last executing test programs: 23.647130521s ago: executing program 2 (id=1122): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x101}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x81}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000050}, 0x10) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000180)={'nr0', 0x32, 0x36}, 0x6) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000001c0)=0x2, 0x4) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x464, 0x200, 0x70bd2a, 0x25dfdbff, "69bdaa72ddd15f7c5157ea7abb6ca0", ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x44) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r3) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5da2, 0x15}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0xc000}, 0x20028800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000a40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000680)={0x34c, r5, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xec5}, @NL80211_ATTR_TX_RATES={0x5c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x4, 0x80, 0x200, 0xfff9, 0x2, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x5b, 0x5, 0x18, 0x18, 0x1b, 0x5, 0xb, 0x9, 0x16, 0x36, 0x12, 0x12, 0x16, 0xc, 0x9, 0x9, 0x30, 0x6, 0x9, 0x18, 0x6, 0x16, 0x9, 0x2, 0x9, 0x7]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0x9, 0x4, 0x6, 0xf395, 0x3]}}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_TX_RATES={0x2b0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x2, 0x4}, {0x6, 0x9}, {0x7, 0x7}, {0x3, 0xa}, {}, {0x3, 0x1}, {0x0, 0x3}, {0x7, 0x2}, {0x7, 0x2}, {0x5, 0x3}, {0x4, 0x3}, {0x6, 0xa}, {0x2, 0x5}, {0x0, 0xa}, {0x1, 0x9}, {0x2, 0x5}, {0x4, 0x6}, {0x2, 0x2}, {0x0, 0x2}, {0x4, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9d12, 0x6, 0x4, 0xd, 0x3, 0x1, 0x5000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x401, 0x1, 0x3ff, 0x7f, 0x6, 0x6, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x0, 0x4}, {0x1, 0x6}, {0x1, 0x1}, {0x3, 0x8}, {0x6, 0x6}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x9}, {0x1, 0x4}, {0x7, 0x2}, {0x1, 0xa}, {0x1, 0x6}, {}, {0x4, 0x3}, {0x2}, {0x5, 0x7}, {0x4, 0x7}, {0x1, 0x3}, {0x4, 0x4}, {0x3}, {0x1, 0x8}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x8}, {0x5, 0x9}, {0x5, 0x6}, {0x7, 0x4}, {0x3, 0x5}, {0x0, 0x9}, {0x1, 0x7}, {0x1, 0x8}, {0x1, 0x4}, {0x1, 0x2}, {0x6}, {0x5, 0x6}, {0x0, 0x9}, {0x0, 0x6}, {0x4, 0x8}, {0x3, 0x1}, {0x7, 0x8}, {0x3, 0x6}, {0x5, 0x7}]}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xd25, 0x3, 0xfe01, 0x3ff, 0x7, 0x5, 0xf1cf]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x0, 0x5, 0xa9, 0x2, 0x7, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xcc29, 0x9, 0x2, 0xc, 0xb, 0x7, 0xf]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8001, 0x4, 0xb, 0x5, 0x8, 0x46, 0x7]}}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x12, 0x48, 0xb, 0x9, 0x48, 0x36, 0x3, 0x6c, 0x37, 0xc, 0x5, 0x4, 0xc, 0x12, 0x6c, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xffff, 0xfff9, 0x4, 0x100, 0xbbe2, 0xb1b, 0x8001]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0xc, 0x12, 0x2, 0x36, 0x4, 0x60, 0x48, 0xc, 0x18, 0x10, 0x18, 0x24, 0xc, 0x9, 0x24, 0x6c, 0x6c, 0x5, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x0, 0x1, 0xd, 0x4, 0xfc01, 0x8001]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x42a2, 0x8, 0x6, 0x8, 0x6, 0x5b, 0xf4, 0x8]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xb, 0x3, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x1, 0x8, 0x7, 0x8, 0xdba4, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x7, 0x8, 0x6, 0xeef, 0x0, 0x4]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x6, 0x9}, {0x5, 0x2}, {0x6}, {0x1, 0x4}, {0x1, 0x6}, {0x4, 0x2}, {}, {0x2, 0xa}, {0x7, 0x9}, {0x4, 0xa}, {0x0, 0x5}, {0x1, 0x3}, {0x7, 0x7}, {0x1, 0x1}, {0x6, 0x5}, {0x1, 0x2}, {0x2, 0x4}, {0x6, 0x1}, {0x7, 0x4}, {0x5, 0x2}, {0x0, 0x5}, {0x0, 0xa}, {0x7, 0x7}, {0x5, 0x1}, {0x3, 0x4}, {0x6, 0x6}, {0x1, 0x5}, {0x1, 0x2}, {0x3, 0x5}, {0x3, 0x3}, {0x7, 0x2}, {0x6, 0x3}, {0x2, 0x5}, {0x1, 0x6}, {0x3, 0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x6}, {0x5, 0x8}, {0x4, 0x7}, {0x6, 0x6}, {0x4, 0x6}, {0x6, 0x6}, {0x5}, {0x3, 0x6}, {0x5, 0x2}, {0x2, 0x9}, {0x4, 0x1}, {0x4}, {0x3, 0xa}, {0x6, 0x6}, {0x0, 0x9}, {}, {0x6, 0x4}, {0x4}, {0x6, 0x6}, {0x0, 0x5}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x7}, {0x2, 0x2}, {0x3, 0x9}, {0x1, 0x5}]}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0xf, 0x3, 0xc, 0x6, 0x4, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x7, 0x499, 0x2, 0x0, 0x1, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0x2, 0x5, 0x48, 0x5, 0x9, 0x12, 0x48, 0x1b, 0x18, 0x1b, 0x3, 0x12, 0x6, 0x8daea494076adf3, 0x19, 0x18, 0x1, 0xb, 0x1b, 0xb, 0x0, 0x5a]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0x36, 0x9, 0x16, 0x5, 0x12, 0x5, 0x1, 0x1b, 0x3, 0x0, 0x48, 0x3, 0x79, 0x4, 0x2]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0xc, 0x480ccb15cd2d7c71]}]}]}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0xe}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}]}]}, 0x34c}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) connect$inet(r0, &(0x7f0000000a80)={0x2, 0x4e22, @broadcast}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b00), r3) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r8, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa06}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4040044) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000c40), r7) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r9, 0x2, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x44030) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f80)={r3, 0x0, 0xff, 0x1000, &(0x7f0000000d40)="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", &(0x7f0000000e40)=""/4096, 0xffffff6e, 0x0, 0x29, 0xc3, &(0x7f0000001e40)="ca1569833687614a1ff78b81fba7d7a2227cb78ea15bb2a6095ad419b3663ae5d7ca32a03c0234ea93", &(0x7f0000001e80)="414c0196e6d06b42a78b10bb34f4fe04ae5d50a4cee53539c12d48b8127cfb003bf7e161ad166dc968b7ee9c4fa5183010215cce55a04850c3b3530efb08e480b31407305a31d079452e9ce8acf11074e9d52da7072cb2350c656bcd30de7a18dbe90ace0342af3961d706e90cccfb1e5d5ced6fb0da100d3d0d4579483d2a0b8a6c66303919f619a2e2adb278c4b656ff9fe5e3b8651cca2f8ee7285651fb958ce9895e5578357c7b2d3a7dd340f791730cf15f07bb2b1e20a71f782948d1026a182c", 0x4, 0x0, 0x7}, 0x50) sendmsg$NL80211_CMD_DISCONNECT(r7, &(0x7f00000020c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x34, r5, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x24}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x39}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x23}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c040}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002100)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000002180)={'pimreg1\x00'}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000021c0)={0x0, 0x7}, &(0x7f0000002200)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000002240)={0x0, 0xfffffffd}, &(0x7f0000002280)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f00000022c0)={r11, 0x3, 0xe436, 0x5, 0xd0, 0x2, 0x7, 0x4, {r12, @in6={{0xa, 0x4e22, 0xcf1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xff}}, 0xffffffff, 0x6fc3, 0x7, 0x445, 0x9}}, &(0x7f0000002380)=0xb0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r10, 0x84, 0x5, &(0x7f00000023c0)={r13, @in6={{0xa, 0x4e24, 0x8000, @loopback, 0xdead}}}, 0x84) 23.34403834s ago: executing program 2 (id=1127): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x4048800) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000400)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x6e24, @empty}}, 0x24) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000240)={0xffffffffffffffff}) openat$cgroup_ro(r5, &(0x7f0000000300)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x840) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r8, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x20008014) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r3) sendmsg$NLBL_MGMT_C_REMOVEDEF(r7, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r11, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x16, 0x1, 'blkio.bfq.sectors\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4805}, 0x4000010) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={0x0, @rc={0x1f, @any, 0xd}, @nfc={0x27, r6, 0x1, 0x4}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, 0x5, 0x0, 0x0, 0x0, 0x2ef, 0x0, 0x4, 0x7e6, 0x4}) 22.669507615s ago: executing program 3 (id=1135): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) r4 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) listen(0xffffffffffffffff, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, &(0x7f0000000ac0), 0x90) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000000)=0x5, 0x64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r8, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) close(r6) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, 0x0, 0x0) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32], 0x1c}}, 0x840) 20.213097719s ago: executing program 2 (id=1144): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$unix(r3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000a00000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000ff900000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e20, 0xe3d, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x4e21, 0x3, @local, 0x8}}]}, 0x70}}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x90) socket$inet(0x2, 0xa, 0x400) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet(0x2, 0x1, 0x0) shutdown(r8, 0x0) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x7ff, 0x8}, 0xc) vmsplice(r9, &(0x7f0000002480)=[{&(0x7f0000000300)="de1bd5d243d7cc106dda036e6c3c35d8aa3d036d8b73d36b55759de4fdb809497602a733b3a5b1368f90c69839372afd3dbac9f2c2423851e2957be31c4aa8e02a5e8117a00df2bdc447ab2c52e446ea6692f4188279491a96b7c41114cbe2b9cc7649af65ceb6207ef0179f56248be0efd5435fc6eb14f79d1069035ed198795c1d75d42524625639918ab857f9cd6267300200961791a8151b", 0x9a}, {&(0x7f0000001480)="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", 0x1000}], 0x2, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random="13f5afcfde67"}) recvmmsg(r8, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 19.96022702s ago: executing program 3 (id=1147): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'erspan0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x80, 0x80, 0x7, 0xfffffffc, {{0x2d, 0x4, 0x3, 0x3c, 0xb4, 0x65, 0x0, 0x0, 0x29, 0x0, @local, @remote, {[@timestamp_prespec={0x44, 0x54, 0x15, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2fcf}, {@remote, 0x7fffffff}, {@remote, 0xa2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xa}, {@private=0xa010100, 0x80000001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@empty, 0xa44}, {@remote, 0x6}, {@local, 0x6}]}, @end, @rr={0x7, 0x13, 0xad, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @private=0xa010102, @private=0xa010100]}, @lsrr={0x83, 0x13, 0x5, [@rand_addr=0x64010100, @empty, @multicast2, @local]}, @timestamp_addr={0x44, 0x24, 0x5, 0x1, 0x5, [{@local, 0xb07d}, {@remote, 0x3}, {@multicast1, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}]}}}}}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000300)='GPL\x00', 0x448042, &(0x7f0000000400)={@_ha_fsid={[0x3, 0xffff0412]}, {0x7f, 0x5, 0x4, 0x6}}, 0x7, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0x8}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x2, 0x1, 0x9, 0x1, r1, 0x4efa591d, '\x00', r0, r1, 0x4, 0x0, 0x1, 0x1}, 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x4020, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4020804}, 0x50) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) r6 = socket(0x11, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x5c}, &(0x7f0000000080)=0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000280)={r10, 0x66, "fd4bb0df12149db84057e480806c2dc3f430f734ae19b44df8d9a17a20a6c2b1c3449ab36d7dd28bc00eb7788ebdb48cc67e0d869786ee8055322c1210a912b3a9c6765aca60cdae5aae4e74394ae360307dad7c3f7f3304967fbe8e3e61029e52a408f23345"}, &(0x7f0000000140)=0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x48) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r11, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) r12 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r12, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={r10, 0x6}, 0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000340)={r9, 0x7, 0x9, 0x3}, &(0x7f0000000380)=0x10) sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc6}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) 19.867870423s ago: executing program 3 (id=1149): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffff}, {0x3, 0xffe0}, {0x9}}}, 0x24}}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x4) write$tun(r2, &(0x7f0000000140)={@val, @void, @eth={@multicast, @local, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0xe4, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback}}}}}}, 0x2e) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x2, 0x60, 0x0) 18.867696798s ago: executing program 1 (id=1160): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$can_bcm(0x1d, 0x2, 0x2) close(r2) (async) r3 = socket(0x10, 0x3, 0x7) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x270}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={0x0, 0xffffffff, 0xfffffffd}, 0x10) (async) socket$key(0xf, 0x3, 0x2) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0xa4, &(0x7f0000000400)=[@in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, @in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, @in6={0xa, 0x4e23, 0x2001ff, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, @in={0x2, 0x4e20, @private=0xa010100}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e22, 0xa, @empty, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000080)={r9, 0x81}, &(0x7f00000000c0)=0x8) (async) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @private=0xa010101}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='westwood', 0x8) (async) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c00000012000103000000000b000000000000004e230000000000000000000081000000000000f701000000fdffffff0000010000000000", @ANYRES32=0x0, @ANYBLOB="0000a37bc4d24bfede"], 0x4c}, 0x1, 0x0, 0x0, 0xc111}, 0x40000) (async) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) 18.728238112s ago: executing program 2 (id=1161): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0xb, 0x0, 0xfffffffc, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0x5, 0xffffffff}}, @TCA_CT_MARK={0x8, 0x10, 0xb}, @TCA_CT_LABELS={0x14, 0x7, "97b357887853f846620853baa9b1ad04"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000200)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, r0}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000d000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x11, 0x18, &(0x7f0000001a80)=ANY=[@ANYBLOB="180000000300000000000000030000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000080850000002d000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0xfffffffffffffffe, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r0, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000640)={@loopback, r10}, 0x14) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r12) sendmsg$NLBL_CALIPSO_C_REMOVE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r13, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r9, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r13, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 18.725824546s ago: executing program 3 (id=1162): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xa, 0x4, 0x4, 0xe, 0x10, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2c00a800}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff7d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff2}, 0x48) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000240)={0x4001, 0x7ff, 0x1000, 0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001600156f27bd7000fddfdf41130000c8"], 0x18}, 0x1, 0x0, 0x0, 0x66008050}, 0x24048) 18.565885148s ago: executing program 1 (id=1164): syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @private=0xa010100, {[@rr={0x7, 0x3, 0x6a}, @generic={0x44, 0x6, "06750100"}]}}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x0, @loopback, @multicast1, {[@rr={0x7, 0x3, 0x99}]}}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) close(0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x1, 0xb, 0x4, 0x6, 0xfffffffffffffff4, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x4, 0xc, &(0x7f0000000440)=""/12, 0x41000, 0xc, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)=[0xffffffffffffffff], &(0x7f0000000540)=[{0x3, 0x3, 0x3, 0x4}], 0x10, 0xc}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0x12}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.536335901s ago: executing program 3 (id=1165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x400000000000000, 0x0, 0x8000}, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000980)="00538c", 0x3}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e1e, @private=0xa010102}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000340)="062b94327d", 0x5}], 0x1}}], 0x3, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r3, 0x8ec6, 0x10}, 0xc) socket$netlink(0x10, 0x3, 0xf) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0xfc, 0xfffffff7, @vifc_lcl_addr=@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 18.405351056s ago: executing program 2 (id=1168): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x33}]}, 0x24}}, 0x48850) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r2) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8800) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000400)={@private, @local, 0x0}, &(0x7f0000000480)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000002b00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002b40)=@deltfilter={0x1594, 0x2d, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x8, 0x3}, {0xfff1, 0x2}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x3e}}, @TCA_RATE={0x6, 0x5, {0x81, 0x6}}, @filter_kind_options=@f_fw={{0x7}, {0x87c, 0x2, [@TCA_FW_POLICE={0x840, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}, @TCA_POLICE_RATE={0x404, 0x2, [0xe, 0xffff, 0x2, 0x4, 0xffff, 0x866, 0x2, 0x3, 0x4, 0xac7d, 0x1, 0x6, 0x3, 0xee, 0x7f, 0x7, 0x1, 0x2, 0x1ff, 0x7, 0x6, 0x0, 0x6, 0xb, 0x1, 0x3ff, 0xc4, 0xfffffffb, 0x8, 0x5, 0x9, 0x6bc40000, 0xa, 0x4, 0x3, 0x8, 0x6, 0x100, 0x6, 0xc, 0x6, 0x9, 0x9, 0x2, 0x7, 0x8000, 0xffff, 0x7, 0x7fff, 0x3, 0x64b, 0x6, 0x1, 0x101, 0xbf, 0x2, 0x7, 0x2, 0xff, 0x2, 0x3, 0x4, 0x0, 0x6, 0x6, 0x7, 0x4, 0x400, 0xff, 0x5, 0x67fd, 0x8, 0x5, 0x8, 0x3, 0x0, 0x2, 0x256ecc82, 0x73c, 0x3, 0x8, 0x0, 0x8, 0xff, 0x9, 0x9, 0x7fff, 0x2, 0x8, 0x0, 0x10, 0xfffffff7, 0xfffffff8, 0x8fd, 0x2, 0x3060, 0x0, 0x5, 0x10, 0x9, 0x81, 0x200, 0x9, 0x6, 0x2, 0x9, 0x8a, 0x0, 0x7, 0x7, 0x82a, 0x88e, 0x9, 0x400, 0x9, 0x9, 0xbd3, 0x3, 0x8, 0xf, 0x4, 0x4, 0xb3d, 0x9, 0x6, 0x0, 0x80000001, 0x7, 0x7ff, 0x10001, 0x8, 0x7fffffff, 0x80000001, 0x2d2, 0x8, 0x9, 0x226, 0x3, 0x0, 0x7, 0x3, 0x103, 0x40, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x2, 0x1, 0xffffffff, 0x1, 0x4, 0x9, 0x2, 0x6, 0xfffffffb, 0x5, 0x0, 0x9f, 0x200, 0x11, 0xb, 0x94, 0x4, 0x509, 0x10000, 0x80, 0xe, 0x9, 0x2, 0xffffffff, 0x63a7, 0x0, 0x1, 0x3, 0xc367, 0x11, 0xfffffffe, 0x9, 0x1, 0x7fff, 0x4ec5, 0x9, 0xd, 0x5, 0x8, 0x6, 0x2, 0x9, 0x7, 0x81, 0x9, 0x0, 0x6, 0x7, 0x8, 0x0, 0xd1, 0x3f7f, 0xc60, 0xfa, 0x9, 0x6000, 0xff, 0x6bf, 0x5, 0xdd, 0x3c7, 0x2, 0x7, 0x3, 0x2b84, 0xdcb6, 0x5, 0x100, 0x7, 0x81, 0x7, 0xfb, 0x5, 0x6, 0xe, 0x6, 0x2, 0xc0, 0x6, 0xfffffffc, 0x9, 0x3e57, 0x466, 0x4, 0xf9, 0x8, 0x4, 0x9, 0x3, 0x5, 0x1000, 0x5, 0x9, 0x7, 0x4, 0x9, 0x558, 0x6, 0xfffffff8, 0x5, 0x8, 0x5, 0x5, 0x7f, 0x7, 0x2, 0xfff, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x0, 0x7, 0x6, 0x4, 0xffffff00, 0x80000000, 0x400, 0x1, 0x6, 0x5, 0x4, 0x0, 0xffffffff, 0x7, 0x100, 0xfff, 0xda, 0x7fff, 0x9, 0x6, 0xf, 0x7f, 0x4, 0xfffffff8, 0x7, 0xdff, 0x0, 0x1, 0xd, 0x6, 0xfff, 0x800, 0x80000000, 0x5, 0x9a5, 0x80, 0x0, 0x4, 0x5f5, 0x10001, 0x3, 0x5, 0x100, 0x0, 0x7, 0x4f, 0x1, 0x3, 0x7, 0x14, 0x143, 0x7, 0x4, 0x8, 0x7b55, 0x9, 0x2, 0x8, 0x7ff, 0x2, 0x8, 0x7, 0x1, 0xfff, 0x7, 0x1000, 0x3, 0x7f, 0x3498, 0x2, 0x8, 0x6, 0xd43, 0x4, 0x8, 0x3, 0x3, 0x7, 0x8fdb, 0x61, 0x1000, 0x80000000, 0x100, 0x0, 0x40, 0x8, 0x5, 0x4, 0x10001, 0x9, 0x400, 0x800, 0xffff86f4, 0x465a60c4, 0x3, 0xa9c, 0xd39e, 0x7, 0x8, 0x9, 0x9, 0x4, 0x5, 0x81, 0xe214, 0x3, 0x6619, 0x0, 0x8, 0x4, 0x401, 0x9, 0x6, 0x3, 0x9, 0x958, 0x8, 0xd1, 0x5, 0xfffffff7, 0x4, 0x3, 0x7, 0x6, 0x3ff, 0x4a, 0x10000000, 0x5, 0xe, 0x3, 0xda1, 0xffff, 0xc00, 0x9, 0x4, 0x6, 0xe3, 0x0, 0x1, 0xfffffff9, 0x948b, 0x1, 0x3, 0xfff, 0x3, 0x8, 0x0, 0x4, 0xdcd0, 0x1, 0xe, 0x8, 0x478459f, 0xff, 0x7ff, 0xb4d, 0xffffff7f, 0x2, 0x3, 0x3, 0x5, 0x7, 0x2, 0x5, 0x1, 0x7, 0x4, 0x80000000, 0x166, 0x0, 0x3339, 0x0, 0xa, 0x8, 0x0, 0x401, 0xffffff86, 0x7fff, 0x8, 0x0, 0x3, 0x5, 0x0, 0x9, 0xfffffff3, 0x634, 0x0, 0x4, 0x4, 0x6, 0x8, 0x6, 0xff, 0x4, 0xf8, 0x6, 0x1dd, 0x5, 0x2, 0xffff, 0x6, 0xffffac71, 0x6, 0x5, 0xb7, 0x800, 0xe, 0x9, 0xb1e, 0x3, 0x6, 0x0, 0x9, 0x100, 0x5, 0x6d71, 0x20000, 0x2, 0x200, 0x5, 0x9, 0xca6, 0x0, 0xd, 0x71, 0xd, 0x8, 0x6, 0x6, 0x0, 0xb644, 0xfff, 0xa00, 0x9, 0x3, 0x5, 0xad31, 0x100, 0x1ff, 0x94, 0x0, 0x5, 0x3, 0x1000, 0x552, 0x9, 0x8, 0x9, 0x7fff, 0x5, 0x3ff, 0x1, 0x7, 0xb, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80}, @TCA_POLICE_RATE64={0xc, 0x8, 0xff}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x1, 0xfff1}}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0x5}}, @TCA_FW_POLICE={0x14, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}, @TCA_FW_INDEV={0x14, 0x3, 'syzkaller1\x00'}]}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x16}]}}, @filter_kind_options=@f_route={{0xa}, {0xc98, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x45}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xf1}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0x2}}, @TCA_ROUTE4_POLICE={0xc74, 0x5, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x20000000, 0x70, 0x2, 0x4, {0x7, 0x1, 0x400, 0x7ff, 0x1ff, 0x8}, {0x9, 0x3, 0x2, 0x200, 0x8ee, 0x600000}, 0x8, 0x7, 0x10}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4e2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x200000}, @TCA_POLICE_RATE={0x404, 0x2, [0xe6, 0x1, 0x4, 0xff, 0x6, 0x101, 0x6, 0x8, 0x1, 0x91, 0x3, 0x5, 0x3, 0x1, 0x2, 0x3, 0x1a8a, 0x5, 0xfffffffc, 0x6, 0xe825, 0x7, 0x1, 0x8, 0x8, 0x3, 0x7, 0x2, 0x401, 0x7, 0x2, 0x3, 0x0, 0x2, 0xfffffff8, 0x80, 0x3, 0x0, 0xfffffffd, 0xe4, 0x7, 0x8b59, 0xee, 0x9, 0x7fffffff, 0x8, 0xffffffff, 0x6, 0x80000000, 0x80000000, 0xe0fb, 0x1, 0x80, 0x0, 0x5, 0xb0b, 0xfffffffa, 0x3, 0x7d, 0xfffffffc, 0x80000001, 0x1, 0xde, 0xce6, 0xff, 0x3ff, 0x2, 0x8, 0xfffffff8, 0x9, 0x5, 0xb40, 0xffffff80, 0x80000001, 0x100, 0x7f0, 0x9, 0x1, 0x2, 0x2, 0x6, 0x100, 0x3, 0x1ff, 0x4fb0, 0x0, 0x9, 0x2, 0xfffffff5, 0x5, 0x8001, 0x3ff, 0x100, 0x9, 0x6, 0x3, 0x6, 0x0, 0x67, 0x1ff, 0x51, 0x182, 0x7, 0x3, 0x7500000, 0x0, 0x7fffffff, 0x5, 0x1, 0x7fff, 0x2, 0x10001, 0xf9, 0xfb1, 0x200, 0xfae3, 0x8, 0x3, 0x101, 0x400, 0x9, 0x7ff, 0x1, 0x6, 0x3c31a4bf, 0x8, 0x974, 0x1, 0xc7, 0x8001, 0x3, 0xf, 0x92, 0x9, 0x5d6e2bc0, 0x0, 0x2, 0x6, 0x2, 0x80000000, 0x3, 0x1, 0x2, 0x91, 0x8, 0x6, 0x8, 0x1, 0x4, 0x200, 0x6, 0x2, 0x0, 0x1, 0x9, 0x1000, 0x7, 0x736b, 0x4a94, 0x2, 0x3, 0x63, 0x7, 0x2b, 0x7f, 0x4e44, 0xd03, 0x200, 0x2, 0x6, 0x5, 0x9, 0xa, 0xc4, 0x365, 0xcd, 0x7, 0xffffff0b, 0x9, 0x10000, 0x0, 0x7fffffff, 0x3, 0x1, 0x9, 0xfffffff9, 0x2, 0x80000001, 0xfb, 0x5c01, 0x101, 0x4, 0x80000001, 0x5, 0x40, 0x9, 0xffff4df0, 0x3, 0x400, 0xcc, 0x5, 0xd58, 0x44, 0x3, 0x9, 0x3, 0x5, 0x9, 0x3, 0xa4, 0x2, 0x4, 0x9, 0xa, 0xf00000, 0x1, 0x10001, 0x7f, 0x7fff, 0xfffffffe, 0x9, 0x3ff, 0xfffffbff, 0xffffffab, 0x1000, 0x10001, 0x10000, 0x9, 0x3, 0x1, 0x8, 0xf9db, 0xfa0, 0xfffffff9, 0x9, 0x2, 0x8, 0x5, 0x80000, 0xfffffffb, 0x4, 0x3, 0x8, 0x7, 0x100, 0x49, 0x3, 0x6, 0x3, 0x2, 0x3, 0x7, 0xd, 0x1, 0x1, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x9, 0x2, 0xa063, 0x7, 0x3, 0x8, 0x6, 0x40, 0x4, 0xf, 0x1, 0x1, 0x7, 0x0, 0x8, 0x1, 0xffffffff, 0x61, 0x9d7, 0x8, 0x4, 0x7, 0x350, 0x2, 0x7, 0xe, 0x2, 0x790ba9d7, 0x5, 0x50, 0x7, 0x0, 0x4, 0x7, 0x5, 0x100, 0xa6e, 0x69, 0x6, 0x1, 0x7fff, 0x0, 0x5, 0x60000000, 0x4, 0x51, 0x3, 0x4, 0x7, 0xfff, 0xc82c, 0x3, 0x101, 0x6ef7, 0x6, 0x8, 0x2, 0xff, 0x4, 0x7, 0xe, 0x5, 0x6, 0x8, 0x4, 0x0, 0x7, 0xffffff81, 0x0, 0x0, 0x4, 0x7, 0x2, 0xfffffffc, 0xffffffff, 0x2, 0x3, 0xfffffff8, 0xe05a, 0x6, 0xf20, 0xffffffef, 0x1ff, 0x2, 0xffff, 0xc9, 0x2, 0x3, 0x200, 0x3, 0x0, 0x1, 0xdaeb, 0x7, 0xe89, 0x10, 0x4, 0x5, 0x49, 0x80, 0x4, 0x80000001, 0xb01, 0x1, 0x9, 0xb, 0x7, 0xfc, 0x5a, 0x6, 0x8, 0x3, 0x0, 0x6, 0x0, 0x1, 0xedd4, 0x800, 0x739, 0x6, 0xfffffffe, 0x3, 0x4, 0x8, 0x1, 0xd, 0xee9, 0x9, 0xccd, 0xf, 0x9, 0x80, 0x4ec, 0x9, 0x7, 0x8000, 0x9, 0x7, 0x4, 0x9, 0x8000, 0xfffffff5, 0xffff, 0x8, 0x81, 0x7f, 0x2, 0x1dd5, 0x9, 0x1, 0x101, 0xffffff00, 0x401, 0x101, 0x80000001, 0x0, 0x9853, 0x9, 0x1, 0x3, 0x7, 0x3, 0xd, 0x4642992d, 0x8, 0x2, 0xc, 0x54b, 0xa2a1, 0x2, 0x2, 0x940, 0x13, 0xf12, 0x0, 0x0, 0x3, 0x4, 0x3906, 0x400, 0x2, 0x3, 0xffffffff, 0x80000, 0x9, 0x81, 0x9, 0x8, 0x0, 0xfffffc00, 0x1, 0x7, 0x1, 0x0, 0x1, 0x64, 0x3, 0x0, 0x400, 0x9ac, 0xffff, 0xad9, 0x2, 0x0, 0x0, 0x2b, 0x800, 0x9, 0x8, 0x0, 0xb, 0xfffff000, 0x4, 0x7, 0x4, 0x15d2, 0x8, 0x0, 0x2, 0x6, 0x435, 0x38d, 0x0, 0x2, 0x2, 0x800, 0x0, 0x0, 0x98d0, 0x0, 0xa, 0x9, 0xfffffffe, 0x77, 0xe, 0x1, 0x8, 0xfff, 0xffffffff, 0x0, 0x7, 0x7, 0x7, 0x6, 0x398d, 0xa, 0x8001, 0x2, 0x2, 0x1, 0x7a4d, 0x161, 0x7f, 0x80000000, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffb, 0x8, 0x16, 0x1, 0xde52, 0x1, 0x1, 0x8, 0x1, 0x7fffffff, 0x5, 0x3, 0x100, 0x8ee0, 0x69c, 0x8, 0x9, 0x3, 0x3, 0x3, 0x476, 0x1, 0x9, 0x1ce0, 0x200000, 0x7ff, 0x8, 0x8, 0x1, 0xeb5, 0x8, 0x4, 0x8, 0x0, 0xa7b4, 0x7fff, 0x1, 0xc, 0x35, 0x3, 0x2, 0x3, 0x2, 0x8, 0x8000, 0x4, 0x8, 0x14df, 0x0, 0xfffffffe, 0x0, 0x6, 0x2, 0x3, 0x2, 0x81, 0xfffffffe, 0x3, 0x8, 0x1, 0xfffffffc, 0x7, 0x2, 0x7ff, 0x6, 0xd, 0x5, 0x8, 0x1, 0x67, 0x9d6, 0x2, 0xd, 0x5, 0x7, 0x3, 0x800, 0x5, 0xfe, 0x200, 0x1, 0x3ff, 0x87f, 0x9, 0xb4, 0x6, 0x0, 0x9, 0x577, 0x0, 0x5, 0x0, 0x9, 0x6, 0x3, 0x26f, 0x9, 0xd7a7, 0x3, 0x4, 0x8, 0x9, 0xfffffffa, 0x0, 0x7, 0x4897, 0x0, 0x80, 0x1, 0x9, 0x0, 0x58, 0x400, 0xfff, 0x15, 0x7, 0x9, 0x2, 0x61, 0x6c, 0xfffffff8, 0x2, 0x0, 0x9, 0x3, 0xd, 0x5, 0x7, 0xe, 0xb, 0x8, 0x6, 0x8, 0x0, 0xd, 0x1ff, 0xa617260, 0x1b, 0x228f, 0x10, 0x1ff, 0x0, 0x8000, 0x1000, 0x9, 0x0, 0x6, 0x0, 0x2, 0xfb, 0x1, 0x9, 0x3, 0x1ff800, 0xa3, 0x7, 0x426e, 0x2, 0x5, 0x4, 0xc506, 0x5e37, 0x3, 0xf062554e, 0x8, 0x3, 0x7ff, 0x3, 0x5, 0x3, 0x9, 0xfe9, 0x9, 0xa, 0xfff, 0x9, 0x9, 0x5df9, 0xffffffff, 0x1, 0x1, 0x3, 0x0, 0x0, 0x80, 0x8, 0x6, 0x26908ef8, 0x7fffffff, 0xff, 0x10000, 0x70, 0x6, 0x98d6, 0x5, 0x9, 0x6, 0x10, 0x2, 0x3, 0x93e, 0x100, 0x8, 0x7, 0x4, 0x5, 0x9, 0x5, 0x4, 0xfd28, 0xa, 0x5, 0x1000, 0x1, 0xd960, 0x80, 0x9, 0x34, 0x5, 0x4, 0x9, 0x7fffffff, 0x8, 0x3ff, 0xcb5, 0x3, 0xfffffffe, 0x5, 0x2, 0x1, 0x3adb2bd4, 0x4c0b6c26, 0xd, 0x100, 0xfffffffe, 0x8, 0x9, 0x5, 0x4000, 0x10, 0x8, 0x3, 0x0, 0x8, 0x1, 0x8, 0x6a47, 0x3, 0xfffff141, 0x9, 0x1, 0x3, 0x6, 0xffffffff, 0x6, 0x5]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xb9}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_RATE={0x6, 0x5, {0xff, 0x1}}]}, 0x1594}, 0x1, 0x0, 0x0, 0x20000001}, 0x10040000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0xc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x28, 0xfffc, 0x0, 0x2, 0x0, 0x0, 0x67}, {0xfffffffffffffff8, 0x400000000001, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffff190, 0x80000}, {0x3, 0x0, 0x80, 0x2}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x4, 0x0, 0x0, 0xe000000}}, 0xe8) listen(r6, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x11, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x300}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x17}}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1011, &(0x7f0000000840)=""/4113, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r9 = gettid() syz_open_procfs$namespace(r9, &(0x7f0000000000)='ns/ipc\x00') r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x56401, 0xfffffbfc, 0x8, 0x3, 0x3}, 0x1c) r11 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r11, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r12, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0xf, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048840}, 0x44800) getpid() sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x9e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 18.255365985s ago: executing program 1 (id=1169): setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_virt_wifi\x00'}) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001080)={'batadv_slave_0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x80, r1, 0x20000}, 0xc) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f00000000c0)={r4, 0x1, 0x6, @broadcast}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca3", 0x4}], 0x1}], 0x1, 0x40800) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r8, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {0xf}, {0xfff1}, {0xfff3}}}, 0x24}}, 0x800) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x4, @local}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r1, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40809440, &(0x7f00000002c0)={&(0x7f00000010c0)=[{&(0x7f0000000240)="9723718f5895d9f303ead5a76245a602", 0x10}], 0x1, 0x1000, 0x0, 0x1, 0x7, 0x27af, 0x7, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) recvmsg$unix(r9, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40002000) sendmsg$unix(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="140000000000000001d0386885201f8d4fa378c700000001dcecf847fc504ed35286a7590ef41cf1a0f60edada7c69625d5073dc6fb2247b4628b708b920f2786ade8c769d7f1d81bb0b487e43b99a06fda7c01ccf2c8a1f60a1ee3ee97226368fc97c1b45245acdf9386379764b343f9eb4913ca2345f67c4eb"], 0x18, 0x20000084}, 0x40880) 17.732337967s ago: executing program 0 (id=1170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f00000001c0)=0x6, 0x4) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x64, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x4) r3 = socket(0x2, 0x80805, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$inet(r7, &(0x7f00000003c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) (async) setsockopt$sock_attach_bpf(r7, 0x1, 0x9, &(0x7f0000000080), 0x4) (async) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4081}, 0x20000000) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x40, 0x7800, 0x5, 0x3, {{0x5, 0x4, 0x1, 0x3c, 0x14, 0x65, 0x0, 0x1, 0x2f, 0x0, @multicast2, @local}}}}) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a98000000060a010400000000000000000a0004050900010073797a31000000006c000480680001800a000100696e6e6572000000580002800800044000000017340005800c0001007061796c6f61640024000280080003400000009208000440000000ec080001400000000d08000240000000020800034000000002080002400000008408000140000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x48890}, 0x20004012) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001100010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080e034000000010400000000c0a010100000000000000000a0000060900020073797a310b0000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a000000090001003a797a31000002000900020073797a3100000000140000001100018000000000000000242441ec2a1eee8d683ece60ca2a000100000a"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) shutdown(r4, 0x0) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000314010049bd7000f4dbdf250900020073797a320000000008004113"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14400000", @ANYRES16=r9, @ANYBLOB="040027bd7000fbdbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0xd1}, 0x804) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r11, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) 17.727556522s ago: executing program 2 (id=1171): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09002dd27000fcdbdf25030000000c00040000020000000000000c00030000020000000000000c000500040000000000000008000100000000000c000800248200000000000061f545f69109c5b1375cc3baf712c3957ee11da7ff31495f2dbe17c691"], 0x4c}, 0x1, 0x0, 0x0, 0x24004420}, 0x24000004) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x3) (async) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000080)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044004}, 0x4000801) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000940)={{r3, &(0x7f0000000280)='syz0\x00', 0x488000, &(0x7f00000002c0)={@_ha_fsid={[0x0, 0x1]}, {0x3, 0x2, 0x3cd, 0x4}}, 0x9, &(0x7f0000000300), &(0x7f0000000340)=0x9}, 0x5, &(0x7f0000000800)=[{0x2, 0x1, &(0x7f0000000380)='nbd\x00', &(0x7f00000003c0)="2bb835583dfc8d47faeb4f63f222d3f6b39513e43aaa27de707b407c4a209cb3", 0x20}, {0x1, 0x7, &(0x7f0000000400)='queue\x00', &(0x7f0000000440)="61dd4d3d519ec8dd1ac0d3fc6070eb0d25283c96d1195aa013f8bde6f2b0104fa57a34d030e3639511c54c4b", 0x2c, 0x28}, {0x3, 0xa8, &(0x7f0000000480)='+{\x00', &(0x7f00000004c0)="1b03fee6f9af3564e08530dd6f66c63f982d801e9364657a8895b4104df0987317e76f3779d0d928cb4b6e534a6b677d8d040a734dd11d968fb87f8ee2bb268301b01dd6c84381d12d2bbea0ee8d75149f8f0f8e4a824ad231b8b016dc1f678047fffa45be4a0861aca4e9c08862be3a9dc94d2c589b989308d8a16165ff32b31a088998a1878dafb2b7acb7247fc35a7154060381e96154f91b4d651fc81d28516fc590c5eaa38844611d1597e98e1d1bf70666b11dd24e2838d9779caa387b37ce08335192f2f38e", 0xc9, 0x2a}, {0x3, 0x5, &(0x7f00000005c0)='nbd\x00', &(0x7f0000000600)="5e5da061e1c792c2a9b0190650620a55e79fb0dac339d2c4a988d33dab603f6bd637ce6634fa52e10cd02189e3cea13464823170e7fb0cdcf7de3eae9d96966861360724c493733bd77cecbdcd497014a603ccac7a0c9736ea81809acdc0e90538e132314c86a144f216cd033bb35c4d5b09dc743d962a32252184e8e4cc84c83541c46b8c72f0bcda9fd85c1afef7066149a4ba380399bf381663f1f1294fac750c23", 0xa3, 0x2a}, {0x3, 0xe, &(0x7f0000000700)='osf\x00', &(0x7f0000000740)="8423533eac88c11bfb1df52d3aa30eed414aa3c30ab2afda7ff30ee99fae968dc4efb800d6e4e60d1be4754d4a", 0x2d, 0x12}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="c71825ef58d10fd5000005000000180001801400020073797a5f74756e000000000000000000500003804c000380"], 0x7c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a80)={'gre0\x00', &(0x7f0000000a00)={'gre0\x00', 0x0, 0x700, 0x700, 0x2c1e3a81, 0x100, {{0xb, 0x4, 0x3, 0x3, 0x2c, 0x66, 0x0, 0x3, 0x4, 0x0, @loopback, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0x17, 0x3, 0xe, [{@remote, 0xfffffff9}]}, @end, @rr={0x7, 0x7, 0x20, [@empty]}, @end, @noop]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x60, r6, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd886227efdc8ac23}]}]}, 0x60}}, 0x4044084) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffbf00f}, {0x3, 0xc, 0xf2, 0x8000}, {0x0, 0xe, 0x4, 0xa472ab7}, {0x3, 0x1, 0x5}, {0x7, 0x7, 0xb8, 0x5}]}, 0x10) 17.572426478s ago: executing program 0 (id=1172): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) read(r0, &(0x7f00000027c0)=""/4073, 0xfe9) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f00000003c0)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "eb778610de7e3023"}, 0x10}}, 0x4000040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6}, 0x10) ioctl$BTRFS_IOC_ENCODED_WRITE(r2, 0x40809440, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$alg(0x26, 0x5, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) close(r6) 17.388959131s ago: executing program 1 (id=1173): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xce0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="1400"], 0x84}}, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1, 0x0, 0x10001) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xca8) r3 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) 17.313323695s ago: executing program 1 (id=1175): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffbfffff8000, 0x8) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x4c02}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='hybla', 0x5) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) shutdown(r5, 0x1) readv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x500}, {&(0x7f0000000980)=""/4096, 0x734}], 0x2) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000300)=0x1101040, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f00000002c0)=0x4000, 0xf3) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8, 0x1000000}, 0x10) ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000180)=0x4412, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000029c0)=ANY=[@ANYRES16=r2, @ANYBLOB="ecd6addf1276f18f0190bbb825fd2c11cc3486c38fa307ee0da1ac4f7ce86929eabb678ca218aa4b71a8e9d8541ef445d249674acddbb44bd13478b073383b45bc2a48161bf8ed34198e55bb330d6c16729386c458705071b065d0fcbc3446f049c56d46d4532ca65934477334a9a60fa9fa18d6465066ce844c44e11d4d31106f7f2413954b1804f1af45e85957927a6746f74006f2667330acfbe17236fd0404ba8274c28e1177ca4b6e8b004ad3bc2a51e20b25a813ebb3061d805bf243ae13e41fb4e38d1a8cd920e2d12b9c8108cdc56382972119dc86d6aab3fa62b3e8c239d1ba628164a24ffb42f0bf1608f376258eaddcd188826f475031696589a655895e6d94cb973839d0106a8256b98aa0f9bae5edbb9368497e0bd7ac61f60a14db805c5d8b423188b6e20d4a9a92a452e8e1cc1be9d58cad016e3a07fbe66f93c3812c962d4226b73be1c2508c4f3fc9f0296b9d0c96e207d56eddd599db07924fd621ca562540f8fa1d9a7fcd52c3b11f2b3a81db620562fa99f62e3ffb4b9b06f436907d780e8e497663c0bb8c4a7c3fdd08e4d20852e48299a502ca2529a99296507316226e8e8af2c4bac689565f3b7e30231e7b14e3f33805f716c132fc326c667fb5727870524f4119fb1a20ef9515790c64a731a6f909e7f0ea1e879195d85ade0e1468193d52fcb50dca0f4c54ddf34e8375269220a7bebfbc3391f921725d82bb7add1f42ef1083843ff865612a5ef7a5d3ad417965fdbc5c646af36c2965ea8927f938d3dfc5b34eaa2bb97a9ea8b6f7e1343b45bd6e262dafcc0c2aa865d3738b9e82a159f3c82ba96ef6c8bfa681cc2d720c34f4a7e2b0323b1676d03ce28e9b9772c38d93da02aaa83c191365c4d24533e1a5499a82e8f63c7e19accd522c26d3ae4bd2ed142285ce950250c11144c8494207faea9cfb004875c555f800d20621e0393ecdb26fe198bc2f57eec1c387d2d45e86aef800b6d21bcd81538350c5d5492a676cae9e256b2d1408b2b7e683f6c4b5346c8f4b0c899f14a8abc4246998e1ece2633f826585cd88d6df4d45824515141fc433b212cfc9cec89f815ffb407201aca80993795ee2dc2c980695a62de43dc34a03c63253dc85160deb1231adce244b91993e65322f56eec0860466add0e287da2766366d648b34012a1a99302f7e357c842f2025f19bd884365cf5fae5d3d2c25852d1fff854355371190566431d9e76fd9c3ad235d15cbdf875f6e5157e9a3af4d10cbf83bd7571f10603cdeac3b39334158c492560e5c8b728b8d4d51c86dae8fa911891172fe7ef536b808523c94b76ec3bc9399e30f30496b40ef74e1614668e7673e793502245e70480cdf1f8057b4ac368f24607032ee55527cfe22095acaaeac171214a993030f412403b19f4271b9688c87d1d8d7ecc764d1b7b92e52e65ab0e1864d949f570b410cf08d8d98abc09710a48feecbefd74de34aa06a3becbc575904e42ac4e780e1780337edc451de722e8f2fe22729344d8a7d70c3c7cb8c6f6c707b0cdcf9b6d7fea22df3ce8f27682c1417e8384a0412c51d63df539b8c01a4764f95a40b03a153dd4e35647984a376022b22df945c746e0a91a5bd361062e3f5f3647461f6f2eb9f5434d889ffcc63922652c68d23b3f12a732d9c1e3e19974cdc5b93b42c73a752e0f4f06926888e150bdb0b41cc678b479caacfba927514009db1282a02e27d184e2f1161136b38dfbf814f48a1ae626168b7bed728742819f145a3054b80373a2d035b831797fc4c2e35cddf97a36193b25b5ef28630b4d1e751d5f84ee56865a4844540ffd683e70529b0d7d42886f55b6d1da418f253e8c9b823c83d2be099b17b541e436f38a9901f992d16fd3cdb5a00e2751a78737919ec246db2c25c58a3b4bbfe13e937f9ee6fe1351e082930ae712effac140518ae100e27fe0b32dfd7f4688b216a2f673fcfff0e6de1e52001fe61c7aeb27bc76309d3f2bf3956b2b3ab499389335842e1fbd4caccd3f1140d06bb4be0c61516e238f4701036abe4824b609e209d2354c52fc15313dac0e48f168a1d89261dc17a42ecab9820a9653f0c848367c5d229dc7d388788644a56cbed7c322d0ba70036cea1bf85805a9d9aabf907abcada36767cc83e9298d20fa7db92f4a4a0a96f3aad2af4979ff5ae3879ca12bf29ca97e1279b41492e5a59d6eaed3cb83e5fb8e93988211fd1079685b321c9ea9816c4690c96792aba2a02a30c3602ba5a815d432312986e4b00fe6a9c829bdda6f04541e1c8fbc2847a1576f69b16bf057f758e7dc6ec762af8a6ce372cff96bcb885077a0fe575e155e33a13d114e28a7f1391f4a78fefe5f52d0dd6503049cd419ba98a33184039a6d7768b66d5f2e5b3d35fcef58b92cb862f07db85d2a41cea3d0f1a72f892e5441fb3e5d6fc9fc50362ea692ad4f467a81f19e3800eb0ff3848e449d73910063b3b1aec3294e64bcbc59e40ef2f7a73f39e9ba4676c0e80adcd530d4bc57386bacdcb36ca37213307b6920a20e4a249ebc2f49834c98d22b5b54a45eef76c12e79258f8246c97c32a68491941ae23b646a888f85bf097e10e0f4a388239df7232705e349a5a4e12b2080a1c01e20961f44715fe9f5d9ab6a6af830102aa4bcfeec359b99f18dc8278e79717ea17d13afa2e99cc479afd32fc74af3f459b14fd205413ebeb35e1eaa5823d2b423d01567b076e9e2214842b240f233b21ce7d2cc14f3df04b6ab8bd366b87ddf7f5daac925a8c32798abf3adf924331041393bbfc249036db21f6a925885d1d427103c5b51c042c610856cf3c4332d96798b6e987ba0d8bbb2ec12cb6ab42c84c866266b8fee6548fbbd84e9eadc1730bbbf37b9800a546e0583223a79006577d6bfc1f6b4d192bc4eac44497ccd6536d44bf732e6ad97ea5bdef9ae43ff826e17728157826aedd8b9c2279fd06d58190da026e1d0285f52a890c4ee144ddebf807ba2a1fdd2c574c361528493884d24a947aeb619c22b8f3340e3425e14cbe059a4a317e273d23dc4e32a72a5a0f326923363b94d1197708ffc95cfbd5ae2760656c1c93a61735a5c5de08af1e8ed3946cf73b692e139490ec7f0578673245d380098e2b2bebc08c2911a8f2884d50c9ba8a54b21941274928902eb06e100a2d7a3e8c62ca6bcd2661eebf2e2d025cf2b85259b8ff3fd5415382d5e2de47ea59577ebc1695805dcbf4fc12c8603585d08cc0193e2f7a5d3a82a19c21fe7cb6feae7789aaafec2b2994652c50b6aa89500041403f2f22f01864afd7b77236013851ac6782385e698d66bd17d3d889cf60017d53408312d17271e7ee3f9b57c4a10b4df60cb8a6fd612909ba0c444219b16b9e74f7db03e68e6d792cdedb42b5b6fcde66ae663467727056c3f960373ba571ad31d3c71f618064116d0f736340d08ce97cd41dc9657790e0d76c461e30613fd7ae8ce1eaa19ff3e89010b93a80b5adceeb828f2ca2f22ba315b4fb7834f01f5ff84174e57ad968bb8a9089902768aaf574734be588b2466b8ca36fad55a532776ee086a646f3185c94316b58449a041edd61178d51f9c57ea6e5160969b8d6844ffb4485dbc874a2327e403e2d7bbb395263ca61f3d7e9cd713e752f70ca826a73ae3ad6b75d104d9ab4bdc3fcfa63d5f66c334b94087f23ec1afa4bad99ff3b34119fb409984e8363b32690c655d278364226e7929d5ac0869c010e5370a486e606a20f9745a34cb14a12abcf75bd8af9c20106c8c152a200f9b53eaffa766ffcd187d4ea25621b3af3e19718a2cd8725587294ab0da2ee1e63e4f5041ad2fb068f5a12f3fe83efc21c3a3206382b59f78ba93926e7b51c21c8958b752530893087a5381fd6f06fc8f701a98ddf3a50ce1f8e98c1c91c0fe5e49fcc095a9ed68a559cc2ee887b93676251970dbb115f1b04f7cc5c1cd110fba2b03efca1813f880b74bc2e4e68caf71e175bdce9c264af6bd70511f4da1d94babb9107d7f60feb7bb4e1bb1c68187ddf4e7f4cfb091ecd3e0a080d194bdf7bb7b70ab6b55ccd8ef59c188cf78b4506ba52d4a50518ab41d991ed700e84514bc3e8ac715315ebb665bc8412253ee6e27508c80d01e82e2185e2dd292bbacfad67f49bfbcfc6fdba28e4f12f2d612a69833fb666f1a6edf2352ff16240d279ef037db0f72a2020d7b87b54171ce5911da9bba9a60f68d907bf2657841cf83dec166e53e371d69041c28f8fc78460d1fb0d0b4b4271f3a72796cc0caa902dc459292e3d5f0f8c7c24853ee02925da791f5947e09c86341baaa81f024a8f69430fbd7081f83d92bfdbfcffa95c5ff56121b4dd40f49a707cb2072827be49e17e8fe2965c4bec39baa6245151ee7ab064be2e5ae2f9a2dd7a7327514da3f187f4cbdd7ca4148f62680f53e450fb2565d000d70ffb94bac42a2ea682fe025276322a2cc3cc8d7b9958a6966f6db5e4a0b6df9c0216182c8c785f70c7a05c0be2b01557a479929f6c6bdc6c6caa2a497945745b2be1966f95cd69ed6489099e515d4553cedd40563ceaff81e93989b0c4363d05a43416c99256630e900df161dd7c2d2ea81f1a5a965eefa9becdad2769b9880eb22dd9a0fcc05252d948411a3671dbb03bab45b8d1e078bf7ba6220cab68b84ac046e02c86a1d4a729d9fddc13e8ecf45e4c0b7f813a9b04cb12f0ce6f3b6f39ef86ca13978a4b85361691017c1729c74052663513a104673f480ebeb9ba75819c242b863cf7ca34bd131afa8a96494dea544d988957c01fea4fc61f94ff571d748a5f25de7d7d0710406ddc366182c115fc9d25fa4c25a352a13c7b2d6d50417890a64fd038b47d9b8162900245719b3d09fe1e2c77e4046272ccc414509f53d6f1649bae2999e66479b36618e50d3b65e296e32d24b2f605f17094e36817982873e258f18eb4917f69381e12100a25b215972cb548bc2f82b2333048cfe135e6b5110288b7d4c286d7e967f717117c9abdfd90aea6f94753f875b2449ff50b66a2acec96c415a8a0ddf6f4869a7c260bb761004d5e6a4ffb30f6e36d2192a8adf45b745888e9c16c4f3ff90c5b41dd9dd30890b3e95ccb150dab01e36724251282d459dc4b47c063d9d82c7312d393cefb23b7f2618d0924e648e56399ff913e86ea71a4240fef1224cf3f6294acd7af6cc7f1e5ba7a7ca06c90533d682660120a971d92bc435dcb00fb2df9ad5ff69dc48ceffa865d15df7a0c22f4b073cc7e26bccb88af9f4542066454c8e03e1c07fb70d703bd8d8e376f9f294619cc1d270aad6b1d4bdb45e41843e6c70d84db64b5ff7bb19815140f354de8d4e1bc0c3bda3223a504c983cfdebe15e06e1785bf79448d6e5514416cb12162ad7b724d5e311d935e08946dc05d96c71f89f3c3e8b708e9c796560ee23a8ecb3ac3a0106a12810366a05cfa5dfc92d45f9a503ac7c85ee1c33832a88f097699a28459f3fb6773f561163c26136627d173bf276fd0584ba64a54fab37695e683952b6da3eabf17aa59d708a6d312b25cde508e5ded3a066bbc4f38cb0202f33e6ad1de9c6e69705f8c213fb083417e0c7a673f66c2784faacea7138295c9cfb4d86f3eec1ac95ac9e7c4cb1a28ea7486c93e0e6e10bbcf362358bf8985182609541ffda29667214f5480b49dce953bd59ac8ead219c420a7b732ef2df720836154275efd6c0af5cfa47615b0a571c5503e467ce91639e86e9b89093bf69ca2d2768fc1fe872414f2a7083b78bb20273a47baa6d83ff5143ab810fe9a6f40e27a2f27221"], 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000340)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) sendto$l2tp(r3, &(0x7f0000000200)="5e3f071b84738fc965859f482498a027dc4081315957811a171a1fe9051ebf820588c812f75c77f24f3cb77b510112685b6491a3219320f4c2f0d1ac7bcffd1d8806aa4dced4dfa8559cd3a7bf521bda6ebf0ba0008a110815094094ec52da0db068cc2faa049b6c66cf8961badba14934af65c3275a", 0x76, 0x40000, &(0x7f0000000280)={0x2, 0x0, @local, 0x7}, 0x10) 17.312623445s ago: executing program 3 (id=1176): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffff7ff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x80820}, 0x400d0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf251f00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200040d4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$kcm(0x2, 0x3, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x30, r9, 0x1, 0x70bd2c, 0xffffffff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0xa}]}]}, 0x30}}, 0x40) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) r11 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x840) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r13 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r13, 0x541b, &(0x7f0000000040)) recvmmsg(r11, &(0x7f0000005cc0)=[{{0x0, 0x55, &(0x7f0000006000), 0x1}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x0, 0x0) 17.042972198s ago: executing program 4 (id=1177): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x0, 0x3c}, @in=@broadcast, {0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x4, 0xfffffffffffffff8}, {0x0, 0x3}, 0x0, 0x0, 0xa}, 0x5, 0x5}}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 16.752088257s ago: executing program 4 (id=1178): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180500002020782500000000002020207b1af8def5c0a2ed37f6d8000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29) sendmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x3, @rand_addr=' \x01\x00', 0x7, 0x4}, 0x80, 0x0}, 0x4040010) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)=@ipv6_newrule={0x30, 0x20, 0x1, 0xffffffff, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'lo\x00'}]}, 0x30}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES16=r1], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x4, 0x4, 0x4, 0x1, r2, 0x15b4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xfffffff4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r5, 0x8}, &(0x7f0000000240)=0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) close(r2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f0000000900)}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r6, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e25, @loopback}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000180)=[@init={0x18, 0x84, 0x0, {0x8879, 0x3, 0x6, 0x400}}], 0x18, 0x2000c004}, 0x2c0408d0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 16.589956533s ago: executing program 1 (id=1179): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8040) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f00000003c0)=ANY=[], 0x52) close(r2) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000070000000000000013d380009111bb000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 16.524748932s ago: executing program 4 (id=1180): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeed, 0x8031, 0xffffffffffffffff, 0x32cc0000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, 0x0, &(0x7f00000000c0)) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x268, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x255, 0x20b1, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x165, 0x1fc, 0x0, 0x1, [@generic="aacb078fbe8fcbd3844064688b2b4f72c8b118a6a90ed572e0926e98ff65077497ecdfa2dd0b5be86a30b081592ea9aee28a5b9348e4309e890e00a64b80b2f24c4e21bbf0e68a8e654b69e6ffbeb86cad20e8b308763f888071387b6411d1d7a3daf18fa5b322cf482b526b0a09ec57b041b4725cdc1a60af0c680b1c0876c75d014155cffa2183cb7b0cef3d0fb8771666304bb326ae16138cf54860b3b23ea42b6d60982de3c6ad7bddef702a654f13fff71f05637e0a13e0534ac5ddf248333a135ad7629cff78c318eefec08d0d3b67eb20d03f38eb4ac5ec825788c56d07a5ef39bdbc3913dd175f1b1f1fc98ec55124715319", @generic="fae644f50596f81d9ad9081d397c66b15f5eaf36bc97fc82590eed387df8a1852954f8892f18315574824837ae0ffbd6ee87e5a331e118cfdbd0ea0cb2c9afbcc6c7f301d71f0a16bff8718e908545b6008dd320da4618006dccda8c1c3249c67738b4e6ecd1164f16d2ad"]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x268}], 0x1}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r5, 0x0, 0xf3a, 0x0) close(r4) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffdf8, 0x0, &(0x7f0000000fc0)="dd5e48aa95ac0000"}, 0x50) 16.464259864s ago: executing program 0 (id=1181): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x800, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x5}, 0xe) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) shutdown(r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="9f6b0100180000000000b2a8765dff9d41f0000002000000000000000300000d0000000008000000000000000b13f0000000040000000100000001000000"], &(0x7f00000002c0)=""/162, 0x3e, 0xa2, 0x1, 0xc59b}, 0x28) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000880)={'ip6gre0\x00', &(0x7f0000000800)={'ip6_vti0\x00', 0x0, 0x2f, 0x81, 0x4, 0xa8, 0xe, @empty, @local, 0xb030, 0x8, 0x80000001, 0x2}}) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) unshare(0x400) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES8=r2, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r5, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x38) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f00000005c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000002180)=ANY=[@ANYRES16=r3], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback, r9}, 0x94) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000640)) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r10, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='pids.current\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="04cf4f9f058af58e8698dff9cc", @ANYRES32=r6, @ANYBLOB='\r\x00'/20, @ANYRES32=r7, @ANYRES32=r11, @ANYBLOB="0500000001000000010000000600"/28], 0x50) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000080)="15be381e485e45e897206c3d74dfcecb03cbff2f975128d92a077bf67ec1ad7b486927b48fe4087d", 0x28}, {&(0x7f00000003c0)="d48449e081b658de9e078f7c160b9ced403e9103444a5beb3a965bdbbe3a59ec49d1e51b8d1de3319dcd727aa654d9badb1f90933051e41ef330a73d0ac8519c5fe95e2d32cbe7e555f1677fb3224e", 0x4f}, {&(0x7f0000000440)="6a80de8641cda84d1971100003fefc66a3817a1ff09ab991fca5b0f96191728ca523ffc19368c6afaef73588a2332ece0cefd4417621816def66711fcb07040be2346a72127c4ae7932588b4f515479a72085a4fd6df7dd69ef698300d04be54ab41a06feb7c161e54ccd430f72bb38c733d47cf71252215f759b45491cb9105c5fe6304bda8300de72192e49e194d23fbf619fad9ea14f035168ca7b76263ba081155512a6a46b3a3e2adc3fd0ca6a495d3eb9608f2fd833de1cf5d9d1bde070dd6e5650bf81582ee3311875cd01382c8c89c6655756b66ebbdaaf15f", 0xdd}, {&(0x7f0000000540)="6f413c63448e5d4f3c486552b94adf2376f17fcb494ab2f36085643d33feda17d03fde9506d0efe1ae983add7cf146a4add9aeca4462cee2fb78100ba11ca2644bb5ff31a91403acbefc5b945a6d3a280272", 0x52}, {0x0}, {&(0x7f0000001b80)="cf4af566425ba56804d807abc08e2f175c7312f77c8425e77daafced9987977373fbbd497c8a13252987ff5c7b3f933332ac5170c2ade2bbef7832d3134ab2c64ac54c4c56f23117bd8765df6a0ebcb54463a8292ef14ae3e466e5ca528e50f3d7c3ea9711d8d1b43df51f5ef366569ce963c082c5fb0d7b220484a59f133c28f8eb0cbe5146ec4a66094283c8b637267891db3f7e2b20d7e529209ca8bd7c884d5343a494b4c16de541b401c4153e0cc4914c8e94e0be404b3ac67d60a6a01d914fa518d13ae6d1e6", 0xc9}], 0x6}}], 0x1, 0x20008000) 15.768969866s ago: executing program 4 (id=1182): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000001c0)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20040810) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000000000000000000140001"], 0x3c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) syz_emit_ethernet(0x66, &(0x7f0000000140)={@link_local, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0xff}}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x4}}}}}}}}, 0x0) r2 = socket(0x2000000015, 0x80005, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000000) mmap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 15.715480034s ago: executing program 4 (id=1183): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095", @ANYRESOCT=r0, @ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xa, 0xc, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095", @ANYRESOCT=r0, @ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 15.628807786s ago: executing program 4 (id=1184): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2900f6da9dfea1547d9f4d42a196e85bd550418e63e192c99a4d7d8b092f5034410e38b66e93d48311ba6969", @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf25010000000800030007000000"], 0x1c}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000080)={r9, @in={{0x2, 0x4e20, @empty}}, 0x1, 0x8001}, &(0x7f0000000140)=0x90) r10 = socket(0x10, 0x803, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) 15.111000354s ago: executing program 0 (id=1185): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000410000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="39fb030300"/14, 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="000000000000800028"], 0x50}}, 0x4000000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req={0xfffffff9, 0xfffffffe, 0x80000000, 0xfffffffa}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=@ipv6_getnetconf={0x14, 0x52, 0xa3d4ba35220a95bf, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc8}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000001c0)=0x0) ioctl$TUNSETOWNER(r5, 0x400454cc, r6) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="780000000706010100000000000000000a00000005000400020000000900020073797a32000000002c00078008000640000000da08001340000007ff0800134000001000050015000c00000008001240000000050500050002000000050001"], 0x78}, 0x1, 0x0, 0x0, 0x80820}, 0x80) 15.110233074s ago: executing program 0 (id=1186): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') 15.109761221s ago: executing program 0 (id=1187): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) sendto$inet(r2, &(0x7f0000000200)="3220c5b519f14f98a4b49526b3fbcfe058d831878f275ab463ae9f512538d84e8bf9ec8ed5383176258ad5f3b0d9028aacb29caf99e2f5b369f271d8007bb84e2fa8c0f05602f73afc64ad81613e9cc0d82e5e52524fe8a3afd40d39ead43d49ab4c6cc6c823f445056fd352c901c3fe4461cdd8a4f899c743d2664e50072d78104891bb1ed569a71aee70b5950b00a9e565275488ff593edd611898089eedba7a6c8bf92ba763d3197c9bdb94d46af6c7337ab50000000000000000", 0xffffffffffffff1d, 0x800, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYRES16=r5, @ANYRES16=r4, @ANYBLOB="4100000000000300000012a0c6837f382de9", @ANYRES32=r5, @ANYBLOB="0a000600080211000000000054008100050002000600000005000100e0000000050001000d00000005000200"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018f4000000000000200000002000000005000000000000000100000d00000400000000000000000000000200005f3000"/61], 0x0, 0x3d, 0x0, 0x1}, 0x28) r7 = socket$inet(0x2, 0x801, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6(0xa, 0x1, 0x6) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x70bd29, 0x0, {0x0, 0x7, 0x0, 0x2d, {0x4e23, 0x0, [0x0, 0x0, 0x81], [0x1, 0xfffffffd, 0x10000], 0x0, [0x0, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x3dd66fec0ddfba6f}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000000380)={r6, &(0x7f0000000100)='batadv_slave_1\x00', 0x34000, &(0x7f0000000180)={@align=0x8, {0x1ff, 0x9, 0x8, 0x6}}, 0x47, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000340)=0xcc24}) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@bridge_getneigh={0x18c, 0x1e, 0x830, 0x70bd25, 0xfff, {0x7, 0x0, 0x0, r9, 0x20, 0x1000}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_MTU={0x8, 0x4, 0x3b}, @IFLA_MAP={0x24, 0xe, {0x5, 0x5, 0x7f, 0x2, 0x1, 0x3}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0xfd}, @IFLA_VF_PORTS={0x124, 0x18, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a311be8976845f762a5b84d6f93d8139"}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "32753f317d47c911889d4659d7603696"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "fa88436d157f71dbff520843b33e47cf"}, @IFLA_PORT_PROFILE={0x8, 0x2, 'nr0\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_VF={0x8, 0x1, 0x401}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xf75d}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_PROFILE={0x7, 0x2, 'lo\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "79705c196858c8bdb235425bc12c7d5d"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "04ac0adfe0a3d5bc4fdd07d7b58bb693"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "70173767df7f875ab9d162f042b7e841"}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10080) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) 2.157978429s ago: executing program 32 (id=1171): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="09002dd27000fcdbdf25030000000c00040000020000000000000c00030000020000000000000c000500040000000000000008000100000000000c000800248200000000000061f545f69109c5b1375cc3baf712c3957ee11da7ff31495f2dbe17c691"], 0x4c}, 0x1, 0x0, 0x0, 0x24004420}, 0x24000004) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x3) (async) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000080)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044004}, 0x4000801) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000940)={{r3, &(0x7f0000000280)='syz0\x00', 0x488000, &(0x7f00000002c0)={@_ha_fsid={[0x0, 0x1]}, {0x3, 0x2, 0x3cd, 0x4}}, 0x9, &(0x7f0000000300), &(0x7f0000000340)=0x9}, 0x5, &(0x7f0000000800)=[{0x2, 0x1, &(0x7f0000000380)='nbd\x00', &(0x7f00000003c0)="2bb835583dfc8d47faeb4f63f222d3f6b39513e43aaa27de707b407c4a209cb3", 0x20}, {0x1, 0x7, &(0x7f0000000400)='queue\x00', &(0x7f0000000440)="61dd4d3d519ec8dd1ac0d3fc6070eb0d25283c96d1195aa013f8bde6f2b0104fa57a34d030e3639511c54c4b", 0x2c, 0x28}, {0x3, 0xa8, &(0x7f0000000480)='+{\x00', &(0x7f00000004c0)="1b03fee6f9af3564e08530dd6f66c63f982d801e9364657a8895b4104df0987317e76f3779d0d928cb4b6e534a6b677d8d040a734dd11d968fb87f8ee2bb268301b01dd6c84381d12d2bbea0ee8d75149f8f0f8e4a824ad231b8b016dc1f678047fffa45be4a0861aca4e9c08862be3a9dc94d2c589b989308d8a16165ff32b31a088998a1878dafb2b7acb7247fc35a7154060381e96154f91b4d651fc81d28516fc590c5eaa38844611d1597e98e1d1bf70666b11dd24e2838d9779caa387b37ce08335192f2f38e", 0xc9, 0x2a}, {0x3, 0x5, &(0x7f00000005c0)='nbd\x00', &(0x7f0000000600)="5e5da061e1c792c2a9b0190650620a55e79fb0dac339d2c4a988d33dab603f6bd637ce6634fa52e10cd02189e3cea13464823170e7fb0cdcf7de3eae9d96966861360724c493733bd77cecbdcd497014a603ccac7a0c9736ea81809acdc0e90538e132314c86a144f216cd033bb35c4d5b09dc743d962a32252184e8e4cc84c83541c46b8c72f0bcda9fd85c1afef7066149a4ba380399bf381663f1f1294fac750c23", 0xa3, 0x2a}, {0x3, 0xe, &(0x7f0000000700)='osf\x00', &(0x7f0000000740)="8423533eac88c11bfb1df52d3aa30eed414aa3c30ab2afda7ff30ee99fae968dc4efb800d6e4e60d1be4754d4a", 0x2d, 0x12}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="c71825ef58d10fd5000005000000180001801400020073797a5f74756e000000000000000000500003804c000380"], 0x7c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a80)={'gre0\x00', &(0x7f0000000a00)={'gre0\x00', 0x0, 0x700, 0x700, 0x2c1e3a81, 0x100, {{0xb, 0x4, 0x3, 0x3, 0x2c, 0x66, 0x0, 0x3, 0x4, 0x0, @loopback, @multicast2, {[@timestamp_prespec={0x44, 0xc, 0x17, 0x3, 0xe, [{@remote, 0xfffffff9}]}, @end, @rr={0x7, 0x7, 0x20, [@empty]}, @end, @noop]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x60, r6, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd886227efdc8ac23}]}]}, 0x60}}, 0x4044084) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffbf00f}, {0x3, 0xc, 0xf2, 0x8000}, {0x0, 0xe, 0x4, 0xa472ab7}, {0x3, 0x1, 0x5}, {0x7, 0x7, 0xb8, 0x5}]}, 0x10) 2.103294539s ago: executing program 33 (id=1176): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffff7ff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x80820}, 0x400d0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf251f00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x200040d4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$kcm(0x2, 0x3, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x30, r9, 0x1, 0x70bd2c, 0xffffffff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0xa}]}]}, 0x30}}, 0x40) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'hsr0\x00'}) r11 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x840) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r13 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r13, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r13, 0x541b, &(0x7f0000000040)) recvmmsg(r11, &(0x7f0000005cc0)=[{{0x0, 0x55, &(0x7f0000006000), 0x1}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x0, 0x0) 639.354116ms ago: executing program 34 (id=1179): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8040) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f00000003c0)=ANY=[], 0x52) close(r2) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000070000000000000013d380009111bb000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 153.756518ms ago: executing program 35 (id=1187): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) sendto$inet(r2, &(0x7f0000000200)="3220c5b519f14f98a4b49526b3fbcfe058d831878f275ab463ae9f512538d84e8bf9ec8ed5383176258ad5f3b0d9028aacb29caf99e2f5b369f271d8007bb84e2fa8c0f05602f73afc64ad81613e9cc0d82e5e52524fe8a3afd40d39ead43d49ab4c6cc6c823f445056fd352c901c3fe4461cdd8a4f899c743d2664e50072d78104891bb1ed569a71aee70b5950b00a9e565275488ff593edd611898089eedba7a6c8bf92ba763d3197c9bdb94d46af6c7337ab50000000000000000", 0xffffffffffffff1d, 0x800, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYRES16=r5, @ANYRES16=r4, @ANYBLOB="4100000000000300000012a0c6837f382de9", @ANYRES32=r5, @ANYBLOB="0a000600080211000000000054008100050002000600000005000100e0000000050001000d00000005000200"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018f4000000000000200000002000000005000000000000000100000d00000400000000000000000000000200005f3000"/61], 0x0, 0x3d, 0x0, 0x1}, 0x28) r7 = socket$inet(0x2, 0x801, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6(0xa, 0x1, 0x6) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x70bd29, 0x0, {0x0, 0x7, 0x0, 0x2d, {0x4e23, 0x0, [0x0, 0x0, 0x81], [0x1, 0xfffffffd, 0x10000], 0x0, [0x0, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x3dd66fec0ddfba6f}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000000380)={r6, &(0x7f0000000100)='batadv_slave_1\x00', 0x34000, &(0x7f0000000180)={@align=0x8, {0x1ff, 0x9, 0x8, 0x6}}, 0x47, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000340)=0xcc24}) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@bridge_getneigh={0x18c, 0x1e, 0x830, 0x70bd25, 0xfff, {0x7, 0x0, 0x0, r9, 0x20, 0x1000}, [@IFLA_IFALIAS={0x14, 0x14, 'nr0\x00'}, @IFLA_MTU={0x8, 0x4, 0x3b}, @IFLA_MAP={0x24, 0xe, {0x5, 0x5, 0x7f, 0x2, 0x1, 0x3}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0xfd}, @IFLA_VF_PORTS={0x124, 0x18, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "a311be8976845f762a5b84d6f93d8139"}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "32753f317d47c911889d4659d7603696"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "fa88436d157f71dbff520843b33e47cf"}, @IFLA_PORT_PROFILE={0x8, 0x2, 'nr0\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_VF={0x8, 0x1, 0x401}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xf75d}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_PROFILE={0x7, 0x2, 'lo\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "79705c196858c8bdb235425bc12c7d5d"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "04ac0adfe0a3d5bc4fdd07d7b58bb693"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "70173767df7f875ab9d162f042b7e841"}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf}]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10080) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) 0s ago: executing program 36 (id=1184): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2900f6da9dfea1547d9f4d42a196e85bd550418e63e192c99a4d7d8b092f5034410e38b66e93d48311ba6969", @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf25010000000800030007000000"], 0x1c}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000080)={r9, @in={{0x2, 0x4e20, @empty}}, 0x1, 0x8001}, &(0x7f0000000140)=0x90) r10 = socket(0x10, 0x803, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) kernel console output (not intermixed with test programs): over after parsing attributes in process `syz.1.512'. [ 170.017223][ T4965] block nbd0: Possible stuck request ffff888027970000: control (read@0,4096B). Runtime 60 seconds [ 170.204527][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.213514][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.554696][ T8071] syzkaller0: entered promiscuous mode [ 170.574988][ T8071] syzkaller0: entered allmulticast mode [ 171.012968][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.519'. [ 171.068941][ T8088] netlink: 5 bytes leftover after parsing attributes in process `syz.4.519'. [ 171.099595][ T8098] netlink: 'syz.0.520': attribute type 13 has an invalid length. [ 171.257440][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.266013][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.297484][ T8090] bridge0: port 3(syz_tun) entered disabled state [ 171.339499][ T8090] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.347394][ T8090] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.361056][ T8111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.523'. [ 171.571049][ T8090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.583925][ T8090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.723817][ T8099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.733647][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.883989][ T8090] bond2: left promiscuous mode [ 171.896623][ T8090] team_slave_1: left promiscuous mode [ 171.908219][ T8090] bond2: left allmulticast mode [ 171.916994][ T8090] team_slave_1: left allmulticast mode [ 171.929818][ T8090] macsec1: left promiscuous mode [ 172.060552][ T8137] netlink: 44 bytes leftover after parsing attributes in process `syz.1.526'. [ 172.131563][ T35] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.159177][ T35] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.192973][ T35] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.242086][ T35] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.294596][ T8122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.303087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.314962][ T8139] netlink: 'syz.4.527': attribute type 4 has an invalid length. [ 172.379534][ T8144] netlink: 'syz.0.529': attribute type 1 has an invalid length. [ 172.400180][ T8144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.529'. [ 173.070046][ T8159] netlink: 36 bytes leftover after parsing attributes in process `syz.4.533'. [ 173.128152][ T8164] pim6reg1: entered promiscuous mode [ 173.143754][ T8164] pim6reg1: entered allmulticast mode [ 173.318436][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.327067][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.465521][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.537'. [ 173.798990][ T7674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.807449][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.295542][ T8204] netlink: 204 bytes leftover after parsing attributes in process `syz.2.545'. [ 175.334402][ T8204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.545'. [ 175.372290][ T8205] netlink: 232 bytes leftover after parsing attributes in process `syz.2.545'. [ 175.609893][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.546'. [ 175.660787][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.546'. [ 175.710502][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.546'. [ 175.757976][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.546'. [ 175.801171][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.546'. [ 175.868182][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.546'. [ 175.924189][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.546'. [ 176.074456][ T8228] netlink: 'syz.2.553': attribute type 2 has an invalid length. [ 176.098645][ T8220] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 176.151116][ T8220] bond3 (unregistering): Released all slaves [ 176.436603][ T8134] net_ratelimit: 4 callbacks suppressed [ 176.436623][ T8134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.450690][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.760185][ T8244] netlink: 'syz.3.557': attribute type 83 has an invalid length. [ 176.838894][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.848859][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.164876][ T8249] IPv6: NLM_F_CREATE should be specified when creating new route [ 177.253333][ T8249] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 177.263853][ T8249] IPv6: NLM_F_CREATE should be set when creating new route [ 177.435410][ T8246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.445515][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.486605][ T5838] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.495026][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.527681][ T8134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.536151][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.744343][ T8274] tc_dump_action: action bad kind [ 178.952783][ T8284] netlink: 'syz.3.570': attribute type 7 has an invalid length. [ 179.880315][ T8306] xt_hashlimit: size too large, truncated to 1048576 [ 179.940092][ T8307] xt_hashlimit: size too large, truncated to 1048576 [ 181.172531][ T8335] netlink: 'syz.3.583': attribute type 30 has an invalid length. [ 181.639210][ T8134] net_ratelimit: 8 callbacks suppressed [ 181.639231][ T8134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.653269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.553890][ T8369] syzkaller0: entered promiscuous mode [ 182.573537][ T8369] syzkaller0: entered allmulticast mode [ 182.593977][ T8370] __nla_validate_parse: 30 callbacks suppressed [ 182.593998][ T8370] netlink: 36 bytes leftover after parsing attributes in process `syz.4.592'. [ 182.613204][ T5772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.623630][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.658774][ T8369] TC_ACT_REPEAT abuse ? [ 182.677155][ T8134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.685508][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.790507][ T8370] netlink: 36 bytes leftover after parsing attributes in process `syz.4.592'. [ 182.826517][ T8370] netlink: 36 bytes leftover after parsing attributes in process `syz.4.592'. [ 182.863644][ T8370] netlink: 36 bytes leftover after parsing attributes in process `syz.4.592'. [ 182.909457][ T8370] netlink: 36 bytes leftover after parsing attributes in process `syz.4.592'. [ 182.977216][ T8370] netlink: 36 bytes leftover after parsing attributes in process `syz.4.592'. [ 182.987712][ T8370] netlink: 36 bytes leftover after parsing attributes in process `syz.4.592'. [ 183.010224][ T8360] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 183.030159][ T8370] netlink: 36 bytes leftover after parsing attributes in process `syz.4.592'. [ 183.081983][ T8370] netlink: 36 bytes leftover after parsing attributes in process `syz.4.592'. [ 183.126929][ T8370] netlink: 36 bytes leftover after parsing attributes in process `syz.4.592'. [ 183.403771][ T8370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.417164][ T8370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.704514][ T8391] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 183.798901][ T8127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.807428][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.222948][ T143] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.249537][ T143] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.284283][ T143] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.348073][ T143] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.839352][ T8430] syzkaller0: entered promiscuous mode [ 185.859228][ T8430] syzkaller0: entered allmulticast mode [ 186.640779][ T29] audit: type=1800 audit(1780741849.320:2): pid=8426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.606" name="memory.events" dev="tmpfs" ino=509 res=0 errno=0 [ 186.916351][ T8125] net_ratelimit: 6 callbacks suppressed [ 186.916371][ T8125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.930442][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.048726][ T8469] netlink: 'syz.4.617': attribute type 13 has an invalid length. [ 187.092708][ T8469] netlink: 'syz.4.617': attribute type 17 has an invalid length. [ 187.550243][ T8469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.558771][ T8469] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.580795][ T8469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.629757][ T8469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.641063][ T8469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.662356][ T8469] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.674189][ T8469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.693888][ T8469] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 187.959255][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.967763][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.163172][ T8486] __nla_validate_parse: 153 callbacks suppressed [ 188.163194][ T8486] netlink: 56 bytes leftover after parsing attributes in process `syz.3.623'. [ 188.359383][ T8389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.369288][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.392473][ T8497] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚Y‡°”õËí [ 188.392473][ T8497] 3ìUH†5rºBnœæ [ 188.733345][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.630'. [ 189.049249][ T8125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.057680][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.421298][ T8528] batadv_slave_0: entered promiscuous mode [ 189.468558][ T8532] netlink: 'syz.3.636': attribute type 1 has an invalid length. [ 189.489401][ T8532] netlink: 96 bytes leftover after parsing attributes in process `syz.3.636'. [ 189.504207][ T8527] batadv_slave_0: left promiscuous mode [ 189.510684][ T8532] netlink: 'syz.3.636': attribute type 1 has an invalid length. [ 189.525120][ T8532] netlink: 638 bytes leftover after parsing attributes in process `syz.3.636'. [ 189.549921][ T8532] netlink: 1 bytes leftover after parsing attributes in process `syz.3.636'. [ 189.620307][ T8532] netlink: 48 bytes leftover after parsing attributes in process `syz.3.636'. [ 190.125708][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.603149][ T29] audit: type=1804 audit(1780741853.280:3): pid=8562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.645" name="/newroot/143/memory.events" dev="tmpfs" ino=750 res=1 errno=0 [ 190.666107][ T29] audit: type=1800 audit(1780741853.280:4): pid=8562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.645" name="memory.events" dev="tmpfs" ino=750 res=0 errno=0 [ 190.720163][ T29] audit: type=1804 audit(1780741853.390:5): pid=8567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.645" name="/newroot/143/memory.events" dev="tmpfs" ino=750 res=1 errno=0 [ 191.042155][ T8574] netlink: 16170 bytes leftover after parsing attributes in process `syz.1.648'. [ 191.076397][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.227437][ T8588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.651'. [ 191.902708][ T8612] netlink: 92 bytes leftover after parsing attributes in process `syz.0.654'. [ 191.939524][ T8612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.654'. [ 192.199003][ T8622] netlink: 'syz.3.657': attribute type 32 has an invalid length. [ 192.200240][ T5820] net_ratelimit: 5 callbacks suppressed [ 192.200283][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.221072][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.225332][ T8658] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 193.260474][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.268984][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.763230][ T8684] netlink: 'syz.2.668': attribute type 4 has an invalid length. [ 193.833740][ T8684] netlink: 224 bytes leftover after parsing attributes in process `syz.2.668'. [ 194.118173][ T8103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.128009][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.280228][ T8125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.288667][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.297731][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.351106][ T8687] pim6reg: entered allmulticast mode [ 194.838410][ T8720] netlink: 64 bytes leftover after parsing attributes in process `syz.4.674'. [ 195.047373][ T8725] netlink: 144 bytes leftover after parsing attributes in process `syz.1.675'. [ 195.078187][ T8728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.676'. [ 195.098710][ T8727] netlink: 144 bytes leftover after parsing attributes in process `syz.1.675'. [ 195.147508][ T8728] netlink: 'syz.2.676': attribute type 3 has an invalid length. [ 195.198306][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'. [ 195.222573][ T8731] netlink: 'syz.0.677': attribute type 4 has an invalid length. [ 195.275823][ T8728] netlink: 'syz.2.676': attribute type 16 has an invalid length. [ 195.298579][ T8728] netlink: 'syz.2.676': attribute type 17 has an invalid length. [ 195.316214][ T8125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.324599][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.523769][ T8742] netlink: 'syz.4.679': attribute type 1 has an invalid length. [ 195.551425][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.679'. [ 195.610488][ T8742] netlink: 60 bytes leftover after parsing attributes in process `syz.4.679'. [ 195.639852][ T8742] netlink: 35 bytes leftover after parsing attributes in process `syz.4.679'. [ 195.651733][ T8728] wg2: left allmulticast mode [ 195.806882][ T8752] netlink: 'syz.3.683': attribute type 4 has an invalid length. [ 195.870731][ T8752] netlink: 'syz.3.683': attribute type 4 has an invalid length. [ 196.030831][ T8761] netlink: 76 bytes leftover after parsing attributes in process `syz.4.684'. [ 197.236801][ T50] Bluetooth: hci3: command tx timeout [ 197.397009][ T5764] net_ratelimit: 13 callbacks suppressed [ 197.397029][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.411227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.425202][ T8802] xt_NFQUEUE: number of total queues is 0 [ 197.467103][ T8802] netlink: 'syz.4.695': attribute type 49 has an invalid length. [ 197.845524][ T8815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.854472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.951194][ T8815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.991274][ T8820] netlink: 'syz.3.700': attribute type 18 has an invalid length. [ 198.442951][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.451466][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.077402][ T8845] FAULT_INJECTION: forcing a failure. [ 199.077402][ T8845] name failslab, interval 1, probability 0, space 0, times 1 [ 199.141815][ T8845] CPU: 0 UID: 0 PID: 8845 Comm: syz.2.702 Not tainted syzkaller #0 PREEMPT(full) [ 199.141846][ T8845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 199.141867][ T8845] Call Trace: [ 199.141880][ T8845] [ 199.141889][ T8845] dump_stack_lvl+0xe8/0x150 [ 199.141928][ T8845] should_fail_ex+0x412/0x560 [ 199.141957][ T8845] should_failslab+0xa8/0x100 [ 199.141981][ T8845] __kmalloc_noprof+0xe8/0x760 [ 199.142010][ T8845] ? check_path+0x21/0x40 [ 199.142036][ T8845] ? check_noncircular+0xda/0x150 [ 199.142061][ T8845] ? sock_kmalloc+0xd6/0x160 [ 199.142093][ T8845] sock_kmalloc+0xd6/0x160 [ 199.142122][ T8845] ____sys_sendmsg+0x1c2/0x9f0 [ 199.142158][ T8845] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.142193][ T8845] ? import_iovec+0x73/0xa0 [ 199.142223][ T8845] ___sys_sendmsg+0x2a5/0x360 [ 199.142247][ T8845] ? __lock_acquire+0x6b5/0x2cf0 [ 199.142274][ T8845] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.142305][ T8845] ? kstrtouint+0x6e/0xe0 [ 199.142364][ T8845] ? __fget_files+0x2a/0x420 [ 199.142391][ T8845] ? __fget_files+0x3a0/0x420 [ 199.142428][ T8845] __sys_sendmmsg+0x27c/0x4e0 [ 199.142459][ T8845] ? __pfx___sys_sendmmsg+0x10/0x10 [ 199.142482][ T8845] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 199.142547][ T8845] ? ksys_write+0x242/0x270 [ 199.142581][ T8845] ? __pfx_ksys_write+0x10/0x10 [ 199.142620][ T8845] __x64_sys_sendmmsg+0xa0/0xc0 [ 199.142646][ T8845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.142668][ T8845] do_syscall_64+0x174/0x580 [ 199.142701][ T8845] ? clear_bhb_loop+0x40/0x90 [ 199.142727][ T8845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.142747][ T8845] RIP: 0033:0x7f4f8df9ce59 [ 199.142779][ T8845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.142796][ T8845] RSP: 002b:00007f4f8ee40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 199.142822][ T8845] RAX: ffffffffffffffda RBX: 00007f4f8e215fa0 RCX: 00007f4f8df9ce59 [ 199.142837][ T8845] RDX: 0000000000000001 RSI: 0000200000002880 RDI: 0000000000000003 [ 199.142850][ T8845] RBP: 00007f4f8ee40090 R08: 0000000000000000 R09: 0000000000000000 [ 199.142862][ T8845] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 199.142874][ T8845] R13: 00007f4f8e216038 R14: 00007f4f8e215fa0 R15: 00007ffd917bcfd8 [ 199.142908][ T8845] [ 199.553798][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.562198][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.632573][ T8388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.813260][ T8864] xt_recent: Unsupported userspace flags (000000b1) [ 199.830642][ T8870] netlink: 'syz.1.709': attribute type 3 has an invalid length. [ 199.861875][ T8867] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.931945][ T8868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.081811][ T4965] block nbd0: Possible stuck request ffff888027970000: control (read@0,4096B). Runtime 90 seconds [ 200.220390][ T8879] validate_nla: 1 callbacks suppressed [ 200.220411][ T8879] netlink: 'syz.4.713': attribute type 1 has an invalid length. [ 200.363819][ T8883] __nla_validate_parse: 3 callbacks suppressed [ 200.363833][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.714'. [ 200.857343][ T8887] netlink: 292 bytes leftover after parsing attributes in process `syz.3.715'. [ 201.138164][ T8897] tipc: Started in network mode [ 201.143101][ T8897] tipc: Node identity 4, cluster identity 4711 [ 201.149295][ T8897] tipc: Node number set to 4 [ 201.444735][ T8906] tipc: Enabled bearer , priority 0 [ 201.452897][ T8906] syzkaller0: entered promiscuous mode [ 201.458444][ T8906] syzkaller0: entered allmulticast mode [ 201.530486][ T8907] tipc: Resetting bearer [ 201.671975][ T8905] tipc: Resetting bearer [ 201.722615][ T8905] tipc: Disabling bearer [ 202.073100][ T8925] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 202.327749][ T8933] netlink: 80 bytes leftover after parsing attributes in process `syz.1.732'. [ 202.368681][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.735'. [ 202.445481][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'. [ 202.602363][ T8956] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 202.621602][ T8958] net_ratelimit: 8 callbacks suppressed [ 202.621623][ T8958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.681228][ T8952] veth0: entered promiscuous mode [ 202.709154][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.717675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.729043][ T8936] veth0: left promiscuous mode [ 202.772551][ T8958] netlink: 'syz.1.739': attribute type 4 has an invalid length. [ 202.832262][ T8958] xt_hashlimit: max too large, truncated to 1048576 [ 202.882331][ T8958] xt_ecn: cannot match TCP bits for non-tcp packets [ 202.954983][ T8972] netlink: 'syz.2.742': attribute type 1 has an invalid length. [ 202.991093][ T8974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.741'. [ 203.007377][ T8103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.081680][ T8966] netlink: 208 bytes leftover after parsing attributes in process `syz.0.741'. [ 203.094918][ T8972] bond4: entered promiscuous mode [ 203.100151][ T8966] netlink: 56 bytes leftover after parsing attributes in process `syz.0.741'. [ 203.109853][ T8972] 8021q: adding VLAN 0 to HW filter on device bond4 [ 203.339108][ T8996] netlink: 204 bytes leftover after parsing attributes in process `syz.1.748'. [ 203.431515][ T8996] netlink: 204 bytes leftover after parsing attributes in process `syz.1.748'. [ 203.527269][ T9004] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.534585][ T9004] IPv6: NLM_F_CREATE should be set when creating new route [ 203.627497][ T9004] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.727039][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.735439][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.335432][ T9035] tipc: Started in network mode [ 204.363551][ T9035] tipc: Node identity facfaa7ef523, cluster identity 4711 [ 204.403851][ T9035] tipc: Enabled bearer , priority 0 [ 204.436051][ T9043] syzkaller0: entered promiscuous mode [ 204.464266][ T50] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 204.475305][ T9043] syzkaller0: entered allmulticast mode [ 204.544828][ T9035] tipc: Resetting bearer [ 204.558622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.568500][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.576679][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.584772][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.624153][ T9045] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 204.666783][ T29] audit: type=1804 audit(1780741867.320:6): pid=9048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.767" name="/newroot/149/cgroup.controllers" dev="tmpfs" ino=780 res=1 errno=0 [ 204.735505][ T29] audit: type=1800 audit(1780741867.320:7): pid=9048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.767" name="cgroup.controllers" dev="tmpfs" ino=780 res=0 errno=0 [ 205.041177][ T9065] x_tables: duplicate underflow at hook 2 [ 205.047150][ T9065] x_tables: duplicate underflow at hook 2 [ 205.053686][ T9034] tipc: Resetting bearer [ 205.103632][ T9034] tipc: Disabling bearer [ 205.155654][ T9071] xt_HMARK: spi-set and port-set can't be combined [ 205.515540][ T9087] netlink: 'syz.1.778': attribute type 5 has an invalid length. [ 205.723372][ T9099] __nla_validate_parse: 1 callbacks suppressed [ 205.723393][ T9099] netlink: 20 bytes leftover after parsing attributes in process `syz.3.779'. [ 205.948541][ T9102] can: request_module (can-proto-4) failed. [ 206.104893][ T9114] netlink: 'syz.1.788': attribute type 1 has an invalid length. [ 206.163288][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.785'. [ 206.172143][ T9118] netlink: 'syz.2.785': attribute type 30 has an invalid length. [ 206.262396][ T9114] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.277215][ T9117] ip6gre2: entered promiscuous mode [ 206.282688][ T9117] ip6gre2: entered allmulticast mode [ 206.338914][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.785'. [ 206.347772][ T9131] netlink: 'syz.2.785': attribute type 30 has an invalid length. [ 206.444527][ T9137] netlink: 'syz.3.793': attribute type 6 has an invalid length. [ 206.531305][ T9133] bond2: (slave geneve3): making interface the new active one [ 206.542514][ T9133] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 206.563664][ T35] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.572764][ T35] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.584681][ T35] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.597999][ T9128] netlink: 'syz.0.791': attribute type 2 has an invalid length. [ 206.627344][ T9128] syzkaller0: entered promiscuous mode [ 206.633041][ T9128] syzkaller0: entered allmulticast mode [ 206.641776][ T9128] netlink: 632 bytes leftover after parsing attributes in process `syz.0.791'. [ 206.666743][ T35] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 206.674462][ T35] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 206.721686][ T8388] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 206.948542][ T8389] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 207.618929][ T8389] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 207.690935][ T9150] netlink: 24 bytes leftover after parsing attributes in process `syz.2.797'. [ 207.701261][ T9150] netlink: 'syz.2.797': attribute type 1 has an invalid length. [ 207.709442][ T9150] netlink: 72 bytes leftover after parsing attributes in process `syz.2.797'. [ 207.719832][ T9150] netlink: 252 bytes leftover after parsing attributes in process `syz.2.797'. [ 207.728827][ T9150] netlink: 'syz.2.797': attribute type 1 has an invalid length. [ 207.736492][ T9150] netlink: 72 bytes leftover after parsing attributes in process `syz.2.797'. [ 207.746706][ T9151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.797'. [ 207.755931][ T9151] netlink: 'syz.2.797': attribute type 1 has an invalid length. [ 207.763699][ T9151] netlink: 72 bytes leftover after parsing attributes in process `syz.2.797'. [ 207.773152][ T8389] net_ratelimit: 15 callbacks suppressed [ 207.773167][ T8389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.779511][ T9151] netlink: 'syz.2.797': attribute type 1 has an invalid length. [ 207.990895][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.999325][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.023340][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.031928][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.121721][ T9119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 209.328023][ T9157] bridge_slave_0: left allmulticast mode [ 209.361465][ T9157] bridge_slave_0: left promiscuous mode [ 209.409642][ T9157] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.459749][ T9157] bridge_slave_1: left promiscuous mode [ 209.489027][ T9157] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.562535][ T9157] bond0: (slave bond_slave_0): Releasing backup interface [ 209.633733][ T9157] bond0: (slave bond_slave_1): Releasing backup interface [ 209.721414][ T9157] team0: Port device team_slave_0 removed [ 209.767782][ T9157] team0: Port device team_slave_1 removed [ 209.784349][ T9157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.809559][ T9157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.839779][ T9157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.847233][ T9157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.868136][ T9157] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 210.150242][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.158702][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.535078][ T9207] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 210.555464][ T9195] bridge0: port 3(syz_tun) entered blocking state [ 210.562067][ T9195] bridge0: port 3(syz_tun) entered forwarding state [ 210.596068][ T9195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.605029][ T9195] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.619263][ T9195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.677902][ T9195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.687800][ T9195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.705312][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 210.720303][ T9195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 210.730676][ T9195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.745144][ T9195] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 210.769143][ T7681] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.776339][ T7681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.785735][ T7681] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.792937][ T7681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.887155][ T9212] __nla_validate_parse: 7 callbacks suppressed [ 210.887178][ T9212] netlink: 180 bytes leftover after parsing attributes in process `syz.2.815'. [ 210.945965][ T8103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.180150][ T9221] : entered promiscuous mode [ 211.192879][ T9221] netlink: 52 bytes leftover after parsing attributes in process `syz.2.818'. [ 211.204995][ T9223] validate_nla: 2 callbacks suppressed [ 211.205017][ T9223] netlink: 'syz.4.819': attribute type 9 has an invalid length. [ 211.233328][ T9221] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.242157][ T9221] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.256769][ T9223] netlink: 'syz.4.819': attribute type 6 has an invalid length. [ 211.269294][ T9223] netlink: 'syz.4.819': attribute type 7 has an invalid length. [ 211.283833][ T9223] netlink: 'syz.4.819': attribute type 8 has an invalid length. [ 211.720701][ T4949] Bluetooth: hci1: command 0x0406 tx timeout [ 211.784480][ T9246] FAULT_INJECTION: forcing a failure. [ 211.784480][ T9246] name failslab, interval 1, probability 0, space 0, times 0 [ 211.801489][ T9246] CPU: 0 UID: 0 PID: 9246 Comm: syz.4.826 Not tainted syzkaller #0 PREEMPT(full) [ 211.801517][ T9246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 211.801529][ T9246] Call Trace: [ 211.801537][ T9246] [ 211.801545][ T9246] dump_stack_lvl+0xe8/0x150 [ 211.801574][ T9246] should_fail_ex+0x412/0x560 [ 211.801602][ T9246] should_failslab+0xa8/0x100 [ 211.801626][ T9246] __kmalloc_noprof+0xe8/0x760 [ 211.801658][ T9246] ? sock_kmalloc+0xd6/0x160 [ 211.801691][ T9246] sock_kmalloc+0xd6/0x160 [ 211.801720][ T9246] ____sys_sendmsg+0x1c2/0x9f0 [ 211.801755][ T9246] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.801789][ T9246] ? import_iovec+0x73/0xa0 [ 211.801831][ T9246] ___sys_sendmsg+0x2a5/0x360 [ 211.801855][ T9246] ? __lock_acquire+0x6b5/0x2cf0 [ 211.801883][ T9246] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.801913][ T9246] ? kstrtouint+0x6e/0xe0 [ 211.801974][ T9246] ? __fget_files+0x2a/0x420 [ 211.802000][ T9246] ? __fget_files+0x3a0/0x420 [ 211.802037][ T9246] __sys_sendmmsg+0x27c/0x4e0 [ 211.802069][ T9246] ? __pfx___sys_sendmmsg+0x10/0x10 [ 211.802091][ T9246] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 211.802143][ T9246] ? ksys_write+0x242/0x270 [ 211.802178][ T9246] ? __pfx_ksys_write+0x10/0x10 [ 211.802217][ T9246] __x64_sys_sendmmsg+0xa0/0xc0 [ 211.802243][ T9246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.802265][ T9246] do_syscall_64+0x174/0x580 [ 211.802288][ T9246] ? trace_irq_disable+0x3b/0x140 [ 211.802320][ T9246] ? clear_bhb_loop+0x40/0x90 [ 211.802348][ T9246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.802369][ T9246] RIP: 0033:0x7fcf77f9ce59 [ 211.802389][ T9246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.802407][ T9246] RSP: 002b:00007fcf78e55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 211.802430][ T9246] RAX: ffffffffffffffda RBX: 00007fcf78215fa0 RCX: 00007fcf77f9ce59 [ 211.802467][ T9246] RDX: 0000000000000001 RSI: 0000200000002880 RDI: 0000000000000003 [ 211.802481][ T9246] RBP: 00007fcf78e55090 R08: 0000000000000000 R09: 0000000000000000 [ 211.802494][ T9246] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 211.802506][ T9246] R13: 00007fcf78216038 R14: 00007fcf78215fa0 R15: 00007ffcee7c3628 [ 211.802539][ T9246] [ 211.978627][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 212.055119][ T4949] Bluetooth: hci3: command 0x0406 tx timeout [ 212.086999][ T9248] netlink: 28 bytes leftover after parsing attributes in process `syz.0.827'. [ 212.575547][ T9272] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 212.586092][ T9272] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 212.770202][ T9277] netlink: 'syz.2.836': attribute type 1 has an invalid length. [ 212.901913][ T9281] netlink: 76 bytes leftover after parsing attributes in process `syz.2.838'. [ 212.956790][ T9280] net_ratelimit: 7 callbacks suppressed [ 212.956812][ T9280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.347892][ T9291] FAULT_INJECTION: forcing a failure. [ 213.347892][ T9291] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 213.367908][ T9290] netlink: 'syz.4.839': attribute type 1 has an invalid length. [ 213.390970][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.399407][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.426400][ T9291] CPU: 0 UID: 0 PID: 9291 Comm: syz.3.840 Not tainted syzkaller #0 PREEMPT(full) [ 213.426430][ T9291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 213.426443][ T9291] Call Trace: [ 213.426451][ T9291] [ 213.426460][ T9291] dump_stack_lvl+0xe8/0x150 [ 213.426490][ T9291] should_fail_ex+0x412/0x560 [ 213.426518][ T9291] _copy_from_user+0x2d/0xb0 [ 213.426547][ T9291] ____sys_sendmsg+0x308/0x9f0 [ 213.426582][ T9291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.426618][ T9291] ? import_iovec+0x73/0xa0 [ 213.426648][ T9291] ___sys_sendmsg+0x2a5/0x360 [ 213.426672][ T9291] ? __lock_acquire+0x6b5/0x2cf0 [ 213.426700][ T9291] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.426731][ T9291] ? kstrtouint+0x6e/0xe0 [ 213.426791][ T9291] ? __fget_files+0x2a/0x420 [ 213.426817][ T9291] ? __fget_files+0x3a0/0x420 [ 213.426855][ T9291] __sys_sendmmsg+0x27c/0x4e0 [ 213.426886][ T9291] ? __pfx___sys_sendmmsg+0x10/0x10 [ 213.426909][ T9291] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 213.426963][ T9291] ? ksys_write+0x242/0x270 [ 213.426997][ T9291] ? __pfx_ksys_write+0x10/0x10 [ 213.427035][ T9291] __x64_sys_sendmmsg+0xa0/0xc0 [ 213.427061][ T9291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.427083][ T9291] do_syscall_64+0x174/0x580 [ 213.427114][ T9291] ? trace_irq_disable+0x3b/0x140 [ 213.427146][ T9291] ? clear_bhb_loop+0x40/0x90 [ 213.427173][ T9291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.427195][ T9291] RIP: 0033:0x7f0226d9ce59 [ 213.427214][ T9291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.427231][ T9291] RSP: 002b:00007f0227c2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 213.427253][ T9291] RAX: ffffffffffffffda RBX: 00007f0227015fa0 RCX: 00007f0226d9ce59 [ 213.427269][ T9291] RDX: 0000000000000001 RSI: 0000200000002880 RDI: 0000000000000003 [ 213.427282][ T9291] RBP: 00007f0227c2f090 R08: 0000000000000000 R09: 0000000000000000 [ 213.427294][ T9291] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 213.427306][ T9291] R13: 00007f0227016038 R14: 00007f0227015fa0 R15: 00007ffc05cb93c8 [ 213.427338][ T9291] [ 213.480509][ T9290] 8021q: adding VLAN 0 to HW filter on device bond3 [ 213.598593][ T9297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.842'. [ 213.852044][ T9297] tipc: Enabling of bearer rejected, failed to enable media [ 213.874033][ T9307] netlink: 164 bytes leftover after parsing attributes in process `syz.3.843'. [ 213.947767][ T9307] netlink: 36 bytes leftover after parsing attributes in process `syz.3.843'. [ 214.009167][ T8389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.246376][ T9326] netlink: 60 bytes leftover after parsing attributes in process `syz.3.846'. [ 214.377400][ T9328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.847'. [ 214.386353][ T9328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.847'. [ 214.452683][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.461119][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.551520][ T9338] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 214.960582][ T9347] FAULT_INJECTION: forcing a failure. [ 214.960582][ T9347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.984430][ T9347] CPU: 1 UID: 0 PID: 9347 Comm: syz.3.853 Not tainted syzkaller #0 PREEMPT(full) [ 214.984463][ T9347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 214.984477][ T9347] Call Trace: [ 214.984487][ T9347] [ 214.984497][ T9347] dump_stack_lvl+0xe8/0x150 [ 214.984532][ T9347] should_fail_ex+0x412/0x560 [ 214.984566][ T9347] _copy_to_user+0x31/0xb0 [ 214.984601][ T9347] simple_read_from_buffer+0xe1/0x170 [ 214.984640][ T9347] proc_fail_nth_read+0x1bb/0x230 [ 214.984677][ T9347] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 214.984715][ T9347] ? rw_verify_area+0x2a6/0x4d0 [ 214.984750][ T9347] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 214.984785][ T9347] vfs_read+0x20c/0xa70 [ 214.984828][ T9347] ? __pfx___mutex_lock+0x10/0x10 [ 214.984858][ T9347] ? __pfx_vfs_read+0x10/0x10 [ 214.984900][ T9347] ? __fget_files+0x2a/0x420 [ 214.984937][ T9347] ? __fget_files+0x3a0/0x420 [ 214.984967][ T9347] ? __fget_files+0x2a/0x420 [ 214.985009][ T9347] ksys_read+0x150/0x270 [ 214.985048][ T9347] ? __pfx_ksys_read+0x10/0x10 [ 214.985095][ T9347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.985122][ T9347] do_syscall_64+0x174/0x580 [ 214.985148][ T9347] ? trace_irq_disable+0x3b/0x140 [ 214.985185][ T9347] ? clear_bhb_loop+0x40/0x90 [ 214.985216][ T9347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.985240][ T9347] RIP: 0033:0x7f0226d5d68e [ 214.985263][ T9347] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 214.985284][ T9347] RSP: 002b:00007f0227c2efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 214.985309][ T9347] RAX: ffffffffffffffda RBX: 00007f0227c2f6c0 RCX: 00007f0226d5d68e [ 214.985327][ T9347] RDX: 000000000000000f RSI: 00007f0227c2f0a0 RDI: 0000000000000004 [ 214.985342][ T9347] RBP: 00007f0227c2f090 R08: 0000000000000000 R09: 0000000000000000 [ 214.985356][ T9347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.985370][ T9347] R13: 00007f0227016038 R14: 00007f0227015fa0 R15: 00007ffc05cb93c8 [ 214.985418][ T9347] [ 215.507286][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.515896][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.620484][ T9352] ipvlan1: entered promiscuous mode [ 215.640902][ T9352] ipvlan1: left promiscuous mode [ 215.911972][ T9373] ±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 215.956379][ T9377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.965011][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.122965][ T9378] __nla_validate_parse: 8 callbacks suppressed [ 216.122985][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.862'. [ 216.182467][ T9378] hsr_slave_0: left promiscuous mode [ 216.237437][ T9378] hsr_slave_1: left promiscuous mode [ 216.330393][ T9398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.870'. [ 216.499360][ T9409] netlink: 20 bytes leftover after parsing attributes in process `syz.4.874'. [ 216.825300][ T9417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.875'. [ 216.908274][ T9416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.875'. [ 217.899903][ T9441] netlink: 132 bytes leftover after parsing attributes in process `syz.3.883'. [ 217.997899][ T5820] net_ratelimit: 5 callbacks suppressed [ 217.997920][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.013495][ T7681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.022456][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.036446][ T9442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.883'. [ 218.047266][ T9442] netlink: 'syz.3.883': attribute type 1 has an invalid length. [ 218.142032][ T9445] sctp: [Deprecated]: syz.4.884 (pid 9445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.142032][ T9445] Use struct sctp_sack_info instead [ 218.165014][ T9442] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.237560][ T9441] netlink: 32 bytes leftover after parsing attributes in process `syz.3.883'. [ 218.390734][ T9451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.887'. [ 218.667641][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 218.727663][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.736144][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.830716][ T9463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.853481][ T9463] bond0: (slave wlan0): Opening slave failed [ 219.218490][ T9476] syzkaller1: entered promiscuous mode [ 219.235632][ T9476] syzkaller1: entered allmulticast mode [ 219.873967][ T8125] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.882679][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.190308][ T9476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.224839][ T9476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.316838][ T9476] bond1: left promiscuous mode [ 220.321684][ T9476] bond1: left allmulticast mode [ 220.326807][ T9476] bridge0: left promiscuous mode [ 220.332407][ T9476] bridge0: left allmulticast mode [ 220.338730][ T9476] bond2: left allmulticast mode [ 220.361610][ T9476] syzkaller1: left promiscuous mode [ 220.367081][ T9476] syzkaller1: left allmulticast mode [ 220.377374][ T9483] netlink: 'syz.3.894': attribute type 6 has an invalid length. [ 220.385351][ T9491] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 220.689607][ T9522] syzkaller0: entered promiscuous mode [ 220.695150][ T9522] syzkaller0: entered allmulticast mode [ 220.804970][ T9532] netlink: 116 bytes leftover after parsing attributes in process `syz.1.911'. [ 220.983648][ T8134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.992088][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.138149][ T9542] netlink: 'syz.2.914': attribute type 1 has an invalid length. [ 221.157895][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'. [ 221.175936][ T9542] netlink: 'syz.2.914': attribute type 1 has an invalid length. [ 221.215149][ T9542] syzkaller1: entered promiscuous mode [ 221.220695][ T9542] syzkaller1: entered allmulticast mode [ 221.288033][ T9548] netlink: 'syz.1.916': attribute type 10 has an invalid length. [ 221.305938][ T9548] netlink: 228 bytes leftover after parsing attributes in process `syz.1.916'. [ 222.396873][ T9601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.928'. [ 222.408464][ T9603] Cannot find del_set index 4 as target [ 222.509279][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.930'. [ 222.545059][ T9610] netlink: 'syz.1.931': attribute type 1 has an invalid length. [ 222.556308][ T9610] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 222.576317][ T9606] team0: No ports can be present during mode change [ 223.037851][ T9587] net_ratelimit: 16 callbacks suppressed [ 223.037871][ T9587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.062712][ T9587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.098076][ T8102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.161201][ T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.171594][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.181747][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.191006][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.642203][ T9663] FAULT_INJECTION: forcing a failure. [ 223.642203][ T9663] name failslab, interval 1, probability 0, space 0, times 0 [ 223.657968][ T9663] CPU: 0 UID: 0 PID: 9663 Comm: syz.3.943 Not tainted syzkaller #0 PREEMPT(full) [ 223.658020][ T9663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 223.658032][ T9663] Call Trace: [ 223.658040][ T9663] [ 223.658048][ T9663] dump_stack_lvl+0xe8/0x150 [ 223.658077][ T9663] should_fail_ex+0x412/0x560 [ 223.658115][ T9663] should_failslab+0xa8/0x100 [ 223.658139][ T9663] __kvmalloc_node_noprof+0x178/0x8a0 [ 223.658173][ T9663] ? alloc_netdev_mqs+0xa8/0x1210 [ 223.658212][ T9663] alloc_netdev_mqs+0xa8/0x1210 [ 223.658239][ T9663] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 223.658281][ T9663] rtnl_create_link+0x31f/0xd70 [ 223.658319][ T9663] rtnl_newlink_create+0x277/0xb70 [ 223.658344][ T9663] ? __pfx___nla_validate_parse+0x10/0x10 [ 223.658383][ T9663] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 223.658412][ T9663] ? __pfx___mutex_lock+0x10/0x10 [ 223.658450][ T9663] ? ns_capable+0x89/0xe0 [ 223.658477][ T9663] rtnl_newlink+0x166a/0x1bb0 [ 223.658516][ T9663] ? __pfx_rtnl_newlink+0x10/0x10 [ 223.658545][ T9663] ? __lock_acquire+0x6b5/0x2cf0 [ 223.658572][ T9663] ? __lock_acquire+0x6b5/0x2cf0 [ 223.658605][ T9663] ? unwind_next_frame+0xa6/0x2550 [ 223.658639][ T9663] ? unwind_next_frame+0xa6/0x2550 [ 223.658669][ T9663] ? is_bpf_text_address+0x26/0x2b0 [ 223.658705][ T9663] ? is_bpf_text_address+0x26/0x2b0 [ 223.658734][ T9663] ? __lock_acquire+0x6b5/0x2cf0 [ 223.658762][ T9663] ? kernel_text_address+0xa5/0xe0 [ 223.658794][ T9663] ? __kernel_text_address+0xd/0x30 [ 223.658824][ T9663] ? unwind_get_return_address+0x4d/0x90 [ 223.658851][ T9663] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 223.658884][ T9663] ? arch_stack_walk+0xfb/0x150 [ 223.658924][ T9663] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 223.658963][ T9663] ? __pfx_rtnl_newlink+0x10/0x10 [ 223.658985][ T9663] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 223.659005][ T9663] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 223.659034][ T9663] ? netlink_sendmsg+0x5d4/0xb40 [ 223.659063][ T9663] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 223.659092][ T9663] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 223.659116][ T9663] ? __lock_acquire+0x6b5/0x2cf0 [ 223.659153][ T9663] netlink_rcv_skb+0x232/0x4b0 [ 223.659180][ T9663] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 223.659205][ T9663] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 223.659245][ T9663] ? netlink_deliver_tap+0x2e/0x1b0 [ 223.659270][ T9663] ? netlink_deliver_tap+0x2e/0x1b0 [ 223.659302][ T9663] netlink_unicast+0x75c/0x8e0 [ 223.659338][ T9663] netlink_sendmsg+0x813/0xb40 [ 223.659376][ T9663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.659407][ T9663] ? aa_sock_msg_perm+0xf1/0x1b0 [ 223.659442][ T9663] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 223.659476][ T9663] ____sys_sendmsg+0x972/0x9f0 [ 223.659502][ T9663] ? __might_fault+0xaf/0x130 [ 223.659539][ T9663] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.659576][ T9663] ? import_iovec+0x73/0xa0 [ 223.659607][ T9663] ___sys_sendmsg+0x2a5/0x360 [ 223.659632][ T9663] ? __lock_acquire+0x6b5/0x2cf0 [ 223.659660][ T9663] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.659726][ T9663] ? __fget_files+0x2a/0x420 [ 223.659753][ T9663] ? __fget_files+0x3a0/0x420 [ 223.659792][ T9663] __x64_sys_sendmsg+0x1bd/0x2a0 [ 223.659821][ T9663] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 223.659858][ T9663] ? __pfx_ksys_write+0x10/0x10 [ 223.659900][ T9663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.659924][ T9663] do_syscall_64+0x174/0x580 [ 223.659947][ T9663] ? trace_irq_disable+0x3b/0x140 [ 223.659979][ T9663] ? clear_bhb_loop+0x40/0x90 [ 223.660006][ T9663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.660027][ T9663] RIP: 0033:0x7f0226d9ce59 [ 223.660047][ T9663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.660065][ T9663] RSP: 002b:00007f0227c2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.660094][ T9663] RAX: ffffffffffffffda RBX: 00007f0227015fa0 RCX: 00007f0226d9ce59 [ 223.660110][ T9663] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 223.660123][ T9663] RBP: 00007f0227c2f090 R08: 0000000000000000 R09: 0000000000000000 [ 223.660136][ T9663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.660149][ T9663] R13: 00007f0227016038 R14: 00007f0227015fa0 R15: 00007ffc05cb93c8 [ 223.660184][ T9663] [ 224.195615][ T9670] xt_hashlimit: size too large, truncated to 1048576 [ 224.216845][ T54] IPVS: starting estimator thread 0... [ 224.224287][ T54] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.233000][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.337906][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.377002][ T9674] IPVS: using max 24 ests per chain, 57600 per kthread [ 224.407777][ T9685] netlink: 'syz.0.945': attribute type 1 has an invalid length. [ 224.422674][ T9686] Unknown options in mask 6 [ 224.447547][ T9685] netlink: 224 bytes leftover after parsing attributes in process `syz.0.945'. [ 224.575284][ T9676] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.586616][ T9676] bridge_slave_0 (unregistering): left allmulticast mode [ 224.593720][ T9676] bridge_slave_0 (unregistering): left promiscuous mode [ 224.600786][ T9676] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.290268][ T9712] x_tables: duplicate underflow at hook 2 [ 225.333445][ T9710] syzkaller0: entered promiscuous mode [ 225.361294][ T9710] syzkaller0: entered allmulticast mode [ 225.396727][ T9710] tipc: Enabled bearer , priority 0 [ 225.407825][ T9710] tipc: Resetting bearer [ 225.415191][ T9710] netdevsim netdevsim0: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 225.451387][ T9709] tipc: Resetting bearer [ 225.512761][ T9721] netlink: 'syz.2.958': attribute type 4 has an invalid length. [ 225.525994][ T9721] netlink: 152 bytes leftover after parsing attributes in process `syz.2.958'. [ 225.536080][ T9709] tipc: Disabling bearer [ 225.574712][ T9721] .`: renamed from bond0 (while UP) [ 225.755680][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 225.764524][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 225.776830][ T9734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.963'. [ 225.990034][ T9737] netlink: 'syz.1.964': attribute type 1 has an invalid length. [ 226.152352][ T9737] 8021q: adding VLAN 0 to HW filter on device bond3 [ 226.699211][ T9771] netlink: 'syz.3.972': attribute type 3 has an invalid length. [ 226.911292][ T9745] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.378933][ T9788] IPv6: sit1: Disabled Multicast RS [ 227.424700][ T9782] 5nè: entered promiscuous mode [ 228.107178][ T9810] netlink: 'syz.2.981': attribute type 27 has an invalid length. [ 228.178249][ T9813] net_ratelimit: 23 callbacks suppressed [ 228.178274][ T9813] netlink: zone id is out of range [ 228.215282][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.410173][ T9820] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 228.488766][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.497322][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.507358][ T9823] netlink: 72 bytes leftover after parsing attributes in process `syz.4.985'. [ 228.516276][ T9823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.985'. [ 228.525167][ T9823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.985'. [ 228.832442][ T9833] macvtap1: entered allmulticast mode [ 228.837896][ T9833] dummy0: entered allmulticast mode [ 228.887344][ T7688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.895780][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.913899][ T9842] netlink: 32 bytes leftover after parsing attributes in process `syz.2.988'. [ 228.936674][ T9833] dummy0: left allmulticast mode [ 229.014784][ T9840] netlink: 32 bytes leftover after parsing attributes in process `syz.0.989'. [ 229.390547][ T9865] siw: device registration error -23 [ 229.453712][ T9871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.994'. [ 229.610622][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.619104][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.734941][ T9882] netlink: 'syz.3.1000': attribute type 1 has an invalid length. [ 229.808019][ T9882] bond2: entered allmulticast mode [ 229.907397][ T9879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.917540][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.135554][ T4965] block nbd0: Possible stuck request ffff888027970000: control (read@0,4096B). Runtime 120 seconds [ 230.368080][ T9910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1008'. [ 230.430895][ T9911] syzkaller0: entered promiscuous mode [ 230.437847][ T9911] syzkaller0: entered allmulticast mode [ 230.493155][ T9914] netlink: 'syz.3.1009': attribute type 18 has an invalid length. [ 230.598968][ T9919] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1010'. [ 230.876675][ T9931] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1014'. [ 230.886360][ T9930] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1014'. [ 231.565173][ T9955] netlink: 'syz.1.1019': attribute type 1 has an invalid length. [ 233.073499][ T9947] ip6tnl5: entered promiscuous mode [ 233.101293][ T9949] IPv6: sit2: Disabled Multicast RS [ 233.124488][ T9955] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 233.368974][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 233.385770][ T24] net_ratelimit: 8 callbacks suppressed [ 233.385789][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.498906][ T9974] ipvlan1: entered promiscuous mode [ 233.505662][ T9974] ipvlan1: left promiscuous mode [ 233.934461][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.942928][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.967190][ T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.975604][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.111452][ T9998] __nla_validate_parse: 5 callbacks suppressed [ 234.111474][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1028'. [ 234.216898][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1032'. [ 234.227530][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1032'. [ 234.236785][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1032'. [ 234.246770][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1032'. [ 234.324055][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1032'. [ 234.996406][ T8134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.004942][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.266702][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.787006][T10098] block nbd1: Unsupported socket: should be TCP or UNIX. [ 236.085837][T10109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1062'. [ 236.098972][ T8134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.107417][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.498883][T10103] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1057'. [ 236.545999][T10103] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1057'. [ 237.034766][T10127] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1069'. [ 237.044244][T10127] netlink: 'syz.0.1069': attribute type 9 has an invalid length. [ 237.617883][T10139] 8021q: adding VLAN 0 to HW filter on device bond3 [ 237.820714][T10161] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 238.433683][T10175] netlink: 'syz.0.1079': attribute type 1 has an invalid length. [ 239.366366][ T24] net_ratelimit: 5 callbacks suppressed [ 239.366387][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.380406][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.530419][ T8102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.754829][ T7686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.763403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.476249][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.484584][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.459608][T10202] batadv0: entered promiscuous mode [ 241.465593][T10205] batadv0: left promiscuous mode [ 241.474794][T10208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.488134][T10208] batadv0: mtu less than device minimum [ 241.496315][T10208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.509700][T10208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.554179][T10208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.576863][T10208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.617172][T10208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.625680][T10208] batman_adv: batadv0: Interface deactivated: dummy0 [ 241.632403][T10208] batman_adv: batadv0: Removing interface: dummy0 [ 241.693253][T10212] __nla_validate_parse: 10 callbacks suppressed [ 241.693273][T10212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1086'. [ 241.710027][T10212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1086'. [ 241.722219][T10212] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1086'. [ 241.731296][T10212] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1086'. [ 241.813382][T10217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1088'. [ 241.836050][T10217] ip6gre3: entered promiscuous mode [ 241.841334][T10217] ip6gre3: entered allmulticast mode [ 241.969825][T10221] netlink: 'syz.3.1090': attribute type 1 has an invalid length. [ 242.009196][T10221] bond3: entered promiscuous mode [ 242.014719][T10221] 8021q: adding VLAN 0 to HW filter on device bond3 [ 242.053703][T10221] macvtap1: entered allmulticast mode [ 242.516462][T10238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1096'. [ 242.525985][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1098'. [ 242.575235][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1096'. [ 242.641232][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1098'. [ 242.729110][T10251] netlink: 'syz.1.1101': attribute type 1 has an invalid length. [ 242.739622][T10252] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1100'. [ 242.857114][T10251] 8021q: adding VLAN 0 to HW filter on device bond4 [ 242.875298][T10258] xt_hashlimit: size too large, truncated to 1048576 [ 243.090286][T10268] sctp: [Deprecated]: syz.1.1105 (pid 10268) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.090286][T10268] Use struct sctp_sack_info instead [ 243.243106][T10270] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 243.259056][T10270] bond4 (unregistering): Released all slaves [ 244.155812][T10313] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.726548][ T8134] net_ratelimit: 362 callbacks suppressed [ 244.726569][ T8134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.740878][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.853928][T10345] netlink: 'syz.4.1126': attribute type 1 has an invalid length. [ 244.895146][T10354] netlink: 'syz.1.1128': attribute type 28 has an invalid length. [ 244.904158][ T7686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.909090][T10345] bond4: entered promiscuous mode [ 244.916124][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.917756][T10345] 8021q: adding VLAN 0 to HW filter on device bond4 [ 244.926565][T10354] netlink: 'syz.1.1128': attribute type 3 has an invalid length. [ 245.786232][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.836691][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.845090][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.857555][T10406] IPVS: set_ctl: invalid protocol: 58 10.1.1.0:20000 [ 246.926560][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.935761][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.845668][T10347] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 247.858801][T10372] __nla_validate_parse: 15 callbacks suppressed [ 247.858821][T10372] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1130'. [ 247.892170][T10372] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 248.007372][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.123013][T10420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.130973][T10423] netlink: 'syz.0.1146': attribute type 1 has an invalid length. [ 248.153434][T10423] netlink: 'syz.0.1146': attribute type 1 has an invalid length. [ 248.161792][T10423] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1146'. [ 248.184933][T10420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.258756][T10417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.307693][T10430] batman_adv: batadv0: Adding interface: vlan4 [ 248.313914][T10430] batman_adv: batadv0: The MTU of interface vlan4 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.342777][T10430] batman_adv: batadv0: Not using interface vlan4 (retrying later): interface not active [ 248.390140][T10434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1149'. [ 248.448987][T10438] bond0: (slave ipvlan0): Error: Can not enslave VLAN challenged device to VLAN enabled bond [ 248.461954][T10440] bond0: (slave ipvlan0): Error: Can not enslave VLAN challenged device to VLAN enabled bond [ 248.582164][T10442] xt_hashlimit: size too large, truncated to 1048576 [ 248.663290][T10444] netlink: 'syz.0.1151': attribute type 1 has an invalid length. [ 248.671539][T10444] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1151'. [ 248.886982][T10446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1152'. [ 248.896065][T10446] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1152'. [ 248.905183][T10446] tipc: Invalid UDP bearer configuration [ 248.905241][T10446] tipc: Enabling of bearer rejected, failed to enable media [ 248.924052][T10446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1152'. [ 248.942307][T10446] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1152'. [ 249.177082][T10462] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1158'. [ 249.270105][T10467] netlink: 'syz.4.1159': attribute type 1 has an invalid length. [ 249.306652][T10467] 8021q: adding VLAN 0 to HW filter on device bond5 [ 249.788831][T10492] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 250.007166][T10503] batadv_slave_0: entered promiscuous mode [ 250.017248][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1169'. [ 250.033113][T10496] net_ratelimit: 4 callbacks suppressed [ 250.033135][T10496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.203129][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.211750][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.649984][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.658454][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.677343][T10490] dvmrp0: entered allmulticast mode [ 250.683128][T10501] batadv_slave_0: left promiscuous mode [ 250.770775][ T48] dvmrp0: left allmulticast mode [ 251.021315][T10525] ipvlan0: entered promiscuous mode [ 251.217869][T10524] ipvlan0: left promiscuous mode [ 251.266848][ T8134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.275308][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.908281][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.316233][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.324619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.406920][ T8134] net_ratelimit: 5 callbacks suppressed [ 255.406942][ T8134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.420987][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.670013][ T5000] udevd[5000]: worker [5734] /devices/virtual/block/nbd0 is taking a long time [ 255.738283][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.792709][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 256.442367][ T8134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.450625][ T8134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.459292][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.467701][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.872949][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.517286][ T8134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.525580][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.536869][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.209849][ T4965] block nbd0: Possible stuck request ffff888027970000: control (read@0,4096B). Runtime 150 seconds [ 260.637121][ T24] net_ratelimit: 4 callbacks suppressed [ 260.637137][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.651109][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.716527][ T8134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.724858][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.143289][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.151695][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.787642][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 262.797551][ T8134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.805986][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.004633][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.807132][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.957991][ T8134] net_ratelimit: 4 callbacks suppressed [ 265.958015][ T8134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.972123][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.169828][ T5635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 266.183164][ T5635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 266.194365][ T5635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 266.208489][ T5635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 266.218207][ T5635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 266.263781][ T5646] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 266.276709][ T5646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 266.288207][ T5646] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 266.297819][ T5646] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 266.305714][ T5646] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 267.006427][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.014863][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.196415][ T8102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.298150][T10590] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.305408][T10590] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.312948][T10590] bridge_slave_0: entered allmulticast mode [ 267.320394][T10590] bridge_slave_0: entered promiscuous mode [ 267.366245][T10590] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.373513][T10590] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.381096][T10590] bridge_slave_1: entered allmulticast mode [ 267.388595][T10590] bridge_slave_1: entered promiscuous mode [ 267.467658][T10590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.488738][T10590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.498054][T10592] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.505303][T10592] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.512598][T10592] bridge_slave_0: entered allmulticast mode [ 267.520792][T10592] bridge_slave_0: entered promiscuous mode [ 267.543633][T10592] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.550828][T10592] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.558096][T10592] bridge_slave_1: entered allmulticast mode [ 267.566404][T10592] bridge_slave_1: entered promiscuous mode [ 267.607850][T10590] team0: Port device team_slave_0 added [ 267.617084][T10590] team0: Port device team_slave_1 added [ 267.668011][T10590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.675019][T10590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.714801][T10590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.744425][T10592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.762527][ T5646] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 267.764947][T10592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.782303][ T5646] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 267.792931][ T5646] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 267.801229][ T5646] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 267.809432][ T5646] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 267.844832][T10590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.851836][T10590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.877831][T10590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.889335][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.897699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.906021][T10592] team0: Port device team_slave_0 added [ 267.924655][T10592] team0: Port device team_slave_1 added [ 268.028950][T10592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.036090][T10592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.063694][ T8134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.072188][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.092132][T10592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.130346][T10590] hsr_slave_0: entered promiscuous mode [ 268.137899][T10590] hsr_slave_1: entered promiscuous mode [ 268.167377][T10592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.182292][T10592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.225903][T10592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.256304][ T5646] Bluetooth: hci5: command tx timeout [ 268.278135][ T5635] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 268.312167][ T5635] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 268.322036][ T5635] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 268.330543][ T5635] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 268.338185][ T5635] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 268.356048][ T5635] Bluetooth: hci6: command tx timeout [ 268.546197][ T5646] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 268.557064][ T5646] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 268.567482][ T5646] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 268.568384][T10592] hsr_slave_0: entered promiscuous mode [ 268.588076][ T5646] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 268.596005][ T5646] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 268.600835][T10592] hsr_slave_1: entered promiscuous mode [ 268.620056][T10592] debugfs: 'hsr0' already exists in 'hsr' [ 268.636466][T10592] Cannot create hsr debugfs directory [ 269.136488][ T8134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.902609][T10625] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.912900][T10625] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.920287][T10625] bridge_slave_0: entered allmulticast mode [ 269.926438][ T5635] Bluetooth: hci7: command tx timeout [ 269.933523][T10625] bridge_slave_0: entered promiscuous mode [ 269.952940][T10625] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.960189][T10625] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.967537][T10625] bridge_slave_1: entered allmulticast mode [ 269.974938][T10625] bridge_slave_1: entered promiscuous mode [ 270.023234][T10625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.053588][T10625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.113899][T10625] team0: Port device team_slave_0 added [ 270.145445][T10625] team0: Port device team_slave_1 added [ 270.190330][T10625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.197402][T10625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.224331][T10625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.246595][T10625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.254351][T10625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.280730][T10625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.296152][ T5635] Bluetooth: hci5: command tx timeout [ 270.457748][ T5635] Bluetooth: hci8: command tx timeout [ 270.458417][ T5646] Bluetooth: hci6: command tx timeout [ 270.481927][T10625] hsr_slave_0: entered promiscuous mode [ 270.488543][T10625] hsr_slave_1: entered promiscuous mode [ 270.494802][T10625] debugfs: 'hsr0' already exists in 'hsr' [ 270.500663][T10625] Cannot create hsr debugfs directory [ 270.537134][T10631] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.544426][T10631] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.552018][T10631] bridge_slave_0: entered allmulticast mode [ 270.560967][T10631] bridge_slave_0: entered promiscuous mode [ 270.573231][T10631] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.581165][T10631] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.591346][T10631] bridge_slave_1: entered allmulticast mode [ 270.599764][T10631] bridge_slave_1: entered promiscuous mode [ 270.670766][T10631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.689604][ T5635] Bluetooth: hci9: command tx timeout [ 270.715846][T10631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.786425][T10631] team0: Port device team_slave_0 added [ 270.805756][T10631] team0: Port device team_slave_1 added [ 270.870043][T10639] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.877357][T10639] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.884881][T10639] bridge_slave_0: entered allmulticast mode [ 270.892497][T10639] bridge_slave_0: entered promiscuous mode [ 270.917841][T10631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.924827][T10631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.950793][T10631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.962619][T10639] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.970183][T10639] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.977424][T10639] bridge_slave_1: entered allmulticast mode [ 270.984690][T10639] bridge_slave_1: entered promiscuous mode [ 271.003978][T10631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.011365][T10631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.039384][T10631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.109879][T10639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.138866][T10639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.247995][T10631] hsr_slave_0: entered promiscuous mode [ 271.254972][T10631] hsr_slave_1: entered promiscuous mode [ 271.261696][ T24] net_ratelimit: 4 callbacks suppressed [ 271.261716][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.275687][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.285127][T10631] debugfs: 'hsr0' already exists in 'hsr' [ 271.291375][T10631] Cannot create hsr debugfs directory [ 271.304907][T10639] team0: Port device team_slave_0 added [ 271.319118][T10639] team0: Port device team_slave_1 added [ 271.473078][T10639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.482125][T10639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.508159][T10639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.550303][T10639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.557561][T10639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.583541][T10639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.701121][T10639] hsr_slave_0: entered promiscuous mode [ 271.708062][T10639] hsr_slave_1: entered promiscuous mode [ 271.714394][T10639] debugfs: 'hsr0' already exists in 'hsr' [ 271.720225][T10639] Cannot create hsr debugfs directory [ 271.973815][ T5635] Bluetooth: hci7: command tx timeout [ 272.297323][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.305645][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.405768][ T5635] Bluetooth: hci5: command tx timeout [ 272.566751][ T5635] Bluetooth: hci8: command tx timeout [ 272.620476][ T5635] Bluetooth: hci6: command tx timeout [ 272.836051][ T5635] Bluetooth: hci9: command tx timeout [ 273.326741][ T8134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.335061][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.482193][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.696897][ T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.705217][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.076140][ T5635] Bluetooth: hci7: command tx timeout [ 274.396551][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.449076][ T5635] Bluetooth: hci5: command tx timeout [ 274.664194][ T5635] Bluetooth: hci8: command tx timeout [ 274.716351][ T5635] Bluetooth: hci6: command tx timeout [ 274.886187][ T5635] Bluetooth: hci9: command tx timeout [ 276.175557][ T5635] Bluetooth: hci7: command tx timeout [ 276.607501][ T809] net_ratelimit: 1 callbacks suppressed [ 276.607524][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.716033][ T5635] Bluetooth: hci8: command tx timeout [ 276.926133][ T5635] Bluetooth: hci9: command tx timeout [ 279.416547][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.424912][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.732325][ T8102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.056198][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.064503][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.756968][ T8102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.156876][ T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.165327][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.796415][ T7686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.804612][ T7686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.813039][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.920700][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.118408][ T5000] udevd[5000]: worker [5734] /devices/virtual/block/nbd0 timeout; kill it [ 290.128034][ T5000] udevd[5000]: seq 11152 '/devices/virtual/block/nbd0' killed [ 290.326228][ T4965] block nbd0: Possible stuck request ffff888027970000: control (read@0,4096B). Runtime 180 seconds [ 290.917019][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.925377][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.566795][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.575181][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.045189][ T8102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.079035][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.704999][ T7686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.713891][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.316779][ T7686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.325145][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.117893][ T8102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.252403][ T8102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.446550][ T7688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.454928][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.083855][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.092470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.375520][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.494956][ T8102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.846785][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.855187][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.614967][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.639309][ T8102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.877252][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.885619][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.681971][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.160113][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.164127][ T8102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.761207][ T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.769591][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.295992][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.404687][ T4965] block nbd0: Possible stuck request ffff888027970000: control (read@0,4096B). Runtime 210 seconds [ 321.637848][ T7688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.646155][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.339138][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 323.420348][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.496426][ T7688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.504717][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.514669][ T8102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.688960][ T5646] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 326.698866][ T5646] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 326.712397][ T5639] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 326.713896][ T5646] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 326.731828][ T5639] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 326.732549][ T5639] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 326.734165][ T5639] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 326.734861][ T5639] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 326.769318][ T5646] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 326.778835][ T5639] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 327.408060][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.416494][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.426754][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.439941][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.450018][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.460210][ T8134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.788253][ T5639] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 327.802894][ T5639] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 327.813329][ T5639] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 327.822615][ T5639] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 327.830629][ T5639] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 327.833229][T10685] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.862643][T10685] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.870191][T10685] bridge_slave_0: entered allmulticast mode [ 327.879440][T10685] bridge_slave_0: entered promiscuous mode [ 327.888245][T10685] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.895474][T10685] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.903465][T10685] bridge_slave_1: entered allmulticast mode [ 327.912359][T10685] bridge_slave_1: entered promiscuous mode [ 328.008120][T10685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.021376][T10685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.063576][T10685] team0: Port device team_slave_0 added [ 328.096031][T10685] team0: Port device team_slave_1 added [ 328.140729][T10685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.147837][T10685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.173790][T10685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.246604][T10685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.253629][T10685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.280021][T10685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.484592][T10683] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.491907][T10683] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.499206][T10683] bridge_slave_0: entered allmulticast mode [ 328.507164][T10683] bridge_slave_0: entered promiscuous mode [ 328.515840][T10683] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.538829][T10683] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.549382][T10683] bridge_slave_1: entered allmulticast mode [ 328.556861][T10683] bridge_slave_1: entered promiscuous mode [ 328.580772][T10685] hsr_slave_0: entered promiscuous mode [ 328.587543][T10685] hsr_slave_1: entered promiscuous mode [ 328.593797][T10685] debugfs: 'hsr0' already exists in 'hsr' [ 328.599599][T10685] Cannot create hsr debugfs directory [ 328.660083][T10683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.756109][ T5639] Bluetooth: hci11: command tx timeout [ 328.764163][T10683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.806787][T10683] team0: Port device team_slave_0 added [ 328.816340][T10683] team0: Port device team_slave_1 added [ 328.875891][ T5639] Bluetooth: hci10: command tx timeout [ 328.944795][T10683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.951895][T10683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.993220][T10683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.030638][ T50] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 329.040279][ T50] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 329.052890][ T5646] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 329.054403][ T50] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 329.070736][ T50] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 329.076759][ T5646] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 329.081345][ T50] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 329.088754][ T5646] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 329.102740][ T5646] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 329.116584][ T50] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 329.144249][T10683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.156141][T10683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.182685][T10683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.413935][T10683] hsr_slave_0: entered promiscuous mode [ 329.420829][T10683] hsr_slave_1: entered promiscuous mode [ 329.427306][T10683] debugfs: 'hsr0' already exists in 'hsr' [ 329.433082][T10683] Cannot create hsr debugfs directory [ 329.908297][ T50] Bluetooth: hci12: command tx timeout [ 330.336539][T10712] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.344366][T10712] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.352099][T10712] bridge_slave_0: entered allmulticast mode [ 330.371750][T10712] bridge_slave_0: entered promiscuous mode [ 330.417708][T10712] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.425685][T10712] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.433468][T10712] bridge_slave_1: entered allmulticast mode [ 330.442130][T10712] bridge_slave_1: entered promiscuous mode [ 330.511046][T10712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.526326][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.541024][T10712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.612551][T10712] team0: Port device team_slave_0 added [ 330.643472][T10712] team0: Port device team_slave_1 added [ 330.712692][T10712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.719708][T10712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.745620][T10712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.768505][T10712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.775506][T10712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.804698][T10712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.876970][ T50] Bluetooth: hci11: command tx timeout [ 330.926643][ T50] Bluetooth: hci10: command tx timeout [ 330.936735][T10712] hsr_slave_0: entered promiscuous mode [ 330.943778][T10712] hsr_slave_1: entered promiscuous mode [ 330.951522][T10712] debugfs: 'hsr0' already exists in 'hsr' [ 330.957600][T10712] Cannot create hsr debugfs directory [ 331.158997][ T50] Bluetooth: hci13: command tx timeout [ 331.166195][ T50] Bluetooth: hci14: command tx timeout [ 331.268506][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.276878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.407905][T10730] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.415157][T10730] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.422426][T10730] bridge_slave_0: entered allmulticast mode [ 331.429885][T10730] bridge_slave_0: entered promiscuous mode [ 331.438489][T10730] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.445653][T10730] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.452939][T10730] bridge_slave_1: entered allmulticast mode [ 331.460879][T10730] bridge_slave_1: entered promiscuous mode [ 331.565919][T10731] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.573332][T10731] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.580808][T10731] bridge_slave_0: entered allmulticast mode [ 331.598183][T10731] bridge_slave_0: entered promiscuous mode [ 331.613089][T10731] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.620296][T10731] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.627818][T10731] bridge_slave_1: entered allmulticast mode [ 331.635422][T10731] bridge_slave_1: entered promiscuous mode [ 331.655664][T10730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.691368][T10730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.737452][T10731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.762060][T10731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.782858][T10730] team0: Port device team_slave_0 added [ 331.821057][T10730] team0: Port device team_slave_1 added [ 331.846034][T10731] team0: Port device team_slave_0 added [ 331.865607][T10730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.872654][T10730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.900098][T10730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.913977][T10730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.922003][T10730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.949149][T10730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.961996][ T50] Bluetooth: hci12: command tx timeout [ 331.972355][T10731] team0: Port device team_slave_1 added [ 332.016540][T10731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.023562][T10731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.050139][T10731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.086948][T10731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.093970][T10731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.119863][T10731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.187732][T10730] hsr_slave_0: entered promiscuous mode [ 332.194387][T10730] hsr_slave_1: entered promiscuous mode [ 332.200885][T10730] debugfs: 'hsr0' already exists in 'hsr' [ 332.206652][T10730] Cannot create hsr debugfs directory [ 332.250094][T10731] hsr_slave_0: entered promiscuous mode [ 332.257026][T10731] hsr_slave_1: entered promiscuous mode [ 332.263265][T10731] debugfs: 'hsr0' already exists in 'hsr' [ 332.269140][T10731] Cannot create hsr debugfs directory [ 332.566955][ T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.575114][ T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.583457][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.592622][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.601330][ T8134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.946165][ T50] Bluetooth: hci11: command tx timeout [ 333.006306][ T50] Bluetooth: hci10: command tx timeout [ 333.266021][ T50] Bluetooth: hci14: command tx timeout [ 333.271574][ T50] Bluetooth: hci13: command tx timeout [ 334.086069][ T5646] Bluetooth: hci12: command tx timeout [ 335.005930][ T5646] Bluetooth: hci11: command tx timeout [ 335.109079][ T5646] Bluetooth: hci10: command tx timeout [ 335.325965][ T5646] Bluetooth: hci13: command tx timeout [ 335.326255][ T50] Bluetooth: hci14: command tx timeout [ 335.647081][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.185445][ T50] Bluetooth: hci12: command tx timeout [ 337.046503][ T7688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.054844][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.426145][ T50] Bluetooth: hci14: command tx timeout [ 337.476192][ T50] Bluetooth: hci13: command tx timeout [ 338.286517][ T7684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.294814][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.768353][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.888879][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.808278][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.816631][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.043830][ T7688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.052401][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.917771][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.985807][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.527336][ T7688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.535682][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.816540][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.824893][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.463547][ T4965] block nbd0: Possible stuck request ffff888027970000: control (read@0,4096B). Runtime 240 seconds [ 351.001296][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.691529][ T7688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.700673][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.121580][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.626621][ T7684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.635064][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.238415][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.796377][ T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.804719][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.360039][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.326329][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.334681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.479910][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.555532][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.563991][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.496373][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.504768][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.601057][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.666446][ T7688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.674841][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.720534][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.196865][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.205256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.848036][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.429515][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.437886][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.968656][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.956925][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.965251][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.607396][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.609307][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.089087][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.537186][ T4965] block nbd0: Possible stuck request ffff888027970000: control (read@0,4096B). Runtime 270 seconds [ 381.236071][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.244415][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.204792][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.016508][ T7684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.024870][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.818226][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 385.323976][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.762953][ T5646] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 386.774068][ T5646] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 386.787286][ T5646] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 386.797073][ T5635] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 386.805123][ T5635] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 386.810380][ T5646] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 386.823054][ T5646] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 386.844256][ T5646] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 386.853989][ T5646] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 386.862865][ T5646] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 386.949345][ T7684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.958062][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.879064][T10776] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.886473][T10776] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.893948][T10776] bridge_slave_0: entered allmulticast mode [ 387.903341][T10776] bridge_slave_0: entered promiscuous mode [ 387.913370][T10776] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.920937][T10776] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.928576][T10776] bridge_slave_1: entered allmulticast mode [ 387.936902][T10776] bridge_slave_1: entered promiscuous mode [ 387.979489][T10776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.003085][T10776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.069644][T10776] team0: Port device team_slave_0 added [ 388.086078][T10776] team0: Port device team_slave_1 added [ 388.147807][T10778] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.156398][T10778] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.163739][T10778] bridge_slave_0: entered allmulticast mode [ 388.187632][T10778] bridge_slave_0: entered promiscuous mode [ 388.196547][T10778] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.203729][T10778] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.211080][T10778] bridge_slave_1: entered allmulticast mode [ 388.219095][T10778] bridge_slave_1: entered promiscuous mode [ 388.228772][T10776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.235776][T10776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.262084][T10776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.319863][T10776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.326991][T10776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.353321][T10776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.370568][ T5639] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 388.381004][ T5639] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 388.390099][ T5639] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 388.404021][ T5639] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 388.413509][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.426657][T10778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.427916][ T5639] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 388.501162][T10778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.535805][T10776] hsr_slave_0: entered promiscuous mode [ 388.542805][T10776] hsr_slave_1: entered promiscuous mode [ 388.549479][T10776] debugfs: 'hsr0' already exists in 'hsr' [ 388.555255][T10776] Cannot create hsr debugfs directory [ 388.579185][T10778] team0: Port device team_slave_0 added [ 388.589576][T10778] team0: Port device team_slave_1 added [ 388.643500][T10778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.650540][T10778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.676992][T10778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.696831][T10778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.703823][T10778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.732758][T10778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.868414][ T5639] Bluetooth: hci15: command tx timeout [ 388.881640][T10778] hsr_slave_0: entered promiscuous mode [ 388.888517][T10778] hsr_slave_1: entered promiscuous mode [ 388.895527][T10778] debugfs: 'hsr0' already exists in 'hsr' [ 388.901306][T10778] Cannot create hsr debugfs directory [ 388.915587][ T7684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.924342][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.976803][ T5639] Bluetooth: hci16: command tx timeout [ 389.379971][ T5639] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 389.391615][ T5639] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 389.403309][T10827] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 389.413789][T10827] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 389.433578][T10829] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 389.441968][T10827] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 389.454521][T10829] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 389.462570][T10827] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 389.472216][T10827] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 389.482787][T10829] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 390.147201][T10811] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.162346][T10811] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.170180][T10811] bridge_slave_0: entered allmulticast mode [ 390.178537][T10811] bridge_slave_0: entered promiscuous mode [ 390.213974][T10811] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.221781][T10811] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.229924][T10811] bridge_slave_1: entered allmulticast mode [ 390.238455][T10811] bridge_slave_1: entered promiscuous mode [ 390.326584][T10811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.339615][T10811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.384969][T10811] team0: Port device team_slave_0 added [ 390.394199][T10811] team0: Port device team_slave_1 added [ 390.433035][T10811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.444114][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.470533][T10811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.483908][T10811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.491204][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.517645][T10811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.530932][T10829] Bluetooth: hci17: command tx timeout [ 390.590655][T10811] hsr_slave_0: entered promiscuous mode [ 390.598865][T10811] hsr_slave_1: entered promiscuous mode [ 390.605366][T10811] debugfs: 'hsr0' already exists in 'hsr' [ 390.612144][T10811] Cannot create hsr debugfs directory [ 390.946183][T10829] Bluetooth: hci15: command tx timeout [ 390.946360][ T5642] Bluetooth: hci9: command 0x0406 tx timeout [ 390.951876][T10827] Bluetooth: hci5: command 0x0406 tx timeout [ 390.957726][ T5642] Bluetooth: hci8: command 0x0406 tx timeout [ 390.960402][ T5642] Bluetooth: hci7: command 0x0406 tx timeout [ 390.986254][T10819] Bluetooth: hci6: command 0x0406 tx timeout [ 391.046731][ T4949] Bluetooth: hci16: command tx timeout [ 391.366149][T10824] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.373408][T10824] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.380814][T10824] bridge_slave_0: entered allmulticast mode [ 391.388774][T10824] bridge_slave_0: entered promiscuous mode [ 391.407443][T10824] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.414612][T10824] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.422026][T10824] bridge_slave_1: entered allmulticast mode [ 391.438889][T10824] bridge_slave_1: entered promiscuous mode [ 391.496636][T10824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.514459][T10824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.554457][ T8102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.584622][T10825] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.593161][T10825] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.600686][T10825] bridge_slave_0: entered allmulticast mode [ 391.606750][ T5635] Bluetooth: hci19: command tx timeout [ 391.606995][ T50] Bluetooth: hci18: command tx timeout [ 391.619499][T10825] bridge_slave_0: entered promiscuous mode [ 391.630331][T10824] team0: Port device team_slave_0 added [ 391.645549][T10825] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.662900][T10825] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.670536][T10825] bridge_slave_1: entered allmulticast mode [ 391.678156][T10825] bridge_slave_1: entered promiscuous mode [ 391.687404][T10824] team0: Port device team_slave_1 added [ 391.739963][T10825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.750097][T10824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.757195][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.796299][T10824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.810445][T10824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.817633][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.843565][T10824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.857323][T10825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.949284][T10825] team0: Port device team_slave_0 added [ 391.964118][T10824] hsr_slave_0: entered promiscuous mode [ 391.970732][T10824] hsr_slave_1: entered promiscuous mode [ 391.977243][T10824] debugfs: 'hsr0' already exists in 'hsr' [ 391.983007][T10824] Cannot create hsr debugfs directory [ 391.994646][T10825] team0: Port device team_slave_1 added [ 392.068866][T10825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.075862][T10825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.101767][T10825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.140164][T10825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.147161][T10825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.173046][T10825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.293835][T10825] hsr_slave_0: entered promiscuous mode [ 392.300753][T10825] hsr_slave_1: entered promiscuous mode [ 392.307143][T10825] debugfs: 'hsr0' already exists in 'hsr' [ 392.312904][T10825] Cannot create hsr debugfs directory [ 392.616699][ T50] Bluetooth: hci17: command tx timeout [ 392.726388][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.734765][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.059347][ T50] Bluetooth: hci15: command tx timeout [ 393.105339][ T50] Bluetooth: hci16: command tx timeout [ 393.642365][ T50] Bluetooth: hci19: command tx timeout [ 393.648034][ T5635] Bluetooth: hci18: command tx timeout [ 394.618979][ T7684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.627703][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.638802][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.676204][ T50] Bluetooth: hci17: command tx timeout [ 395.126071][ T50] Bluetooth: hci15: command tx timeout [ 395.167746][ T50] Bluetooth: hci16: command tx timeout [ 395.746176][ T50] Bluetooth: hci19: command tx timeout [ 395.802875][ T50] Bluetooth: hci18: command tx timeout [ 396.766224][ T50] Bluetooth: hci17: command tx timeout [ 397.637176][ T8102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.796170][ T50] Bluetooth: hci19: command tx timeout [ 397.806361][ T7681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.814794][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.875962][ T50] Bluetooth: hci18: command tx timeout [ 399.718820][ T7681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.729772][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.694390][ T8102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.597914][ T7681] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.606766][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.820607][ T809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.846464][ T83] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.854847][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.293621][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 406.941647][ T8102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.706462][ T30] INFO: task syz.2.1171:10514 blocked for more than 143 seconds. [ 408.714354][ T30] Not tainted syzkaller #0 [ 408.719443][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 408.728187][ T30] task:syz.2.1171 state:D stack:26328 pid:10514 tgid:10513 ppid:5653 task_flags:0x480140 flags:0x00080002 [ 408.740296][ T30] Call Trace: [ 408.743671][ T30] [ 408.746696][ T30] __schedule+0x1821/0x5740 [ 408.751283][ T30] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 408.756413][ T30] ? schedule+0x90/0x360 [ 408.761497][ T30] schedule+0x164/0x360 [ 408.769400][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 408.778422][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 408.784581][ T30] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 408.790963][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 408.797100][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 408.803312][ T30] nbd_set_size+0x454/0x680 [ 408.808005][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 408.813107][ T30] ? nla_memcpy+0x5b/0xc0 [ 408.817500][ T30] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 408.822856][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 408.885471][ T30] ? rcu_is_watching+0x15/0xb0 [ 408.890330][ T30] ? trace_kmalloc+0x2a/0xf0 [ 408.895001][ T30] ? __nla_parse+0x40/0x60 [ 408.899468][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 408.905853][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 408.912236][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 408.917845][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 408.923980][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 408.929224][ T30] genl_rcv_msg+0x61c/0x7a0 [ 408.933804][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 408.940337][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 408.946145][ T30] netlink_rcv_skb+0x232/0x4b0 [ 408.950953][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 408.956026][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 408.961366][ T30] ? down_read+0x270/0x2e0 [ 408.965823][ T30] ? genl_rcv+0xd/0x40 [ 408.969942][ T30] genl_rcv+0x28/0x40 [ 408.973961][ T30] netlink_unicast+0x75c/0x8e0 [ 408.978771][ T30] netlink_sendmsg+0x813/0xb40 [ 408.993728][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.999103][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 409.004104][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 409.009445][ T30] ____sys_sendmsg+0x972/0x9f0 [ 409.014255][ T30] ? __might_fault+0xaf/0x130 [ 409.018999][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.024321][ T30] ? import_iovec+0x73/0xa0 [ 409.028841][ T30] ___sys_sendmsg+0x2a5/0x360 [ 409.033529][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 409.038664][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.043879][ T30] ? futex_wait+0x2a2/0x390 [ 409.048432][ T30] ? __fget_files+0x2a/0x420 [ 409.053064][ T30] ? __fget_files+0x3a0/0x420 [ 409.057790][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 409.062762][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 409.068338][ T30] ? rcu_is_watching+0x15/0xb0 [ 409.073139][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.079221][ T30] do_syscall_64+0x174/0x580 [ 409.083835][ T30] ? trace_irq_disable+0x3b/0x140 [ 409.088883][ T30] ? clear_bhb_loop+0x40/0x90 [ 409.108181][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.114175][ T30] RIP: 0033:0x7f4f8df9ce59 [ 409.118650][ T30] RSP: 002b:00007f4f8ee40028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.127120][ T30] RAX: ffffffffffffffda RBX: 00007f4f8e215fa0 RCX: 00007f4f8df9ce59 [ 409.135143][ T30] RDX: 0000000024000004 RSI: 00002000000007c0 RDI: 0000000000000004 [ 409.143152][ T30] RBP: 00007f4f8e032d6f R08: 0000000000000000 R09: 0000000000000000 [ 409.151174][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.159249][ T30] R13: 00007f4f8e216038 R14: 00007f4f8e215fa0 R15: 00007ffd917bcfd8 [ 409.167658][ T30] [ 409.170774][ T30] INFO: task syz.2.1171:10515 blocked for more than 143 seconds. [ 409.179551][ T30] Not tainted syzkaller #0 [ 409.184498][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.193247][ T30] task:syz.2.1171 state:D stack:26656 pid:10515 tgid:10513 ppid:5653 task_flags:0x400040 flags:0x00080002 [ 409.205249][ T30] Call Trace: [ 409.209316][ T30] [ 409.212315][ T30] __schedule+0x1821/0x5740 [ 409.216899][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 409.221901][ T30] ? __pfx___schedule+0x10/0x10 [ 409.226819][ T30] ? schedule+0x90/0x360 [ 409.231114][ T30] schedule+0x164/0x360 [ 409.235310][ T30] schedule_preempt_disabled+0x13/0x30 [ 409.243492][ T30] __mutex_lock+0x7f7/0x1550 [ 409.248164][ T30] ? kernel_text_address+0xa5/0xe0 [ 409.253339][ T30] ? __mutex_lock+0x608/0x1550 [ 409.258152][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 409.262880][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 409.267972][ T30] ? stack_trace_save+0xa9/0x100 [ 409.273192][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 409.278260][ T30] ? radix_tree_lookup+0x240/0x290 [ 409.283430][ T30] genl_rcv_msg+0x10b/0x7a0 [ 409.288446][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 409.293569][ T30] netlink_rcv_skb+0x232/0x4b0 [ 409.298461][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 409.303544][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 409.308989][ T30] ? down_read+0x270/0x2e0 [ 409.313451][ T30] ? genl_rcv+0xd/0x40 [ 409.317621][ T30] genl_rcv+0x28/0x40 [ 409.321649][ T30] netlink_unicast+0x75c/0x8e0 [ 409.326506][ T30] netlink_sendmsg+0x813/0xb40 [ 409.331410][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.337912][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.341971][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 409.361342][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.369497][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 409.374891][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.380288][ T30] __sys_sendto+0x672/0x710 [ 409.384839][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 409.389979][ T30] ? do_futex+0x395/0x420 [ 409.394370][ T30] ? rcu_is_watching+0x15/0xb0 [ 409.399320][ T30] __x64_sys_sendto+0xde/0x100 [ 409.404119][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.410266][ T30] do_syscall_64+0x174/0x580 [ 409.414987][ T30] ? trace_irq_disable+0x3b/0x140 [ 409.420597][ T30] ? clear_bhb_loop+0x40/0x90 [ 409.425380][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.431353][ T30] RIP: 0033:0x7f4f8df5d68e [ 409.435863][ T30] RSP: 002b:00007f4f8ee1de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 409.444356][ T30] RAX: ffffffffffffffda RBX: 00007f4f8ee1f6c0 RCX: 00007f4f8df5d68e [ 409.452434][ T30] RDX: 000000000000001c RSI: 00007f4f8ee1e000 RDI: 0000000000000004 [ 409.461127][ T30] RBP: 0000000000000000 R08: 00007f4f8ee1df04 R09: 000000000000000c [ 409.469209][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 409.477260][ T30] R13: 00007f4f8ee1df58 R14: 00007f4f8ee1e000 R15: 0000000000000000 [ 409.485306][ T30] [ 409.488850][ T30] INFO: task syz.3.1176:10539 blocked for more than 144 seconds. [ 409.496664][ T30] Not tainted syzkaller #0 [ 409.501632][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.511755][ T30] task:syz.3.1176 state:D stack:28632 pid:10539 tgid:10535 ppid:5634 task_flags:0x400040 flags:0x00080002 [ 409.523908][ T30] Call Trace: [ 409.527367][ T30] [ 409.530378][ T30] __schedule+0x1821/0x5740 [ 409.534927][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 409.540497][ T30] ? __pfx___schedule+0x10/0x10 [ 409.545445][ T30] ? schedule+0x90/0x360 [ 409.549783][ T30] schedule+0x164/0x360 [ 409.554019][ T30] schedule_preempt_disabled+0x13/0x30 [ 409.559579][ T30] __mutex_lock+0x7f7/0x1550 [ 409.564218][ T30] ? kernel_text_address+0xa5/0xe0 [ 409.569446][ T30] ? __mutex_lock+0x608/0x1550 [ 409.574260][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 409.579035][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 409.584107][ T30] ? stack_trace_save+0xa9/0x100 [ 409.589730][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 409.594756][ T30] ? radix_tree_lookup+0x240/0x290 [ 409.600001][ T30] genl_rcv_msg+0x10b/0x7a0 [ 409.604615][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 409.609768][ T30] netlink_rcv_skb+0x232/0x4b0 [ 409.614592][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 409.619707][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 409.625061][ T30] ? down_read+0x270/0x2e0 [ 409.629972][ T30] ? genl_rcv+0xd/0x40 [ 409.634136][ T30] genl_rcv+0x28/0x40 [ 409.638205][ T30] netlink_unicast+0x75c/0x8e0 [ 409.643041][ T30] netlink_sendmsg+0x813/0xb40 [ 409.647918][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.654645][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 409.659721][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 409.665069][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.670461][ T30] __sys_sendto+0x672/0x710 [ 409.675009][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 409.680477][ T30] ? exc_page_fault+0x6a/0xc0 [ 409.685296][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 409.690690][ T30] __x64_sys_sendto+0xde/0x100 [ 409.695531][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.701713][ T30] do_syscall_64+0x174/0x580 [ 409.706434][ T30] ? trace_irq_disable+0x3b/0x140 [ 409.711483][ T30] ? clear_bhb_loop+0x40/0x90 [ 409.716253][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.722186][ T30] RIP: 0033:0x7f0226d5d68e [ 409.726886][ T30] RSP: 002b:00007f0227c0ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 409.735433][ T30] RAX: ffffffffffffffda RBX: 00007f0227c0e6c0 RCX: 00007f0226d5d68e [ 409.743862][ T30] RDX: 0000000000000020 RSI: 00007f0227c0d000 RDI: 0000000000000007 [ 409.751918][ T30] RBP: 0000000000000000 R08: 00007f0227c0cf04 R09: 000000000000000c [ 409.759976][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 409.768203][ T30] R13: 00007f0227c0cf58 R14: 00007f0227c0d000 R15: 0000000000000000 [ 409.776285][ T30] [ 409.779358][ T30] INFO: task syz.3.1176:10545 blocked for more than 144 seconds. [ 409.792834][ T30] Not tainted syzkaller #0 [ 409.797851][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.806602][ T30] task:syz.3.1176 state:D stack:25800 pid:10545 tgid:10535 ppid:5634 task_flags:0x400140 flags:0x00080002 [ 409.818657][ T30] Call Trace: [ 409.821977][ T30] [ 409.824928][ T30] __schedule+0x1821/0x5740 [ 409.829538][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 409.834549][ T30] ? __pfx___schedule+0x10/0x10 [ 409.839510][ T30] ? schedule+0x90/0x360 [ 409.843801][ T30] schedule+0x164/0x360 [ 409.848064][ T30] schedule_preempt_disabled+0x13/0x30 [ 409.853575][ T30] __mutex_lock+0x7f7/0x1550 [ 409.858553][ T30] ? kernel_text_address+0xa5/0xe0 [ 409.863756][ T30] ? __mutex_lock+0x608/0x1550 [ 409.868586][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 409.873418][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 409.879123][ T30] ? stack_trace_save+0xa9/0x100 [ 409.884170][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 409.889196][ T30] ? radix_tree_lookup+0x240/0x290 [ 409.894379][ T30] genl_rcv_msg+0x10b/0x7a0 [ 409.898987][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 409.904086][ T30] netlink_rcv_skb+0x232/0x4b0 [ 409.909118][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 409.914241][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 409.921370][ T30] ? down_read+0x270/0x2e0 [ 409.925921][ T30] ? genl_rcv+0xd/0x40 [ 409.930067][ T30] genl_rcv+0x28/0x40 [ 409.934124][ T30] netlink_unicast+0x75c/0x8e0 [ 409.939002][ T30] netlink_sendmsg+0x813/0xb40 [ 409.943832][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.949225][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 409.954236][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 409.960089][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.965472][ T30] __sys_sendto+0x672/0x710 [ 409.970042][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 409.975171][ T30] ? __pfx_sched_clock_cpu+0x10/0x10 [ 409.980646][ T30] ? __pfx_flush_tlb_func+0x10/0x10 [ 409.985971][ T30] __x64_sys_sendto+0xde/0x100 [ 409.990756][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.996923][ T30] do_syscall_64+0x174/0x580 [ 410.001616][ T30] ? clear_bhb_loop+0x40/0x90 [ 410.006643][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.012617][ T30] RIP: 0033:0x7f0226d5d68e [ 410.017123][ T30] RSP: 002b:00007f0227bcae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 410.025596][ T30] RAX: ffffffffffffffda RBX: 00007f0227bcc6c0 RCX: 00007f0226d5d68e [ 410.033794][ T30] RDX: 0000000000000020 RSI: 00007f0227bcb000 RDI: 000000000000000d [ 410.041862][ T30] RBP: 0000000000000000 R08: 00007f0227bcaf04 R09: 000000000000000c [ 410.050106][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 410.058166][ T30] R13: 00007f0227bcaf58 R14: 00007f0227bcb000 R15: 0000000000000000 [ 410.063799][ T8102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.066383][ T30] [ 410.077529][ T30] INFO: task syz.1.1179:10550 blocked for more than 144 seconds. [ 410.085353][ T30] Not tainted syzkaller #0 [ 410.090618][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 410.099635][ T30] task:syz.1.1179 state:D stack:25224 pid:10550 tgid:10549 ppid:5637 task_flags:0x400140 flags:0x00080002 [ 410.111685][ T30] Call Trace: [ 410.115039][ T30] [ 410.118065][ T30] __schedule+0x1821/0x5740 [ 410.122706][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 410.127778][ T30] ? __pfx___schedule+0x10/0x10 [ 410.132721][ T30] ? schedule+0x90/0x360 [ 410.137099][ T30] schedule+0x164/0x360 [ 410.141307][ T30] schedule_preempt_disabled+0x13/0x30 [ 410.149557][ T30] __mutex_lock+0x7f7/0x1550 [ 410.154225][ T30] ? kernel_text_address+0xa5/0xe0 [ 410.171046][ T30] ? __mutex_lock+0x608/0x1550 [ 410.175982][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 410.180710][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 410.185749][ T30] ? stack_trace_save+0xa9/0x100 [ 410.190807][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 410.195934][ T30] ? radix_tree_lookup+0x240/0x290 [ 410.201139][ T30] genl_rcv_msg+0x10b/0x7a0 [ 410.205683][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 410.210845][ T30] netlink_rcv_skb+0x232/0x4b0 [ 410.215651][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 410.220775][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 410.226596][ T30] ? down_read+0x270/0x2e0 [ 410.231111][ T30] ? genl_rcv+0xd/0x40 [ 410.235210][ T30] genl_rcv+0x28/0x40 [ 410.239290][ T30] netlink_unicast+0x75c/0x8e0 [ 410.244093][ T30] netlink_sendmsg+0x813/0xb40 [ 410.248967][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.254292][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 410.259331][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 410.264654][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.270345][ T30] __sys_sendto+0x672/0x710 [ 410.274914][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 410.280030][ T30] ? exc_page_fault+0x6a/0xc0 [ 410.284756][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 410.290114][ T30] __x64_sys_sendto+0xde/0x100 [ 410.294921][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.302507][ T30] do_syscall_64+0x174/0x580 [ 410.307208][ T30] ? trace_irq_disable+0x3b/0x140 [ 410.312289][ T30] ? clear_bhb_loop+0x40/0x90 [ 410.317066][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.322999][ T30] RIP: 0033:0x7ff64475d68e [ 410.327513][ T30] RSP: 002b:00007ff6456cce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 410.336007][ T30] RAX: ffffffffffffffda RBX: 00007ff6456ce6c0 RCX: 00007ff64475d68e [ 410.344005][ T30] RDX: 000000000000001c RSI: 00007ff6456cd000 RDI: 0000000000000007 [ 410.352478][ T30] RBP: 0000000000000000 R08: 00007ff6456ccf04 R09: 000000000000000c [ 410.360541][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 410.368590][ T30] R13: 00007ff6456ccf58 R14: 00007ff6456cd000 R15: 0000000000000000 [ 410.376666][ T30] [ 410.379740][ T30] INFO: task syz.4.1184:10575 blocked for more than 145 seconds. [ 410.387622][ T30] Not tainted syzkaller #0 [ 410.392583][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 410.401625][ T30] task:syz.4.1184 state:D stack:28760 pid:10575 tgid:10574 ppid:5649 task_flags:0x400040 flags:0x00080002 [ 410.413662][ T30] Call Trace: [ 410.416994][ T30] [ 410.419960][ T30] __schedule+0x1821/0x5740 [ 410.424504][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 410.429605][ T30] ? __pfx___schedule+0x10/0x10 [ 410.434497][ T30] ? schedule+0x90/0x360 [ 410.438811][ T30] schedule+0x164/0x360 [ 410.443004][ T30] schedule_preempt_disabled+0x13/0x30 [ 410.448545][ T30] __mutex_lock+0x7f7/0x1550 [ 410.453186][ T30] ? kernel_text_address+0xa5/0xe0 [ 410.458410][ T30] ? __mutex_lock+0x608/0x1550 [ 410.463221][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 410.468014][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 410.473080][ T30] ? stack_trace_save+0xa9/0x100 [ 410.478346][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 410.483416][ T30] ? radix_tree_lookup+0x240/0x290 [ 410.488639][ T30] genl_rcv_msg+0x10b/0x7a0 [ 410.493187][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 410.498311][ T30] netlink_rcv_skb+0x232/0x4b0 [ 410.503127][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 410.508248][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 410.513581][ T30] ? down_read+0x270/0x2e0 [ 410.518072][ T30] ? genl_rcv+0xd/0x40 [ 410.522183][ T30] genl_rcv+0x28/0x40 [ 410.526540][ T30] netlink_unicast+0x75c/0x8e0 [ 410.531365][ T30] netlink_sendmsg+0x813/0xb40 [ 410.536277][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.541603][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 410.546604][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 410.551926][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.557275][ T30] __sys_sendto+0x672/0x710 [ 410.561819][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 410.566986][ T30] ? exc_page_fault+0x6a/0xc0 [ 410.571705][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 410.577202][ T30] __x64_sys_sendto+0xde/0x100 [ 410.582060][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.588215][ T30] do_syscall_64+0x174/0x580 [ 410.592851][ T30] ? trace_irq_disable+0x3b/0x140 [ 410.597988][ T30] ? clear_bhb_loop+0x40/0x90 [ 410.602679][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.608646][ T30] RIP: 0033:0x7fcf77f5d68e [ 410.613087][ T30] RSP: 002b:00007fcf78e53e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 410.621665][ T30] RAX: ffffffffffffffda RBX: 00007fcf78e556c0 RCX: 00007fcf77f5d68e [ 410.630446][ T30] RDX: 0000000000000020 RSI: 00007fcf78e54000 RDI: 0000000000000003 [ 410.630492][ T4965] block nbd0: Possible stuck request ffff888027970000: control (read@0,4096B). Runtime 300 seconds [ 410.649278][ T30] RBP: 0000000000000000 R08: 00007fcf78e53f04 R09: 000000000000000c [ 410.657352][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 410.665351][ T30] R13: 00007fcf78e53f58 R14: 00007fcf78e54000 R15: 0000000000000000 [ 410.673651][ T30] [ 410.676747][ T30] INFO: task syz.0.1187:10583 blocked for more than 145 seconds. [ 410.684496][ T30] Not tainted syzkaller #0 [ 410.689492][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 410.698512][ T30] task:syz.0.1187 state:D stack:25704 pid:10583 tgid:10582 ppid:5632 task_flags:0x400140 flags:0x00080002 [ 410.708458][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.713144][ T30] Call Trace: [ 410.719113][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.721899][ T30] [ 410.721928][ T30] __schedule+0x1821/0x5740 [ 410.737506][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 410.742509][ T30] ? __pfx___schedule+0x10/0x10 [ 410.747632][ T30] ? schedule+0x90/0x360 [ 410.751924][ T30] schedule+0x164/0x360 [ 410.756404][ T30] schedule_preempt_disabled+0x13/0x30 [ 410.761921][ T30] __mutex_lock+0x7f7/0x1550 [ 410.766609][ T30] ? __mutex_lock+0x608/0x1550 [ 410.771409][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 410.776196][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 410.781276][ T30] ? radix_tree_lookup+0x240/0x290 [ 410.786473][ T30] genl_rcv_msg+0x10b/0x7a0 [ 410.791023][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 410.796133][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 410.801551][ T30] netlink_rcv_skb+0x232/0x4b0 [ 410.806478][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 410.811552][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 410.816917][ T30] ? down_read+0x270/0x2e0 [ 410.821372][ T30] ? genl_rcv+0xd/0x40 [ 410.825496][ T30] genl_rcv+0x28/0x40 [ 410.829749][ T30] netlink_unicast+0x75c/0x8e0 [ 410.834592][ T30] netlink_sendmsg+0x813/0xb40 [ 410.839445][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.844792][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 410.849832][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 410.855199][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 410.860596][ T30] __sys_sendto+0x672/0x710 [ 410.865129][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 410.870269][ T30] ? exc_page_fault+0x6a/0xc0 [ 410.875010][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 410.880614][ T30] __x64_sys_sendto+0xde/0x100 [ 410.885488][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.891656][ T30] do_syscall_64+0x174/0x580 [ 410.896328][ T30] ? trace_irq_disable+0x3b/0x140 [ 410.901391][ T30] ? clear_bhb_loop+0x40/0x90 [ 410.906180][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.912112][ T30] RIP: 0033:0x7fdd1b15d68e [ 410.916656][ T30] RSP: 002b:00007fdd1c036e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 410.925104][ T30] RAX: ffffffffffffffda RBX: 00007fdd1c0386c0 RCX: 00007fdd1b15d68e [ 410.933574][ T30] RDX: 0000000000000020 RSI: 00007fdd1c037000 RDI: 0000000000000008 [ 410.941642][ T30] RBP: 0000000000000000 R08: 00007fdd1c036f04 R09: 000000000000000c [ 410.949762][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 410.957804][ T30] R13: 00007fdd1c036f58 R14: 00007fdd1c037000 R15: 0000000000000000 [ 410.965974][ T30] [ 410.969114][ T30] [ 410.969114][ T30] Showing all locks held in the system: [ 410.977056][ T30] 1 lock held by khungtaskd/30: [ 410.981972][ T30] #0: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 410.991937][ T30] 7 locks held by kworker/u8:5/83: [ 410.997364][ T30] #0: ffff8880b863b0e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 411.007392][ T30] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 411.016356][ T30] #2: ffff8880b8626118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 411.025341][ T30] #3: ffffffff9a68e450 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 411.036101][ T30] #4: ffffffff8e8010a0 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 411.046685][ T30] #5: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 411.056275][ T30] #6: ffff88813fe78618 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 411.066848][ T30] 2 locks held by getty/5389: [ 411.071544][ T30] #0: ffff8880377670a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 411.081683][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 411.091925][ T30] 1 lock held by udevd/5734: [ 411.096804][ T30] #0: ffff88802788f350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 411.106183][ T30] 4 locks held by kworker/u8:16/7684: [ 411.111604][ T30] #0: ffff8880b863b0e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 411.121646][ T30] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 411.130698][ T30] #2: ffff8880b8626118 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 411.139801][ T30] #3: ffffffff9a6f90a0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x83/0x580 [ 411.150211][ T30] 6 locks held by syz.2.1171/10514: [ 411.155446][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.164101][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 411.173213][ T30] #2: ffff8880278c2a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 411.183727][ T30] #3: ffff8880278f47c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 411.193252][ T30] #4: ffff8880278f4190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 411.205576][ T30] #5: ffff8880278f41c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 411.218025][ T30] 2 locks held by syz.2.1171/10515: [ 411.223269][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.231769][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 411.240852][ T30] 2 locks held by syz.3.1176/10539: [ 411.246109][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.254379][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 411.263452][ T30] 2 locks held by syz.3.1176/10545: [ 411.268725][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.277172][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 411.286327][ T30] 2 locks held by syz.1.1179/10550: [ 411.291544][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.299817][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 411.308869][ T30] 2 locks held by syz.4.1184/10575: [ 411.314069][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.322341][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 411.331470][ T30] 2 locks held by syz.0.1187/10583: [ 411.336744][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.345000][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 411.354064][ T30] 2 locks held by syz-executor/10590: [ 411.359478][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.367819][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 411.376936][ T30] 2 locks held by syz-executor/10592: [ 411.382338][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.390636][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 411.399720][ T30] 2 locks held by syz-executor/10625: [ 411.405114][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.413404][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 411.422591][ T30] 2 locks held by syz-executor/10631: [ 411.428048][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.436322][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 411.445308][ T30] 2 locks held by syz-executor/10639: [ 411.450753][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.459018][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 411.468205][ T30] 2 locks held by syz-executor/10683: [ 411.473611][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.481929][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 411.491009][ T30] 2 locks held by syz-executor/10685: [ 411.496913][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.505193][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 411.514585][ T30] 2 locks held by syz-executor/10712: [ 411.520185][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.528637][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 411.537778][ T30] 2 locks held by syz-executor/10730: [ 411.543179][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.551459][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 411.560632][ T30] 2 locks held by syz-executor/10731: [ 411.566074][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.574317][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 411.583387][ T30] 2 locks held by syz-executor/10776: [ 411.588811][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.597079][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 411.606241][ T30] 2 locks held by syz-executor/10778: [ 411.611640][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.619941][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 411.629106][ T30] 2 locks held by syz-executor/10811: [ 411.634507][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.642810][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 411.651890][ T30] 2 locks held by syz-executor/10824: [ 411.657316][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.665566][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 411.674632][ T30] 2 locks held by syz-executor/10825: [ 411.680429][ T30] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 411.688758][ T30] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 411.697854][ T30] [ 411.700190][ T30] ============================================= [ 411.700190][ T30] [ 411.708692][ T30] NMI backtrace for cpu 1 [ 411.708778][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 411.708802][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 411.708814][ T30] Call Trace: [ 411.708823][ T30] [ 411.708831][ T30] dump_stack_lvl+0xe8/0x150 [ 411.708859][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 411.708890][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 411.708916][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 411.708951][ T30] sys_info+0x135/0x170 [ 411.708978][ T30] watchdog+0xfd3/0x1030 [ 411.709019][ T30] ? watchdog+0x1c9/0x1030 [ 411.709057][ T30] kthread+0x389/0x470 [ 411.709086][ T30] ? __pfx_watchdog+0x10/0x10 [ 411.709116][ T30] ? __pfx_kthread+0x10/0x10 [ 411.709146][ T30] ret_from_fork+0x514/0xb70 [ 411.709173][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 411.709197][ T30] ? __switch_to+0xc79/0x1410 [ 411.709232][ T30] ? __pfx_kthread+0x10/0x10 [ 411.709262][ T30] ret_from_fork_asm+0x1a/0x30 [ 411.709307][ T30] [ 411.709316][ T30] Sending NMI from CPU 1 to CPUs 0: [ 411.819654][ C0] NMI backtrace for cpu 0 [ 411.819673][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 411.819693][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 411.819705][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 411.819730][ C0] Code: 0b 7d 02 e9 c3 f8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 b1 1f 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 411.819745][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000242 [ 411.819761][ C0] RAX: 00000000006bcc23 RBX: ffffffff819a845a RCX: 0000000080000001 [ 411.819775][ C0] RDX: 0000000000000001 RSI: ffffffff8dfaf9f9 RDI: ffffffff8c28b9e0 [ 411.819788][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 411.819801][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 411.819813][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 411.819826][ C0] FS: 0000000000000000(0000) GS:ffff88812528b000(0000) knlGS:0000000000000000 [ 411.819841][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.819853][ C0] CR2: 00007f712310364e CR3: 000000000e74a000 CR4: 00000000003526f0 [ 411.819870][ C0] Call Trace: [ 411.819878][ C0] [ 411.819885][ C0] default_idle+0x9/0x20 [ 411.819907][ C0] default_idle_call+0x72/0xb0 [ 411.819931][ C0] do_idle+0x36a/0x5f0 [ 411.819955][ C0] ? __pfx_do_idle+0x10/0x10 [ 411.819981][ C0] cpu_startup_entry+0x43/0x60 [ 411.820001][ C0] rest_init+0x2de/0x300 [ 411.820026][ C0] start_kernel+0x38a/0x3e0 [ 411.820047][ C0] x86_64_start_reservations+0x24/0x30 [ 411.820070][ C0] x86_64_start_kernel+0x143/0x1c0 [ 411.820094][ C0] common_startup_64+0x13e/0x147 [ 411.820127][ C0] [ 411.996492][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 412.003367][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 412.012498][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 412.022596][ T30] Call Trace: [ 412.025907][ T30] [ 412.028871][ T30] vpanic+0x56c/0xa60 [ 412.032894][ T30] ? __pfx___schedule+0x10/0x10 [ 412.037775][ T30] ? __pfx_vpanic+0x10/0x10 [ 412.042316][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 412.048520][ T30] panic+0xc5/0xd0 [ 412.052276][ T30] ? __pfx_panic+0x10/0x10 [ 412.056735][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 412.062144][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 412.068332][ T30] watchdog+0x102c/0x1030 [ 412.072797][ T30] ? watchdog+0x1c9/0x1030 [ 412.077247][ T30] kthread+0x389/0x470 [ 412.081340][ T30] ? __pfx_watchdog+0x10/0x10 [ 412.086046][ T30] ? __pfx_kthread+0x10/0x10 [ 412.090670][ T30] ret_from_fork+0x514/0xb70 [ 412.095285][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 412.100414][ T30] ? __switch_to+0xc79/0x1410 [ 412.105118][ T30] ? __pfx_kthread+0x10/0x10 [ 412.109747][ T30] ret_from_fork_asm+0x1a/0x30 [ 412.114551][ T30] [ 412.118275][ T30] Kernel Offset: disabled [ 412.122611][ T30] Rebooting in 86400 seconds..