 392.340272][T18012] infiniband syz2: Couldn't open port 1 [ 392.342601][T18040] syzkaller0: entered allmulticast mode [ 392.384678][T18012] RDS/IB: syz2: added [ 392.400828][T18012] smc: adding ib device syz2 with port count 1 [ 392.412762][T18012] smc: ib device syz2 port 1 has no pnetid [ 392.446685][T18051] syzkaller1: entered promiscuous mode [ 392.473070][T18051] syzkaller1: entered allmulticast mode [ 392.482099][ T8291] ip6_vti0 speed is unknown, defaulting to 1000 [ 392.632614][T18059] netlink: 'syz.0.3190': attribute type 1 has an invalid length. [ 393.891431][T18012] ip6_vti0 speed is unknown, defaulting to 1000 [ 393.974783][ T5879] ip6_vti0 speed is unknown, defaulting to 1000 [ 394.206311][T18070] netlink: 'syz.1.3272': attribute type 1 has an invalid length. [ 394.415626][T18012] ip6_vti0 speed is unknown, defaulting to 1000 [ 394.547593][T18096] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3278'. [ 394.785662][T18012] ip6_vti0 speed is unknown, defaulting to 1000 [ 394.879931][T18109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3285'. [ 394.950891][T18113] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3286'. [ 395.101997][T18012] ip6_vti0 speed is unknown, defaulting to 1000 [ 395.132573][T18122] nft_compat: unsupported protocol 0 [ 395.253467][T18128] netlink: 'syz.2.3292': attribute type 10 has an invalid length. [ 395.279259][T18128] team0: Port device dummy0 added [ 395.595710][T18012] ip6_vti0 speed is unknown, defaulting to 1000 [ 395.693377][T18153] syzkaller0: entered promiscuous mode [ 395.699187][T18153] syzkaller0: entered allmulticast mode [ 395.770780][T18166] netlink: 'syz.0.3302': attribute type 1 has an invalid length. [ 395.798664][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 395.807624][ C1] lec:lec_tx_timeout: lec0 [ 395.812488][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 395.987060][T18174] netlink: 'syz.4.3306': attribute type 1 has an invalid length. [ 395.995919][T18174] __nla_validate_parse: 2 callbacks suppressed [ 395.995937][T18174] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3306'. [ 396.152444][T18012] ip6_vti0 speed is unknown, defaulting to 1000 [ 396.484938][T18204] netlink: 'syz.2.3309': attribute type 1 has an invalid length. [ 396.590343][T18204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3309'. [ 396.658514][T18012] ip6_vti0 speed is unknown, defaulting to 1000 [ 397.024801][T18196] ip6_vti0 speed is unknown, defaulting to 1000 [ 397.286799][T18232] netlink: 'syz.2.3318': attribute type 1 has an invalid length. [ 397.353162][T18232] bond1: entered promiscuous mode [ 397.358707][T18232] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.452522][T18241] netlink: 'syz.4.3320': attribute type 1 has an invalid length. [ 397.460590][T18241] netlink: 'syz.4.3320': attribute type 4 has an invalid length. [ 397.468407][T18241] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3320'. [ 397.482555][T18241] netlink: 'syz.4.3320': attribute type 1 has an invalid length. [ 397.483605][T18232] bond1: (slave bridge3): making interface the new active one [ 397.490547][T18241] netlink: 'syz.4.3320': attribute type 4 has an invalid length. [ 397.506292][T18241] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3320'. [ 397.515600][T18232] bridge3: entered promiscuous mode [ 397.535802][T18232] bridge3: left promiscuous mode [ 397.617579][T18012] ip6_vti0 speed is unknown, defaulting to 1000 [ 397.971548][T18250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3323'. [ 397.980556][T18250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3323'. [ 398.491668][T18280] sctp: [Deprecated]: syz.2.3325 (pid 18280) Use of int in max_burst socket option. [ 398.491668][T18280] Use struct sctp_assoc_value instead [ 399.198382][T18310] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3332'. [ 399.316328][T18313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3333'. [ 400.829865][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 400.838116][ C1] lec:lec_tx_timeout: lec0 [ 400.842894][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 400.996929][T18253] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 401.162422][T18347] delete_channel: no stack [ 401.163367][T18350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3334'. [ 401.503154][T18376] gtp0: entered promiscuous mode [ 401.514738][T18376] gtp0: entered allmulticast mode [ 401.925336][T18410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3349'. [ 402.035622][T18417] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3351'. [ 402.095916][T18418] syzkaller0: entered promiscuous mode [ 402.113708][T18418] syzkaller0: entered allmulticast mode [ 402.201892][T18424] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3352'. [ 402.234304][T18430] netlink: 'syz.3.3355': attribute type 11 has an invalid length. [ 402.250098][T18430] netlink: 196756 bytes leftover after parsing attributes in process `syz.3.3355'. [ 402.542523][T18449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3359'. [ 402.914225][T18484] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3364'. [ 403.041660][T18486] syzkaller0: entered promiscuous mode [ 403.047249][T18486] syzkaller0: entered allmulticast mode [ 403.094257][T18492] netlink: 13 bytes leftover after parsing attributes in process `syz.1.3369'. [ 403.155657][T18494] xt_hashlimit: size too large, truncated to 1048576 [ 403.209023][T18499] IPv6: NLM_F_CREATE should be specified when creating new route [ 403.268277][T18499] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.275540][T18499] IPv6: NLM_F_CREATE should be set when creating new route [ 403.333663][ T5965] IPVS: starting estimator thread 0... [ 403.459164][T18505] IPVS: using max 34 ests per chain, 81600 per kthread [ 403.505221][T18508] netlink: 'syz.0.3372': attribute type 1 has an invalid length. [ 403.636141][T18532] netlink: 'syz.0.3378': attribute type 1 has an invalid length. [ 403.646824][T18531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3377'. [ 404.039707][T18560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3387'. [ 404.154752][T18566] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.162492][T18566] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.246879][T18566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.259635][T18566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.359574][T18560] bridge0: entered promiscuous mode [ 404.371864][T18560] macsec1: entered promiscuous mode [ 404.377488][T18560] macsec1: entered allmulticast mode [ 404.383129][T18560] bridge0: entered allmulticast mode [ 404.393266][T18560] bridge0: port 3(macsec1) entered blocking state [ 404.401158][T18560] bridge0: port 3(macsec1) entered disabled state [ 404.414587][T18560] bridge0: left allmulticast mode [ 404.421001][T18560] bridge0: left promiscuous mode [ 404.448985][ T221] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.458736][ T221] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.481501][ T221] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.500079][T18582] netlink: zone id is out of range [ 404.505445][T18582] netlink: zone id is out of range [ 404.514323][T18582] netlink: zone id is out of range [ 404.520853][T18582] netlink: zone id is out of range [ 404.531249][ T221] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.532518][T18582] netlink: zone id is out of range [ 404.585877][T18582] netlink: zone id is out of range [ 404.608076][T18582] netlink: zone id is out of range [ 404.622330][T18582] netlink: zone id is out of range [ 404.629244][T18582] netlink: zone id is out of range [ 404.638159][T18582] netlink: zone id is out of range [ 404.758331][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 404.805712][T18596] netlink: 'syz.2.3396': attribute type 4 has an invalid length. [ 404.884243][T18602] tipc: Failed to remove unknown binding: 66,0,0/0:1176920361/1176920362 [ 404.907894][T18602] tipc: Failed to remove unknown binding: 66,0,0/0:1176920361/1176920362 [ 405.063338][T18612] bridge0: port 3(ipvlan2) entered blocking state [ 405.092875][T18612] bridge0: port 3(ipvlan2) entered disabled state [ 405.105069][T18612] ipvlan2: entered allmulticast mode [ 405.111717][T18612] bridge0: entered allmulticast mode [ 405.119841][T18612] ipvlan2: left allmulticast mode [ 405.126540][T18612] bridge0: left allmulticast mode [ 405.180866][T18627] bridge1: entered promiscuous mode [ 405.196758][T18627] bridge1: entered allmulticast mode [ 405.293925][T18616] bond2: entered allmulticast mode [ 405.564903][T18649] netlink: 'syz.4.3412': attribute type 2 has an invalid length. [ 405.598497][T18649] netlink: 'syz.4.3412': attribute type 1 has an invalid length. [ 405.857944][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 405.866037][ C1] lec:lec_tx_timeout: lec0 [ 405.870730][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 405.905976][T18680] netlink: 'syz.1.3417': attribute type 9 has an invalid length. [ 406.388525][T18712] nbd: nbd2 already in use [ 406.394845][T18715] netlink: 'syz.4.3426': attribute type 2 has an invalid length. [ 406.406828][T18714] __nla_validate_parse: 8 callbacks suppressed [ 406.406846][T18714] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3428'. [ 406.423479][T18714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3428'. [ 406.433612][T18714] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3428'. [ 406.450726][T18714] netlink: 'syz.1.3428': attribute type 3 has an invalid length. [ 406.460781][T18714] netlink: 'syz.1.3428': attribute type 2 has an invalid length. [ 406.470062][T18714] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3428'. [ 406.669164][T18725] ip6t_rpfilter: unknown options [ 407.031219][T18745] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3438'. [ 407.420898][T18771] netlink: 272 bytes leftover after parsing attributes in process `syz.1.3443'. [ 407.946181][T18803] Bluetooth: MGMT ver 1.23 [ 408.502082][T18824] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3457'. [ 408.553376][T18824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3457'. [ 408.588118][T18824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3457'. [ 409.345879][T18862] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3465'. [ 410.040657][T18893] syzkaller1: entered allmulticast mode [ 410.642163][T18936] ieee802154 phy1 wpan1: encryption failed: -22 [ 410.878019][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 410.886082][ C1] lec:lec_tx_timeout: lec0 [ 410.890863][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 411.447406][T18983] __nla_validate_parse: 4 callbacks suppressed [ 411.447427][T18983] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3500'. [ 411.478992][T18987] netlink: 'syz.0.3501': attribute type 3 has an invalid length. [ 411.487246][T18983] bridge_slave_1: default FDB implementation only supports local addresses [ 411.605336][T18998] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3503'. [ 411.840995][T19016] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 411.964334][T19026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.017310][T19031] netlink: 'syz.0.3512': attribute type 11 has an invalid length. [ 412.026020][T19031] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.3512'. [ 412.068916][T19037] netlink: 'syz.4.3513': attribute type 24 has an invalid length. [ 412.077893][T19037] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3513'. [ 412.141550][T19041] syzkaller1: entered promiscuous mode [ 412.147237][T19041] syzkaller1: entered allmulticast mode [ 412.360561][T19052] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3519'. [ 412.371365][T19052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3519'. [ 413.109771][T19102] 8021q: VLANs not supported on sit0 [ 415.794638][T19084] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 415.898113][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 415.906150][ C1] lec:lec_tx_timeout: lec0 [ 415.911104][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 416.002517][T19119] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 416.039897][T19121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3538'. [ 416.201118][T19130] pimreg: entered allmulticast mode [ 416.375386][T19147] netlink: 'syz.4.3546': attribute type 11 has an invalid length. [ 416.438893][T19151] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.3548'. [ 416.449727][T19122] infiniband syz1: set active [ 416.450883][T19147] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.3546'. [ 416.454507][T19122] infiniband syz1: added bond_slave_0 [ 416.510830][T19122] RDS/IB: syz1: added [ 416.514980][T19122] smc: adding ib device syz1 with port count 1 [ 416.523272][T19122] smc: ib device syz1 port 1 has no pnetid [ 416.540892][T19149] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3547'. [ 416.634307][T19155] syzkaller1: entered promiscuous mode [ 416.654894][T19155] syzkaller1: entered allmulticast mode [ 416.936740][T19175] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3555'. [ 417.136772][T19186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3560'. [ 417.486368][ T5143] block nbd3: Receive control failed (result -32) [ 417.695242][T19206] veth0: entered promiscuous mode [ 417.720491][T19206] veth0: left promiscuous mode [ 417.915775][T19183] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 417.942976][T19183] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 417.975136][T19222] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3570'. [ 418.059801][T19230] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3570'. [ 418.085638][T19228] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3572'. [ 418.164296][T19226] "syz.2.3571" (19226) uses obsolete ecb(arc4) skcipher [ 418.202242][T19183] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 418.212590][T19183] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 418.280942][T19183] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 418.317048][T19183] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 418.528402][T19183] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 418.556225][T19183] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 418.687274][T19183] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 418.710429][T19183] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 418.843124][T19266] tipc: Started in network mode [ 418.850227][T19266] tipc: Node identity 9e4820e26f47, cluster identity 4711 [ 418.857634][T19266] tipc: Enabled bearer , priority 0 [ 418.907163][T19266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3579'. [ 419.059524][T19270] syzkaller0: entered promiscuous mode [ 419.072848][T19270] syzkaller0: entered allmulticast mode [ 419.097534][T19270] tipc: Resetting bearer [ 419.227567][T19265] tipc: Resetting bearer [ 420.838232][T19265] tipc: Disabling bearer [ 420.858444][ T980] tipc: Node number set to 4044300514 [ 420.918209][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 420.926244][ C1] lec:lec_tx_timeout: lec0 [ 420.931053][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 421.813105][T19364] syzkaller0: entered promiscuous mode [ 421.829739][T19364] syzkaller0: entered allmulticast mode [ 421.938472][T19373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3597'. [ 421.983777][T19373] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3597'. [ 422.164163][T19383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3601'. [ 422.209331][T19385] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3600'. [ 422.431448][T19397] syzkaller0: entered promiscuous mode [ 422.452887][T19397] syzkaller0: entered allmulticast mode [ 422.690547][T19412] netlink: 'syz.1.3607': attribute type 83 has an invalid length. [ 422.714930][T19412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3607'. [ 422.842425][T19416] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3609'. [ 422.899106][T19416] netlink: 'syz.4.3609': attribute type 1 has an invalid length. [ 422.940801][T19423] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3609'. [ 423.066295][T19433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3612'. [ 423.089418][T19433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3612'. [ 423.394307][T19456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3618'. [ 423.625635][T19471] net_ratelimit: 552 callbacks suppressed [ 423.625654][T19471] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 424.142561][T19501] bridge_slave_1: left allmulticast mode [ 424.149829][T19501] bridge_slave_1: left promiscuous mode [ 424.155628][T19501] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.211547][T19501] bridge_slave_0: left allmulticast mode [ 424.232614][T19501] bridge_slave_0: left promiscuous mode [ 424.239750][T19501] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.300429][T19504] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode [ 424.586501][T19523] ip6_vti0 speed is unknown, defaulting to 1000 [ 424.643555][T19533] netlink: 'syz.4.3634': attribute type 3 has an invalid length. [ 424.684596][T19534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.660055][T19578] netlink: 'syz.1.3646': attribute type 1 has an invalid length. [ 425.937957][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 425.946049][ C1] lec:lec_tx_timeout: lec0 [ 425.950873][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 426.606161][T19634] netlink: 'syz.4.3661': attribute type 3 has an invalid length. [ 426.768856][T19642] netlink: 'syz.4.3663': attribute type 9 has an invalid length. [ 426.776724][T19642] netlink: 'syz.4.3663': attribute type 11 has an invalid length. [ 426.812230][T19642] netlink: 'syz.4.3663': attribute type 12 has an invalid length. [ 426.989597][T19619] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.997120][T19619] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.065294][T19619] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 427.429807][T19684] __nla_validate_parse: 12 callbacks suppressed [ 427.429829][T19684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3667'. [ 427.455318][T19684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3667'. [ 427.596524][T19684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.088919][T19706] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3675'. [ 428.183830][T19714] xt_ecn: cannot match TCP bits for non-tcp packets [ 428.202253][T19714] xt_ecn: cannot match TCP bits for non-tcp packets [ 428.219850][T19717] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3678'. [ 428.228236][T19714] xt_ecn: cannot match TCP bits for non-tcp packets [ 428.246777][T19714] xt_ecn: cannot match TCP bits for non-tcp packets [ 428.268206][T19714] xt_ecn: cannot match TCP bits for non-tcp packets [ 428.279414][T19714] xt_ecn: cannot match TCP bits for non-tcp packets [ 428.316870][T19714] xt_ecn: cannot match TCP bits for non-tcp packets [ 428.350085][T19714] xt_ecn: cannot match TCP bits for non-tcp packets [ 428.357220][T19714] xt_ecn: cannot match TCP bits for non-tcp packets [ 428.398128][T19714] xt_ecn: cannot match TCP bits for non-tcp packets [ 428.563730][T19741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3683'. [ 428.584068][ T9756] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.597074][T19741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3683'. [ 428.607250][ T6019] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.626718][ T6019] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.660937][ T6019] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.783301][T19754] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3687'. [ 429.228588][T19786] netlink: 'syz.3.3693': attribute type 2 has an invalid length. [ 429.264720][T19786] netlink: 'syz.3.3693': attribute type 2 has an invalid length. [ 429.301482][T19792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3696'. [ 429.326522][T19794] netlink: 'syz.0.3695': attribute type 1 has an invalid length. [ 430.153108][T19831] netlink: 'syz.0.3706': attribute type 39 has an invalid length. [ 430.250450][T19838] netlink: 'syz.3.3708': attribute type 1 has an invalid length. [ 430.279632][T19838] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3708'. [ 430.315916][T19838] NCSI netlink: No device for ifindex 0 [ 430.830384][T19836] : renamed from hsr0 (while UP) [ 430.957965][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 430.966066][ C1] lec:lec_tx_timeout: lec0 [ 430.970761][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 430.996589][T19871] netlink: 'syz.3.3712': attribute type 1 has an invalid length. [ 431.132619][T19883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3714'. [ 431.151881][ T9750] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.166402][ T9750] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.212204][ T9750] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.230849][ T9750] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.475992][T19905] veth0: entered promiscuous mode [ 431.983965][T19932] pim6reg: entered allmulticast mode [ 432.008393][T19931] pim6reg: left allmulticast mode [ 432.728750][T19977] __nla_validate_parse: 9 callbacks suppressed [ 432.728769][T19977] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3736'. [ 432.808226][T19986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3738'. [ 433.275595][T19988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.300630][T19988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.744289][ T221] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.780381][ T221] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.808054][ T221] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 46959 - 0 [ 433.826490][ T221] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.846757][ T221] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.857362][ T221] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 46959 - 0 [ 433.892016][ T221] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 433.912074][ T221] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.934465][ T221] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 46959 - 0 [ 433.945874][T20024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3747'. [ 434.003005][ T221] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 434.020687][ T221] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.026022][T20036] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3749'. [ 434.032963][ T221] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 46959 - 0 [ 434.066709][T20033] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3751'. [ 434.079475][T20030] "syz.4.3749" (20030) uses obsolete ecb(arc4) skcipher [ 434.100531][T20038] netlink: 'syz.0.3753': attribute type 1 has an invalid length. [ 434.193045][T20038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 434.275567][T20043] bond1: (slave veth3): Enslaving as an active interface with a down link [ 434.303638][T20038] bond1: (slave veth0_to_bond): making interface the new active one [ 434.314209][T20038] veth0_to_bond: entered promiscuous mode [ 434.322726][T20038] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 434.355283][T20057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3756'. [ 434.381046][T20050] bond1: (slave veth5): Enslaving as an active interface with a down link [ 434.396476][T20051] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.3755'. [ 434.410173][T20050] netlink: 'syz.0.3753': attribute type 1 has an invalid length. [ 434.419862][T20050] netlink: 'syz.0.3753': attribute type 2 has an invalid length. [ 434.453388][T20057] netlink: 'syz.1.3756': attribute type 5 has an invalid length. [ 434.582678][T20065] netlink: 'syz.0.3758': attribute type 39 has an invalid length. [ 434.621789][T20068] tipc: Enabling of bearer rejected, media not registered [ 434.640639][T20068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3759'. [ 434.658201][T20069] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3759'. [ 434.658806][T20071] netlink: 'syz.1.3760': attribute type 1 has an invalid length. [ 434.683799][T20071] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3760'. [ 434.796171][T20080] netlink: 'syz.2.3763': attribute type 2 has an invalid length. [ 434.824709][T20084] netlink: 'syz.1.3762': attribute type 24 has an invalid length. [ 435.021506][T20095] netlink: 'syz.2.3770': attribute type 1 has an invalid length. [ 435.097788][T20107] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 435.183104][T20118] netlink: 'syz.4.3775': attribute type 1 has an invalid length. [ 435.219658][T20118] 8021q: adding VLAN 0 to HW filter on device bond3 [ 435.234645][T20118] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 435.246301][T20118] bond3: entered promiscuous mode [ 435.252171][T20118] bond3: entered allmulticast mode [ 435.409672][T20130] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 435.539593][T18183] udevd[18183]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 435.935651][T20160] ip6_vti0 speed is unknown, defaulting to 1000 [ 435.987991][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 435.996105][ C1] lec:lec_tx_timeout: lec0 [ 436.000872][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 436.133367][T20182] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 436.133663][ T5879] IPVS: starting estimator thread 0... [ 436.238126][T20185] IPVS: using max 27 ests per chain, 64800 per kthread [ 436.264910][T20189] openvswitch: netlink: Multiple metadata blocks provided [ 436.484059][T20201] netlink: 'syz.1.3795': attribute type 1 has an invalid length. [ 436.972854][T20230] syz.1.3804: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 436.988877][T20230] CPU: 0 UID: 0 PID: 20230 Comm: syz.1.3804 Not tainted syzkaller #0 PREEMPT(full) [ 436.988904][T20230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 436.988921][T20230] Call Trace: [ 436.988929][T20230] [ 436.988938][T20230] dump_stack_lvl+0xe8/0x150 [ 436.988972][T20230] warn_alloc+0x249/0x340 [ 436.988999][T20230] ? stack_trace_save+0xa9/0x100 [ 436.989023][T20230] ? __pfx_warn_alloc+0x10/0x10 [ 436.989052][T20230] ? kasan_save_track+0x4f/0x80 [ 436.989071][T20230] ? kasan_save_track+0x3e/0x80 [ 436.989091][T20230] ? __kasan_kmalloc+0x93/0xb0 [ 436.989112][T20230] ? __kmalloc_cache_noprof+0x31c/0x660 [ 436.989134][T20230] ? xskq_create+0x56/0x170 [ 436.989233][T20230] ? xsk_setsockopt+0x54c/0x990 [ 436.989258][T20230] ? do_sock_setsockopt+0x17c/0x1b0 [ 436.989319][T20230] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 436.989350][T20230] ? do_syscall_64+0x14d/0xf80 [ 436.989398][T20230] __vmalloc_node_range_noprof+0x132/0x1730 [ 436.989455][T20230] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 436.989485][T20230] ? __kasan_kmalloc+0x93/0xb0 [ 436.989514][T20230] vmalloc_user_noprof+0xad/0xe0 [ 436.989545][T20230] ? xskq_create+0xbf/0x170 [ 436.989575][T20230] xskq_create+0xbf/0x170 [ 436.989608][T20230] xsk_init_queue+0x8a/0xe0 [ 436.989638][T20230] xsk_setsockopt+0x54c/0x990 [ 436.989668][T20230] ? __pfx_xsk_setsockopt+0x10/0x10 [ 436.989696][T20230] ? __pfx_aa_sk_perm+0x10/0x10 [ 436.989760][T20230] ? aa_sock_opt_perm+0xff/0x1a0 [ 436.989815][T20230] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 436.989837][T20230] ? __pfx_xsk_setsockopt+0x10/0x10 [ 436.989867][T20230] do_sock_setsockopt+0x17c/0x1b0 [ 436.989903][T20230] __x64_sys_setsockopt+0x13d/0x1b0 [ 436.989941][T20230] do_syscall_64+0x14d/0xf80 [ 436.989960][T20230] ? trace_irq_disable+0x3b/0x150 [ 436.989989][T20230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.990010][T20230] ? clear_bhb_loop+0x40/0x90 [ 436.990033][T20230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.990059][T20230] RIP: 0033:0x7f9aca59c799 [ 436.990079][T20230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.990096][T20230] RSP: 002b:00007f9acb454028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 436.990119][T20230] RAX: ffffffffffffffda RBX: 00007f9aca815fa0 RCX: 00007f9aca59c799 [ 436.990134][T20230] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 436.990146][T20230] RBP: 00007f9aca632c99 R08: 0000000000000004 R09: 0000000000000000 [ 436.990158][T20230] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.990170][T20230] R13: 00007f9aca816038 R14: 00007f9aca815fa0 R15: 00007ffe405025c8 [ 436.990202][T20230] [ 436.990216][T20230] Mem-Info: [ 437.143962][T20232] ksmbd: Unknown IPC event: 3, ignore. [ 437.278574][T20230] active_anon:9108 inactive_anon:0 isolated_anon:0 [ 437.278574][T20230] active_file:3474 inactive_file:40074 isolated_file:0 [ 437.278574][T20230] unevictable:768 dirty:54 writeback:0 [ 437.278574][T20230] slab_reclaimable:12464 slab_unreclaimable:120326 [ 437.278574][T20230] mapped:32513 shmem:4247 pagetables:1479 [ 437.278574][T20230] sec_pagetables:0 bounce:0 [ 437.278574][T20230] kernel_misc_reclaimable:0 [ 437.278574][T20230] free:1280862 free_pcp:23864 free_cma:0 [ 437.328375][T20233] syzkaller1: entered promiscuous mode [ 437.333895][T20233] syzkaller1: entered allmulticast mode [ 437.364254][T20230] Node 0 active_anon:36532kB inactive_anon:0kB active_file:13896kB inactive_file:160084kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138052kB dirty:212kB writeback:0kB shmem:15452kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15768kB pagetables:5692kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 437.471821][T20249] IPv6: addrconf: prefix option has invalid lifetime [ 437.498190][T20230] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 437.539684][T20230] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:8kB free_cma:0kB [ 437.573320][T20230] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 437.580041][T20230] Node 0 DMA32 free:1221388kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36632kB inactive_anon:0kB active_file:13896kB inactive_file:160084kB unevictable:1536kB writepending:212kB zspages:0kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:37336kB local_pcp:18040kB free_cma:0kB [ 437.663588][T20230] lowmem_reserve[]: 0 0 0 0 0 [ 437.670664][T20230] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 437.703779][T20230] lowmem_reserve[]: 0 0 0 0 0 [ 437.757823][T20230] Node 1 Normal free:3886548kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:58564kB local_pcp:29916kB free_cma:0kB [ 437.804604][T20230] lowmem_reserve[]: 0 0 0 0 0 [ 437.819071][T20230] Node 0 DMA: 0*4kB 2*8kB (U) 1*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 15328kB [ 437.845201][T20230] Node 0 DMA32: 5831*4kB (UE) 4302*8kB (UM) 2236*16kB (U) 360*32kB (UM) 396*64kB (UM) 456*128kB (UME) 621*256kB (UM) 449*512kB (UM) 305*1024kB (UME) 162*2048kB (UM) 0*4096kB = 1221708kB [ 437.872628][T20230] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 437.906074][T20230] Node 1 Normal: 3*4kB (U) 7*8kB (UM) 11*16kB (UM) 9*32kB (UM) 11*64kB (UM) 10*128kB (UM) 6*256kB (UM) 5*512kB (UM) 5*1024kB (UM) 6*2048kB (U) 943*4096kB (UM) = 3886548kB [ 437.933757][T20230] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 437.944133][T20230] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 437.955105][T20230] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 437.965371][T20230] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 437.983785][T20264] __nla_validate_parse: 12 callbacks suppressed [ 437.983807][T20264] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3814'. [ 438.001383][T20230] 47791 total pagecache pages [ 438.006460][T20230] 0 pages in swap cache [ 438.012365][T20230] Free swap = 124996kB [ 438.023046][T20230] Total swap = 124996kB [ 438.027228][T20230] 2097051 pages RAM [ 438.031599][T20230] 0 pages HighMem/MovableOnly [ 438.036515][T20230] 427026 pages reserved [ 438.042613][T20230] 0 pages cma reserved [ 438.083432][T20269] netlink: 280 bytes leftover after parsing attributes in process `syz.0.3814'. [ 438.187464][T20272] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3815'. [ 438.501928][T20290] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3820'. [ 438.528876][T20290] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3820'. [ 438.588944][T20295] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3824'. [ 438.598015][T20299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3823'. [ 438.598044][T20299] openvswitch: netlink: Unknown nsh attribute 0 [ 438.666355][T20304] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.737836][T20308] netlink: 752 bytes leftover after parsing attributes in process `syz.1.3826'. [ 438.761749][T20312] tipc: Enabled bearer , priority 2 [ 438.765413][T20311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3827'. [ 438.792307][T20311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.877322][T20311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.921785][T20323] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3830'. [ 439.173724][T20331] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 439.566464][T20353] gre2: entered promiscuous mode [ 439.572552][T20353] gre2: entered allmulticast mode [ 439.698965][T20361] validate_nla: 6 callbacks suppressed [ 439.698984][T20361] netlink: 'syz.2.3843': attribute type 5 has an invalid length. [ 439.878633][T14560] tipc: Node number set to 1457640798 [ 439.959497][T20374] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 439.967866][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.200967][T20453] xt_hashlimit: size too large, truncated to 1048576 [ 441.248398][ T5192] udevd[5192]: worker [17018] /devices/virtual/block/nbd0 is taking a long time [ 441.349607][T20467] syzkaller0: entered promiscuous mode [ 441.355124][T20467] syzkaller0: entered allmulticast mode [ 441.680645][T20496] netlink: 'syz.0.3880': attribute type 21 has an invalid length. [ 441.773266][T20503] netlink: 'syz.3.3879': attribute type 10 has an invalid length. [ 441.787539][T20503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.837174][T20503] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 441.853136][T20507] netlink: 'syz.1.3881': attribute type 1 has an invalid length. [ 441.858303][T20493] netlink: 'syz.2.3878': attribute type 5 has an invalid length. [ 441.877997][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5880 ms [ 441.886077][ C1] lec:lec_tx_timeout: lec0 [ 441.891085][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 441.906513][T20506] IPv6: NLM_F_CREATE should be specified when creating new route [ 442.200390][T20524] bond4: entered promiscuous mode [ 442.230141][T20522] netlink: 'syz.1.3888': attribute type 1 has an invalid length. [ 442.253996][T20524] macvlan2: entered promiscuous mode [ 442.266027][T20524] macvlan2: entered allmulticast mode [ 442.275368][T20524] bond4: (slave macvlan2): Opening slave failed [ 442.433554][T20534] tap0: tun_chr_ioctl cmd 1074025678 [ 442.442993][T20534] tap0: group set to 0 [ 442.483571][T20532] bond3: invalid ARP target 0.0.0.0 specified for addition [ 442.492570][T20532] bond3: option arp_ip_target: invalid value (0) [ 442.512725][T20532] bond3 (unregistering): Released all slaves [ 442.746653][T20548] pim6reg: entered allmulticast mode [ 442.843801][T20556] netlink: 'syz.1.3900': attribute type 1 has an invalid length. [ 442.885989][T20548] syzkaller0: entered promiscuous mode [ 442.899037][T20548] syzkaller0: entered allmulticast mode [ 443.229734][T20584] __nla_validate_parse: 34 callbacks suppressed [ 443.229754][T20584] netlink: 1204 bytes leftover after parsing attributes in process `syz.4.3905'. [ 443.435365][T20594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3909'. [ 443.456011][T20594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3909'. [ 443.461819][T20595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3910'. [ 443.709061][T20605] netlink: 'syz.1.3913': attribute type 2 has an invalid length. [ 443.714207][T20602] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 443.730744][T20602] bond4 (unregistering): Released all slaves [ 443.737292][T20605] netlink: 'syz.1.3913': attribute type 2 has an invalid length. [ 443.760516][T20605] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20002 [ 443.862215][T20611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3914'. [ 444.037681][T20622] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3917'. [ 444.051268][T20618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3916'. [ 444.115520][T20618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3916'. [ 444.221218][T20632] xt_connbytes: Forcing CT accounting to be enabled [ 444.373749][T20639] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3922'. [ 444.403092][T20636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3921'. [ 444.425912][T20635] xt_CT: No such helper "snmp_trap" [ 444.686899][T20660] netlink: 'syz.2.3929': attribute type 1 has an invalid length. [ 444.732894][T20660] bond2: entered promiscuous mode [ 444.739400][T20660] 8021q: adding VLAN 0 to HW filter on device bond2 [ 444.836891][T20662] bond3: entered promiscuous mode [ 444.854041][T20662] 8021q: adding VLAN 0 to HW filter on device bond3 [ 444.900985][T20662] macvtap1: entered allmulticast mode [ 444.914962][T20681] veth0: entered promiscuous mode [ 444.940331][T20678] veth0: left promiscuous mode [ 445.382015][T20713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.500177][T20717] validate_nla: 1 callbacks suppressed [ 445.500196][T20717] netlink: 'syz.1.3944': attribute type 1 has an invalid length. [ 445.544161][T20717] netlink: 'syz.1.3944': attribute type 1 has an invalid length. [ 445.563852][T20714] syzkaller0: entered promiscuous mode [ 445.598304][T20714] syzkaller0: entered allmulticast mode [ 445.745046][T20722] netlink: 'syz.3.3946': attribute type 2 has an invalid length. [ 445.984785][T20735] xt_hashlimit: size too large, truncated to 1048576 [ 446.910340][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 446.918383][ C1] lec:lec_tx_timeout: lec0 [ 446.923068][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 447.011359][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 447.587629][T20728] netlink: 'syz.3.3948': attribute type 1 has an invalid length. [ 447.598476][T20754] syzkaller0: entered promiscuous mode [ 447.604002][T20754] syzkaller0: entered allmulticast mode [ 447.707722][T20728] netlink: 'syz.3.3948': attribute type 1 has an invalid length. [ 447.778091][ T9751] veth0_to_bond: left promiscuous mode [ 447.971905][T20787] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 447.974330][T20791] openvswitch: netlink: Multiple metadata blocks provided [ 448.443956][T20816] __nla_validate_parse: 12 callbacks suppressed [ 448.443975][T20816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3971'. [ 448.495360][T20818] syzkaller0: entered promiscuous mode [ 448.495774][T20816] netlink: 'syz.2.3971': attribute type 83 has an invalid length. [ 448.504508][T20818] syzkaller0: entered allmulticast mode [ 448.540934][T20823] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3974'. [ 448.722302][T20837] netlink: 'syz.4.3977': attribute type 1 has an invalid length. [ 448.773463][T20837] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 448.774650][T20840] netlink: 328 bytes leftover after parsing attributes in process `syz.0.3976'. [ 448.914885][T20855] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.3982'. [ 448.968731][T20855] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 449.108045][T20878] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3989'. [ 449.123863][T20878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3989'. [ 449.276098][T20882] nbd: illegal input index 2958377 [ 449.286821][T20882] netlink: 'syz.3.3991': attribute type 4 has an invalid length. [ 449.301590][T20882] netlink: 'syz.3.3991': attribute type 4 has an invalid length. [ 449.325929][T20885] Unknown options in mask b7f2 [ 449.553465][T20904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3999'. [ 449.659324][T20915] x_tables: duplicate underflow at hook 1 [ 449.665960][T20915] openvswitch: netlink: Invalid VLAN frame [ 449.673220][T20915] x_tables: duplicate underflow at hook 1 [ 449.742320][T20922] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4005'. [ 449.850490][T20933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4008'. [ 450.015523][T20948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4009'. [ 450.030931][T20950] netlink: 'syz.3.4011': attribute type 6 has an invalid length. [ 450.276691][ T221] veth5: left allmulticast mode [ 450.296368][ T221] veth5: left promiscuous mode [ 450.313444][ T221] bridge0: port 1(veth5) entered disabled state [ 450.597841][ T221] dvmrp0 (unregistering): left allmulticast mode [ 450.770942][ T221] bond22 (unregistering): (slave bridge3): Releasing backup interface [ 450.779634][ T221] bridge3 (unregistering): left promiscuous mode [ 450.822316][ T221] bond1 (unregistering): Released all slaves [ 450.837001][ T221] bond2 (unregistering): (slave bond3): Releasing active interface [ 450.847118][ T221] bond2 (unregistering): Released all slaves [ 450.865997][ T221] bond3 (unregistering): Released all slaves [ 450.891857][ T221] bond4 (unregistering): Released all slaves [ 450.913213][ T221] bond5 (unregistering): Released all slaves [ 450.930333][ T221] bond6 (unregistering): Released all slaves [ 450.951193][ T221] bond7 (unregistering): Released all slaves [ 450.971145][ T221] bond8 (unregistering): Released all slaves [ 450.992012][ T221] bond9 (unregistering): Released all slaves [ 451.007268][ T221] bond10 (unregistering): Released all slaves [ 451.020060][ T221] bond11 (unregistering): Released all slaves [ 451.034667][ T221] bond12 (unregistering): Released all slaves [ 451.052029][ T221] bond13 (unregistering): Released all slaves [ 451.070261][ T221] bond14 (unregistering): Released all slaves [ 451.085429][ T221] bond15 (unregistering): Released all slaves [ 451.106674][ T221] bond16 (unregistering): Released all slaves [ 451.130910][ T221] bond17 (unregistering): Released all slaves [ 451.155822][ T221] bond18 (unregistering): Released all slaves [ 451.177759][ T221] bond19 (unregistering): Released all slaves [ 451.200759][ T221] bond20 (unregistering): Released all slaves [ 451.214038][ T221] bond0 (unregistering): Released all slaves [ 451.237434][ T221] bond21 (unregistering): (slave veth0_to_bond): Releasing active interface [ 451.253048][ T221] bond21 (unregistering): Released all slaves [ 451.266290][ T221] bond22 (unregistering): Released all slaves [ 451.279961][ T221] bond23 (unregistering): Released all slaves [ 451.293188][ T221] bond24 (unregistering): Released all slaves [ 451.321356][T20983] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 451.475424][T21005] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 451.537996][ T221] : left promiscuous mode [ 451.686149][ T221] tipc: Left network mode [ 451.686682][T21022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 451.759094][ T221] IPVS: stopping backup sync thread 13413 ... [ 451.938265][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 451.945157][T21020] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 451.946338][ C1] lec:lec_tx_timeout: lec0 [ 451.961989][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 451.999137][T21020] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.197843][T21056] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20004 [ 452.232556][T21038] syzkaller0: entered promiscuous mode [ 452.239211][T21038] syzkaller0: entered allmulticast mode [ 452.331490][T21020] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.343256][T21020] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.401443][T21047] syzkaller0: entered promiscuous mode [ 452.407204][T21047] syzkaller0: entered allmulticast mode [ 452.427466][T21063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.485339][T21020] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.496881][T21020] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.122468][T21020] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.133140][T21020] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.378956][T21105] __nla_validate_parse: 5 callbacks suppressed [ 454.378975][T21105] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4044'. [ 454.402808][ T9749] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.453509][ T9749] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.575617][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a542400: rx timeout, send abort [ 454.614042][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.629054][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.716004][ T36] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.738722][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.861971][ T9749] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.870802][ T9749] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.896554][ T221] hsr_slave_0: left promiscuous mode [ 454.903316][ T221] hsr_slave_1: left promiscuous mode [ 454.909958][ T221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.919272][ T221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.052969][ T221] pim6reg (unregistering): left allmulticast mode [ 455.075740][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a540c00: rx timeout, send abort [ 455.202367][T21145] SET target dimension over the limit! [ 455.311153][ T221] team0 (unregistering): Port device team_slave_1 removed [ 455.342994][ T221] team0 (unregistering): Port device team_slave_0 removed [ 455.441286][ T221] vcan0 (unregistering): left allmulticast mode [ 455.584032][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805a540c00: abort rx timeout. Force session deactivation [ 455.612778][T21162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4059'. [ 455.620877][T21166] validate_nla: 2 callbacks suppressed [ 455.620893][T21166] netlink: 'syz.1.4061': attribute type 4 has an invalid length. [ 455.840067][T21183] "syz.4.4068" (21183) uses obsolete ecb(arc4) skcipher [ 455.899070][T21188] netlink: 'syz.0.4069': attribute type 1 has an invalid length. [ 455.957786][T21181] syzkaller0: entered promiscuous mode [ 455.997975][T21181] syzkaller0: entered allmulticast mode [ 456.109996][ T221] IPVS: stop unused estimator thread 0... [ 456.264698][T21215] ipt_REJECT: ECHOREPLY no longer supported. [ 456.391370][T21223] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4079'. [ 456.451097][T21217] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.458732][T21217] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.473736][T21231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4077'. [ 456.560808][T21217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.571946][T21217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.622151][T21217] bond2: left allmulticast mode [ 456.631609][T21217] bond3: left promiscuous mode [ 456.637522][T21217] macvtap1: left allmulticast mode [ 456.666792][T21222] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.721012][T21232] syzkaller1: entered promiscuous mode [ 456.726528][T21232] syzkaller1: entered allmulticast mode [ 456.749427][ T9751] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.758524][ T9751] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.797383][ T9751] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.962714][T21253] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4085'. [ 456.977973][T21253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4085'. [ 456.978124][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 456.995007][ C1] lec:lec_tx_timeout: lec0 [ 457.000407][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 457.226413][T21275] netlink: 'syz.4.4090': attribute type 33 has an invalid length. [ 457.255935][T21275] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 457.275107][T21275] bond5 (unregistering): Released all slaves [ 457.497586][T21285] netlink: 'syz.4.4092': attribute type 4 has an invalid length. [ 457.521835][T21285] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4092'. [ 457.669049][T21298] macvlan0: entered promiscuous mode [ 457.889831][T21305] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.065666][T21313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4095'. [ 458.306131][T21331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4101'. [ 458.338318][T21331] netlink: 'syz.0.4101': attribute type 21 has an invalid length. [ 458.346294][T21331] IPv6: NLM_F_CREATE should be specified when creating new route [ 458.557745][T21346] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.4103'. [ 458.574103][T21346] netlink: Unknown conntrack attr (type=2304, max=9) [ 458.593134][T21346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.655424][T21390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.690333][T21395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.719871][T21392] __nla_validate_parse: 1 callbacks suppressed [ 459.719887][T21392] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4118'. [ 459.871959][T21402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4120'. [ 460.086192][T21415] netlink: 'syz.4.4122': attribute type 1 has an invalid length. [ 460.099478][T21415] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4122'. [ 460.111271][T21413] FAULT_INJECTION: forcing a failure. [ 460.111271][T21413] name failslab, interval 1, probability 0, space 0, times 0 [ 460.136585][T21413] CPU: 0 UID: 0 PID: 21413 Comm: syz.2.4124 Not tainted syzkaller #0 PREEMPT(full) [ 460.136609][T21413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 460.136621][T21413] Call Trace: [ 460.136628][T21413] [ 460.136635][T21413] dump_stack_lvl+0xe8/0x150 [ 460.136665][T21413] should_fail_ex+0x412/0x560 [ 460.136782][T21413] should_failslab+0xa8/0x100 [ 460.136807][T21413] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 460.136827][T21413] ? __alloc_skb+0x186/0x7d0 [ 460.136910][T21413] ? __alloc_skb+0x1d0/0x7d0 [ 460.136932][T21413] ? __local_bh_enable_ip+0xd0/0x130 [ 460.136958][T21413] __alloc_skb+0x1d0/0x7d0 [ 460.136981][T21413] ? netlink_ack_tlv_len+0x6c/0x210 [ 460.137031][T21413] netlink_ack+0x146/0xa50 [ 460.137050][T21413] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 460.137122][T21413] ? __lock_acquire+0x6b5/0x2cf0 [ 460.137150][T21413] netlink_rcv_skb+0x2b6/0x4b0 [ 460.137173][T21413] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 460.137197][T21413] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 460.137227][T21413] ? netlink_deliver_tap+0x2e/0x1b0 [ 460.137258][T21413] netlink_unicast+0x80f/0x9b0 [ 460.137287][T21413] ? __pfx_netlink_unicast+0x10/0x10 [ 460.137309][T21413] ? netlink_sendmsg+0x650/0xb40 [ 460.137330][T21413] ? skb_put+0x11b/0x210 [ 460.137359][T21413] netlink_sendmsg+0x813/0xb40 [ 460.137389][T21413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.137414][T21413] ? aa_sock_msg_perm+0xf1/0x1b0 [ 460.137437][T21413] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 460.137458][T21413] ____sys_sendmsg+0x972/0x9f0 [ 460.137473][T21413] ? __lock_acquire+0x6b5/0x2cf0 [ 460.137499][T21413] ? __pfx_____sys_sendmsg+0x10/0x10 [ 460.137528][T21413] ? import_iovec+0x73/0xa0 [ 460.137592][T21413] ___sys_sendmsg+0x2a5/0x360 [ 460.137614][T21413] ? __pfx____sys_sendmsg+0x10/0x10 [ 460.137636][T21413] ? kstrtouint+0x6e/0xe0 [ 460.137721][T21413] ? __fget_files+0x2a/0x420 [ 460.137744][T21413] ? __fget_files+0x3a0/0x420 [ 460.137773][T21413] __sys_sendmmsg+0x27c/0x4e0 [ 460.137794][T21413] ? __pfx___sys_sendmmsg+0x10/0x10 [ 460.137808][T21413] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 460.137884][T21413] ? ksys_write+0x242/0x270 [ 460.137907][T21413] ? __pfx_ksys_write+0x10/0x10 [ 460.137929][T21413] __x64_sys_sendmmsg+0xa0/0xc0 [ 460.137946][T21413] do_syscall_64+0x14d/0xf80 [ 460.137962][T21413] ? trace_irq_disable+0x3b/0x150 [ 460.137984][T21413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.138001][T21413] ? clear_bhb_loop+0x40/0x90 [ 460.138023][T21413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.138040][T21413] RIP: 0033:0x7fc3a019c799 [ 460.138058][T21413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.138074][T21413] RSP: 002b:00007fc3a1047028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 460.138094][T21413] RAX: ffffffffffffffda RBX: 00007fc3a0415fa0 RCX: 00007fc3a019c799 [ 460.138107][T21413] RDX: 0492492492492627 RSI: 00002000000000c0 RDI: 0000000000000003 [ 460.138119][T21413] RBP: 00007fc3a1047090 R08: 0000000000000000 R09: 0000000000000000 [ 460.138129][T21413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.138140][T21413] R13: 00007fc3a0416038 R14: 00007fc3a0415fa0 R15: 00007ffeda616238 [ 460.138169][T21413] [ 460.945220][T21434] sctp: [Deprecated]: syz.1.4129 (pid 21434) Use of int in maxseg socket option. [ 460.945220][T21434] Use struct sctp_assoc_value instead [ 461.248015][T21451] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 461.329309][T21451] bond5 (unregistering): Released all slaves [ 461.386328][T21467] netlink: 'syz.0.4138': attribute type 83 has an invalid length. [ 461.569668][T21479] netlink: 'syz.4.4142': attribute type 16 has an invalid length. [ 461.582724][T21474] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4141'. [ 461.593460][T21479] netlink: 'syz.4.4142': attribute type 17 has an invalid length. [ 461.631559][T21484] netlink: 'syz.4.4142': attribute type 16 has an invalid length. [ 461.659271][T21484] netlink: 'syz.4.4142': attribute type 17 has an invalid length. [ 461.819536][T21479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.830325][T21494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4146'. [ 461.832095][T21479] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.852664][T21495] netlink: 'syz.2.4148': attribute type 1 has an invalid length. [ 461.861380][T21479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 461.864682][T21495] netlink: 'syz.2.4148': attribute type 4 has an invalid length. [ 461.881005][ T6012] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 461.888921][T21495] netlink: 9491 bytes leftover after parsing attributes in process `syz.2.4148'. [ 461.897840][ T6012] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 461.917619][ T6012] bond0: now running without any active interface! [ 461.937297][T21484] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 461.967581][T21493] ip6_vti0: entered promiscuous mode [ 461.983886][T21493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4147'. [ 462.033376][T21498] tipc: Started in network mode [ 462.038409][T21498] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 462.050480][T21494] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4146'. [ 462.075377][T21498] tipc: Enabling of bearer rejected, failed to enable media [ 462.370168][T21526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4146'. [ 462.687707][T21520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4152'. [ 462.739220][T21533] nftables ruleset with unbound chain [ 462.998020][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6000 ms [ 463.006087][ C1] lec:lec_tx_timeout: lec0 [ 463.011142][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 468.757990][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 468.766025][ C1] lec:lec_tx_timeout: lec0 [ 468.771186][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 473.798125][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 473.806201][ C1] lec:lec_tx_timeout: lec0 [ 473.811063][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 477.476884][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 477.487113][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 477.495265][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 477.507389][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 477.516881][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 477.517255][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 477.534499][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 477.547241][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 477.557470][ T5143] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 477.567319][ T5143] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 477.577228][ T5143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 477.592317][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 477.599778][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 477.607774][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 477.616608][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 477.626792][T21547] ip6_vti0 speed is unknown, defaulting to 1000 [ 477.772018][T21545] ip6_vti0 speed is unknown, defaulting to 1000 [ 478.133294][T21547] chnl_net:caif_netlink_parms(): no params data found [ 478.244812][T21547] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.252618][T21547] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.260213][T21547] bridge_slave_0: entered allmulticast mode [ 478.267270][T21547] bridge_slave_0: entered promiscuous mode [ 478.283026][T21547] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.290742][T21547] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.298102][T21547] bridge_slave_1: entered allmulticast mode [ 478.305150][T21547] bridge_slave_1: entered promiscuous mode [ 478.347698][T21547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.363598][T21547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.427032][T21547] team0: Port device team_slave_0 added [ 478.457001][T21547] team0: Port device team_slave_1 added [ 478.574856][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 478.584470][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 478.592546][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 478.600554][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 478.608881][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 478.632503][T21547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.648121][T21547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.708147][T21547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.730194][T21547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.737267][T21547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.765359][ T5833] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 478.765996][T21547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.783857][ T5143] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 478.792862][ T5143] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 478.801920][ T5823] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 478.809000][T21545] chnl_net:caif_netlink_parms(): no params data found [ 478.818221][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 478.826233][ C1] lec:lec_tx_timeout: lec0 [ 478.831500][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 478.842400][ T5823] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 478.850012][ T5143] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 478.858672][ T5143] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 478.866057][ T5143] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 478.876277][ T5143] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 478.904989][ T5143] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 478.951461][T21547] hsr_slave_0: entered promiscuous mode [ 478.958148][T21547] hsr_slave_1: entered promiscuous mode [ 478.964382][T21547] debugfs: 'hsr0' already exists in 'hsr' [ 478.970379][T21547] Cannot create hsr debugfs directory [ 479.032660][T21562] ip6_vti0 speed is unknown, defaulting to 1000 [ 479.070950][T21545] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.078410][T21545] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.085695][T21545] bridge_slave_0: entered allmulticast mode [ 479.095292][T21545] bridge_slave_0: entered promiscuous mode [ 479.132513][T21545] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.140694][T21545] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.148727][T21545] bridge_slave_1: entered allmulticast mode [ 479.156676][T21545] bridge_slave_1: entered promiscuous mode [ 479.226564][T21545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.242767][T21567] ip6_vti0 speed is unknown, defaulting to 1000 [ 479.252299][T21545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.390581][T21545] team0: Port device team_slave_0 added [ 479.400686][T21545] team0: Port device team_slave_1 added [ 479.499196][T21545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.506177][T21545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.535218][T21545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.578547][T21545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.585522][T21545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.612498][T21545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.629415][T21565] ip6_vti0 speed is unknown, defaulting to 1000 [ 479.638343][ T5833] Bluetooth: hci1: command tx timeout [ 479.640120][ T5143] Bluetooth: hci6: command tx timeout [ 479.832631][T21545] hsr_slave_0: entered promiscuous mode [ 479.840187][T21545] hsr_slave_1: entered promiscuous mode [ 479.858507][T21545] debugfs: 'hsr0' already exists in 'hsr' [ 479.864276][T21545] Cannot create hsr debugfs directory [ 480.136357][T21562] chnl_net:caif_netlink_parms(): no params data found [ 480.337351][T21562] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.344837][T21562] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.352397][T21562] bridge_slave_0: entered allmulticast mode [ 480.360294][T21562] bridge_slave_0: entered promiscuous mode [ 480.377503][T21562] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.387371][T21562] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.394773][T21562] bridge_slave_1: entered allmulticast mode [ 480.402002][T21562] bridge_slave_1: entered promiscuous mode [ 480.491507][T21562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.508259][T21562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.566157][T21562] team0: Port device team_slave_0 added [ 480.572731][T21567] chnl_net:caif_netlink_parms(): no params data found [ 480.590462][T21562] team0: Port device team_slave_1 added [ 480.659829][T21562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.666884][T21562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.693977][T21562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.698347][ T5143] Bluetooth: hci7: command tx timeout [ 480.706918][T21562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.717696][T21562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.744064][T21562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.840371][T21562] hsr_slave_0: entered promiscuous mode [ 480.846650][T21562] hsr_slave_1: entered promiscuous mode [ 480.853343][T21562] debugfs: 'hsr0' already exists in 'hsr' [ 480.859292][T21562] Cannot create hsr debugfs directory [ 480.865064][T21565] chnl_net:caif_netlink_parms(): no params data found [ 480.885708][T21567] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.892971][T21567] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.900495][T21567] bridge_slave_0: entered allmulticast mode [ 480.908200][T21567] bridge_slave_0: entered promiscuous mode [ 480.919456][ T5143] Bluetooth: hci8: command tx timeout [ 480.926806][T21567] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.934197][T21567] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.941745][T21567] bridge_slave_1: entered allmulticast mode [ 480.949148][T21567] bridge_slave_1: entered promiscuous mode [ 480.998366][ T5143] Bluetooth: hci9: command tx timeout [ 481.029802][T21567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.042553][T21567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.118612][T21567] team0: Port device team_slave_0 added [ 481.142055][T21567] team0: Port device team_slave_1 added [ 481.154854][T21565] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.162660][T21565] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.170398][T21565] bridge_slave_0: entered allmulticast mode [ 481.177383][T21565] bridge_slave_0: entered promiscuous mode [ 481.211254][T21565] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.218837][T21565] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.226024][T21565] bridge_slave_1: entered allmulticast mode [ 481.233451][T21565] bridge_slave_1: entered promiscuous mode [ 481.280313][T21567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.287282][T21567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.314012][T21567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.334234][T21565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.346924][T21565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.356972][T21567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.364785][T21567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.391248][T21567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.444080][T21565] team0: Port device team_slave_0 added [ 481.452691][T21565] team0: Port device team_slave_1 added [ 481.488313][T21565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.495281][T21565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.521939][T21565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.544922][T21565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.552382][T21565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.579364][T21565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.607240][T21567] hsr_slave_0: entered promiscuous mode [ 481.614598][T21567] hsr_slave_1: entered promiscuous mode [ 481.621020][T21567] debugfs: 'hsr0' already exists in 'hsr' [ 481.626755][T21567] Cannot create hsr debugfs directory [ 481.689519][T21565] hsr_slave_0: entered promiscuous mode [ 481.696049][T21565] hsr_slave_1: entered promiscuous mode [ 481.702925][T21565] debugfs: 'hsr0' already exists in 'hsr' [ 481.708741][T21565] Cannot create hsr debugfs directory [ 481.719745][ T5143] Bluetooth: hci6: command tx timeout [ 481.719852][ T5833] Bluetooth: hci1: command tx timeout [ 482.768907][ T5833] Bluetooth: hci7: command tx timeout [ 482.999331][ T5833] Bluetooth: hci8: command tx timeout [ 483.078569][ T5833] Bluetooth: hci9: command tx timeout [ 483.798230][ T5833] Bluetooth: hci1: command tx timeout [ 483.798816][ T5143] Bluetooth: hci6: command tx timeout [ 483.838289][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 483.846790][ C1] lec:lec_tx_timeout: lec0 [ 483.851435][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 484.838413][ T5143] Bluetooth: hci7: command tx timeout [ 485.078330][ T5143] Bluetooth: hci8: command tx timeout [ 485.158177][ T5143] Bluetooth: hci9: command tx timeout [ 485.878330][ T5143] Bluetooth: hci6: command tx timeout [ 485.878338][ T5833] Bluetooth: hci1: command tx timeout [ 486.918089][ T5833] Bluetooth: hci7: command tx timeout [ 487.158475][ T5833] Bluetooth: hci8: command tx timeout [ 487.238199][ T5833] Bluetooth: hci9: command tx timeout [ 488.858041][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 488.866081][ C1] lec:lec_tx_timeout: lec0 [ 488.870711][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 493.878128][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 493.886150][ C1] lec:lec_tx_timeout: lec0 [ 493.891098][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 498.898357][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 498.906459][ C1] lec:lec_tx_timeout: lec0 [ 498.911081][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 501.400526][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.918142][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 503.926186][ C1] lec:lec_tx_timeout: lec0 [ 503.930820][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 508.938146][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 508.946159][ C1] lec:lec_tx_timeout: lec0 [ 508.950954][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 513.958692][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 513.966737][ C1] lec:lec_tx_timeout: lec0 [ 513.971357][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 518.978132][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 518.986161][ C1] lec:lec_tx_timeout: lec0 [ 518.991051][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 525.078007][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6090 ms [ 525.086016][ C1] lec:lec_tx_timeout: lec0 [ 525.091122][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 530.837987][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 530.846033][ C1] lec:lec_tx_timeout: lec0 [ 530.851271][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 535.858007][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 535.866030][ C1] lec:lec_tx_timeout: lec0 [ 535.870658][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 537.519366][ T5143] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 537.529735][ T5143] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 537.539069][ T5143] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 537.547019][ T5143] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 537.560093][ T5837] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 537.574947][ T5837] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 537.588199][ T5837] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 537.599274][ T5823] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 537.608520][ T5823] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 537.616414][ T5823] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 537.632784][T21597] ip6_vti0 speed is unknown, defaulting to 1000 [ 537.754418][T21599] ip6_vti0 speed is unknown, defaulting to 1000 [ 538.126177][T21597] chnl_net:caif_netlink_parms(): no params data found [ 538.249800][T21597] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.257260][T21597] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.265007][T21597] bridge_slave_0: entered allmulticast mode [ 538.272363][T21597] bridge_slave_0: entered promiscuous mode [ 538.280407][T21597] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.287535][T21597] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.295342][T21597] bridge_slave_1: entered allmulticast mode [ 538.302868][T21597] bridge_slave_1: entered promiscuous mode [ 538.336713][T21597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.349272][T21597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.388957][T21597] team0: Port device team_slave_0 added [ 538.403409][T21597] team0: Port device team_slave_1 added [ 538.466017][T21597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.473686][T21597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.502423][T21597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.522588][T21597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.531236][T21597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.557843][T21597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.594211][ T5823] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 538.606182][T21599] chnl_net:caif_netlink_parms(): no params data found [ 538.621640][ T5823] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 538.632599][ T5823] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 538.640952][ T5823] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 538.650469][ T5823] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 538.657777][T21597] hsr_slave_0: entered promiscuous mode [ 538.664743][T21597] hsr_slave_1: entered promiscuous mode [ 538.671406][T21597] debugfs: 'hsr0' already exists in 'hsr' [ 538.677153][T21597] Cannot create hsr debugfs directory [ 538.794542][T21612] ip6_vti0 speed is unknown, defaulting to 1000 [ 538.825821][T21599] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.834008][T21599] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.843760][T21599] bridge_slave_0: entered allmulticast mode [ 538.852697][T21599] bridge_slave_0: entered promiscuous mode [ 538.870838][T21599] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.878771][T21599] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.886064][T21599] bridge_slave_1: entered allmulticast mode [ 538.894821][T21599] bridge_slave_1: entered promiscuous mode [ 538.982313][T21599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.997602][T21599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.085711][T21599] team0: Port device team_slave_0 added [ 539.100489][T21599] team0: Port device team_slave_1 added [ 539.140720][T21599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.147689][T21599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.176109][T21599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.207278][T21599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.214451][T21599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.241553][T21599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.331254][T21599] hsr_slave_0: entered promiscuous mode [ 539.338193][T21599] hsr_slave_1: entered promiscuous mode [ 539.344547][T21599] debugfs: 'hsr0' already exists in 'hsr' [ 539.350880][T21599] Cannot create hsr debugfs directory [ 539.624953][ T5143] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 539.639989][ T5143] Bluetooth: hci11: command tx timeout [ 539.643327][ T5837] Bluetooth: hci10: command tx timeout [ 539.653986][ T5837] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 539.663430][ T5837] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 539.671815][ T5837] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 539.679657][ T5837] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 539.693101][ T5143] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 539.718821][ T5143] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 539.729291][ T5143] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 539.739245][ T5143] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 539.749787][ T5143] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 539.813793][T21612] chnl_net:caif_netlink_parms(): no params data found [ 539.861770][T21621] ip6_vti0 speed is unknown, defaulting to 1000 [ 539.969671][T21612] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.981698][T21612] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.990006][T21612] bridge_slave_0: entered allmulticast mode [ 539.998520][T21612] bridge_slave_0: entered promiscuous mode [ 540.007268][T21612] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.015177][T21612] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.023851][T21612] bridge_slave_1: entered allmulticast mode [ 540.033507][T21612] bridge_slave_1: entered promiscuous mode [ 540.068811][T21623] ip6_vti0 speed is unknown, defaulting to 1000 [ 540.108813][T21612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.140240][T21612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.206132][T21612] team0: Port device team_slave_0 added [ 540.216841][T21612] team0: Port device team_slave_1 added [ 540.314165][T21612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.337988][T21612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.366657][T21612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.381085][T21612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.388268][T21612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.415337][T21612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.589251][T21612] hsr_slave_0: entered promiscuous mode [ 540.596078][T21612] hsr_slave_1: entered promiscuous mode [ 540.603521][T21612] debugfs: 'hsr0' already exists in 'hsr' [ 540.609893][T21612] Cannot create hsr debugfs directory [ 540.683482][ T5143] Bluetooth: hci12: command tx timeout [ 540.878090][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 540.883537][T21621] chnl_net:caif_netlink_parms(): no params data found [ 540.886115][ C1] lec:lec_tx_timeout: lec0 [ 540.897674][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 541.032308][T21621] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.039631][T21621] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.047003][T21621] bridge_slave_0: entered allmulticast mode [ 541.054460][T21621] bridge_slave_0: entered promiscuous mode [ 541.062135][T21623] chnl_net:caif_netlink_parms(): no params data found [ 541.092391][T21621] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.099655][T21621] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.106953][T21621] bridge_slave_1: entered allmulticast mode [ 541.114378][T21621] bridge_slave_1: entered promiscuous mode [ 541.184611][T21621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.196537][T21621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.245583][T21623] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.253240][T21623] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.261450][T21623] bridge_slave_0: entered allmulticast mode [ 541.269243][T21623] bridge_slave_0: entered promiscuous mode [ 541.282372][T21621] team0: Port device team_slave_0 added [ 541.292284][T21621] team0: Port device team_slave_1 added [ 541.298575][T21623] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.307012][T21623] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.315283][T21623] bridge_slave_1: entered allmulticast mode [ 541.323490][T21623] bridge_slave_1: entered promiscuous mode [ 541.374786][T21621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.382005][T21621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.408561][T21621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.432942][T21623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.444319][T21621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.451564][T21621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.478598][T21621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.499762][T21623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.538427][T21623] team0: Port device team_slave_0 added [ 541.568534][T21623] team0: Port device team_slave_1 added [ 541.618479][T21621] hsr_slave_0: entered promiscuous mode [ 541.624899][T21621] hsr_slave_1: entered promiscuous mode [ 541.631389][T21621] debugfs: 'hsr0' already exists in 'hsr' [ 541.637111][T21621] Cannot create hsr debugfs directory [ 541.645674][T21623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.654208][T21623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.680846][T21623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.702749][T21623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.710699][T21623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.737211][ T5833] Bluetooth: hci11: command tx timeout [ 541.737347][ T5143] Bluetooth: hci13: command tx timeout [ 541.743669][ T5833] Bluetooth: hci10: command tx timeout [ 541.749329][T21623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.802229][ T5143] Bluetooth: hci14: command tx timeout [ 541.869821][T21623] hsr_slave_0: entered promiscuous mode [ 541.876526][T21623] hsr_slave_1: entered promiscuous mode [ 541.883235][T21623] debugfs: 'hsr0' already exists in 'hsr' [ 541.889338][T21623] Cannot create hsr debugfs directory [ 542.365813][ T221] bridge_slave_1: left allmulticast mode [ 542.373772][ T221] bridge_slave_1: left promiscuous mode [ 542.379801][ T221] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.388743][ T221] bridge_slave_0: left allmulticast mode [ 542.394425][ T221] bridge_slave_0: left promiscuous mode [ 542.400284][ T221] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.556172][ T221] erspan0 (unregistering): left promiscuous mode [ 542.596118][ T221] bond4 (unregistering): (slave gretap3): Releasing backup interface [ 542.758224][ T5143] Bluetooth: hci12: command tx timeout [ 542.773594][ T221] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 542.782032][ T221] bridge3 (unregistering): left promiscuous mode [ 542.831437][ T221] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 542.972380][ T221] bond1 (unregistering): Released all slaves [ 542.984751][ T221] bond2 (unregistering): Released all slaves [ 542.997005][ T221] bond3 (unregistering): Released all slaves [ 543.010206][ T221] bond4 (unregistering): Released all slaves [ 543.024956][ T221] bond5 (unregistering): Released all slaves [ 543.045974][ T221] bond6 (unregistering): Released all slaves [ 543.061926][ T221] bond7 (unregistering): (slave vxcan3): Releasing backup interface [ 543.072077][ T221] bond7 (unregistering): Released all slaves [ 543.193065][ T221] : left promiscuous mode [ 543.268895][ T221] tipc: Left network mode [ 543.307425][ T221] IPVS: stopping master sync thread 11421 ... [ 543.644422][ T221] hsr_slave_0: left promiscuous mode [ 543.678026][ T221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.688143][ T221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.695988][ T221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.703642][ T221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.713659][ T221] veth1_macvtap: left promiscuous mode [ 543.719461][ T221] veth1_vlan: left promiscuous mode [ 543.724721][ T221] veth0_vlan: left promiscuous mode [ 543.785844][ T221] pim6reg (unregistering): left allmulticast mode [ 543.798202][ T5143] Bluetooth: hci13: command tx timeout [ 543.798599][ T5833] Bluetooth: hci10: command tx timeout [ 543.804265][ T5143] Bluetooth: hci11: command tx timeout [ 543.878425][ T5143] Bluetooth: hci14: command tx timeout [ 543.905325][ T221] team0 (unregistering): Port device team_slave_1 removed [ 543.923048][ T221] team0 (unregistering): Port device team_slave_0 removed [ 543.996043][ T221] vcan0 (unregistering): left allmulticast mode [ 544.841240][ T5143] Bluetooth: hci12: command tx timeout [ 545.878398][ T5833] Bluetooth: hci13: command tx timeout [ 545.884094][ T5143] Bluetooth: hci10: command tx timeout [ 545.889628][ T5833] Bluetooth: hci11: command tx timeout [ 545.908073][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 545.916076][ C1] lec:lec_tx_timeout: lec0 [ 545.920890][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 545.958468][ T5143] Bluetooth: hci14: command tx timeout [ 546.918596][ T5143] Bluetooth: hci12: command tx timeout [ 547.958539][ T5143] Bluetooth: hci13: command tx timeout [ 548.038270][ T5143] Bluetooth: hci14: command tx timeout [ 550.928018][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 550.936069][ C1] lec:lec_tx_timeout: lec0 [ 550.941012][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 555.948246][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 555.956310][ C1] lec:lec_tx_timeout: lec0 [ 555.960975][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 559.318108][ T5192] udevd[5192]: worker [17018] /devices/virtual/block/nbd0 timeout; kill it [ 559.326835][ T5192] udevd[5192]: seq 22328 '/devices/virtual/block/nbd0' killed [ 560.968081][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 560.976139][ C1] lec:lec_tx_timeout: lec0 [ 560.980792][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 562.841696][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.757986][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 566.766114][ C1] lec:lec_tx_timeout: lec0 [ 566.770923][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 571.798291][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 571.806336][ C1] lec:lec_tx_timeout: lec0 [ 571.811067][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 576.818082][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 576.826107][ C1] lec:lec_tx_timeout: lec0 [ 576.830934][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 581.838066][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 581.846107][ C1] lec:lec_tx_timeout: lec0 [ 581.850745][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 586.858243][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 586.866346][ C1] lec:lec_tx_timeout: lec0 [ 586.870962][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 591.878154][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 591.886190][ C1] lec:lec_tx_timeout: lec0 [ 591.891328][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 596.897993][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 596.906020][ C1] lec:lec_tx_timeout: lec0 [ 596.910606][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 597.581945][ T5833] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 597.593402][ T5833] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 597.603223][ T5833] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 597.603345][ T5823] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 597.619379][ T5833] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 597.623729][ T5823] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 597.628813][ T5833] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 597.635773][ T5823] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 597.654074][ T5833] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 597.662612][ T5833] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 597.690852][T21648] ip6_vti0 speed is unknown, defaulting to 1000 [ 597.806279][T21650] ip6_vti0 speed is unknown, defaulting to 1000 [ 598.174206][T21648] chnl_net:caif_netlink_parms(): no params data found [ 598.295663][T21648] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.303066][T21648] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.311086][T21648] bridge_slave_0: entered allmulticast mode [ 598.318998][T21648] bridge_slave_0: entered promiscuous mode [ 598.330888][T21648] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.338251][T21648] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.345472][T21648] bridge_slave_1: entered allmulticast mode [ 598.352895][T21648] bridge_slave_1: entered promiscuous mode [ 598.387703][T21648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.409012][T21648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.458539][T21648] team0: Port device team_slave_0 added [ 598.472185][T21648] team0: Port device team_slave_1 added [ 598.532705][T21648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.540807][T21648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.568116][T21648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.580497][T21650] chnl_net:caif_netlink_parms(): no params data found [ 598.595509][T21648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.605975][T21648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.632690][T21648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.711548][ T5823] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 598.725116][T21648] hsr_slave_0: entered promiscuous mode [ 598.725385][ T5823] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 598.733100][T21648] hsr_slave_1: entered promiscuous mode [ 598.742172][ T5823] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 598.753333][ T5823] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 598.761231][ T5823] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 598.852645][T21650] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.860436][T21650] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.867670][T21650] bridge_slave_0: entered allmulticast mode [ 598.875711][T21650] bridge_slave_0: entered promiscuous mode [ 598.894433][T21662] ip6_vti0 speed is unknown, defaulting to 1000 [ 598.902238][T21650] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.918058][T21650] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.925326][T21650] bridge_slave_1: entered allmulticast mode [ 598.939677][T21650] bridge_slave_1: entered promiscuous mode [ 599.044148][T21650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.058915][T21650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.149503][T21650] team0: Port device team_slave_0 added [ 599.166056][T21650] team0: Port device team_slave_1 added [ 599.243193][T21650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.256215][T21650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.282834][T21650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.310169][T21650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.317117][T21650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.344974][T21650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.417682][T21650] hsr_slave_0: entered promiscuous mode [ 599.424259][T21650] hsr_slave_1: entered promiscuous mode [ 599.431002][T21650] debugfs: 'hsr0' already exists in 'hsr' [ 599.436743][T21650] Cannot create hsr debugfs directory [ 599.720327][ T5823] Bluetooth: hci15: command tx timeout [ 599.720741][T21600] Bluetooth: hci16: command tx timeout [ 599.781773][ T5823] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 599.793928][ T5823] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 599.803598][ T5823] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 599.814975][ T5823] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 599.823391][ T5823] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 599.834926][T21662] chnl_net:caif_netlink_parms(): no params data found [ 599.871470][ T5823] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 599.882105][ T5823] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 599.899367][ T5823] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 599.909393][ T5823] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 599.917750][ T5823] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 599.960546][T21673] ip6_vti0 speed is unknown, defaulting to 1000 [ 600.071711][T21662] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.080382][T21662] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.087684][T21662] bridge_slave_0: entered allmulticast mode [ 600.096288][T21662] bridge_slave_0: entered promiscuous mode [ 600.105517][T21662] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.116727][T21662] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.124824][T21662] bridge_slave_1: entered allmulticast mode [ 600.136240][T21662] bridge_slave_1: entered promiscuous mode [ 600.164462][T21675] ip6_vti0 speed is unknown, defaulting to 1000 [ 600.204052][T21662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.271901][T21662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.349908][T21662] team0: Port device team_slave_0 added [ 600.380423][T21662] team0: Port device team_slave_1 added [ 600.471499][T21662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.479517][T21662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.507354][T21662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.544612][T21662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.551902][T21662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 600.580241][T21662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.723912][T21662] hsr_slave_0: entered promiscuous mode [ 600.730771][T21662] hsr_slave_1: entered promiscuous mode [ 600.736953][T21662] debugfs: 'hsr0' already exists in 'hsr' [ 600.742937][T21662] Cannot create hsr debugfs directory [ 600.758501][T21600] Bluetooth: hci6: command 0x0406 tx timeout [ 600.765532][T21600] Bluetooth: hci1: command 0x0406 tx timeout [ 600.773968][ T5823] Bluetooth: hci7: command 0x0406 tx timeout [ 600.838198][ T5833] Bluetooth: hci17: command tx timeout [ 600.993472][T21673] chnl_net:caif_netlink_parms(): no params data found [ 601.106332][T21675] chnl_net:caif_netlink_parms(): no params data found [ 601.174137][T21673] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.181407][T21673] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.189038][T21673] bridge_slave_0: entered allmulticast mode [ 601.196444][T21673] bridge_slave_0: entered promiscuous mode [ 601.221020][T21673] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.229055][T21673] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.236318][T21673] bridge_slave_1: entered allmulticast mode [ 601.245258][T21673] bridge_slave_1: entered promiscuous mode [ 601.304143][T21673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.330043][T21673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.339485][T21675] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.346607][T21675] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.354215][T21675] bridge_slave_0: entered allmulticast mode [ 601.362911][T21675] bridge_slave_0: entered promiscuous mode [ 601.386906][T21675] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.394288][T21675] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.402824][T21675] bridge_slave_1: entered allmulticast mode [ 601.411262][T21675] bridge_slave_1: entered promiscuous mode [ 601.456657][T21673] team0: Port device team_slave_0 added [ 601.464821][T21673] team0: Port device team_slave_1 added [ 601.474015][T21675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.489229][T21675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 601.549308][T21673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.556283][T21673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.583752][T21673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.608988][T21675] team0: Port device team_slave_0 added [ 601.615555][T21673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.622763][T21673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.649380][T21673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.681534][T21675] team0: Port device team_slave_1 added [ 601.732247][T21673] hsr_slave_0: entered promiscuous mode [ 601.738971][T21673] hsr_slave_1: entered promiscuous mode [ 601.745215][T21673] debugfs: 'hsr0' already exists in 'hsr' [ 601.751562][T21673] Cannot create hsr debugfs directory [ 601.758653][T21675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.765596][T21675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.792057][T21675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.800941][ T5833] Bluetooth: hci15: command tx timeout [ 601.805283][T21675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.809406][ T5837] Bluetooth: hci16: command tx timeout [ 601.815683][T21675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.847372][T21675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.878433][ T5833] Bluetooth: hci18: command tx timeout [ 601.918473][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 601.926504][ C1] lec:lec_tx_timeout: lec0 [ 601.931366][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 601.968147][ T5837] Bluetooth: hci19: command tx timeout [ 601.990929][T21675] hsr_slave_0: entered promiscuous mode [ 601.997418][T21675] hsr_slave_1: entered promiscuous mode [ 602.004132][T21675] debugfs: 'hsr0' already exists in 'hsr' [ 602.010004][T21675] Cannot create hsr debugfs directory [ 602.928144][ T5837] Bluetooth: hci17: command tx timeout [ 603.878268][T21600] Bluetooth: hci16: command tx timeout [ 603.883877][ T5823] Bluetooth: hci15: command tx timeout [ 603.958185][ T5823] Bluetooth: hci18: command tx timeout [ 604.038441][ T5823] Bluetooth: hci19: command tx timeout [ 604.998134][ T5823] Bluetooth: hci17: command tx timeout [ 605.878160][ T5823] Bluetooth: hci9: command 0x0406 tx timeout [ 605.884540][T21600] Bluetooth: hci8: command 0x0406 tx timeout [ 605.958241][ T5833] Bluetooth: hci15: command tx timeout [ 605.963759][ T5833] Bluetooth: hci16: command tx timeout [ 606.038390][ T5833] Bluetooth: hci18: command tx timeout [ 606.118316][ T5833] Bluetooth: hci19: command tx timeout [ 606.938208][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 606.946237][ C1] lec:lec_tx_timeout: lec0 [ 606.950871][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 607.078121][ T5833] Bluetooth: hci17: command tx timeout [ 608.118377][ T5833] Bluetooth: hci18: command tx timeout [ 608.198276][ T5833] Bluetooth: hci19: command tx timeout [ 611.958250][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 611.966345][ C1] lec:lec_tx_timeout: lec0 [ 611.970894][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 616.598996][ T31] INFO: task syz.0.4146:21522 blocked for more than 143 seconds. [ 616.606729][ T31] Not tainted syzkaller #0 [ 616.614550][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 616.623547][ T31] task:syz.0.4146 state:D stack:26240 pid:21522 tgid:21490 ppid:17731 task_flags:0x480140 flags:0x00080002 [ 616.635609][ T31] Call Trace: [ 616.639011][ T31] [ 616.641937][ T31] __schedule+0x15dd/0x52d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 616.646503][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 616.652145][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 616.657744][ T31] ? __pfx___schedule+0x10/0x10 [ 616.662835][ T31] ? schedule+0x90/0x360 [ 616.667114][ T31] schedule+0x164/0x360 [ 616.699282][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 616.704957][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 616.739606][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 616.745739][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 616.752119][ T31] nbd_set_size+0x454/0x680 [ 616.756752][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 616.762181][ T31] ? nla_memcpy+0x5b/0xc0 [ 616.766544][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 616.772172][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 616.778097][ T31] ? rcu_is_watching+0x15/0xb0 [ 616.782879][ T31] ? trace_kmalloc+0x2a/0x110 [ 616.787550][ T31] ? __nla_parse+0x40/0x60 [ 616.792044][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 616.799100][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 616.804657][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 616.810811][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 616.815860][ T31] genl_rcv_msg+0x61c/0x7a0 [ 616.820554][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 616.825608][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 616.831627][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 616.836570][ T31] netlink_rcv_skb+0x232/0x4b0 [ 616.841477][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 616.846513][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 616.852127][ T31] ? down_read+0x272/0x2e0 [ 616.856557][ T31] ? genl_rcv+0xd/0x40 [ 616.860914][ T31] genl_rcv+0x28/0x40 [ 616.864922][ T31] netlink_unicast+0x80f/0x9b0 [ 616.869834][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 616.875215][ T31] ? netlink_sendmsg+0x650/0xb40 [ 616.880182][ T31] ? skb_put+0x11b/0x210 [ 616.884446][ T31] netlink_sendmsg+0x813/0xb40 [ 616.889496][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 616.894781][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 616.899852][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 616.905229][ T31] ____sys_sendmsg+0x972/0x9f0 [ 616.910171][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 616.915471][ T31] ? import_iovec+0x73/0xa0 [ 616.920403][ T31] ___sys_sendmsg+0x2a5/0x360 [ 616.925111][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 616.930408][ T31] ? futex_wake+0x4ac/0x580 [ 616.935136][ T31] ? __fget_files+0x2a/0x420 [ 616.939796][ T31] ? __fget_files+0x3a0/0x420 [ 616.944498][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 616.949783][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 616.955358][ T31] ? rcu_is_watching+0x15/0xb0 [ 616.960271][ T31] do_syscall_64+0x14d/0xf80 [ 616.964867][ T31] ? trace_irq_disable+0x3b/0x150 [ 616.970113][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.976208][ T31] ? clear_bhb_loop+0x40/0x90 [ 616.981153][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 616.981179][ C1] lec:lec_tx_timeout: lec0 [ 616.993792][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.999915][ T31] RIP: 0033:0x7efef119c799 [ 617.004344][ T31] RSP: 002b:00007efeeebf2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 617.013140][ T31] RAX: ffffffffffffffda RBX: 00007efef1416360 RCX: 00007efef119c799 [ 617.021301][ T31] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 000000000000000b [ 617.029347][ T31] RBP: 00007efef1232c99 R08: 0000000000000000 R09: 0000000000000000 [ 617.037361][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 617.045622][ T31] R13: 00007efef14163f8 R14: 00007efef1416360 R15: 00007ffe056bb6a8 [ 617.053801][ T31] [ 617.056852][ T31] INFO: task syz.4.4152:21527 blocked for more than 143 seconds. [ 617.064701][ T31] Not tainted syzkaller #0 [ 617.069903][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 617.078904][ T31] task:syz.4.4152 state:D stack:27880 pid:21527 tgid:21519 ppid:16465 task_flags:0x400140 flags:0x00080002 [ 617.090894][ T31] Call Trace: [ 617.094161][ T31] [ 617.097077][ T31] __schedule+0x15dd/0x52d0 [ 617.101934][ T31] ? __pfx___schedule+0x10/0x10 [ 617.106817][ T31] ? schedule+0x90/0x360 [ 617.111146][ T31] schedule+0x164/0x360 [ 617.115331][ T31] schedule_preempt_disabled+0x13/0x30 [ 617.120843][ T31] __mutex_lock+0x7fe/0x1300 [ 617.125556][ T31] ? __mutex_lock+0x5ac/0x1300 [ 617.130695][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 617.135372][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 617.140444][ T31] ? radix_tree_lookup+0x240/0x290 [ 617.145637][ T31] genl_rcv_msg+0x10b/0x7a0 [ 617.150355][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 617.155417][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 617.160764][ T31] netlink_rcv_skb+0x232/0x4b0 [ 617.165558][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 617.170650][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 617.175980][ T31] ? down_read+0x272/0x2e0 [ 617.180487][ T31] ? genl_rcv+0xd/0x40 [ 617.184618][ T31] genl_rcv+0x28/0x40 [ 617.188969][ T31] netlink_unicast+0x80f/0x9b0 [ 617.193770][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 617.199131][ T31] ? netlink_sendmsg+0x650/0xb40 [ 617.204080][ T31] ? skb_put+0x11b/0x210 [ 617.208426][ T31] netlink_sendmsg+0x813/0xb40 [ 617.213220][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 617.218873][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 617.223887][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 617.229282][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 617.234629][ T31] __sys_sendto+0x672/0x710 [ 617.239597][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 617.244761][ T31] ? fd_install+0x94/0x3d0 [ 617.249536][ T31] ? fd_install+0x306/0x3d0 [ 617.254066][ T31] __x64_sys_sendto+0xde/0x100 [ 617.258928][ T31] do_syscall_64+0x14d/0xf80 [ 617.263528][ T31] ? trace_irq_disable+0x3b/0x150 [ 617.268647][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.274806][ T31] ? clear_bhb_loop+0x40/0x90 [ 617.279784][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.285679][ T31] RIP: 0033:0x7f8a09d5cfce [ 617.290163][ T31] RSP: 002b:00007f8a0ac1fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 617.298658][ T31] RAX: ffffffffffffffda RBX: 00007f8a0ac216c0 RCX: 00007f8a09d5cfce [ 617.306644][ T31] RDX: 0000000000000024 RSI: 00007f8a0ac20000 RDI: 000000000000000b [ 617.314928][ T31] RBP: 0000000000000000 R08: 00007f8a0ac1ff04 R09: 000000000000000c [ 617.323871][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 617.331938][ T31] R13: 00007f8a0ac1ff58 R14: 00007f8a0ac20000 R15: 0000000000000000 [ 617.340809][ T31] [ 617.343843][ T31] INFO: task syz.3.4154:21533 blocked for more than 144 seconds. [ 617.351860][ T31] Not tainted syzkaller #0 [ 617.356894][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 617.365802][ T31] task:syz.3.4154 state:D stack:25704 pid:21533 tgid:21531 ppid:16015 task_flags:0x400140 flags:0x00080002 [ 617.378117][ T31] Call Trace: [ 617.381607][ T31] [ 617.384532][ T31] __schedule+0x15dd/0x52d0 [ 617.389155][ T31] ? __pfx___schedule+0x10/0x10 [ 617.394037][ T31] ? schedule+0x90/0x360 [ 617.398596][ T31] schedule+0x164/0x360 [ 617.402785][ T31] schedule_preempt_disabled+0x13/0x30 [ 617.408545][ T31] __mutex_lock+0x7fe/0x1300 [ 617.413156][ T31] ? __mutex_lock+0x5ac/0x1300 [ 617.418029][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 617.422723][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 617.427783][ T31] ? radix_tree_lookup+0x240/0x290 [ 617.432993][ T31] genl_rcv_msg+0x10b/0x7a0 [ 617.437516][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 617.442846][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 617.447816][ T31] netlink_rcv_skb+0x232/0x4b0 [ 617.452695][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 617.457737][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 617.463280][ T31] ? down_read+0x272/0x2e0 [ 617.467715][ T31] ? genl_rcv+0xd/0x40 [ 617.472077][ T31] genl_rcv+0x28/0x40 [ 617.476055][ T31] netlink_unicast+0x80f/0x9b0 [ 617.481321][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 617.486627][ T31] ? netlink_sendmsg+0x650/0xb40 [ 617.491618][ T31] ? skb_put+0x11b/0x210 [ 617.495908][ T31] netlink_sendmsg+0x813/0xb40 [ 617.500978][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 617.506272][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 617.511272][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 617.516564][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 617.521949][ T31] __sys_sendto+0x672/0x710 [ 617.526467][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 617.531794][ T31] ? exc_page_fault+0x6a/0xc0 [ 617.536496][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 617.541827][ T31] __x64_sys_sendto+0xde/0x100 [ 617.546605][ T31] do_syscall_64+0x14d/0xf80 [ 617.551368][ T31] ? trace_irq_disable+0x3b/0x150 [ 617.556435][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.562969][ T31] ? clear_bhb_loop+0x40/0x90 [ 617.567676][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.573762][ T31] RIP: 0033:0x7f5dba75cfce [ 617.578228][ T31] RSP: 002b:00007f5dbb71ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 617.586641][ T31] RAX: ffffffffffffffda RBX: 00007f5dbb71e6c0 RCX: 00007f5dba75cfce [ 617.594913][ T31] RDX: 0000000000000024 RSI: 00007f5dbb71d000 RDI: 0000000000000005 [ 617.602943][ T31] RBP: 0000000000000000 R08: 00007f5dbb71cf04 R09: 000000000000000c [ 617.610964][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 617.619277][ T31] R13: 00007f5dbb71cf58 R14: 00007f5dbb71d000 R15: 0000000000000000 [ 617.627360][ T31] [ 617.630493][ T31] INFO: task syz.2.4157:21536 blocked for more than 144 seconds. [ 617.643489][ T31] Not tainted syzkaller #0 [ 617.648739][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 617.657396][ T31] task:syz.2.4157 state:D stack:28000 pid:21536 tgid:21534 ppid:17011 task_flags:0x400140 flags:0x00080002 [ 617.669388][ T31] Call Trace: [ 617.672676][ T31] [ 617.675714][ T31] __schedule+0x15dd/0x52d0 [ 617.680839][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 617.685801][ T31] ? __pfx___schedule+0x10/0x10 [ 617.690749][ T31] ? schedule+0x90/0x360 [ 617.695024][ T31] schedule+0x164/0x360 [ 617.699214][ T31] schedule_preempt_disabled+0x13/0x30 [ 617.704775][ T31] __mutex_lock+0x7fe/0x1300 [ 617.709629][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 617.714824][ T31] ? __mutex_lock+0x5ac/0x1300 [ 617.719955][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 617.724658][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 617.729743][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 617.734676][ T31] ? radix_tree_lookup+0x240/0x290 [ 617.740096][ T31] genl_rcv_msg+0x10b/0x7a0 [ 617.744617][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 617.749704][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 617.754674][ T31] netlink_rcv_skb+0x232/0x4b0 [ 617.759498][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 617.764528][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 617.770118][ T31] ? down_read+0x272/0x2e0 [ 617.774532][ T31] ? genl_rcv+0xd/0x40 [ 617.778648][ T31] genl_rcv+0x28/0x40 [ 617.782641][ T31] netlink_unicast+0x80f/0x9b0 [ 617.787443][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 617.792851][ T31] ? netlink_sendmsg+0x650/0xb40 [ 617.797779][ T31] ? skb_put+0x11b/0x210 [ 617.802695][ T31] netlink_sendmsg+0x813/0xb40 [ 617.807467][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 617.812823][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 617.817771][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 617.823225][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 617.828755][ T31] __sys_sendto+0x672/0x710 [ 617.833262][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 617.838368][ T31] ? exc_page_fault+0x6a/0xc0 [ 617.843061][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 617.848441][ T31] __x64_sys_sendto+0xde/0x100 [ 617.853217][ T31] do_syscall_64+0x14d/0xf80 [ 617.857793][ T31] ? trace_irq_disable+0x3b/0x150 [ 617.863104][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.869331][ T31] ? clear_bhb_loop+0x40/0x90 [ 617.874017][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.880238][ T31] RIP: 0033:0x7fc3a015cfce [ 617.884705][ T31] RSP: 002b:00007fc3a1045e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 617.893477][ T31] RAX: ffffffffffffffda RBX: 00007fc3a10476c0 RCX: 00007fc3a015cfce [ 617.901644][ T31] RDX: 0000000000000024 RSI: 00007fc3a1046000 RDI: 0000000000000006 [ 617.909803][ T31] RBP: 0000000000000000 R08: 00007fc3a1045f04 R09: 000000000000000c [ 617.917817][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 617.926059][ T31] R13: 00007fc3a1045f58 R14: 00007fc3a1046000 R15: 0000000000000000 [ 617.934105][ T31] [ 617.937128][ T31] INFO: task syz.1.4156:21537 blocked for more than 144 seconds. [ 617.944913][ T31] Not tainted syzkaller #0 [ 617.950173][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 617.959248][ T31] task:syz.1.4156 state:D stack:26120 pid:21537 tgid:21535 ppid:17373 task_flags:0x400140 flags:0x00080002 [ 617.971426][ T31] Call Trace: [ 617.974701][ T31] [ 617.977767][ T31] __schedule+0x15dd/0x52d0 [ 617.982581][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 617.987548][ T31] ? __pfx___schedule+0x10/0x10 [ 617.992518][ T31] ? schedule+0x90/0x360 [ 617.996778][ T31] schedule+0x164/0x360 [ 618.000990][ T31] schedule_preempt_disabled+0x13/0x30 [ 618.006466][ T31] __mutex_lock+0x7fe/0x1300 [ 618.011436][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 618.016640][ T31] ? __mutex_lock+0x5ac/0x1300 [ 618.021459][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 618.026148][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 618.031279][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 618.036249][ T31] ? radix_tree_lookup+0x240/0x290 [ 618.041776][ T31] genl_rcv_msg+0x10b/0x7a0 [ 618.046308][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 618.051420][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 618.056398][ T31] netlink_rcv_skb+0x232/0x4b0 [ 618.061300][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 618.066329][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 618.071896][ T31] ? down_read+0x272/0x2e0 [ 618.076306][ T31] ? genl_rcv+0xd/0x40 [ 618.080427][ T31] genl_rcv+0x28/0x40 [ 618.084412][ T31] netlink_unicast+0x80f/0x9b0 [ 618.089249][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 618.094656][ T31] ? netlink_sendmsg+0x650/0xb40 [ 618.099874][ T31] ? skb_put+0x11b/0x210 [ 618.104116][ T31] netlink_sendmsg+0x813/0xb40 [ 618.108941][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.114234][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 618.119426][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 618.124723][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.130321][ T31] __sys_sendto+0x672/0x710 [ 618.134833][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 618.139940][ T31] ? exc_page_fault+0x6a/0xc0 [ 618.144634][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 618.149986][ T31] __x64_sys_sendto+0xde/0x100 [ 618.154862][ T31] do_syscall_64+0x14d/0xf80 [ 618.159764][ T31] ? trace_irq_disable+0x3b/0x150 [ 618.164815][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.170950][ T31] ? clear_bhb_loop+0x40/0x90 [ 618.175636][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.181567][ T31] RIP: 0033:0x7f9aca55cfce [ 618.185986][ T31] RSP: 002b:00007f9acb452e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 618.194706][ T31] RAX: ffffffffffffffda RBX: 00007f9acb4546c0 RCX: 00007f9aca55cfce [ 618.202737][ T31] RDX: 0000000000000020 RSI: 00007f9acb453000 RDI: 0000000000000006 [ 618.210787][ T31] RBP: 0000000000000000 R08: 00007f9acb452f04 R09: 000000000000000c [ 618.219146][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 618.227134][ T31] R13: 00007f9acb452f58 R14: 00007f9acb453000 R15: 0000000000000000 [ 618.235314][ T31] [ 618.238447][ T31] [ 618.238447][ T31] Showing all locks held in the system: [ 618.246158][ T31] 1 lock held by khungtaskd/31: [ 618.251556][ T31] #0: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 618.261529][ T31] 2 locks held by getty/5579: [ 618.266278][ T31] #0: ffff8880370080a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 618.276274][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 618.286932][ T31] 1 lock held by udevd/17018: [ 618.291819][ T31] #0: ffff888026546358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 618.301212][ T31] 6 locks held by syz.0.4146/21522: [ 618.306397][ T31] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 618.314875][ T31] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 618.323905][ T31] #2: ffff88802658b278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 618.334343][ T31] #3: ffff888026522ce0 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 618.344060][ T31] #4: ffff888026522680 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 618.356176][ T31] #5: ffff8880265226b8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 618.369292][ T31] 2 locks held by syz.4.4152/21527: [ 618.374499][ T31] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 618.383292][ T31] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 618.392448][ T31] 2 locks held by syz.3.4154/21533: [ 618.397650][ T31] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 618.406302][ T31] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 618.415389][ T31] 2 locks held by syz.2.4157/21536: [ 618.420700][ T31] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 618.429160][ T31] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 618.438283][ T31] 2 locks held by syz.1.4156/21537: [ 618.443505][ T31] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 618.451863][ T31] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 618.461208][ T31] 2 locks held by syz-executor/21545: [ 618.466568][ T31] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 618.474825][ T31] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 618.483856][ T31] 2 locks held by syz-executor/21547: [ 618.489534][ T31] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 618.497798][ T31] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 618.506828][ T31] 2 locks held by syz-executor/21562: [ 618.512275][ T31] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 618.520983][ T31] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 618.530043][ T31] 2 locks held by syz-executor/21565: [ 618.535414][ T31] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 618.543675][ T31] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 618.552840][ T31] 2 locks held by syz-executor/21567: [ 618.558382][ T31] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 618.566594][ T31] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 618.575624][ T31] 2 locks held by syz-executor/21597: [ 618.581164][ T31] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 618.589586][ T31] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 618.598726][ T31] 2 locks held by syz-executor/21599: [ 618.604103][ T31] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 618.612589][ T31] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 618.621637][ T31] 2 locks held by syz-executor/21612: [ 618.626994][ T31] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 618.635265][ T31] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 618.644563][ T31] 2 locks held by syz-executor/21621: [ 618.650030][ T31] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 618.658315][ T31] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 618.667486][ T31] 2 locks held by syz-executor/21623: [ 618.673370][ T31] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 618.685171][ T31] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 618.694386][ T31] 2 locks held by syz-executor/21648: [ 618.699913][ T31] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 618.708152][ T31] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 618.717144][ T31] 2 locks held by syz-executor/21650: [ 618.722558][ T31] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 618.730927][ T31] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 618.739940][ T31] 2 locks held by syz-executor/21662: [ 618.745311][ T31] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 618.753544][ T31] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 618.763065][ T31] 2 locks held by syz-executor/21673: [ 618.768518][ T31] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 618.776729][ T31] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 618.785868][ T31] 2 locks held by syz-executor/21675: [ 618.791568][ T31] #0: ffffffff8fc3ad30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 618.799848][ T31] #1: ffffffff8fc3ab48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 618.808907][ T31] [ 618.811338][ T31] ============================================= [ 618.811338][ T31] [ 618.820214][ T31] NMI backtrace for cpu 0 [ 618.820230][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 618.820247][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 618.820257][ T31] Call Trace: [ 618.820264][ T31] [ 618.820270][ T31] dump_stack_lvl+0xe8/0x150 [ 618.820295][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 618.820318][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 618.820343][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 618.820367][ T31] sys_info+0x135/0x170 [ 618.820444][ T31] watchdog+0xfd9/0x1030 [ 618.820463][ T31] ? watchdog+0x21a/0x1030 [ 618.820480][ T31] kthread+0x388/0x470 [ 618.820490][ T31] ? __pfx_watchdog+0x10/0x10 [ 618.820516][ T31] ? __pfx_kthread+0x10/0x10 [ 618.820526][ T31] ret_from_fork+0x51e/0xb90 [ 618.820541][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 618.820552][ T31] ? __switch_to+0xc7d/0x1450 [ 618.820565][ T31] ? __pfx_kthread+0x10/0x10 [ 618.820575][ T31] ret_from_fork_asm+0x1a/0x30 [ 618.820596][ T31] [ 618.820600][ T31] Sending NMI from CPU 0 to CPUs 1: [ 618.931662][ C1] NMI backtrace for cpu 1 [ 618.931677][ C1] CPU: 1 UID: 0 PID: 86 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 618.931695][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 618.931704][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 618.931812][ C1] RIP: 0010:nsim_dev_trap_report_work+0x0/0xb80 [ 618.931832][ C1] Code: e2 07 80 c2 03 38 ca 7c e5 48 89 c7 48 89 c3 e8 a6 d0 0f fb 48 89 d8 eb d5 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 81 ec b8 00 00 00 48 [ 618.931845][ C1] RSP: 0018:ffffc900025bfaf8 EFLAGS: 00000246 [ 618.931857][ C1] RAX: 1ffff110037ec603 RBX: ffffffff818eb4a5 RCX: ffff88801d3c5b80 [ 618.931868][ C1] RDX: 0000000000000000 RSI: ffffffff8c27b560 RDI: ffff88805b736800 [ 618.931879][ C1] RBP: ffffc900025bfce8 R08: ffffffff901196b7 R09: 1ffffffff20232d6 [ 618.931889][ C1] R10: dffffc0000000000 R11: ffffffff872008a0 R12: ffff88805b736800 [ 618.931900][ C1] R13: ffff88801bf63018 R14: dffffc0000000000 R15: 0000000000000001 [ 618.931911][ C1] FS: 0000000000000000(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 618.931923][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 618.931933][ C1] CR2: 00007ff184747e20 CR3: 00000000372d6000 CR4: 00000000003526f0 [ 618.931946][ C1] Call Trace: [ 618.931952][ C1] [ 618.931958][ C1] process_scheduled_works+0xb02/0x1830 [ 618.931990][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 618.932012][ C1] ? assign_work+0x3d5/0x5e0 [ 618.932030][ C1] worker_thread+0xa50/0xfc0 [ 618.932060][ C1] kthread+0x388/0x470 [ 618.932074][ C1] ? __pfx_worker_thread+0x10/0x10 [ 618.932091][ C1] ? __pfx_kthread+0x10/0x10 [ 618.932104][ C1] ret_from_fork+0x51e/0xb90 [ 618.932123][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 618.932139][ C1] ? __switch_to+0xc7d/0x1450 [ 618.932157][ C1] ? __pfx_kthread+0x10/0x10 [ 618.932170][ C1] ret_from_fork_asm+0x1a/0x30 [ 618.932198][ C1] [ 619.127303][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 619.134149][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 619.143237][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 619.153288][ T31] Call Trace: [ 619.156556][ T31] [ 619.159482][ T31] vpanic+0x56c/0xa60 [ 619.163452][ T31] ? __pfx___schedule+0x10/0x10 [ 619.168288][ T31] ? __pfx_vpanic+0x10/0x10 [ 619.172777][ T31] ? __pfx_console_unlock+0x10/0x10 [ 619.178053][ T31] panic+0xc5/0xd0 [ 619.181775][ T31] ? __pfx_panic+0x10/0x10 [ 619.186196][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 619.191568][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 619.197717][ T31] watchdog+0x1023/0x1030 [ 619.202044][ T31] ? watchdog+0x21a/0x1030 [ 619.206469][ T31] kthread+0x388/0x470 [ 619.210530][ T31] ? __pfx_watchdog+0x10/0x10 [ 619.215211][ T31] ? __pfx_kthread+0x10/0x10 [ 619.219812][ T31] ret_from_fork+0x51e/0xb90 [ 619.224501][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 619.229630][ T31] ? __switch_to+0xc7d/0x1450 [ 619.234316][ T31] ? __pfx_kthread+0x10/0x10 [ 619.238989][ T31] ret_from_fork_asm+0x1a/0x30 [ 619.243772][ T31] [ 619.247040][ T31] Kernel Offset: disabled [ 619.251353][ T31] Rebooting in 86400 seconds..