last executing test programs: 21.945329888s ago: executing program 0 (id=5757): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@remote, @multicast1, 0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @local, 0x1, 0x4, 0x8000, 0x0, 0x2, 0x20000, r2}) (async) sendmsg$nl_route(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010001fff00000008b56e58b2af072100", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028008000f0006000000050010008f0000000600180000000000"], 0x4c}}, 0x0) 21.530405189s ago: executing program 0 (id=5761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES8], 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x20000010) 21.380869243s ago: executing program 0 (id=5764): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) socket$vsock_stream(0x28, 0x1, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x170bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x3973d, 0x4b7bc}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c844}, 0x8000002) 20.993926544s ago: executing program 0 (id=5767): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0xb, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x4, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x87d0, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x1, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x1, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x8001, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x5, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) setsockopt$inet6_int(r12, 0x29, 0x1a, &(0x7f00000000c0)=0x7, 0x4) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x8000) 20.827528238s ago: executing program 2 (id=5768): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f00000000c0)="6dd3403ec9c826f56189fb0c6a1002117696cfd7084e1678380770558aba4b3f5b88118f709b50bfad31a66f0aff8883d12d40625164b7d326fcc6f193d128cd6c3ecc"}, {&(0x7f0000000140)="5a29ab02dc835f848614f44e33664ff94a326ed7ac6bd1ae2838ade4379fefd9aef255af0d0a504d1ac58232f6470aabfc71057ea359d3e1ea3ca2da4ada7d583087cf176ae639ed82863cd18d3963908660b131208a0f099e2154f7e0ec4ea06cacf6591008c3bf56a0b1d5dce69d822e4250260bd9d96232ba0b22073b7f178e29bea4f9dbee7feb36c1c746f336c4b76de70bea5963764a7cd10dec4823bd00d9602bcf822fa7fc56a9bfd22b9a44f79f15f1b0db5e593dae3a08b1de382346367109fe9a2a79885d5cf9319d7a736cc9a1c8c3182169"}], 0x127d) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 20.42007732s ago: executing program 3 (id=5770): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x700, 0x7, 0x4, 0x4, {{0x12, 0x4, 0x1, 0x17, 0x48, 0x68, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3d}, {[@timestamp_prespec={0x44, 0x1c, 0x95, 0x3, 0x1, [{@local, 0x9}, {@loopback, 0x488}, {@broadcast, 0xb}]}, @lsrr={0x83, 0x17, 0xb0, [@loopback, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x39}, @dev={0xac, 0x14, 0x14, 0x29}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xbc, r0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xb03}, @ETHTOOL_A_CHANNELS_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xa}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8000}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x80000001}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8014}, 0x20008044) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f00000002c0)=0x6, &(0x7f0000000300)=0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x401, 0x7b}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x40041}, 0x20000010) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x2, 0x18}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r7, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x80489439, &(0x7f00000005c0)) shutdown(r3, 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x84, r0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) ioctl(r7, 0x4d, &(0x7f00000007c0)="945bd10aa3128d47d6c0c4572c5b53b8b03c435ef32baca3e05b1ab157397017612866479b6fc90afc129966ac3996ae865a7782dc851745ea626846b25342806373586b5838e0546c15a1c7bdad134158b630f9e69effde9294603e8cd925ac1b829b4c898c3a377db811f264f2b28419c53e4f14aacff990ffd1b02a7b8a9ede750382a7be171ec42015") socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'wlan1\x00'}) bind$inet6(0xffffffffffffffff, &(0x7f00000008c0)={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}, 0x8a6}, 0x1c) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r10, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, 0x140e, 0x2, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x4040092) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000a40)={0x0, 0xffff0001}, &(0x7f0000000a80)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r11, 0x84, 0x18, &(0x7f0000000ac0)={r12, 0x8}, &(0x7f0000000b00)=0x8) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r11, 0x40189429, &(0x7f0000000b40)={0x1, 0xc9, 0x4}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={r9, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0], 0x0, 0x40, &(0x7f0000000c80)=[{}], 0x8, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0x63, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000ec0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000f00)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f00000017c0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001780)={&(0x7f0000001040)={0x720, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd0d}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r14}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x670}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r8}, {0x22c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x720}, 0x1, 0x0, 0x0, 0x8005}, 0x20048044) 20.41896875s ago: executing program 2 (id=5771): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80000000, @loopback, 0x402, 0x4}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x80, @loopback, 0xe6e0, 0x2004}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c0800094000000002"], 0xc4}}, 0x0) 20.28554544s ago: executing program 0 (id=5773): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x80, r0}, 0x38) 20.197141743s ago: executing program 2 (id=5774): socket$kcm(0x10, 0x3, 0x10) 20.170973158s ago: executing program 3 (id=5775): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b000000190001001a848efa961fb2d82d"], 0x1c}}, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r3) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r4, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x40044}, 0x55) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x8}]}}]}, 0x3c}}, 0x20008000) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @private=0xa010100}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xffffffff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r6, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b140100000000000d000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x4855}, 0x0) 20.109055933s ago: executing program 2 (id=5776): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}, {0x0, [0x5f, 0x5f, 0xa0]}}, &(0x7f0000000200)=""/146, 0x31, 0x92, 0x1}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}, {0x0, [0x5f, 0x5f, 0xa0]}}, &(0x7f0000000200)=""/146, 0x31, 0x92, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="f4000000290001000000000000000000fc020000000000000000000000000001fe8000000000000000000000000000200000000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="be6b6e000000000050001100ac1414aa000000000000000000000000ffffffff0000000000000000fc020000000000000000000000000001ff0200000000000000000000000000013c040000080000000a000a0028001e"], 0xf4}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001540)=ANY=[@ANYBLOB="4c0000001000d354030880000000000000210000", @ANYRES32=r5, @ANYBLOB="c3040500000000002c0012800e00010069703665727370616e000000180002800400120005000b00030000000800150030c20300"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmmsg$inet(r3, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000180)={r0, &(0x7f0000000040)='$*:\x00', 0x1, &(0x7f0000000080)={@_ha_fsid={[0x3ff, 0x2fcc]}, {0x0, 0x100, 0x7f, 0x4}}, 0x0, &(0x7f00000000c0), &(0x7f0000000140)=0x1}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x6, @loopback, 0x100}}, 0xe8, 0x5, 0x40, 0x7, 0x80, 0x4, 0x4}, &(0x7f0000000280)=0x9c) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f00000002c0)={r7, 0x7, 0x811, 0x6}, 0x10) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f00000002c0)={r7, 0x7, 0x811, 0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, &(0x7f00000003c0)=0xf) 17.540349632s ago: executing program 0 (id=5777): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89fb, &(0x7f0000000040)={'bond0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x4, 0xa) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r5, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8906}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {0x7}, @broadcast, @device_a, @multi={{}, [], {0x0, 0x9, {0x2, 0xd90}, "66e6994d27bb01b0"}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000800) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000440)={0x40, r5, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x28}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x6}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xb60}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x50}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x4048050) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r9, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8090) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r7) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x28, r10, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0xffcc, 0x3, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x30000810) pipe(&(0x7f0000000240)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r9, @ANYBLOB="00042dbd7000ffdbdf25010000000c00030000f8ffffffffffff400007800c00018008000100", @ANYRES32=r11, @ANYBLOB="0c00018008000100", @ANYRES32=r12, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r13, @ANYBLOB="0c004bced0d06108f91f076eb77826167fae0b4178a62b907a807904000e41", @ANYRES32=r14, @ANYBLOB="280007800c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r15, @ANYBLOB="0c00018008000100", @ANYRES32=r16, @ANYBLOB="08000100000000000c00060003000000000000000c0005000400000000000000100007800c00018008000100", @ANYRES32, @ANYBLOB="0c0004000004000000000000"], 0xc4}, 0x1, 0x0, 0x0, 0x14}, 0x20000058) 17.518612235s ago: executing program 2 (id=5779): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], &(0x7f00000002c0)=""/185, 0x32, 0xb9, 0x1}, 0x1f) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110}], 0x10}, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1daa000000000000711019000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e03, @multicast1}}, 0x0, 0x0, 0x3c, 0x0, "ede10c90e0d6d4b2b1651d4ddc62e17b5f4fa4a45bc87ce8b6cab0b0bf814a73a752ff5d0f912a8eff0b48b4c25e7d5ae1e974f8cdaa3dccaccd26482b83f2a4afd000"}, 0xd8) (async) connect$inet(r3, &(0x7f0000000280)={0x2, 0xce28, @local}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff"], 0xfc}}, 0x0) (async) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x1}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) (async) getsockopt$packet_int(r1, 0x107, 0xf, 0x0, &(0x7f00000000c0)) (async) r4 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x6a, 0x5, 0x0, &(0x7f0000000000)) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) (async) r6 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1={0xff, 0x3}}, 0x1c) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @empty}, {0x307, @broadcast}, 0x0, {0x2, 0x4e24, @local}, 'veth1_vlan\x00'}) (async) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000080)) 17.480665887s ago: executing program 1 (id=5780): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x22, 0x0, &(0x7f0000000280)) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfffffffe}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x68, 0x6, 0x9, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @loopback, 0x40, 0x10, 0x40, 0x7}}) sendmsg$nl_route_sched_retired(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=@delqdisc={0x1a, 0x25, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xc}, {0xfff1, 0x6}, {0x0, 0x3}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1a}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0xf}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc47}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x364}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x26}, @TCA_DSMARK_INDICES={0x6}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4010}, 0x20044050) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000400)={'ip6gre0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x5}}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000390400"/20, @ANYRES16=r0, @ANYBLOB="00000000048104002c00128009000100626f6e64000000001c00028008000700f4000000050001000500000008000200", @ANYRES32=0x0, @ANYBLOB="02a61b379f2beae0278d7d9725afdf8af6fffb139f566ec833d7b4eee41cdfc1b1d1ced4552017d028649df1dc0166ca16568f3f4f58e5580168c19788ab64db149c6d71b85c2b790d27fa238bce291d5168c200fa320d167bb9c09ce2e51de251c7501a270f3eeba72122312e3198183e2dd9d3207366007e3b6007113edbb1a621089f838770ee14aab9c2639ba5d91ec2bbc8061c83f463be1afcb61327513201b23bf8b72c9dcd27"], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x22, 0x0, &(0x7f0000000280)) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfffffffe}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x68, 0x6, 0x9, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @loopback, 0x40, 0x10, 0x40, 0x7}}) (async) sendmsg$nl_route_sched_retired(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=@delqdisc={0x1a, 0x25, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xc}, {0xfff1, 0x6}, {0x0, 0x3}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1a}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0xf}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc47}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xc2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x364}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x26}, @TCA_DSMARK_INDICES={0x6}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4010}, 0x20044050) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000400)={'ip6gre0\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x5}}}) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000390400"/20, @ANYRES16=r0, @ANYBLOB="00000000048104002c00128009000100626f6e64000000001c00028008000700f4000000050001000500000008000200", @ANYRES32=0x0, @ANYBLOB="02a61b379f2beae0278d7d9725afdf8af6fffb139f566ec833d7b4eee41cdfc1b1d1ced4552017d028649df1dc0166ca16568f3f4f58e5580168c19788ab64db149c6d71b85c2b790d27fa238bce291d5168c200fa320d167bb9c09ce2e51de251c7501a270f3eeba72122312e3198183e2dd9d3207366007e3b6007113edbb1a621089f838770ee14aab9c2639ba5d91ec2bbc8061c83f463be1afcb61327513201b23bf8b72c9dcd27"], 0x4c}}, 0x0) (async) 17.368476087s ago: executing program 3 (id=5781): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="07000300010001", 0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='syzkaller\x00', 0x2}, 0x90) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3, 0x42072, r0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000140)={0x2}, 0x8) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) close(0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_GOINGDOWN(r2, 0x8004587d, &(0x7f0000000100)=0x5) 17.324285006s ago: executing program 1 (id=5783): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd000000100001000c0808004149224e06040800", 0x58}], 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "ffffffffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r1 = socket$inet(0x2, 0x3, 0x33) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) 17.257123889s ago: executing program 2 (id=5784): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x4, 0x6, 0xe087}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) close(r1) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f00000002c0)) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd700000", @ANYRES32=r3, @ANYBLOB], 0x20}}, 0x240440c4) r6 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000140), 0x0, 0x20044881) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 17.195783405s ago: executing program 3 (id=5785): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x24}}, 0x20000000) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}]}, 0x24}}, 0x20000000) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x14}], 0x1}, 0x0) 17.14047535s ago: executing program 1 (id=5786): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0xf}, 0x94) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000c00)=[{0x0}, {&(0x7f00000006c0)="5d7f9f0c37c757789144dbf58fe4fc5a9ec19136e31c639bf291049c11fd43b142387205eb76dd99417bf7dfb075081a3b41a1df501e4137a648b7f298b6e244324e5d76e12cb058e459e3ab4a0edb9ee7b07eda96b58636f10924ee28081cb25cb2c36301d1339f35f4a7a4206e4ea8b6d7", 0x72}, {&(0x7f00000007c0)="f6f68f89845a0c7de63af19bfd728ddd52929989f279c30fa03525313bf29e6a8a6d2865", 0x24}, {0x0}], 0x4}}], 0x1, 0x20008000) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000880)=""/92, 0x5c}], 0x1, &(0x7f0000000900)=""/246, 0xf6}, 0x9}], 0x1, 0x40020000, 0x0) 17.042263414s ago: executing program 3 (id=5788): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x6}, 0x4) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @local}, 0x14) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r4, 0x0, {0x1, 0xf0, 0x2}}, 0x18) listen(r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x7) accept4(r0, 0x0, 0x0, 0x0) 16.92497602s ago: executing program 3 (id=5790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x40) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) (async, rerun: 64) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) (rerun: 64) bind$phonet(r5, &(0x7f0000000100)={0x23, 0x10, 0x8}, 0x10) listen(r5, 0x5) accept$phonet_pipe(r5, 0x0, 0x0) (async) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r6, &(0x7f0000000140)={0x23, 0x11, 0x8}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, r8, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) (async) writev(r7, &(0x7f0000000180), 0x100000000000003c) (async) connect$phonet_pipe(r6, &(0x7f0000000180)={0x23, 0x10, 0x8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r9) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r10, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffc64}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4850) 16.88112071s ago: executing program 4 (id=5792): unshare(0x6020400) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @broadcast, @local}, &(0x7f0000000080)=0xc) unshare(0x2c060000) close(0x3) 16.780993629s ago: executing program 4 (id=5793): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x13, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x80000000}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x101, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4d0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x60}, 0x20) syz_emit_ethernet(0x6a, &(0x7f0000000280)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x1000, 0x0]}, {}, {0x8, 0x88be, 0x2}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x13, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x80000000}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x101, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4d0}, 0x94) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x4004000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x60}, 0x20) (async) syz_emit_ethernet(0x6a, &(0x7f0000000280)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x1000, 0x0]}, {}, {0x8, 0x88be, 0x2}}}}}}, 0x0) (async) 16.778627119s ago: executing program 4 (id=5794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x404}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) 16.736275245s ago: executing program 4 (id=5795): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0x9, 0x9, 0x2, 0xc, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, 0x8, 0x700, 0x3ff, 0x6}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x8901, &(0x7f0000000040)={r2}) sendmsg$inet(r2, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000080)="90", 0x1}], 0x1}, 0x24004011) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r1, 0x89f1, &(0x7f0000000000)) 16.676336401s ago: executing program 4 (id=5796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2ad}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x68}}, 0x4008845) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @proto={0x5, 0x19, 0x6c}]}, 0x140}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x850, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x824, 0x2, [@TCA_BPF_POLICE={0x820, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x9, 0xffff, 0xc, 0x7, 0x1000, 0x7, 0xe731, 0x10, 0x27, 0x0, 0x4, 0xd, 0xbd, 0x10, 0x3, 0x5, 0x4, 0x9, 0x10000, 0x7ff, 0x22, 0xd, 0xffffff80, 0x0, 0xfffffffa, 0xfffffffc, 0x8, 0xd, 0x4, 0x80000000, 0xc0a, 0x8, 0xfffff04a, 0x2, 0x9, 0x5, 0x59be, 0x90, 0x0, 0xf1, 0x40, 0xca20, 0x9, 0xfffffff8, 0x33f, 0xcf, 0x3, 0x1fe3, 0x9, 0x0, 0x3, 0xf78, 0x1ff, 0x8001, 0x3, 0x7, 0x3, 0x9, 0x0, 0x4000101, 0xfffffffd, 0x900, 0x4, 0x3, 0x1, 0xcec101e, 0x101, 0x5, 0x3, 0x101, 0x6, 0x3, 0x8, 0x2, 0x1000, 0xd, 0x82, 0x10, 0x3, 0x4000000, 0x1ff, 0x7, 0x8, 0x3, 0x9, 0x21, 0xb, 0xffffffff, 0x0, 0x1, 0x8, 0x80000000, 0x9, 0xef, 0x7f, 0x0, 0x8, 0x8, 0xd2, 0x9, 0x3, 0x703c47b4, 0x6, 0xfff, 0x6, 0x6, 0x3, 0x5, 0x6, 0x100, 0x8000, 0x77, 0x0, 0x8, 0x5, 0x101, 0x8, 0x5, 0x7, 0x1ff, 0x0, 0x8bb7, 0xff, 0xffff, 0xfffffc01, 0x5, 0x7, 0x2, 0x5, 0x5, 0xa3b4, 0x3, 0xf, 0x2, 0x10000, 0x795, 0xc4, 0x96ba81bb, 0x272, 0x3, 0x3ff, 0x7fffffff, 0x2, 0x4, 0x0, 0x9, 0x6, 0xfffffffc, 0x196b4eb5, 0x6c, 0x2, 0x0, 0x8001, 0x0, 0x6, 0x8001, 0x7, 0x5, 0x1, 0x2, 0x80, 0x1, 0x2, 0x8001, 0xffffffff, 0x5, 0x1, 0x3, 0x0, 0xa, 0x42, 0x834, 0x101, 0xab1, 0x9, 0x1c7, 0x35f3, 0x7, 0x4, 0x9, 0x6, 0x8, 0x80000000, 0x3, 0x9, 0x1, 0x4, 0x9cdf070, 0x12000, 0xf2f, 0x0, 0x3, 0x7fff, 0xa4, 0x3, 0x9, 0xe, 0x5, 0x1, 0x3, 0x8, 0x2, 0x6, 0xfffff000, 0x3b84, 0x7, 0x8001, 0x5, 0x1000, 0x1c00, 0x0, 0x8, 0x8, 0x9, 0x5, 0x9, 0x283a, 0xffffff48, 0xd0fa, 0x1, 0x5, 0xfffffffc, 0x4, 0x2bc3, 0x6, 0x9, 0x2, 0xff, 0x5, 0x3, 0x8, 0x0, 0x3, 0xd, 0x0, 0x9, 0x40, 0x6, 0xfffffffc, 0x4, 0x2, 0x5, 0xfffffff9, 0x9, 0xffff0001, 0x9, 0x1, 0x2, 0x6f7, 0x400, 0xa, 0x100, 0x6, 0x4, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8000}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x7, 0x80000000, 0x5, 0x5, 0x7, 0x6, 0x7, 0x7, 0x1, 0x7, 0x1ed4, 0x3, 0x9, 0x400, 0xd, 0x3, 0xa4ed00, 0x9, 0x7, 0x3be, 0xfb57, 0x40, 0xffffffff, 0x8000, 0x5, 0x8, 0x2, 0x401, 0x5c, 0x9, 0x10000, 0x9, 0x1, 0x0, 0x8, 0x355, 0x0, 0x9, 0x5, 0x100, 0x8003, 0xf, 0xf, 0x0, 0x0, 0xfffffffb, 0x7, 0x10, 0x7ff, 0x10001, 0x5, 0x0, 0x5, 0xaa9, 0xfffffe00, 0x1c, 0x10, 0xd, 0x5, 0x2, 0xcda, 0x0, 0x9, 0x1, 0x800, 0x7, 0x1, 0x4, 0x5, 0x1a5b809d, 0x4e, 0x6, 0x48000, 0x3, 0x8, 0x3, 0x2, 0x6, 0x2, 0x1, 0x10000, 0x3, 0x4, 0x8, 0x5, 0x7, 0x7, 0xa6, 0x0, 0x0, 0x0, 0x35b33ced, 0x0, 0x9, 0x80, 0xf, 0x50fc, 0x2, 0x3, 0xfa37, 0x8, 0x3, 0x2, 0x7b, 0x3, 0x4, 0x1f63, 0xfffffe00, 0x0, 0x5, 0x40, 0x1, 0x1, 0x0, 0x6, 0x71, 0x7, 0xfffff8a7, 0x0, 0xc, 0x1, 0x7, 0x3b, 0x2, 0x8, 0x81, 0xfff, 0x101, 0x4, 0xfffffff7, 0x1, 0x2, 0x1000, 0x3, 0xffff, 0x5, 0x7, 0xe, 0x2, 0x80000001, 0x3, 0x8, 0x6461, 0x80000001, 0x6, 0xc456, 0x0, 0x0, 0x2, 0x80, 0x510e, 0x2, 0x7, 0xffffffff, 0x775, 0x2, 0xfffff9c3, 0x5, 0x80, 0x8, 0x3, 0xd7, 0x7f, 0x8, 0x2, 0x2b86, 0x9, 0x0, 0x5, 0x1f, 0x5, 0x53c, 0xc, 0x3c, 0xb4, 0x7, 0x0, 0xfffffffb, 0xc, 0xffffff00, 0x1, 0x2, 0x0, 0xaef, 0xf969, 0x3, 0x8, 0x9, 0x8, 0x401, 0x80, 0x1, 0xfffff89a, 0xd5f4, 0x8000, 0x400, 0x3, 0x3, 0x4, 0x1, 0x6, 0x3, 0x7, 0x8, 0x6, 0x1, 0x8, 0x3ff, 0x6, 0x8fc, 0x5, 0xa3, 0xff, 0xffffffff, 0x9, 0x57c, 0x14, 0x1, 0x3, 0x3, 0x1, 0x72, 0xfffffff7, 0xffffffff, 0xffff, 0x4, 0x2, 0x2, 0x5, 0x0, 0x6, 0x1, 0x8, 0x11a, 0x7fff, 0x8, 0xfffffffc, 0xc9, 0x8, 0x5, 0x2, 0x8, 0x2, 0xcb, 0x0, 0x7, 0x6, 0x7, 0x5, 0x5, 0x6, 0x80000000, 0x80, 0x101, 0x80]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7f}]}]}}]}, 0x850}, 0x1, 0x0, 0x0, 0x24008050}, 0x0) 16.311038738s ago: executing program 4 (id=5797): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="00000000080000001c0012800c0001006d6163766c616e000c0002800836fd13ad7508aa877ef3f66d31fc00000060000000140035006d61"], 0x50}}, 0x8000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x5}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000d80)=[@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x70}, @in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}]}, 0x44}}, 0x0) 16.200714939s ago: executing program 1 (id=5798): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) (async) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)='x', 0x1}], 0x1}}], 0x1, 0x20040020) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket(0x28, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) close(0x4) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x37, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) r5 = socket$kcm(0x10, 0x2, 0x0) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r6, 0x6, 0xd, 0x0, &(0x7f0000000040)) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) 16.159419829s ago: executing program 1 (id=5799): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x44}}, 0x0) 16.080211658s ago: executing program 1 (id=5800): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000140)={'raw\x00', 0x0, [0x0, 0x401, 0xffffffff, 0x2, 0x5]}, &(0x7f00000001c0)=0x54) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) close(r2) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00'}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0xfffe, @any, 0x9, 0x1}, 0xe) listen(r4, 0x0) clock_gettime(0x3, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000040)={r5, r6/1000+60000}, 0x10) (async) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000040)={r5, r6/1000+60000}, 0x10) r7 = accept4(r4, 0x0, 0x0, 0x80800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) readv(r8, &(0x7f00000014c0)=[{&(0x7f0000002540)=""/4108, 0x100c}, {&(0x7f0000000440)=""/149, 0x95}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r8) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r8) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x2, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xc, 0xb}, {0xd, 0xd}, {0xc, 0xffff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000300)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x301, @local}, 0x28, {0x2, 0x4e23, @rand_addr=0x64010100}, 'veth1_vlan\x00'}) (async) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000300)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x301, @local}, 0x28, {0x2, 0x4e23, @rand_addr=0x64010100}, 'veth1_vlan\x00'}) socket(0x400000000010, 0x3, 0x0) (async) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000000)) (async) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000000)) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x41}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) socket$kcm(0x11, 0x3, 0x0) (async) r12 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r12, &(0x7f0000000280)={&(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x3, 0x1, 0x3, 0x1}}, 0x80, &(0x7f0000004640)=[{&(0x7f00000006c0)="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", 0x2e}, {&(0x7f0000003580)="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"}, {&(0x7f0000004580)="ed13e5296280add2478a9900000000f1"}, {&(0x7f00000045c0)="aefa3f44c912a052e4c17cb3eafce9a66cee2e0d668bf7bb93222bfb79750d8da335c46e2f50a17e54e1e107b098a6cd323c86f8899c45a7b30e65fcde2d05aa1d76dd3c1cb87a7059bb20e71160be43b244460f67f8129944ee40bd41a5a8388449ba33ff1fdd0f7ac145bb02139839"}], 0xffffffffffffff88}, 0x200008c5) 2.186984261s ago: executing program 32 (id=5777): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89fb, &(0x7f0000000040)={'bond0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x4, 0xa) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r5, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8906}, @NL80211_ATTR_FRAME={0x22, 0x33, @ctrl_frame=@ba={{}, {0x7}, @broadcast, @device_a, @multi={{}, [], {0x0, 0x9, {0x2, 0xd90}, "66e6994d27bb01b0"}}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000800) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000440)={0x40, r5, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x28}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x6}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xb60}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x50}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x4048050) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r9, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8090) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000400), r7) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x28, r10, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0xffcc, 0x3, @empty}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x30000810) pipe(&(0x7f0000000240)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r9, @ANYBLOB="00042dbd7000ffdbdf25010000000c00030000f8ffffffffffff400007800c00018008000100", @ANYRES32=r11, @ANYBLOB="0c00018008000100", @ANYRES32=r12, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r13, @ANYBLOB="0c004bced0d06108f91f076eb77826167fae0b4178a62b907a807904000e41", @ANYRES32=r14, @ANYBLOB="280007800c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32=r15, @ANYBLOB="0c00018008000100", @ANYRES32=r16, @ANYBLOB="08000100000000000c00060003000000000000000c0005000400000000000000100007800c00018008000100", @ANYRES32, @ANYBLOB="0c0004000004000000000000"], 0xc4}, 0x1, 0x0, 0x0, 0x14}, 0x20000058) 2.155274804s ago: executing program 33 (id=5784): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0x4, 0x6, 0xe087}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) close(r1) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f00000002c0)) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd700000", @ANYRES32=r3, @ANYBLOB], 0x20}}, 0x240440c4) r6 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000140), 0x0, 0x20044881) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.120229257s ago: executing program 34 (id=5790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0x40) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) (async, rerun: 64) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) (rerun: 64) bind$phonet(r5, &(0x7f0000000100)={0x23, 0x10, 0x8}, 0x10) listen(r5, 0x5) accept$phonet_pipe(r5, 0x0, 0x0) (async) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r6, &(0x7f0000000140)={0x23, 0x11, 0x8}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, r8, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) (async) writev(r7, &(0x7f0000000180), 0x100000000000003c) (async) connect$phonet_pipe(r6, &(0x7f0000000180)={0x23, 0x10, 0x8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r9) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r10, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffc64}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x4850) 1.071342769s ago: executing program 35 (id=5797): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="00000000080000001c0012800c0001006d6163766c616e000c0002800836fd13ad7508aa877ef3f66d31fc00000060000000140035006d61"], 0x50}}, 0x8000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x5}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000d80)=[@in6={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x70}, @in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f0000000080)=0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}]}, 0x44}}, 0x0) 0s ago: executing program 36 (id=5800): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000140)={'raw\x00', 0x0, [0x0, 0x401, 0xffffffff, 0x2, 0x5]}, &(0x7f00000001c0)=0x54) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) close(r2) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00'}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0xfffe, @any, 0x9, 0x1}, 0xe) listen(r4, 0x0) clock_gettime(0x3, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000040)={r5, r6/1000+60000}, 0x10) (async) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000040)={r5, r6/1000+60000}, 0x10) r7 = accept4(r4, 0x0, 0x0, 0x80800) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) readv(r8, &(0x7f00000014c0)=[{&(0x7f0000002540)=""/4108, 0x100c}, {&(0x7f0000000440)=""/149, 0x95}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r8) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r8) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x2, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xc, 0xb}, {0xd, 0xd}, {0xc, 0xffff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000300)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x301, @local}, 0x28, {0x2, 0x4e23, @rand_addr=0x64010100}, 'veth1_vlan\x00'}) (async) ioctl$sock_inet_SIOCDARP(r7, 0x8953, &(0x7f0000000300)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x301, @local}, 0x28, {0x2, 0x4e23, @rand_addr=0x64010100}, 'veth1_vlan\x00'}) socket(0x400000000010, 0x3, 0x0) (async) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000000)) (async) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000000)) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x41}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) socket$kcm(0x11, 0x3, 0x0) (async) r12 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r12, &(0x7f0000000280)={&(0x7f0000000640)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x3, 0x1, 0x3, 0x1}}, 0x80, &(0x7f0000004640)=[{&(0x7f00000006c0)="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", 0x2e}, {&(0x7f0000003580)="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"}, {&(0x7f0000004580)="ed13e5296280add2478a9900000000f1"}, {&(0x7f00000045c0)="aefa3f44c912a052e4c17cb3eafce9a66cee2e0d668bf7bb93222bfb79750d8da335c46e2f50a17e54e1e107b098a6cd323c86f8899c45a7b30e65fcde2d05aa1d76dd3c1cb87a7059bb20e71160be43b244460f67f8129944ee40bd41a5a8388449ba33ff1fdd0f7ac145bb02139839"}], 0xffffffffffffff88}, 0x200008c5) kernel console output (not intermixed with test programs): es in process `syz.1.4900'. [ 750.497875][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.527629][T25114] NCSI netlink: No device for ifindex 0 [ 750.538155][T25116] ipt_ECN: cannot use operation on non-tcp rule [ 750.596276][T25118] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4903'. [ 750.606231][T25118] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4903'. [ 750.711859][T25121] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4903'. [ 751.185822][T25138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4910'. [ 751.458202][T25148] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4913'. [ 751.647218][T25157] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4916'. [ 751.986394][T25179] tap0: tun_chr_ioctl cmd 1074025676 [ 752.020501][T25179] tap0: owner set to 0 [ 752.535383][T25201] syzkaller0: entered promiscuous mode [ 752.571489][T25201] syzkaller0: entered allmulticast mode [ 752.614285][T25208] netlink: 'syz.1.4930': attribute type 21 has an invalid length. [ 752.648430][T25208] IPv6: NLM_F_CREATE should be specified when creating new route [ 752.659622][T25206] vlan0: entered promiscuous mode [ 752.680070][T25206] bridge0: entered promiscuous mode [ 753.342387][T25235] netlink: 'syz.3.4938': attribute type 1 has an invalid length. [ 753.591470][T25243] xfrm0: entered promiscuous mode [ 753.602930][T25243] xfrm0: entered allmulticast mode [ 753.848916][T25258] __nla_validate_parse: 1 callbacks suppressed [ 753.848937][T25258] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4945'. [ 753.940568][T25258] gretap0: entered promiscuous mode [ 753.963700][T25258] vlan0: entered promiscuous mode [ 754.216161][T25271] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4950'. [ 754.238862][T25274] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4951'. [ 754.288886][T25276] syzkaller0: entered promiscuous mode [ 754.298707][T25276] syzkaller0: entered allmulticast mode [ 754.414885][T22464] net_ratelimit: 5 callbacks suppressed [ 754.414905][T22464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.519517][T25287] openvswitch: netlink: IP tunnel dst address not specified [ 754.531039][T25287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 754.545857][T25287] tipc: Started in network mode [ 754.552273][T25287] tipc: Node identity 090000000000000006, cluster identity 4711 [ 754.567606][T25289] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4957'. [ 754.804150][T25298] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 754.824597][T22464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.835343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.880045][T25300] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 754.913785][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.922176][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.963845][T22464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.972226][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.250505][T25311] netlink: 'syz.4.4966': attribute type 83 has an invalid length. [ 755.281005][T25311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4966'. [ 755.417461][T25321] netlink: 198796 bytes leftover after parsing attributes in process `syz.0.4971'. [ 755.451136][T25321] netlink: 'syz.0.4971': attribute type 2 has an invalid length. [ 755.484204][T25321] netlink: 198796 bytes leftover after parsing attributes in process `syz.0.4971'. [ 755.509385][T25321] netlink: 'syz.0.4971': attribute type 2 has an invalid length. [ 755.535058][T25325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4969'. [ 755.726270][T25351] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4976'. [ 756.324819][T25382] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4982'. [ 756.341119][T25385] bond0: option miimon: invalid value (18446744071829782528) [ 756.357693][T25385] bond0: option miimon: allowed values 0 - 2147483647 [ 757.209215][T25430] netlink: 'syz.4.4994': attribute type 1 has an invalid length. [ 757.363915][T25430] 8021q: adding VLAN 0 to HW filter on device bond9 [ 757.416415][T25420] syzkaller0: entered promiscuous mode [ 757.422421][T25420] syzkaller0: entered allmulticast mode [ 757.464442][T25445] netlink: 'syz.3.4999': attribute type 1 has an invalid length. [ 757.572678][T25450] lo: entered allmulticast mode [ 757.616537][T25454] 8021q: VLANs not supported on gre0 [ 757.920674][T25471] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 758.207500][T25492] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 758.262606][T25492] netlink: 'syz.0.5014': attribute type 2 has an invalid length. [ 758.318700][T25492] netlink: 'syz.0.5014': attribute type 2 has an invalid length. [ 758.611068][T25520] netlink: 'syz.3.5022': attribute type 15 has an invalid length. [ 758.633493][T25521] netlink: 'syz.3.5022': attribute type 15 has an invalid length. [ 758.743439][T25512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.784830][T25512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.812259][T25512] bond0 (unregistering): (slave bond6): Releasing backup interface [ 758.840572][T25512] bond0 (unregistering): Released all slaves [ 759.081667][T25542] netlink: 'syz.0.5027': attribute type 1 has an invalid length. [ 759.303083][T25552] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 759.669921][T25570] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 759.768848][T25572] __nla_validate_parse: 18 callbacks suppressed [ 759.768869][T25572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5034'. [ 759.882115][T25577] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5036'. [ 759.996630][T25579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5037'. [ 760.105504][T25583] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5039'. [ 760.175151][T22464] net_ratelimit: 40 callbacks suppressed [ 760.175173][T22464] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.899957][T25628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 761.214700][T22469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.012627][T25699] validate_nla: 3 callbacks suppressed [ 762.012645][T25699] netlink: 'syz.4.5072': attribute type 16 has an invalid length. [ 762.060448][T25699] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5072'. [ 762.125688][T25699] veth0_macvtap: entered allmulticast mode [ 762.148012][T25710] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 762.173507][ T5755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.191269][T25710] netlink: 'syz.1.5075': attribute type 3 has an invalid length. [ 762.225196][T25710] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5075'. [ 762.257176][T22469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.433372][T25714] nbd0: detected capacity change from 0 to 63 [ 762.447542][T25715] block nbd4: NBD_DISCONNECT [ 762.459567][T25715] block nbd4: Send disconnect failed -32 [ 762.466297][T25715] block nbd4: shutting down sockets [ 762.499157][ T5643] block nbd0: Receive control failed (result -104) [ 762.995680][T25740] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5083'. [ 763.165220][T25745] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 763.304147][T22468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.829361][T25779] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5090'. [ 764.188025][T25793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 764.461581][T25817] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 764.750639][T25831] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5102'. [ 764.762060][T25830] netlink: 'syz.3.5105': attribute type 4 has an invalid length. [ 764.780619][T25830] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5105'. [ 764.828279][T25830] .`: renamed from bond0 (while UP) [ 764.961550][T25840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5108'. [ 764.982394][T25840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5108'. [ 765.035112][T25846] netlink: 'syz.4.5110': attribute type 1 has an invalid length. [ 765.051675][T25845] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5109'. [ 765.062607][T25845] nbd: illegal input index 65508 [ 765.136192][T25848] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5111'. [ 765.268278][T25860] ipvlan1: entered promiscuous mode [ 765.277472][T25860] ipvlan1: entered allmulticast mode [ 765.296798][T25860] veth0_vlan: entered allmulticast mode [ 765.489282][T25869] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5117'. [ 765.802381][T25883] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5122'. [ 766.160042][T25905] netlink: 'syz.2.5125': attribute type 1 has an invalid length. [ 766.224161][T25898] IPVS: persistence engine module ip_vs_pe_À not found [ 766.367920][T25905] 8021q: adding VLAN 0 to HW filter on device bond4 [ 766.489466][T25917] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.5130'. [ 766.634932][T25917] tipc: Enabled bearer , priority 0 [ 766.759088][T25917] syzkaller0: entered promiscuous mode [ 766.773053][T25917] syzkaller0: entered allmulticast mode [ 766.788511][T25917] tipc: Resetting bearer [ 766.821746][T25916] tipc: Resetting bearer [ 767.156902][T25952] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5138'. [ 769.591865][T25916] tipc: Disabling bearer [ 770.054626][T26005] xt_hashlimit: size too large, truncated to 1048576 [ 770.076578][T26005] xt_hashlimit: max too large, truncated to 1048576 [ 770.087505][T26005] xt_hashlimit: overflow, rate too high: 0 [ 770.431511][T26024] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 770.466773][T26024] bond6 (unregistering): Released all slaves [ 770.711065][T26034] bond0 (unregistering): Released all slaves [ 770.980582][T26014] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 771.206395][T26042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5156'. [ 771.438565][T26064] FAULT_INJECTION: forcing a failure. [ 771.438565][T26064] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 771.460855][T26064] CPU: 0 UID: 0 PID: 26064 Comm: syz.0.5162 Not tainted syzkaller #0 PREEMPT(full) [ 771.460886][T26064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 771.460899][T26064] Call Trace: [ 771.460908][T26064] [ 771.460917][T26064] dump_stack_lvl+0xe8/0x150 [ 771.460958][T26064] should_fail_ex+0x40c/0x560 [ 771.461079][T26064] _copy_from_iter+0x1d3/0x1660 [ 771.461109][T26064] ? kmem_cache_alloc_node_noprof+0x101/0x610 [ 771.461141][T26064] ? rcu_is_watching+0x15/0xb0 [ 771.461173][T26064] ? trace_kmem_cache_alloc+0x29/0xe0 [ 771.461202][T26064] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 771.461230][T26064] ? __pfx__copy_from_iter+0x10/0x10 [ 771.461261][T26064] ? __alloc_skb+0x276/0x7a0 [ 771.461339][T26064] ? __alloc_skb+0x276/0x7a0 [ 771.461365][T26064] ? netlink_sendmsg+0x650/0xb40 [ 771.461434][T26064] ? skb_put+0x112/0x210 [ 771.461458][T26064] netlink_sendmsg+0x6c0/0xb40 [ 771.461482][T26064] ? __fget_files+0x2a/0x420 [ 771.461529][T26064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 771.461559][T26064] ? aa_sock_msg_perm+0xf1/0x1b0 [ 771.461648][T26064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 771.461672][T26064] sock_sendmsg_nosec+0x13a/0x180 [ 771.461735][T26064] __sys_sendto+0x408/0x5a0 [ 771.461756][T26064] ? ksys_write+0x1e6/0x270 [ 771.461789][T26064] ? __pfx___sys_sendto+0x10/0x10 [ 771.461808][T26064] ? __mutex_unlock_slowpath+0x731/0x900 [ 771.461895][T26064] ? __pfx_ksys_write+0x10/0x10 [ 771.461924][T26064] __x64_sys_sendto+0xde/0x100 [ 771.461946][T26064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.461971][T26064] do_syscall_64+0x174/0x580 [ 771.461995][T26064] ? trace_irq_disable+0x3b/0x140 [ 771.462024][T26064] ? clear_bhb_loop+0x40/0x90 [ 771.462051][T26064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.462093][T26064] RIP: 0033:0x7fe0dab9df99 [ 771.462113][T26064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.462131][T26064] RSP: 002b:00007fe0db9ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 771.462152][T26064] RAX: ffffffffffffffda RBX: 00007fe0dae25fa0 RCX: 00007fe0dab9df99 [ 771.462168][T26064] RDX: 000000000000004c RSI: 0000200000000680 RDI: 0000000000000003 [ 771.462181][T26064] RBP: 00007fe0db9ad090 R08: 0000000000000000 R09: 0000000000000000 [ 771.462193][T26064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.462205][T26064] R13: 00007fe0dae26038 R14: 00007fe0dae25fa0 R15: 00007fff1f2ca448 [ 771.462239][T26064] [ 771.784075][T26068] netlink: 'syz.1.5164': attribute type 10 has an invalid length. [ 771.797602][T26068] team0: Port device dummy0 added [ 771.887709][T26067] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5164'. [ 771.900338][T26070] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 772.267817][T26093] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5169'. [ 772.341742][T26101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5172'. [ 772.355085][T26093] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5169'. [ 772.671227][T26115] FAULT_INJECTION: forcing a failure. [ 772.671227][T26115] name failslab, interval 1, probability 0, space 0, times 1 [ 772.701586][T26115] CPU: 0 UID: 0 PID: 26115 Comm: syz.1.5177 Not tainted syzkaller #0 PREEMPT(full) [ 772.701616][T26115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 772.701629][T26115] Call Trace: [ 772.701637][T26115] [ 772.701646][T26115] dump_stack_lvl+0xe8/0x150 [ 772.701685][T26115] should_fail_ex+0x40c/0x560 [ 772.701727][T26115] should_failslab+0xa8/0x100 [ 772.701790][T26115] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 772.701819][T26115] ? skb_clone+0x212/0x3a0 [ 772.701843][T26115] ? skb_clone+0x212/0x3a0 [ 772.701875][T26115] skb_clone+0x212/0x3a0 [ 772.701905][T26115] __netlink_deliver_tap+0x413/0x860 [ 772.701944][T26115] ? netlink_deliver_tap+0x2e/0x1b0 [ 772.701993][T26115] netlink_deliver_tap+0x19c/0x1b0 [ 772.702020][T26115] netlink_unicast+0x77f/0x940 [ 772.702055][T26115] netlink_sendmsg+0x813/0xb40 [ 772.702079][T26115] ? __fget_files+0x2a/0x420 [ 772.702119][T26115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 772.702149][T26115] ? aa_sock_msg_perm+0xf1/0x1b0 [ 772.702181][T26115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 772.702205][T26115] sock_sendmsg_nosec+0x13a/0x180 [ 772.702239][T26115] __sys_sendto+0x408/0x5a0 [ 772.702259][T26115] ? ksys_write+0x1e6/0x270 [ 772.702284][T26115] ? __pfx___sys_sendto+0x10/0x10 [ 772.702303][T26115] ? __mutex_unlock_slowpath+0x731/0x900 [ 772.702362][T26115] ? __pfx_ksys_write+0x10/0x10 [ 772.702390][T26115] __x64_sys_sendto+0xde/0x100 [ 772.702413][T26115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.702437][T26115] do_syscall_64+0x174/0x580 [ 772.702462][T26115] ? trace_irq_disable+0x3b/0x140 [ 772.702490][T26115] ? clear_bhb_loop+0x40/0x90 [ 772.702518][T26115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.702540][T26115] RIP: 0033:0x7f37d099df99 [ 772.702561][T26115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.702580][T26115] RSP: 002b:00007f37d192b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 772.702603][T26115] RAX: ffffffffffffffda RBX: 00007f37d0c25fa0 RCX: 00007f37d099df99 [ 772.702619][T26115] RDX: 000000000000004c RSI: 0000200000000680 RDI: 0000000000000003 [ 772.702634][T26115] RBP: 00007f37d192b090 R08: 0000000000000000 R09: 0000000000000000 [ 772.702647][T26115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.702660][T26115] R13: 00007f37d0c26038 R14: 00007f37d0c25fa0 R15: 00007ffe591198f8 [ 772.702695][T26115] [ 772.957550][T26114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 773.379143][T26142] gretap1: entered promiscuous mode [ 773.398103][T26142] batman_adv: batadv0: Adding interface: gretap1 [ 773.405385][T26142] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.455476][T26142] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 773.527372][T26140] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 773.666748][T26168] FAULT_INJECTION: forcing a failure. [ 773.666748][T26168] name failslab, interval 1, probability 0, space 0, times 0 [ 773.680567][T26168] CPU: 0 UID: 0 PID: 26168 Comm: syz.1.5192 Not tainted syzkaller #0 PREEMPT(full) [ 773.680597][T26168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 773.680610][T26168] Call Trace: [ 773.680619][T26168] [ 773.680628][T26168] dump_stack_lvl+0xe8/0x150 [ 773.680666][T26168] should_fail_ex+0x40c/0x560 [ 773.680700][T26168] should_failslab+0xa8/0x100 [ 773.680734][T26168] __kmalloc_cache_noprof+0xa8/0x660 [ 773.680766][T26168] ? __inet_diag_dump_start+0x90/0xbb0 [ 773.680912][T26168] ? __inet_diag_dump_start+0x90/0xbb0 [ 773.680955][T26168] __inet_diag_dump_start+0x90/0xbb0 [ 773.680990][T26168] ? netlink_lookup+0x30/0x200 [ 773.681014][T26168] ? netlink_lookup+0x30/0x200 [ 773.681044][T26168] __netlink_dump_start+0x442/0x7b0 [ 773.681075][T26168] inet_diag_rcv_msg_compat+0x214/0x420 [ 773.681117][T26168] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 773.681159][T26168] ? sock_diag_rcv_msg+0x184/0x5f0 [ 773.681252][T26168] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 773.681286][T26168] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 773.681306][T26168] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 773.681347][T26168] ? sock_diag_rcv_msg+0x184/0x5f0 [ 773.681391][T26168] sock_diag_rcv_msg+0x4b0/0x5f0 [ 773.681429][T26168] netlink_rcv_skb+0x226/0x4a0 [ 773.681455][T26168] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 773.681489][T26168] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 773.681529][T26168] ? netlink_deliver_tap+0x2e/0x1b0 [ 773.681552][T26168] ? netlink_deliver_tap+0x2e/0x1b0 [ 773.681583][T26168] netlink_unicast+0x7bb/0x940 [ 773.681616][T26168] netlink_sendmsg+0x813/0xb40 [ 773.681641][T26168] ? __fget_files+0x2a/0x420 [ 773.681681][T26168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 773.681711][T26168] ? aa_sock_msg_perm+0xf1/0x1b0 [ 773.681742][T26168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 773.681766][T26168] sock_sendmsg_nosec+0x13a/0x180 [ 773.681798][T26168] __sys_sendto+0x408/0x5a0 [ 773.681819][T26168] ? ksys_write+0x1e6/0x270 [ 773.681844][T26168] ? __pfx___sys_sendto+0x10/0x10 [ 773.681881][T26168] ? __mutex_unlock_slowpath+0x731/0x900 [ 773.681942][T26168] ? __pfx_ksys_write+0x10/0x10 [ 773.681970][T26168] __x64_sys_sendto+0xde/0x100 [ 773.681993][T26168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.682017][T26168] do_syscall_64+0x174/0x580 [ 773.682041][T26168] ? trace_irq_disable+0x3b/0x140 [ 773.682069][T26168] ? clear_bhb_loop+0x40/0x90 [ 773.682097][T26168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.682119][T26168] RIP: 0033:0x7f37d099df99 [ 773.682139][T26168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.682158][T26168] RSP: 002b:00007f37d192b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 773.682181][T26168] RAX: ffffffffffffffda RBX: 00007f37d0c25fa0 RCX: 00007f37d099df99 [ 773.682197][T26168] RDX: 000000000000004c RSI: 0000200000000680 RDI: 0000000000000003 [ 773.682211][T26168] RBP: 00007f37d192b090 R08: 0000000000000000 R09: 0000000000000000 [ 773.682224][T26168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.682236][T26168] R13: 00007f37d0c26038 R14: 00007f37d0c25fa0 R15: 00007ffe591198f8 [ 773.682272][T26168] [ 774.055922][T26175] netlink: 'syz.0.5194': attribute type 2 has an invalid length. [ 774.091663][T26179] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 774.336606][T26193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.348217][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.386586][T26193] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5200'. [ 774.602392][T26201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5201'. [ 774.926303][T26220] FAULT_INJECTION: forcing a failure. [ 774.926303][T26220] name failslab, interval 1, probability 0, space 0, times 0 [ 774.940245][T26220] CPU: 1 UID: 0 PID: 26220 Comm: syz.3.5207 Not tainted syzkaller #0 PREEMPT(full) [ 774.940283][T26220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 774.940295][T26220] Call Trace: [ 774.940304][T26220] [ 774.940313][T26220] dump_stack_lvl+0xe8/0x150 [ 774.940350][T26220] should_fail_ex+0x40c/0x560 [ 774.940382][T26220] should_failslab+0xa8/0x100 [ 774.940417][T26220] __kmalloc_cache_noprof+0xa8/0x660 [ 774.940447][T26220] ? __inet_diag_dump_start+0x90/0xbb0 [ 774.940479][T26220] ? __inet_diag_dump_start+0x90/0xbb0 [ 774.940523][T26220] __inet_diag_dump_start+0x90/0xbb0 [ 774.940556][T26220] ? netlink_lookup+0x30/0x200 [ 774.940578][T26220] ? netlink_lookup+0x30/0x200 [ 774.940607][T26220] __netlink_dump_start+0x442/0x7b0 [ 774.940656][T26220] inet_diag_rcv_msg_compat+0x214/0x420 [ 774.940694][T26220] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 774.940734][T26220] ? sock_diag_rcv_msg+0x184/0x5f0 [ 774.940767][T26220] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 774.940800][T26220] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 774.940819][T26220] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 774.940859][T26220] ? sock_diag_rcv_msg+0x184/0x5f0 [ 774.940895][T26220] sock_diag_rcv_msg+0x4b0/0x5f0 [ 774.940932][T26220] netlink_rcv_skb+0x226/0x4a0 [ 774.940958][T26220] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 774.940993][T26220] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 774.941032][T26220] ? netlink_deliver_tap+0x2e/0x1b0 [ 774.941056][T26220] ? netlink_deliver_tap+0x2e/0x1b0 [ 774.941084][T26220] netlink_unicast+0x7bb/0x940 [ 774.941118][T26220] netlink_sendmsg+0x813/0xb40 [ 774.941141][T26220] ? __fget_files+0x2a/0x420 [ 774.941181][T26220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 774.941211][T26220] ? aa_sock_msg_perm+0xf1/0x1b0 [ 774.941242][T26220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 774.941274][T26220] sock_sendmsg_nosec+0x13a/0x180 [ 774.941308][T26220] __sys_sendto+0x408/0x5a0 [ 774.941330][T26220] ? ksys_write+0x1e6/0x270 [ 774.941356][T26220] ? __pfx___sys_sendto+0x10/0x10 [ 774.941375][T26220] ? __mutex_unlock_slowpath+0x731/0x900 [ 774.941434][T26220] ? __pfx_ksys_write+0x10/0x10 [ 774.941462][T26220] __x64_sys_sendto+0xde/0x100 [ 774.941484][T26220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.941508][T26220] do_syscall_64+0x174/0x580 [ 774.941532][T26220] ? trace_irq_disable+0x3b/0x140 [ 774.941562][T26220] ? clear_bhb_loop+0x40/0x90 [ 774.941589][T26220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.941611][T26220] RIP: 0033:0x7fe46939df99 [ 774.941631][T26220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.941650][T26220] RSP: 002b:00007fe46a19b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 774.941673][T26220] RAX: ffffffffffffffda RBX: 00007fe469625fa0 RCX: 00007fe46939df99 [ 774.941689][T26220] RDX: 000000000000004c RSI: 0000200000000680 RDI: 0000000000000003 [ 774.941703][T26220] RBP: 00007fe46a19b090 R08: 0000000000000000 R09: 0000000000000000 [ 774.941716][T26220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.941729][T26220] R13: 00007fe469626038 R14: 00007fe469625fa0 R15: 00007ffe812ee388 [ 774.941781][T26220] [ 775.447955][T26231] netlink: 'syz.2.5206': attribute type 11 has an invalid length. [ 775.457019][T26231] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5206'. [ 777.648493][T26223] gre0: left allmulticast mode [ 777.702558][T26227] syzkaller0: entered promiscuous mode [ 777.717419][T26227] syzkaller0: entered allmulticast mode [ 777.921036][T26242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5212'. [ 777.930662][T26238] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5211'. [ 777.972064][T26242] xt_TCPMSS: Only works on TCP SYN packets [ 778.045869][T26253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5212'. [ 778.259517][T26270] FAULT_INJECTION: forcing a failure. [ 778.259517][T26270] name failslab, interval 1, probability 0, space 0, times 0 [ 778.275981][T26270] CPU: 1 UID: 0 PID: 26270 Comm: syz.2.5219 Not tainted syzkaller #0 PREEMPT(full) [ 778.276012][T26270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 778.276025][T26270] Call Trace: [ 778.276034][T26270] [ 778.276043][T26270] dump_stack_lvl+0xe8/0x150 [ 778.276089][T26270] should_fail_ex+0x40c/0x560 [ 778.276123][T26270] should_failslab+0xa8/0x100 [ 778.276159][T26270] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 778.276186][T26270] ? local_lock_release+0x9c/0x160 [ 778.276220][T26270] ? __alloc_skb+0x1d7/0x7a0 [ 778.276238][T26270] ? __alloc_skb+0x1d7/0x7a0 [ 778.276266][T26270] __alloc_skb+0x1d7/0x7a0 [ 778.276302][T26270] netlink_dump+0x1e7/0xee0 [ 778.276326][T26270] ? rcu_is_watching+0x15/0xb0 [ 778.276349][T26270] ? __kasan_kmalloc+0x93/0xb0 [ 778.276381][T26270] ? __kmalloc_cache_noprof+0x32d/0x660 [ 778.276428][T26270] ? __pfx_netlink_dump+0x10/0x10 [ 778.276449][T26270] ? __inet_diag_dump_start+0x90/0xbb0 [ 778.276496][T26270] ? netlink_lookup+0x30/0x200 [ 778.276519][T26270] ? netlink_lookup+0x30/0x200 [ 778.276550][T26270] __netlink_dump_start+0x589/0x7b0 [ 778.276581][T26270] inet_diag_rcv_msg_compat+0x214/0x420 [ 778.276620][T26270] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 778.276662][T26270] ? sock_diag_rcv_msg+0x184/0x5f0 [ 778.276696][T26270] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 778.276729][T26270] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 778.276749][T26270] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 778.276789][T26270] ? sock_diag_rcv_msg+0x184/0x5f0 [ 778.276826][T26270] sock_diag_rcv_msg+0x4b0/0x5f0 [ 778.276864][T26270] netlink_rcv_skb+0x226/0x4a0 [ 778.276890][T26270] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 778.276925][T26270] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 778.276965][T26270] ? netlink_deliver_tap+0x2e/0x1b0 [ 778.276989][T26270] ? netlink_deliver_tap+0x2e/0x1b0 [ 778.277020][T26270] netlink_unicast+0x7bb/0x940 [ 778.277054][T26270] netlink_sendmsg+0x813/0xb40 [ 778.277084][T26270] ? __fget_files+0x2a/0x420 [ 778.277124][T26270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.277154][T26270] ? aa_sock_msg_perm+0xf1/0x1b0 [ 778.277185][T26270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.277211][T26270] sock_sendmsg_nosec+0x13a/0x180 [ 778.277244][T26270] __sys_sendto+0x408/0x5a0 [ 778.277264][T26270] ? ksys_write+0x1e6/0x270 [ 778.277290][T26270] ? __pfx___sys_sendto+0x10/0x10 [ 778.277309][T26270] ? __mutex_unlock_slowpath+0x731/0x900 [ 778.277367][T26270] ? __pfx_ksys_write+0x10/0x10 [ 778.277396][T26270] __x64_sys_sendto+0xde/0x100 [ 778.277418][T26270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.277448][T26270] do_syscall_64+0x174/0x580 [ 778.277472][T26270] ? trace_irq_disable+0x3b/0x140 [ 778.277501][T26270] ? clear_bhb_loop+0x40/0x90 [ 778.277528][T26270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.277551][T26270] RIP: 0033:0x7f930c59df99 [ 778.277571][T26270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.277590][T26270] RSP: 002b:00007f930d3a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 778.277613][T26270] RAX: ffffffffffffffda RBX: 00007f930c825fa0 RCX: 00007f930c59df99 [ 778.277629][T26270] RDX: 000000000000004c RSI: 0000200000000680 RDI: 0000000000000003 [ 778.277643][T26270] RBP: 00007f930d3a1090 R08: 0000000000000000 R09: 0000000000000000 [ 778.277656][T26270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.277669][T26270] R13: 00007f930c826038 R14: 00007f930c825fa0 R15: 00007ffc92416548 [ 778.277704][T26270] [ 779.325501][T26316] xt_TCPMSS: Only works on TCP SYN packets [ 779.508179][T26325] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 779.574597][T26324] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 779.806263][T26350] netlink: 'syz.2.5241': attribute type 83 has an invalid length. [ 779.919985][T26356] xt_cgroup: path and classid specified [ 780.025890][T26364] IPVS: length: 224 != 8 [ 780.108632][T26370] FAULT_INJECTION: forcing a failure. [ 780.108632][T26370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.148671][T26374] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 780.157552][T26370] CPU: 1 UID: 0 PID: 26370 Comm: syz.1.5246 Not tainted syzkaller #0 PREEMPT(full) [ 780.157579][T26370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 780.157592][T26370] Call Trace: [ 780.157600][T26370] [ 780.157609][T26370] dump_stack_lvl+0xe8/0x150 [ 780.157646][T26370] should_fail_ex+0x40c/0x560 [ 780.157679][T26370] _copy_from_user+0x2d/0xb0 [ 780.157773][T26370] kstrtouint_from_user+0xd6/0x180 [ 780.157835][T26370] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 780.157883][T26370] proc_fail_nth_write+0x8e/0x210 [ 780.157923][T26370] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 780.157960][T26370] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 780.157991][T26370] vfs_write+0x296/0xba0 [ 780.158022][T26370] ? __pfx_vfs_write+0x10/0x10 [ 780.158045][T26370] ? __fget_files+0x2a/0x420 [ 780.158078][T26370] ? __fget_files+0x3a2/0x420 [ 780.158105][T26370] ? __fget_files+0x2a/0x420 [ 780.158143][T26370] ksys_write+0x150/0x270 [ 780.158161][T26370] ? __irq_exit_rcu+0xca/0x220 [ 780.158207][T26370] ? __pfx_ksys_write+0x10/0x10 [ 780.158225][T26370] ? handle_softirqs+0x70f/0x840 [ 780.158259][T26370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.158283][T26370] do_syscall_64+0x174/0x580 [ 780.158309][T26370] ? clear_bhb_loop+0x40/0x90 [ 780.158335][T26370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.158356][T26370] RIP: 0033:0x7f37d095e7ce [ 780.158376][T26370] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 780.158394][T26370] RSP: 002b:00007f37d192afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 780.158416][T26370] RAX: ffffffffffffffda RBX: 00007f37d192b6c0 RCX: 00007f37d095e7ce [ 780.158431][T26370] RDX: 0000000000000001 RSI: 00007f37d192b0a0 RDI: 0000000000000006 [ 780.158443][T26370] RBP: 00007f37d192b090 R08: 0000000000000000 R09: 0000000000000000 [ 780.158456][T26370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.158468][T26370] R13: 00007f37d0c26038 R14: 00007f37d0c25fa0 R15: 00007ffe591198f8 [ 780.158501][T26370] [ 780.482668][T26383] sctp: [Deprecated]: syz.1.5251 (pid 26383) Use of int in maxseg socket option. [ 780.482668][T26383] Use struct sctp_assoc_value instead [ 780.512684][T26381] bridge0: port 3(team0) entered blocking state [ 780.519187][T26381] bridge0: port 3(team0) entered listening state [ 780.525880][T26381] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.533120][T26381] bridge0: port 2(bridge_slave_1) entered listening state [ 780.540569][T26381] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.547842][T26381] bridge0: port 1(bridge_slave_0) entered listening state [ 780.633237][T26381] ip6t_srh: unknown srh invflags 4000 [ 780.675923][T26393] tipc: Enabling of bearer rejected, failed to enable media [ 780.738681][T26381] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5248'. [ 781.020706][T26416] netlink: 'syz.0.5259': attribute type 63 has an invalid length. [ 781.049611][T26417] netlink: 'syz.0.5259': attribute type 63 has an invalid length. [ 781.069736][T26413] netlink: 'syz.0.5259': attribute type 63 has an invalid length. [ 781.473128][T26443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5267'. [ 781.537367][T26446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5267'. [ 781.566294][T26446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5267'. [ 781.740000][T26448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5268'. [ 782.266610][T26474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5278'. [ 782.277447][T26474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5278'. [ 782.646337][T26492] netlink: 'syz.0.5282': attribute type 1 has an invalid length. [ 782.709415][T26492] 8021q: adding VLAN 0 to HW filter on device bond6 [ 782.947413][T26498] sctp: [Deprecated]: syz.0.5284 (pid 26498) Use of int in maxseg socket option. [ 782.947413][T26498] Use struct sctp_assoc_value instead [ 782.984256][T26498] __nla_validate_parse: 1 callbacks suppressed [ 782.984275][T26498] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5284'. [ 783.133323][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 783.490878][T26522] bridge0: left allmulticast mode [ 783.517322][T26522] xfrm0: left allmulticast mode [ 783.544666][T26522] ipvlan0: left allmulticast mode [ 783.549900][T26522] batadv_slave_1: left allmulticast mode [ 784.048615][T26529] syzkaller0: entered promiscuous mode [ 784.056795][T26529] syzkaller0: entered allmulticast mode [ 784.919042][T26456] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 785.159971][T26540] netlink: 'syz.1.5295': attribute type 1 has an invalid length. [ 785.186668][T26540] netlink: 200 bytes leftover after parsing attributes in process `syz.1.5295'. [ 785.391053][T26554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5297'. [ 785.538600][T26564] openvswitch: netlink: Message has 8 unknown bytes. [ 785.546200][T26564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 786.989317][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.999130][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.007597][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.015893][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.024232][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.032568][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.041001][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.049272][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.668240][T26576] syzkaller0: entered promiscuous mode [ 787.674496][T26576] syzkaller0: entered allmulticast mode [ 788.749744][T26624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5317'. [ 788.763737][T26625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5317'. [ 788.900444][T26632] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5319'. [ 788.916483][T26624] bond0: entered promiscuous mode [ 788.941642][T26624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.961857][T26632] mac80211_hwsim hwsim29 wlan1: entered promiscuous mode [ 789.284988][T26642] xt_cgroup: path and classid specified [ 789.443554][T26645] netlink: 'syz.2.5321': attribute type 2 has an invalid length. [ 790.184948][T26650] 8021q: adding VLAN 0 to HW filter on device macsec4 [ 790.218748][T26652] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5324'. [ 790.765786][T26684] bond0: Removing last ns target with arp_interval on [ 790.815226][T26685] bond8: Removing last ns target with arp_interval on [ 790.974723][T26700] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5338'. [ 790.991955][T26700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5338'. [ 791.142252][T26704] netlink: 'syz.0.5339': attribute type 1 has an invalid length. [ 791.185817][T26704] 8021q: adding VLAN 0 to HW filter on device bond7 [ 791.207447][T26704] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 791.287404][T26708] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5341'. [ 791.322637][T26708] netlink: 'syz.1.5341': attribute type 10 has an invalid length. [ 791.447291][T26719] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 791.706569][T26738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5348'. [ 791.737391][T26738] veth0_macvtap: left promiscuous mode [ 792.242156][T26760] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5352'. [ 792.388497][T26770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5353'. [ 792.415078][T26770] net_ratelimit: 6 callbacks suppressed [ 792.415097][T26770] openvswitch: netlink: Flow key attr not present in new flow. [ 792.792927][ T1601] block nbd0: Possible stuck request ffff88804f707000: control (read@0,4096B). Runtime 30 seconds [ 793.170575][T26812] netlink: 'syz.1.5362': attribute type 3 has an invalid length. [ 793.303171][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.311604][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.319999][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.328389][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.336841][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.345227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.353590][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.361929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.370311][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.648372][T26834] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 793.874430][T26851] __nla_validate_parse: 2 callbacks suppressed [ 793.874450][T26851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5372'. [ 793.916425][T26851] ipvlan2: entered allmulticast mode [ 793.921941][T26851] syz_tun: entered allmulticast mode [ 794.256598][T26863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5375'. [ 794.294319][T26867] netlink: 'syz.2.5376': attribute type 1 has an invalid length. [ 794.338989][T26867] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 794.342253][T26871] tipc: Enabled bearer , priority 0 [ 794.450168][T26871] syzkaller0: entered promiscuous mode [ 794.457284][T26871] syzkaller0: entered allmulticast mode [ 794.475136][T26871] tipc: Resetting bearer [ 794.499486][T26869] tipc: Resetting bearer [ 794.605208][T26878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5379'. [ 794.635513][T26878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5379'. [ 794.670452][T26878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5379'. [ 794.715793][T26878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5379'. [ 794.743977][T26878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5379'. [ 794.754139][T26878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5379'. [ 794.784676][T26878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5379'. [ 794.808134][T26878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5379'. [ 795.933166][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 795.940527][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 795.947867][ C0] bridge0: port 3(team0) entered learning state [ 797.558265][T26869] tipc: Disabling bearer [ 797.569315][T26894] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 797.585859][T22465] tipc: Node number set to 251658240 [ 797.619258][T26911] netlink: 'syz.0.5387': attribute type 9 has an invalid length. [ 798.112394][T26959] net_ratelimit: 8 callbacks suppressed [ 798.112414][T26959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 798.216432][T26963] vlan1: entered promiscuous mode [ 798.229837][T26963] macsec0: entered promiscuous mode [ 798.341395][T26974] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 798.804684][T26999] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 799.613336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.630918][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.639334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.647742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.656147][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.688463][T27053] netlink: 'syz.0.5420': attribute type 11 has an invalid length. [ 799.735302][T27053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 799.828744][T27059] syzkaller0: left promiscuous mode [ 799.844587][T27059] syzkaller0: left allmulticast mode [ 799.884717][T27056] __nla_validate_parse: 73 callbacks suppressed [ 799.884735][T27056] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5423'. [ 801.300997][T27113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5439'. [ 801.315737][T27116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5438'. [ 801.330813][T27117] netlink: 'syz.3.5440': attribute type 2 has an invalid length. [ 801.339101][T27117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5440'. [ 801.479240][T27123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5443'. [ 801.501416][T27123] netlink: 'syz.0.5443': attribute type 3 has an invalid length. [ 801.838446][T27145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5449'. [ 801.909214][T27148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5448'. [ 802.001749][T27154] x_tables: duplicate underflow at hook 1 [ 802.090846][T27160] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5453'. [ 802.111947][T27160] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5453'. [ 802.130317][T27157] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5452'. [ 802.701032][T27188] tipc: Enabling of bearer rejected, failed to enable media [ 802.813138][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.821492][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.829876][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.091980][T27217] x_tables: unsorted entry at hook 2 [ 803.420655][T27229] block nbd3: reconnected socket [ 803.426800][T27229] block nbd3: Unsupported socket: should be TCP or UNIX. [ 803.680349][ T5643] block nbd3: Receive control failed (result -32) [ 804.459602][T27295] gretap0: entered promiscuous mode [ 804.489034][T27295] 0ªî{X¹¦: renamed from gretap0 [ 804.517062][T27295] 0ªî{X¹¦: left promiscuous mode [ 804.525309][T27298] netlink: 'syz.2.5496': attribute type 10 has an invalid length. [ 804.533535][T27295] 0ªî{X¹¦: entered allmulticast mode [ 804.542627][T27295] net_ratelimit: 1 callbacks suppressed [ 804.542646][T27295] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 804.622650][T27298] team0: Port device geneve1 added [ 804.783671][T27314] netlink: 'syz.2.5501': attribute type 2 has an invalid length. [ 804.802519][T27314] netlink: 'syz.2.5501': attribute type 2 has an invalid length. [ 805.004721][T27331] __nla_validate_parse: 17 callbacks suppressed [ 805.004744][T27331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5504'. [ 805.220130][T27341] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5508'. [ 805.244259][T27343] netlink: 'syz.4.5507': attribute type 21 has an invalid length. [ 805.273946][T27343] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5507'. [ 805.300615][T27343] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5507'. [ 805.454942][T27352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5510'. [ 805.492388][T27352] netlink: 'syz.1.5510': attribute type 10 has an invalid length. [ 805.514256][T27352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5510'. [ 805.548837][T27352] geneve3: entered promiscuous mode [ 805.555213][T27352] geneve3: entered allmulticast mode [ 805.580004][T27354] syzkaller0: entered promiscuous mode [ 805.590727][T27356] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5512'. [ 805.594602][T27354] syzkaller0: entered allmulticast mode [ 805.780811][T27366] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5515'. [ 805.821261][T27371] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5515'. [ 805.933088][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.979686][T27374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5517'. [ 806.016194][T27375] sock: sock_timestamping_bind_phc: sock not bind to device [ 806.069702][T27375] sock: sock_timestamping_bind_phc: sock not bind to device [ 806.218044][T27393] netlink: 'syz.1.5521': attribute type 1 has an invalid length. [ 806.336642][T27403] openvswitch: netlink: Missing valid actions attribute. [ 806.357754][T27403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.217802][T27454] netlink: 'syz.3.5540': attribute type 1 has an invalid length. [ 807.326009][T27460] syzkaller0: entered promiscuous mode [ 807.336569][T27460] syzkaller0: entered allmulticast mode [ 807.369817][T27460] netlink: 'syz.2.5542': attribute type 1 has an invalid length. [ 807.416203][T27454] macvlan1: entered promiscuous mode [ 807.437133][T27454] macvlan1: entered allmulticast mode [ 807.461472][T27454] bond6: entered promiscuous mode [ 807.467965][T27468] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 807.497131][T27454] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 807.509496][T27454] bond6: left promiscuous mode [ 807.740167][T27477] xt_ecn: cannot match TCP bits for non-tcp packets [ 807.923374][T27481] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 808.279224][T27510] siw: device registration error -23 [ 809.053054][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.071100][T27498] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 811.296143][ C0] bridge0: port 3(team0) entered forwarding state [ 811.302631][ C0] bridge0: topology change detected, propagating [ 811.310929][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.318246][ C0] bridge0: topology change detected, propagating [ 811.324820][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.332072][ C0] bridge0: topology change detected, propagating [ 811.464642][T27541] bridge0: port 4(ipvlan0) entered blocking state [ 811.471414][T27544] __nla_validate_parse: 11 callbacks suppressed [ 811.471436][T27544] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5567'. [ 811.487701][T27541] bridge0: port 4(ipvlan0) entered disabled state [ 811.488015][T27541] ipvlan0: entered allmulticast mode [ 811.488035][T27541] bridge0: entered allmulticast mode [ 811.510496][T27541] ipvlan0: left allmulticast mode [ 811.536904][T27541] bridge0: left allmulticast mode [ 811.546486][T27544] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5567'. [ 811.605771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 811.618346][ C1] IPv6: bridge0: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected! [ 811.722642][T27552] netlink: 'syz.4.5569': attribute type 10 has an invalid length. [ 811.784327][T27552] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 811.815742][T27563] Cannot find del_set index 4 as target [ 811.904044][T27568] syzkaller0: entered promiscuous mode [ 811.921243][T27568] syzkaller0: entered allmulticast mode [ 812.149888][T27587] netlink: 216 bytes leftover after parsing attributes in process `syz.3.5577'. [ 812.173087][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.396342][T27594] openvswitch: netlink: IPv4 tunnel dst address is zero [ 812.404076][T27594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.432961][T27597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.444053][T27596] netlink: 'syz.0.5582': attribute type 1 has an invalid length. [ 812.495131][T27596] 8021q: adding VLAN 0 to HW filter on device bond8 [ 812.590599][T27596] bond8: (slave geneve5): making interface the new active one [ 812.604150][T27596] bond8: (slave geneve5): Enslaving as an active interface with an up link [ 812.705970][T27610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5586'. [ 812.725310][T27613] netlink: 'syz.0.5587': attribute type 10 has an invalid length. [ 812.763873][T27613] team0: Device veth0_macvtap failed to register rx_handler [ 813.087584][T27631] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5592'. [ 813.134031][T27630] IPv6: sit2: Disabled Multicast RS [ 813.226104][T27634] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5593'. [ 813.251912][T27635] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5593'. [ 813.520264][T27642] bond12: entered promiscuous mode [ 813.536803][T27642] bond12: entered allmulticast mode [ 813.551048][T27642] 8021q: adding VLAN 0 to HW filter on device bond12 [ 813.759380][T27648] syzkaller0: entered promiscuous mode [ 813.765528][T27648] syzkaller0: entered allmulticast mode [ 813.774744][T27658] netlink: 'syz.2.5600': attribute type 1 has an invalid length. [ 813.902436][T27658] 8021q: adding VLAN 0 to HW filter on device bond5 [ 814.044690][T27671] xt_SECMARK: invalid mode: 9 [ 814.051834][T27671] xt_SECMARK: invalid mode: 9 [ 814.057163][T27671] xt_SECMARK: invalid mode: 9 [ 814.062412][T27671] xt_SECMARK: invalid mode: 9 [ 814.068061][T27671] xt_SECMARK: invalid mode: 9 [ 814.074802][T27671] xt_SECMARK: invalid mode: 9 [ 814.079941][T27671] xt_SECMARK: invalid mode: 9 [ 814.085575][T27671] xt_SECMARK: invalid mode: 9 [ 814.090711][T27671] xt_SECMARK: invalid mode: 9 [ 814.100934][T27671] xt_SECMARK: invalid mode: 9 [ 814.391526][T27678] ip_tables: iptables: counters copy to user failed while replacing table [ 815.295873][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.304336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.312657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.693881][T27658] bond5: (slave veth7): Enslaving as an active interface with a down link [ 816.717830][T27667] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 816.725514][T27667] bond5: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 817.390039][T27722] tun0: tun_chr_ioctl cmd 1074025675 [ 817.398784][T27722] tun0: persist enabled [ 817.562290][T27738] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5619'. [ 818.022009][T27763] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 818.124521][T27770] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5629'. [ 818.162069][T27772] ipt_rpfilter: unknown options [ 818.405884][T27791] syzkaller0: entered promiscuous mode [ 818.411636][T27791] syzkaller0: entered allmulticast mode [ 818.413447][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.425616][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.434056][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.442394][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.450814][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.459208][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.467581][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.475981][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.484387][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.590488][T27798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5640'. [ 818.619125][T27794] bond9: option arp_all_targets: invalid value (18446744073709551613) [ 818.631314][T27794] bond9 (unregistering): Released all slaves [ 818.830332][T27808] netlink: 'syz.1.5642': attribute type 2 has an invalid length. [ 818.852140][T27808] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5642'. [ 818.994037][T27810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5642'. [ 819.091281][T27819] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5646'. [ 819.112659][T27815] tipc: Enabling of bearer rejected, media not registered [ 819.359238][T27831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5650'. [ 819.562671][T27841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5654'. [ 819.656498][T27849] netlink: 'syz.1.5653': attribute type 1 has an invalid length. [ 819.696388][T27848] netlink: 'syz.4.5656': attribute type 2 has an invalid length. [ 819.725463][T27848] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5656'. [ 819.787030][T27853] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5653'. [ 819.812558][T27849] bond9: entered promiscuous mode [ 819.820651][T27849] 8021q: adding VLAN 0 to HW filter on device bond9 [ 819.845146][T27848] : entered promiscuous mode [ 819.917481][T27855] netlink: 'syz.0.5657': attribute type 1 has an invalid length. [ 819.937886][T27842] bond9: (slave bridge4): making interface the new active one [ 819.963281][T27842] bridge4: entered promiscuous mode [ 819.972261][T27859] x_tables: duplicate underflow at hook 1 [ 819.979270][T27842] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 820.172670][T27855] 8021q: adding VLAN 0 to HW filter on device bond9 [ 820.466414][T27883] sctp: [Deprecated]: syz.1.5664 (pid 27883) Use of struct sctp_assoc_value in delayed_ack socket option. [ 820.466414][T27883] Use struct sctp_sack_info instead [ 820.508978][T27890] IPVS: set_ctl: invalid protocol: 2 100.1.1.0:20002 [ 821.711674][T27954] bridge5: entered promiscuous mode [ 821.732345][T27954] bridge5: entered allmulticast mode [ 821.747521][T27954] team0: Port device bridge5 added [ 821.756753][T27958] bridge0: port 4(team0) entered blocking state [ 821.784553][T27958] bridge0: port 4(team0) entered disabled state [ 821.810547][T27958] team0: entered allmulticast mode [ 821.828961][T27958] team_slave_1: entered allmulticast mode [ 821.857475][T27958] dummy0: entered allmulticast mode [ 821.878408][T27963] x_tables: duplicate underflow at hook 1 [ 821.900335][T27958] team0: entered promiscuous mode [ 821.914217][T27958] team_slave_1: entered promiscuous mode [ 821.926538][T27958] dummy0: entered promiscuous mode [ 822.062311][T27969] netlink: 'syz.1.5689': attribute type 1 has an invalid length. [ 822.126128][T27969] bond10: entered promiscuous mode [ 822.134163][T27969] 8021q: adding VLAN 0 to HW filter on device bond10 [ 822.342164][T27982] Cannot find add_set index 34 as target [ 822.506277][T27998] 8021q: adding VLAN 0 to HW filter on device bond6 [ 822.565964][T28001] netlink: 'syz.3.5695': attribute type 2 has an invalid length. [ 822.608082][T28009] sctp: [Deprecated]: syz.2.5697 (pid 28009) Use of int in maxseg socket option. [ 822.608082][T28009] Use struct sctp_assoc_value instead [ 822.814356][ T1601] block nbd0: Possible stuck request ffff88804f707000: control (read@0,4096B). Runtime 60 seconds [ 823.279129][ T4991] udevd[4991]: worker [25556] /devices/virtual/block/nbd0 is taking a long time [ 824.813379][ C1] net_ratelimit: 220 callbacks suppressed [ 824.813401][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.827546][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.835909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.844178][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.013150][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.021446][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.029776][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.038055][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.046388][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.213109][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.221432][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.229774][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.238158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.335344][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.343693][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.453109][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.461549][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.469932][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.478262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.486577][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.653155][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.661492][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.669850][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.678117][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.686441][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.853075][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.861386][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.869770][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.878085][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.886448][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.854605][T28039] __nla_validate_parse: 9 callbacks suppressed [ 846.854626][T28039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5702'. [ 846.988873][T28039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5702'. [ 847.022255][T28039] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 847.040427][T28045] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5705'. [ 847.053027][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.061442][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.069866][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.078269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.086688][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.244158][T28055] bond7: entered promiscuous mode [ 847.249345][T28055] bond7: entered allmulticast mode [ 847.255715][T28055] 8021q: adding VLAN 0 to HW filter on device bond7 [ 847.276430][T28051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5708'. [ 847.330709][T28070] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5711'. [ 847.466914][T28067] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.725300][T28088] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5716'. [ 847.735350][T28089] netlink: 'syz.2.5714': attribute type 8 has an invalid length. [ 848.038082][T28103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5720'. [ 848.069802][T28109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5721'. [ 848.116293][T28109] bridge_slave_0: default FDB implementation only supports local addresses [ 848.564155][T28133] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 848.584411][T28133] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 849.013433][T28159] tipc: Enabling of bearer rejected, failed to enable media [ 849.127294][T28171] syzkaller0: entered promiscuous mode [ 849.134288][T28171] syzkaller0: entered allmulticast mode [ 849.185529][T28173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5737'. [ 849.266604][T28180] netlink: 'syz.3.5739': attribute type 1 has an invalid length. [ 849.390534][T28180] bond9: entered promiscuous mode [ 849.402071][T28180] 8021q: adding VLAN 0 to HW filter on device bond9 [ 849.570451][T28189] 8021q: adding VLAN 0 to HW filter on device bond9 [ 849.582331][T28189] bond9: (slave ipip1): The slave device specified does not support setting the MAC address [ 849.594510][T28189] bond9: (slave ipip1): Setting fail_over_mac to active for active-backup mode [ 849.634836][T28203] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5741'. [ 849.646464][T28189] bond9: (slave ipip1): making interface the new active one [ 849.654643][T28189] ipip1: entered promiscuous mode [ 849.668956][T28189] bond9: (slave ipip1): Enslaving as an active interface with an up link [ 850.253975][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.262430][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.270821][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.274274][T28192] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 850.284087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.296110][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.304490][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 850.479204][T28232] netlink: 'syz.3.5750': attribute type 2 has an invalid length. [ 850.521560][T28232] : entered promiscuous mode [ 850.632209][T28250] bridge2: entered promiscuous mode [ 850.637968][T28250] bridge2: entered allmulticast mode [ 850.649772][T28250] netlink: 'syz.4.5755': attribute type 83 has an invalid length. [ 850.795643][T28253] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 850.824986][T28253] bond10 (unregistering): Released all slaves [ 851.233641][T28269] netlink: 'syz.3.5762': attribute type 1 has an invalid length. [ 851.273999][T28273] macvtap0: entered promiscuous mode [ 851.279669][T28273] macvtap0: entered allmulticast mode [ 851.287175][T28276] netlink: 'syz.3.5762': attribute type 10 has an invalid length. [ 851.299291][T28273] veth1_to_bridge: entered promiscuous mode [ 851.310264][T28273] veth1_to_bridge: entered allmulticast mode [ 851.321442][T28273] team0: Device macvtap0 failed to register rx_handler [ 851.335930][T28273] veth1_to_bridge: left allmulticast mode [ 851.344815][T28273] veth1_to_bridge: left promiscuous mode [ 851.382664][T28269] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 851.408223][T28274] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 851.457873][T28276] dummy0: entered promiscuous mode [ 851.657643][T28288] netlink: 'syz.4.5766': attribute type 1 has an invalid length. [ 851.809231][T28285] 8021q: adding VLAN 0 to HW filter on device bond10 [ 851.989372][T28292] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 852.057439][T28305] netlink: 'syz.2.5768': attribute type 11 has an invalid length. [ 852.070518][T28305] __nla_validate_parse: 6 callbacks suppressed [ 852.070540][T28305] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5768'. [ 852.122567][T28288] syzkaller0: entered promiscuous mode [ 852.130996][T28288] syzkaller0: entered allmulticast mode [ 852.255589][T28312] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5771'. [ 852.521779][T28326] netlink: 'syz.2.5776': attribute type 30 has an invalid length. [ 852.537217][T28326] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5776'. [ 852.899724][ T1601] block nbd0: Possible stuck request ffff88804f707000: control (read@0,4096B). Runtime 90 seconds [ 853.458170][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.466632][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.475098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.920509][T28318] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5773'. [ 854.946605][T28328] pim6reg: entered allmulticast mode [ 855.159607][T28352] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5780'. [ 856.238202][T28414] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5797'. [ 856.247488][T28414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5797'. [ 856.325753][T28415] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 856.573104][ C1] net_ratelimit: 1 callbacks suppressed [ 856.573124][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.587144][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.595531][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.603908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.612169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.773206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.955427][T16139] batadv0: left allmulticast mode [ 859.960636][T16139] batadv0: left promiscuous mode [ 859.966400][T16139] bridge0: port 4(batadv0) entered disabled state [ 859.975807][T16139] team0: left promiscuous mode [ 859.980602][T16139] team_slave_0: left promiscuous mode [ 859.987440][T16139] team_slave_1: left promiscuous mode [ 859.995125][T16139] bridge0: port 3(team0) entered disabled state [ 860.003913][T16139] bridge_slave_1: left allmulticast mode [ 860.009736][T16139] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.019294][T16139] bridge_slave_0: left allmulticast mode [ 860.026224][T16139] bridge_slave_0: left promiscuous mode [ 860.031966][T16139] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.064779][T16139] pim6reg: left allmulticast mode [ 860.070773][T16139] dvmrp0: left allmulticast mode [ 860.423113][T16139] team0: Port device bridge4 removed [ 860.441243][T16139] bond10 (unregistering): (slave bridge7): Releasing backup interface [ 860.451024][T16139] bond10 (unregistering): (slave bridge7): the permanent HWaddr of slave - ee:6e:b3:6e:83:53 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 860.476693][T16139] bond10 (unregistering): (slave bridge8): Releasing backup interface [ 860.496697][T16139]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.512603][T16139]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.524943][T16139]  (unregistering): (slave bond1): Releasing backup interface [ 860.542126][T16139]  (unregistering): Released all slaves [ 860.553871][T16139] bond1 (unregistering): Released all slaves [ 860.569851][T16139] bond2 (unregistering): Released all slaves [ 860.591246][T16139] bond0 (unregistering): Released all slaves [ 860.618426][T16139] bond3 (unregistering): Released all slaves [ 860.635636][T16139] bond4 (unregistering): Released all slaves [ 860.651540][T16139] bond5 (unregistering): Released all slaves [ 860.673351][T16139] bond6 (unregistering): Released all slaves [ 860.691721][T16139] bond7 (unregistering): Released all slaves [ 860.707810][T16139] bond8 (unregistering): Released all slaves [ 860.724160][T16139] bond9 (unregistering): Released all slaves [ 860.747915][T16139] bond10 (unregistering): Released all slaves [ 860.926516][T16139] : left promiscuous mode [ 860.990609][T16139] tipc: Left network mode [ 861.358799][T16139] veth1_vlan: left promiscuous mode [ 861.613378][T16139] team_slave_1 (unregistering): left allmulticast mode [ 861.621209][T16139] team0 (unregistering): Port device team_slave_1 removed [ 861.659973][T16139] team_slave_0 (unregistering): left allmulticast mode [ 861.667666][T16139] team0 (unregistering): Port device team_slave_0 removed [ 862.095553][T16139] IPVS: stop unused estimator thread 0... [ 862.893336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.901647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.909972][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.918252][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.926588][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 862.934861][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.093344][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.101637][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.109968][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.118262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.213261][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.221615][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.230022][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.238364][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.527675][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 870.539696][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 870.550074][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 870.560915][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 870.577111][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 870.596494][T22475] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 870.625743][T17807] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 870.635306][T17807] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 870.645736][T17807] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 870.655846][T17807] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 871.022133][T28432] lo speed is unknown, defaulting to 1000 [ 871.089347][T28434] lo speed is unknown, defaulting to 1000 [ 871.483012][T28432] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.492869][T28432] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.500508][T28432] bridge_slave_0: entered allmulticast mode [ 871.516666][T28432] bridge_slave_0: entered promiscuous mode [ 871.561134][T28432] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.570053][T28432] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.579596][T28432] bridge_slave_1: entered allmulticast mode [ 871.589473][T28432] bridge_slave_1: entered promiscuous mode [ 871.666037][T28434] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.674769][T28434] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.682090][T28434] bridge_slave_0: entered allmulticast mode [ 871.692511][T28434] bridge_slave_0: entered promiscuous mode [ 871.705177][T28432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.715635][T28434] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.725198][T28434] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.732583][T28434] bridge_slave_1: entered allmulticast mode [ 871.741359][T28434] bridge_slave_1: entered promiscuous mode [ 871.752130][T28432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.797020][T17807] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 871.808682][T17807] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 871.823352][T17807] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 871.832519][T17807] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 871.844257][T17807] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 871.866570][T28434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.883311][T28432] team0: Port device team_slave_0 added [ 871.894485][T28434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.935660][T28432] team0: Port device team_slave_1 added [ 871.939159][ T5643] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 871.958044][ T5643] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 871.967513][ T5643] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 871.975997][ T5643] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 871.987903][ T5643] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 872.075772][T28434] team0: Port device team_slave_0 added [ 872.082306][T28432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.091051][T28432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.119860][T28432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.136013][T28434] team0: Port device team_slave_1 added [ 872.158971][T28432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.166448][T28432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.222847][T28432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.298308][T28434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.306098][T28434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.332216][T28434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.343232][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.343476][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.343702][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.343936][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.344188][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 872.408213][T28434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.416669][T28434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.443111][T28434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.462230][T28432] hsr_slave_0: entered promiscuous mode [ 872.469598][T28432] hsr_slave_1: entered promiscuous mode [ 872.654059][T17807] Bluetooth: hci2: command tx timeout [ 872.680014][T28434] hsr_slave_0: entered promiscuous mode [ 872.696272][T28434] hsr_slave_1: entered promiscuous mode [ 872.706735][T28434] debugfs: 'hsr0' already exists in 'hsr' [ 872.712554][T28434] Cannot create hsr debugfs directory [ 872.733665][T17807] Bluetooth: hci6: command tx timeout [ 872.795934][ T5643] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 872.815630][ T5643] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 872.828948][ T5643] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 872.841218][ T5643] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 872.851044][ T5643] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 872.912414][T28469] lo speed is unknown, defaulting to 1000 [ 873.198940][T28471] lo speed is unknown, defaulting to 1000 [ 873.447937][T28488] lo speed is unknown, defaulting to 1000 [ 873.933345][ T5643] Bluetooth: hci7: command tx timeout [ 873.956295][T28469] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.964249][T28469] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.971988][T28469] bridge_slave_0: entered allmulticast mode [ 873.980313][T28469] bridge_slave_0: entered promiscuous mode [ 874.006136][T28469] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.013979][T28469] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.021468][T28469] bridge_slave_1: entered allmulticast mode [ 874.029781][T28469] bridge_slave_1: entered promiscuous mode [ 874.093004][ T5643] Bluetooth: hci8: command tx timeout [ 874.112062][T28471] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.119710][T28471] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.127180][T28471] bridge_slave_0: entered allmulticast mode [ 874.134982][T28471] bridge_slave_0: entered promiscuous mode [ 874.154208][T28469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.167390][T28469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.177669][T28471] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.185637][T28471] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.193220][T28471] bridge_slave_1: entered allmulticast mode [ 874.200757][T28471] bridge_slave_1: entered promiscuous mode [ 874.295656][T28469] team0: Port device team_slave_0 added [ 874.304802][T28471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.314203][T28488] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.321450][T28488] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.329439][T28488] bridge_slave_0: entered allmulticast mode [ 874.337454][T28488] bridge_slave_0: entered promiscuous mode [ 874.347112][T28488] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.355013][T28488] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.362315][T28488] bridge_slave_1: entered allmulticast mode [ 874.370861][T28488] bridge_slave_1: entered promiscuous mode [ 874.380597][T28469] team0: Port device team_slave_1 added [ 874.389798][T28471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.461120][T28488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.485178][T28471] team0: Port device team_slave_0 added [ 874.496362][T28488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.518218][T28469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.525414][T28469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.552080][T28469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.567292][T28471] team0: Port device team_slave_1 added [ 874.599963][T28469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.607515][T28469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.634455][T28469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.661164][T28488] team0: Port device team_slave_0 added [ 874.675750][T28471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.682779][T28471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.709144][T28471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.723283][T28488] team0: Port device team_slave_1 added [ 874.734360][ T5643] Bluetooth: hci2: command tx timeout [ 874.747262][T28471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.754609][T28471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.781243][T28471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.813320][ T5643] Bluetooth: hci6: command tx timeout [ 874.831547][T28488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.839219][T28488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.866361][T28488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.890969][T28488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.899204][ T5643] Bluetooth: hci9: command tx timeout [ 874.906579][T28488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.933948][T28488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.952024][T28469] hsr_slave_0: entered promiscuous mode [ 874.958861][T28469] hsr_slave_1: entered promiscuous mode [ 874.965601][T28469] debugfs: 'hsr0' already exists in 'hsr' [ 874.971334][T28469] Cannot create hsr debugfs directory [ 875.017808][T28471] hsr_slave_0: entered promiscuous mode [ 875.024650][T28471] hsr_slave_1: entered promiscuous mode [ 875.030851][T28471] debugfs: 'hsr0' already exists in 'hsr' [ 875.036830][T28471] Cannot create hsr debugfs directory [ 875.122329][T28488] hsr_slave_0: entered promiscuous mode [ 875.129233][T28488] hsr_slave_1: entered promiscuous mode [ 875.136082][T28488] debugfs: 'hsr0' already exists in 'hsr' [ 875.141850][T28488] Cannot create hsr debugfs directory [ 875.533208][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.541685][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.550117][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.558553][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.566881][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 876.013355][ T5643] Bluetooth: hci7: command tx timeout [ 876.173158][ T5643] Bluetooth: hci8: command tx timeout [ 876.813068][ T5643] Bluetooth: hci2: command tx timeout [ 876.893603][ T5643] Bluetooth: hci6: command tx timeout [ 876.973615][ T5643] Bluetooth: hci9: command tx timeout [ 878.093229][ T5643] Bluetooth: hci7: command tx timeout [ 878.252968][ T5643] Bluetooth: hci8: command tx timeout [ 878.733450][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.741777][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.750141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.758432][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.766781][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.894345][ T5643] Bluetooth: hci2: command tx timeout [ 878.973396][ T5643] Bluetooth: hci6: command tx timeout [ 879.053042][ T5643] Bluetooth: hci9: command tx timeout [ 880.172916][ T5643] Bluetooth: hci7: command tx timeout [ 880.333505][ T5643] Bluetooth: hci8: command tx timeout [ 881.133036][ T5643] Bluetooth: hci9: command tx timeout [ 881.933117][ C1] net_ratelimit: 2 callbacks suppressed [ 881.933137][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.947096][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.955393][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.963721][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.975609][ T1601] block nbd0: Possible stuck request ffff88804f707000: control (read@0,4096B). Runtime 120 seconds [ 885.133444][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.141743][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.150108][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.158378][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.166675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.333138][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.341423][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.349747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.358054][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 888.366429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.533136][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.541515][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.549908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.558283][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.566696][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.732949][ T5643] Bluetooth: hci3: command 0x0405 tx timeout [ 894.743079][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.751351][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.759684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.767956][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.776282][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 894.784564][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.933230][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.941532][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.949886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.053197][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.061578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.069981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.078328][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 901.086615][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.253195][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.261583][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.269946][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 904.278211][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.373099][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.381390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.389837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.398182][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 907.406671][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.573094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.581471][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.589901][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.598175][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 910.606494][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.053256][ T1601] block nbd0: Possible stuck request ffff88804f707000: control (read@0,4096B). Runtime 150 seconds [ 913.773273][ C1] net_ratelimit: 1 callbacks suppressed [ 913.773294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.787196][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.795473][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.893264][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.901624][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.910042][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.918340][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.926684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.935033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 920.093381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.373207][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 923.213354][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.221670][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.230002][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.238282][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.246624][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.413181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.421518][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.429908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.438190][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.446548][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.613368][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.621747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.630130][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 929.638483][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.579150][ T5643] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 930.593248][ T5643] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 930.604107][ T5643] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 930.614054][ T5643] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 930.625612][ T5643] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 930.647159][T28436] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 930.669776][ T5643] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 930.683659][ T5643] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 930.695084][ T5643] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 930.703454][ T5643] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 931.068404][T28530] lo speed is unknown, defaulting to 1000 [ 931.147952][T28532] lo speed is unknown, defaulting to 1000 [ 931.459469][T28530] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.466951][T28530] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.475950][T28530] bridge_slave_0: entered allmulticast mode [ 931.484965][T28530] bridge_slave_0: entered promiscuous mode [ 931.527983][T28530] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.540429][T28530] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.548961][T28530] bridge_slave_1: entered allmulticast mode [ 931.558241][T28530] bridge_slave_1: entered promiscuous mode [ 931.639144][T28530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.666561][T28530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.697077][ T5643] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 931.709240][ T5643] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 931.720432][ T5643] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 931.732120][ T5643] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 931.740591][ T5643] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 931.800137][T28532] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.807916][T28532] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.817027][T28532] bridge_slave_0: entered allmulticast mode [ 931.826138][T28532] bridge_slave_0: entered promiscuous mode [ 931.838502][T28532] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.846624][T28532] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.867351][T28532] bridge_slave_1: entered allmulticast mode [ 931.879655][T28532] bridge_slave_1: entered promiscuous mode [ 931.895406][T28530] team0: Port device team_slave_0 added [ 931.940476][T28530] team0: Port device team_slave_1 added [ 931.972594][T28532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 932.001956][T28532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.013593][T28530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.020917][T28530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.047286][T28530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.077225][T28530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.084297][T28530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.111368][T28530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.152001][T28532] team0: Port device team_slave_0 added [ 932.179523][T28532] team0: Port device team_slave_1 added [ 932.244284][T28530] hsr_slave_0: entered promiscuous mode [ 932.250794][T28530] hsr_slave_1: entered promiscuous mode [ 932.258282][T28530] debugfs: 'hsr0' already exists in 'hsr' [ 932.264561][T28530] Cannot create hsr debugfs directory [ 932.272355][T28532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.280416][T28532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.308030][T28532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.355313][T28532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.363312][T28532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.390559][T28532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.498911][T28532] hsr_slave_0: entered promiscuous mode [ 932.505922][T28532] hsr_slave_1: entered promiscuous mode [ 932.512391][T28532] debugfs: 'hsr0' already exists in 'hsr' [ 932.518302][T28532] Cannot create hsr debugfs directory [ 932.525569][T28565] lo speed is unknown, defaulting to 1000 [ 932.698769][T17807] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 932.713999][T17807] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 932.724465][T17807] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 932.732584][T17807] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 932.736457][T28436] Bluetooth: hci11: command tx timeout [ 932.740386][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.740824][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.762516][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.770929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.779336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.787829][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.796240][T28436] Bluetooth: hci10: command tx timeout [ 932.812609][T28436] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 933.366587][T28576] lo speed is unknown, defaulting to 1000 [ 933.369298][T28565] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.379787][T28565] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.387303][T28565] bridge_slave_0: entered allmulticast mode [ 933.395368][T28565] bridge_slave_0: entered promiscuous mode [ 933.422059][T28565] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.429603][T28565] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.437278][T28565] bridge_slave_1: entered allmulticast mode [ 933.444958][T28565] bridge_slave_1: entered promiscuous mode [ 933.512880][T28565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 933.543140][T28565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 933.604181][T28565] team0: Port device team_slave_0 added [ 933.622172][T28565] team0: Port device team_slave_1 added [ 933.717845][T28565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 933.725496][T28565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.752581][T28565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 933.779507][T28436] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 933.785007][T17807] Bluetooth: hci12: command tx timeout [ 933.805949][T28436] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 933.817364][T28436] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 933.831034][T28436] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 933.840198][T28436] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 933.917014][T28565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 933.935027][T28565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.961632][T28565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 934.107660][T28565] hsr_slave_0: entered promiscuous mode [ 934.114837][T28565] hsr_slave_1: entered promiscuous mode [ 934.121358][T28565] debugfs: 'hsr0' already exists in 'hsr' [ 934.127209][T28565] Cannot create hsr debugfs directory [ 934.457963][T28576] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.465412][T28576] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.472863][T28576] bridge_slave_0: entered allmulticast mode [ 934.480278][T28576] bridge_slave_0: entered promiscuous mode [ 934.518637][T28576] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.525979][T28576] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.533602][T28576] bridge_slave_1: entered allmulticast mode [ 934.540985][T28576] bridge_slave_1: entered promiscuous mode [ 934.623987][T28576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.642418][T28576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 934.665212][T28595] lo speed is unknown, defaulting to 1000 [ 934.719723][T28576] team0: Port device team_slave_0 added [ 934.745454][T28576] team0: Port device team_slave_1 added [ 934.809017][T28576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.816642][ T5643] Bluetooth: hci10: command tx timeout [ 934.817533][T28576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.822437][T28436] Bluetooth: hci11: command tx timeout [ 934.855211][T28576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.868492][T28576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 934.876404][T28576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.903106][T28436] Bluetooth: hci13: command tx timeout [ 934.913575][T28576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 934.991986][T28576] hsr_slave_0: entered promiscuous mode [ 934.998857][T28576] hsr_slave_1: entered promiscuous mode [ 935.005623][T28576] debugfs: 'hsr0' already exists in 'hsr' [ 935.011441][T28576] Cannot create hsr debugfs directory [ 935.446641][T28595] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.454007][T28595] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.461406][T28595] bridge_slave_0: entered allmulticast mode [ 935.469434][T28595] bridge_slave_0: entered promiscuous mode [ 935.478822][T28595] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.486194][T28595] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.493805][T28595] bridge_slave_1: entered allmulticast mode [ 935.501704][T28595] bridge_slave_1: entered promiscuous mode [ 935.547624][T28595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 935.560444][T28595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.609795][T28595] team0: Port device team_slave_0 added [ 935.618993][T28595] team0: Port device team_slave_1 added [ 935.652295][T28595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.660460][T28595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.687356][T28595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.703547][T28595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.710520][T28595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.737470][T28595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.796824][T28595] hsr_slave_0: entered promiscuous mode [ 935.805115][T28595] hsr_slave_1: entered promiscuous mode [ 935.812297][T28595] debugfs: 'hsr0' already exists in 'hsr' [ 935.818353][T28595] Cannot create hsr debugfs directory [ 935.863263][T28436] Bluetooth: hci12: command tx timeout [ 935.933557][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.934005][T28436] Bluetooth: hci14: command tx timeout [ 935.941876][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.942030][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.893412][T28436] Bluetooth: hci11: command tx timeout [ 936.893424][ T5643] Bluetooth: hci10: command tx timeout [ 936.973628][ T5643] Bluetooth: hci13: command tx timeout [ 937.934026][ T5643] Bluetooth: hci12: command tx timeout [ 938.013145][T28436] Bluetooth: hci14: command tx timeout [ 938.973788][ T5643] Bluetooth: hci11: command tx timeout [ 938.976832][T28436] Bluetooth: hci10: command tx timeout [ 939.053376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.061763][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.070163][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.078698][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 939.088557][T28436] Bluetooth: hci13: command tx timeout [ 940.013143][T28436] Bluetooth: hci12: command tx timeout [ 940.094542][T28436] Bluetooth: hci14: command tx timeout [ 941.136357][T28436] Bluetooth: hci13: command tx timeout [ 942.173537][T28436] Bluetooth: hci14: command tx timeout [ 943.133695][ T1601] block nbd0: Possible stuck request ffff88804f707000: control (read@0,4096B). Runtime 180 seconds [ 944.253297][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.261588][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.269946][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.278229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.360569][ T4991] udevd[4991]: worker [25556] /devices/virtual/block/nbd0 timeout; kill it [ 945.369753][ T4991] udevd[4991]: seq 27901 '/devices/virtual/block/nbd0' killed [ 950.093040][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.101481][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.109862][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.118267][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.853144][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.861458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.869844][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.878162][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.972954][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.981352][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.989785][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.998103][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.732978][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.741366][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.749807][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.758133][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.493017][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.501334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.509712][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.517992][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.213741][ T1601] block nbd0: Possible stuck request ffff88804f707000: control (read@0,4096B). Runtime 210 seconds [ 977.613224][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.621562][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.629924][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.638202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.372996][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.381359][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.389727][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.398039][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.132974][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.141257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.149573][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.157822][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.665195][ T5643] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 990.690134][ T5643] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 990.699388][T22475] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 990.709605][ T5643] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 990.723169][T22475] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 990.732114][ T5643] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 990.739885][T22475] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 990.751313][T22475] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 990.755695][ T5643] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 990.766876][ T5643] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 991.198788][T28627] lo speed is unknown, defaulting to 1000 [ 991.227433][T28629] lo speed is unknown, defaulting to 1000 [ 991.678158][T28627] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.686073][T28627] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.694544][T28627] bridge_slave_0: entered allmulticast mode [ 991.703277][T28627] bridge_slave_0: entered promiscuous mode [ 991.724749][T17807] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 991.746272][T17807] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 991.755099][T17807] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 991.762458][T28627] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.763385][T28627] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.763628][T28627] bridge_slave_1: entered allmulticast mode [ 991.770143][T28627] bridge_slave_1: entered promiscuous mode [ 991.792830][T17807] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 991.801375][T17807] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 991.862387][T28629] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.870089][T28629] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.877867][T28629] bridge_slave_0: entered allmulticast mode [ 991.886818][T28629] bridge_slave_0: entered promiscuous mode [ 991.911736][T28629] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.920528][T28629] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.928253][T28629] bridge_slave_1: entered allmulticast mode [ 991.938697][T28629] bridge_slave_1: entered promiscuous mode [ 991.949693][T28627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.980428][T28627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.042570][T28629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.056121][T28627] team0: Port device team_slave_0 added [ 992.066546][T28629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.095293][T28627] team0: Port device team_slave_1 added [ 992.137400][T28629] team0: Port device team_slave_0 added [ 992.157597][T28627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.164948][T28627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.192170][T28627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.206376][T28629] team0: Port device team_slave_1 added [ 992.229535][T28627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.236825][T28627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.264202][T28627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.307910][T28629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.315906][T28629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.342806][T28629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.373982][T28629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.381009][T28629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.408265][T28629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.464499][T28627] hsr_slave_0: entered promiscuous mode [ 992.471646][T28627] hsr_slave_1: entered promiscuous mode [ 992.479334][T28627] debugfs: 'hsr0' already exists in 'hsr' [ 992.486817][T28627] Cannot create hsr debugfs directory [ 992.550828][T28629] hsr_slave_0: entered promiscuous mode [ 992.558684][T28629] hsr_slave_1: entered promiscuous mode [ 992.566486][T28629] debugfs: 'hsr0' already exists in 'hsr' [ 992.572290][T28629] Cannot create hsr debugfs directory [ 992.710702][T28661] lo speed is unknown, defaulting to 1000 [ 992.766608][ T5643] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 992.786516][ T5643] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 992.795781][ T5643] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 992.804249][ T5643] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 992.813715][T28436] Bluetooth: hci15: command tx timeout [ 992.816047][T22475] Bluetooth: hci16: command tx timeout [ 992.831308][T22475] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 993.413414][T28661] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.422346][T28674] lo speed is unknown, defaulting to 1000 [ 993.425584][T28661] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.435683][T28661] bridge_slave_0: entered allmulticast mode [ 993.444681][T28661] bridge_slave_0: entered promiscuous mode [ 993.465112][T28661] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.472472][T28661] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.480789][T28661] bridge_slave_1: entered allmulticast mode [ 993.498221][T28661] bridge_slave_1: entered promiscuous mode [ 993.581886][T28661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.628442][T28661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.722347][T28661] team0: Port device team_slave_0 added [ 993.761061][T28661] team0: Port device team_slave_1 added [ 993.787695][T28680] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 993.799678][T28680] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 993.809498][T28680] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 993.820458][T28680] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 993.829956][T28680] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 993.865451][T28680] Bluetooth: hci17: command tx timeout [ 993.886587][T28661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.893848][T28661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.920925][T28661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.942114][T28661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.949544][T28661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.976528][T28661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.146691][T28661] hsr_slave_0: entered promiscuous mode [ 994.154878][T28661] hsr_slave_1: entered promiscuous mode [ 994.161142][T28661] debugfs: 'hsr0' already exists in 'hsr' [ 994.168578][T28661] Cannot create hsr debugfs directory [ 994.541029][T28674] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.549214][T28674] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.556804][T28674] bridge_slave_0: entered allmulticast mode [ 994.565216][T28674] bridge_slave_0: entered promiscuous mode [ 994.587644][T28674] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.596014][T28674] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.604183][T28674] bridge_slave_1: entered allmulticast mode [ 994.612241][T28674] bridge_slave_1: entered promiscuous mode [ 994.619640][T28695] lo speed is unknown, defaulting to 1000 [ 994.673955][T28674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 994.687504][T28674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 994.762325][T28674] team0: Port device team_slave_0 added [ 994.787243][T28674] team0: Port device team_slave_1 added [ 994.856359][T28674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 994.863917][T28674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.891203][T28674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 994.893323][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.910102][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.910283][T28680] Bluetooth: hci15: command tx timeout [ 994.919098][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.932063][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.941575][T28699] Bluetooth: hci16: command tx timeout [ 994.949298][T28680] Bluetooth: hci18: command tx timeout [ 994.958667][T28674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.968415][T28674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.998493][T28674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 995.110599][T28674] hsr_slave_0: entered promiscuous mode [ 995.118100][T28674] hsr_slave_1: entered promiscuous mode [ 995.124954][T28674] debugfs: 'hsr0' already exists in 'hsr' [ 995.130714][T28674] Cannot create hsr debugfs directory [ 995.136248][T28680] Bluetooth: hci2: command 0x0406 tx timeout [ 995.161197][T28680] Bluetooth: hci9: command 0x0406 tx timeout [ 995.167804][T28699] Bluetooth: hci7: command 0x0406 tx timeout [ 995.169077][T28682] Bluetooth: hci6: command 0x0406 tx timeout [ 995.180582][T28682] Bluetooth: hci8: command 0x0406 tx timeout [ 995.559409][T28695] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.579189][T28695] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.587130][T28695] bridge_slave_0: entered allmulticast mode [ 995.595278][T28695] bridge_slave_0: entered promiscuous mode [ 995.612096][T28695] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.620655][T28695] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.628523][T28695] bridge_slave_1: entered allmulticast mode [ 995.637162][T28695] bridge_slave_1: entered promiscuous mode [ 995.695098][T28695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.720274][T28695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.767507][T28695] team0: Port device team_slave_0 added [ 995.778223][T28695] team0: Port device team_slave_1 added [ 995.824001][T28695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.831036][T28695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.860713][T28695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 995.875479][T28695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 995.882461][T28695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.909232][T28695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 995.933248][ T5643] Bluetooth: hci17: command tx timeout [ 995.939327][T28436] Bluetooth: hci19: command tx timeout [ 995.995024][T28695] hsr_slave_0: entered promiscuous mode [ 996.001955][T28695] hsr_slave_1: entered promiscuous mode [ 996.009327][T28695] debugfs: 'hsr0' already exists in 'hsr' [ 996.016541][T28695] Cannot create hsr debugfs directory [ 996.973431][T28436] Bluetooth: hci18: command tx timeout [ 996.975451][ T5643] Bluetooth: hci16: command tx timeout [ 996.984936][ T5643] Bluetooth: hci15: command tx timeout [ 998.012935][T28436] Bluetooth: hci17: command tx timeout [ 998.018506][ T5643] Bluetooth: hci19: command tx timeout [ 999.055569][ T5643] Bluetooth: hci15: command tx timeout [ 999.056401][T22475] Bluetooth: hci16: command tx timeout [ 999.061410][T28436] Bluetooth: hci18: command tx timeout [ 1000.093854][T28436] Bluetooth: hci17: command tx timeout [ 1000.093868][T22475] Bluetooth: hci19: command tx timeout [ 1000.652995][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.661320][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.669755][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.678028][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.133000][T22475] Bluetooth: hci18: command tx timeout [ 1002.173106][T22475] Bluetooth: hci19: command tx timeout [ 1003.298067][ T31] INFO: task syz.0.5777:28339 blocked for more than 143 seconds. [ 1003.306572][ T31] Not tainted syzkaller #0 [ 1003.311593][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1003.320432][ T1601] block nbd0: Possible stuck request ffff88804f707000: control (read@0,4096B). Runtime 240 seconds [ 1003.322085][ T31] task:syz.0.5777 state:D stack:26016 pid:28339 tgid:28338 ppid:18253 task_flags:0x400140 flags:0x00080002 [ 1003.344206][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1003.347543][ T31] [ 1003.351022][ T31] __schedule+0x17d9/0x56c0 [ 1003.356893][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1003.361951][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1003.367695][ T31] ? unwind_next_frame+0x8f/0x2550 [ 1003.374194][ T31] ? __pfx___schedule+0x10/0x10 [ 1003.379171][ T31] ? schedule+0x90/0x2b0 [ 1003.383911][ T31] schedule+0x164/0x2b0 [ 1003.388189][ T31] schedule_preempt_disabled+0x13/0x30 [ 1003.394600][ T31] __mutex_lock+0x7bf/0x1550 [ 1003.399294][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1003.404923][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1003.409692][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1003.415585][ T31] ? stack_trace_save+0xa9/0x100 [ 1003.420625][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1003.426221][ T31] ? radix_tree_lookup+0x240/0x290 [ 1003.431524][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1003.437124][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1003.442256][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1003.447858][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1003.453539][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1003.458662][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1003.464883][ T31] ? down_read+0x2be/0x330 [ 1003.477951][ T31] genl_rcv+0x28/0x40 [ 1003.491340][ T31] netlink_unicast+0x7bb/0x940 [ 1003.507728][ T31] netlink_sendmsg+0x813/0xb40 [ 1003.526729][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1003.539612][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1003.544998][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1003.550372][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1003.563077][ T31] __sys_sendto+0x408/0x5a0 [ 1003.570481][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1003.576295][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 1003.581672][ T31] __x64_sys_sendto+0xde/0x100 [ 1003.587460][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.594095][ T31] do_syscall_64+0x174/0x580 [ 1003.598755][ T31] ? trace_irq_disable+0x3b/0x140 [ 1003.604264][ T31] ? clear_bhb_loop+0x40/0x90 [ 1003.609015][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.615968][ T31] RIP: 0033:0x7fe0dab5e7ce [ 1003.620459][ T31] RSP: 002b:00007fe0db9abe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1003.629378][ T31] RAX: ffffffffffffffda RBX: 00007fe0db9ad6c0 RCX: 00007fe0dab5e7ce [ 1003.637806][ T31] RDX: 0000000000000024 RSI: 00007fe0db9ac000 RDI: 0000000000000009 [ 1003.646862][ T31] RBP: 0000000000000000 R08: 00007fe0db9abf04 R09: 000000000000000c [ 1003.657253][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 1003.665884][ T31] R13: 00007fe0db9abf58 R14: 00007fe0db9ac000 R15: 0000000000000000 [ 1003.674141][ T31] [ 1003.677247][ T31] INFO: task syz.0.5777:28345 blocked for more than 143 seconds. [ 1003.685657][ T31] Not tainted syzkaller #0 [ 1003.690625][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1003.700526][ T31] task:syz.0.5777 state:D stack:26376 pid:28345 tgid:28338 ppid:18253 task_flags:0x480140 flags:0x00080002 [ 1003.713155][ T31] Call Trace: [ 1003.716504][ T31] [ 1003.719445][ T31] __schedule+0x17d9/0x56c0 [ 1003.724403][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1003.729404][ T31] ? __pfx___schedule+0x10/0x10 [ 1003.734696][ T31] ? schedule+0x90/0x2b0 [ 1003.739075][ T31] schedule+0x164/0x2b0 [ 1003.743576][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 1003.749280][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 1003.755728][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 1003.762170][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1003.768367][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 1003.775070][ T31] nbd_set_size+0x454/0x680 [ 1003.779747][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 1003.785216][ T31] ? nla_memcpy+0x5b/0xc0 [ 1003.789617][ T31] nbd_genl_reconfigure+0x7e9/0x1e80 [ 1003.795061][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1003.800816][ T31] ? rcu_is_watching+0x15/0xb0 [ 1003.805666][ T31] ? trace_kmalloc+0x2a/0xf0 [ 1003.810298][ T31] ? __kmalloc_noprof+0x396/0x720 [ 1003.815692][ T31] ? __nla_parse+0x40/0x60 [ 1003.820133][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1003.826564][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1003.833010][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 1003.838603][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1003.845081][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1003.850062][ T31] genl_rcv_msg+0x614/0x7a0 [ 1003.855159][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1003.860261][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1003.866095][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1003.870902][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1003.876556][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1003.881907][ T31] ? down_read+0x2be/0x330 [ 1003.886864][ T31] genl_rcv+0x28/0x40 [ 1003.890884][ T31] netlink_unicast+0x7bb/0x940 [ 1003.896055][ T31] netlink_sendmsg+0x813/0xb40 [ 1003.900891][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1003.906647][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1003.911638][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1003.917018][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1003.922109][ T31] ____sys_sendmsg+0x54e/0x850 [ 1003.926996][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1003.932341][ T31] ? import_iovec+0x73/0xa0 [ 1003.937587][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1003.942359][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1003.947502][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1003.952769][ T31] ? futex_wake+0x51b/0x5f0 [ 1003.957346][ T31] ? __fget_files+0x2a/0x420 [ 1003.961983][ T31] ? __fget_files+0x3a2/0x420 [ 1003.967344][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1003.972378][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1003.978058][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.984271][ T31] do_syscall_64+0x174/0x580 [ 1003.988934][ T31] ? trace_irq_disable+0x3b/0x140 [ 1003.994365][ T31] ? clear_bhb_loop+0x40/0x90 [ 1003.999126][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.005123][ T31] RIP: 0033:0x7fe0dab9df99 [ 1004.009592][ T31] RSP: 002b:00007fe0db98c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1004.018173][ T31] RAX: ffffffffffffffda RBX: 00007fe0dae26090 RCX: 00007fe0dab9df99 [ 1004.026504][ T31] RDX: 0000000000008090 RSI: 00002000000002c0 RDI: 000000000000000a [ 1004.034604][ T31] RBP: 00007fe0dac34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 1004.042603][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1004.050714][ T31] R13: 00007fe0dae26128 R14: 00007fe0dae26090 R15: 00007fff1f2ca448 [ 1004.059105][ T31] [ 1004.062175][ T31] INFO: task syz.0.5777:28354 blocked for more than 144 seconds. [ 1004.070007][ T31] Not tainted syzkaller #0 [ 1004.075266][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1004.084391][ T31] task:syz.0.5777 state:D stack:28480 pid:28354 tgid:28338 ppid:18253 task_flags:0x400040 flags:0x00080002 [ 1004.096486][ T31] Call Trace: [ 1004.099802][ T31] [ 1004.102813][ T31] __schedule+0x17d9/0x56c0 [ 1004.107361][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1004.112354][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1004.117756][ T31] ? unwind_next_frame+0x8f/0x2550 [ 1004.123004][ T31] ? __pfx___schedule+0x10/0x10 [ 1004.127898][ T31] ? schedule+0x90/0x2b0 [ 1004.132157][ T31] schedule+0x164/0x2b0 [ 1004.136572][ T31] schedule_preempt_disabled+0x13/0x30 [ 1004.142074][ T31] __mutex_lock+0x7bf/0x1550 [ 1004.147043][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1004.151836][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1004.156621][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1004.161687][ T31] ? stack_trace_save+0xa9/0x100 [ 1004.166752][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1004.171735][ T31] ? radix_tree_lookup+0x240/0x290 [ 1004.177316][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1004.181878][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1004.187234][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1004.192297][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1004.197174][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1004.202220][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1004.207969][ T31] ? down_read+0x2be/0x330 [ 1004.212437][ T31] genl_rcv+0x28/0x40 [ 1004.216562][ T31] netlink_unicast+0x7bb/0x940 [ 1004.221375][ T31] netlink_sendmsg+0x813/0xb40 [ 1004.226253][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1004.231585][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1004.236961][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1004.242288][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1004.247405][ T31] __sys_sendto+0x408/0x5a0 [ 1004.251944][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1004.257146][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 1004.262557][ T31] __x64_sys_sendto+0xde/0x100 [ 1004.267767][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.273961][ T31] do_syscall_64+0x174/0x580 [ 1004.278588][ T31] ? trace_irq_disable+0x3b/0x140 [ 1004.283735][ T31] ? clear_bhb_loop+0x40/0x90 [ 1004.288457][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.295007][ T31] RIP: 0033:0x7fe0dab5e7ce [ 1004.299484][ T31] RSP: 002b:00007fe0d8df4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1004.308000][ T31] RAX: ffffffffffffffda RBX: 00007fe0d8df66c0 RCX: 00007fe0dab5e7ce [ 1004.316029][ T31] RDX: 0000000000000024 RSI: 00007fe0d8df5000 RDI: 0000000000000009 [ 1004.324357][ T31] RBP: 0000000000000000 R08: 00007fe0d8df4f04 R09: 000000000000000c [ 1004.332372][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 1004.340581][ T31] R13: 00007fe0d8df4f58 R14: 00007fe0d8df5000 R15: 0000000000000000 [ 1004.348716][ T31] [ 1004.351794][ T31] INFO: task syz.2.5784:28370 blocked for more than 144 seconds. [ 1004.365683][ T31] Not tainted syzkaller #0 [ 1004.370712][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1004.380654][ T31] task:syz.2.5784 state:D stack:27872 pid:28370 tgid:28367 ppid:17304 task_flags:0x400040 flags:0x00080002 [ 1004.393200][ T31] Call Trace: [ 1004.396545][ T31] [ 1004.399494][ T31] __schedule+0x17d9/0x56c0 [ 1004.404323][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1004.409352][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1004.414628][ T31] ? __pfx___schedule+0x10/0x10 [ 1004.419547][ T31] ? schedule+0x90/0x2b0 [ 1004.428039][ T31] schedule+0x164/0x2b0 [ 1004.432259][ T31] schedule_preempt_disabled+0x13/0x30 [ 1004.437978][ T31] __mutex_lock+0x7bf/0x1550 [ 1004.442963][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1004.447797][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1004.452498][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1004.458079][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 1004.463423][ T31] ? radix_tree_lookup+0x240/0x290 [ 1004.468598][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1004.473249][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1004.478348][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1004.484334][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1004.489180][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1004.494449][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1004.499804][ T31] ? down_read+0x2be/0x330 [ 1004.504372][ T31] genl_rcv+0x28/0x40 [ 1004.508423][ T31] netlink_unicast+0x7bb/0x940 [ 1004.513864][ T31] netlink_sendmsg+0x813/0xb40 [ 1004.518725][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1004.524196][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1004.529220][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1004.534717][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1004.539819][ T31] __sys_sendto+0x408/0x5a0 [ 1004.544922][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1004.550039][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 1004.555649][ T31] __x64_sys_sendto+0xde/0x100 [ 1004.560478][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.566644][ T31] do_syscall_64+0x174/0x580 [ 1004.571283][ T31] ? trace_irq_disable+0x3b/0x140 [ 1004.577304][ T31] ? clear_bhb_loop+0x40/0x90 [ 1004.582097][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.588145][ T31] RIP: 0033:0x7f930c55e7ce [ 1004.593456][ T31] RSP: 002b:00007f930d37ee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1004.602207][ T31] RAX: ffffffffffffffda RBX: 00007f930d3806c0 RCX: 00007f930c55e7ce [ 1004.610643][ T31] RDX: 0000000000000020 RSI: 00007f930d37f000 RDI: 0000000000000006 [ 1004.618793][ T31] RBP: 0000000000000000 R08: 00007f930d37ef04 R09: 000000000000000c [ 1004.627030][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1004.635410][ T31] R13: 00007f930d37ef58 R14: 00007f930d37f000 R15: 0000000000000000 [ 1004.643502][ T31] [ 1004.646596][ T31] INFO: task syz.3.5790:28385 blocked for more than 144 seconds. [ 1004.657026][ T31] Not tainted syzkaller #0 [ 1004.662033][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1004.671120][ T31] task:syz.3.5790 state:D stack:26536 pid:28385 tgid:28384 ppid:19430 task_flags:0x400140 flags:0x00080002 [ 1004.683263][ T31] Call Trace: [ 1004.686595][ T31] [ 1004.689535][ T31] __schedule+0x17d9/0x56c0 [ 1004.694539][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1004.699561][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1004.705330][ T31] ? __pfx___schedule+0x10/0x10 [ 1004.710274][ T31] ? schedule+0x90/0x2b0 [ 1004.714702][ T31] schedule+0x164/0x2b0 [ 1004.718927][ T31] schedule_preempt_disabled+0x13/0x30 [ 1004.724932][ T31] __mutex_lock+0x7bf/0x1550 [ 1004.729576][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1004.735102][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1004.739872][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1004.745165][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 1004.750362][ T31] ? radix_tree_lookup+0x240/0x290 [ 1004.755977][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1004.760528][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1004.765808][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1004.771255][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1004.776372][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1004.781476][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1004.787560][ T31] ? down_read+0x2be/0x330 [ 1004.792047][ T31] genl_rcv+0x28/0x40 [ 1004.796291][ T31] netlink_unicast+0x7bb/0x940 [ 1004.801144][ T31] netlink_sendmsg+0x813/0xb40 [ 1004.806109][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1004.811461][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1004.817077][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1004.822444][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1004.827701][ T31] __sys_sendto+0x408/0x5a0 [ 1004.832271][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1004.837450][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 1004.843261][ T31] __x64_sys_sendto+0xde/0x100 [ 1004.848085][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.854499][ T31] do_syscall_64+0x174/0x580 [ 1004.859153][ T31] ? trace_irq_disable+0x3b/0x140 [ 1004.864390][ T31] ? clear_bhb_loop+0x40/0x90 [ 1004.869151][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.875569][ T31] RIP: 0033:0x7fe46935e7ce [ 1004.880039][ T31] RSP: 002b:00007fe46a199e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1004.888673][ T31] RAX: ffffffffffffffda RBX: 00007fe46a19b6c0 RCX: 00007fe46935e7ce [ 1004.897194][ T31] RDX: 0000000000000020 RSI: 00007fe46a19a000 RDI: 0000000000000006 [ 1004.905813][ T31] RBP: 0000000000000000 R08: 00007fe46a199f04 R09: 000000000000000c [ 1004.913944][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1004.922097][ T31] R13: 00007fe46a199f58 R14: 00007fe46a19a000 R15: 0000000000000000 [ 1004.930306][ T31] [ 1004.933887][ T31] INFO: task syz.4.5797:28414 blocked for more than 145 seconds. [ 1004.941667][ T31] Not tainted syzkaller #0 [ 1004.947573][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1004.957126][ T31] task:syz.4.5797 state:D stack:25288 pid:28414 tgid:28413 ppid:18996 task_flags:0x400140 flags:0x00080002 [ 1004.969545][ T31] Call Trace: [ 1004.973079][ T31] [ 1004.976081][ T31] __schedule+0x17d9/0x56c0 [ 1004.980632][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1004.985704][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1004.990725][ T31] ? __pfx___schedule+0x10/0x10 [ 1004.996279][ T31] ? schedule+0x90/0x2b0 [ 1005.000580][ T31] schedule+0x164/0x2b0 [ 1005.005077][ T31] schedule_preempt_disabled+0x13/0x30 [ 1005.010586][ T31] __mutex_lock+0x7bf/0x1550 [ 1005.015565][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1005.020398][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1005.025615][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1005.030703][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 1005.036085][ T31] ? radix_tree_lookup+0x240/0x290 [ 1005.041296][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1005.045985][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1005.051087][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1005.057364][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1005.062188][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1005.068277][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1005.073723][ T31] ? down_read+0x2be/0x330 [ 1005.078240][ T31] genl_rcv+0x28/0x40 [ 1005.082240][ T31] netlink_unicast+0x7bb/0x940 [ 1005.087103][ T31] netlink_sendmsg+0x813/0xb40 [ 1005.091912][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1005.097610][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1005.102587][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1005.107957][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1005.113113][ T31] __sys_sendto+0x408/0x5a0 [ 1005.117673][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1005.123286][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 1005.128637][ T31] __x64_sys_sendto+0xde/0x100 [ 1005.133662][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.139797][ T31] do_syscall_64+0x174/0x580 [ 1005.144482][ T31] ? trace_irq_disable+0x3b/0x140 [ 1005.149549][ T31] ? clear_bhb_loop+0x40/0x90 [ 1005.155195][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.161154][ T31] RIP: 0033:0x7f5f8815e7ce [ 1005.165708][ T31] RSP: 002b:00007f5f8914ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1005.174517][ T31] RAX: ffffffffffffffda RBX: 00007f5f8914e6c0 RCX: 00007f5f8815e7ce [ 1005.182553][ T31] RDX: 0000000000000024 RSI: 00007f5f8914d000 RDI: 0000000000000006 [ 1005.190967][ T31] RBP: 0000000000000000 R08: 00007f5f8914cf04 R09: 000000000000000c [ 1005.199129][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1005.207182][ T31] R13: 00007f5f8914cf58 R14: 00007f5f8914d000 R15: 0000000000000000 [ 1005.215917][ T31] [ 1005.219074][ T31] INFO: task syz.1.5800:28425 blocked for more than 145 seconds. [ 1005.227210][ T31] Not tainted syzkaller #0 [ 1005.232161][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1005.241063][ T31] task:syz.1.5800 state:D stack:27872 pid:28425 tgid:28423 ppid:17806 task_flags:0x400140 flags:0x00080002 [ 1005.253465][ T31] Call Trace: [ 1005.256799][ T31] [ 1005.259768][ T31] __schedule+0x17d9/0x56c0 [ 1005.264405][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1005.269390][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1005.274445][ T31] ? __pfx___schedule+0x10/0x10 [ 1005.279339][ T31] ? schedule+0x90/0x2b0 [ 1005.284252][ T31] schedule+0x164/0x2b0 [ 1005.288473][ T31] schedule_preempt_disabled+0x13/0x30 [ 1005.294551][ T31] __mutex_lock+0x7bf/0x1550 [ 1005.299211][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1005.304065][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1005.308800][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1005.314207][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 1005.319353][ T31] ? radix_tree_lookup+0x240/0x290 [ 1005.324578][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1005.329131][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1005.334348][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1005.339796][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1005.344960][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1005.350032][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1005.355428][ T31] ? down_read+0x2be/0x330 [ 1005.359888][ T31] genl_rcv+0x28/0x40 [ 1005.363993][ T31] netlink_unicast+0x7bb/0x940 [ 1005.368814][ T31] netlink_sendmsg+0x813/0xb40 [ 1005.374085][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1005.379440][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1005.384510][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1005.389838][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1005.395187][ T31] __sys_sendto+0x408/0x5a0 [ 1005.399763][ T31] ? lapic_next_event+0x11/0x20 [ 1005.405019][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1005.410099][ T31] ? irqentry_exit+0x218/0x8f0 [ 1005.415049][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.421190][ T31] __x64_sys_sendto+0xde/0x100 [ 1005.426076][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.432174][ T31] do_syscall_64+0x174/0x580 [ 1005.437144][ T31] ? trace_irq_disable+0x3b/0x140 [ 1005.442188][ T31] ? clear_bhb_loop+0x40/0x90 [ 1005.446991][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.453289][ T31] RIP: 0033:0x7f37d095e7ce [ 1005.457772][ T31] RSP: 002b:00007f37d1908e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1005.466597][ T31] RAX: ffffffffffffffda RBX: 00007f37d190a6c0 RCX: 00007f37d095e7ce [ 1005.474701][ T31] RDX: 0000000000000020 RSI: 00007f37d1909000 RDI: 0000000000000008 [ 1005.482794][ T31] RBP: 0000000000000000 R08: 00007f37d1908f04 R09: 000000000000000c [ 1005.490806][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1005.499269][ T31] R13: 00007f37d1908f58 R14: 00007f37d1909000 R15: 0000000000000000 [ 1005.507585][ T31] [ 1005.510702][ T31] INFO: task syz.1.5800:28428 blocked for more than 145 seconds. [ 1005.519130][ T31] Not tainted syzkaller #0 [ 1005.524297][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1005.533893][ T31] task:syz.1.5800 state:D stack:27872 pid:28428 tgid:28423 ppid:17806 task_flags:0x400040 flags:0x00080002 [ 1005.546023][ T31] Call Trace: [ 1005.549378][ T31] [ 1005.552353][ T31] __schedule+0x17d9/0x56c0 [ 1005.557049][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1005.562053][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1005.567422][ T31] ? __pfx___schedule+0x10/0x10 [ 1005.572320][ T31] ? schedule+0x90/0x2b0 [ 1005.576699][ T31] schedule+0x164/0x2b0 [ 1005.580921][ T31] schedule_preempt_disabled+0x13/0x30 [ 1005.586473][ T31] __mutex_lock+0x7bf/0x1550 [ 1005.591102][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1005.596322][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1005.601193][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1005.606348][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 1005.611499][ T31] ? radix_tree_lookup+0x240/0x290 [ 1005.617127][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1005.621718][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1005.627231][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1005.632729][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1005.637526][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1005.642563][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1005.647961][ T31] ? down_read+0x2be/0x330 [ 1005.652426][ T31] genl_rcv+0x28/0x40 [ 1005.656827][ T31] netlink_unicast+0x7bb/0x940 [ 1005.661647][ T31] netlink_sendmsg+0x813/0xb40 [ 1005.666529][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1005.671851][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1005.676901][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1005.682226][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1005.687636][ T31] __sys_sendto+0x408/0x5a0 [ 1005.692163][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1005.697627][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.697861][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.698066][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.698274][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.731799][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 1005.737235][ T31] __x64_sys_sendto+0xde/0x100 [ 1005.742037][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.748497][ T31] do_syscall_64+0x174/0x580 [ 1005.753179][ T31] ? trace_irq_disable+0x3b/0x140 [ 1005.758271][ T31] ? clear_bhb_loop+0x40/0x90 [ 1005.763030][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.768960][ T31] RIP: 0033:0x7f37d095e7ce [ 1005.774579][ T31] RSP: 002b:00007f37d18e7e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1005.783097][ T31] RAX: ffffffffffffffda RBX: 00007f37d18e96c0 RCX: 00007f37d095e7ce [ 1005.791116][ T31] RDX: 0000000000000020 RSI: 00007f37d18e8000 RDI: 0000000000000008 [ 1005.799202][ T31] RBP: 0000000000000000 R08: 00007f37d18e7f04 R09: 000000000000000c [ 1005.807552][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 1005.815638][ T31] R13: 00007f37d18e7f58 R14: 00007f37d18e8000 R15: 0000000000000000 [ 1005.823722][ T31] [ 1005.826879][ T31] [ 1005.826879][ T31] Showing all locks held in the system: [ 1005.835495][ T31] 1 lock held by khungtaskd/31: [ 1005.840394][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1005.850406][ T31] 2 locks held by getty/5379: [ 1005.855967][ T31] #0: ffff888035b470a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1005.866237][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1005.876493][ T31] 1 lock held by udevd/25556: [ 1005.881210][ T31] #0: ffff888053235350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1005.890596][ T31] 2 locks held by syz.0.5777/28339: [ 1005.896186][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1005.904520][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1005.913623][ T31] 6 locks held by syz.0.5777/28345: [ 1005.918850][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1005.928490][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1005.938415][ T31] #2: ffff88807fdba260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4bc/0x1e80 [ 1005.949162][ T31] #3: ffff88802a13f658 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 1005.958994][ T31] #4: ffff88802a13f020 (&q->q_usage_counter(io)#69){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 1005.971169][ T31] #5: ffff88802a13f058 (&q->q_usage_counter(queue)#52){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 1005.983974][ T31] 2 locks held by syz.0.5777/28354: [ 1005.989219][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1005.997477][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1006.006621][ T31] 2 locks held by syz.2.5784/28370: [ 1006.011850][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1006.020527][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1006.029689][ T31] 2 locks held by syz.3.5790/28385: [ 1006.034978][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1006.043897][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1006.053247][ T31] 2 locks held by syz.4.5797/28414: [ 1006.058512][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1006.066817][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1006.076080][ T31] 2 locks held by syz.1.5800/28425: [ 1006.081279][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1006.089566][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1006.098702][ T31] 2 locks held by syz.1.5800/28428: [ 1006.104305][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1006.112517][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1006.121592][ T31] 2 locks held by syz-executor/28432: [ 1006.127030][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1006.135599][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1006.144667][ T31] 2 locks held by syz-executor/28434: [ 1006.150059][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1006.158694][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1006.168225][ T31] 2 locks held by syz-executor/28469: [ 1006.173683][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1006.181940][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1006.191084][ T31] 2 locks held by syz-executor/28471: [ 1006.196879][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1006.205451][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1006.214590][ T31] 2 locks held by syz-executor/28488: [ 1006.219985][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1006.228579][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1006.237672][ T31] 2 locks held by syz-executor/28530: [ 1006.243106][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1006.251314][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1006.260759][ T31] 2 locks held by syz-executor/28532: [ 1006.266235][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1006.274754][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1006.284054][ T31] 2 locks held by syz-executor/28565: [ 1006.289427][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1006.297711][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1006.306781][ T31] 2 locks held by syz-executor/28576: [ 1006.312153][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1006.320747][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1006.329854][ T31] 2 locks held by syz-executor/28595: [ 1006.335449][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1006.344004][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1006.353085][ T31] 2 locks held by syz-executor/28627: [ 1006.358492][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1006.366773][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1006.376066][ T31] 2 locks held by syz-executor/28629: [ 1006.381527][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1006.390087][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1006.399242][ T31] 2 locks held by syz-executor/28661: [ 1006.404987][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1006.413292][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1006.422357][ T31] 2 locks held by syz-executor/28674: [ 1006.427830][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1006.436430][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1006.445516][ T31] 2 locks held by syz-executor/28695: [ 1006.450910][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1006.459202][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1006.468652][ T31] [ 1006.471025][ T31] ============================================= [ 1006.471025][ T31] [ 1006.479572][ T31] NMI backtrace for cpu 1 [ 1006.479588][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1006.479612][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1006.479624][ T31] Call Trace: [ 1006.479638][ T31] [ 1006.479648][ T31] dump_stack_lvl+0xe8/0x150 [ 1006.479685][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1006.479783][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1006.479820][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1006.479858][ T31] sys_info+0x135/0x170 [ 1006.479888][ T31] watchdog+0xfd7/0x1030 [ 1006.479935][ T31] ? watchdog+0x1c7/0x1030 [ 1006.479972][ T31] kthread+0x388/0x470 [ 1006.480005][ T31] ? __pfx_watchdog+0x10/0x10 [ 1006.480029][ T31] ? __pfx_kthread+0x10/0x10 [ 1006.480063][ T31] ret_from_fork+0x514/0xb70 [ 1006.480123][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1006.480164][ T31] ? __switch_to+0xc89/0x1420 [ 1006.480197][ T31] ? __pfx_kthread+0x10/0x10 [ 1006.480231][ T31] ret_from_fork_asm+0x1a/0x30 [ 1006.480270][ T31] [ 1006.480280][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1006.591861][ C0] NMI backtrace for cpu 0 [ 1006.591879][ C0] CPU: 0 UID: 0 PID: 16124 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 1006.591902][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1006.591915][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1006.591950][ C0] RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 1006.592036][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 52 b8 01 00 00 00 31 d2 f0 0f b0 17 <75> 06 5a c3 cc cc cc cc 56 0f b6 f0 e8 9f ff ff ff 5e 5a c3 cc cc [ 1006.592056][ C0] RSP: 0018:ffffc90010557470 EFLAGS: 00000046 [ 1006.592072][ C0] RAX: 0000000000000001 RBX: ffffffff9aa7cd18 RCX: 0000000000000000 [ 1006.592085][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffffff9aa7cd18 [ 1006.592097][ C0] RBP: 1ffffffff354f9a4 R08: ffffffff9aa7cd1b R09: 1ffffffff354f9a3 [ 1006.592112][ C0] R10: dffffc0000000000 R11: fffffbfff354f9a4 R12: dffffc0000000000 [ 1006.592127][ C0] R13: 1ffffffff354f9a5 R14: ffffffff9aa7cd28 R15: ffffffff9aa7cd20 [ 1006.592142][ C0] FS: 0000000000000000(0000) GS:ffff888124f50000(0000) knlGS:0000000000000000 [ 1006.592159][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1006.592172][ C0] CR2: 00007f6c2c80ee9c CR3: 000000000e946000 CR4: 00000000003526f0 [ 1006.592190][ C0] Call Trace: [ 1006.592197][ C0] [ 1006.592206][ C0] do_raw_spin_unlock+0xf5/0x210 [ 1006.592232][ C0] _raw_spin_unlock_irqrestore+0x23/0x80 [ 1006.592251][ C0] debug_object_assert_init+0x20d/0x380 [ 1006.592316][ C0] hrtimer_start_range_ns+0x3d/0x3e0 [ 1006.592340][ C0] finish_task_switch+0x3c4/0xc60 [ 1006.592367][ C0] __schedule+0x17e1/0x56c0 [ 1006.592386][ C0] ? irqentry_exit+0x218/0x8f0 [ 1006.592419][ C0] ? smp_call_function_many_cond+0x10b0/0x14b0 [ 1006.592447][ C0] ? smp_call_function_many_cond+0x112a/0x14b0 [ 1006.592474][ C0] ? __pfx___schedule+0x10/0x10 [ 1006.592493][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1006.592520][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1006.592544][ C0] preempt_schedule_common+0x82/0xd0 [ 1006.592563][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1006.592585][ C0] preempt_schedule_thunk+0x16/0x40 [ 1006.592608][ C0] ? on_each_cpu_cond_mask+0x75/0x80 [ 1006.592636][ C0] on_each_cpu_cond_mask+0x7a/0x80 [ 1006.592667][ C0] smp_text_poke_batch_finish+0xe8a/0x1110 [ 1006.592688][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1006.592712][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1006.592737][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 1006.592761][ C0] ? __jump_label_update+0x347/0x370 [ 1006.592802][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1006.592825][ C0] static_key_enable_cpuslocked+0x128/0x240 [ 1006.592849][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1006.592871][ C0] static_key_enable+0x1a/0x20 [ 1006.592893][ C0] toggle_allocation_gate+0xab/0x290 [ 1006.592918][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1006.592942][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1006.592965][ C0] ? trace_workqueue_execute_start+0x7c/0x1d0 [ 1006.592985][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1006.593004][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1006.593038][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1006.593061][ C0] ? assign_work+0x3cf/0x5d0 [ 1006.593082][ C0] worker_thread+0xa47/0xfb0 [ 1006.593109][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1006.593135][ C0] kthread+0x388/0x470 [ 1006.593160][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1006.593179][ C0] ? __pfx_kthread+0x10/0x10 [ 1006.593203][ C0] ret_from_fork+0x514/0xb70 [ 1006.593229][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1006.593253][ C0] ? __switch_to+0xc89/0x1420 [ 1006.593276][ C0] ? __pfx_kthread+0x10/0x10 [ 1006.593300][ C0] ret_from_fork_asm+0x1a/0x30 [ 1006.593324][ C0] [ 1006.594522][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1006.594573][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1006.594647][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1006.594682][ T31] Call Trace: [ 1006.594712][ T31] [ 1006.594742][ T31] vpanic+0x56c/0xa60 [ 1006.594845][ T31] ? __pfx___schedule+0x10/0x10 [ 1006.594937][ T31] ? __pfx_vpanic+0x10/0x10 [ 1006.595058][ T31] panic+0xc5/0xd0 [ 1006.595150][ T31] ? __pfx_panic+0x10/0x10 [ 1006.595233][ T31] ? preempt_schedule_common+0x82/0xd0 [ 1006.595296][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1006.595368][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1006.595463][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1006.595565][ T31] watchdog+0x1030/0x1030 [ 1006.595653][ T31] ? watchdog+0x1c7/0x1030 [ 1006.595743][ T31] kthread+0x388/0x470 [ 1006.595829][ T31] ? __pfx_watchdog+0x10/0x10 [ 1006.595893][ T31] ? __pfx_kthread+0x10/0x10 [ 1006.595990][ T31] ret_from_fork+0x514/0xb70 [ 1006.596084][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1006.596169][ T31] ? __switch_to+0xc89/0x1420 [ 1006.596270][ T31] ? __pfx_kthread+0x10/0x10 [ 1006.596383][ T31] ret_from_fork_asm+0x1a/0x30 [ 1006.596480][ T31] [ 1007.087814][ T31] Kernel Offset: disabled [ 1007.092145][ T31] Rebooting in 86400 seconds..