last executing test programs: 17.49664293s ago: executing program 0 (id=6452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "00000400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xb}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_DELSET={0x734, 0xb, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPRESSIONS={0x678, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x6}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x38, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x590, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x584, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x98, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_CMP_DATA={0xac, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6e, 0x1, "e3091774a208854f730a235e5e43323252a5e355a5c92e45774937baed41935742fc18e86ce56152c8b37b98d43e57ca413c8fcd76766e69e173c9475016ee26c3e91c3e8d6694d0e214cf008c59ac23b818c1d784cacda6f706e13e3d6d87fa62010827e105f5742a38"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_DATA={0x40c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xa1, 0x1, "0fa2119c0f5ba2678e6f2fd3f90eabf6a291b6a807e8d2f2f367437730109540d566d04176a51240071392f2590c14701b5c1cf0fda3fd2841c1ecc2411b9fc53eb523a216097bb431fc377625c626417288224fd1a82d6fec2217c598a19b919a5b07e3df00d5de8bc8fc19f86af44939c9091d09a6403320e6366db8713c128a1132722dbd88f819616dd25a6faa03337fec9afad91dccc071122f18"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x44, 0x1, "a159acb288405cbe057fff299661f525dc54d3bdc09ca7de84dcb9eb951e6124fd5f598a26333ac04e26393bc6db004a45be5f5553d47159f8cd85dd626a052f"}, @NFTA_DATA_VALUE={0x17, 0x1, "b5115bdac35b2169c166221141d572ec162589"}, @NFTA_DATA_VALUE={0xfc, 0x1, "4cd2cc549b3d2702470b7983856656acb856b43219ef389c128a7373cb7708752b9e17205b390794600e7b5dd723b5e37fc7027693fb80ee19658f86544d8c894e02de99531acc696d07ac28dcda772f474e6605232c7ac5054cbbdf12df30b9eda604f6355b8c8946753603567fd826d85dbebd2cfa5152f8e6c408e9deb61b87825d8318cc4d721953fa0697c4faf257e6ac06efbb65b3bf65ec3ffff1269e2863d137417f18e21c96565b796ddeae5bc57ce62d8827a882333b0023e5913a5c7f65f59b332d0ec44118582ea79226fb0629c5840708dac42318907ba319684665e9583c9b54116ddcdafda20f3eed0e233db42cf1801f"}, @NFTA_DATA_VALUE={0xf3, 0x1, "82a6133b1525f0d7586f001ea099d179098ef2bff4e12f2ca0100b0f9ce63be7a59fff34a3f092e741ab1a235eb17f71635be5943a35dd6b813529ac20650dab48449d7da05c7a3d3ba846a0468871775b078b61618cf2e0eb69780f194838387ddebeb67e39ff31d87068960263e7fbb122ad55ea7c2646f1cd5eac467879fc91182decefb116390ec16d5402b4058ddcdf5d496e20c5346c13b0cf779c1da040af24541d222bb6e2a72648883c10a81f968a4a7b97d0e21baa7d789d3a3a7a43bd3a23c295df977c71e24c3d5909ca26c45b42b5d3ad0c704098d5748a85eb2f8a405c73fc20f4b20b0e4310b38a"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x2c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_SET_USERDATA={0x8b, 0xd, 0x1, 0x0, "f1f0dafcf470a7d957b5fcc919e33374f2939eaf8ee5353572e9972937ceeafbdb0acedbef70dcc1c57545b52eda51dbda0a1d9b2fe011e0306283ac97272827fddb560292172ae13ce2c23a929dd91a5cf8547794d088fd8a5a414fa67be7f3e1279a1b41610d3d8e41b1f25c6b6120b37bf4ba13a01c1af8e1ee9030e97457a6542637bfe5ae"}]}], {0x14}}, 0x75c}}, 0x0) 17.237945622s ago: executing program 0 (id=6455): socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) (async, rerun: 32) r2 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x1194, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4841) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3f3c45d43a0de6302e78a225fd98866412272ec6c95f21f0b94466f986d2b28a01e2a530bbf3b3b1594d9d2063d12f6b988358b47be2f2a5fe58735acc6373d4f6145f63de46a7b19298c0404150cf715dbcb5dedd33dddfcfba53c97be2d47ef35b5e54d6e6aa56044e6d5749db4eb97484f8535c180f7c8b209af8516a5d5d1c975d34c897e4fb600d5c095f3c"], 0x64}}, 0x4800) 16.984352199s ago: executing program 0 (id=6459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000140), 0x4) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000020000000100000c02000000000000000100000d00000000000000000000000000005f"], 0x0, 0x3c, 0x0, 0x0, 0x3}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000001000000950000000000000089e77f8ebcaddbfc4a227578d1cb976ecc68c344d8ff40ff622e0468de3e8635b575a60c2f52f68a3d09ae0786d54b8566432a45477d69e5253bd7789fc72a4a0a98dffafe6f807759dad9dd8a388bd108b1a1193dfad8076886fe0696fae3d18be4f67b3c32efec1fa3716b5081948eaa4462801032f5629435a871d5f4ed206bc04fb1cfebcaa01f15abc5266dfe125c3159992515f536b9c9108988abdea6df3dbb4d8a8998bdd76dea"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) connect$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d2c651b101fa"}, 0x10) unshare(0x22020600) poll(&(0x7f0000000080)=[{r4, 0x4000}], 0x1, 0xff) setsockopt$sock_attach_bpf(r3, 0x84, 0x25, &(0x7f0000000000), 0x20000010) connect$vsock_stream(r1, &(0x7f00000000c0), 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfb, '\x00', r2, r5, 0x5, 0x3}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={&(0x7f0000000340)='./file0\x00', r7}, 0x18) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000002440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002400)={&(0x7f0000001300)={0x10f8, r6, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7}, @ETHTOOL_A_EEE_MODES_OURS={0x10dc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xc8, 0x5, "321d8e2f6f4c7ceef70619f22136c9c10c85f96acb8a056a25e526d831fe981f253389c2691e66cf3a44fb3a5220721fd1fe43174bac88528b0e328cbe38d34d40bbc806901295ca133c9f8fdea3e1a3d84a43be09b66ec03832021c9fecfa75480d14f091b6088ed1229bc90e3e3392388f9943acfac8fa08db767c545cf616735ed81dfe344c353c34861edeac32bab3a527dc0bd2e2f7a3604dc92424147f3ad9b675cd152a88f81dc222b4a13bf952426bfd02ecc568e56b2bff7e82d5df23a00025"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}]}, 0x10f8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=@newtaction={0x418, 0x30, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{0x404, 0x1, [@m_mirred={0xe4, 0x1f, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff5733, 0x3, 0x5, 0x4, 0x11}, 0x1, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x30, 0x1, 0x2, 0x9d2, 0x7}, 0x3, r8}}]}, {0x75, 0x6, "52e3379523fb0f927ec16591be6cc13aa566d5c8e08d24ae1cc57d292aa3d334da6eeb1ee29238883c099d73f304c446684e6a44d6e92523fd3e4f287884c7994b3942d8bfb014af238a9bb22dc0883d5114033db452b85c5273bd306506f505e779a17142bf94be6b548afeaa3edbee8e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4}}}}, @m_tunnel_key={0x130, 0xa, 0x0, 0x0, {{0xf}, {0x1c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0xe6, 0x6, "93bd44295e5febed848fd8d52360953100aefe7ea37f134d6f71227bbdea3e09f87946cfca6c7c9496ef5b644f55a0de329ab9144d240f10a73e5e9a649f8651ffdeb05884a368df735766f10daa28d0df113a99406d75b005e5a128d0c1dc0a5298b4b5fddb06e615d9e55efb51ebb012fd34f8a75002aa5a57a14d6c5ea29758feb527f8c0dca3cf1e33a9c7930c63b2136c86a09d91620a2cc551aaf5b3dc0bda4e128dbb49bad176f84952a03e8ff5cf2361a1bc7bef547c8b44785dff9f75e033a72ba349bd217980dad3a000fdc4ba08bf71eaf73c5882af89b2b684e46f41"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0x1ec, 0x20, 0x0, 0x0, {{0xa}, {0x104, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x100, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0xbd, 0x6, "b434e8fab3abb451ce361c50b04d4a3c97b3b1fd70998a4c4210cb27da06248bcaf5bccabc2bcadab52ea4341dadf2076aed211f0fc4d1366ba70741b34d42cb3864d278af56c137ff400fda8537498b627c650f8c79d79cb97e980f4a2b8260ebb0e0e640decb224f888e2312a81fa4e19dc18fa5683ad961a4ac2df60696b5f615be27926ce8c844ae2cde88389aff438f05ef1ada0afd8112cf7f4999032c542067fa7fdc65670fcf4ed23736b523da7327efac29f05960"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x418}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0xcc, 0x2c, 0x400, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xffe0, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x9c, 0x2, [@TCA_BASIC_EMATCHES={0x98, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x8c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x88, 0x3, 0x0, 0x0, {{0xfff9, 0x4, 0x8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x1, 0xcabfe4161353e22}, {0x92, 0xb6, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x4, 0x2}, {0x7, 0x2, 0x2}}}, @TCA_EM_META_LVALUE={0x25, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="329c4912d9", @TCF_META_TYPE_VAR="f6b19a", @TCF_META_TYPE_VAR="fae50bb062b1578e39", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_VAR="182ae756", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="f39fdbdd633c", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="f5", @TCF_META_TYPE_VAR="4ecbc0a1f5babd24c9", @TCF_META_TYPE_VAR="10a1e71b92"]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x5]}]}}]}]}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 16.981977596s ago: executing program 2 (id=6460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008011}, 0x4) socket$kcm(0xa, 0x3, 0x87) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x800) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000800008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x2c, r9, 0x1, 0x10000, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xad0}]}, 0x2c}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x70, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, [{0x0, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af2602"}, {0x0, 0x1, "00000500000000002600"}, {}]}}}}}}, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) ioctl$sock_inet_SIOCADDRT(r10, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e22, @local}, 0x292, 0x0, 0x0, 0x0, 0x7f, &(0x7f00000000c0)='lo\x00', 0x400, 0x8}) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000884}, 0x4) 16.844511079s ago: executing program 1 (id=6461): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r3, 0x1, 0x70fd2d, 0x4, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x47, 0x4d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="01000200000001000000090000007c00038008000100020000000800040002000000060007004e200000080003000100000014000600fe8800000000000000000000000000011400027b480000000000006f5f62726964676500140002"], 0x90}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1b8, r5, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xca}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x70cd24c7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x454}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @mcast1, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e20, @private=0xa010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfef}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffe00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x1040}, 0x40080) 16.720106182s ago: executing program 1 (id=6463): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x24000810) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffe0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) mkdirat$cgroup_root(0xffffffffffffff9c, 0xfffffffffffffffe, 0x1ff) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x24000810) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffe0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0xfffffffffffffffe, 0x1ff) (async) 16.694731907s ago: executing program 4 (id=6464): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) (async, rerun: 64) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x5}, 0xc) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x15, &(0x7f0000000280)=@raw=[@generic={0x6, 0xc, 0x2, 0x0, 0x7}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @jmp={0x5, 0x0, 0xb, 0x8, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @exit, @jmp={0x5, 0x0, 0x6, 0xa, 0x9, 0xffffffffffffffe0, 0x10}, @ldst={0x3, 0x0, 0x0, 0x9, 0x6, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @exit], &(0x7f0000000340)='syzkaller\x00', 0xe, 0xed, &(0x7f0000000380)=""/237, 0x40f00, 0x8, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x6, 0x598, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000680)=[r1, r2, r3, r4], &(0x7f00000006c0)=[{0x5, 0x1, 0xf, 0x3}, {0x2, 0x2, 0xa, 0x5}], 0x10, 0x6a3}, 0x94) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_NEWDST={0x84, 0x13, [{0x8, 0x0, 0x1}, {0x48}, {0x999f}, {}, {0xa67}, {0x9}, {0xa7}, {0x831}, {0x2}, {0x6, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x2}, {0xc}, {0x4, 0x0, 0x1}, {0xffb6b, 0x0, 0x1}, {0x5}, {0x101}, {}, {0x7}, {0x208}, {0x3, 0x0, 0x1}, {0x8}, {0x7}, {0xb, 0x0, 0x1}, {0x2}, {0x7f, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x8f, 0x0, 0x1}, {0xd4}, {0x6, 0x0, 0x1}]}]}, 0xa0}}, 0x4000) 16.62009751s ago: executing program 2 (id=6465): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x3000) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r5, 0x80000000) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r7, 0x0) (async) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req={0x1, 0x3, 0x80000001}, 0x10) (async) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, 0x0, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 16.619459612s ago: executing program 1 (id=6466): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0xfffc}, {0x4, 0x80, 0x2, 0x9}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000080)=ANY=[@ANYRES16=r5], 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40500000000000071107a0000000000060000000000000095000000000000008b59eba364940e929c669ee25d826d1b68a9646b1caa573b96e0ba006164c1a56fc1d1574d350983f3d8fd1a49874f9f1b7bed8e55d766"], 0x0, 0x5}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 16.553570701s ago: executing program 4 (id=6467): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @local}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r1, 0x51, 0x81, 0x5, 0x3, 0xf41d}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0x2, 0x4) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000002c0)={r0, &(0x7f00000001c0)='(\x00', 0xc0840, &(0x7f0000000200)={@_ha_fsid={[0x9d080000, 0x1]}, {0x7f, 0x6, 0xe, 0xe}}, 0x7ff, &(0x7f0000000240), &(0x7f0000000280)=0x7}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000300)={r2, 0x7fff}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000f40)={r1, 0x6d36, 0x5, 0x9, 0x10001, 0xd}, &(0x7f0000000f80)=0x14) sendmmsg$inet_sctp(r3, &(0x7f00000013c0)=[{&(0x7f0000000380)=@in6={0xa, 0x4e21, 0xffff0001, @mcast2, 0xfb}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000003c0)="70fdc4312e7a22bd8d6592fd13c7e0b4bcb9cb3433b29f6bf885c7fe916bb504dc7d5791ccdbee36f10d4074e237bb87a98713173d21907cfd891e7504c5749c618e6c0635837b9c1e29303e4475a948bf36d6ce14d2c1d74d96a5576aac0a16e6e13c8aafa87bad4eb6c2d63dfb8177a6489c0242f700aff39d4b5ffff67b9738680239ed6b59661e5ffd8169891e0d980b8a8bf1ecbca93ad55c7e35ae06944ffe5238bf7b44970ae7ca641220f06406cbc4f0781878e92561585851890e", 0xbf}, {&(0x7f0000000480)="b97ca810c0371d10bf0e17137c4e333b65f622a98cc6b6fde4c840361fddc2b2bcacee10c7ff3538271d6ba0f33095f63b1c2a7952c6a03776749a38050301a968b4e4bcba40decaa5ca75afba9bc9f6c315e9cc9e08c57bbe46c5d09f1815641a6d3b8f37e0c32b", 0x68}, {&(0x7f0000000500)="d82219bfd655a775f5ca9ee7f224e505", 0x10}, {&(0x7f0000000540)="0dd9cf5d42b27aea5d4070b7f9bb30ed26e34b4e17abee5879fec59a6f63c4c92818d1972f51db42e81f87bd2a88c901678b215e155a56570c05c89d867f3808fe0b424a449bae20e75e090e841500e485a372f8c284ee688b262ea0eee758d45178267b1eb73050c39d8112575ffe98ded68619e36923ec0ab19db53538d8e880ba2d519e5cc977fc1347dd087817299004c66786a73a926ed57dbf0186d9cd45590c8ca729d4bccaefa626727d1f74a54a3546bed479adcb84a3fa08df90e1275d0d99ffff6b5297733244130f46da458cca2b", 0xd4}, {&(0x7f0000000640)="94573540896a3b8a786bee57024f166e75a56fedb4f6a778b6688366dbe06ac18dd8c627ad24a3596d1628d1fb40777bd2a4da38bb6e744aca47fcf2cd83a76bcacfaee30b0bc67ba1ebea1479c83a697cbd0cfcd9624f188083f34c0449cfbdd3c7af1e1828df8ca67ebe1dee3a039148644d7aaad44207e29011237f6b", 0x7e}, {&(0x7f00000006c0)="a906d30dd4f9b16272f2aaa77c3d210d91bb6472159730170a28473b4edf8e7ee669f4ecbf6175e5791b6136c25e1672a2cc87dab0b7b07f311dbd6f499f0cbd14477346d4840f4f91933eb3d2df0e59f16b57e7481f9472d9cfe5fe7863d20e91266edcd579126e73f883f4c1026b849596e8b51bf84397acec4d86b177e891b3efcb84cd21e08143fe09723c27059ba41744579de789bdb4d0e57aabdbdc257289382eeb15853a68243055", 0xac}], 0x6, 0x0, 0x0, 0xc014}, {&(0x7f0000000800)=@in6={0xa, 0x4e23, 0x6, @remote, 0x10}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000840)="fe4567422ef77c52c1aa01672ee49d61889380af81ff01672ff04bf94c7dd46592e304a2783a893280e5591614bc5f6f6531e5bf76ec1abeccc904e7d846be40c2536a969a0b5756d3d6d9615830dcbf768c2921769e6e261f748962dd719b7a769019b523786a690d59e9c0ae8b7368010bf7c0f41b1e56f85cd56895f3038b0038c14799801f0c46cea1f4e6eb004a03b5a9b496ab1339c63bd411f145f912665de5ee7635324b1eeef4e1c451da3eece27befe4a5fbcdd3fce54a718609668f1a77b9747122d745de77b5ce17c05d8ca37f98a61519afaaac0a8a2a859e6aef2a6456357c69fbec72def9fb4b71eb44fae1e5d48e3c5f62e23a4ebcd83e", 0xff}, {&(0x7f0000000940)="08d23e80d5fee493453ecd33efb04f14b4dce79ee530486922b7cfb24b7842f3550e884726ae8cd24ab80f744ed0a6095ed746537344a1f530245d11ae2df20d9daf8e24cf26c99345a6d2c25a3809fcbce653a60830b823ee5ae44c7de009464afde926bc864fff0130e19c8e89b47a22611a70f2143e4f60cc50bfaef2d3d623a46afbee2c2bf20e38db879eab083e59ced955e59222ddfeb9ff0f323b99e344279affa0", 0xa5}, {&(0x7f0000000a00)="b1b98a0ca62fd4c574579142bc0cfbd59e7412e20f4a878bef38032c1942a1580c35db04c4bd39", 0x27}], 0x3, &(0x7f0000000a80)=[@sndrcv={0x30, 0x84, 0x1, {0xa, 0x1e0, 0x204, 0xb947, 0x4, 0xb3, 0x5, 0x9, r1}}, @authinfo={0x18, 0x84, 0x6, {0x8}}, @authinfo={0x18, 0x84, 0x6, {0xe45}}, @init={0x18, 0x84, 0x0, {0x4, 0x40, 0x3, 0x2}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x7}}, @authinfo={0x18, 0x84, 0x6, {0x7f}}], 0xa8, 0x4000}, {&(0x7f0000000b40)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000b80)="3eeadecff8cadaba8a1c3e81ad057489f5ccfcea8eeb779af84dadb602216cb91c9b9ba3a373fa98657588b02f1424b996999184b9bbf630d9e67e99c760fe72d4f4da30abb968fc3f57e9dbcea9c7c304bbc50926c074818a8f2a25861dc0ee7a97cffbacca66e5964cff854a11557f", 0x70}, {&(0x7f0000000c00)="2282119e77c1a129df90c4f5fab6c251caec0fd7c15a5ad58ee8ff757ea40b393d064a305835afbef7346ef011e10c1e1e17830d0cc67ac7802585da18abc81894912dbd12ce34419b2172cb8ef71e15982d0a0b", 0x54}, {&(0x7f0000000c80)="1ab3fba50cdbc297f0682081bf26e719e2bf5fd2cac84192c93e84182adb9da1848d4cfe44271f1b081ec1062972642954d6e8d92bbf023368190281bb27cdc3be2c31116e324c2589c4004133fd715ace89faeff8ca977d1322991abec25308c2fc86a92acb9163ee0fe844682abcc38637dd2221c26924be61ab834e3bd6aba9d9d1d15cba59289ae26164dc565624a367bcd7ef12c0eee1829076bf76b16b2bb9ae3b97e3509508c210eb19c6b1e60cae781de77923b6de424fad03acaf9c28c78a98034fc89017365d0eedd67a596908c981e2b9a63f0bda3dfe72e212bfbc642709346569724fdb", 0xea}, {&(0x7f0000000d80)="ab80d85cd6caac11c951aff432d73386c947a93905585ae1f45fa2fedea24d707ffd0f871772d0968269ec64745da5a57e9fe53cea528cc460b22d5f2e5e9cfde05144881d85e9ba289ab9e062dfee8aed2ef6e437870018d6", 0x59}, {&(0x7f0000000e00)="2d469e4dd72bbf61d7958d3c5f0d9c965fd71c9f225a924fb12a5eda55176c063fdb96bf64fa6f6a7b46cde2714572c59255215ad5a654d048bd945215abae285b898d1244c6132c6c324f419ba538f793ac3c1e677394a6516c3161e4debdd96f6e0811b7c45f222dda1bf4b37eec39ab360b837f3c39973bc29dd77d13b53b98fd45dddc932d35f0", 0x89}], 0x5, &(0x7f0000000fc0)=[@sndinfo={0x20, 0x84, 0x2, {0x49f, 0x8, 0x4, 0xb0, r5}}, @init={0x18, 0x84, 0x0, {0x101, 0x7, 0x2000, 0x95}}, @sndrcv={0x30, 0x84, 0x1, {0x78, 0xfff9, 0x4201, 0xffffffff, 0xd7, 0x7ff, 0x490f, 0x0, r2}}], 0x68, 0x11}, {&(0x7f0000001040)=@in6={0xa, 0x4e20, 0xfffffe01, @loopback, 0x5}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000001080)="fcf7d5e03990c2421ea04065fbf962f2e0738a2cca64c0865ba9d605e686166dfb21f09f363f42c270755ee36041", 0x2e}, {&(0x7f00000010c0)="e61c4c81b3883d0607c185436400de852227cb1c6050", 0x16}, {&(0x7f0000001100)="10a1a405d556eed8a85a2731689cf6937d19cb484405fc7fe6bf57aad5042ed6c4cf994f138be8212547225ae493381361ce9e1d28cde7cbf9da50882443db67f1f9a1f679997e66693171109aeac3047b8da70717bcac768a0b18299cb8ef8e5ab4295415e6e525a5166649025b75ea608b47eeb3f357b404a8d1afdd495de62e1324d3eb5b72625b8715e36c7827a33b4855d9494710092855e7c3a18e9c82a134b38ebb6db17075226cc1b4e333b2b93abeb8cfd3410ec92a1ce19f695cd6ebba008f2a588ed4147402942311f349fe1bba13666931bb094991c5d32a02a176b9762cf9dbff50424a74dd93130b2d0a", 0xf1}, {&(0x7f0000001200)="efca2ca0742e9047c7b4a9", 0xb}], 0x4, &(0x7f0000001280)=[@sndinfo={0x20, 0x84, 0x2, {0x8000, 0x8000, 0x8, 0xf799, r2}}], 0x20}, {&(0x7f00000012c0)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001380)=[{&(0x7f0000001300)="9c4dac044e23e6660324b5881a83619c6ca6e2c0e990d79004077eed597b8df936e11662c2cb1818e92de24d7e2c45ed733ca44186b7510783fa10a9fb5ed7ae8612d6fae65d299a505ed1ba8b244039b523fd9f21de452e1273ab827cb974ce7d4eb27714c631f1596144414ae981e6d9eec3", 0x73}], 0x1, 0x0, 0x0, 0x48081}], 0x5, 0x4000) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000001500), 0x2, 0x0) write$nci(r6, &(0x7f0000001540)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x1, 0x2, 0x5, 0xa}, 0x4) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000015c0), r3) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001680)={'ip6gre0\x00', &(0x7f0000001600)={'ip6_vti0\x00', 0x0, 0x0, 0xf9, 0x4, 0x75c, 0x2, @mcast2, @remote, 0x700, 0x8, 0x9, 0x4}}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000016c0)={0x0, @remote, @empty}, &(0x7f0000001700)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000003080)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003040)={&(0x7f0000001740)={0x18d4, r7, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3ff}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff7}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4c4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x36, 0x4, "2bd62784f9f4ee9d28a353ff926af7813a67b7f918fcc094ff81ea051a1ddea93f4724e05382afe0f977712bfbd8ba3d97bd"}, @ETHTOOL_A_BITSET_VALUE={0xd8, 0x4, "16d61660c6bf33010bae0129dffee1db68bb3aa66e04bc142dfa07c55e957f5832d152a65f2b991a6ff1fc748eaa5b4cc0f1beb680e1ec469d3d956181ed4fcedfcdbba9baa96ec2307e619cc8784707ca6e9d34776bfed63d5a4e72f06efdb520fe6633ad7b2c852cab204a15c01c2a03f0fe5c708f084ff2103d55c945bff5f4da7486c96e869572335ce7543bf2b4bb93365b5e7ddd27fd88f169ecdde04e86d68b170e93188f45b87a5b493bd74b33218c37a813ccc79ea4b059a4a31d06e2f195e851c9d6b6457b080ee66bff8c49d71e86"}, @ETHTOOL_A_BITSET_VALUE={0xb1, 0x4, "52e0f8c7723c4fa0b8193183c459c57cb1a07affd5ae57a917a9c890eef7ec1cad6120362649853c81516d095035ccc9033fe975d0b28848b9a0d9273a2cdf32c2c703585399d3f5ea4916da5bb753ff6fc83d9cbbb7fc27e2472f21a73fb1b4c2def0bb1517513b7b214e51b7f4b876fc628f974c5611fe85b0b39fd37d5afc8773c3a351d8e9e2088d7c8904d5cc0f6fe5d68e8d699d95a2888336264a579f9854ebeb55140dba1f9dfd4150"}, @ETHTOOL_A_BITSET_BITS={0x168, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/dev/virtual_nci\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '&}&).&\\*^::\xc2\\&-!\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe67}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '%^{-\x15\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '/)/@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd11c}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/dev/virtual_nci\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/dev/virtual_nci\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x99}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xe9*!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '/dev/virtual_nci\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7af}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xc1, 0x5, "fefe49037b3e5281c0b37e9691065c2b138f87bbb2e3b63d269b9449f2e35d55713170a09e37d1e361a9b9f56f0ae1bed93108496be42c6477fe2f756dfc60584be35ab71e3fda158f5c0ebe041f8c7215ba1433e1b22a89bae7a7bc1692d1b1fd154f605f6573828cab3cb29fecd72fcb90a5e230aec0eb9afe5cef1189ead6bda4c159257c36f833ce101587c7aade1bb4417b79a5fb21aeae830efc2ac760119bf146ca151b9c79ee44e4d9e01492a47d22ee4cb9f8e8c97f86914f"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x94, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x8d, 0x5, "68ae01e04f51b2166676e5b6784dda2eeea7f9985d6cbea9c65c5f3db1b39e9a4336b93bab2543e522995f81405856034150da45c76e729fc558ebea3d5f03cb3140e57bfb2d8e0193981b1b645238081fe32aa228d9b758f52d9c738f02f5aa764229f46ad806f2c26a0dc4cb7850a9fb1b12d6eb36823856cff7e4cbfebf43dff4e2c0c78dfd6351"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x12d0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "b5702963399916c1eaaad5df8a5e9cafa129db1c4dcac406236a6f762d0c49f95e72b9cbfc9a15d096dfa89e4ff9bd2456965a0ba9ef7ea548191196611a8e9e6dff618d793407da9f479d543c6adadf68ae6e8cb16bc87117cd98d3684ea700b05ebcf10403566816f513604565fb8ae1b695d7e1062360aa3be4b880aea2c00bbd99e5341c01dac46e0891d45ddcced136183dc1c778716f2d542332137d6caeb7805a67b47a3d932817eaf8427c515b601d83c221f68b3ceb2bfef34eac21dd97d11017635344bb34c075358bd542649837c71c9c8468545ca0bbbe4228f75efe1a0fbd16cf3c31da39652b2f66862bb37ad17d8e7f260572e9bbcd40ff72755e71516f54fae0d6d4f29f534f4e31219a9c8edb38c88b2ee60a2e2a6eb954cde003f1abaad8820a43f6e18ce7217dda109c4285e342d2e729b15a9b65491d84bb0add98542c314534f04061f1bf71ce1cc04d277790f7eb28327412e12b3305e5e567bf7f7bdef9de7776ee1c902379565ade9fb387646541bd7371e0564154f7d23150cf4a07398b4f775dfdd1900cc4b582aeb4a29229acc8bac2bf1aa4732673daf3b2cd57e618d6dd8ce0145dbbff6997c1de9930b5e00346d8a03c14afc71ec7491e81333df089c5412a07e7cd02dab732b1c2d584138ac4b785651a09d30ad68d74876fa5b4606cecfe27a4f38b8d1ba25532eba0841242850e5a09af046ad3c6aa2af2b607679432106af3dd4e646313da62beab4f259b9a6f61241c571dd5e4aa2fad572ca64e0d1e50791b5add6742514aac5f445b97c05861f1416e678f2d63f6d15e4e85c0e96d3c70bdf2c9b51e82bbf64226af0d8649a875e2f880f9e63e387aa1c108bcd3ae90cc5de002323183859f486855a5833716ee9533215679b4831d440edf0d6d2e05acd8af037b21cf7592204a21b191eb9b3f906e522eb6b68e42dac70005259c9f8352e2b22445bb24e4257eec3f2c33e1c5bc77f16e9b1746b026c94148abd42a1dcb449f00cd6d7e2c6e21a80a74e4ea13a466e70ed3348b87438da45f22935336512210cc9e05e5f69cfad7927f6a6ad65c74e6f4cf1c93c513b86e0b84015fb669cc872df5bd3567dee1065be2de32478aaf5f7cc6671e1df36cc45a266fb1c6bc531e39726813840af8e864903616af78356a9b7d128d7c8798aa86c726de8ca5bc40e41dac89fc43470a5300e8e0b1cf2f443909196292cb35c5025cd47ac9107f865b32afca6761acef322b8c025dad61d1addc0a0690e33f4ae28ca4b5f1fe3276a739bb866b47f6697a72b64c8a68e28c9bd04d00bac7108b82a3515d6a5b50bc7aa547ad7a6a0c3b12e751d0a468374972a4c1991dc39df5da5cbc565a1b16569021237cacf1e33db32802167f159d75efd01774b8b7be9805084675f7d85ae896c276c7b5330c47661e3c37c75cc4fc037e6b5ccc0f73d7647394c726d6c50ba7d2684d48a616ff47abc0160f7e8893d14c77f0725768a74885eac6ff496466922d893ca2307d307ce08c8aba99c62aacaefad7b9386a64d563b8db093a05510cf1affd2e009ada2f95212f8d91108f068e489f4003abdc3c636adcbd00349258136bd80de1f0d05f71bef997212e546a06615d219307fafd517c061eb88ac814ff26b665d53ed60a3aed96f65f65c1a30b308de5b9ccb652e8ae27097d3198aa1e8b4343e1761e12cc4bc73f63dc49a2b8dec14e3b72c80ec0771e2d856a6a7af62961e2851942791272aaec8e3d6dcf45a540c1bbd0f1aae22eafee2e181996be45aa9503d96f29f1a48605652b899e4c51b8a17c33126d03bdc089a90fe942bfa350814afbb20498545a849ec734a7be19187411e85eaa1bd6dee1531d88603ecaa45f93ff721c2c70fd6b6531733ac6b9107f30d5dc520f34c2dbdda992c9b194f074b310fde43fce8e377d20fa2029847511e76fa55f31f5d8985a183d85c3c3af7d220907be1b96b1666c5fb059bf3189cb79a64bf7cf2384b5eb4068c7d31ae667197c6c8b33682b7f53222645268da33efe7fc59d31197a3cb3a04ade4f952cd12dc420b73ac860f638c16aa2c4801e0e78a6797be74715d7beea387b52834523fa2ba5f49bc3d5cb8e56184684fcb94422d0fbce1dc763a81e04e5a78bcc1188b7244b63612eb917d1bab3e9e3bf0071a68f5c127a4e0ee15522a52ee5facb23adb846f9bed36128c1f3828d0459c1131e40d60fc0efaf759af45856ca3bc50a574e9c87ad3155f37fc80c5878b3835c1d2b047a63a167d6c54ec836b08d6e438c783cfb8f47fb1fa0daad11340d6000e78b75707807f464fd89c7cc8977cc1c28e6b7512047045621edea89fcb43507e5ca528da9e195fbcbd3f1dee2fbd4b948aa222c8459de1e7c16ec16c1abd31fd27e51cf440f716584a52f17f524bca3d8d9af5bbf60a70b4c42a6d827efd5307c090184221786602acb197e0e9c8effff4906eb39e0df360513543eddafa4d92af528f770a2e18d56566b186d3b628e83f9da36bcb4bec30edfa8f0d718b1cb546e763412893836496965d1752703e1e7c4a1285e418d72be9fc55e0da748079576c60770dc00e6932b6d78b7653b472c60b9e8816adb3db308c39dfc0bfc81db49f97eb65c20830c985fcb9e224887358d55f61ee9a7cd014eec1487692eeb779ee53fb84fd1a52f8a1c6cb5858fabfc9a8f0dc4d28b922c313186e6a2ebde048691d227fe285773a94e2854a013c90657e67efda64dfb2c3f0db898f37b048f25fc32604635bbc80fdf9daab21f8730d062919ed246ef867fc6599b6b35a3137e38e05097f901248ac86a9bd76cf83a84c81c1ad47ef2c0db25d9af976708a64a41d50ebe96ca766eda2858c417be5597805b5f9b2135b07c9c92a61079600e48960b4f37f0716358bef88504e9df8f7526b1fc738071f7b40c295293357c886140887073194b5cf61b17e152ca43323b6a62ca45a78f3dac72f27571aa5e17282fd7b0e513f94199af4f6a0d93b4a526ad5bad6f74f13ebf82438b9f94ee1691a0cf442dcbfcefa77dd20f538cdca3be98a3121a789298b11820c57698aeecd2a950fc734826878487fbc1acad432da00e3e047df2a8208002c6dbd8fc31f40bd24920647d124af475be460637087ccb208c795c66d695752114ab0bb20713a540db99933743794e4b4fd067875d89cacf582855ee1aef0e14c41fd1de51c28c1171feb0cf49c6b2ba08d58351b0b2c876c52fecdd12e063849bd32ce3e93da766c46ad101a6dae09392b662b4523abea3566cf6433db40a30e6e75b3466e990f948c882d4ab3c11321ac5e19334c58e4c79694faa1f5eb134f9c6862cf5395a33da04acd3fee5a8c5e02ed7ff2d57f25eec8b6fa922d9e98986671cd8e8221b5bbfe4e5a5bd5ba391f86a8e807cb3b7bafe11d19f899bb4068b7a575a22526ac5088013010cbe062acf8601bdc50ea5bb2bbad7b1fc2e4b218307bd2d888c261fc59b2401fe41804ba1e9245f32be4901f032c7327e613709fc2775f1afa7610bd9db4a019660b2e2d6993ab7afa1a3b205ae25266475aad432f2bb468ce41b9df75751ad61c43d366865339ae4a9a80b0e184bacfc89d46a52fb5187e0d6affad70c64a8a522bf002f4df3b313b9a0390597b1c18725a0392efeeb05c8d0729ff4ee66f867c87c75ccbd53536eeab1ad141c4675948662ebe1b12de9397f07645b38ff19208d38da8dbdde45828cbab6927625e2847a823a6bf1a8380e75eefdad237ce10c7a97e20f8a51fb685e48cc573364579d7267cde38ba00a09ddf3402a722a1dfc7fb7cbe7dd449b8c5dbccc904e28a23eb831f99f40305fd4ed3e7c6c10ced1f395dd9a8c919b71d2af3982cc340f163fbec3c3d6407e1275c35f19461efdc42125df09184fb451946d3f051ef354dc9a4778d2a84d31e8a3824af3af79f74bade8fda596de9fff732cf359a2744af9cee1c604124161648ff07bf22b73955df6f1fe92b059325904acf63c7333733b3e1b43d3ac3a00fac7b8fa7bd298cff53ad571f00a9685498f939fcbc749dc80e775dc41959e9ba416fbfc22abc5eb903b46416ac06502de9c01f6cd93471512fa8411d4adb9a1c78229f37f216477ccbc640e15f1cda6fa72cd19446aa466ba9617ab7dc96bbfb7e4f9579195da070f94afa48192c41fd5d0972a6da9791c4a7caeb3b0926e0a3ad5e79197d03d222688e77d112877405db7c64b2a08dbb9f0aadd1f6401a86a8394ee0af967b2dacd71e34fbb2e65c1fac62d7d5d2a18be8760d52b6a8370a9d6a3fe33488532f4609ba0714759a90af7f7493d76ae872af37af80a81ad540b278b9a4cb8f4c675493b4e2d67ee36a09323d9f26c25f2a514bf2dfafaba254ae10065b7d017bd34099bf0fd1a6de6f2b09c6a6b002af8be336ae4aaa3e3c6dc112dab30962319f63e4525ac45a6c838804dbe060b3bf671e8190fb1946511ede3b44cfccdd9f8efbb34ba844122a16db4812263f817d226fff15d9e3d13ddd36fcae56c0d33d09cce82128d783b1cbf2ea296a66caddb509c96f69a8633c0ae5855d8fc85a5a9933dd7b588416d70b38cc78f9d230df61fa6a10b22e802d0af4fd3a5c4f94e85bdc66b42bf2eef52a3d2e1ddba622ccc09773fd9b03347cf6fcad8b96ea8d05535ba0617a11348c80c36345fcbc496aed43318cc9a11888909dfe436c5aa867c581d885792961248c6ddd7c51c18ed04ddb507fe1204a86c49165782f2388a23b7c7399e37134a6e76df4f3f6bd5c36b9ace5114c3a5689ecf9532e65e1b7921436b1c678a408183c5503e2104d20b6d13c4200b29be86082dc770c9b1317ed05467d917a261ed986af18fab8870004d332dd6788e307c239b346d7b9e3591e6c760d5634ea8d3992663026ab03457105184435f542216d6c1d5299eb85131996b8ce2d8605aeb359e4a5a4ba58fccbbbb8ec1e98935fa0e3836b5bb0ebe8885c3dc0baf2113b6a9cb221cecea2f9db53f53de16c0889aae0a88cc396f503d33db9e26e45a43f767a4406202261822ec9fb168bac734825203e11dc5f69c01b8d45d1a96ddc288c8e6c0a53061ce86406c02faa7bc943e7dcc5acce1be83cbc7d14e9857ba416a69671043d5e01d5048aa179d6508ba83f4441ade8287f107b8cc366fc25c1c4f7296c7de6f5d0ca2a414bd6426e938958cab51ea8bd9f99981b64e134e7318f5279c50a06335d62424e41395d3125d8738796b57477ba02e3556ce1ed493fb176ed3379ed97cc82d4f1a32457f06326eb0aa540e3301d34d4e4e96a9efa5fbea4e560f942fa9f448a281849c936cc56cd819529757197e87bc76ef48462aacd767c3b95819b42591ae85b53aa9ec34f08918960788fa1dff3a83c2666b8ffba559dcac1e72a61c2b8dcf7294c16a8d04a6bff9185e87ccc1b5297767f0fb35a536deca70bbe90493215f76693d7fe0933817ba656a29b0534307d745bad6abe7e24fae388743eb4fd53e1127498a0210d9333fcab27db0738603b02e3f795083902a7979aa471e9fdcebe4020ad4e4a558517afea41ae388fbc29d15f7bdfb805b6a821606a4c6fe7636be4c26521b843f3df4d3939cc0fadbec1eb2cce75dcbfd18c9abc21d3f0cc804a7e3e17afb9ae704051efcf4f6e971ba379ad0c088b53300e97513060c4060136fa2d3ae2c041716c7d8456028c49c0a5a9c3ef5595dd7caa8fd1fc719cbbbea4d68d677a7d0729c3135f74e450c590f5a188851c0cd17ec1a01b8bd522d51bec721"}, @ETHTOOL_A_BITSET_VALUE={0x33, 0x4, "064ad7c4d8b69719b24af41c56c3a2f01a45bded54877c43eb60f026f644dd6c94867f7a718956fd6b268a50358a5e"}, @ETHTOOL_A_BITSET_VALUE={0xca, 0x4, "659396e5ee0542715af16a1be8a7d7801f2b7365f5828c8169b51a9542f0caa09c13386c6af673fba28671483e704649d7743a067be0cc5dac8c19f7aa5f73a024f5fdbd45d28bfc784cb63764d58a6f8dcfc5cf150767bc85ec5081c9b3b0ec08a4f28984ba866b511017f64c32b425f8d8fe736a3ffdc96e30afe3757b09979afe2f1f5e830856156184ea744f0ca08df7ae26bd16eba453a068b72b0d1c854da9b0a02eae9b7c92d74221f079bff54f228a0922fbd18f15a3aa3b0bb1bf7c94278b54da1e"}, @ETHTOOL_A_BITSET_VALUE={0xff, 0x4, "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"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa5}, @ETHTOOL_A_BITSET_MASK={0xaa, 0x5, "70f37162e10e540fcc6bb4ea8a3a65f2ba900bf04e08961c8fa88593b8f43c11185ff985f3a739780830fc4cd562a9326d70fa39cdbcfc7fb2652f6923c166d38c59abbdf61a7af39aeabfb177b8df23d24dfa3de95f52667a9a27a1e9fc43b6d3331844f4f1e21f45089ab2eb90835c70f79e15d7627d99fe2f68a2112e94304bbef1f8edcefb9b755a7a11bc48ba8dd96549e4e3969528df05b832d76fa521732db14e6e0a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1867af5}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc}]}]}, 0x18d4}}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000030c0)={r4, 0xe625}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000003280)={0x1b, 0x1, &(0x7f0000003100)=@raw=[@call={0x85, 0x0, 0x0, 0x3c}], &(0x7f0000003140)='GPL\x00', 0x3, 0x66, &(0x7f0000003180)=""/102, 0x41000, 0x13, '\x00', r8, @fallback=0x17, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003200)={0x2, 0x6, 0xb, 0x2}, 0x10, 0x0, r3, 0x4, 0x0, &(0x7f0000003240)=[{0x3, 0x5, 0xd, 0x4}, {0x2, 0x1, 0x0, 0x7}, {0x5, 0x1, 0x9, 0x3}, {0x5, 0x5, 0x4, 0x7}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000034c0)={0xf, 0x6, &(0x7f0000003340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x81}, [@exit, @ldst={0x1, 0x3, 0x0, 0x2, 0xb, 0x30, 0x8}, @jmp={0x5, 0x0, 0x3, 0x5, 0x0, 0x50, 0xfffffffffffffffc}]}, &(0x7f0000003380)='syzkaller\x00', 0xffffff79, 0x0, 0x0, 0x41000, 0xd, '\x00', r8, @cgroup_device, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000033c0)={0x1, 0x6, 0x0, 0xf6}, 0x10, 0x0, r3, 0x6, &(0x7f0000003400)=[r6], &(0x7f0000003440)=[{0x0, 0x4, 0x0, 0x1}, {0x0, 0x5, 0x5, 0xa}, {0x5, 0x1, 0x3, 0x5}, {0x5, 0x3, 0x0, 0xc}, {0x5, 0x2, 0xf, 0x6}, {0x4, 0x1, 0x10, 0xc}], 0x10, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003840)={r10, 0xe0, &(0x7f0000003740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000003580)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000035c0), &(0x7f0000003600)=[0x0], 0x0, 0xce, &(0x7f0000003640)=[{}], 0x8, 0x10, &(0x7f0000003680), &(0x7f00000036c0), 0x8, 0x4a, 0x8, 0x8, &(0x7f0000003700)}}, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000038c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f00000039c0)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003980)={&(0x7f0000003940)={0x3c, r11, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x7, 0x10}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000003a00)={r4, 0xd, 0x8, 0x1, 0xf, 0x4, 0x1000, 0x4, {r4, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x4, 0x7fffffff, 0x2, 0x9, 0x2}}, &(0x7f0000003ac0)=0xb0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000003b00)={r2, 0x4, 0x20, 0x2, 0x8}, &(0x7f0000003b40)=0x18) syz_genetlink_get_family_id$ipvs(&(0x7f0000003b80), r3) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r13, &(0x7f0000003c80)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003c40)={&(0x7f0000003c00)={0x2c, r11, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xe}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000003cc0)={r3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000003d00)=@base={0x3, 0x51be9d62, 0xfffffff4, 0x6, 0x80, r3, 0xb, '\x00', 0x0, r14, 0x3, 0x5}, 0x50) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x10, r3, 0xf09c0000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000003d80)={r4, 0x7, 0x2}, &(0x7f0000003dc0)=0x8) 16.522438074s ago: executing program 2 (id=6468): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@loopback, 0x0}, &(0x7f00000001c0)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711053000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) sendfile(r1, r1, &(0x7f0000000040)=0x200, 0xfa6e) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000140)={0x48, r3, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xe}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8a}]}]}, 0x48}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 16.322635084s ago: executing program 4 (id=6470): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000016000f1000000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x819f68284167e039) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x45f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x11a111}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5c}]}]}, 0x38}}, 0x8000) socket(0x10, 0x2, 0x0) (async) r4 = socket(0x10, 0x2, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r4, 0x40305829, &(0x7f0000000000)={0x0, 0x2, 0x4, 0x93d0, 0x9, 0x5c5e}) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000040)) write(r4, &(0x7f0000000280)="2c0000001d005f80004000000000000005000000000000000000080008000100000000ff5b1844ad30c8ac46", 0x2c) 16.127828369s ago: executing program 2 (id=6472): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x5, 0x2, 0x7, 0x550, 0x5, 0x1ff, 0x9}, 0x1c) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000000)=""/36, 0x24}, {&(0x7f0000000280)=""/215, 0xd7}, {&(0x7f0000000380)=""/12, 0xc}, {&(0x7f00000003c0)=""/68, 0x44}], 0x4) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 16.126003037s ago: executing program 4 (id=6473): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000140)=0xb, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r5 = socket(0x2, 0x3, 0x6) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000000414010027bd7000fbdbdf25080001000000000008000300"], 0x30}}, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r5, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x20000804) recvmmsg(r7, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) sendto$inet(r5, &(0x7f0000001b40)="08ba810a10d69bfad8c22e8786d8ad9993d210135222cf43a167", 0x1a, 0x0, &(0x7f0000002400)={0x2, 0x4e23, @multicast2}, 0x10) syz_extract_tcp_res(&(0x7f0000000000), 0x518, 0x7f) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000002000000010000001c000180080003007f0000010600010002000000080006002e"], 0x30}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, 0x0}}], 0x1, 0x20080058) 16.125064069s ago: executing program 1 (id=6474): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaabbf41f000c020000c00001000041891564d4658d2d00000000"], &(0x7f00000004c0)={0x1, 0x2, [0x3bf, 0x9f9, 0x4a3, 0xe1d]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x110, @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x7}]}, {0x0, [0x61]}}, &(0x7f0000000100)=""/1, 0x27, 0x1, 0x0, 0x0, 0x10000}, 0x28) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newtaction={0x4c, 0x30, 0x1, 0x0, 0x0, {}, [{0x38, 0x1, [@m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xfde4, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xefff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x480c4}, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x10, 0x110, 0xd}], 0x10}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0, r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c08000340000000b108000440000000220500020007000000340001800c0001006269747769736500240002"], 0x108}}, 0x0) r6 = socket(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000005000000030000000500000008800100", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0400000003000000010000000a00000000000000", @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYBLOB="5ba3cbe4871c4e661d47e21d285c88f90fbcaa0b6867f34cfc0000000000000000"], 0x50) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r8, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000540)={0x0, 0x8, 0xff, 0x9, @vifc_lcl_addr=@private=0xa010102, @private=0xa010101}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a00000000000061118400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r10, 0x1, 0x0, 0x0, {{}, {}, {0x5, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x34, r10, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x14, 0xd17, @l2={'eth', 0x3a, 'syz_tun\x00'}}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x14, 0x6, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x80) 15.883367615s ago: executing program 2 (id=6476): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002300000002001200ff19010005"], 0x48) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000080), &(0x7f0000000340)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r2, &(0x7f0000000140)='W', &(0x7f00000001c0)=""/197}, 0x20) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000001000000000000000000000000000001400020077673100000000000000000000000000f400088050000080040009801400040002004e2064010101000000000000000006000500010000000800030002000000240001"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 15.879605632s ago: executing program 0 (id=6477): r0 = socket(0x11, 0xa, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r0) 15.878809606s ago: executing program 1 (id=6478): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x10, 0x4908d13283d17e6b, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2001f}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e22}}]}, 0x4c}}, 0x40000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) r3 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x40014) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x94, r4, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c086}, 0x840) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001800000825bd7000fcdbdf2580201003fe02fe0b0008000008001900", @ANYRES32=r1, @ANYBLOB="08000b00050000000c0009001041080b", @ANYRES32=r2, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 15.811472187s ago: executing program 4 (id=6480): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x45d7, 0x34c, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1808000000000000000025193cf9fb0bda051d1dffffffff000000"], 0x0, 0x4}, 0x94) pipe(&(0x7f0000000280)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xba6}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4df}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.710829381s ago: executing program 2 (id=6481): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = epoll_create1(0x0) epoll_pwait(r1, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfffd}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x50, r4, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x50}}, 0x0) (async) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5de67e0a7f66d5d3}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r4, @ANYBLOB="000129bd7000ffdbdf2567000000080001007b00000008000300", @ANYRES32=0x0, @ANYBLOB="c400c5005c95690af058455327f2b257078079938739b36dd46893906405df94eba0d5b4b4c44ee0eb3a6e0be4999ac665619bbb1462f4b5d45c25edb4bb43d0e3ea97c374571dfead28da0b3f4be6f050f62c9a10c1e2c3bdf043ad85f158313a76470fca49f0ba62b170f9aa3d179a51d71f87d10b28aeed0a9d472057b096abf2e56f691a1bfb5e468faaa5c5b791ee07b8e624ae575e0467b1fd8caa0cf88f61f91bb00a028d4ca2ff8b3691f898d2851752b4abe3640b339399ffd8560c6098b83fa73ee0947ac83321"], 0xf0}, 0x1, 0x0, 0x0, 0x20004091}, 0x20000000) 15.675977073s ago: executing program 1 (id=6482): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}, {0xc9}}}, 0x6) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x14010000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xff}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x60}, 0x1, 0x0, 0x0, 0x280048c5}, 0xc7b1c774df858e41) (async) r3 = socket(0x28, 0x2, 0x1ff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xd}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x10}]}, 0x54}}, 0x0) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r1, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x4010) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)=0x4) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x10000}, &(0x7f0000000500)=0x8) (async) bind$inet6(r3, &(0x7f0000000540)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, 0x10001}, 0x1c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000000580)={'virt_wifi0\x00'}) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f00000005c0)=@srh={0x89, 0x12, 0x4, 0x9, 0x3, 0x60, 0xfac5, [@mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast1]}, 0x98) (async) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000680)) (async) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, r6, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40000) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r7, 0x405, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x24004010) (async) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r8, 0x65, 0x6, &(0x7f0000000980), &(0x7f00000009c0)=0x4) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000b80)={&(0x7f0000000a00), 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r9, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x85) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r3) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xbc, r11, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0xb}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x8c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7fffffff}}, {0x7c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x76, 0x1, "ff61da9a7fac23cdd366e9cb894852c7d54c03723665bbd1e68c5abddc6a183d601fa1ba6d01b092382833c896cfc8953bf1864202a56ad5b307b15715403945adf8c65792047b0ab6ed03993518595a96ab6a3a712a88f6e86855756e58e032b4ade7c02ac775ae95bc150ef06ab17278ef"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000000) (async) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x50, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7f}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x9a}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xe2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x10064000) (async) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000ec0), &(0x7f0000000f00)=0x8) 15.619987432s ago: executing program 0 (id=6483): socket$inet6(0xa, 0x3, 0x2f) r0 = socket(0x10, 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000000)=0x2) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x2c, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) sendmsg$SEG6_CMD_DUMPHMAC(r2, 0x0, 0x4000001) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @remote}}}, 0x84) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x42201}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1138c32a1d0bbade, 0x2004}}}}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x631bb}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040040}, 0x8000) mmap(&(0x7f0000ff8000/0x7000)=nil, 0x7000, 0x2000000, 0x80010, r0, 0x347b000) 15.516796107s ago: executing program 4 (id=6484): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000540)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xf}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_ctinfo={0x30, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 15.483452296s ago: executing program 0 (id=6485): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711053000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 15.359256965s ago: executing program 3 (id=6488): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd26, 0x0, {0xa, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x15}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 15.275626074s ago: executing program 3 (id=6489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x1b, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0xa, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0xc}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 15.268057364s ago: executing program 3 (id=6490): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{0x0, 0x2}]}, @ptr]}}, 0x0, 0x3a}, 0x20) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000d, 0x13, r4, 0xd7735000) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x11, &(0x7f0000000100)=0xfffffffe, 0x4) (async) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r3, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) splice(r0, &(0x7f0000000040)=0x8000000000000000, r0, &(0x7f0000000100)=0x2, 0x1, 0xd) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008000a00", @ANYRES32=r2, @ANYBLOB="77dcfd80d6bd594f523b257eee9b2b3057a411f944ee9fa2f3b978aaf05f984ea1318285fcec44be67d301c7a61267600d9d759314ec95c97e4e2eb62089fb868d382cf1f0b84829fa5114"], 0x30}}, 0x4000080) 15.214814115s ago: executing program 3 (id=6491): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xa, &(0x7f0000000180)=0x6, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f00000000c0)={0x1, [0x3]}, 0x6) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000), 0xc) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000080)={0x5, [0xc00, 0x401, 0xe64, 0xc232, 0x4]}, &(0x7f0000000400)=0xe) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000100"/28], 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x157, 0x157, 0x7, [@volatile={0xb, 0x0, 0x0, 0x9, 0x3}, @var={0x10, 0x0, 0x0, 0xe, 0x4, 0x1}, @datasec={0x6, 0x4, 0x0, 0xf, 0x3, [{0x5, 0x2, 0x6292}, {0x1, 0x80, 0x8e5b}, {0x3, 0x26, 0x5}, {0x1, 0x5}], "4587cf"}, @struct={0x10, 0x7, 0x0, 0x4, 0x1, 0x0, [{0xa, 0x0, 0x3}, {0xb, 0x2, 0x3}, {0x0, 0x3, 0x8}, {0x4, 0x4, 0xb6}, {0x2, 0x4, 0x6}, {0xf, 0x3, 0x3ff}, {0xf, 0x3, 0x5}]}, @union={0x8, 0x2, 0x0, 0x5, 0x0, 0x801, [{0x4, 0x1, 0x9}, {0x2, 0x2, 0x9}]}, @enum64={0xe, 0x5, 0x0, 0x13, 0x0, 0x18, [{0xd, 0xfffffffd, 0x7f}, {0x3, 0x80000000, 0x22b5}, {0xd, 0x9, 0x1}, {0x2, 0x36, 0x5}, {0x10, 0x81, 0x6}]}, @enum64={0xf, 0x1, 0x0, 0x13, 0x0, 0x8, [{0x4, 0x3, 0x7}]}, @fwd={0x5}, @ptr={0x0, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x0, 0x61, 0x61, 0xec, 0x33]}}, &(0x7f0000000740)=""/111, 0x177, 0x6f, 0x0, 0x0, 0x10000}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7fffffff}, [@ldst={0x2, 0x0, 0x2, 0x9, 0x8, 0x30, 0x8}, @call={0x85, 0x0, 0x0, 0x94}, @exit, @alu={0x4, 0x1, 0xb, 0x3, 0x9, 0xffffffffffffffe0, 0x8}, @generic={0x8, 0x6, 0x9, 0x148, 0x6}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x5}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x4}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffff8b4f}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x55, '\x00', 0x0, 0x19, r9, 0x8, &(0x7f0000000800)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x7, 0xd, 0x8}, 0x10, 0x1a7a7, r6, 0x2, &(0x7f0000000880), &(0x7f00000008c0)=[{0x0, 0x4, 0x8, 0x4}, {0x0, 0x5, 0xb, 0x6}], 0x10, 0x3}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="00000000000000000100000014000000b7030000000000008500000083000000bf0900000300000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r10, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 15.115206967s ago: executing program 3 (id=6492): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) recvmsg(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)=""/23, 0x17}], 0x1}, 0x142) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400c600"/20, @ANYRES32=r4, @ANYBLOB="46060900000000001c00128009000100626f6e64000000000c0002800800040088"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0) 15.019259538s ago: executing program 3 (id=6493): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="09000000040000000004000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="180000004fe42760f3c790695a95689c16000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 148.560834ms ago: executing program 32 (id=6485): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711053000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 108.403565ms ago: executing program 33 (id=6482): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000040)={0x1, @read_clock_offset={{0x41f, 0x2}, {0xc9}}}, 0x6) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x14010000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xff}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x60}, 0x1, 0x0, 0x0, 0x280048c5}, 0xc7b1c774df858e41) (async) r3 = socket(0x28, 0x2, 0x1ff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xd}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x10}]}, 0x54}}, 0x0) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r1, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x4010) getsockopt$WPAN_WANTACK(r3, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440)=0x4) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000480), 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x10000}, &(0x7f0000000500)=0x8) (async) bind$inet6(r3, &(0x7f0000000540)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, 0x10001}, 0x1c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000000580)={'virt_wifi0\x00'}) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f00000005c0)=@srh={0x89, 0x12, 0x4, 0x9, 0x3, 0x60, 0xfac5, [@mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast1]}, 0x98) (async) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000680)) (async) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x6c, r6, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40804}, 0x40000) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r7, 0x405, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x24004010) (async) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r8, 0x65, 0x6, &(0x7f0000000980), &(0x7f00000009c0)=0x4) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000b80)={&(0x7f0000000a00), 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r9, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x85) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r3) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xbc, r11, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0xb}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x8c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7fffffff}}, {0x7c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x76, 0x1, "ff61da9a7fac23cdd366e9cb894852c7d54c03723665bbd1e68c5abddc6a183d601fa1ba6d01b092382833c896cfc8953bf1864202a56ad5b307b15715403945adf8c65792047b0ab6ed03993518595a96ab6a3a712a88f6e86855756e58e032b4ade7c02ac775ae95bc150ef06ab17278ef"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000000) (async) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x50, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7f}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x9a}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xe2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x10064000) (async) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000ec0), &(0x7f0000000f00)=0x8) 62.425258ms ago: executing program 34 (id=6481): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = epoll_create1(0x0) epoll_pwait(r1, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfffd}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x50, r4, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x50}}, 0x0) (async) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5de67e0a7f66d5d3}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r4, @ANYBLOB="000129bd7000ffdbdf2567000000080001007b00000008000300", @ANYRES32=0x0, @ANYBLOB="c400c5005c95690af058455327f2b257078079938739b36dd46893906405df94eba0d5b4b4c44ee0eb3a6e0be4999ac665619bbb1462f4b5d45c25edb4bb43d0e3ea97c374571dfead28da0b3f4be6f050f62c9a10c1e2c3bdf043ad85f158313a76470fca49f0ba62b170f9aa3d179a51d71f87d10b28aeed0a9d472057b096abf2e56f691a1bfb5e468faaa5c5b791ee07b8e624ae575e0467b1fd8caa0cf88f61f91bb00a028d4ca2ff8b3691f898d2851752b4abe3640b339399ffd8560c6098b83fa73ee0947ac83321"], 0xf0}, 0x1, 0x0, 0x0, 0x20004091}, 0x20000000) 0s ago: executing program 35 (id=6484): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000540)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xf}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_ctinfo={0x30, 0xe, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) kernel console output (not intermixed with test programs): p backlog [ 943.123167][T28642] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 943.169238][T28642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 943.212802][T28642] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 943.262867][T28642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 943.292762][T28642] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 943.304115][T27579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.331577][T28642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 943.364325][T28642] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 943.403353][T28642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 943.457967][T29195] netlink: 'syz.1.5961': attribute type 4 has an invalid length. [ 943.467168][T27579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.539118][T29195] syzkaller1: entered promiscuous mode [ 943.576372][T29195] syzkaller1: entered allmulticast mode [ 944.058011][T28642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 944.101632][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.154903][T28642] 8021q: adding VLAN 0 to HW filter on device team0 [ 944.210552][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.217884][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 944.319170][T29230] geneve3: entered promiscuous mode [ 944.362807][ T7526] netdevsim netdevsim3 : set [1, 1] type 2 family 0 port 55398 - 0 [ 944.373483][T29237] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5967'. [ 944.387071][ T7526] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 55398 - 0 [ 944.429129][T29230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5967'. [ 944.440810][ T7526] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 55398 - 0 [ 944.469889][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.477358][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 944.646888][T29252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5970'. [ 944.720274][T29253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5970'. [ 944.806802][T28646] block nbd4: Receive control failed (result -107) [ 944.890791][T29259] netlink: 'syz.4.5972': attribute type 1 has an invalid length. [ 945.143117][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.157071][T29273] netlink: 'syz.4.5972': attribute type 10 has an invalid length. [ 945.212868][T29259] 8021q: adding VLAN 0 to HW filter on device bond12 [ 945.254815][T29273] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5972'. [ 945.377175][T29262] bond12: (slave veth9): Enslaving as an active interface with a down link [ 945.397683][T29267] bond12: (slave dummy0): making interface the new active one [ 945.408423][T29267] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 945.424676][T29273] dummy0: entered promiscuous mode [ 945.437923][T29273] bond12: (slave dummy0): Releasing active interface [ 945.911630][T29295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5977'. [ 945.923400][T29292] netlink: 'syz.4.5976': attribute type 4 has an invalid length. [ 946.008609][T29299] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.017484][T29299] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.096849][T29303] netlink: 'syz.3.5979': attribute type 1 has an invalid length. [ 946.125478][T29302] netlink: 'syz.3.5979': attribute type 1 has an invalid length. [ 946.144607][T29303] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 946.152032][T29303] IPv6: NLM_F_CREATE should be set when creating new route [ 946.159334][T29303] IPv6: NLM_F_CREATE should be set when creating new route [ 946.166802][T29302] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 946.277850][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.497709][T29319] netlink: 'syz.2.5981': attribute type 1 has an invalid length. [ 946.508028][T27579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.759413][T29325] vlan0: entered promiscuous mode [ 946.785876][T29325] veth1_to_hsr: entered promiscuous mode [ 947.038465][T29343] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 947.055762][T29342] IPVS: set_ctl: invalid protocol: 22 10.1.1.1:20003 [ 947.107779][T28642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 947.203620][T29349] gre0: Caught tx_queue_len zero misconfig [ 947.301743][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.435280][T28642] veth0_vlan: entered promiscuous mode [ 947.520828][T29357] syzkaller1: entered promiscuous mode [ 947.537333][T29357] syzkaller1: entered allmulticast mode [ 947.560915][T28642] veth1_vlan: entered promiscuous mode [ 947.588401][T29361] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5994'. [ 947.882662][T29358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.933431][T29365] ksmbd: Unknown IPC event: 1, ignore. [ 947.940175][T29362] vxcan1 speed is unknown, defaulting to 1000 [ 947.947890][T28642] veth0_macvtap: entered promiscuous mode [ 947.964185][T29358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 947.996456][T28642] veth1_macvtap: entered promiscuous mode [ 948.029573][T29355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.088359][T29355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.106713][T28642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 948.153839][T28642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 948.214434][T29377] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5996'. [ 948.240578][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.302143][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.345845][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.367470][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.423496][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.474210][T29382] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5997'. [ 948.599233][T29384] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5998'. [ 948.770823][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.808268][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.975887][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.019675][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.381726][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 949.438877][T29401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5839'. [ 950.111932][T29426] bond1: Removing last ns target with arp_interval on [ 950.421528][T17207] net_ratelimit: 1 callbacks suppressed [ 950.421562][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.735084][T29446] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6010'. [ 950.936638][T29457] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6012'. [ 950.992586][T29457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6012'. [ 951.187607][T29462] ip6tnl0: Caught tx_queue_len zero misconfig [ 951.207037][T29462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6013'. [ 951.256667][T29462] netlink: 'syz.1.6013': attribute type 1 has an invalid length. [ 951.463334][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.863909][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.163920][T29489] netlink: 'syz.0.6018': attribute type 21 has an invalid length. [ 952.277698][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 952.297003][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 952.309624][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 952.318576][T29490] vxcan1 speed is unknown, defaulting to 1000 [ 952.331363][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 952.342048][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 952.406340][T29492] block nbd0: NBD_DISCONNECT [ 952.434982][T29492] block nbd0: Send disconnect failed -32 [ 952.502950][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.539641][T29492] block nbd0: shutting down sockets [ 952.613661][T27574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.935551][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.949654][T29509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6021'. [ 952.960344][T29506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6020'. [ 952.994189][T29506] netlink: 'syz.1.6020': attribute type 6 has an invalid length. [ 953.044962][T29506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6020'. [ 953.078660][T29509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 953.260574][T29509] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 953.371862][T29509] batman_adv: batadv0: Removing interface: ipvlan2 [ 953.413463][T29509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.543643][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.588023][ T7511] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.643002][ T7511] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.704457][ T7511] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.269527][T23946] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 954.290074][T23946] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 954.315695][ T7511] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 954.437291][T29541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 954.472892][T29547] netlink: 'syz.1.6027': attribute type 1 has an invalid length. [ 954.501353][T28646] Bluetooth: hci5: command tx timeout [ 954.507147][T29547] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6027'. [ 954.592147][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 954.708425][T23946] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 954.744653][T23946] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 955.200858][T23946] bond0: (slave netdevsim1): Releasing backup interface [ 955.240767][T23946] netdevsim netdevsim4 netdevsim1 (unregistering): left allmulticast mode [ 955.260744][T23946] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.272082][T23946] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 955.327379][T29567] sit0: entered promiscuous mode [ 955.357122][T29567] netlink: 'syz.0.6033': attribute type 1 has an invalid length. [ 955.371789][T29571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.385899][T29567] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6033'. [ 955.433439][T29491] vxcan1 speed is unknown, defaulting to 1000 [ 955.512406][T23946] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.534623][T23946] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 955.621644][T17207] net_ratelimit: 1 callbacks suppressed [ 955.621665][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.637014][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.685820][T29564] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 955.701850][T29564] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 955.890151][T29578] IPVS: ip_vs_add_dest(): server weight less than zero [ 955.936236][T29564] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 955.957844][T29564] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 956.354767][T29587] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 956.385459][T29587] IPVS: length: 4096 != 24 [ 956.661759][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.763061][T23946] batadv1: left allmulticast mode [ 956.778110][T23946] batadv1: left promiscuous mode [ 956.789082][T23946] bridge0: port 4(batadv1) entered disabled state [ 956.803068][T23946] bond6: left allmulticast mode [ 956.814286][T23946] bond6: left promiscuous mode [ 956.824451][T23946] bridge0: port 3(bond6) entered disabled state [ 956.859391][T23946] pim6reg: left allmulticast mode [ 956.867755][T23946] dvmrp0: left allmulticast mode [ 957.703418][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.736852][T23946] bond9 (unregistering): (slave geneve4): Releasing active interface [ 957.796195][T23946] bond4 (unregistering): (slave geneve2): Releasing active interface [ 957.919991][T23946] bridge0 (unregistering): left allmulticast mode [ 958.029958][T23946] bond8 (unregistering): (slave bridge4): Releasing active interface [ 958.038209][T23946] bond8 (unregistering): (slave bridge4): the permanent HWaddr of slave - d2:49:4e:60:df:55 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 958.057535][T23946] bridge4 (unregistering): left promiscuous mode [ 958.064052][T23946] bridge4 (unregistering): left allmulticast mode [ 958.087645][T23946] bond8 (unregistering): (slave bridge5): Releasing active interface [ 958.119652][T23946] bond11 (unregistering): (slave bridge6): Releasing active interface [ 958.129163][T23946] bridge6 (unregistering): left promiscuous mode [ 958.135653][T23946] bridge6 (unregistering): left allmulticast mode [ 958.190722][T23946] bond0 (unregistering): Released all slaves [ 958.219348][T23946] bond1 (unregistering): Released all slaves [ 958.253316][T23946] bond2 (unregistering): Released all slaves [ 958.289499][T23946] bond3 (unregistering): Released all slaves [ 958.323183][T23946] bond4 (unregistering): Released all slaves [ 958.359530][T23946] bond5 (unregistering): Released all slaves [ 958.395231][T23946] bond6 (unregistering): Released all slaves [ 958.427015][T23946] bond7 (unregistering): Released all slaves [ 958.490883][T23946] bond8 (unregistering): Released all slaves [ 958.525377][T23946] bond9 (unregistering): Released all slaves [ 958.563131][T23946] bond10 (unregistering): Released all slaves [ 958.617666][T23946] bond11 (unregistering): Released all slaves [ 958.654731][T23946] bond12 (unregistering): (slave veth9): Releasing active interface [ 958.668223][T23946] bond12 (unregistering): Released all slaves [ 958.676219][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.744297][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.825931][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 959.079765][T23946] : left promiscuous mode [ 959.107516][T29621] netlink: 388 bytes leftover after parsing attributes in process `syz.2.6042'. [ 959.193178][T29624] netlink: 456 bytes leftover after parsing attributes in process `syz.3.6044'. [ 959.223431][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.631376][T29618] gre1: entered promiscuous mode [ 959.655296][T29618] gre1: entered allmulticast mode [ 959.710904][T29633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6047'. [ 959.725949][T29632] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 959.756314][T29633] netlink: 'syz.2.6047': attribute type 8 has an invalid length. [ 959.781527][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.997763][T29643] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20000 [ 960.147832][T29644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 960.649064][T29662] 8021q: VLANs not supported on sit0 [ 960.695510][T29662] netlink: 'syz.2.6053': attribute type 4 has an invalid length. [ 960.826975][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 960.862231][T29669] netlink: 'syz.1.6055': attribute type 29 has an invalid length. [ 960.892749][T29669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6055'. [ 960.979906][T29675] veth0: entered promiscuous mode [ 961.182095][T29675] bond9: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 961.233800][T29675] bond9 (unregistering): Released all slaves [ 961.478419][T29697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6059'. [ 961.712111][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.818257][T29673] veth0: left promiscuous mode [ 961.863757][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.115909][T29491] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.136288][T29491] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.156833][T29491] bridge_slave_0: entered allmulticast mode [ 962.189757][T29491] bridge_slave_0: entered promiscuous mode [ 962.222828][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 962.264561][T29491] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.302840][T29491] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.338553][T29491] bridge_slave_1: entered allmulticast mode [ 962.406538][T29491] bridge_slave_1: entered promiscuous mode [ 962.450351][T29718] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 962.509470][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.566709][T29720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 962.626022][T29720] netlink: 'syz.3.6064': attribute type 1 has an invalid length. [ 962.693419][T23946] hsr_slave_0: left promiscuous mode [ 962.710008][T23946] hsr_slave_1: left promiscuous mode [ 962.901738][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.114507][T29733] netlink: 'syz.1.6067': attribute type 1 has an invalid length. [ 963.336819][T23948] smc: removing ib device syz2 [ 963.394076][T23948] smbdirect: ib_dev[syz2] removed [ 963.454518][T29491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.583479][T29725] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 963.627232][T27571] vxcan1 speed is unknown, defaulting to 1000 [ 963.638989][T27571] syz2: Port: 1 Link DOWN [ 963.748245][T29742] netlink: 'syz.0.6069': attribute type 1 has an invalid length. [ 963.756256][T29742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6069'. [ 963.819330][T29733] 8021q: adding VLAN 0 to HW filter on device bond6 [ 963.863131][T29734] bond6: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 963.881477][T29734] bond6: entered allmulticast mode [ 963.899608][T29747] netlink: 'syz.0.6069': attribute type 2 has an invalid length. [ 963.917467][T29747] netlink: 'syz.0.6069': attribute type 8 has an invalid length. [ 963.926721][T29491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.936303][T29747] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6069'. [ 963.946980][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.125690][T29749] netlink: 'syz.1.6070': attribute type 1 has an invalid length. [ 964.154809][T29749] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6070'. [ 964.167611][T29743] ip6gre2: entered promiscuous mode [ 964.179622][T29743] ip6gre2: entered allmulticast mode [ 964.188080][T29749] netlink: 'syz.1.6070': attribute type 1 has an invalid length. [ 964.225381][T29739] syzkaller1: entered promiscuous mode [ 964.247434][T29739] syzkaller1: entered allmulticast mode [ 964.659531][T29491] team0: Port device team_slave_0 added [ 964.693673][T29491] team0: Port device team_slave_1 added [ 964.718824][T29763] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 964.745756][T27571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.818418][T29774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6075'. [ 964.881902][T29774] netlink: 11 bytes leftover after parsing attributes in process `syz.0.6075'. [ 964.985209][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.226716][T29491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.243229][T29491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.304705][T29491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.462214][T29799] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6080'. [ 965.552641][T29790] 8021q: adding VLAN 0 to HW filter on device bond10 [ 965.608066][T29491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.629085][T29491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.706803][T29491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.803251][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 965.965689][T29814] validate_nla: 1 callbacks suppressed [ 965.965711][T29814] netlink: 'syz.0.6084': attribute type 1 has an invalid length. [ 966.022481][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 966.213299][T29820] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6087'. [ 966.297826][T29823] macvlan2: entered promiscuous mode [ 966.312618][T29823] macvlan2: entered allmulticast mode [ 966.353784][ T6168] block nbd1: Possible stuck request ffff88807a6f0000: control (read@0,1024B). Runtime 150 seconds [ 966.364784][ T6168] block nbd1: Possible stuck request ffff88807a6f01c0: control (read@1024,1024B). Runtime 150 seconds [ 966.375980][ T6168] block nbd1: Possible stuck request ffff88807a6f0380: control (read@2048,1024B). Runtime 150 seconds [ 966.387174][ T6168] block nbd1: Possible stuck request ffff88807a6f0540: control (read@3072,1024B). Runtime 150 seconds [ 966.460583][T29491] hsr_slave_0: entered promiscuous mode [ 966.494714][T29491] hsr_slave_1: entered promiscuous mode [ 966.520661][T29491] debugfs: 'hsr0' already exists in 'hsr' [ 966.529896][T29491] Cannot create hsr debugfs directory [ 967.061999][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.293263][T29875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.304138][T29875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.317158][T29875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.333315][T29875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.358832][T29875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.382938][T29875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.407186][T29879] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6099'. [ 967.726961][T29898] gre2: entered promiscuous mode [ 967.764305][T23946] IPVS: stop unused estimator thread 0... [ 967.786327][T27571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.003572][T29908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 968.045775][T29912] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6106'. [ 968.246059][T29920] netlink: 'syz.3.6106': attribute type 1 has an invalid length. [ 968.300294][T29913] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6104'. [ 968.335512][T29913] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6104'. [ 968.448500][T29925] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6109'. [ 968.628308][T29925] block nbd0: not configured, cannot reconfigure [ 969.506275][T29491] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 969.536922][T29491] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 969.559253][T29491] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 969.631609][T29491] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 969.659035][T29491] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 969.694556][T29491] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 969.720291][T29491] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 969.750342][T29969] xt_NFQUEUE: number of total queues is 0 [ 969.778518][T29491] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 969.879575][T29962] netlink: 'syz.3.6117': attribute type 1 has an invalid length. [ 969.922410][T29962] __nla_validate_parse: 1 callbacks suppressed [ 969.922431][T29962] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6117'. [ 969.983336][T29962] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.004385][T29962] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.011667][T29962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 970.183166][T29990] dummy0: left promiscuous mode [ 970.467496][T29491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.703502][T30020] netlink: 'syz.2.6127': attribute type 1 has an invalid length. [ 970.715005][T29491] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.781821][ T7511] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.789105][ T7511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 970.861840][ T7511] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.869112][ T7511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.222986][T17207] net_ratelimit: 5 callbacks suppressed [ 971.223007][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.310465][T30048] netlink: 'syz.3.6135': attribute type 1 has an invalid length. [ 971.343496][T30048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6135'. [ 971.363311][T30048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6135'. [ 971.389521][T30048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6135'. [ 971.418492][T30048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6135'. [ 971.431214][T30048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6135'. [ 971.657101][T30062] Bluetooth: MGMT ver 1.23 [ 971.712779][T30062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.752037][T30062] bond0: (slave batadv0): Releasing active interface [ 971.904346][T30080] netlink: 576 bytes leftover after parsing attributes in process `syz.0.6141'. [ 972.047635][T30086] netlink: 'syz.2.6142': attribute type 3 has an invalid length. [ 972.060184][T30088] netlink: 'syz.3.6143': attribute type 1 has an invalid length. [ 972.081868][T30088] netlink: 'syz.3.6143': attribute type 2 has an invalid length. [ 972.103339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 972.118866][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.255009][T30099] netlink: 'syz.0.6145': attribute type 3 has an invalid length. [ 972.268529][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.635416][T30116] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6149'. [ 972.680525][T30123] netlink: 'syz.2.6151': attribute type 1 has an invalid length. [ 972.695942][T29491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.901255][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.068688][T30143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.077671][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.301590][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.393686][T30155] xt_nat: multiple ranges no longer supported [ 973.453066][T30161] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6158'. [ 973.478562][T30164] netlink: 'syz.3.6159': attribute type 49 has an invalid length. [ 973.600741][T29491] veth0_vlan: entered promiscuous mode [ 973.656584][T29491] veth1_vlan: entered promiscuous mode [ 973.848958][T30178] bond2: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 973.862737][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.877991][T30178] bond2 (unregistering): Released all slaves [ 974.048690][T29491] veth0_macvtap: entered promiscuous mode [ 974.097618][T29491] veth1_macvtap: entered promiscuous mode [ 974.154974][T29491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 974.188870][T30195] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 974.215007][T30195] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6166'. [ 974.255854][T29491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 974.312537][T30202] Unknown options in mask 4 [ 974.329484][T23946] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.349835][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.370629][T23946] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.394500][T23946] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.433504][T23946] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.615690][T30209] netlink: 'syz.3.6170': attribute type 15 has an invalid length. [ 974.752281][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.787131][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.912708][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.928186][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.019321][T30217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6172'. [ 975.049488][T30217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6172'. [ 975.386730][T30246] netlink: 45 bytes leftover after parsing attributes in process `syz.2.6176'. [ 975.470593][T30246] tipc: Enabling of bearer rejected, already enabled [ 975.503191][T30246] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6176'. [ 976.069983][T30272] netlink: 'syz.2.6186': attribute type 1 has an invalid length. [ 976.162503][T30277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6188'. [ 976.225090][T30272] 8021q: adding VLAN 0 to HW filter on device bond11 [ 976.385970][T27576] IPVS: starting estimator thread 0... [ 976.408421][T30280] bond11: (slave veth11): Enslaving as an active interface with a down link [ 976.426551][T17209] net_ratelimit: 3 callbacks suppressed [ 976.426571][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.461921][T30301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6188'. [ 976.513072][T30297] IPVS: using max 28 ests per chain, 67200 per kthread [ 976.767921][T30272] bond11: (slave veth13): Enslaving as an active interface with a down link [ 976.817863][T30311] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6193'. [ 976.915162][T30311] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.923056][T30311] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.927934][T27571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.245187][ T5634] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 977.264635][ T5634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 977.277366][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 977.287623][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 977.295947][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 977.465935][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.478425][T30323] syzkaller0: entered promiscuous mode [ 977.510870][T30323] syzkaller0: entered allmulticast mode [ 977.623715][T30337] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6198'. [ 978.423240][T30339] netlink: 'syz.0.6199': attribute type 4 has an invalid length. [ 978.484379][T30378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6205'. [ 978.506317][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.623834][T30382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.654345][T30382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.693421][T30382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.724280][T30386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.751235][T30386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.773075][T30386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.807408][T30390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6209'. [ 978.816972][T30382] tipc: Failed to remove unknown binding: 66,1,1/134418688:1070270636/1070270638 [ 978.990063][T30395] bridge0: port 3(vlan1) entered blocking state [ 979.023705][T30395] bridge0: port 3(vlan1) entered disabled state [ 979.036622][T30395] vlan1: entered allmulticast mode [ 979.045652][T30395] geneve0: entered allmulticast mode [ 979.072992][T30395] vlan1: entered promiscuous mode [ 979.088931][T30395] geneve0: entered promiscuous mode [ 979.364849][T30411] Cannot find del_set index 0 as target [ 979.381558][T28646] Bluetooth: hci3: command tx timeout [ 979.790677][T30428] xt_ipcomp: unknown flags 1D [ 980.018717][T30319] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.032154][T30319] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.040428][T30319] bridge_slave_0: entered allmulticast mode [ 980.059146][T30319] bridge_slave_0: entered promiscuous mode [ 980.077928][T30319] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.097699][T30319] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.121341][T30319] bridge_slave_1: entered allmulticast mode [ 980.163568][T30319] bridge_slave_1: entered promiscuous mode [ 980.305320][T30319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 980.344189][T30319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 980.493902][T30319] team0: Port device team_slave_0 added [ 980.526954][T30319] team0: Port device team_slave_1 added [ 980.546445][T30460] __nla_validate_parse: 1 callbacks suppressed [ 980.546465][T30460] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6226'. [ 980.770821][T30319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 980.794160][T30319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 980.835485][T30319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 980.853939][T30473] lo speed is unknown, defaulting to 1000 [ 980.863981][T30473] lo speed is unknown, defaulting to 1000 [ 980.872382][T30319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 980.880517][T30319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 980.910669][T30319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.934278][T30473] lo speed is unknown, defaulting to 1000 [ 980.946504][T30473] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 980.975090][T30473] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 981.028255][T30473] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 981.104951][T30473] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 981.116625][T30319] hsr_slave_0: entered promiscuous mode [ 981.147546][T30319] hsr_slave_1: entered promiscuous mode [ 981.162493][T30319] debugfs: 'hsr0' already exists in 'hsr' [ 981.176319][T30319] Cannot create hsr debugfs directory [ 981.213612][T30489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6231'. [ 981.230644][T30489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6231'. [ 981.279073][T30473] lo speed is unknown, defaulting to 1000 [ 981.328319][T30473] lo speed is unknown, defaulting to 1000 [ 981.364620][T30493] xt_hashlimit: overflow, rate too high: 0 [ 981.382792][T30473] lo speed is unknown, defaulting to 1000 [ 981.409666][T30473] lo speed is unknown, defaulting to 1000 [ 981.417918][T30489] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6231'. [ 981.436248][T30473] lo speed is unknown, defaulting to 1000 [ 981.461220][T28646] Bluetooth: hci3: command tx timeout [ 981.469307][T30473] lo speed is unknown, defaulting to 1000 [ 981.502499][T30473] lo speed is unknown, defaulting to 1000 [ 981.621575][T17207] net_ratelimit: 1003 callbacks suppressed [ 981.621595][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.705455][T27575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.717066][T23946] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.729343][T27571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.742693][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.799930][T30319] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 981.880881][T30502] sit3: entered promiscuous mode [ 981.926158][T30502] sit3: entered allmulticast mode [ 982.008694][T30319] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 982.160503][T30319] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 982.276623][T30319] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 982.665455][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.981578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.995571][T27571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.497706][T30460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 983.544404][T28646] Bluetooth: hci3: command tx timeout [ 983.575801][T30319] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 983.612546][T30319] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 983.620853][T30319] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 983.664785][T30319] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 983.682673][T30319] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 983.702675][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.713050][T30319] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 983.725915][T30319] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 983.750882][T30319] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 983.791824][T30527] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6235'. [ 983.812246][T30527] nbd: illegal input index 65508 [ 984.015238][T30319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 984.104243][T30319] 8021q: adding VLAN 0 to HW filter on device team0 [ 984.124905][T30547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6240'. [ 984.177304][T23948] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.184592][T23948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 984.259662][T23948] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.267128][T23948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 984.413792][T30555] netlink: 'syz.4.6243': attribute type 2 has an invalid length. [ 984.627934][T30564] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 984.676375][T30564] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6245'. [ 984.741434][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 985.003275][T30576] netlink: 'syz.2.6249': attribute type 2 has an invalid length. [ 985.038975][T30576] netlink: 'syz.2.6249': attribute type 1 has an invalid length. [ 985.356377][T30592] netlink: 'syz.2.6253': attribute type 16 has an invalid length. [ 985.377892][T30593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6252'. [ 985.380566][T30592] netlink: 'syz.2.6253': attribute type 17 has an invalid length. [ 985.517469][T30319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 985.622419][T28646] Bluetooth: hci3: command tx timeout [ 985.766858][T30319] veth0_vlan: entered promiscuous mode [ 985.826766][T30319] veth1_vlan: entered promiscuous mode [ 985.947320][T30319] veth0_macvtap: entered promiscuous mode [ 985.975331][T30319] veth1_macvtap: entered promiscuous mode [ 985.982243][T30623] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6259'. [ 986.059704][T30319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 986.082399][T30618] lo speed is unknown, defaulting to 1000 [ 986.111394][T30319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 986.217818][ T89] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.227429][ T89] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.258460][T30626] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6260'. [ 986.272988][T30627] syzkaller0: entered promiscuous mode [ 986.291775][T30627] syzkaller0: entered allmulticast mode [ 986.300234][ T89] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.312704][ T89] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.651379][ C0] net_ratelimit: 11 callbacks suppressed [ 986.651403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.788565][T30635] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6263'. [ 986.800780][T30640] xt_nat: multiple ranges no longer supported [ 986.808497][T30635] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6263'. [ 986.841179][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.853141][T30633] syzkaller1: entered promiscuous mode [ 986.859659][T30633] syzkaller1: entered allmulticast mode [ 986.875740][T30635] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6263'. [ 986.889514][ T7524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.899554][T30635] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6263'. [ 986.908865][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.920246][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.943754][ T7524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.996392][T30635] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6263'. [ 987.007073][T30635] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6263'. [ 987.034866][T30635] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6263'. [ 987.048310][T30635] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6263'. [ 987.083790][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.104167][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.131118][T30646] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 987.341152][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.416880][T30656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 987.437958][T17202] lo speed is unknown, defaulting to 1000 [ 987.463133][ T7524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.521481][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.537388][T27571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.606027][T30632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.757438][T30666] Cannot find set identified by id 0 to match [ 988.335547][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 988.357505][ T5634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 988.374295][ T5634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 988.387588][ T5634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 988.398623][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 988.429717][T30684] gretap0: entered promiscuous mode [ 988.503602][T30684] vlan3: entered promiscuous mode [ 989.010544][T30714] syzkaller0: entered promiscuous mode [ 989.069376][T30714] syzkaller0: entered allmulticast mode [ 989.585420][T30683] lo speed is unknown, defaulting to 1000 [ 989.852266][T30738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 990.501130][T28646] Bluetooth: hci4: command tx timeout [ 990.734629][T30774] netlink: 'syz.3.6297': attribute type 1 has an invalid length. [ 991.126513][T30785] netlink: 'syz.1.6301': attribute type 7 has an invalid length. [ 991.424613][T30789] __nla_validate_parse: 38 callbacks suppressed [ 991.424649][T30789] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6303'. [ 991.530482][T30683] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.552802][T30683] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.575525][T30683] bridge_slave_0: entered allmulticast mode [ 991.602195][T30683] bridge_slave_0: entered promiscuous mode [ 991.629737][T30683] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.668312][T30683] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.697854][T30683] bridge_slave_1: entered allmulticast mode [ 991.716486][T30683] bridge_slave_1: entered promiscuous mode [ 991.756963][T30802] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 991.838670][T30683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.879762][T30683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.014325][T30683] team0: Port device team_slave_0 added [ 992.021863][T17209] net_ratelimit: 8 callbacks suppressed [ 992.021883][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.052471][T30823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6310'. [ 992.067034][T30683] team0: Port device team_slave_1 added [ 992.103219][T27571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 992.115335][T30825] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6311'. [ 992.200833][T30683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.222342][T30683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.288509][T30683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.322892][T30683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.340221][T30683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.409974][T30683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.491801][T30836] sctp: [Deprecated]: syz.3.6316 (pid 30836) Use of int in maxseg socket option. [ 992.491801][T30836] Use struct sctp_assoc_value instead [ 992.592497][T28646] Bluetooth: hci4: command tx timeout [ 992.744803][T30683] hsr_slave_0: entered promiscuous mode [ 992.755088][T30683] hsr_slave_1: entered promiscuous mode [ 992.765416][T30683] debugfs: 'hsr0' already exists in 'hsr' [ 992.775064][T30683] Cannot create hsr debugfs directory [ 992.788951][T30845] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6317'. [ 992.946467][ T30] audit: type=1804 audit(1784904409.168:15): pid=30854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.6321" name="/newroot/36/cgroup.controllers" dev="tmpfs" ino=206 res=1 errno=0 [ 993.029777][ T30] audit: type=1800 audit(1784904409.168:16): pid=30854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6321" name="cgroup.controllers" dev="tmpfs" ino=206 res=0 errno=0 [ 993.066517][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.271819][T27574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.347692][T30864] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 993.853401][T30683] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 993.916160][T30683] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.102737][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.339054][T30892] netlink: 'syz.3.6336': attribute type 11 has an invalid length. [ 994.358977][T30683] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 994.394119][T30683] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.526050][T30890] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6335'. [ 994.577766][T30890] unsupported nla_type 7424 [ 994.663639][T28646] Bluetooth: hci4: command tx timeout [ 994.709798][T30683] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 994.761548][T30683] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.852144][T30901] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 995.066710][T30683] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 995.104273][T30683] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.143164][T27571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.151362][T27571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.286529][T30913] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6340'. [ 995.473488][T30918] ip6t_srh: unknown srh match flags 4000 [ 996.182688][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.433367][ T6168] block nbd1: Possible stuck request ffff88807a6f0000: control (read@0,1024B). Runtime 180 seconds [ 996.444307][ T6168] block nbd1: Possible stuck request ffff88807a6f01c0: control (read@1024,1024B). Runtime 180 seconds [ 996.456314][ T6168] block nbd1: Possible stuck request ffff88807a6f0380: control (read@2048,1024B). Runtime 180 seconds [ 996.467558][ T6168] block nbd1: Possible stuck request ffff88807a6f0540: control (read@3072,1024B). Runtime 180 seconds [ 996.741395][T28646] Bluetooth: hci4: command tx timeout [ 996.751891][T30969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6351'. [ 996.774628][T30968] bond0: Removing last arp target with arp_interval on [ 996.832737][T30969] netlink: 'syz.4.6351': attribute type 1 has an invalid length. [ 996.863578][T30969] netlink: 'syz.4.6351': attribute type 2 has an invalid length. [ 996.929331][T30683] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 997.009366][T30683] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 997.050650][T30683] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 997.156052][T30683] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 997.211166][T30683] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 997.221300][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 997.262078][T30683] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 997.313082][T30996] vcan2: entered promiscuous mode [ 997.329107][T30996] vcan2: entered allmulticast mode [ 997.364513][T30683] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 997.402419][T30683] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 997.630838][T31018] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.6362'. [ 998.012350][T31025] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6365'. [ 998.069325][T31025] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6365'. [ 998.081268][T30683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.093700][T31035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6367'. [ 998.119155][T31038] netlink: 'syz.0.6368': attribute type 4 has an invalid length. [ 998.138414][T31035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6367'. [ 998.139013][T31037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6366'. [ 998.152523][T31034] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6365'. [ 998.191285][T27571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.194834][T31035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6367'. [ 998.236631][T30683] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.261517][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.290910][T23948] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.298276][T23948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 998.343880][ T7524] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.351124][ T7524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 998.368154][T31035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6367'. [ 998.514495][T31035] bridge2: entered promiscuous mode [ 998.530060][T31035] bridge2: entered allmulticast mode [ 998.628953][T31051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 999.085882][T31063] bond9: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 999.160682][T31063] bond9 (unregistering): Released all slaves [ 999.268039][T31076] netlink: 'syz.1.6377': attribute type 23 has an invalid length. [ 999.303553][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 999.644669][ T7526] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 999.673184][ T7526] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.696790][ T7526] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.709910][T31089] netlink: 'syz.1.6381': attribute type 2 has an invalid length. [ 1000.034834][T31108] netlink: 'syz.3.6384': attribute type 1 has an invalid length. [ 1000.053121][T31103] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1000.071189][T31108] netlink: 'syz.3.6384': attribute type 1 has an invalid length. [ 1000.341766][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.451843][T30683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.597586][T31118] syzkaller0: entered promiscuous mode [ 1000.616339][T31118] syzkaller0: entered allmulticast mode [ 1000.718917][T31120] veth3: entered promiscuous mode [ 1000.747663][T30683] veth0_vlan: entered promiscuous mode [ 1000.770819][T31122] syzkaller0: entered promiscuous mode [ 1000.801924][T31122] syzkaller0: entered allmulticast mode [ 1000.985408][T30683] veth1_vlan: entered promiscuous mode [ 1001.024717][T31124] tipc: Started in network mode [ 1001.039031][T31124] tipc: Node identity 4ec8c24741ff, cluster identity 4711 [ 1001.058627][T31124] tipc: Enabled bearer , priority 0 [ 1001.212992][T31121] tipc: Resetting bearer [ 1001.221405][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.327605][T31121] tipc: Disabling bearer [ 1001.382158][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1001.444589][T30683] veth0_macvtap: entered promiscuous mode [ 1001.480458][T30683] veth1_macvtap: entered promiscuous mode [ 1001.543711][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1001.565733][T31150] x_tables: duplicate underflow at hook 1 [ 1001.971186][T30683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1002.004552][T30683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1002.052492][ T7511] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.084245][ T7511] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.113749][ T7511] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.136742][ T7511] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.399239][T31168] __nla_validate_parse: 11 callbacks suppressed [ 1002.399264][T31168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6406'. [ 1002.423067][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.462167][T23948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.495348][T23948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.627405][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.649331][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.825846][T27574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.909623][T31180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6275'. [ 1002.931912][T31180] tipc: Invalid UDP bearer configuration [ 1002.931978][T31180] tipc: Enabling of bearer rejected, failed to enable media [ 1003.087706][T31185] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6411'. [ 1003.097636][T31185] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6411'. [ 1003.343328][T31189] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1003.401689][T31195] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6416'. [ 1003.469704][T27575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.477991][T27575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.672661][T31202] syzkaller0: entered promiscuous mode [ 1003.692725][T31202] syzkaller0: entered allmulticast mode [ 1003.956270][T31219] tipc: Failed to remove unknown binding: 66,0,0/0:1442655228/1442655229 [ 1003.979232][T31219] tipc: Failed to remove unknown binding: 66,0,0/0:1442655228/1442655229 [ 1004.047516][T31225] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6424'. [ 1004.261279][T27574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1004.502264][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.133157][T31281] netlink: 'syz.1.6436': attribute type 1 has an invalid length. [ 1005.156421][T31282] netlink: 'syz.1.6436': attribute type 1 has an invalid length. [ 1005.333633][T31284] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1005.541676][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.567961][T31296] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1005.580808][T31297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6439'. [ 1005.622770][T31297] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6439'. [ 1005.669067][T31299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6441'. [ 1005.775599][T31307] netlink: 'syz.2.6444': attribute type 1 has an invalid length. [ 1005.797540][T31299] bond3: (slave syz_tun): Enslaving as an active interface with an up link [ 1005.883981][T31313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6443'. [ 1006.065284][T31323] openvswitch: netlink: Missing valid actions attribute. [ 1006.103919][T31323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1006.114713][T31323] netlink: 'syz.3.6446': attribute type 1 has an invalid length. [ 1006.214766][T31327] xt_SECMARK: invalid mode: 9 [ 1006.809286][T31347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1006.848704][T31347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1006.876598][T31347] Unsupported ieee802154 address type: 0 [ 1007.056831][T31359] smc: net device vlan1 applied user defined pnetid SYZ2 [ 1007.135809][T31361] netlink: 'syz.1.6461': attribute type 4 has an invalid length. [ 1007.146800][T31359] smc: net device vlan1 erased user defined pnetid SYZ2 [ 1007.346895][T31379] syzkaller0: entered promiscuous mode [ 1007.352986][T31379] syzkaller0: entered allmulticast mode [ 1007.622291][T17209] net_ratelimit: 2 callbacks suppressed [ 1007.622312][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1007.896003][T31408] netlink: 'syz.1.6474': attribute type 12 has an invalid length. [ 1007.905791][T31408] netlink: 'syz.1.6474': attribute type 29 has an invalid length. [ 1007.915573][T31408] __nla_validate_parse: 5 callbacks suppressed [ 1007.915592][T31408] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6474'. [ 1007.931849][T31408] netlink: 'syz.1.6474': attribute type 1 has an invalid length. [ 1007.939965][T31408] netlink: 11 bytes leftover after parsing attributes in process `syz.1.6474'. [ 1007.970498][T31407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1008.186543][T31424] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1008.348021][T31430] netlink: 'syz.2.6481': attribute type 1 has an invalid length. [ 1008.367823][T31430] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6481'. [ 1008.662578][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1008.790079][T31464] netlink: 'syz.3.6492': attribute type 1 has an invalid length. [ 1008.828615][T31464] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1008.839210][T31464] bond9: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 1008.849612][T31464] bond9: entered allmulticast mode [ 1008.868452][T31464] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1009.159410][ T5634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1009.177374][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1009.188075][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1009.207725][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1009.217325][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1009.557140][T31469] lo speed is unknown, defaulting to 1000 [ 1009.701326][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.824214][T31469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.831659][T31469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.839122][T31469] bridge_slave_0: entered allmulticast mode [ 1009.847103][T31469] bridge_slave_0: entered promiscuous mode [ 1009.856018][T31469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.864204][T31469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.872106][T31469] bridge_slave_1: entered allmulticast mode [ 1009.880009][T31469] bridge_slave_1: entered promiscuous mode [ 1009.915774][T31469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.929100][T31469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.964648][T31469] team0: Port device team_slave_0 added [ 1009.973121][T31469] team0: Port device team_slave_1 added [ 1010.003072][T31469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.010164][T31469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.038287][T31469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.054583][T31469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1010.061704][T31469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.088159][T31469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.140534][T31469] hsr_slave_0: entered promiscuous mode [ 1010.147418][T31469] hsr_slave_1: entered promiscuous mode [ 1010.154248][T31469] debugfs: 'hsr0' already exists in 'hsr' [ 1010.160008][T31469] Cannot create hsr debugfs directory [ 1010.342311][T27575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.456410][T31469] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1010.468555][T31469] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.479152][T31469] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 55398 - 0 [ 1010.593701][T31469] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1010.605078][T31469] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.616089][T31469] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 55398 - 0 [ 1010.718707][T31469] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1010.728968][T31469] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.748653][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1010.757841][T31469] netdevsim netdevsim3  (unregistering): unset [1, 1] type 2 family 0 port 55398 - 0 [ 1011.301298][T31471] Bluetooth: hci2: command tx timeout [ 1011.784964][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1012.821726][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.064388][T27571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.381428][T31471] Bluetooth: hci2: command tx timeout [ 1013.387102][T27571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.861395][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.989914][ T4993] udevd[4993]: worker [23474] /devices/virtual/block/nbd1 timeout; kill it [ 1013.999719][ T4993] udevd[4993]: seq 28849 '/devices/virtual/block/nbd1' killed [ 1014.902190][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.461360][T31471] Bluetooth: hci2: command tx timeout [ 1015.941826][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.425544][T27574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.981685][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.990479][ T6352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.001787][T27574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1017.542628][ T5634] Bluetooth: hci2: command tx timeout [ 1018.024978][T17202] net_ratelimit: 1 callbacks suppressed [ 1018.024994][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.824703][T27574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.061541][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.102344][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.141841][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.862682][T27575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.182287][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1022.670835][T27571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.221375][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.014529][T31471] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1024.035138][T31471] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1024.045615][T31471] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1024.055398][T31471] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1024.065321][T31471] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1024.179444][T31471] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1024.199590][T31471] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1024.210527][T31471] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1024.218820][T31471] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1024.226741][T31471] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1024.262074][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1024.337352][ T5646] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1024.353513][ T5646] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1024.368805][T31516] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1024.377227][T31516] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1024.390497][ T5646] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1024.390547][T31516] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1024.414423][ T5646] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1024.427366][ T5646] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1024.427573][T31516] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1024.435625][ T5646] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1024.903475][T27574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.114235][T31504] lo speed is unknown, defaulting to 1000 [ 1025.285652][T31507] lo speed is unknown, defaulting to 1000 [ 1025.311956][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1025.315456][T31512] lo speed is unknown, defaulting to 1000 [ 1025.346706][T31511] lo speed is unknown, defaulting to 1000 [ 1025.865021][T31504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.872675][T31504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.880046][T31504] bridge_slave_0: entered allmulticast mode [ 1025.894061][T31504] bridge_slave_0: entered promiscuous mode [ 1025.922638][T31504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.929981][T31504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.944617][T31504] bridge_slave_1: entered allmulticast mode [ 1025.955731][T31504] bridge_slave_1: entered promiscuous mode [ 1026.081096][T31504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1026.115658][T31504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1026.181362][T31516] Bluetooth: hci1: command tx timeout [ 1026.205252][T31504] team0: Port device team_slave_0 added [ 1026.244967][T31504] team0: Port device team_slave_1 added [ 1026.270494][T31507] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.278056][T31507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.286443][T31507] bridge_slave_0: entered allmulticast mode [ 1026.293994][T31507] bridge_slave_0: entered promiscuous mode [ 1026.340588][T31507] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.341737][T31516] Bluetooth: hci6: command tx timeout [ 1026.356060][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1026.356199][T31507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.372800][T31507] bridge_slave_1: entered allmulticast mode [ 1026.380448][T31507] bridge_slave_1: entered promiscuous mode [ 1026.414064][T31512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.421639][T31512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.428967][T31512] bridge_slave_0: entered allmulticast mode [ 1026.437624][T31512] bridge_slave_0: entered promiscuous mode [ 1026.462434][T31504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.470122][T31504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.496531][T31504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.502174][T31516] Bluetooth: hci7: command tx timeout [ 1026.509416][ T5646] Bluetooth: hci8: command tx timeout [ 1026.523762][ T6168] block nbd1: Possible stuck request ffff88807a6f0000: control (read@0,1024B). Runtime 210 seconds [ 1026.538883][ T6168] block nbd1: Possible stuck request ffff88807a6f01c0: control (read@1024,1024B). Runtime 210 seconds [ 1026.550282][ T6168] block nbd1: Possible stuck request ffff88807a6f0380: control (read@2048,1024B). Runtime 210 seconds [ 1026.561664][ T6168] block nbd1: Possible stuck request ffff88807a6f0540: control (read@3072,1024B). Runtime 210 seconds [ 1026.579615][T31512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.587844][T31512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.595695][T31512] bridge_slave_1: entered allmulticast mode [ 1026.603540][T31512] bridge_slave_1: entered promiscuous mode [ 1026.623248][T31504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.630367][T31504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.657831][T31504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.674723][T31511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.682006][T31511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.689371][T31511] bridge_slave_0: entered allmulticast mode [ 1026.697278][T31511] bridge_slave_0: entered promiscuous mode [ 1026.721067][T31507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1026.738492][T31511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.746301][T31511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.754131][T31511] bridge_slave_1: entered allmulticast mode [ 1026.762460][T31511] bridge_slave_1: entered promiscuous mode [ 1026.786234][T31507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1026.811682][T31512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1026.826447][T31512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1026.900245][T31507] team0: Port device team_slave_0 added [ 1026.910674][T31511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1026.927530][T31511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1026.962340][T31507] team0: Port device team_slave_1 added [ 1026.983642][T31512] team0: Port device team_slave_0 added [ 1026.997756][T31504] hsr_slave_0: entered promiscuous mode [ 1027.005096][T31504] hsr_slave_1: entered promiscuous mode [ 1027.012091][T31504] debugfs: 'hsr0' already exists in 'hsr' [ 1027.017902][T31504] Cannot create hsr debugfs directory [ 1027.050534][T31512] team0: Port device team_slave_1 added [ 1027.071934][T31511] team0: Port device team_slave_0 added [ 1027.093766][T31507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.100914][T31507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.128815][T31507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.144288][T31511] team0: Port device team_slave_1 added [ 1027.175002][T31507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.182839][T31507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.209124][T31507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.236327][T31512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.243546][T31512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.269772][T31512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.310784][T31512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.319031][T31512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.346569][T31512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.380722][T31511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.388104][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.389649][T31511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.422832][T31511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.453938][T31511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.461433][T31511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.488100][T31511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.580747][T31512] hsr_slave_0: entered promiscuous mode [ 1027.587843][T31512] hsr_slave_1: entered promiscuous mode [ 1027.594929][T31512] debugfs: 'hsr0' already exists in 'hsr' [ 1027.600804][T31512] Cannot create hsr debugfs directory [ 1027.625452][T31507] hsr_slave_0: entered promiscuous mode [ 1027.632584][T31507] hsr_slave_1: entered promiscuous mode [ 1027.639946][T31507] debugfs: 'hsr0' already exists in 'hsr' [ 1027.646610][T31507] Cannot create hsr debugfs directory [ 1027.705551][T31511] hsr_slave_0: entered promiscuous mode [ 1027.712432][T31511] hsr_slave_1: entered promiscuous mode [ 1027.718981][T31511] debugfs: 'hsr0' already exists in 'hsr' [ 1027.725068][T31511] Cannot create hsr debugfs directory [ 1027.943728][T27574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.261394][T31516] Bluetooth: hci1: command tx timeout [ 1028.423527][T31516] Bluetooth: hci6: command tx timeout [ 1028.432638][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.581207][T31516] Bluetooth: hci7: command tx timeout [ 1028.592058][T31516] Bluetooth: hci8: command tx timeout [ 1029.063645][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.461404][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.345402][T31516] Bluetooth: hci1: command tx timeout [ 1030.501327][T31516] Bluetooth: hci6: command tx timeout [ 1030.507748][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.661297][T31516] Bluetooth: hci8: command tx timeout [ 1030.661910][ T5646] Bluetooth: hci7: command tx timeout [ 1031.541821][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.102286][T27571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.263690][T27575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.421360][T31516] Bluetooth: hci1: command tx timeout [ 1032.581235][T31516] Bluetooth: hci6: command tx timeout [ 1032.584399][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.741309][T31516] Bluetooth: hci8: command tx timeout [ 1032.741499][ T5646] Bluetooth: hci7: command tx timeout [ 1033.621932][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.661413][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.146531][T27575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.701421][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.743614][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.781752][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.183146][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.821727][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.862109][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.901709][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.224323][T27575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.864151][T27575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.941717][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1042.981652][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.031363][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.262798][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.422534][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.063773][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.101688][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.141415][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.301473][T27574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1048.181416][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.221855][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.262977][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1050.341354][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.311816][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1052.341739][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.382396][T27574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1053.393265][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.023499][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.421784][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.462160][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.423003][T27574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.501928][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1056.582275][ T6168] block nbd1: Possible stuck request ffff88807a6f0000: control (read@0,1024B). Runtime 240 seconds [ 1056.593385][ T6168] block nbd1: Possible stuck request ffff88807a6f01c0: control (read@1024,1024B). Runtime 240 seconds [ 1056.604634][ T6168] block nbd1: Possible stuck request ffff88807a6f0380: control (read@2048,1024B). Runtime 240 seconds [ 1056.616735][ T6168] block nbd1: Possible stuck request ffff88807a6f0540: control (read@3072,1024B). Runtime 240 seconds [ 1057.541902][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1058.581785][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.462295][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.621699][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.661864][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1061.702968][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.503071][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.742013][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.622685][T27574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.781405][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.821725][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.905893][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1065.542524][T27574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1065.862779][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.901451][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1067.941436][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.583140][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1068.982353][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1069.434728][T31516] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1069.446048][T31516] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1069.457855][T31516] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1069.478792][T31516] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1069.486810][T31516] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1069.773366][T31579] lo speed is unknown, defaulting to 1000 [ 1070.018789][T31579] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.028264][T31579] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.041433][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.049238][T31579] bridge_slave_0: entered allmulticast mode [ 1070.058451][T31579] bridge_slave_0: entered promiscuous mode [ 1070.069483][T31579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.077077][T31579] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.084597][T31579] bridge_slave_1: entered allmulticast mode [ 1070.092642][T31579] bridge_slave_1: entered promiscuous mode [ 1070.126948][T31579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1070.142436][T31579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.176666][T31579] team0: Port device team_slave_0 added [ 1070.186211][T31579] team0: Port device team_slave_1 added [ 1070.215960][T31579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.223288][T31579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.251597][T31579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.266826][T31579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.275596][T31579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.302026][T31579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1070.353485][T31579] hsr_slave_0: entered promiscuous mode [ 1070.360236][T31579] hsr_slave_1: entered promiscuous mode [ 1070.367561][T31579] debugfs: 'hsr0' already exists in 'hsr' [ 1070.373504][T31579] Cannot create hsr debugfs directory [ 1071.062763][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.541771][ T5646] Bluetooth: hci9: command tx timeout [ 1071.621565][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1072.102872][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.141935][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.231511][T27575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1073.621387][ T5646] Bluetooth: hci9: command tx timeout [ 1074.181797][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.665717][T27574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.241152][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.701669][ T5646] Bluetooth: hci9: command tx timeout [ 1076.261385][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.302890][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.703504][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.781458][ T5646] Bluetooth: hci9: command tx timeout [ 1078.342779][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.381378][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.421683][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1080.742185][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.461554][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.501716][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.821517][T27571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.541651][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.783000][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.007936][T31516] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1084.030433][T31516] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1084.039970][T31516] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1084.052171][T31516] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1084.061388][T31516] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1084.098485][ T5634] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1084.126488][ T5634] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1084.142843][T31471] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1084.157333][T31471] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1084.169829][T31471] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1084.577915][T31598] lo speed is unknown, defaulting to 1000 [ 1084.584543][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.646438][T31600] lo speed is unknown, defaulting to 1000 [ 1085.113262][ T5646] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1085.139588][ T5646] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1085.157492][ T5646] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1085.180454][ T5646] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1085.189248][ T5646] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1085.260437][T31471] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1085.260524][T31598] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.282409][T31598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.291306][T31471] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1085.292987][T31598] bridge_slave_0: entered allmulticast mode [ 1085.307812][T31598] bridge_slave_0: entered promiscuous mode [ 1085.315263][T31471] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1085.327517][T31471] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1085.337742][T31471] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1085.350480][T31598] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.358386][T31598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.368464][T31598] bridge_slave_1: entered allmulticast mode [ 1085.378269][T31598] bridge_slave_1: entered promiscuous mode [ 1085.493650][T31598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.525637][T31598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.584171][T31600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.591544][T31600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.600062][T31600] bridge_slave_0: entered allmulticast mode [ 1085.609416][T31600] bridge_slave_0: entered promiscuous mode [ 1085.623583][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.633509][T31598] team0: Port device team_slave_0 added [ 1085.639428][T31600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.650803][T31600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.658793][T31600] bridge_slave_1: entered allmulticast mode [ 1085.667537][T31600] bridge_slave_1: entered promiscuous mode [ 1085.681127][T31598] team0: Port device team_slave_1 added [ 1085.778645][T31600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.796198][T31600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.810697][T31598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1085.818791][T31598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.848326][T31598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1085.887522][T31598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1085.895619][T31598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1085.928053][T31598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1085.982784][T31600] team0: Port device team_slave_0 added [ 1085.995292][T31600] team0: Port device team_slave_1 added [ 1086.090902][T31600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.099076][T31600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.125295][T31471] Bluetooth: hci10: command tx timeout [ 1086.133647][T31600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.159324][T31598] hsr_slave_0: entered promiscuous mode [ 1086.177178][T31598] hsr_slave_1: entered promiscuous mode [ 1086.185578][T31598] debugfs: 'hsr0' already exists in 'hsr' [ 1086.193216][T31598] Cannot create hsr debugfs directory [ 1086.199931][T31600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.207123][T31600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.238554][T31600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.262029][T31471] Bluetooth: hci11: command tx timeout [ 1086.363453][T31631] lo speed is unknown, defaulting to 1000 [ 1086.394058][T31600] hsr_slave_0: entered promiscuous mode [ 1086.400815][T31600] hsr_slave_1: entered promiscuous mode [ 1086.408445][T31600] debugfs: 'hsr0' already exists in 'hsr' [ 1086.415249][T31600] Cannot create hsr debugfs directory [ 1086.508350][T31633] lo speed is unknown, defaulting to 1000 [ 1086.671264][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.671309][ T6168] block nbd1: Possible stuck request ffff88807a6f0000: control (read@0,1024B). Runtime 270 seconds [ 1086.690758][ T6168] block nbd1: Possible stuck request ffff88807a6f01c0: control (read@1024,1024B). Runtime 270 seconds [ 1086.704158][ T6168] block nbd1: Possible stuck request ffff88807a6f0380: control (read@2048,1024B). Runtime 270 seconds [ 1086.717406][ T6168] block nbd1: Possible stuck request ffff88807a6f0540: control (read@3072,1024B). Runtime 270 seconds [ 1086.821699][T27571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.156303][T31631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.165697][T31631] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.175571][T31631] bridge_slave_0: entered allmulticast mode [ 1087.184191][T31631] bridge_slave_0: entered promiscuous mode [ 1087.201213][T31631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.210669][T31631] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.219061][T31631] bridge_slave_1: entered allmulticast mode [ 1087.237157][T31631] bridge_slave_1: entered promiscuous mode [ 1087.241294][T31471] Bluetooth: hci12: command tx timeout [ 1087.351011][T31631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1087.381310][T31471] Bluetooth: hci13: command tx timeout [ 1087.405683][T31631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1087.469271][T31631] team0: Port device team_slave_0 added [ 1087.475473][T31633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.483087][T31633] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.490405][T31633] bridge_slave_0: entered allmulticast mode [ 1087.498408][T31633] bridge_slave_0: entered promiscuous mode [ 1087.512633][T31631] team0: Port device team_slave_1 added [ 1087.518677][T31633] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.528087][T31633] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.535901][T31633] bridge_slave_1: entered allmulticast mode [ 1087.545432][T31633] bridge_slave_1: entered promiscuous mode [ 1087.623548][T31633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1087.638646][T31633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1087.649472][T31631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1087.656939][T31631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.683764][T31631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1087.697284][T31631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1087.705366][T31631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.710428][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.744974][T31631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1087.805964][T31633] team0: Port device team_slave_0 added [ 1087.850268][T31633] team0: Port device team_slave_1 added [ 1087.906216][T31631] hsr_slave_0: entered promiscuous mode [ 1087.913348][T31631] hsr_slave_1: entered promiscuous mode [ 1087.919945][T31631] debugfs: 'hsr0' already exists in 'hsr' [ 1087.926649][T31631] Cannot create hsr debugfs directory [ 1087.935536][T31633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1087.942901][T31633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.970515][T31633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1087.984509][T31633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1087.991859][T31633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1088.018573][T31633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1088.165160][T31633] hsr_slave_0: entered promiscuous mode [ 1088.172705][T31633] hsr_slave_1: entered promiscuous mode [ 1088.179156][T31633] debugfs: 'hsr0' already exists in 'hsr' [ 1088.187223][T31633] Cannot create hsr debugfs directory [ 1088.195175][T31471] Bluetooth: hci10: command tx timeout [ 1088.341213][T31471] Bluetooth: hci11: command tx timeout [ 1088.742098][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.301544][T31471] Bluetooth: hci12: command tx timeout [ 1089.461237][T31471] Bluetooth: hci13: command tx timeout [ 1089.781682][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.863491][T27571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.261447][T31471] Bluetooth: hci10: command tx timeout [ 1090.421213][T31471] Bluetooth: hci11: command tx timeout [ 1090.822401][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.381171][T31471] Bluetooth: hci12: command tx timeout [ 1091.541527][T31471] Bluetooth: hci13: command tx timeout [ 1091.861558][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.341287][T31471] Bluetooth: hci10: command tx timeout [ 1092.427796][T27571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.501228][T31471] Bluetooth: hci11: command tx timeout [ 1092.903170][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.912557][T27571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.461186][T31471] Bluetooth: hci12: command tx timeout [ 1093.621206][T31471] Bluetooth: hci13: command tx timeout [ 1093.941396][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.983047][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.941873][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.021772][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.063054][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.101623][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1098.982053][T27571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.142701][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.183001][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.221570][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.021751][T27574] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.030387][T27579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.261703][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.821252][T31471] Bluetooth: hci3: command 0x0406 tx timeout [ 1103.304067][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.341476][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.061394][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.381775][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.422320][T17207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.461469][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.101617][T27579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.501396][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.981475][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.541587][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.582926][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.146429][T27579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.622510][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.632598][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.662081][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.064117][T31471] Bluetooth: hci4: command 0x0406 tx timeout [ 1113.701890][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.181967][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.741376][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.784185][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.742362][ T6168] block nbd1: Possible stuck request ffff88807a6f0000: control (read@0,1024B). Runtime 300 seconds [ 1116.753397][ T6168] block nbd1: Possible stuck request ffff88807a6f01c0: control (read@1024,1024B). Runtime 300 seconds [ 1116.764568][ T6168] block nbd1: Possible stuck request ffff88807a6f0380: control (read@2048,1024B). Runtime 300 seconds [ 1116.778537][ T6168] block nbd1: Possible stuck request ffff88807a6f0540: control (read@3072,1024B). Runtime 300 seconds [ 1116.822104][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.221472][T27579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.862319][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.901410][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.942430][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.261468][T27579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.981756][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.225375][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.022107][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.061557][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.301716][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.101798][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.142399][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.181901][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.344681][T27579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.221401][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.263023][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.301577][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.381844][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.557380][T31471] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1129.566216][T31471] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1129.577725][T31471] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1129.589918][T31471] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1129.599069][T31471] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1129.904986][T31674] lo speed is unknown, defaulting to 1000 [ 1130.157145][T31674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.164638][T31674] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.172732][T31674] bridge_slave_0: entered allmulticast mode [ 1130.180520][T31674] bridge_slave_0: entered promiscuous mode [ 1130.190338][T31674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.197772][T31674] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.205688][T31674] bridge_slave_1: entered allmulticast mode [ 1130.213861][T31674] bridge_slave_1: entered promiscuous mode [ 1130.249430][T31674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1130.263185][T31674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1130.300494][T31674] team0: Port device team_slave_0 added [ 1130.309160][T31674] team0: Port device team_slave_1 added [ 1130.339233][T31674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1130.347480][T31674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.352401][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.373906][T31674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.395395][T31674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.402616][T31674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.429172][T31674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1130.480848][T31674] hsr_slave_0: entered promiscuous mode [ 1130.488030][T31674] hsr_slave_1: entered promiscuous mode [ 1130.494772][T31674] debugfs: 'hsr0' already exists in 'hsr' [ 1130.500548][T31674] Cannot create hsr debugfs directory [ 1130.824780][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.382637][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.701348][T31471] Bluetooth: hci14: command tx timeout [ 1132.421426][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.429890][T27579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.461481][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.551702][ T5646] Bluetooth: hci2: command 0x0406 tx timeout [ 1133.781265][ T5646] Bluetooth: hci14: command tx timeout [ 1134.501625][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.581288][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.463634][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.541628][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.861229][ T5646] Bluetooth: hci14: command tx timeout [ 1136.597378][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.621588][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.941302][ T5646] Bluetooth: hci14: command tx timeout [ 1138.503087][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.661372][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.701790][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.421941][T27575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.744106][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.544693][T27575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.783579][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.821386][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.871701][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.582424][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.658457][T31471] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1144.676249][T31471] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1144.686285][T31471] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1144.695643][T31471] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1144.709606][T31471] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1144.727683][ T5646] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1144.756148][ T5646] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1144.788264][T31471] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1144.799720][T31471] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1144.808154][T31471] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1144.902645][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.238628][T31693] lo speed is unknown, defaulting to 1000 [ 1145.250359][T31695] lo speed is unknown, defaulting to 1000 [ 1145.784329][T31516] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1145.810799][T31516] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1145.835685][T31516] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1145.846823][T31516] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1145.856290][T31516] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1145.930367][T31516] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1145.953768][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1145.965097][T31516] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1145.974786][T31516] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1145.984018][T31516] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1145.992297][T31516] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1146.126764][T31693] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.135001][T31693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.143264][T31693] bridge_slave_0: entered allmulticast mode [ 1146.152526][T31693] bridge_slave_0: entered promiscuous mode [ 1146.161581][T31695] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.169808][T31695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.178058][T31695] bridge_slave_0: entered allmulticast mode [ 1146.197249][T31695] bridge_slave_0: entered promiscuous mode [ 1146.207438][T31693] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.218046][T31693] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.228107][T31693] bridge_slave_1: entered allmulticast mode [ 1146.237392][T31693] bridge_slave_1: entered promiscuous mode [ 1146.247303][T31695] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.255473][T31695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.264835][T31695] bridge_slave_1: entered allmulticast mode [ 1146.274504][T31695] bridge_slave_1: entered promiscuous mode [ 1146.384514][T31693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1146.407006][T31693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1146.434687][T31695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1146.476189][T31695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1146.572812][T31693] team0: Port device team_slave_0 added [ 1146.589010][T31695] team0: Port device team_slave_0 added [ 1146.613391][T31695] team0: Port device team_slave_1 added [ 1146.631198][T31693] team0: Port device team_slave_1 added [ 1146.687480][T31693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1146.697348][T31693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1146.724561][T31693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1146.767928][T31693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1146.775751][T31693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1146.802851][T31693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1146.823932][ T6168] block nbd1: Possible stuck request ffff88807a6f0000: control (read@0,1024B). Runtime 330 seconds [ 1146.825017][T31695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1146.850687][T31695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1146.862406][ T5646] Bluetooth: hci15: command tx timeout [ 1146.877369][T31695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1146.886323][ T6168] block nbd1: Possible stuck request ffff88807a6f01c0: control (read@1024,1024B). Runtime 330 seconds [ 1146.920442][ T6168] block nbd1: Possible stuck request ffff88807a6f0380: control (read@2048,1024B). Runtime 330 seconds [ 1146.921322][T31749] Bluetooth: hci16: command tx timeout [ 1146.942315][ T6168] block nbd1: Possible stuck request ffff88807a6f0540: control (read@3072,1024B). Runtime 330 seconds [ 1146.962412][T31695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1146.969478][T31695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1146.998027][T31695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1147.000584][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.022121][T31725] lo speed is unknown, defaulting to 1000 [ 1147.092987][T31693] hsr_slave_0: entered promiscuous mode [ 1147.099845][T31693] hsr_slave_1: entered promiscuous mode [ 1147.107083][T31693] debugfs: 'hsr0' already exists in 'hsr' [ 1147.113110][T31693] Cannot create hsr debugfs directory [ 1147.131596][T31728] lo speed is unknown, defaulting to 1000 [ 1147.260831][T31695] hsr_slave_0: entered promiscuous mode [ 1147.267853][T31695] hsr_slave_1: entered promiscuous mode [ 1147.274765][T31695] debugfs: 'hsr0' already exists in 'hsr' [ 1147.280631][T31695] Cannot create hsr debugfs directory [ 1147.621820][T27575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.923122][T31725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.930402][T31725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.938263][T31725] bridge_slave_0: entered allmulticast mode [ 1147.944438][T31751] Bluetooth: hci17: command tx timeout [ 1147.952814][T31725] bridge_slave_0: entered promiscuous mode [ 1147.981745][T31725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.989088][T31725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.997251][T31725] bridge_slave_1: entered allmulticast mode [ 1148.005222][T31725] bridge_slave_1: entered promiscuous mode [ 1148.023049][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.094180][T31725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1148.104548][T31750] Bluetooth: hci18: command tx timeout [ 1148.138840][T31725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1148.205395][T31728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.213712][T31728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.221581][T31728] bridge_slave_0: entered allmulticast mode [ 1148.230429][T31728] bridge_slave_0: entered promiscuous mode [ 1148.242770][T31725] team0: Port device team_slave_0 added [ 1148.252475][T31725] team0: Port device team_slave_1 added [ 1148.276713][T31728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.284063][T31728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.291814][T31728] bridge_slave_1: entered allmulticast mode [ 1148.301807][T31728] bridge_slave_1: entered promiscuous mode [ 1148.348421][T31725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1148.357358][T31725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1148.386207][T31725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1148.419022][T31728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1148.431700][T31725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1148.439698][T31725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1148.466373][T31725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1148.481619][T31728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1148.545476][T31728] team0: Port device team_slave_0 added [ 1148.558128][T31728] team0: Port device team_slave_1 added [ 1148.618990][T31728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1148.626948][T31728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1148.654186][T31728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1148.683571][T31728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1148.690616][T31728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1148.717703][T31728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1148.736287][T31725] hsr_slave_0: entered promiscuous mode [ 1148.746114][T31725] hsr_slave_1: entered promiscuous mode [ 1148.754473][T31725] debugfs: 'hsr0' already exists in 'hsr' [ 1148.760347][T31725] Cannot create hsr debugfs directory [ 1148.885823][T31728] hsr_slave_0: entered promiscuous mode [ 1148.893180][T31728] hsr_slave_1: entered promiscuous mode [ 1148.899866][T31728] debugfs: 'hsr0' already exists in 'hsr' [ 1148.908077][T31728] Cannot create hsr debugfs directory [ 1149.000736][ T5634] Bluetooth: hci15: command tx timeout [ 1149.006344][T31750] Bluetooth: hci8: command 0x0406 tx timeout [ 1149.006391][T31750] Bluetooth: hci1: command 0x0406 tx timeout [ 1149.012628][ T5634] Bluetooth: hci16: command tx timeout [ 1149.012666][ T5634] Bluetooth: hci7: command 0x0406 tx timeout [ 1149.012696][ T5634] Bluetooth: hci6: command 0x0406 tx timeout [ 1149.073212][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.022386][T31471] Bluetooth: hci17: command tx timeout [ 1150.029755][T27575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.103152][T17202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.181396][T31471] Bluetooth: hci18: command tx timeout [ 1150.667062][T27575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.062964][T31516] Bluetooth: hci15: command tx timeout [ 1151.066128][T31471] Bluetooth: hci16: command tx timeout [ 1151.142943][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.101338][T31471] Bluetooth: hci17: command tx timeout [ 1152.183509][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.261315][T31471] Bluetooth: hci18: command tx timeout [ 1152.582069][ T31] INFO: task syz.2.6481:31430 blocked for more than 143 seconds. [ 1152.591053][ T31] Not tainted syzkaller #0 [ 1152.596075][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1152.606659][ T31] task:syz.2.6481 state:D stack:26312 pid:31430 tgid:31428 ppid:30683 task_flags:0x480140 flags:0x00080002 [ 1152.619457][ T31] Call Trace: [ 1152.624118][ T31] [ 1152.627237][ T31] __schedule+0x17d9/0x56c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1152.632643][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1152.638608][ T31] ? __pfx___schedule+0x10/0x10 [ 1152.644753][ T31] ? schedule+0x90/0x2b0 [ 1152.649448][ T31] schedule+0x164/0x2b0 [ 1152.654068][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 1152.662350][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 1152.670173][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 1152.677147][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1152.684300][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 1152.690598][ T31] nbd_set_size+0x454/0x680 [ 1152.696104][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 1152.701866][ T31] ? nla_memcpy+0x5b/0xc0 [ 1152.706453][ T31] nbd_genl_reconfigure+0x7e9/0x1e80 [ 1152.714409][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1152.733055][ T31] ? rcu_is_watching+0x15/0xb0 [ 1152.769291][ T31] ? trace_kmalloc+0x2a/0xf0 [ 1152.783260][ T31] ? __kmalloc_noprof+0x396/0x720 [ 1152.797721][ T31] ? __nla_parse+0x40/0x60 [ 1152.805660][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1152.817980][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1152.825673][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 1152.831721][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1152.837889][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1152.843434][ T31] genl_rcv_msg+0x614/0x7a0 [ 1152.848084][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1152.854070][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 1152.859905][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1152.865762][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1152.871979][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1152.877424][ T31] ? down_read+0x2be/0x330 [ 1152.882384][ T31] genl_rcv+0x28/0x40 [ 1152.886453][ T31] netlink_unicast+0x7bb/0x940 [ 1152.891463][ T31] netlink_sendmsg+0x813/0xb40 [ 1152.896394][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1152.901850][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1152.906939][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1152.912576][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1152.917837][ T31] ____sys_sendmsg+0x54e/0x850 [ 1152.922817][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1152.928167][ T31] ? import_iovec+0x73/0xa0 [ 1152.933182][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1152.937965][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1152.943078][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1152.948333][ T31] ? futex_wait+0x2a2/0x390 [ 1152.953516][ T31] ? __fget_files+0x2a/0x420 [ 1152.958223][ T31] ? __fget_files+0x3a2/0x420 [ 1152.963456][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1152.968534][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1152.975456][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1152.982280][ T31] do_syscall_64+0x174/0x580 [ 1152.987067][ T31] ? trace_irq_disable+0x3b/0x140 [ 1152.992403][ T31] ? clear_bhb_loop+0x40/0x90 [ 1152.997239][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.003599][ T31] RIP: 0033:0x7fd2f039de99 [ 1153.008150][ T31] RSP: 002b:00007fd2ee5d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1153.016820][ T31] RAX: ffffffffffffffda RBX: 00007fd2f0626090 RCX: 00007fd2f039de99 [ 1153.025598][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 1153.033821][ T31] RBP: 00007fd2f0433eaf R08: 0000000000000000 R09: 0000000000000000 [ 1153.042135][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1153.050160][ T31] R13: 00007fd2f0626128 R14: 00007fd2f0626090 R15: 00007ffdedb36aa8 [ 1153.058391][ T31] [ 1153.061775][ T31] INFO: task syz.1.6482:31435 blocked for more than 143 seconds. [ 1153.069558][ T31] Not tainted syzkaller #0 [ 1153.074745][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1153.084419][ T31] task:syz.1.6482 state:D stack:28424 pid:31435 tgid:31433 ppid:30319 task_flags:0x400140 flags:0x00080002 [ 1153.096685][ T31] Call Trace: [ 1153.100043][ T31] [ 1153.103097][ T31] __schedule+0x17d9/0x56c0 [ 1153.107653][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1153.112726][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1153.117716][ T31] ? lockdep_hardirqs_on+0x7a/0x110 [ 1153.123111][ T31] ? irqentry_exit+0x218/0x8f0 [ 1153.127929][ T31] ? trace_irq_disable+0x3b/0x140 [ 1153.133447][ T31] ? __pfx___schedule+0x10/0x10 [ 1153.138393][ T31] ? schedule+0x90/0x2b0 [ 1153.142949][ T31] schedule+0x164/0x2b0 [ 1153.142977][T31471] Bluetooth: hci16: command tx timeout [ 1153.152732][T31471] Bluetooth: hci15: command tx timeout [ 1153.158443][ T31] schedule_preempt_disabled+0x13/0x30 [ 1153.164122][ T31] __mutex_lock+0x7bf/0x1550 [ 1153.168781][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1153.173876][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1153.179420][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1153.185238][ T31] ? stack_trace_save+0xa9/0x100 [ 1153.190320][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1153.195807][ T31] ? radix_tree_lookup+0x240/0x290 [ 1153.201426][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1153.206017][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1153.211260][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1153.216284][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1153.222366][T17209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.228863][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1153.235969][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1153.241588][ T31] ? down_read+0x2be/0x330 [ 1153.246348][ T31] genl_rcv+0x28/0x40 [ 1153.250459][ T31] netlink_unicast+0x7bb/0x940 [ 1153.255443][ T31] netlink_sendmsg+0x813/0xb40 [ 1153.260269][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1153.265989][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1153.271701][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1153.277068][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1153.283078][ T31] __sys_sendto+0x408/0x5a0 [ 1153.287768][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1153.293574][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 1153.299010][ T31] __x64_sys_sendto+0xde/0x100 [ 1153.304507][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.310671][ T31] do_syscall_64+0x174/0x580 [ 1153.315675][ T31] ? trace_irq_disable+0x3b/0x140 [ 1153.320802][ T31] ? clear_bhb_loop+0x40/0x90 [ 1153.325641][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.331644][ T31] RIP: 0033:0x7f37eff5e6ce [ 1153.336365][ T31] RSP: 002b:00007f37f0de0e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1153.344932][ T31] RAX: ffffffffffffffda RBX: 00007f37f0de26c0 RCX: 00007f37eff5e6ce [ 1153.353207][ T31] RDX: 0000000000000024 RSI: 00007f37f0de1000 RDI: 0000000000000004 [ 1153.361573][ T31] RBP: 0000000000000000 R08: 00007f37f0de0f04 R09: 000000000000000c [ 1153.369581][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1153.377879][ T31] R13: 00007f37f0de0f58 R14: 00007f37f0de1000 R15: 0000000000000000 [ 1153.386611][ T31] [ 1153.390155][ T31] INFO: task syz.4.6484:31441 blocked for more than 144 seconds. [ 1153.398219][ T31] Not tainted syzkaller #0 [ 1153.403527][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1153.412362][ T31] task:syz.4.6484 state:D stack:27872 pid:31441 tgid:31440 ppid:29491 task_flags:0x400040 flags:0x00080002 [ 1153.424542][ T31] Call Trace: [ 1153.427864][ T31] [ 1153.430838][ T31] __schedule+0x17d9/0x56c0 [ 1153.437071][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1153.442356][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1153.447504][ T31] ? __pfx___schedule+0x10/0x10 [ 1153.452820][ T31] ? schedule+0x90/0x2b0 [ 1153.457166][ T31] schedule+0x164/0x2b0 [ 1153.462333][ T31] schedule_preempt_disabled+0x13/0x30 [ 1153.467898][ T31] __mutex_lock+0x7bf/0x1550 [ 1153.472755][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1153.477778][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1153.482943][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1153.488837][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 1153.494283][ T31] ? radix_tree_lookup+0x240/0x290 [ 1153.499453][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1153.504237][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1153.509364][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1153.515322][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1153.520187][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1153.525444][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1153.530819][ T31] ? down_read+0x2be/0x330 [ 1153.536080][ T31] genl_rcv+0x28/0x40 [ 1153.540126][ T31] netlink_unicast+0x7bb/0x940 [ 1153.545575][ T31] netlink_sendmsg+0x813/0xb40 [ 1153.550550][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1153.556027][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1153.561167][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1153.566543][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1153.571813][ T31] __sys_sendto+0x408/0x5a0 [ 1153.576410][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1153.581610][ T31] ? do_user_addr_fault+0xc4a/0x1340 [ 1153.587812][ T31] __x64_sys_sendto+0xde/0x100 [ 1153.592858][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.599002][ T31] do_syscall_64+0x174/0x580 [ 1153.603834][ T31] ? trace_irq_disable+0x3b/0x140 [ 1153.608973][ T31] ? clear_bhb_loop+0x40/0x90 [ 1153.613868][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.619858][ T31] RIP: 0033:0x7f7de695e6ce [ 1153.624903][ T31] RSP: 002b:00007f7de7792e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1153.633685][ T31] RAX: ffffffffffffffda RBX: 00007f7de77946c0 RCX: 00007f7de695e6ce [ 1153.642593][ T31] RDX: 0000000000000020 RSI: 00007f7de7793000 RDI: 0000000000000004 [ 1153.650745][ T31] RBP: 0000000000000000 R08: 00007f7de7792f04 R09: 000000000000000c [ 1153.658881][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1153.667031][ T31] R13: 00007f7de7792f58 R14: 00007f7de7793000 R15: 0000000000000000 [ 1153.675390][ T31] [ 1153.678521][ T31] INFO: task syz.4.6484:31442 blocked for more than 144 seconds. [ 1153.690845][ T31] Not tainted syzkaller #0 [ 1153.696600][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1153.705862][ T31] task:syz.4.6484 state:D [ 1153.705905][T27576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.705916][ T31] stack:27872 pid:31442 tgid:31440 ppid:29491 task_flags:0x400040 flags:0x00080002 [ 1153.705943][ T31] Call Trace: [ 1153.732338][ T31] [ 1153.735333][ T31] __schedule+0x17d9/0x56c0 [ 1153.739889][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1153.745017][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1153.750067][ T31] ? __pfx___schedule+0x10/0x10 [ 1153.755258][ T31] ? schedule+0x90/0x2b0 [ 1153.759597][ T31] schedule+0x164/0x2b0 [ 1153.763979][ T31] schedule_preempt_disabled+0x13/0x30 [ 1153.769528][ T31] __mutex_lock+0x7bf/0x1550 [ 1153.774577][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1153.779445][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1153.786539][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1153.794042][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 1153.799268][ T31] ? radix_tree_lookup+0x240/0x290 [ 1153.804726][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1153.809350][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1153.814573][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1153.820007][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1153.825188][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1153.830350][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1153.838317][ T31] ? down_read+0x2be/0x330 [ 1153.842932][ T31] genl_rcv+0x28/0x40 [ 1153.846968][ T31] netlink_unicast+0x7bb/0x940 [ 1153.852163][ T31] netlink_sendmsg+0x813/0xb40 [ 1153.856980][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1153.863045][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1153.868189][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1153.873599][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1153.878780][ T31] __sys_sendto+0x408/0x5a0 [ 1153.883969][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1153.889072][ T31] ? errseq_sample+0x40/0x70 [ 1153.894070][ T31] ? fd_install+0x94/0x3d0 [ 1153.899447][ T31] ? fd_install+0x306/0x3d0 [ 1153.906157][ T31] __x64_sys_sendto+0xde/0x100 [ 1153.911473][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.917635][ T31] do_syscall_64+0x174/0x580 [ 1153.922727][ T31] ? trace_irq_disable+0x3b/0x140 [ 1153.927939][ T31] ? clear_bhb_loop+0x40/0x90 [ 1153.932863][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.939203][ T31] RIP: 0033:0x7f7de695e6ce [ 1153.943927][ T31] RSP: 002b:00007f7de4bf4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1153.953057][ T31] RAX: ffffffffffffffda RBX: 00007f7de4bf66c0 RCX: 00007f7de695e6ce [ 1153.961469][ T31] RDX: 0000000000000020 RSI: 00007f7de4bf5000 RDI: 0000000000000005 [ 1153.969539][ T31] RBP: 0000000000000000 R08: 00007f7de4bf4f04 R09: 000000000000000c [ 1153.977807][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1153.986281][ T31] R13: 00007f7de4bf4f58 R14: 00007f7de4bf5000 R15: 0000000000000000 [ 1153.994929][ T31] [ 1153.998827][ T31] INFO: task syz.0.6485:31444 blocked for more than 144 seconds. [ 1154.007690][ T31] Not tainted syzkaller #0 [ 1154.012979][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1154.022382][ T31] task:syz.0.6485 state:D stack:26384 pid:31444 tgid:31443 ppid:28642 task_flags:0x400140 flags:0x00080002 [ 1154.034599][ T31] Call Trace: [ 1154.037993][ T31] [ 1154.041632][ T31] __schedule+0x17d9/0x56c0 [ 1154.046287][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1154.051828][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1154.057085][ T31] ? __pfx___schedule+0x10/0x10 [ 1154.062560][ T31] ? schedule+0x90/0x2b0 [ 1154.066928][ T31] schedule+0x164/0x2b0 [ 1154.072403][ T31] schedule_preempt_disabled+0x13/0x30 [ 1154.078140][ T31] __mutex_lock+0x7bf/0x1550 [ 1154.083067][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1154.088068][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 1154.093091][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1154.098199][ T31] ? __dev_queue_xmit+0x29b/0x3820 [ 1154.105122][ T31] ? radix_tree_lookup+0x240/0x290 [ 1154.110439][ T31] genl_rcv_msg+0x10b/0x7a0 [ 1154.115304][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1154.120481][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1154.126957][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1154.132312][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1154.137810][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1154.143248][ T31] ? down_read+0x2be/0x330 [ 1154.148241][ T31] genl_rcv+0x28/0x40 [ 1154.152808][ T31] netlink_unicast+0x7bb/0x940 [ 1154.157695][ T31] netlink_sendmsg+0x813/0xb40 [ 1154.163050][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1154.168913][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1154.174417][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1154.180296][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1154.181380][T31471] Bluetooth: hci17: command tx timeout [ 1154.185722][ T31] ____sys_sendmsg+0x54e/0x850 [ 1154.185759][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1154.185787][ T31] ? import_iovec+0x73/0xa0 [ 1154.185819][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1154.185838][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1154.185867][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1154.185899][ T31] ? futex_wait+0x2a2/0x390 [ 1154.185945][ T31] ? __fget_files+0x2a/0x420 [ 1154.185969][ T31] ? __fget_files+0x3a2/0x420 [ 1154.186001][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1154.186023][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1154.186057][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.186078][ T31] do_syscall_64+0x174/0x580 [ 1154.186097][ T31] ? trace_irq_disable+0x3b/0x140 [ 1154.186121][ T31] ? clear_bhb_loop+0x40/0x90 [ 1154.186144][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.186164][ T31] RIP: 0033:0x7f61e979de99 [ 1154.186182][ T31] RSP: 002b:00007f61ea69f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1154.186204][ T31] RAX: ffffffffffffffda RBX: 00007f61e9a25fa0 RCX: 00007f61e979de99 [ 1154.186219][ T31] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1154.186232][ T31] RBP: 00007f61e9833eaf R08: 0000000000000000 R09: 0000000000000000 [ 1154.186244][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1154.186256][ T31] R13: 00007f61e9a26038 R14: 00007f61e9a25fa0 R15: 00007ffe14c89ac8 [ 1154.186285][ T31] [ 1154.188742][ T31] [ 1154.188742][ T31] Showing all locks held in the system: [ 1154.348216][T31471] Bluetooth: hci18: command tx timeout [ 1154.354417][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.367531][ T31] 1 lock held by khungtaskd/31: [ 1154.372979][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1154.383310][ T31] 1 lock held by klogd/4982: [ 1154.388119][ T31] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1154.398720][ T31] 2 locks held by getty/5384: [ 1154.403659][ T31] #0: ffff8880320ad0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1154.414690][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1154.425092][ T31] 1 lock held by udevd/23474: [ 1154.429836][ T31] #0: ffff88802b52e350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1154.439686][ T31] 6 locks held by syz.2.6481/31430: [ 1154.445193][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1154.453752][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1154.463201][ T31] #2: ffff8880545faa60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4bc/0x1e80 [ 1154.473857][ T31] #3: ffff888029bdb528 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 1154.483655][ T31] #4: ffff888029bdaef0 (&q->q_usage_counter(io)#69){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 1154.496162][ T31] #5: ffff888029bdaf28 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 1154.509816][ T31] 2 locks held by syz.1.6482/31435: [ 1154.515959][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1154.524424][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1154.533637][ T31] 2 locks held by syz.4.6484/31441: [ 1154.538907][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1154.547281][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1154.556759][ T31] 2 locks held by syz.4.6484/31442: [ 1154.563106][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1154.571579][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1154.580660][ T31] 2 locks held by syz.0.6485/31444: [ 1154.586162][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1154.594608][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1154.604039][ T31] 2 locks held by syz-executor/31469: [ 1154.609529][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1154.619044][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1154.628246][ T31] 2 locks held by syz-executor/31504: [ 1154.633965][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1154.642656][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1154.651883][ T31] 2 locks held by syz-executor/31507: [ 1154.657287][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1154.665958][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1154.675159][ T31] 2 locks held by syz-executor/31511: [ 1154.682043][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1154.690355][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1154.699702][ T31] 2 locks held by syz-executor/31512: [ 1154.705192][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1154.714912][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1154.724499][ T31] 2 locks held by syz-executor/31579: [ 1154.729972][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1154.738798][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1154.748846][ T31] 2 locks held by syz-executor/31598: [ 1154.754361][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1154.762804][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1154.772039][ T31] 2 locks held by syz-executor/31600: [ 1154.778569][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1154.787097][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1154.796543][ T31] 2 locks held by syz-executor/31631: [ 1154.802995][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1154.811501][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1154.821487][ T31] 2 locks held by syz-executor/31633: [ 1154.827038][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1154.836291][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1154.845638][ T31] 2 locks held by syz-executor/31674: [ 1154.851280][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1154.859608][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1154.869003][ T31] 2 locks held by syz-executor/31693: [ 1154.874664][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1154.883013][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1154.892450][ T31] 2 locks held by syz-executor/31695: [ 1154.897984][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1154.906630][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1154.916041][ T31] 2 locks held by syz-executor/31725: [ 1154.922311][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1154.930633][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1154.939851][ T31] 2 locks held by syz-executor/31728: [ 1154.945676][ T31] #0: ffffffff9009daa8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1154.954121][ T31] #1: ffffffff9009d8e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1154.963516][ T31] [ 1154.965948][ T31] ============================================= [ 1154.965948][ T31] [ 1154.975332][ T31] NMI backtrace for cpu 0 [ 1154.975352][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1154.975370][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1154.975379][ T31] Call Trace: [ 1154.975385][ T31] [ 1154.975392][ T31] dump_stack_lvl+0xe8/0x150 [ 1154.975443][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1154.975467][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1154.975498][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1154.975522][ T31] sys_info+0x135/0x170 [ 1154.975592][ T31] watchdog+0xfd7/0x1030 [ 1154.975624][ T31] ? watchdog+0x1c7/0x1030 [ 1154.975648][ T31] kthread+0x388/0x470 [ 1154.975671][ T31] ? __pfx_watchdog+0x10/0x10 [ 1154.975688][ T31] ? __pfx_kthread+0x10/0x10 [ 1154.975710][ T31] ret_from_fork+0x514/0xb70 [ 1154.975743][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1154.975766][ T31] ? __switch_to+0xc89/0x1420 [ 1154.975787][ T31] ? __pfx_kthread+0x10/0x10 [ 1154.975809][ T31] ret_from_fork_asm+0x1a/0x30 [ 1154.975836][ T31] [ 1154.975843][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1155.087594][ C1] NMI backtrace for cpu 1 [ 1155.087614][ C1] CPU: 1 UID: 0 PID: 7520 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) [ 1155.087637][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1155.087651][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1155.087781][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x36/0x90 [ 1155.087809][ C1] Code: 38 6a a6 11 65 8b 0d 59 6a a6 11 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 24 17 00 00 00 74 52 8b 8a f8 16 00 00 <83> f9 03 75 47 48 8b 8a 00 17 00 00 44 8b 8a fc 16 00 00 49 c1 e1 [ 1155.087826][ C1] RSP: 0018:ffffc9000397f9f0 EFLAGS: 00000246 [ 1155.087842][ C1] RAX: ffffffff8999de07 RBX: 000000000000000e RCX: 0000000000000000 [ 1155.087855][ C1] RDX: ffff8880309fdd00 RSI: 0000000000000000 RDI: 0000000000000000 [ 1155.087868][ C1] RBP: 0000000000000000 R08: ffffc9000397f95f R09: 0000000000000000 [ 1155.087880][ C1] R10: ffffc9000397f920 R11: fffff5200072ff2c R12: 1ffff11010978981 [ 1155.087895][ C1] R13: ffff888084bc4bb4 R14: ffff888084bc4b40 R15: ffff888056cc8000 [ 1155.087910][ C1] FS: 0000000000000000(0000) GS:ffff888125052000(0000) knlGS:0000000000000000 [ 1155.087927][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1155.087940][ C1] CR2: 000055bc24bfb168 CR3: 000000000e946000 CR4: 00000000003526f0 [ 1155.087957][ C1] Call Trace: [ 1155.087965][ C1] [ 1155.087972][ C1] skb_put+0x97/0x210 [ 1155.088035][ C1] nsim_dev_trap_report_work+0x46d/0xb40 [ 1155.088066][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1155.088087][ C1] process_scheduled_works+0xa8e/0x14e0 [ 1155.088125][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1155.088150][ C1] ? assign_work+0x3cf/0x5d0 [ 1155.088172][ C1] worker_thread+0xa47/0xfb0 [ 1155.088211][ C1] kthread+0x388/0x470 [ 1155.088237][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1155.088257][ C1] ? __pfx_kthread+0x10/0x10 [ 1155.088283][ C1] ret_from_fork+0x514/0xb70 [ 1155.088313][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1155.088339][ C1] ? __switch_to+0xc89/0x1420 [ 1155.088363][ C1] ? __pfx_kthread+0x10/0x10 [ 1155.088390][ C1] ret_from_fork_asm+0x1a/0x30 [ 1155.088418][ C1] [ 1155.304312][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1155.311315][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1155.320471][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1155.330568][ T31] Call Trace: [ 1155.333887][ T31] [ 1155.336836][ T31] vpanic+0x56c/0xa60 [ 1155.341025][ T31] ? __pfx___schedule+0x10/0x10 [ 1155.345924][ T31] ? __pfx_vpanic+0x10/0x10 [ 1155.350452][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 1155.356727][ T31] panic+0xc5/0xd0 [ 1155.360476][ T31] ? __pfx_panic+0x10/0x10 [ 1155.364926][ T31] ? preempt_schedule_common+0x82/0xd0 [ 1155.370444][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1155.375872][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1155.382298][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1155.388497][ T31] watchdog+0x1030/0x1030 [ 1155.392868][ T31] ? watchdog+0x1c7/0x1030 [ 1155.397327][ T31] kthread+0x388/0x470 [ 1155.401425][ T31] ? __pfx_watchdog+0x10/0x10 [ 1155.406135][ T31] ? __pfx_kthread+0x10/0x10 [ 1155.410758][ T31] ret_from_fork+0x514/0xb70 [ 1155.415384][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1155.420537][ T31] ? __switch_to+0xc89/0x1420 [ 1155.425332][ T31] ? __pfx_kthread+0x10/0x10 [ 1155.429954][ T31] ret_from_fork_asm+0x1a/0x30 [ 1155.434762][ T31] [ 1155.438428][ T31] Kernel Offset: disabled [ 1155.442789][ T31] Rebooting in 86400 seconds..