last executing test programs: 18.593057053s ago: executing program 3 (id=3825): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44005}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 17.975652492s ago: executing program 3 (id=3830): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20) (async, rerun: 64) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffff60, 0x0, 0x3, 0x2, 0x7, 0xffff}, &(0x7f00000000c0)=0x20) (async, rerun: 64) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, r1, 0x1, 0xfffffffe, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) (async) r6 = socket$l2tp(0x2, 0x2, 0x73) getsockname$l2tp(r6, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, r5, 0x1, 0x70bd25, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4000}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000850}, 0x20044004) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r3) sendmsg$NFC_CMD_DISABLE_SE(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r8, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044110}, 0x20000010) (async, rerun: 64) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 17.777384148s ago: executing program 1 (id=3832): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817d0000000024001280110001006272696467655f736c617665000000000c0005800800030007000096140003006272696467655f736c6176655f30"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x40) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in6=@loopback}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x4}, 0x5) readv(r7, &(0x7f0000000340)=[{&(0x7f0000000100)=""/162, 0xa2}], 0x1) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002240)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x236}, @TCA_POLICE_TBF={0x3c}], [@TCA_POLICE_PEAKRATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x10, 0x7, 0x1009, 0x5}, {0x400, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x1, 0x42}, {0x3, 0x4, 0x0, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x84000000}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40) 17.617836085s ago: executing program 2 (id=3835): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r2 = socket$unix(0x1, 0x2, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x1, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, r5, 0x401}}, 0x1c}}, 0x41d6b02d55468d44) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r7, &(0x7f00000004c0)}, 0x20) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r8 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r9 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x2, 0x200, 0x9, 0xa54, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4094) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r6) 17.43643311s ago: executing program 1 (id=3837): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="140002"], 0x48}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @local}, &(0x7f0000000140)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x128, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x88, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) 17.435660945s ago: executing program 3 (id=3838): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYRESHEX], 0x0, 0x4a}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESOCT=0x0, @ANYRES16=r1, @ANYRESOCT=r0], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x4, 0x0, &(0x7f0000000180)) 17.329357413s ago: executing program 0 (id=3839): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000001000000000300012801d00010062726964676500ffff05090700070000000a0014000980c200000d000000000000000000000000006818f2239e08d4ca8439b6af0ca9bbae6412a6c58df283292ed482fd534599dd973160a9c1197f3be1b05e84101f004cf8838b6610fb78cba40af6af1e20053ce61db0da356e3781a5178b2e954ed4f87c34ed8f80b6f27e0a294588cf2cc7de01d553e1b90595be199c7c00"/174], 0x50}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 17.309895639s ago: executing program 3 (id=3840): socket$packet(0x11, 0x3, 0x300) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000040)="259a53f271a76d2686dd4c6588a8", 0x0, 0x0, 0x2a0, 0x0, 0x2c, 0x0, 0x0, 0x25f73fcdfe801216}, 0x50) 17.250657994s ago: executing program 1 (id=3841): r0 = socket(0x10, 0x3, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x110, 0x14, 0x400, 0x0, 0x0, {0x23, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xf9, 0x1, "b708a22be039a2a3036c4b95aeaf6220648b57d5c1df33e1261e2fd0381ed080bd2494091964c00107203e6443c4704627075ac0804b9db8fec6b7cd3ea8a2570902f2bdf007738aaf70f9ab01000000c925de06a348299d38d3604250525f3d432b6223a46ce51297568dcd9314b1fbf600279ca48c987d6527b4fbe1a78ea3cd36488e224b2b4ccf6b46aa291bb43c29a4bb8d4072261769f786d501b8d8ed237eec7d9ac231581dbf35f47ed9529b432741d6cc2e2113db787cea74a1f3eac3efaa16896cdc54d50dff4f48caa0a7c8c96438e2d7893e8e00ad38268780a84711244f3537637fd84dcfc54baedd000000000000"}]}, 0x110}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 17.250164352s ago: executing program 2 (id=3842): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) (async, rerun: 64) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async, rerun: 64) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r4, r0, 0x4, r0}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000071102200000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 17.202247775s ago: executing program 3 (id=3843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r1 = socket(0x840000000002, 0x3, 0xff) socket$inet6_tcp(0xa, 0x1, 0x0) gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000240)="a905000000007464000100000001000000e5c0", 0x13}, {&(0x7f0000000180)="82d903bfcb8484b98931c6c599ed9cf57c", 0x11}, {0x0, 0xb00}], 0x3}}], 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800a00010072656469720000001400028008000140f5ff000e08000240040000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ac3f81b533ee47adb9f7de067f072a2e2483cddf2aac45f16371ff7a8ed"], 0x7c}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000cd1c00000200119078000000000000000000004e20009c907801000000000000007ba6e24b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307ff472ab9cdb042d2e43fcbb2c5a57df67d544af6e8dafe09"], 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r3], 0x590) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10000, 0x0) 17.183026033s ago: executing program 0 (id=3844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x8911, &(0x7f0000000000)="37c4a5e33a6081f2a3fcc30a2ea92ef80f6427c344d1178a1c43ca4f0000ec67b9f27cd83b08959c0e471c4ae78b9cc4c7603c7a040782f3c379a03019e3bfd92533743c915077dd984784f531853d184c539dcac54ff2e955ba3fd1c00b016be57263b9695d15c56bbfcc195f2becfab2fc273ea8aee645f9062c6ac6c6c02f59935620d42a59a7e285c4e602b45acbf3e1bfd871e98e4f37b281b5e13b55a48e24a9981b78fe161a9de127f5b2c8ae0a12cbc189b6a1f44e298ff0acca36aac1967ea538fb4d8ca3ddf9884b543d868eac5217ad9b6e5c0f7bba6311f4b36020ec81e814f17062e2d5766abba3d757582a9b922b726173db7a852dc7983fdc") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x4f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0xa]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r9, 0x407, 0x0, 0x0, {{}, {0x0, 0x4000}, {0x8}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0xb64, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x9, 0x1b}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xb34, 0x2, [@TCA_CGROUP_EMATCHES={0x248, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1b8, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x651e, 0x2, 0x3}, {0x9, 0x5, 0x0, "1dd9a74f18"}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x847, 0x4, 0x800}}}, @TCF_EM_IPT={0x2c, 0x2, 0x0, 0x0, {{0xff, 0x9, 0x2}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}]}}, @TCF_EM_CONTAINER={0xd4, 0x2, 0x0, 0x0, {{0x3993}, "28225bbdd9500f2dfe40376d68159169c8f3b0d5d87e054488a7b96d3d7f9883eb0c08e35253a7cc05c485d044dae0b21242b38ac01ae7725908eba530c27735eb2a97c678c251650d2dcb081f7a796e342bd000f978b3cc87ffe9290b3e6a637c63972b8f5058c40104eddb5e52254dbb63ac06daa2b90571c994d555dcfd0f737b0583fcea3abe120094d212e31d4f5c4cea9e9acd6075a605d088ebe65a0c5845578431b6a8ddb738052139412767d1ba6f04184a427fe0bb9bf487e31355a774c37b97691c17"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3e40, 0x3, 0x7f}, {0x2fd8, 0x229a, 0x7fff, 0x4}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0xfff9}, {0x81, 0x7, 0xffffa3d9, 0x8}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xb, 0x1, 0x1}, {0x4, 0xf, 0xbc75, 0x4, 0x9}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7, 0x8, 0x1e}, {0xffffffffffffffff, 0x0, 0x1}}}, @TCF_EM_META={0x30, 0x1, 0x0, 0x0, {{0x81, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="161db0485951", @TCF_META_TYPE_VAR="94a3980f7f"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1c, 0xc, 0x1}, {0xcff, 0x0, 0x1}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x18}}, @TCA_EMATCH_TREE_LIST={0x7c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x78, 0x3, 0x0, 0x0, {{0x3, 0x0, 0x5}, "996ff2298819fb1333196f8e98913a0c4fe1ae29a1e71da1c6f4f85d9fb90895fc75481412376f99327692a68ec7cfaec513f4ebc57d3cc4b70d18cc417f289814e078ed60b8712f5bad696f243474948692ee012f1e2d2d72977c10f734cca1d1f25d45ce306cd8c46f"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}]}, @TCA_CGROUP_POLICE={0x4}, @TCA_CGROUP_EMATCHES={0x338, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x31c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x94, 0x3, 0x0, 0x0, {{0x8}, "25541c2227dcf804732e60f10aa09a341b8211b3ab12123b6b6bab065801db070a056c2ce5d56790a34d7e0043e8482d1e66ba861c2434f4049c561eabed43daf983157836eb6abe4606a7f1b0816f4ba2e930ab0c10be7aa30eadef1c97d2ed2f19ccbbe1f53b93ac43f98beba72c67dc64e686bb65376cfb175cb61407fffa4e9d62dee543"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x1, 0x1, 0x8000}, {0xc0, 0xe57f, 0x7, 0x0, 0xc, 0x0, 0x1}}}, @TCF_EM_META={0x84, 0x2, 0x0, 0x0, {{0x88, 0x4, 0x6}, [@TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="de4da95657", @TCF_META_TYPE_VAR="d7b4", @TCF_META_TYPE_VAR="aa3ed145b155ca"]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="aa5b3dff44ff163fc6", @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x4, 0x2}, {0xfff, 0x30}}}, @TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="34ad537e4710f7", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0x25, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="d7921b77752e", @TCF_META_TYPE_VAR="8cdc09", @TCF_META_TYPE_VAR='H}x\x00', @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x5]}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0x4}, {0x3, 0x88, 0xe, 0x3, 0x3, 0x2, 0x2}}}, @TCF_EM_META={0xcc, 0x1, 0x0, 0x0, {{0x2, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x1, 0x2}, {0x0, 0x2, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x82f, 0xa, 0x2}, {0x8000, 0x4d}}}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="1b63f77d5d99da6e03"]}, @TCA_EM_META_RVALUE={0x16, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR='2', @TCF_META_TYPE_VAR="55ca1d", @TCF_META_TYPE_VAR="cb4dcf9c716886601f70"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x40, 0x7, 0x2}, {0x6, 0x10, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x8, 0x2}, {0x9, 0x1, 0x1}}}, @TCA_EM_META_RVALUE={0x2b, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="59fa64fae9173397d0", @TCF_META_TYPE_VAR='r', @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="e5b6", @TCF_META_TYPE_VAR="cd", @TCF_META_TYPE_VAR="d63d27243d1ab9", @TCF_META_TYPE_VAR="84f17e3e", @TCF_META_TYPE_VAR="36de4327e9081d", @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="ef", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0x21, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="e0aa", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="c87d75640f3aef", @TCF_META_TYPE_VAR="4778a04de48260b8"]}]}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x5, 0x2, 0x4}, {0x7, 0x7, 0x2, "9ad566f5163d78"}}}, @TCF_EM_CONTAINER={0xc4, 0x2, 0x0, 0x0, {{0x8, 0x0, 0x1}, "70037a97fa7c1e858257b342f02679771b90666273fba5959c9884df2c68865dc97985118a8bfed689c376faf15b946d4100477c40d90ad0533653d5fb28f8dd1450ebf4a5c5bcf36fb82fa87d0354b96b7c5562253f52ba21f0468efaadf9c8712d753f1b9b7b7c6bbc3b242bdf4989ffc413b1a1937fc66d1127dd3b2c99fcad0caf6517902cc6368e7b2e381e4ca00458bbcd1294916b346c278e6a571c1fa2b4fc7a3fb66b0cfb009ca071127e054eb61999e5f47a78"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x6}, {0x5d53, 0x1, 0x3, 0x4, 0x8, 0x1, 0x2}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x8, 0x8, 0x6}, {0xffffffffffffffff}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x143}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}]}, @TCA_CGROUP_POLICE={0x488, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x2, 0x48, 0x8, 0x6, 0xa4ed, 0x7ff, 0x4, 0x1ff, 0x4, 0x7, 0x0, 0x2, 0x5, 0xffff, 0x27, 0x7, 0x1, 0x3, 0xb468, 0x2, 0x7f, 0x1, 0xd, 0x4, 0x7, 0xdc8, 0x0, 0x80000001, 0x8, 0x6daf, 0xfc000000, 0x0, 0x8, 0x3, 0xbb3, 0x5, 0x584, 0x3, 0x7, 0x7d5, 0x5, 0x3, 0x5, 0xff, 0x3, 0x3, 0x6, 0x0, 0x6, 0xffff, 0xc, 0x8000, 0x200, 0x2, 0x5, 0xe568, 0xff, 0x8000, 0x0, 0xa05, 0x401, 0xb, 0xfffffffe, 0x3, 0xfffffff8, 0xd, 0x2, 0x4, 0x4, 0xffff, 0x0, 0x7f, 0x9ef45dc0, 0x41000000, 0x9, 0x4, 0x0, 0x732, 0x81, 0x8, 0xffffffff, 0x0, 0x101, 0x7, 0x7, 0x64, 0x756d, 0x6, 0xdf, 0xe, 0x10, 0x7, 0x6, 0x40, 0x1, 0x0, 0xe, 0x7, 0x865, 0x1000, 0x10000, 0x7, 0x3, 0x4, 0x10000, 0x5, 0x50000, 0x7, 0x7, 0x6, 0xba2, 0xc0, 0x0, 0xc3d, 0x2, 0x1000, 0x0, 0x8, 0x5, 0x95e0, 0x0, 0x1db, 0x3, 0x3, 0x8, 0x5, 0x7ff, 0x711, 0x3, 0x9, 0x69b5, 0x3c, 0x80, 0x3d4, 0x7, 0x3, 0x843, 0x9, 0x7, 0xf, 0x3, 0x139a, 0x3, 0x9, 0x1, 0x0, 0x978, 0x0, 0x9, 0x101, 0x3, 0x5, 0xffffffff, 0x5, 0x5, 0xc9c7, 0x4, 0xfffff976, 0x6, 0x7, 0x1, 0x14000, 0x5, 0x1, 0x80000001, 0x1, 0x1e3, 0xa, 0x7, 0x9, 0x80000000, 0x5, 0x2facc1f4, 0x4, 0x10, 0xc, 0x9, 0x1, 0x1, 0x3f, 0x9, 0xb3c, 0x4, 0x0, 0x80, 0x2, 0x10000, 0x5, 0xc95, 0x3, 0x0, 0x5, 0x2400000, 0x7, 0x7, 0x3, 0x5, 0xfffffffd, 0x76e, 0x5, 0x6, 0x2, 0x0, 0x8, 0x2, 0x2, 0x3, 0x4, 0x6, 0xffffffff, 0x7c, 0x0, 0x7, 0x7, 0x100, 0x80000001, 0x9, 0x8, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x33, 0x8, 0x27, 0x3, 0x4, 0x3, 0x9, 0xc, 0x2, 0xc, 0x100, 0x80000000, 0x1, 0x2, 0x8, 0x459, 0x3, 0x1, 0xfffffff7, 0xa, 0x9, 0xfffffffc, 0xffff8000, 0x1, 0x8, 0x200, 0xffff, 0x8, 0x2, 0x2304, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x4, 0x7, 0x0, 0xbe1a, {0x0, 0x0, 0x9, 0x1, 0x2, 0x10000}, {0x39, 0x0, 0x1, 0x0, 0xf8c, 0x1}, 0x8, 0x5, 0x1000}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000000, 0x9f, 0xd0, 0x3, {0x0, 0x2, 0xe, 0x0, 0x4, 0x6}, {0x5, 0x2, 0x200, 0x7fff, 0xd, 0x1}, 0x40, 0x800, 0x8}}]}, @TCA_CGROUP_ACT={0x124, 0x1, [@m_bpf={0x120, 0x1a, 0x0, 0x0, {{0x8}, {0x80, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x54, 0x4, [{0x2, 0x6, 0x6, 0x5}, {0x4, 0x4, 0xdc, 0x1cb7}, {0x100, 0xfd, 0x3, 0x10000}, {0x36, 0x7, 0x10, 0xd}, {0xf0, 0xff, 0xf7, 0x2}, {0x8000, 0xe, 0x4, 0x9}, {0x425, 0xe, 0x1, 0x9}, {0xf, 0x1, 0xc2, 0xffff}, {0x4, 0x1, 0x7, 0x80000000}, {0x9, 0x9, 0xc, 0xd3e}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_FD={0x8, 0x5, r8}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}]}, {0x7b, 0x6, "b28f7baec868062bf8e9b72debef2b998ac290a3363ba2be5fd74e55a211c4e0fdab1532b31e4fd62eb7874c1051e4ada3ed60014ea29882fe6ec913c082a000d2a6e54129d77fe42da33376ee755de0f7e9d390c5f30aaeb33e86efa770083d39417e429a7410b209bcf992b0fffbe0e7af03e3d162b7"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xb64}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x40040}, 0x4004000) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 17.099935984s ago: executing program 1 (id=3845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x20, 0xa, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004840}, 0x20004810) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f00000001c0)={0x675, 0x5}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x9, @mcast1, 0x6}}, {{0xa, 0x4, 0x0, @loopback, 0x8b2}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @loopback}}]}, 0x190) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r3, 0x1, 0x4d, 0x0, &(0x7f0000000040)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000240)={{0x2, 0x4e24, @multicast2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x6, {0x2, 0x4e20, @local}, 'bridge0\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0x7, 0x1, 0x7fff, 0x1, 0x4, 0x5, 0xa4, 0x80000000, 0x7, 0xb69, 0xc1, 0x6, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x80, 0xbed4, 0x1623, 0x8000100, 0x3, 0x2, 0x11000, 0x808, 0x5, 0x79b, 0x2, 0xf3b, 0x3, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa08602, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8f, 0x5, 0x2af, 0xf7, 0xfffff0df, 0x1, 0x6, 0x9, 0x7, 0x7, 0x4009, 0x6b000000, 0x4, 0x100202, 0x8, 0x752, 0x0, 0x3, 0x0, 0xa7, 0x2, 0xffffffff, 0x6, 0x8, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x100000, 0x83, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0x136, 0x2a2, 0xffffffff, 0xba4, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x8, 0x8, 0x4, 0x80000000, 0x401, 0x66ca, 0x80000001, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) r5 = socket(0x11, 0xa, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r5) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00060008"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x1a0, r6, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4f}, @NL80211_ATTR_REG_RULES={0x16c, 0x22, 0x0, 0x1, [{0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xedaa}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffff801}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x34d00000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xdf8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x200}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x631}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x100}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x50f}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x424}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x800}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xd91}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xbee6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 17.038669485s ago: executing program 2 (id=3846): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0), 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={&(0x7f0000000000)="9e", &(0x7f0000000940)=""/4096, &(0x7f0000000100), &(0x7f00000001c0), 0x1, r1}, 0x38) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x13, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x328}}, {{&(0x7f00000003c0)=@in={0x2, 0x1000, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000580)="b60582c414acdfb56c3e32f0d873345a115362305853c56225afb7a06c4278a19727089fbb1486659ea29cc51a9b75f81a84d2e23ea2ea969051417ea0b096f69227099de01b8ef80389119dce557d65c1a61744cf529800f288872bdcbf922bd5d00f2fd2a6333236a9970c770c4d607147c9728273ec7be7cb9dd3e29ffac1e09bb961b2f8bf8396c2b0094b100ec989fce7908824f284a9a647d85ccbf5a1e3178b82d7131816053f680c5158b12924027bfe08fb3157262e1e356437d4addb9b097f594e99c3f03a0df2ef0cb81eae2c561e4419757e7709ea64bf6ca78b3976e6a451b8a0c8797c3f4419", 0xed}, {&(0x7f0000000680)="826627d8c7dd54c1154dfeab4e86cd9457c89f417d64091ada7d3c601bd075418530eba3e69311b9ac1a40a47c96dbc1a9ad16c75d507b804be9b915c4e81dda0362155f1b1fc0884ff7324dbf17fa3cce5255c00fa2456183c544a7900274092d63ec942f620543080562cc79abcd7ac2576e564cb0bc47affd8da53b88f843c6cd87abadec7b91377f37784518c9cfcd3f7b548672152f565b84a4c447889b26e2e3470e4016ca470f8bd192b83ff7891ca18160d3bbf7baa91d9c58c2fab09fe07f423209e0eb4d3392e1d000af14e341c463f56b6c961673c9b54919bdd15c72ec6069c15e18108b3e4b86cb6340", 0xf0}], 0x2, &(0x7f0000001940)=[{0xb0, 0xff, 0x6, "acb65c4a550cdd245eedcdd245c7dc432d4a5b277a407729c1d044edc6e71dc355b73c27d25471532f0ee00f9727c7d36e66a29ac76acbdda64479530fe1a0ee4611a7b21c51b59fd4f6a94920e70500ee73483e957c63aff151fd531f8995ecb7e238592b3e0477dda4cc684980def80def2a0fb02800400e1772813bf53b40ad06dfcd2487c7aa1113e2f7669dfae8b32a8f6bce6c42c033511a33d345"}, {0x20, 0x10d, 0x6, "a58098da25555b3e1b"}, {0x70, 0x0, 0x8001, "27101d009ea06071d3f9d4ad7f42d5f95beaedd080ae0f51e9663b1694e5400aee1d61215badb347d7e1e65361b447ac5443db9e6c16d49f582844f5dbc0958a5c9594ec3dccfab6c44bc8ba1618a42c76934d9973d6d8e3f13c"}, {0x60, 0x10f, 0x5451, "725a19f6730bfc4c54980293d73051adc0ecf3fe1b1d8917d48b8c15cef0e6aee45325bb823d74a00d96d24a1e98c0a36d409d6f258965010165def5af666e434003b3674b52cbd81b"}, {0x60, 0x115, 0x96, "a5aa9baf6d4e755afa540e9451c8c48dc2df72d11b6fb08ce3ece41725925fcbb07b62e3068e2ef2802e886280bca112662104690ff8df36a960315c3cd28c6ac53f6a28c9646b7fafc4"}, {0xa0, 0x101, 0x1, "df580cf7ad21904183aa0de71082542db49d075abd3d65f77395cb5e8522b7ed2e60d70239b9ec113dafe6590bf3dddf0280505de2df6ff38c05679228429c8d1d09de4d5b8a8042836334b5fdef7143ec7af2190aecd228c2269f1c2219e4093ab022066eb4dff02f6a3cc0466512695f06c491bb6e1f05038a596910e237cb717ffc913ef2f5c2f687"}], 0x2a0}}], 0x2, 0x44010) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1900000004000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000003e94db5687c6ba024939fff7fa5255c7c039ec49b4bf1c96f77f0d352d09cc4a9cfe144df636f8da4f51faf3f02bb0991e1807316e937b8bd212b2a9d7f5bda98a7253952c58423adf3ac0b1689962c65f4ac97accf0"], 0x48) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r4, &(0x7f0000000100)}, 0x20) bind$bt_l2cap(r3, &(0x7f00000001c0), 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x5c, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) listen(r3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$sock_ax25_SIOCDELRT(r8, 0x890c, &(0x7f00000002c0)={@default, @bcast, 0x8, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, 0x0, &(0x7f0000000040)) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000001c00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x1) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000200025a729bd7000fddbdf250a0000cdff0000010200010008000600000000000c0014008f988e090bc0ea3f"], 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, '\x00', [{0xb, 0xf11, 0x81, 0x33, 0x10000000009, 0x1003}, {0x401, 0x3, 0x403, 0x0, 0x8, 0x7}], ['\x00', '\x00']}) 16.826785505s ago: executing program 0 (id=3848): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d0424029f5d49b04697a4", 0xfffffffffffffe20, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x88f7}, @void, @eth={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @broadcast}, {0x8000, 0x8100, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x5865, @void}}}}}}}}, 0x32) 16.799425097s ago: executing program 2 (id=3849): syz_emit_ethernet(0x42, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb000000000190780a010106ac1414aa07032b0008000000001414435ec3a0508cef0cff00890000ac1414bbac1414bb"], 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffff7fc}]}, &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)='%pI4 \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r1, &(0x7f0000000140)="542d285af654b933ea5762150f1c14fd07a37ba8c7560fa09242e8968573ba6470ae8671ebf94fc2c6f7d2609fdd7e8f2f5661c68fa9706f2e2123757ba9b5f5fb1785ab72f5711a30cd3094684378564033e7537333ef89b75329cabec914f03e9991ceca3fcc982c646fb22ca8452cb7680f96d3f47043c878ed33b6bc4f6f44662c6f8237e66a4cda989e99422ed9e44d8ac538cfd294c751b54c554633986640b36045ecbd41", &(0x7f0000000300)=""/34, 0x4}, 0x20) 16.798563135s ago: executing program 1 (id=3850): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000040000100fcff0700040000000100000004004880200001801c00108018000b8008000100000000bb0c003300060000000000000008000200", @ANYRES32=r4, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x204}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000804}, 0x8804) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@func={0xa, 0x0, 0x0, 0xc, 0x5}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x2, 0xffffffffffffffff}]}, {0x0, [0x30, 0x0, 0x0, 0xe1, 0x3e, 0x30, 0x2e, 0x30]}}, &(0x7f0000001300)=""/4096, 0x3e, 0x1000, 0x1, 0x5, 0x10000, @value=r5}, 0x28) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000791204000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0x10fc, 0x0, 0x10000000, 0x8}, 0x1c) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0xa08e}, {r6, 0x14c8}], 0x3, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {0xa}, {0xfff2, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xf0, 0xa}}, @TCA_RATE={0x6, 0x5, {0xc, 0xbc}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 16.770045923s ago: executing program 4 (id=3851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x90}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000140)="01020000010006", 0x7) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0xd1383000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r7, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r7, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0xfffff000) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r8 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r9, &(0x7f0000003f00)=[{{&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000001480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}], 0x18}}], 0x1, 0x800) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r10, 0xc040ff0b, 0x0) 16.706887138s ago: executing program 2 (id=3852): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="ddbe"], 0x54}}, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000002180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bpf$ENABLE_STATS(0x20, &(0x7f0000002140), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x1}]}}]}, 0x44}}, 0x24004000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, 0x0, &(0x7f0000000180)) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r4, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d", 0x1c}], 0x1) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70600007e0476333d30f9fc1c00000000000000000c000000b7000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) readv(r4, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) sendmmsg$sock(r0, &(0x7f0000002040)=[{{&(0x7f0000000080)=@can={0x1d, r3}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="ed9ae90694a359b5a04f54c9f96c2f74772d99ae1b0b52bc7bc9d1627bac9428f864788c64230e8a385b941143a5052c2b255f620e5db5e4962c8377b81c86d310415957a1dada2afbde5716e6d6628ca3185f503d5cd1711e8985cf527c1e28a75f24332ede49543f968696c6380fa0d0864272d79fa651a5a9a0437335e30e47f72442bd049fb66fe8e123f519f69b566f8f0b8b42a399fe0b98f5cbedb335b95d24a8dbeda583c99c3544", 0xac}, {&(0x7f00000001c0)="13de3533ab9463dd0769107bd4f36bd23ef1a8b7876fea68ff91cf0cc5f96c665665fc87bb7837e98ad87ec2cb2bd4ba387860b0774f65b089fe44aa2b08610efa8dfbd972e72ec305071cfa291a657f8c9687166ee885ce563149726a898d3bcb06b79ae7c47e90ce5da019085333e619158bdacf92d8d9c24fca50c02d562681", 0x81}], 0x2, &(0x7f0000000280)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x401}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff8}}, @mark={{0x14, 0x1, 0x24, 0x7fff}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="5b3de5d2c1fdb71384bb0082672742a2ae319bf1004d74307cf076fa802ab653ce03f36894cca371822c7384ea799bf59da75f8390ae4f36e7b49e3753de43272f231bea3c9f652195c56e1d5775d5c8dde5393af1b41ae3e49c48d4f987101d1917c3cc64fee5481aba4f84780fcb1c21d384fb8d5242ad573a3e43f539374a745b020534a8c5976328e701fe7a99bb73e51107dda4", 0x96}, {&(0x7f0000000440)="3ee0dc8f5be57eb5ee89080c5f0d12206bf524d14bfe0cbf5491769d099c038adc28de7f0c3862d362b0b9139742b95bfa32cada8b97584c5e094b6b2b810e815197822c269b50", 0x47}, {&(0x7f00000004c0)="28fbb93b67bdacd389f26fca06020b2e45d90718f76756ffc236bf3d3b593394b7d8d94e6f33e443b551fe2dda1207d20ecb25754378a8ca8abbc2bb53e55337c81c26add63fdaa65a91acae2e0cea89c778d626fb135c069d80c8d1b2db730aec26a80e9f7344850f55dc64127aac4243929cc4984f730ec25cedfc6b8f15f5d90b78f78dba84429a79a22854914efad2145c2228061e5a05f361f0ef123aca1f51fde14d399aded74101d12d16620f37bf92cd6d7251ce6bca9bafdd650a6625e612d74aceab1ce7469fd6ba7221c1c8fab41795820ad3f5b6a157c3052bbae7db9991587bc2c6b3b6fecf", 0xec}, {&(0x7f00000005c0)="1de8327347b908c0abbcc91e36c260ad6d04d86705f3f5af159d894821c56a4d3879be83cfaa4f437a2aba3ce1358f8f46f94b90a100bce5e6cd20d7d9468e8c1aaecd64b41e010bbe05051c4eed08682d54c8848a6198c2bdd741f2182871554cf5495be17aaead9d34d5b11d6255a5d6f6f669a8d8a120f27785f22899171fd4b6a1e7c0e78f6c1aba6bcd72bf505f7f034149b049544ff676e99e90aa9d2b07f6277fa8737e30", 0xa8}, {&(0x7f0000000680)="30f6f65884b68e9eb8cea55479a2447e8f568e9771be5acea033c901d7d131b685280150324c4cd724b36233e16e25e1a0648cc39f4557da00f5bce6177f156f57bdefd135ed25c6dffd314fd18e4c0582be79978927483a1d46e892b905bcecee4844608fae5191f70aabe2f0c2a93662d9a9a872b44ba977a04d32d68ca4f86fc7d6b3f45544d9cc96ef1645684c76b849a0892105e303e8932cdde4c366da5939ada83f462d460f1d0f1834d598919c749a4c11b3998049930cb33044eafddc4300e15e", 0xc5}, {&(0x7f0000000780)="84c29f2782368fa39fb71f6d84ebaffe0e610f2ea1e32937c32d82ccabd7ad8ff057f3ccd2226bb899a884c7226d4a28b68d28f21edab238a5f276fed4f3241cd455e74e248b106f735f02e0e24b2f64c4b4e1025b16230d50413202a15ee403dc3fa70e87e7260d1b98a2ad9275dee89bbc02d641a3ca13dd0cf4a2b87850d0d18eb04029b2f9b797ab4e3ecc070281e9070350aad781adf671d0b361a978451c6b8082719147bdbe1b5fa66fc7", 0xae}], 0x6, &(0x7f00000008c0)=[@mark={{0x14, 0x1, 0x24, 0xfffffffe}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000900)="4ebdd344cf2939f774bd50f9f16218fae93a1eedce7c4ecc4309e17c94400feea3977964a95dc655c62879a18ec925d0c3f19eb6c75fd548ba168c00853d89bcc8cdcd331fa1ae4e1ad73ccc7d2f11e2a1acf1cc84d447aeb47d363fa00f1df4156f03001009bc0fe75aa411430e58fe8ad827880787b0ecf47636cfb31825ebaff51ba451cd63cb4bc93d80fe4f0495eb5860c18cd6b4a8b6d842980d9d5601f4d29c1535e95852d75800ccc4c4cf13284152f480dae8022d95b62898e41152cdb88c69a388a91fa9aea0d078450ce1bfec772aae8e04d3f55aa6ba508f5c7cf3ee56110485084271bc771979e56d5754a248cce6c06b91", 0xf8}], 0x1, &(0x7f0000000a40)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x18}}, {{&(0x7f0000000a80)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000b00)="23b1ea883640a0ac4713d8f38c43fec37dd3c8f45f8467adedbe560417b970ac39ac15926d280090710747fd05bf03a1d26f5f496dc63dfaf555a2a35fb109626d45574aed22a915255d68b498811fd3ccec02b87c495d3abdb2fc5515a0b42e53278dd32369c3fca2d3c2a08ef68063bfcc552f9af3f7e852afc1499378c2439d7686cb7bfcff79ab44389366d750fa1dccf7e51e095f43b7b6042984e8f123b790a23594faec9c04a10a7077be6db6c1d62f2c7ff1325b1a877e13cecb74266094306cd05beb89b16fe61f24bf6b6f3191b79316fba6523687aaa056c0545820f4f43f7ab06364896efd07d2a4394e9997da0234e91a", 0xf7}, {&(0x7f0000000c00)="bb574a36432a037ed238711bc4d650fdc776e81c", 0x14}, {&(0x7f0000000c40)="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", 0xfa}, {&(0x7f0000000d40)="af8837e43dbfb09bca53da24f3221ca26cfc9377664a171be7bc", 0x1a}, {&(0x7f0000000d80)="31f9854b45d79b54e7a3070303ee9f87eabc0392d86f899f33ae4c5d8143ae1f7d5135b67d6e9643224946b35562a3d364e32350c61d65f065d20a8738393de62db594d89234abafef1f9a8ee17957178fde3f64682a69b659a7736ba22a19e79397302f4f2d4cc502ea3bc808ee3844284a90c26337acca0555665ea631290e9137e979444c1aca5db04659d71afc1cb3ff82c37f2709893ee32019a3471091247726aa325331dc2018400c95ae812f66c01291663ab0c1fb85cc0b920677ec8c96b2b7ead4bc18a4938e6fe946aeb2e3ea92463ba9ca69b1307d0c34e058fb13512cb0fef58f19e583c1f8a72b61d08c366c410f1c68510e1a9b257bc2c04417e287119d8d4a0a7d46be6e1e44c460c3f24ede6b39cbdacf97076c8c71eba7598ef6512c70498bd31dc986fb95ff0669b4945fbafb41cfb43d0e1d04532a1abb81505b4a397927fb48091b0433aebf52ff14fe1c927905ea0c621d9b75a775888bf6168e9d87dad50cb6b33bc741f880f7d7f6401aeb69e1b481a2fcf5b9983881edfc3ecb663e33e1468dc398d39ba4a64d495bffdbb5fc3ea3015aea9221eb6a2e0017a31288fb191444eb8ed5e8beb3f4e496aee855daee2bd9a236781bb6c6b604e6e652e47e4306a0ccecff2eb6320d13cffcb62301c3adf76fafe40d80791692c2f1c445c6ce32f1592676d9a25ac3b38caa7cb4610ac6c1b88dfea921db002f6b059cf11ea0025d63d4e87fa6d4b08fd7d113d439a8774e18a7a3c601e67666079f56026c3ec845b9180d7e6554cb15b118d5dc1a70aa6d69b8546afe84631d969e39007f500861f729474d365eed4deec2a0c43f1730c536c49fe0b9d84a59d6b8e760a9f210660b3afd91328c1dce85183cba89216937f7eae7be49b5ad5565d65d0db22867d605a0c91d7c5cd1b419a4bccc103d697ec6007e0150397ee07d07afcbd496cc847ab10222ff2bcf962b80596b306e84b66e04766980eee34311e273eb3f15b633c8db7ba0654689193b92b15739e5a2acd2f5fb9066a0ab515feac614d3481d84116bcc970c023c95b9cc7a0328e7e7d63869b89b51c804f506be879dcca1165c7039bd6469346c66691cc69877eaab9563dac17416598c9a6493e9b867c8186194c75986b1932cb210d2090732ea4afd25111320d09205c90a4031ba60dc695298ca89e1a06ac5733afff0471b1a758323b76d5e30be708bdb39cc1d0bfd854f09fa2463d207b7b693a193b6f8b05f9dd8f7e2572028de493ecfa310d752a864cdf7f15072dd156751a6a6114bc1456c2a2fba849fcdb81ced93cbb8151a596eb275c0d10065379b73f70d99d837b368fa22278badf5425d34b25b2e78e622c07eb0fcf76058e5235dfd4b559fc0b7b3298174b3215342c7e5a1d0e43980726544a590a036b3ea07513b9fc3537749776fa48db8023b035438cc55761c3d2bd2640d52774f45ac9ba4ef13618bf87bb992e854732b1f38524dbb0045dc7d8b7782620878a6246c5b961bb7eb7c14bf871178d4d900c725eea3d517d0d565dba4239cebb57a9346917486f493c4269d21e09673aabca19a3178d6f00ee71d78d8570c371333e04e475cee0d06c6834b9ef6acc02549496ebe56e9a300f5c0f519b5e57547acec3d8f6214acbe8182c0111c2262efd5d6fbac068aa7256253223c95717df1e28c1aa7de8e580bd045df8f3251567aaa4bbf0d535a58b68ce89dbfa3f8b45917cbc4c775716de450e11d19aa656e45ac0eae4afaba0bfe7d0697bc53f29ff010f3075c6ba26de122a3ff3966c3a7e0d9b493680e0006735a20fcc42971c78de3d1d12fd5913885e5a1f39ad6db77d3653288be7e17da5376412c43950d89babab43973e5fe133a2a7e295d6d7ef26e185276cb455d308a349999d1f3dd10e1dc3d5ddfbb1ed840b7bd3b130edc373c7e7f894c50fb24c134db820e5b9dfadcdf2908044e3f6f67f893b2dbb318804d6dbf7ab2da46a775cedee4df65503371b975fb7f915ff1d6ea3fbd1b2ac80545dab1b648d093ce0c9aebd558dba60303599b4935abf6d1c240d7d646f402d0aeaf5218f5e0abac63085594e98a56b52982610252afe7115066ec8575b6854fd481f514039719814437f845eb119bb6e123c275fff1a0cc57c0c372c2ec0e773ebdc90ff5f0375a82fb7c11b1af2695a8461150075f1b9adeab0e89f6e650fc7582262f06e131c0b06c0761724ad3d2d72c4b55e6bcca6c7a142ef455c50ac1ab0efc7c1f15b5e34dbb9ce46e03fd1e28220259c706e52083017d1008758096121ce09195ac1094f57de38fa021615386822b1b2d3c635dafbaaf9515f6b01126fc177c55c04f844be5840a353dbc902771d91a11ce9232248a8e66f5583a293339df649f54a92fc73cc6e4e1b7167e80d920432bcfc5269333380db5ee4f51c0a4f3ccc10c9c05b9e0b8af2e522c16038efd9975e4eeb173e754f48b964a7cfe73f020593c53e706115c053a5a2ccdfbc1bf85761743d703c7f709620d738a8bb71e6e7c8998c52eabe20008346a0059cbd870ee8448422ac8da0c430306a03ff3051ea361b7d227c648cd2cee9aa9134047eea5774f1610918a210cd8b9187ee5da954fa1c7c9ea81aceb484864fbd29e1659e8c1839605f0bbd64a32aadef7ddb66b68c70c597aa4fd4139793d0d79e4ee0f6727e4967996717d667b9834b9b90bea9a4517b7d4f0e6f32b22806acbdb358b6154d38aaeca0fe278b32f2ba97ae7a4606eff1c66bd235f59d3681c067196bf20be2ce9e78477daf2bdef53fdff626d9326f3875b6fb6466853e92c30eaacf71b007b04fd4c92936347d37a83c209b074bb8c638052cb335adbcabc36746f6fb2b82e2ad146cf7830036071a8ad7707560ae64f72ee9c50e5081076e42700541a735b5a06058229f50a0518b0ace4cd509930ac4a805dc4969ab92f22a1f657ce8b730839134cbe83b23e6f2b09554a85bef8934e08d77532a88e9b3c415bd986ef6d1e89adf36ed757bfa3b89bae0b4a1f1b069182016d8570c75224082dbdca8462eb04882df4288a75b290a014f4f098e7950281f7e3c8394d7061040ef1a664b191cb02e53cb835e32b79c85754a1173721454bae7ee675d1584dacd4afab468f831ee3ce2bd5da697b38e6022c6b30522267ca1418fb541076d5281b8faaf784a2410a04cb3d18640f28476601b76a84c7e98257c8d11fd8fbeb5cdd1a7f06eeb0ee0eb8c18c9505fef616d90ec35be8f566982ab02f4682e04bc8f0a2d61c317983abfb523e345ad11ad7f3c260b678143bbeb5b07c212108a6ad4559b23f4ba4949e75e85ae117b7a213c24f942272791a96188718af803a31eb8ecc62c996fc5b46123982a6321a525bb0d7631fb59cc96caefba34258196e910b9c90936146cf6c8e45718b1107462a27d11f815689b24c565ae3c33489f3d78eb96b3faef8268ca204bb8152cc553b995e926d2e9c1277ed2e851c30b5ca8f21401624ad3d110121f8b09054c83604173c76b89f0a271c2508a512e7e36027f56a5450c6ccb8d9487a939488c92fe012b5d4c1ae589328fd2fedbe8330eb5ed3c7568bf43391f864cf7b014a8175d3013e897e23546e116d1294f4b10b6f8cd5f9ccf044d07ade721d6e1f997fe0ad3684c9c9a38ce839f264a527618abbc7cf0ec2dbba7661ce5219f7509ba4cbb05eba153ea2cbf65fd2cfc3249e4d2c12837408c24d44bfe90e488a782128e8a9f2e4d6481909eaf796f842931d174153afca4abe7abca24b95a306a85a08c5525f5c36c13facc72c3024df2abb34a83d81f55c928a8f9cfe0bda0c223360924822147764d3fd01fe01d5ac4a1d8e0db015204e008cb74a06e6c58645c0e951789a6c5f322b3fbf136ea66978e379d163c2e1c1d9a3a39255114e921bc57783741ce6023ce5c84eb0bc10b4e104e9ce3ed2b81a8653795a7864b665d1e9fcf843b374de8dac3a7e40774a454c59982e4a82ac84180142383c3d43ecfd6feaf272b9402a1f12ac9b8ef76d717f956ea8fb3de07b4d6ce597ed04307d0a3789d222c8867947a3a4f8b8962338d04b8701a8caddc103ee91daaf205e64c8229463062147d0f1b8b3dcea9a3e8f0d586cf0d84cc90108c19cb4e54ad42c9c6538ee35151080c2d3b57a58fc12c428b101b60bac119b8165d34b3c148b05f7e25e486b8d1618ce0ba425b585238a8c5d644b211484dd0e602f431338847cdf656feabd87793f049d5624f8028907de5e2e7a5c152bffc178faac4d58e0327b7f2aa3f835e163176256f0e9aff411c7a4b84f112d8726b1340c55f1b4789206ad5925679d6526482366f148a7ead39687b38c1a83c9988ccbbe3b9f3827db99158f9c4586f9652322295e5d45e255d4e0cf11e7dc0d90f0eccb85e3098a02fa49c44fbab112a229a6ff0e951df2ee013a23e8a5ea1e116d7a349d5c8711258351c15a03e6535ce4575ca248c1b55315d491213900ed3815c132924e08095d288c391a275d1693a494aad5a64aeffc8d2721ffbd44d8eb3b383483cd71f46260cc7cb114c5c14f3e4d5b331e0cd8afa3450f70cbe095d86512cb8e33fe109cabb4450d3d06ebccf6174b26d90c7b1799f6a6c39a88d238bac03fa1b99b093262e62381d9b84bec3f6e4026dd72380aedaf276825ee9274eea7ff54fbc3bb16442737007225a5ecfaae350a57c760c3af95bb0a3b87eb66b2006d6dd70d2d2f937fd82c2786e3fbc3cc8ad1aa46a29fbf12e7f35e2747d208c7b57e6facd8fe1a4b64442dcedf4976b93a7b42f4be6c06e417022273cb99f5a30078734b82c3d8fd33669b19c9acbea7f87414a7cd5e7e1b7f0bddb06a6c5e268f99e08baeb2c300c603da7a2a0d4ac15cc189bc7988f29734345807d863ff8a2b98dad7c7fa3417f943c844bd1f8fdf30ed19f1a9c4aee7ce247cf286c43ecf280b547d70a1d237a9159113b0869019efb628728d1df518a51d590707f38e93cb3170ad38187cd1e4dbd8aa08940b6f3b989ecc5f31e3649c2f2deb54cc5113ba7c3a68772fed4bf793f53b06617f92ccb5da1f4d4873a9725815f603b34d29f14943db433f281f807992b4c7f0030824657061150c8dc1fa34415285a474be78d8298a791d1eeab6df29408a5f355fb89e2d64be9fa2d29b7671b5f4907e820f2b30bb86c41a600a7fa0889a14bc5c94481f5d1e184a8c894dea65b255777ce398ad3b8266740eb8c592d6158e8e8784eddec3e082939311aedfe70a1bfa15463fcb14be73d2b7e6efe56ba9020afe99c0b5ccc5c83557ff9e2de6562a9ac37c8d742b162c166f41d10bd04f6a1c9b7270cd09d086756358e2157f4bc548c3ac3dbe31cfb5aa2e33cc7a6f9aac883969727b60aac63f9dd1a220b19644cd40f20809922ebffe5f15b1f4ef3a921aad46d98812181b74fcbcc3738a146c744b2000b3ebbcf9fdb8b6b05e01c3faca9850cb55bef2dd36cfe21a0164ec81b043aade01799377f2b143d4ed8c3ec413b4e4564b629567cc4652dbcebbb4780635b3b462e97b03c6dad30e9b17a1ee3fb38d66f3907e365ad66a45078bee4d152ac96c564d8cb19822b8b1d3cd617622024e8ddf4fdb42795b0216ecdaa91e554405f499b6c1fbcef7d73f7cbe3181d4349189338981c558e9ba0962b0049fa60a770c0c388f9dc668be9bb8f79314d293389035428a9548957b1f82753cad91ab3452fb7bbc93863c67335c408c9586a48435fa37bac14cde638cd453d39a37b4d14349425bdede38e099", 0x1000}, {&(0x7f0000001d80)="2523fe2d0cfab356dca7cd8492a47bb3796142b89b56f9b3ea521d124dd62311a485630149724009b212a2d610b766f5528d96c9c0788ed66faf1aabbbc40af9f8f1ecdc49ab61ab76db8fe070bf41598fd7cd311fbec29183b2c4da4716d51c340bd3ea8ed4b031eeac3932e8059fcaee1731fdd04136d0a756da4ffdf9ce7cf2563a9039cd6b591a739357f9035971d5349adb7818596cfa2c2f3b2b577739de7d0ee33258575664ce6a6d48f5704faf04e360c144ba4e9b2562685a91fdc5c1fb3b5397692a51da2950b6a8006b4d", 0xd0}, {&(0x7f0000001e80)="2be5ccb8a8fea3005b0df59704cb3416991216dcfd502798eb471b675b87abcde44f4ab8ab8c7933ce48f77d55dd98d074870f0f0b9035ded70e803c086ae8a08ca23810e06d4ce99e8f63f3e5cf14d3b286a42780294eabff28cc21e8596731a0c07a42f6b3e1466f518052127d8cf60844212355150c80bdcb6c5a4ec738e4f4e5dbd921a9d6f141d55ffad3733c1ea6ba31d7dd057f6f884dd22a41907f2bd39d7990aa2ea763e991eac899958767fc538f3313", 0xb5}, {&(0x7f0000001f40)="f45161e6502c36011891b360e34ccbb6674486411e858a18f126daadc039417f0b09e60bef401331c2451cd35a1c3ea1780960965f8f6391", 0x38}], 0x8, &(0x7f0000002000)=[@mark={{0x14, 0x1, 0x24, 0xe7}}], 0x18}}], 0x4, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710423000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 16.559164697s ago: executing program 4 (id=3853): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f00000005c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x7a0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x5, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) 16.558563737s ago: executing program 1 (id=3854): r0 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) syz_emit_ethernet(0x86, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff0180c2780000000000889078ac1e0001ac1414aa00000000004defd16d6864a910150000000000008908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99e4d0ce57abcb41f7f5c8ab8f63dd38a1bb3ce5a4bbb686710400000000000000be9d98ca816f77013a778b6c40b49ea900000000000000004327c45bf73ed9159e808ad8f535fc4e0022870001000080b9c6cf23c212a48a8387a21a7df428bd86beb2da8a4f37647b2bf1"], 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x5e) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x8}]}}]}, 0x3c}}, 0x20008000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x24002040}, 0x24000008) socket$inet6(0xa, 0x2, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) (async) syz_emit_ethernet(0x86, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff0180c2780000000000889078ac1e0001ac1414aa00000000004defd16d6864a910150000000000008908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99e4d0ce57abcb41f7f5c8ab8f63dd38a1bb3ce5a4bbb686710400000000000000be9d98ca816f77013a778b6c40b49ea900000000000000004327c45bf73ed9159e808ad8f535fc4e0022870001000080b9c6cf23c212a48a8387a21a7df428bd86beb2da8a4f37647b2bf1"], 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x5e) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x8}]}}]}, 0x3c}}, 0x20008000) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x24002040}, 0x24000008) (async) 16.511572045s ago: executing program 2 (id=3855): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080007000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000400)={0x81, {{0xa, 0x4e21, 0x8, @loopback, 0x6}}, 0x1, 0x4, [{{0xa, 0x4e21, 0x5430, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, {{0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}, {{0xa, 0x4e21, 0x5, @empty, 0x15516693}}, {{0xa, 0x4e21, 0x2, @remote, 0x8}}]}, 0x290) (async) r4 = socket(0x40000000015, 0x805, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) getsockopt(r4, 0x114, 0x271b, 0x0, &(0x7f00000000c0)) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000240)="ff02040000b5", 0x6) connect$inet6(r3, 0x0, 0x0) (async, rerun: 64) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, 0x0, 0x0) (async, rerun: 64) sendmmsg$inet6(r3, 0x0, 0x0, 0x40b00) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0xe8, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x85e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6675}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x401c011}, 0xf459ff17b29385ed) 16.46135766s ago: executing program 4 (id=3856): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000300), 0x100000cb) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socket$kcm(0x2, 0x3, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x2, 0x0, 0x1}, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x0, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f00000000c0)=0x15, 0x4) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl(r0, 0x8b32, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002300)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x215}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x2c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0) mmap(&(0x7f0000763000/0x1000)=nil, 0x1000, 0xa, 0x3032, 0xffffffffffffffff, 0xacf8d000) 16.386809649s ago: executing program 0 (id=3857): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f00000000c0)=0xfffffff3, 0x4) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f00000000c0)=0xfffffff3, 0x4) socket(0x400000000010, 0x3, 0x0) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r3, 0x8b2c, &(0x7f0000000040)) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) (async) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x800) (async) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095", 0x4a}, {&(0x7f0000000600)="e827749185fb5a1aaf6f700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306aeaa0123cc910470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58", 0xa6}], 0x3}], 0x1, 0x40800) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000300)={'pim6reg\x00', @link_local}) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0xffffff8b}], 0x2}, 0x0) bind$qrtr(r7, &(0x7f00000001c0)={0x2a, 0x3, 0x4001}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0xffffffffffffffff, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xc, 0xbc}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x80) socket$netlink(0x10, 0x3, 0x12) 16.26165017s ago: executing program 3 (id=3858): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x14}, [@FRA_DST={0x8, 0x1, @local}]}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0xa, 0x0) (async) r3 = socket$inet(0x2, 0xa, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x14c, 0x24, 0xf0b, 0x1e, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x6, 0xe9, 0x4, 0x0, 0x0, 0x1}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000007a03a575e03bc79921d3fe96ca04da94a67e8d97bdfefba085bc332432e4fe050000008370622b0e82b3fcd8613e0354ae1cf1bebc7c985bcdbf", @ANYRES16=r6, @ANYBLOB="010027bd700005000000020000000900010073797a300000000014000200776c616e3000"/46], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000007a03a575e03bc79921d3fe96ca04da94a67e8d97bdfefba085bc332432e4fe050000008370622b0e82b3fcd8613e0354ae1cf1bebc7c985bcdbf", @ANYRES16=r6, @ANYBLOB="010027bd700005000000020000000900010073797a300000000014000200776c616e3000"/46], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40840) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) 16.225226654s ago: executing program 0 (id=3859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xb, 0x1, 'cpu\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0xfffffffffffffffe) accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x58, 0x1, 0x3, 0x202, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFQA_VLAN={0x44, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x4}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x101}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xb}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8851}, 0x20008000) 16.1397393s ago: executing program 0 (id=3860): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@gettaction={0x30, 0x32, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7f}]}, 0x30}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b0400000044220a0959b34c8bcb6864ec8c7203bf00000000000200000014000480100001800c00010062697477697365000900010073797a30000000000900020073797a32000000005006d8037f67fc14000000"], 0x68}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x2c, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}]]}, 0x2c}}, 0x4000000) 15.559777431s ago: executing program 4 (id=3861): socket$igmp(0x2, 0x3, 0x2) (async) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) syz_emit_ethernet(0x82, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0xb, 0x74, 0x66, 0x0, 0x3, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x9, 0x0, {0x16, 0x4, 0x0, 0x17, 0xc, 0x65, 0x7b98, 0x40, 0x1, 0x4, @multicast1, @loopback, {[@rr={0x7, 0x3, 0x54}, @cipso={0x86, 0x2a, 0x1, [{0x6, 0x7, "abcbae4ca3"}, {0x7, 0x4, "8cfb"}, {0x5, 0x11, "bdc32e2c803418c7d6ff621df9ada7"}, {0x7, 0x8, "14abc9b4b4d5"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x48, 0x0, 0x8, [0x0, 0x80338c, 0x1]}]}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280050002000000000008000340000000000800014000000013080004400000000008000540000002"], 0x94}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280050002000000000008000340000000000800014000000013080004400000000008000540000002"], 0x94}}, 0x0) 15.480039143s ago: executing program 4 (id=3862): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newnexthop={0x28, 0x68, 0x1, 0x70bd26, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x3, 0x9}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 15.31524207s ago: executing program 4 (id=3863): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0xc080) (async) socketpair(0x18, 0xa, 0x3, &(0x7f0000000080)={0xffffffffffffffff}) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x1c, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@generic="6eec498ba7"]}, 0x1c}}, 0x0) (async) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006c40)={0x14, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x2}}, 0x14}}, 0x0) 1.248247754s ago: executing program 32 (id=3854): r0 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) syz_emit_ethernet(0x86, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff0180c2780000000000889078ac1e0001ac1414aa00000000004defd16d6864a910150000000000008908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99e4d0ce57abcb41f7f5c8ab8f63dd38a1bb3ce5a4bbb686710400000000000000be9d98ca816f77013a778b6c40b49ea900000000000000004327c45bf73ed9159e808ad8f535fc4e0022870001000080b9c6cf23c212a48a8387a21a7df428bd86beb2da8a4f37647b2bf1"], 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x5e) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x8}]}}]}, 0x3c}}, 0x20008000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x24002040}, 0x24000008) socket$inet6(0xa, 0x2, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="e10931d8640a", @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x88, 0x0, @rand_addr=' \x01\x00', @local, {[], {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}}, 0x0) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) (async) syz_emit_ethernet(0x86, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff0180c2780000000000889078ac1e0001ac1414aa00000000004defd16d6864a910150000000000008908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99e4d0ce57abcb41f7f5c8ab8f63dd38a1bb3ce5a4bbb686710400000000000000be9d98ca816f77013a778b6c40b49ea900000000000000004327c45bf73ed9159e808ad8f535fc4e0022870001000080b9c6cf23c212a48a8387a21a7df428bd86beb2da8a4f37647b2bf1"], 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x5e) (async) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x8}]}}]}, 0x3c}}, 0x20008000) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x24002040}, 0x24000008) (async) 1.20527405s ago: executing program 33 (id=3855): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080007000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000400)={0x81, {{0xa, 0x4e21, 0x8, @loopback, 0x6}}, 0x1, 0x4, [{{0xa, 0x4e21, 0x5430, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, {{0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}, {{0xa, 0x4e21, 0x5, @empty, 0x15516693}}, {{0xa, 0x4e21, 0x2, @remote, 0x8}}]}, 0x290) (async) r4 = socket(0x40000000015, 0x805, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) getsockopt(r4, 0x114, 0x271b, 0x0, &(0x7f00000000c0)) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000240)="ff02040000b5", 0x6) connect$inet6(r3, 0x0, 0x0) (async, rerun: 64) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, 0x0, 0x0) (async, rerun: 64) sendmmsg$inet6(r3, 0x0, 0x0, 0x40b00) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0xe8, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x85e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6675}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x401c011}, 0xf459ff17b29385ed) 109.087181ms ago: executing program 34 (id=3860): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@gettaction={0x30, 0x32, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7f}]}, 0x30}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b0400000044220a0959b34c8bcb6864ec8c7203bf00000000000200000014000480100001800c00010062697477697365000900010073797a30000000000900020073797a32000000005006d8037f67fc14000000"], 0x68}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x2c, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}]]}, 0x2c}}, 0x4000000) 58.96911ms ago: executing program 35 (id=3858): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x14}, [@FRA_DST={0x8, 0x1, @local}]}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0xa, 0x0) (async) r3 = socket$inet(0x2, 0xa, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x14c, 0x24, 0xf0b, 0x1e, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x6, 0xe9, 0x4, 0x0, 0x0, 0x1}}, @TCA_CHOKE_STAB={0x104, 0x2, "0c029d9a32426fae0f3ed75e15c168f9d20b54bc3788416745fa1bd74f2c7f12c8c318b261369d5e93d44db80ff5d7a440e0e29bdd79ec720b8f4a714c194bda237534057b53d42f12b1e1652f5c6fc2f3e6b4c45c227ec5817a93601590b2015e566e9543dfd0240167e75ddc666807434e15141c633b86b32e122e041f4f9cfc9534b523cc36c965b5c51e12c021d07a3fd19e84897a132ea0c8b8e45495c5815a1fd3914b8072fca1782fe48bdeb0654154a3d7706836a79965a9a40688f0ee105f0e52be8a02322e3e017e6a06ec0fabb51fd2c4d0ace8061cef929a3bdb09d2edabf42a4c726a2a4bbf3945fde351dda943f33702c2272c05e29caed9b8"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000007a03a575e03bc79921d3fe96ca04da94a67e8d97bdfefba085bc332432e4fe050000008370622b0e82b3fcd8613e0354ae1cf1bebc7c985bcdbf", @ANYRES16=r6, @ANYBLOB="010027bd700005000000020000000900010073797a300000000014000200776c616e3000"/46], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000007a03a575e03bc79921d3fe96ca04da94a67e8d97bdfefba085bc332432e4fe050000008370622b0e82b3fcd8613e0354ae1cf1bebc7c985bcdbf", @ANYRES16=r6, @ANYBLOB="010027bd700005000000020000000900010073797a300000000014000200776c616e3000"/46], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40840) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) 0s ago: executing program 36 (id=3863): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0xc080) (async) socketpair(0x18, 0xa, 0x3, &(0x7f0000000080)={0xffffffffffffffff}) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x1c, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@generic="6eec498ba7"]}, 0x1c}}, 0x0) (async) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006c40)={0x14, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x2}}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): us mode [ 335.474451][ T150] team_slave_0: left promiscuous mode [ 335.483170][ T150] team_slave_1: left promiscuous mode [ 335.494161][ T150] bridge0: port 3(team0) entered disabled state [ 335.529452][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.566118][ T150] bridge_slave_1: left allmulticast mode [ 335.583555][ T150] bridge_slave_1: left promiscuous mode [ 335.617563][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.671713][ T150] bridge_slave_0: left allmulticast mode [ 335.677450][ T150] bridge_slave_0: left promiscuous mode [ 335.692482][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.741580][T17095] x_tables: unsorted underflow at hook 2 [ 336.196565][ T150] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 336.205668][ T150] bond4 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 76:74:db:e2:2a:ac - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 336.458924][ T150] bond7 (unregistering): (slave gretap1): Releasing active interface [ 336.534677][ T150] bond1 (unregistering): (slave geneve2): Releasing active interface [ 336.575339][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.045356][ T150] bond1 (unregistering): Released all slaves [ 337.154419][ T150] bond2 (unregistering): (slave veth3): Releasing active interface [ 337.164988][ T150] bond2 (unregistering): Released all slaves [ 337.181468][ T150] bond3 (unregistering): Released all slaves [ 337.221174][ T5841] Bluetooth: hci1: command tx timeout [ 337.303492][ T150] bond4 (unregistering): (slave veth7): Releasing active interface [ 337.313926][ T150] bond4 (unregistering): Released all slaves [ 337.432087][ T150] bond5 (unregistering): Released all slaves [ 337.446109][ T150] bond0 (unregistering): Released all slaves [ 337.555467][ T150] bond6 (unregistering): Released all slaves [ 337.610191][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.681795][ T150] bond7 (unregistering): Released all slaves [ 337.697383][ T150] bond8 (unregistering): Released all slaves [ 337.711751][ T150] bond9 (unregistering): Released all slaves [ 337.824592][ T150] bond10 (unregistering): (slave veth11): Releasing active interface [ 337.835402][ T150] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface [ 337.848163][ T150] bond10 (unregistering): Released all slaves [ 337.971054][ T150] bond11 (unregistering): Released all slaves [ 338.098466][T16991] chnl_net:caif_netlink_parms(): no params data found [ 338.183636][ T150] : left promiscuous mode [ 338.340752][ T150] : left promiscuous mode [ 338.372478][T17127] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2990'. [ 338.484707][ T150] tipc: Left network mode [ 338.649454][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.708592][T17154] netlink: 'syz.0.2997': attribute type 1 has an invalid length. [ 338.767315][T17150] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 339.002369][T17160] bond1: (slave bridge2): making interface the new active one [ 339.031729][T17160] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 339.070804][T17178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.280107][T16991] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.297820][T16991] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.311775][ T5841] Bluetooth: hci1: command tx timeout [ 339.317640][T16991] bridge_slave_0: entered allmulticast mode [ 339.327608][T16991] bridge_slave_0: entered promiscuous mode [ 339.393511][T16991] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.407509][T16991] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.416066][T16991] bridge_slave_1: entered allmulticast mode [ 339.426964][T16991] bridge_slave_1: entered promiscuous mode [ 339.437255][T17131] lo speed is unknown, defaulting to 1000 [ 339.569499][T17191] netlink: 'syz.0.3001': attribute type 1 has an invalid length. [ 339.577304][T17191] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3001'. [ 339.687996][T16991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.756250][T16991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.979225][T17212] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 340.051034][ T150] hsr_slave_0: left promiscuous mode [ 340.063427][ T150] hsr_slave_1: left promiscuous mode [ 340.071083][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.081826][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.131546][ T150] veth1_vlan: left promiscuous mode [ 340.137655][ T150] veth0_vlan: left promiscuous mode [ 340.416975][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.425952][ C0] bridge0: port 3(team0) entered forwarding state [ 340.432672][ C0] bridge0: topology change detected, propagating [ 340.439528][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.446790][ C0] bridge0: topology change detected, propagating [ 340.966705][ T150] team0 (unregistering): Port device team_slave_1 removed [ 341.020412][ T150] team0 (unregistering): Port device team_slave_0 removed [ 341.370105][ T5841] Bluetooth: hci1: command tx timeout [ 341.402081][T16991] team0: Port device team_slave_0 added [ 341.423631][T16991] team0: Port device team_slave_1 added [ 341.459417][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.747519][T16991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.780066][T16991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.848816][T16991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.940411][T16991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.950894][T16991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.981531][T16991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.010894][T17250] C: renamed from team_slave_0 (while UP) [ 342.031455][T17250] netlink: 'syz.0.3010': attribute type 1 has an invalid length. [ 342.049811][T17250] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 342.317958][T16991] hsr_slave_0: entered promiscuous mode [ 342.345389][T16991] hsr_slave_1: entered promiscuous mode [ 342.361355][T16991] debugfs: 'hsr0' already exists in 'hsr' [ 342.377486][T16991] Cannot create hsr debugfs directory [ 342.499462][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.645918][ T150] IPVS: stop unused estimator thread 0... [ 343.100700][T17309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3024'. [ 343.131947][T17309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3024'. [ 343.452933][T17325] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3029'. [ 343.489724][T17325] syzkaller1: entered promiscuous mode [ 343.495695][T17325] syzkaller1: entered allmulticast mode [ 343.529797][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.795375][T16991] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 343.825634][T17338] SET target dimension over the limit! [ 343.853927][T17337] bond8: entered promiscuous mode [ 343.860386][T16991] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 343.881113][T16991] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 343.915644][T17337] macvlan0: entered promiscuous mode [ 343.941256][T17337] macvlan0: entered allmulticast mode [ 343.952013][T17337] bond8: (slave macvlan0): Opening slave failed [ 344.016311][T16991] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 344.177903][T16991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.227041][T16991] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.267888][ T6536] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.275147][ T6536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.338678][ T6536] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.346027][ T6536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.374007][T17363] IPVS: ip_vs_edit_dest(): server weight less than zero [ 344.408420][T17363] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3036'. [ 344.430287][T17363] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3036'. [ 344.569513][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.874040][T17386] Cannot find add_set index 2 as target [ 345.148778][T16991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.406975][T17417] s5ÿÿø: renamed from vlan1 (while UP) [ 345.609473][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.132823][T16991] veth0_vlan: entered promiscuous mode [ 346.150297][T16991] veth1_vlan: entered promiscuous mode [ 346.233106][T16991] veth0_macvtap: entered promiscuous mode [ 346.263466][T16991] veth1_macvtap: entered promiscuous mode [ 346.401032][T16991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.459189][T16991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.486837][ T150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.517005][ T150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.551350][ T150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.595404][ T150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.608588][T17473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3063'. [ 346.824469][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.862666][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.956474][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.981162][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.012021][T17492] netlink: 'syz.0.3067': attribute type 24 has an invalid length. [ 347.071900][T17492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3067'. [ 347.595018][T17520] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3074'. [ 347.668646][ T7911] IPVS: starting estimator thread 0... [ 347.809977][T17524] IPVS: using max 31 ests per chain, 74400 per kthread [ 347.997005][T17535] netlink: 696 bytes leftover after parsing attributes in process `syz.3.3078'. [ 348.007689][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 348.019206][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 348.030481][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 348.038651][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 348.049214][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 348.081290][T17539] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3079'. [ 348.225588][T17541] syzkaller0: entered promiscuous mode [ 348.233272][T17541] syzkaller0: entered allmulticast mode [ 348.729798][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.830949][T17578] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3089'. [ 348.865780][T17537] lo speed is unknown, defaulting to 1000 [ 348.946336][T17584] netlink: 'syz.1.3091': attribute type 1 has an invalid length. [ 348.966339][T17587] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3092'. [ 349.020337][T17587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3092'. [ 349.061289][T17584] bond11: entered promiscuous mode [ 349.066592][T17584] bond11: entered allmulticast mode [ 349.072992][T17584] 8021q: adding VLAN 0 to HW filter on device bond11 [ 349.134380][T17587] bridge0: entered promiscuous mode [ 349.142201][T17587] macsec1: entered promiscuous mode [ 349.147857][T17587] macsec1: entered allmulticast mode [ 349.156031][T17587] bridge0: entered allmulticast mode [ 349.167029][T17587] bridge0: port 3(macsec1) entered blocking state [ 349.174417][T17587] bridge0: port 3(macsec1) entered disabled state [ 349.194013][T17587] bridge0: left allmulticast mode [ 349.210649][T17587] bridge0: left promiscuous mode [ 349.642071][T17611] syzkaller0: entered promiscuous mode [ 349.652301][T17611] syzkaller0: entered allmulticast mode [ 349.725882][T17628] netlink: 'syz.3.3103': attribute type 83 has an invalid length. [ 349.769425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.092946][ T5841] Bluetooth: hci0: command tx timeout [ 350.809421][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.852279][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.170404][ T5841] Bluetooth: hci0: command tx timeout [ 352.708225][T17720] sctp: [Deprecated]: syz.3.3109 (pid 17720) Use of int in maxseg socket option. [ 352.708225][T17720] Use struct sctp_assoc_value instead [ 352.797564][T17537] chnl_net:caif_netlink_parms(): no params data found [ 352.889405][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.152574][T17537] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.172500][T17537] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.190133][T17537] bridge_slave_0: entered allmulticast mode [ 353.198180][T17537] bridge_slave_0: entered promiscuous mode [ 353.221226][T17537] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.228611][T17537] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.237861][T17537] bridge_slave_1: entered allmulticast mode [ 353.247015][T17537] bridge_slave_1: entered promiscuous mode [ 353.318307][T17537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.353519][T17537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.442320][T17537] team0: Port device team_slave_0 added [ 353.463646][T17537] team0: Port device team_slave_1 added [ 353.559094][T17537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.577792][T17537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.628165][T17537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.686296][T17537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.694363][T17537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.725172][T17537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.893662][T17537] hsr_slave_0: entered promiscuous mode [ 353.929427][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.971190][T17537] hsr_slave_1: entered promiscuous mode [ 354.000963][T17537] debugfs: 'hsr0' already exists in 'hsr' [ 354.006790][T17537] Cannot create hsr debugfs directory [ 354.150046][T17782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3122'. [ 354.252234][ T5841] Bluetooth: hci0: command tx timeout [ 354.638925][T17802] pim6reg1: entered promiscuous mode [ 354.679210][T17802] pim6reg1: entered allmulticast mode [ 354.711361][T17811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3130'. [ 354.748188][T17804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3129'. [ 354.807877][T17811] dummy0: left allmulticast mode [ 354.817342][T17811] bridge0: port 3(dummy0) entered disabled state [ 354.829054][T17811] bridge_slave_1: left allmulticast mode [ 354.835893][T17811] bridge_slave_1: left promiscuous mode [ 354.843286][T17811] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.969740][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.012188][T17811] bond0: (slave bridge0): Releasing backup interface [ 355.187734][T17835] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.3132'. [ 355.498595][T17537] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.544106][T17537] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 355.561612][T17852] openvswitch: netlink: Unknown key attributes 2 [ 355.590601][T17537] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 355.775667][T17537] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.807609][T17537] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 355.822138][T17864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.860662][T17537] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 356.009397][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.101377][T17537] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.134888][T17537] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 356.152104][T17884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3141'. [ 356.157302][T17537] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 356.257267][T17888] Cannot find add_set index 2 as target [ 356.274072][T17884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3141'. [ 356.285169][ T65] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.304188][ T65] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.351219][ T5841] Bluetooth: hci0: command tx timeout [ 356.394164][T17537] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.405784][T17537] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 356.419008][T17537] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 356.448151][ T65] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.469381][ T65] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.547301][T17897] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3148'. [ 356.661340][T17902] syzkaller0: entered promiscuous mode [ 356.666977][T17902] syzkaller0: entered allmulticast mode [ 356.785378][T17906] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3150'. [ 356.853432][T17537] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 356.874833][T17537] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 356.902984][T17537] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 356.924819][T17537] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 357.050121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.178595][T17933] bridge3: entered promiscuous mode [ 357.189109][T17933] bridge3: entered allmulticast mode [ 357.226480][T17537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.305961][T17537] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.338148][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.345446][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.365079][T17938] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3157'. [ 357.383516][T17938] netlink: 'syz.4.3157': attribute type 7 has an invalid length. [ 357.394739][T17938] netlink: 'syz.4.3157': attribute type 8 has an invalid length. [ 357.442766][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.450564][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.461221][T17938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3157'. [ 357.933243][T17964] netlink: 'syz.4.3162': attribute type 1 has an invalid length. [ 358.106522][T17974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.192257][T17984] bond0: left promiscuous mode [ 358.197211][T17984] gre1: left promiscuous mode [ 358.229769][T17984] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 358.260667][T17537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.414642][T17537] veth0_vlan: entered promiscuous mode [ 358.446734][T17537] veth1_vlan: entered promiscuous mode [ 358.498371][T17992] netlink: 'syz.3.3173': attribute type 1 has an invalid length. [ 358.523819][T17997] gtp0: entered promiscuous mode [ 358.528890][T17997] gtp0: entered allmulticast mode [ 358.602329][T17537] veth0_macvtap: entered promiscuous mode [ 358.618032][T17537] veth1_macvtap: entered promiscuous mode [ 358.627130][T17992] netlink: 'syz.3.3173': attribute type 1 has an invalid length. [ 358.648124][T17537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.662439][T17537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.697607][T17992] netlink: 'syz.3.3173': attribute type 1 has an invalid length. [ 358.718069][ T150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.734147][T17992] netlink: 'syz.3.3173': attribute type 1 has an invalid length. [ 358.745713][T18000] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.753475][T18000] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.796343][T17992] netlink: 'syz.3.3173': attribute type 1 has an invalid length. [ 358.807680][ T150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.818961][ T150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.852539][ T150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.864138][T17992] netlink: 'syz.3.3173': attribute type 1 has an invalid length. [ 358.942451][T17992] netlink: 'syz.3.3173': attribute type 1 has an invalid length. [ 359.077527][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.101642][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.155975][T18017] team0: Device ip6gre1 is of different type [ 359.231821][T18021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.242830][T18021] team0: Port device bond0 added [ 359.265306][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.291763][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.363946][T18030] __nla_validate_parse: 1 callbacks suppressed [ 359.363970][T18030] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3184'. [ 359.516696][T18042] x_tables: duplicate underflow at hook 3 [ 359.820519][T18052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3190'. [ 359.855168][T18052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3190'. [ 359.918010][T18052] gretap0: entered promiscuous mode [ 359.952050][T18052] gretap0: left promiscuous mode [ 360.228354][T18068] netlink: 516 bytes leftover after parsing attributes in process `syz.3.3194'. [ 360.293136][T18070] GUP no longer grows the stack in syz.2.3196 (18070): 200000003000-20000000a000 (200000001000) [ 360.347438][T18070] CPU: 1 UID: 0 PID: 18070 Comm: syz.2.3196 Not tainted syzkaller #0 PREEMPT(full) [ 360.347470][T18070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 360.347491][T18070] Call Trace: [ 360.347501][T18070] [ 360.347511][T18070] dump_stack_lvl+0xe8/0x150 [ 360.347546][T18070] __get_user_pages+0x2453/0x29d0 [ 360.347600][T18070] ? __gup_longterm_locked+0xc4e/0x1630 [ 360.347630][T18070] ? down_read_killable+0x1bb/0x340 [ 360.347655][T18070] ? try_get_folio+0xec/0x650 [ 360.347688][T18070] __gup_longterm_locked+0xdcf/0x1630 [ 360.347760][T18070] gup_fast_fallback+0x1d82/0x22e0 [ 360.347825][T18070] ? __pfx_gup_fast_fallback+0x10/0x10 [ 360.347858][T18070] ? is_valid_gup_args+0x11f/0x200 [ 360.347889][T18070] ? get_user_pages_fast+0x4d/0xb0 [ 360.347919][T18070] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 360.347958][T18070] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 360.347990][T18070] iov_iter_get_pages2+0x5e/0xa0 [ 360.348024][T18070] __se_sys_vmsplice+0x7b3/0x1490 [ 360.348068][T18070] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 360.348093][T18070] ? __pfx_futex_wait+0x10/0x10 [ 360.348164][T18070] ? lockdep_hardirqs_on+0x7a/0x110 [ 360.348375][T18070] do_syscall_64+0xe2/0xf80 [ 360.348461][T18070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.348497][T18070] ? trace_irq_disable+0x37/0x100 [ 360.348547][T18070] ? clear_bhb_loop+0x60/0xb0 [ 360.348601][T18070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.348648][T18070] RIP: 0033:0x7f33aeb9aeb9 [ 360.348697][T18070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.348742][T18070] RSP: 002b:00007f33afa3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 360.348800][T18070] RAX: ffffffffffffffda RBX: 00007f33aee15fa0 RCX: 00007f33aeb9aeb9 [ 360.348836][T18070] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a [ 360.348862][T18070] RBP: 00007f33aec08c1f R08: 0000000000000000 R09: 0000000000000000 [ 360.348889][T18070] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 360.348915][T18070] R13: 00007f33aee16038 R14: 00007f33aee15fa0 R15: 00007ffe4bcb62c8 [ 360.349016][T18070] [ 360.632067][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 360.640572][T18072] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.654517][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 360.666080][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 360.688487][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 360.697014][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 360.724220][T18076] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3197'. [ 360.812056][T18079] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3197'. [ 360.957928][ T5836] syz_tun (unregistering): left allmulticast mode [ 360.981562][ T5836] bond0: (slave syz_tun): Releasing backup interface [ 361.274747][ T1111] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.293485][ T1111] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.334790][T18077] lo speed is unknown, defaulting to 1000 [ 361.369157][T18098] sit1: entered promiscuous mode [ 361.390099][T18098] sit1: entered allmulticast mode [ 361.490549][ T1111] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.509488][ T1111] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.791508][ T1111] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.809900][ T1111] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.825669][T18128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3215'. [ 361.890143][T18128] team0: Port device bond0 removed [ 361.911328][T18128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.926269][T18128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.941108][T18128] bond0 (unregistering): Released all slaves [ 361.981591][T18134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3215'. [ 362.048617][T18139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3218'. [ 362.065343][ T1111] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.076712][ T1111] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.123447][T18141] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3218'. [ 362.298319][T18147] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 362.743113][ T5837] Bluetooth: hci4: command tx timeout [ 363.130779][ T1111] bond4 (unregistering): (slave gre1): Releasing backup interface [ 363.138750][ T1111] gre1 (unregistering): left promiscuous mode [ 363.224269][ T1111] bond8 (unregistering): (slave geneve3): Releasing active interface [ 363.728041][ T1111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.742294][ T1111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.752486][ T1111] bond0 (unregistering): Released all slaves [ 363.763691][ T1111] bond1 (unregistering): Released all slaves [ 363.884554][ T1111] bond2 (unregistering): (slave veth3): Releasing active interface [ 363.894594][ T1111] bond2 (unregistering): Released all slaves [ 363.910484][ T1111] bond3 (unregistering): Released all slaves [ 364.029079][ T1111] bond4 (unregistering): Released all slaves [ 364.160671][ T1111] bond5 (unregistering): Released all slaves [ 364.176732][ T1111] bond6 (unregistering): Released all slaves [ 364.192370][ T1111] bond7 (unregistering): Released all slaves [ 364.309710][ T1111] bond8 (unregistering): Released all slaves [ 364.325267][ T1111] bond9 (unregistering): (slave veth7): Releasing backup interface [ 364.335330][ T1111] bond9 (unregistering): Released all slaves [ 364.445245][ T1111] bond10 (unregistering): Released all slaves [ 364.554845][ T1111] bond11 (unregistering): Released all slaves [ 364.618366][T18176] vlan1: entered promiscuous mode [ 364.660302][T18176] vlan1: entered allmulticast mode [ 364.665521][T18176] hsr_slave_1: entered allmulticast mode [ 364.732904][ T95] block nbd0: Possible stuck request ffff888025228000: control (read@0,1024B). Runtime 60 seconds [ 364.743842][ T95] block nbd0: Possible stuck request ffff888025228200: control (read@1024,1024B). Runtime 60 seconds [ 364.755046][ T95] block nbd0: Possible stuck request ffff888025228400: control (read@2048,1024B). Runtime 60 seconds [ 364.766535][ T95] block nbd0: Possible stuck request ffff888025228600: control (read@3072,1024B). Runtime 60 seconds [ 364.820946][ T5837] Bluetooth: hci4: command tx timeout [ 364.955404][T18077] chnl_net:caif_netlink_parms(): no params data found [ 364.998672][ T1111] tipc: Disabling bearer [ 365.023616][ T1111] tipc: Left network mode [ 365.055542][T18189] syzkaller0: entered promiscuous mode [ 365.069904][T18189] syzkaller0: entered allmulticast mode [ 365.489018][T18207] syzkaller0: entered promiscuous mode [ 365.512203][T18207] syzkaller0: entered allmulticast mode [ 365.576347][T18234] __nla_validate_parse: 2 callbacks suppressed [ 365.576365][T18234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3238'. [ 365.592898][T18234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3238'. [ 365.878630][T18249] validate_nla: 27 callbacks suppressed [ 365.878652][T18249] netlink: 'syz.3.3240': attribute type 1 has an invalid length. [ 365.985312][T18256] netlink: 'syz.2.3241': attribute type 1 has an invalid length. [ 366.893057][ T5837] Bluetooth: hci4: command tx timeout [ 367.471189][T18077] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.478512][T18077] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.487889][T18077] bridge_slave_0: entered allmulticast mode [ 367.496710][T18077] bridge_slave_0: entered promiscuous mode [ 367.516599][T18245] netlink: 288 bytes leftover after parsing attributes in process `syz.3.3240'. [ 367.544768][T18077] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.572264][T18077] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.590953][T18077] bridge_slave_1: entered allmulticast mode [ 367.598922][T18077] bridge_slave_1: entered promiscuous mode [ 367.681894][T18259] netlink: 'syz.4.3242': attribute type 9 has an invalid length. [ 367.691811][T18259] netlink: 'syz.4.3242': attribute type 6 has an invalid length. [ 367.721153][T18264] netlink: 'syz.3.3244': attribute type 10 has an invalid length. [ 367.737319][T18077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.841094][T18264] syz_tun: entered promiscuous mode [ 367.865940][T18077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.882909][T18264] netlink: 'syz.3.3244': attribute type 10 has an invalid length. [ 368.012451][T18272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.206857][T18077] team0: Port device team_slave_0 added [ 368.258626][T18077] team0: Port device team_slave_1 added [ 368.464099][T18077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.486020][T18077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.566900][T18077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.644840][T18077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.675769][T18077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.721710][T18077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.976904][ T5837] Bluetooth: hci4: command tx timeout [ 369.108455][T18330] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 369.238955][T18334] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3257'. [ 369.248765][T18334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3257'. [ 369.343876][T18077] hsr_slave_0: entered promiscuous mode [ 369.365221][T18077] hsr_slave_1: entered promiscuous mode [ 369.377883][T18077] debugfs: 'hsr0' already exists in 'hsr' [ 369.393304][T18077] Cannot create hsr debugfs directory [ 369.539011][T18343] SET target dimension over the limit! [ 370.280084][T18366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3265'. [ 370.453163][T18372] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3267'. [ 371.143654][ T1111] hsr_slave_0: left promiscuous mode [ 371.156367][ T1111] hsr_slave_1: left promiscuous mode [ 371.208441][ T1111] veth1_macvtap: left promiscuous mode [ 371.226397][ T1111] veth0_macvtap: left promiscuous mode [ 371.233189][ T1111] veth1_vlan: left promiscuous mode [ 371.238554][ T1111] veth0_vlan: left promiscuous mode [ 372.315003][T18409] team0: No ports can be present during mode change [ 372.364001][T18424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3278'. [ 372.562824][T18431] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.681198][T18443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3282'. [ 372.911721][T18455] openvswitch: netlink: Message has 8 unknown bytes. [ 372.937708][T18455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.052355][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.102419][ T1111] IPVS: stop unused estimator thread 0... [ 373.138171][T18077] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 373.225966][T18077] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 373.272725][T18474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3289'. [ 373.282060][T18474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3289'. [ 373.337047][T18481] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.3290'. [ 373.347863][T18474] batadv0: entered promiscuous mode [ 373.383932][T18474] batadv0: left promiscuous mode [ 373.408764][T18077] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 373.438268][T18077] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 373.484045][T18488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3293'. [ 373.644643][T18502] IPVS: Unknown mcast interface: team_slave_0 [ 373.856663][T18515] nbd: illegal input index 2958377 [ 373.895837][T18515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3299'. [ 373.927511][T18077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.958855][T18077] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.008212][T18520] bridge0: port 3(bond0) entered blocking state [ 374.026934][T18520] bridge0: port 3(bond0) entered disabled state [ 374.048114][T18520] bond0: entered allmulticast mode [ 374.058307][T18520] bond_slave_0: entered allmulticast mode [ 374.086250][T18520] bond_slave_1: entered allmulticast mode [ 374.092287][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.133926][T18520] bond0: entered promiscuous mode [ 374.153437][T18520] bond_slave_0: entered promiscuous mode [ 374.172690][T18520] bond_slave_1: entered promiscuous mode [ 374.199185][T18524] gre0: entered promiscuous mode [ 374.229971][T18524] gre0: entered allmulticast mode [ 374.247769][ T2983] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.255071][ T2983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.312344][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.319588][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.426552][T18539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3306'. [ 374.800556][T18569] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3311'. [ 374.903335][T18579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3313'. [ 375.099943][T18589] netlink: 'syz.0.3316': attribute type 3 has an invalid length. [ 375.129504][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.134176][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 375.160898][T18077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.374570][T18077] veth0_vlan: entered promiscuous mode [ 375.464564][T18077] veth1_vlan: entered promiscuous mode [ 375.643021][T18077] veth0_macvtap: entered promiscuous mode [ 375.804952][T18077] veth1_macvtap: entered promiscuous mode [ 375.842221][T18621] 8021q: VLANs not supported on gre0 [ 375.902994][T18077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.945693][T18077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.001762][ T2983] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.047812][ T2983] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.060353][ T2983] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.069190][ T2983] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.169688][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.205103][ T5197] udevd[5197]: worker [15420] /devices/virtual/block/nbd0 is taking a long time [ 376.217437][T18642] netlink: 'syz.2.3329': attribute type 7 has an invalid length. [ 376.262541][T18642] netlink: 'syz.2.3329': attribute type 8 has an invalid length. [ 376.473009][ T6536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.500938][ T6536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.727189][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.771593][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.219397][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.438514][T18700] __nla_validate_parse: 10 callbacks suppressed [ 377.438540][T18700] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3344'. [ 377.514126][T18706] wireguard1: entered promiscuous mode [ 377.582633][T18706] wireguard1: entered allmulticast mode [ 377.886103][T18721] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3352'. [ 377.909754][T18721] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3352'. [ 377.949175][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 377.969967][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 377.978842][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 377.987634][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 377.995528][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 378.054332][T18715] ipvlan2: entered promiscuous mode [ 378.170831][T18734] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3354'. [ 378.249419][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.484144][T18745] netlink: 'syz.1.3357': attribute type 1 has an invalid length. [ 378.553724][T18751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3358'. [ 378.758758][T18754] tun0: tun_chr_ioctl cmd 1074025675 [ 378.765672][T18756] netlink: 'syz.2.3360': attribute type 11 has an invalid length. [ 378.792419][T18754] tun0: persist disabled [ 378.796964][T18756] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.3360'. [ 379.038328][T18723] lo speed is unknown, defaulting to 1000 [ 379.284126][T18784] xt_hashlimit: max too large, truncated to 1048576 [ 379.299726][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.886094][T18772] lec:lec_atm_send: lec0: Unknown message type 255 [ 379.942925][T18770] lec:lec_atm_close: lec0: Shut down! [ 379.986544][T18812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3369'. [ 379.996541][T18723] chnl_net:caif_netlink_parms(): no params data found [ 380.096610][ T5837] Bluetooth: hci3: command tx timeout [ 380.329388][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.408355][T18852] openvswitch: netlink: IP tunnel dst address not specified [ 380.466398][T18723] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.487543][T18723] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.505116][T18854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3372'. [ 380.512974][T18723] bridge_slave_0: entered allmulticast mode [ 380.529001][T18723] bridge_slave_0: entered promiscuous mode [ 380.543377][T18854] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3372'. [ 380.554684][T18723] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.580789][T18854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3372'. [ 380.590701][T18723] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.590956][T18723] bridge_slave_1: entered allmulticast mode [ 380.596302][T18723] bridge_slave_1: entered promiscuous mode [ 380.742959][T18723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.785816][T18723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.870952][T18875] netlink: 'syz.4.3378': attribute type 1 has an invalid length. [ 380.937453][T18723] team0: Port device team_slave_0 added [ 380.974982][T18723] team0: Port device team_slave_1 added [ 381.131068][T18723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.138099][T18723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.177158][T18723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.303876][T18885] hsr_slave_1 (unregistering): left promiscuous mode [ 381.353633][T18723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.367729][T18723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.399968][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.409568][T18723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.653569][T18723] hsr_slave_0: entered promiscuous mode [ 381.675687][T18723] hsr_slave_1: entered promiscuous mode [ 381.688112][T18723] debugfs: 'hsr0' already exists in 'hsr' [ 381.695795][T18723] Cannot create hsr debugfs directory [ 381.914882][ T43] IPVS: starting estimator thread 0... [ 382.019459][T18917] IPVS: using max 35 ests per chain, 84000 per kthread [ 382.173582][ T5837] Bluetooth: hci3: command tx timeout [ 382.299898][T18924] tipc: Enabling of bearer rejected, media not registered [ 382.403397][T18924] vlan2: entered allmulticast mode [ 382.408696][T18924] veth1: entered allmulticast mode [ 382.481283][T18931] __nla_validate_parse: 4 callbacks suppressed [ 382.481303][T18931] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3394'. [ 382.655003][T18723] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.692042][T18723] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.733243][T18950] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3396'. [ 382.848701][T18950] bond2: option resend_igmp: invalid value (32767) [ 382.856006][T18950] bond2: option resend_igmp: allowed values 0 - 255 [ 382.865490][T18950] bond2 (unregistering): Released all slaves [ 382.987668][T18723] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.999833][T18723] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.102962][T18723] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.113422][T18723] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.174503][T18723] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.185309][T18723] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.351311][T18723] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 383.366858][T18723] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 383.380948][T18723] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 383.395063][T18723] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 383.421087][ T5492] lec:lec_start_xmit: lec0:No lecd attached [ 383.508539][T18723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.534183][T18723] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.556908][ T2983] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.564330][ T2983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.588840][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.596103][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.812678][T18723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.861709][T18723] veth0_vlan: entered promiscuous mode [ 383.875090][T18723] veth1_vlan: entered promiscuous mode [ 383.905792][T18723] veth0_macvtap: entered promiscuous mode [ 383.916479][T18723] veth1_macvtap: entered promiscuous mode [ 383.934724][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.947850][T18723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.964009][T18723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.981834][ T65] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.992578][ T65] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.003492][ T65] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.012819][ T65] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.092953][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.102024][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.140314][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.148239][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.251525][ T5837] Bluetooth: hci3: command tx timeout [ 386.329905][ T5837] Bluetooth: hci3: command tx timeout [ 389.050950][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.062405][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5640 ms [ 389.070975][ C1] lec:lec_tx_timeout: lec0 [ 389.076237][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 394.089413][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 394.097526][ C1] lec:lec_tx_timeout: lec0 [ 394.102430][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 394.169648][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.809820][ T95] block nbd0: Possible stuck request ffff888025228000: control (read@0,1024B). Runtime 90 seconds [ 394.822178][ T95] block nbd0: Possible stuck request ffff888025228200: control (read@1024,1024B). Runtime 90 seconds [ 394.834392][ T95] block nbd0: Possible stuck request ffff888025228400: control (read@2048,1024B). Runtime 90 seconds [ 394.845920][ T95] block nbd0: Possible stuck request ffff888025228600: control (read@3072,1024B). Runtime 90 seconds [ 395.209884][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.249633][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.289666][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.329490][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.109724][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 399.117833][ C1] lec:lec_tx_timeout: lec0 [ 399.122674][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 399.369453][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.129645][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 404.137766][ C1] lec:lec_tx_timeout: lec0 [ 404.142505][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 406.071180][T19019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3401'. [ 406.080574][T19019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3401'. [ 406.274121][T19041] netlink: 'syz.4.3409': attribute type 1 has an invalid length. [ 406.478530][T19042] bond0: (slave gretap1): making interface the new active one [ 406.517101][T19042] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 406.537551][T19057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3413'. [ 406.562876][T19057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3413'. [ 406.632683][T19057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3413'. [ 406.642373][T19057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3413'. [ 406.654846][T19062] netlink: 'syz.1.3415': attribute type 21 has an invalid length. [ 406.856159][T19074] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3418'. [ 407.003237][T19077] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 407.103726][T19077] bond1 (unregistering): Released all slaves [ 407.500404][T19100] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3423'. [ 407.510973][T19100] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 407.870436][T19111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3429'. [ 408.082046][T19109] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.089910][T19109] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.330027][T19109] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 408.534956][T19121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3433'. [ 409.149701][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 409.157869][ C1] lec:lec_tx_timeout: lec0 [ 409.162783][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 409.281079][T19165] netlink: 'syz.4.3441': attribute type 1 has an invalid length. [ 411.114686][T19062] Set syz1 is full, maxelem 65536 reached [ 411.203068][T19174] netlink: 'syz.1.3442': attribute type 1 has an invalid length. [ 411.226611][T19174] netlink: 'syz.1.3442': attribute type 4 has an invalid length. [ 411.236373][T19174] netlink: 9491 bytes leftover after parsing attributes in process `syz.1.3442'. [ 411.407033][T19180] netlink: 'syz.1.3444': attribute type 1 has an invalid length. [ 411.416548][T19180] netlink: 'syz.1.3444': attribute type 7 has an invalid length. [ 411.424768][T19180] netlink: 'syz.1.3444': attribute type 8 has an invalid length. [ 411.433811][T19180] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3444'. [ 411.443456][T19180] NCSI netlink: No device for ifindex 65584 [ 411.454206][T19180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3444'. [ 411.535356][T19182] xt_TPROXY: Can be used only with -p tcp or -p udp [ 411.878748][T19167] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 411.957479][T19186] bond1: entered promiscuous mode [ 411.972956][T19186] bond1: entered allmulticast mode [ 411.990072][T19186] 8021q: adding VLAN 0 to HW filter on device bond1 [ 412.168935][T19206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3452'. [ 412.193628][T19206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3452'. [ 412.399745][T19214] veth0: entered promiscuous mode [ 412.441291][T19214] veth0: left promiscuous mode [ 413.103876][T19249] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3464'. [ 413.476399][T19236] lo speed is unknown, defaulting to 1000 [ 413.763019][T19281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3473'. [ 413.814740][T19284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3473'. [ 413.855142][T19274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3469'. [ 413.866456][T19289] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3473'. [ 414.131729][T19296] netlink: 'syz.4.3476': attribute type 2 has an invalid length. [ 414.169429][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 414.177562][ C1] lec:lec_tx_timeout: lec0 [ 414.182585][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 414.336375][T19304] sctp: [Deprecated]: syz.4.3479 (pid 19304) Use of int in maxseg socket option. [ 414.336375][T19304] Use struct sctp_assoc_value instead [ 414.360168][T19302] dvmrp0: entered allmulticast mode [ 415.522452][T19355] netlink: 'syz.3.3493': attribute type 2 has an invalid length. [ 415.648656][ T43] IPVS: starting estimator thread 0... [ 415.723793][T19369] sctp: [Deprecated]: syz.3.3499 (pid 19369) Use of int in maxseg socket option. [ 415.723793][T19369] Use struct sctp_assoc_value instead [ 415.739432][T19365] IPVS: using max 26 ests per chain, 62400 per kthread [ 416.305786][T19396] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 416.400572][T19400] dvmrp0: entered allmulticast mode [ 416.445779][T19396] __nla_validate_parse: 6 callbacks suppressed [ 416.445801][T19396] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3506'. [ 416.496436][T19407] netem: unknown loss type 0 [ 416.503254][T19407] netem: change failed [ 416.626707][T19412] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3512'. [ 416.878916][T19421] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3515'. [ 417.483302][T19454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3526'. [ 418.065726][T19481] openvswitch: netlink: Missing valid actions attribute. [ 418.119935][T19479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3536'. [ 418.142386][T19481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.210636][T19487] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3538'. [ 418.236316][T19489] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3539'. [ 418.316729][T19489] tipc: Enabled bearer , priority 0 [ 418.420400][T19496] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3539'. [ 418.444961][T19489] syzkaller0: entered promiscuous mode [ 418.479805][T19489] syzkaller0: entered allmulticast mode [ 418.493187][T19489] tipc: Resetting bearer [ 418.509138][T19500] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3541'. [ 418.526916][T19495] macsec1: entered promiscuous mode [ 418.664598][T19488] tipc: Resetting bearer [ 419.194922][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 419.203053][ C1] lec:lec_tx_timeout: lec0 [ 419.210089][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 421.157797][T19488] tipc: Disabling bearer [ 421.167751][T19478] lo speed is unknown, defaulting to 1000 [ 421.180730][T18845] tipc: Node number set to 2886997007 [ 421.506559][T19548] netlink: 'syz.4.3557': attribute type 23 has an invalid length. [ 421.673180][T19557] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.3559'. [ 421.683320][T19557] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 421.786623][T19562] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 421.849821][T19562] netlink: 'syz.1.3561': attribute type 2 has an invalid length. [ 421.903897][T19562] : entered promiscuous mode [ 422.402818][T19604] netlink: 'syz.1.3574': attribute type 10 has an invalid length. [ 422.444898][T19604] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.491957][T19604] bridge_slave_1: left allmulticast mode [ 422.497678][T19604] bridge_slave_1: left promiscuous mode [ 422.585651][T19623] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3577'. [ 422.600917][T19604] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.623437][T19604] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 422.811028][T19627] netlink: 'syz.0.3579': attribute type 39 has an invalid length. [ 422.916787][T19637] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3582'. [ 422.926282][T19637] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3582'. [ 422.958660][T19634] syzkaller0: entered promiscuous mode [ 422.964717][T19634] syzkaller0: entered allmulticast mode [ 423.201456][T19646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3584'. [ 423.663701][T19657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3588'. [ 423.918957][T19683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3596'. [ 424.102089][T19694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3596'. [ 424.219281][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 424.227416][ C1] lec:lec_tx_timeout: lec0 [ 424.233770][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 424.740413][T19721] netlink: 'syz.3.3605': attribute type 1 has an invalid length. [ 424.769733][T19721] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3605'. [ 424.794877][T19725] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3605'. [ 424.828564][T19726] netlink: 'syz.1.3607': attribute type 10 has an invalid length. [ 424.892318][ T95] block nbd0: Possible stuck request ffff888025228000: control (read@0,1024B). Runtime 120 seconds [ 424.900026][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.903679][ T95] block nbd0: Possible stuck request ffff888025228200: control (read@1024,1024B). Runtime 120 seconds [ 424.919782][T19726] syz_tun: entered promiscuous mode [ 424.924447][ T95] block nbd0: Possible stuck request ffff888025228400: control (read@2048,1024B). Runtime 120 seconds [ 424.940861][ T95] block nbd0: Possible stuck request ffff888025228600: control (read@3072,1024B). Runtime 120 seconds [ 424.994197][T19726] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 425.039148][T19726] netlink: 'syz.1.3607': attribute type 10 has an invalid length. [ 425.130394][T19726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.161487][T19726] team0: Port device bond0 added [ 425.225457][T19734] syzkaller1: entered promiscuous mode [ 425.239631][T19734] syzkaller1: entered allmulticast mode [ 425.330455][T19744] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 425.929412][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.848363][T19839] tipc: Enabling of bearer rejected, failed to enable media [ 426.907496][T19843] IPVS: sh: FWM 3 0x00000003 - no destination available [ 426.969363][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.103572][T19848] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 427.175573][T19852] batman_adv: batadv0: Adding interface: dummy0 [ 427.205573][T19852] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.292859][T19852] batman_adv: batadv0: Interface activated: dummy0 [ 427.345093][T19853] batadv0: mtu less than device minimum [ 427.370740][T19853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 427.383259][T19853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 427.395116][T19853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 427.406945][T19853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 427.418805][T19853] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 427.477735][T19860] __nla_validate_parse: 65 callbacks suppressed [ 427.477757][T19860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3643'. [ 427.499418][T19837] lo speed is unknown, defaulting to 1000 [ 427.552584][T19860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3643'. [ 427.816419][T19862] syzkaller0: entered promiscuous mode [ 427.835999][T19862] syzkaller0: entered allmulticast mode [ 427.843294][T19876] netlink: 'syz.4.3651': attribute type 1 has an invalid length. [ 427.876590][T19876] 8021q: adding VLAN 0 to HW filter on device bond2 [ 428.743982][T19906] sctp: [Deprecated]: syz.2.3657 (pid 19906) Use of struct sctp_assoc_value in delayed_ack socket option. [ 428.743982][T19906] Use struct sctp_sack_info instead [ 428.991732][T19916] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 429.063148][T19922] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3661'. [ 429.251421][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 429.259798][ C1] lec:lec_tx_timeout: lec0 [ 429.264824][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 429.886428][T19876] vlan0: entered promiscuous mode [ 429.893540][T19876] bond2: entered promiscuous mode [ 429.898824][T19876] vlan0: entered allmulticast mode [ 429.904210][T19876] bond2: entered allmulticast mode [ 429.946823][T19884] bond2: (slave bridge2): making interface the new active one [ 429.969693][T19884] bridge2: entered promiscuous mode [ 429.975177][T19884] bridge2: entered allmulticast mode [ 430.004982][T19884] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 430.059474][T19924] syzkaller1: entered promiscuous mode [ 430.078076][T19924] syzkaller1: entered allmulticast mode [ 430.089382][ C1] net_ratelimit: 16 callbacks suppressed [ 430.089404][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.169200][T19930] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 430.281168][T19932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3664'. [ 430.318050][T19936] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 430.629691][T19955] netlink: 'syz.2.3670': attribute type 1 has an invalid length. [ 430.657615][T19955] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3670'. [ 430.893578][T19969] ip_vti0: entered allmulticast mode [ 430.957989][T19973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3677'. [ 431.061840][T19977] xt_time: unknown flags 0xf4 [ 431.071672][T19977] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3679'. [ 431.129971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.293617][T19995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3681'. [ 432.179390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.953200][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3685'. [ 433.011148][T20004] netlink: 'syz.3.3684': attribute type 1 has an invalid length. [ 433.209852][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.411585][T20030] sctp: [Deprecated]: syz.0.3694 (pid 20030) Use of int in max_burst socket option. [ 433.411585][T20030] Use struct sctp_assoc_value instead [ 433.518490][T20035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3696'. [ 433.538852][T20035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3696'. [ 433.562148][T20035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3696'. [ 433.896316][T20058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3705'. [ 433.907072][T20057] syzkaller0: entered promiscuous mode [ 433.919986][T20057] syzkaller0: entered allmulticast mode [ 433.961953][T20057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3704'. [ 434.618200][T20087] netlink: 'syz.1.3714': attribute type 1 has an invalid length. [ 434.775916][T20097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3717'. [ 435.037456][T20101] sctp: [Deprecated]: syz.4.3719 (pid 20101) Use of struct sctp_assoc_value in delayed_ack socket option. [ 435.037456][T20101] Use struct sctp_sack_info instead [ 435.053959][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 435.054047][ C1] lec:lec_tx_timeout: lec0 [ 435.063185][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 435.265299][T20115] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3722'. [ 436.352531][T20164] tipc: Failed to remove unknown binding: 66,0,0/0:3324516329/3324516330 [ 436.401565][T20164] tipc: Failed to remove unknown binding: 66,0,0/0:3324516329/3324516330 [ 436.580866][T20168] netlink: 'syz.0.3736': attribute type 1 has an invalid length. [ 436.904411][T20176] gretap1: entered promiscuous mode [ 436.931960][T20180] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 437.033016][T20168] macvlan2: entered promiscuous mode [ 437.059838][T20168] macvlan2: entered allmulticast mode [ 437.082279][T20168] bond2: entered promiscuous mode [ 437.138370][T20168] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 437.254168][T20168] bond2: left promiscuous mode [ 437.571240][T20189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.808892][T20209] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3747'. [ 437.809609][T20203] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3744'. [ 437.833757][T20207] ip6t_srh: unknown srh match flags 4000 [ 437.911356][T20208] openvswitch: netlink: Flow key attr not present in new flow. [ 438.099931][T20227] sctp: [Deprecated]: syz.2.3753 (pid 20227) Use of int in max_burst socket option deprecated. [ 438.099931][T20227] Use struct sctp_assoc_value instead [ 438.315396][T20237] __nla_validate_parse: 3 callbacks suppressed [ 438.315416][T20237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3756'. [ 438.355733][T20237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3756'. [ 438.688875][T20255] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3758'. [ 438.789773][T20256] nbd: must specify an index to disconnect [ 438.816085][T20259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.994560][T20266] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3762'. [ 439.054115][T20266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3762'. [ 439.116997][T20272] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3763'. [ 439.272162][ T30] audit: type=1800 audit(1769939937.061:6): pid=20266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3762" name=20 dev="tmpfs" ino=1059 res=0 errno=0 [ 439.476175][T20231] lo speed is unknown, defaulting to 1000 [ 439.623678][T20296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3768'. [ 440.089387][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 440.097496][ C1] lec:lec_tx_timeout: lec0 [ 440.102342][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 440.372233][T20321] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3776'. [ 440.552542][T20227] lo speed is unknown, defaulting to 1000 [ 441.263965][T20347] syzkaller1: entered promiscuous mode [ 441.269955][T20347] syzkaller1: entered allmulticast mode [ 441.347626][T20361] tipc: Enabling not permitted [ 441.354522][T20361] tipc: Enabling of bearer rejected, failed to enable media [ 441.356656][T20367] vxcan1: tx drop: invalid da for name 0x0000000080000001 [ 441.371779][T20368] vxcan1: tx drop: invalid da for name 0x0000000080000001 [ 441.469097][T20364] can: request_module (can-proto-0) failed. [ 441.787625][T20388] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3795'. [ 442.199064][T20419] netlink: 'syz.2.3801': attribute type 6 has an invalid length. [ 442.455366][T20437] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3804'. [ 442.906517][T20457] netlink: 'syz.1.3812': attribute type 1 has an invalid length. [ 442.955699][T20457] 8021q: adding VLAN 0 to HW filter on device bond2 [ 443.130953][T20477] netlink: 'syz.2.3816': attribute type 1 has an invalid length. [ 443.623678][T20512] netlink: 'syz.3.3825': attribute type 1 has an invalid length. [ 443.734277][T20512] 8021q: adding VLAN 0 to HW filter on device bond2 [ 443.840870][T20517] bond2: (slave veth5): Enslaving as an active interface with a down link [ 443.865298][T20519] bond2: (slave veth0_to_bond): making interface the new active one [ 443.876861][T20527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.890364][T20519] veth0_to_bond: entered promiscuous mode [ 443.897242][T20519] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 443.944563][T20512] bond2: (slave veth7): Enslaving as an active interface with a down link [ 443.961131][T20531] netlink: 'syz.1.3827': attribute type 11 has an invalid length. [ 443.970230][T20531] netlink: 'syz.1.3827': attribute type 11 has an invalid length. [ 443.989634][T20531] __nla_validate_parse: 4 callbacks suppressed [ 443.989655][T20531] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3827'. [ 444.005152][T20512] netlink: 'syz.3.3825': attribute type 1 has an invalid length. [ 444.005176][T20512] netlink: 'syz.3.3825': attribute type 2 has an invalid length. [ 444.055250][T20526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3828'. [ 444.067616][T20522] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3827'. [ 444.099014][T20526] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3828'. [ 444.184552][T20532] syzkaller0: entered promiscuous mode [ 444.193254][T20532] syzkaller0: entered allmulticast mode [ 444.205007][T20541] ipt_rpfilter: unknown options [ 444.426307][T20548] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3831'. [ 444.543401][T20556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3832'. [ 444.552740][T20556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3832'. [ 444.714593][T20563] netlink: 'syz.0.3836': attribute type 1 has an invalid length. [ 444.762627][T20566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3837'. [ 444.887561][T20570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3839'. [ 445.027970][T20583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3844'. [ 445.109599][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 445.118406][ C1] lec:lec_tx_timeout: lec0 [ 445.123091][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 445.318393][T20591] x_tables: duplicate underflow at hook 2 [ 445.413199][T20598] openvswitch: netlink: VXLAN extension 51 out of range max 1 [ 445.508063][T20603] vxcan2: entered allmulticast mode [ 445.690308][T20611] netlink: 'syz.2.3855': attribute type 3 has an invalid length. [ 445.804761][T20624] bridge0: entered allmulticast mode [ 450.129360][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 450.137419][ C1] lec:lec_tx_timeout: lec0 [ 450.142610][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 454.840222][ T1342] veth0_to_bond: left promiscuous mode [ 454.971608][ T95] block nbd0: Possible stuck request ffff888025228000: control (read@0,1024B). Runtime 150 seconds [ 454.982861][ T95] block nbd0: Possible stuck request ffff888025228200: control (read@1024,1024B). Runtime 150 seconds [ 454.994096][ T95] block nbd0: Possible stuck request ffff888025228400: control (read@2048,1024B). Runtime 150 seconds [ 455.006223][ T95] block nbd0: Possible stuck request ffff888025228600: control (read@3072,1024B). Runtime 150 seconds [ 455.159340][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 455.167433][ C1] lec:lec_tx_timeout: lec0 [ 455.172512][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 460.179654][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 460.187688][ C1] lec:lec_tx_timeout: lec0 [ 460.192907][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 461.057200][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 461.069650][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 461.081181][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 461.089780][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 461.097600][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 461.144384][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 461.155470][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 461.165091][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 461.179416][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 461.188111][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 461.342535][T20655] lo speed is unknown, defaulting to 1000 [ 461.550420][T20655] chnl_net:caif_netlink_parms(): no params data found [ 461.591801][T20657] lo speed is unknown, defaulting to 1000 [ 461.693619][T20655] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.701735][T20655] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.709575][T20655] bridge_slave_0: entered allmulticast mode [ 461.717078][T20655] bridge_slave_0: entered promiscuous mode [ 461.731353][T20655] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.738629][T20655] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.747857][T20655] bridge_slave_1: entered allmulticast mode [ 461.755402][T20655] bridge_slave_1: entered promiscuous mode [ 461.797732][T20655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.811165][T20655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.852669][T20655] team0: Port device team_slave_0 added [ 461.866996][T20655] team0: Port device team_slave_1 added [ 461.921963][T20655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.928981][T20655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.955950][T20655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.969193][T20655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.976413][T20655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.004305][T20655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.210579][T20655] hsr_slave_0: entered promiscuous mode [ 462.217594][T20655] hsr_slave_1: entered promiscuous mode [ 462.241897][T20655] debugfs: 'hsr0' already exists in 'hsr' [ 462.247712][T20655] Cannot create hsr debugfs directory [ 462.271212][T20657] chnl_net:caif_netlink_parms(): no params data found [ 462.465620][ T5837] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 462.477195][ T5837] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 462.487327][ T5833] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 462.493109][ T5837] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 462.507610][ T5833] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 462.522880][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 462.525288][ T5837] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 462.539413][ T5837] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 462.541890][ T5833] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 462.556338][ T5833] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 462.610313][ T5833] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 462.622711][ T5833] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 462.633576][ T5833] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 462.645353][ T5833] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 462.655303][ T5833] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 462.737698][T20657] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.745482][T20657] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.753390][T20657] bridge_slave_0: entered allmulticast mode [ 462.762403][T20657] bridge_slave_0: entered promiscuous mode [ 462.771243][T20657] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.778595][T20657] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.786239][T20657] bridge_slave_1: entered allmulticast mode [ 462.794735][T20657] bridge_slave_1: entered promiscuous mode [ 462.901642][T20657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.927090][T20657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.006978][T20657] team0: Port device team_slave_0 added [ 463.016319][T20657] team0: Port device team_slave_1 added [ 463.106956][T20657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.114391][T20657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.143485][T20657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.154558][ T5833] Bluetooth: hci2: command tx timeout [ 463.177890][T20657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.185495][T20657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.212127][ T5833] Bluetooth: hci6: command tx timeout [ 463.219388][T20657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.234413][T20671] lo speed is unknown, defaulting to 1000 [ 463.335618][T20657] hsr_slave_0: entered promiscuous mode [ 463.345390][T20657] hsr_slave_1: entered promiscuous mode [ 463.352397][T20657] debugfs: 'hsr0' already exists in 'hsr' [ 463.358199][T20657] Cannot create hsr debugfs directory [ 463.473546][T20676] lo speed is unknown, defaulting to 1000 [ 463.703183][T20672] lo speed is unknown, defaulting to 1000 [ 463.787254][T20671] chnl_net:caif_netlink_parms(): no params data found [ 463.990146][T20671] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.997747][T20671] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.008174][T20671] bridge_slave_0: entered allmulticast mode [ 464.016242][T20671] bridge_slave_0: entered promiscuous mode [ 464.048723][T20671] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.059184][T20671] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.066876][T20671] bridge_slave_1: entered allmulticast mode [ 464.075208][T20671] bridge_slave_1: entered promiscuous mode [ 464.133073][T20671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.146046][T20671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.218295][T20671] team0: Port device team_slave_0 added [ 464.249774][T20671] team0: Port device team_slave_1 added [ 464.277818][T20676] chnl_net:caif_netlink_parms(): no params data found [ 464.350836][T20671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.358532][T20671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.385602][T20671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.397103][T20672] chnl_net:caif_netlink_parms(): no params data found [ 464.421777][T20671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.428784][T20671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.462571][T20671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.607158][T20671] hsr_slave_0: entered promiscuous mode [ 464.614636][T20671] hsr_slave_1: entered promiscuous mode [ 464.621303][T20671] debugfs: 'hsr0' already exists in 'hsr' [ 464.627104][T20671] Cannot create hsr debugfs directory [ 464.640925][T20676] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.648155][T20676] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.649961][ T52] Bluetooth: hci7: command tx timeout [ 464.657315][T20676] bridge_slave_0: entered allmulticast mode [ 464.668233][ T5833] Bluetooth: hci8: command tx timeout [ 464.674423][T20676] bridge_slave_0: entered promiscuous mode [ 464.683676][T20676] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.693194][T20676] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.701420][T20676] bridge_slave_1: entered allmulticast mode [ 464.708869][T20676] bridge_slave_1: entered promiscuous mode [ 464.732267][ T52] Bluetooth: hci9: command tx timeout [ 464.782988][T20672] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.791817][T20672] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.800337][T20672] bridge_slave_0: entered allmulticast mode [ 464.808524][T20672] bridge_slave_0: entered promiscuous mode [ 464.832395][T20676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.842689][T20672] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.850120][T20672] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.857472][T20672] bridge_slave_1: entered allmulticast mode [ 464.868083][T20672] bridge_slave_1: entered promiscuous mode [ 464.886443][T20676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.967931][T20676] team0: Port device team_slave_0 added [ 464.978955][T20672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.001072][T20676] team0: Port device team_slave_1 added [ 465.009966][T20672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.087216][T20676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.094620][T20676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.121786][T20676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.136883][T20676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.144112][T20676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.171079][T20676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.185078][T20672] team0: Port device team_slave_0 added [ 465.199586][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 465.207635][ C1] lec:lec_tx_timeout: lec0 [ 465.212686][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 465.219082][ T52] Bluetooth: hci2: command tx timeout [ 465.228275][T20672] team0: Port device team_slave_1 added [ 465.290056][ T52] Bluetooth: hci6: command tx timeout [ 465.308299][T20672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.316282][T20672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.343914][T20672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.357150][T20672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.364393][T20672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.392306][T20672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.443683][T20676] hsr_slave_0: entered promiscuous mode [ 465.452142][T20676] hsr_slave_1: entered promiscuous mode [ 465.458601][T20676] debugfs: 'hsr0' already exists in 'hsr' [ 465.465115][T20676] Cannot create hsr debugfs directory [ 465.577630][T20672] hsr_slave_0: entered promiscuous mode [ 465.589616][T20672] hsr_slave_1: entered promiscuous mode [ 465.596076][T20672] debugfs: 'hsr0' already exists in 'hsr' [ 465.602675][T20672] Cannot create hsr debugfs directory [ 466.730513][ T52] Bluetooth: hci7: command tx timeout [ 466.731424][ T5833] Bluetooth: hci8: command tx timeout [ 466.809510][ T5833] Bluetooth: hci9: command tx timeout [ 467.289546][ T5833] Bluetooth: hci2: command tx timeout [ 467.370596][ T5833] Bluetooth: hci6: command tx timeout [ 468.809894][ T5833] Bluetooth: hci8: command tx timeout [ 468.815407][ T5833] Bluetooth: hci7: command tx timeout [ 468.890182][ T5833] Bluetooth: hci9: command tx timeout [ 469.370763][ T5833] Bluetooth: hci2: command tx timeout [ 469.449855][ T5833] Bluetooth: hci6: command tx timeout [ 470.219431][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 470.227513][ C1] lec:lec_tx_timeout: lec0 [ 470.232570][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 470.900375][ T52] Bluetooth: hci8: command tx timeout [ 470.906631][ T5833] Bluetooth: hci7: command tx timeout [ 470.973913][ T52] Bluetooth: hci9: command tx timeout [ 473.049908][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 475.239479][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 475.247653][ C1] lec:lec_tx_timeout: lec0 [ 475.252537][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 478.179423][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 480.259714][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 480.267787][ C1] lec:lec_tx_timeout: lec0 [ 480.272557][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 484.179500][ T5197] udevd[5197]: worker [15420] /devices/virtual/block/nbd0 timeout; kill it [ 484.188300][ T5197] udevd[5197]: seq 19105 '/devices/virtual/block/nbd0' killed [ 485.049771][ T95] block nbd0: Possible stuck request ffff888025228000: control (read@0,1024B). Runtime 180 seconds [ 485.061537][ T95] block nbd0: Possible stuck request ffff888025228200: control (read@1024,1024B). Runtime 180 seconds [ 485.072710][ T95] block nbd0: Possible stuck request ffff888025228400: control (read@2048,1024B). Runtime 180 seconds [ 485.083893][ T95] block nbd0: Possible stuck request ffff888025228600: control (read@3072,1024B). Runtime 180 seconds [ 486.089474][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 486.097563][ C1] lec:lec_tx_timeout: lec0 [ 486.103098][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 491.119718][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 491.127807][ C1] lec:lec_tx_timeout: lec0 [ 491.132757][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 491.451801][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.489531][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.529421][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.569666][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.609389][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.139646][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 496.147684][ C1] lec:lec_tx_timeout: lec0 [ 496.152486][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 496.649461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.159690][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 501.167801][ C1] lec:lec_tx_timeout: lec0 [ 501.172551][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 503.770729][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 506.179338][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 506.187396][ C1] lec:lec_tx_timeout: lec0 [ 506.192349][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 511.199586][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 511.207663][ C1] lec:lec_tx_timeout: lec0 [ 511.212788][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 515.130057][ T95] block nbd0: Possible stuck request ffff888025228000: control (read@0,1024B). Runtime 210 seconds [ 515.141530][ T95] block nbd0: Possible stuck request ffff888025228200: control (read@1024,1024B). Runtime 210 seconds [ 515.154051][ T95] block nbd0: Possible stuck request ffff888025228400: control (read@2048,1024B). Runtime 210 seconds [ 515.165264][ T95] block nbd0: Possible stuck request ffff888025228600: control (read@3072,1024B). Runtime 210 seconds [ 516.219335][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 516.227483][ C1] lec:lec_tx_timeout: lec0 [ 516.232248][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 521.239462][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 521.247527][ C1] lec:lec_tx_timeout: lec0 [ 521.252600][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 521.600984][ T52] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 521.613262][ T52] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 521.624516][ T52] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 521.640753][ T52] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 521.650933][ T52] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 521.717411][ T52] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 521.728517][ T52] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 521.737872][ T52] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 521.746156][ T52] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 521.755346][ T52] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 521.906661][T20704] lo speed is unknown, defaulting to 1000 [ 522.125538][T20704] chnl_net:caif_netlink_parms(): no params data found [ 522.142561][T20706] lo speed is unknown, defaulting to 1000 [ 522.170569][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.179503][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.285050][T20704] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.292491][T20704] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.304380][T20704] bridge_slave_0: entered allmulticast mode [ 522.314587][T20704] bridge_slave_0: entered promiscuous mode [ 522.328603][T20704] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.337811][T20704] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.345389][T20704] bridge_slave_1: entered allmulticast mode [ 522.353321][T20704] bridge_slave_1: entered promiscuous mode [ 522.399747][T20704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.422196][T20704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.475394][T20704] team0: Port device team_slave_0 added [ 522.491417][T20704] team0: Port device team_slave_1 added [ 522.555768][T20704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.563795][T20704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.593035][T20704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.606419][T20704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.613665][T20704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.642620][T20704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.663243][T20706] chnl_net:caif_netlink_parms(): no params data found [ 522.882686][T20704] hsr_slave_0: entered promiscuous mode [ 522.900170][T20704] hsr_slave_1: entered promiscuous mode [ 522.910211][T20704] debugfs: 'hsr0' already exists in 'hsr' [ 522.916013][T20704] Cannot create hsr debugfs directory [ 522.982105][ T5833] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 522.997380][ T5833] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 523.007239][ T5833] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 523.017561][ T5833] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 523.025638][ T5833] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 523.067036][ T5841] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 523.080453][ T5841] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 523.090774][ T5841] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 523.101686][ T5841] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 523.110470][ T5841] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 523.142936][ T5833] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 523.160145][ T5833] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 523.169138][ T5833] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 523.178038][ T5833] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 523.186634][ T5833] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 523.209469][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.251910][T20706] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.259996][T20706] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.267347][T20706] bridge_slave_0: entered allmulticast mode [ 523.275347][T20706] bridge_slave_0: entered promiscuous mode [ 523.319470][T20706] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.326723][T20706] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.358112][T20706] bridge_slave_1: entered allmulticast mode [ 523.367578][T20706] bridge_slave_1: entered promiscuous mode [ 523.485144][T20706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.507648][T20706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.587821][T20722] lo speed is unknown, defaulting to 1000 [ 523.595763][T20706] team0: Port device team_slave_0 added [ 523.607613][T20706] team0: Port device team_slave_1 added [ 523.673861][T20706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.689277][T20706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.690494][ T5841] Bluetooth: hci10: command tx timeout [ 523.730478][T20706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.768403][T20706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.778059][T20706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.807643][T20706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.849423][ T5841] Bluetooth: hci11: command tx timeout [ 523.917988][T20724] lo speed is unknown, defaulting to 1000 [ 524.012211][T20706] hsr_slave_0: entered promiscuous mode [ 524.024924][T20706] hsr_slave_1: entered promiscuous mode [ 524.032173][T20706] debugfs: 'hsr0' already exists in 'hsr' [ 524.037977][T20706] Cannot create hsr debugfs directory [ 524.235691][T20727] lo speed is unknown, defaulting to 1000 [ 524.249429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.497085][T20722] chnl_net:caif_netlink_parms(): no params data found [ 524.583870][T20724] chnl_net:caif_netlink_parms(): no params data found [ 524.745356][T20722] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.755687][T20722] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.763580][T20722] bridge_slave_0: entered allmulticast mode [ 524.773494][T20722] bridge_slave_0: entered promiscuous mode [ 524.809131][T20722] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.817269][T20722] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.825403][T20722] bridge_slave_1: entered allmulticast mode [ 524.833814][T20722] bridge_slave_1: entered promiscuous mode [ 524.895333][T20724] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.902808][T20724] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.910375][T20724] bridge_slave_0: entered allmulticast mode [ 524.917982][T20724] bridge_slave_0: entered promiscuous mode [ 524.947115][T20724] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.955064][T20724] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.963440][T20724] bridge_slave_1: entered allmulticast mode [ 524.975854][T20724] bridge_slave_1: entered promiscuous mode [ 524.987286][T20722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.024398][T20722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.062983][T20724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.118654][T20724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.139478][ T5841] Bluetooth: hci12: command tx timeout [ 525.149121][T20722] team0: Port device team_slave_0 added [ 525.176304][T20727] chnl_net:caif_netlink_parms(): no params data found [ 525.202078][T20722] team0: Port device team_slave_1 added [ 525.213986][ T5841] Bluetooth: hci14: command tx timeout [ 525.222644][ T5833] Bluetooth: hci13: command tx timeout [ 525.271358][T20722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.278365][T20722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.290801][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.317729][T20722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.332133][T20724] team0: Port device team_slave_0 added [ 525.364333][T20722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.372892][T20722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.400990][T20722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.414705][T20724] team0: Port device team_slave_1 added [ 525.486925][T20724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.495950][T20724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.523252][T20724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.537131][T20724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.544237][T20724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.571278][T20724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.658273][T20722] hsr_slave_0: entered promiscuous mode [ 525.665255][T20722] hsr_slave_1: entered promiscuous mode [ 525.672225][T20722] debugfs: 'hsr0' already exists in 'hsr' [ 525.678015][T20722] Cannot create hsr debugfs directory [ 525.735448][T20727] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.743540][T20727] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.751765][T20727] bridge_slave_0: entered allmulticast mode [ 525.761290][T20727] bridge_slave_0: entered promiscuous mode [ 525.769438][ T5841] Bluetooth: hci10: command tx timeout [ 525.794715][T20724] hsr_slave_0: entered promiscuous mode [ 525.801972][T20724] hsr_slave_1: entered promiscuous mode [ 525.808284][T20724] debugfs: 'hsr0' already exists in 'hsr' [ 525.814423][T20724] Cannot create hsr debugfs directory [ 525.821384][T20727] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.828982][T20727] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.836742][T20727] bridge_slave_1: entered allmulticast mode [ 525.844539][T20727] bridge_slave_1: entered promiscuous mode [ 525.929504][ T5841] Bluetooth: hci11: command tx timeout [ 525.947515][T20727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.981450][T20727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.061711][T20727] team0: Port device team_slave_0 added [ 526.084730][T20727] team0: Port device team_slave_1 added [ 526.146694][T20727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.154121][T20727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.182084][T20727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.206175][T20727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.214163][T20727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.241207][T20727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.259504][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 526.267564][ C1] lec:lec_tx_timeout: lec0 [ 526.272953][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 526.329577][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.375371][T20727] hsr_slave_0: entered promiscuous mode [ 526.382542][T20727] hsr_slave_1: entered promiscuous mode [ 526.390807][T20727] debugfs: 'hsr0' already exists in 'hsr' [ 526.396588][T20727] Cannot create hsr debugfs directory [ 527.209536][ T5841] Bluetooth: hci12: command tx timeout [ 527.291585][ T5833] Bluetooth: hci13: command tx timeout [ 527.297209][ T5841] Bluetooth: hci14: command tx timeout [ 527.369649][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.849717][ T5841] Bluetooth: hci10: command tx timeout [ 528.009800][ T5841] Bluetooth: hci11: command tx timeout [ 528.409740][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.290055][ T5841] Bluetooth: hci12: command tx timeout [ 529.369647][ T5841] Bluetooth: hci14: command tx timeout [ 529.369682][ T5833] Bluetooth: hci13: command tx timeout [ 529.449524][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.929696][ T5833] Bluetooth: hci10: command tx timeout [ 530.089954][ T5833] Bluetooth: hci11: command tx timeout [ 530.489601][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.369453][ T5833] Bluetooth: hci12: command tx timeout [ 531.451942][ T5833] Bluetooth: hci14: command tx timeout [ 531.460339][ T5833] Bluetooth: hci13: command tx timeout [ 532.089347][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms [ 532.097426][ C1] lec:lec_tx_timeout: lec0 [ 532.102710][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 537.109675][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 537.117862][ C1] lec:lec_tx_timeout: lec0 [ 537.122755][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 542.129595][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 542.137670][ C1] lec:lec_tx_timeout: lec0 [ 542.142342][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 545.213510][ T95] block nbd0: Possible stuck request ffff888025228000: control (read@0,1024B). Runtime 240 seconds [ 545.225237][ T95] block nbd0: Possible stuck request ffff888025228200: control (read@1024,1024B). Runtime 240 seconds [ 545.236426][ T95] block nbd0: Possible stuck request ffff888025228400: control (read@2048,1024B). Runtime 240 seconds [ 545.247589][ T95] block nbd0: Possible stuck request ffff888025228600: control (read@3072,1024B). Runtime 240 seconds [ 547.149384][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 547.157466][ C1] lec:lec_tx_timeout: lec0 [ 547.162386][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 552.169452][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 552.177526][ C1] lec:lec_tx_timeout: lec0 [ 552.182213][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 557.189623][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 557.197697][ C1] lec:lec_tx_timeout: lec0 [ 557.202488][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 562.209701][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 562.217774][ C1] lec:lec_tx_timeout: lec0 [ 562.223023][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 565.209782][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 567.229767][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 567.237813][ C1] lec:lec_tx_timeout: lec0 [ 567.242600][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 572.249605][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 572.257714][ C1] lec:lec_tx_timeout: lec0 [ 572.262526][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 575.301898][ T95] block nbd0: Possible stuck request ffff888025228000: control (read@0,1024B). Runtime 270 seconds [ 575.312921][ T95] block nbd0: Possible stuck request ffff888025228200: control (read@1024,1024B). Runtime 270 seconds [ 575.324989][ T95] block nbd0: Possible stuck request ffff888025228400: control (read@2048,1024B). Runtime 270 seconds [ 575.336190][ T95] block nbd0: Possible stuck request ffff888025228600: control (read@3072,1024B). Runtime 270 seconds [ 577.269700][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 577.277773][ C1] lec:lec_tx_timeout: lec0 [ 577.282641][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 581.672576][ T5841] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 581.682875][ T5841] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 581.693652][ T5841] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 581.704483][ T5841] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 581.714012][ T5841] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 581.749036][ T5841] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 581.762819][ T5841] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 581.772845][ T5841] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 581.781740][ T5841] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 581.792595][ T5841] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 581.956142][T20753] lo speed is unknown, defaulting to 1000 [ 582.156260][T20753] chnl_net:caif_netlink_parms(): no params data found [ 582.197492][T20755] lo speed is unknown, defaulting to 1000 [ 582.305007][T20753] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.313257][T20753] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.322729][T20753] bridge_slave_0: entered allmulticast mode [ 582.331040][T20753] bridge_slave_0: entered promiscuous mode [ 582.344618][T20753] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.352197][T20753] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.360376][T20753] bridge_slave_1: entered allmulticast mode [ 582.367943][T20753] bridge_slave_1: entered promiscuous mode [ 582.413977][T20753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.430084][T20753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.482597][T20753] team0: Port device team_slave_0 added [ 582.500788][T20753] team0: Port device team_slave_1 added [ 582.553174][T20753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.560775][T20753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.588839][T20753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.614169][T20753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.624120][T20753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.688826][T20753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.762858][T20755] chnl_net:caif_netlink_parms(): no params data found [ 582.802559][ T5841] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 582.814355][ T5841] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 582.823823][T20753] hsr_slave_0: entered promiscuous mode [ 582.831760][ T5841] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 582.842329][ T5841] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 582.845615][T20753] hsr_slave_1: entered promiscuous mode [ 582.856461][ T5841] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 582.859533][T20753] debugfs: 'hsr0' already exists in 'hsr' [ 582.871660][T20753] Cannot create hsr debugfs directory [ 583.009319][T20755] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.016616][T20755] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.025369][T20755] bridge_slave_0: entered allmulticast mode [ 583.033728][T20755] bridge_slave_0: entered promiscuous mode [ 583.070489][T20755] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.077819][T20755] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.100170][T20755] bridge_slave_1: entered allmulticast mode [ 583.110485][T20755] bridge_slave_1: entered promiscuous mode [ 583.322098][ T5841] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 583.333232][T20755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.344881][ T5841] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 583.353663][ T5841] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 583.355898][T20755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.374303][ T5841] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 583.382711][ T5841] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 583.443147][ T5841] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 583.457419][ T5841] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 583.466469][ T5841] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 583.476225][ T5841] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 583.490815][ T5841] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 583.555638][T20755] team0: Port device team_slave_0 added [ 583.571886][T20755] team0: Port device team_slave_1 added [ 583.614349][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6330 ms [ 583.622473][ C1] lec:lec_tx_timeout: lec0 [ 583.627958][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 583.672488][T20767] lo speed is unknown, defaulting to 1000 [ 583.725531][T20755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.733128][T20755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.762375][T20755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.777884][T20755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.780384][T20780] Bluetooth: hci15: command tx timeout [ 583.786590][T20755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.817942][T20755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.851087][T20780] Bluetooth: hci16: command tx timeout [ 584.014607][T20755] hsr_slave_0: entered promiscuous mode [ 584.021995][T20755] hsr_slave_1: entered promiscuous mode [ 584.028515][T20755] debugfs: 'hsr0' already exists in 'hsr' [ 584.034400][T20755] Cannot create hsr debugfs directory [ 584.060448][T20774] lo speed is unknown, defaulting to 1000 [ 584.294280][T20776] lo speed is unknown, defaulting to 1000 [ 584.591314][T20767] chnl_net:caif_netlink_parms(): no params data found [ 584.812777][T20774] chnl_net:caif_netlink_parms(): no params data found [ 584.855078][T20767] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.864310][T20767] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.872889][T20767] bridge_slave_0: entered allmulticast mode [ 584.885709][T20767] bridge_slave_0: entered promiscuous mode [ 584.897395][T20780] Bluetooth: hci17: command tx timeout [ 584.905037][T20767] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.913426][T20767] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.921096][T20767] bridge_slave_1: entered allmulticast mode [ 584.930107][T20767] bridge_slave_1: entered promiscuous mode [ 585.014558][T20767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.027617][T20767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.054220][T20776] chnl_net:caif_netlink_parms(): no params data found [ 585.145523][T20767] team0: Port device team_slave_0 added [ 585.184178][T20767] team0: Port device team_slave_1 added [ 585.265499][T20774] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.273156][T20774] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.280741][T20774] bridge_slave_0: entered allmulticast mode [ 585.292021][T20774] bridge_slave_0: entered promiscuous mode [ 585.301204][T20774] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.308380][T20774] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.316290][T20774] bridge_slave_1: entered allmulticast mode [ 585.324518][T20774] bridge_slave_1: entered promiscuous mode [ 585.344953][T20767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.352662][T20767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.379694][T20767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.395176][T20767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.402519][T20767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.430296][T20767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.450717][T20780] Bluetooth: hci18: command tx timeout [ 585.475323][T20776] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.482785][T20776] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.490746][T20776] bridge_slave_0: entered allmulticast mode [ 585.499229][T20776] bridge_slave_0: entered promiscuous mode [ 585.529677][T20780] Bluetooth: hci19: command tx timeout [ 585.538744][T20776] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.549459][T20776] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.556982][T20776] bridge_slave_1: entered allmulticast mode [ 585.564945][T20776] bridge_slave_1: entered promiscuous mode [ 585.612568][T20774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.626057][T20774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.641913][T20776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.656140][T20776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.689766][T20780] Bluetooth: hci2: command 0x0406 tx timeout [ 585.696188][T20780] Bluetooth: hci6: command 0x0406 tx timeout [ 585.712085][ T5833] Bluetooth: hci7: command 0x0406 tx timeout [ 585.714420][T20779] Bluetooth: hci8: command 0x0406 tx timeout [ 585.718362][ T5833] Bluetooth: hci9: command 0x0406 tx timeout [ 585.793653][T20774] team0: Port device team_slave_0 added [ 585.821205][T20767] hsr_slave_0: entered promiscuous mode [ 585.828102][T20767] hsr_slave_1: entered promiscuous mode [ 585.835079][T20767] debugfs: 'hsr0' already exists in 'hsr' [ 585.841171][T20767] Cannot create hsr debugfs directory [ 585.850319][T20778] Bluetooth: hci15: command tx timeout [ 585.855954][T20776] team0: Port device team_slave_0 added [ 585.864942][T20776] team0: Port device team_slave_1 added [ 585.874312][T20774] team0: Port device team_slave_1 added [ 585.930232][T20778] Bluetooth: hci16: command tx timeout [ 585.959879][T20774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.966952][T20774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.994038][T20774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.009592][T20774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.016622][T20774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.043268][T20774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.063866][T20776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.072034][T20776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.098973][T20776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.134207][T20776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.142046][T20776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.171950][T20776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.257253][T20774] hsr_slave_0: entered promiscuous mode [ 586.264502][T20774] hsr_slave_1: entered promiscuous mode [ 586.271649][T20774] debugfs: 'hsr0' already exists in 'hsr' [ 586.277423][T20774] Cannot create hsr debugfs directory [ 586.333735][T20776] hsr_slave_0: entered promiscuous mode [ 586.340989][T20776] hsr_slave_1: entered promiscuous mode [ 586.347448][T20776] debugfs: 'hsr0' already exists in 'hsr' [ 586.353397][T20776] Cannot create hsr debugfs directory [ 586.969413][T20778] Bluetooth: hci17: command tx timeout [ 587.529990][T20778] Bluetooth: hci18: command tx timeout [ 587.609825][T20778] Bluetooth: hci19: command tx timeout [ 587.929387][T20778] Bluetooth: hci15: command tx timeout [ 588.009392][T20778] Bluetooth: hci16: command tx timeout [ 589.049606][T20778] Bluetooth: hci17: command tx timeout [ 589.369282][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 589.377765][ C1] lec:lec_tx_timeout: lec0 [ 589.383053][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 589.610503][T20778] Bluetooth: hci18: command tx timeout [ 589.699569][T20778] Bluetooth: hci19: command tx timeout [ 590.019780][T20778] Bluetooth: hci15: command tx timeout [ 590.100507][T20778] Bluetooth: hci16: command tx timeout [ 591.130221][T20778] Bluetooth: hci17: command tx timeout [ 591.689420][T20778] Bluetooth: hci18: command tx timeout [ 591.769525][T20778] Bluetooth: hci19: command tx timeout [ 595.129279][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 595.137370][ C1] lec:lec_tx_timeout: lec0 [ 595.143164][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 597.050258][ T31] INFO: task syz.1.3854:20609 blocked for more than 143 seconds. [ 597.058102][ T31] Not tainted syzkaller #0 [ 597.065914][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 597.074890][ T31] task:syz.1.3854 state:D stack:26304 pid:20609 tgid:20608 ppid:18077 task_flags:0x400140 flags:0x00080002 [ 597.087444][ T31] Call Trace: [ 597.091206][ T31] [ 597.094183][ T31] __schedule+0x14ea/0x5050 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 597.098731][ T31] ? __pfx___schedule+0x10/0x10 [ 597.104931][ T31] ? schedule+0x90/0x360 [ 597.110847][ T31] schedule+0x164/0x360 [ 597.115422][ T31] schedule_preempt_disabled+0x13/0x30 [ 597.124594][ T31] __mutex_lock+0x7fe/0x1300 [ 597.129882][ T31] ? __mutex_lock+0x5ac/0x1300 [ 597.134717][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 597.140858][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 597.145974][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 597.152127][ T31] ? radix_tree_lookup+0x240/0x290 [ 597.157332][ T31] genl_rcv_msg+0x10b/0x7a0 [ 597.162652][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 597.169841][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 597.174948][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 597.183613][ T31] netlink_rcv_skb+0x232/0x4b0 [ 597.188451][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 597.194238][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 597.201091][ T31] ? genl_rcv+0x19/0x40 [ 597.205371][ T31] ? down_read+0x272/0x2e0 [ 597.213759][ T31] ? genl_rcv+0xd/0x40 [ 597.217920][ T31] genl_rcv+0x28/0x40 [ 597.222605][ T31] netlink_unicast+0x80f/0x9b0 [ 597.227539][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 597.235962][ T31] ? __alloc_skb+0x193/0x390 [ 597.241871][ T31] ? netlink_sendmsg+0x650/0xb40 [ 597.246873][ T31] ? skb_put+0x11b/0x210 [ 597.252028][ T31] netlink_sendmsg+0x813/0xb40 [ 597.256875][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.262892][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 597.268933][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 597.277283][ T31] __sys_sendto+0x709/0x7a0 [ 597.282294][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 597.287409][ T31] ? fd_install+0x94/0x3d0 [ 597.294438][ T31] ? fd_install+0x306/0x3d0 [ 597.299018][ T31] __x64_sys_sendto+0xde/0x100 [ 597.305229][ T31] do_syscall_64+0xe2/0xf80 [ 597.310279][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.316414][ T31] ? trace_irq_disable+0x37/0x100 [ 597.360355][ T31] ? clear_bhb_loop+0x60/0xb0 [ 597.365143][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.389746][ T31] RIP: 0033:0x7f4a9ad5b78e [ 597.394289][ T31] RSP: 002b:00007f4a9bccae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 597.405028][ T31] RAX: ffffffffffffffda RBX: 00007f4a9bccc6c0 RCX: 00007f4a9ad5b78e [ 597.413303][ T31] RDX: 0000000000000020 RSI: 00007f4a9bccb000 RDI: 000000000000000c [ 597.422835][ T31] RBP: 0000000000000000 R08: 00007f4a9bccaf04 R09: 000000000000000c [ 597.431285][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 597.439599][ T31] R13: 00007f4a9bccaf58 R14: 00007f4a9bccb000 R15: 0000000000000000 [ 597.447661][ T31] [ 597.451842][ T31] INFO: task syz.2.3855:20611 blocked for more than 143 seconds. [ 597.460607][ T31] Not tainted syzkaller #0 [ 597.465655][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 597.476434][ T31] task:syz.2.3855 state:D stack:26136 pid:20611 tgid:20610 ppid:17537 task_flags:0x480140 flags:0x00080002 [ 597.489085][ T31] Call Trace: [ 597.492714][ T31] [ 597.495841][ T31] __schedule+0x14ea/0x5050 [ 597.500622][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 597.505642][ T31] ? __pfx___schedule+0x10/0x10 [ 597.511227][ T31] ? schedule+0x90/0x360 [ 597.515539][ T31] schedule+0x164/0x360 [ 597.520202][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 597.525825][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 597.532508][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 597.539005][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 597.545781][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 597.552137][ T31] nbd_set_size+0x516/0x6d0 [ 597.556710][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 597.562066][ T31] ? nla_memcpy+0x5b/0xc0 [ 597.566486][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 597.572513][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 597.579931][ T31] ? rcu_is_watching+0x15/0xb0 [ 597.584779][ T31] ? __nla_parse+0x40/0x60 [ 597.589349][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 597.595721][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 597.601873][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 597.608005][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 597.613288][ T31] genl_rcv_msg+0x61c/0x7a0 [ 597.617858][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 597.623269][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 597.629069][ T31] netlink_rcv_skb+0x232/0x4b0 [ 597.634251][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 597.639612][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 597.644947][ T31] ? genl_rcv+0x19/0x40 [ 597.649135][ T31] ? down_read+0x272/0x2e0 [ 597.653936][ T31] ? genl_rcv+0xd/0x40 [ 597.658043][ T31] genl_rcv+0x28/0x40 [ 597.662530][ T31] netlink_unicast+0x80f/0x9b0 [ 597.667447][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 597.673132][ T31] ? __alloc_skb+0x193/0x390 [ 597.679865][ T31] ? netlink_sendmsg+0x650/0xb40 [ 597.684878][ T31] ? skb_put+0x11b/0x210 [ 597.690029][ T31] netlink_sendmsg+0x813/0xb40 [ 597.694879][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.700393][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 597.705477][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 597.711089][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.716432][ T31] ____sys_sendmsg+0xa68/0xad0 [ 597.721877][ T31] ? __might_fault+0xaf/0x130 [ 597.726789][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 597.732267][ T31] ? import_iovec+0x73/0xa0 [ 597.736837][ T31] ___sys_sendmsg+0x2a5/0x360 [ 597.741869][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 597.746860][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 597.752625][ T31] ? futex_wait+0x29a/0x380 [ 597.757304][ T31] ? __fget_files+0x2a/0x420 [ 597.762359][ T31] ? __fget_files+0x3a0/0x420 [ 597.767131][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 597.772331][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 597.777855][ T31] ? rcu_is_watching+0x15/0xb0 [ 597.784777][ T31] do_syscall_64+0xe2/0xf80 [ 597.789822][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.796118][ T31] ? trace_irq_disable+0x37/0x100 [ 597.801439][ T31] ? clear_bhb_loop+0x60/0xb0 [ 597.806170][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.812676][ T31] RIP: 0033:0x7f33aeb9aeb9 [ 597.817136][ T31] RSP: 002b:00007f33afa3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 597.825927][ T31] RAX: ffffffffffffffda RBX: 00007f33aee15fa0 RCX: 00007f33aeb9aeb9 [ 597.834023][ T31] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000005 [ 597.842575][ T31] RBP: 00007f33aec08c1f R08: 0000000000000000 R09: 0000000000000000 [ 597.851044][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.859084][ T31] R13: 00007f33aee16038 R14: 00007f33aee15fa0 R15: 00007ffe4bcb62c8 [ 597.867398][ T31] [ 597.871160][ T31] INFO: task syz.3.3858:20629 blocked for more than 144 seconds. [ 597.878951][ T31] Not tainted syzkaller #0 [ 597.885810][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 597.894641][ T31] task:syz.3.3858 state:D stack:27000 pid:20629 tgid:20628 ppid:18723 task_flags:0x400140 flags:0x00080002 [ 597.907117][ T31] Call Trace: [ 597.910627][ T31] [ 597.913599][ T31] __schedule+0x14ea/0x5050 [ 597.918247][ T31] ? __pfx___schedule+0x10/0x10 [ 597.923446][ T31] ? schedule+0x90/0x360 [ 597.927760][ T31] schedule+0x164/0x360 [ 597.932492][ T31] schedule_preempt_disabled+0x13/0x30 [ 597.938010][ T31] __mutex_lock+0x7fe/0x1300 [ 597.942935][ T31] ? __mutex_lock+0x5ac/0x1300 [ 597.947768][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 597.952650][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 597.957729][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 597.963268][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 597.968684][ T31] ? radix_tree_lookup+0x240/0x290 [ 597.974057][ T31] genl_rcv_msg+0x10b/0x7a0 [ 597.978648][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 597.984050][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 597.991185][ T31] netlink_rcv_skb+0x232/0x4b0 [ 597.996074][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 598.001536][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 598.006878][ T31] ? genl_rcv+0x19/0x40 [ 598.011382][ T31] ? down_read+0x272/0x2e0 [ 598.015848][ T31] ? genl_rcv+0xd/0x40 [ 598.020389][ T31] genl_rcv+0x28/0x40 [ 598.024431][ T31] netlink_unicast+0x80f/0x9b0 [ 598.029382][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 598.034731][ T31] ? __alloc_skb+0x193/0x390 [ 598.039677][ T31] ? netlink_sendmsg+0x650/0xb40 [ 598.044807][ T31] ? skb_put+0x11b/0x210 [ 598.049117][ T31] netlink_sendmsg+0x813/0xb40 [ 598.054387][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.059928][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 598.064920][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 598.070454][ T31] __sys_sendto+0x709/0x7a0 [ 598.075011][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 598.080673][ T31] ? exc_page_fault+0x6a/0xc0 [ 598.085409][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 598.093210][ T31] __x64_sys_sendto+0xde/0x100 [ 598.098051][ T31] do_syscall_64+0xe2/0xf80 [ 598.103044][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.109550][ T31] ? trace_irq_disable+0x37/0x100 [ 598.114646][ T31] ? clear_bhb_loop+0x60/0xb0 [ 598.119831][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.125780][ T31] RIP: 0033:0x7f352b15b78e [ 598.130347][ T31] RSP: 002b:00007f352c00ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 598.138822][ T31] RAX: ffffffffffffffda RBX: 00007f352c00e6c0 RCX: 00007f352b15b78e [ 598.147390][ T31] RDX: 0000000000000024 RSI: 00007f352c00d000 RDI: 000000000000000a [ 598.155542][ T31] RBP: 0000000000000000 R08: 00007f352c00cf04 R09: 000000000000000c [ 598.163944][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 598.172786][ T31] R13: 00007f352c00cf58 R14: 00007f352c00d000 R15: 0000000000000000 [ 598.181043][ T31] [ 598.184164][ T31] INFO: task syz.0.3860:20636 blocked for more than 144 seconds. [ 598.200050][ T31] Not tainted syzkaller #0 [ 598.205081][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 598.213939][ T31] task:syz.0.3860 state:D stack:27104 pid:20636 tgid:20635 ppid:16105 task_flags:0x400040 flags:0x00080002 [ 598.226221][ T31] Call Trace: [ 598.230140][ T31] [ 598.233121][ T31] __schedule+0x14ea/0x5050 [ 598.237704][ T31] ? __pfx___schedule+0x10/0x10 [ 598.242953][ T31] ? schedule+0x90/0x360 [ 598.247246][ T31] schedule+0x164/0x360 [ 598.252605][ T31] schedule_preempt_disabled+0x13/0x30 [ 598.258120][ T31] __mutex_lock+0x7fe/0x1300 [ 598.263366][ T31] ? __mutex_lock+0x5ac/0x1300 [ 598.268197][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 598.273298][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 598.278380][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 598.284200][ T31] ? radix_tree_lookup+0x240/0x290 [ 598.289831][ T31] genl_rcv_msg+0x10b/0x7a0 [ 598.294966][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 598.300330][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 598.305445][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 598.311549][ T31] netlink_rcv_skb+0x232/0x4b0 [ 598.316371][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 598.321893][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 598.327227][ T31] ? genl_rcv+0x19/0x40 [ 598.331824][ T31] ? down_read+0x272/0x2e0 [ 598.336298][ T31] ? genl_rcv+0xd/0x40 [ 598.341454][ T31] genl_rcv+0x28/0x40 [ 598.345597][ T31] netlink_unicast+0x80f/0x9b0 [ 598.350904][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 598.356348][ T31] ? __alloc_skb+0x193/0x390 [ 598.361225][ T31] ? netlink_sendmsg+0x650/0xb40 [ 598.366224][ T31] ? skb_put+0x11b/0x210 [ 598.371230][ T31] netlink_sendmsg+0x813/0xb40 [ 598.376279][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.383146][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 598.388127][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 598.393582][ T31] __sys_sendto+0x709/0x7a0 [ 598.399792][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 598.404877][ T31] ? exc_page_fault+0x6a/0xc0 [ 598.412852][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 598.418220][ T31] __x64_sys_sendto+0xde/0x100 [ 598.423935][ T31] do_syscall_64+0xe2/0xf80 [ 598.428468][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.434832][ T31] ? trace_irq_disable+0x37/0x100 [ 598.440660][ T31] ? clear_bhb_loop+0x60/0xb0 [ 598.445379][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.451777][ T31] RIP: 0033:0x7f22d9b5b78e [ 598.456254][ T31] RSP: 002b:00007f22daaafe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 598.465177][ T31] RAX: ffffffffffffffda RBX: 00007f22daab16c0 RCX: 00007f22d9b5b78e [ 598.473746][ T31] RDX: 0000000000000020 RSI: 00007f22daab0000 RDI: 0000000000000005 [ 598.482186][ T31] RBP: 0000000000000000 R08: 00007f22daaaff04 R09: 000000000000000c [ 598.490460][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 598.500608][ T31] R13: 00007f22daaaff58 R14: 00007f22daab0000 R15: 0000000000000000 [ 598.508665][ T31] [ 598.512034][ T31] INFO: task syz.4.3863:20645 blocked for more than 144 seconds. [ 598.520048][ T31] Not tainted syzkaller #0 [ 598.525005][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 598.534263][ T31] task:syz.4.3863 state:D stack:27840 pid:20645 tgid:20644 ppid:16991 task_flags:0x400040 flags:0x00080002 [ 598.546408][ T31] Call Trace: [ 598.549818][ T31] [ 598.552766][ T31] __schedule+0x14ea/0x5050 [ 598.557315][ T31] ? __pfx___schedule+0x10/0x10 [ 598.562767][ T31] ? schedule+0x90/0x360 [ 598.567076][ T31] schedule+0x164/0x360 [ 598.571590][ T31] schedule_preempt_disabled+0x13/0x30 [ 598.577108][ T31] __mutex_lock+0x7fe/0x1300 [ 598.581927][ T31] ? __mutex_lock+0x5ac/0x1300 [ 598.586753][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 598.591866][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 598.597071][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 598.604468][ T31] ? radix_tree_lookup+0x240/0x290 [ 598.610072][ T31] genl_rcv_msg+0x10b/0x7a0 [ 598.614657][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 598.620563][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 598.625739][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 598.631498][ T31] netlink_rcv_skb+0x232/0x4b0 [ 598.636305][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 598.641766][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 598.647199][ T31] ? genl_rcv+0x19/0x40 [ 598.651971][ T31] ? down_read+0x272/0x2e0 [ 598.656472][ T31] ? genl_rcv+0xd/0x40 [ 598.660755][ T31] genl_rcv+0x28/0x40 [ 598.664802][ T31] netlink_unicast+0x80f/0x9b0 [ 598.669868][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 598.675213][ T31] ? __alloc_skb+0x193/0x390 [ 598.680333][ T31] ? netlink_sendmsg+0x650/0xb40 [ 598.685428][ T31] ? skb_put+0x11b/0x210 [ 598.689813][ T31] netlink_sendmsg+0x813/0xb40 [ 598.694611][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.700252][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 598.707080][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 598.712872][ T31] __sys_sendto+0x709/0x7a0 [ 598.717436][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 598.722865][ T31] ? exc_page_fault+0x6a/0xc0 [ 598.727672][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 598.733164][ T31] __x64_sys_sendto+0xde/0x100 [ 598.737992][ T31] do_syscall_64+0xe2/0xf80 [ 598.743053][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.749886][ T31] ? trace_irq_disable+0x37/0x100 [ 598.754983][ T31] ? clear_bhb_loop+0x60/0xb0 [ 598.760340][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.766386][ T31] RIP: 0033:0x7f115195b78e [ 598.771746][ T31] RSP: 002b:00007f115293ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 598.781020][ T31] RAX: ffffffffffffffda RBX: 00007f115293e6c0 RCX: 00007f115195b78e [ 598.789652][ T31] RDX: 0000000000000020 RSI: 00007f115293d000 RDI: 0000000000000003 [ 598.797771][ T31] RBP: 0000000000000000 R08: 00007f115293cf04 R09: 000000000000000c [ 598.807800][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 598.816257][ T31] R13: 00007f115293cf58 R14: 00007f115293d000 R15: 0000000000000000 [ 598.824569][ T31] [ 598.827785][ T31] [ 598.827785][ T31] Showing all locks held in the system: [ 598.836067][ T31] 1 lock held by khungtaskd/31: [ 598.842297][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 598.852633][ T31] 1 lock held by syslogd/5179: [ 598.857456][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 598.868072][ T31] 2 locks held by getty/5584: [ 598.873005][ T31] #0: ffff8880308940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 598.883138][ T31] #1: ffffc9000362b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 598.893865][ T31] 1 lock held by udevd/15420: [ 598.898586][ T31] #0: ffff88814171b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 598.909912][ T31] 2 locks held by syz.1.3854/20609: [ 598.915268][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 598.923972][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 598.933229][ T31] 6 locks held by syz.2.3855/20611: [ 598.938504][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 598.946937][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 598.956420][ T31] #2: ffff88802516f278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 598.967053][ T31] #3: ffff8880251719d0 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2ba/0x6d0 [ 598.979061][ T31] #4: ffff888025171370 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 598.991798][ T31] #5: ffff8880251713a8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 599.004573][ T31] 2 locks held by syz.3.3858/20629: [ 599.011849][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 599.020289][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 599.029706][ T31] 2 locks held by syz.0.3860/20636: [ 599.034972][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 599.043684][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 599.053139][ T31] 2 locks held by syz.4.3863/20645: [ 599.058376][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 599.066847][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 599.076309][ T31] 2 locks held by syz-executor/20655: [ 599.082086][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 599.090520][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 599.099888][ T31] 2 locks held by syz-executor/20657: [ 599.105368][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 599.115343][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 599.124565][ T31] 2 locks held by syz-executor/20671: [ 599.130566][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 599.138844][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 599.147984][ T31] 2 locks held by syz-executor/20672: [ 599.153630][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 599.162290][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 599.171532][ T31] 2 locks held by syz-executor/20676: [ 599.176972][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 599.185798][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 599.195400][ T31] 2 locks held by syz-executor/20704: [ 599.200921][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 599.209421][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 599.220487][ T31] 2 locks held by syz-executor/20706: [ 599.225910][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 599.234327][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 599.243468][ T31] 2 locks held by syz-executor/20722: [ 599.248859][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 599.257576][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 599.266769][ T31] 2 locks held by syz-executor/20724: [ 599.272380][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 599.281182][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 599.290839][ T31] 2 locks held by syz-executor/20727: [ 599.296280][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 599.304883][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 599.314506][ T31] 2 locks held by syz-executor/20753: [ 599.321954][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 599.330671][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 599.340026][ T31] 2 locks held by syz-executor/20755: [ 599.345408][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 599.353818][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 599.362942][ T31] 2 locks held by syz-executor/20767: [ 599.368362][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 599.377361][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 599.386943][ T31] 2 locks held by syz-executor/20774: [ 599.392520][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 599.401199][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 599.410572][ T31] 2 locks held by syz-executor/20776: [ 599.416005][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 599.425920][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 599.435480][ T31] [ 599.437861][ T31] ============================================= [ 599.437861][ T31] [ 599.446956][ T31] NMI backtrace for cpu 1 [ 599.446980][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 599.447000][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 599.447010][ T31] Call Trace: [ 599.447017][ T31] [ 599.447024][ T31] dump_stack_lvl+0xe8/0x150 [ 599.447052][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 599.447077][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 599.447105][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 599.447131][ T31] sys_info+0x135/0x170 [ 599.447150][ T31] watchdog+0xf90/0xfe0 [ 599.447172][ T31] ? watchdog+0x209/0xfe0 [ 599.447194][ T31] kthread+0x726/0x8b0 [ 599.447216][ T31] ? __pfx_watchdog+0x10/0x10 [ 599.447233][ T31] ? __pfx_kthread+0x10/0x10 [ 599.447254][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 599.447280][ T31] ? __pfx_kthread+0x10/0x10 [ 599.447304][ T31] ret_from_fork+0x51b/0xa40 [ 599.447332][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 599.447356][ T31] ? __switch_to+0xc82/0x1410 [ 599.447391][ T31] ? __pfx_kthread+0x10/0x10 [ 599.447410][ T31] ret_from_fork_asm+0x1a/0x30 [ 599.447445][ T31] [ 599.447455][ T31] Sending NMI from CPU 1 to CPUs 0: [ 599.571609][ C0] NMI backtrace for cpu 0 [ 599.571628][ C0] CPU: 0 UID: 0 PID: 1342 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 599.571657][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 599.571669][ C0] Workqueue: krdsd rds_connect_worker [ 599.571697][ C0] RIP: 0010:__asan_memset+0x31/0x50 [ 599.571726][ C0] Code: 53 48 89 d3 89 f5 49 89 fe 48 8b 4c 24 18 48 89 d6 ba 01 00 00 00 e8 1e e5 ff ff 84 c0 74 11 4c 89 f7 89 ee 48 89 da 5b 41 5e <5d> e9 19 5d 6a 09 31 c0 5b 41 5e 5d e9 be 1c 6d 09 cc 66 66 66 66 [ 599.571741][ C0] RSP: 0018:ffffc9000424f488 EFLAGS: 00000202 [ 599.571756][ C0] RAX: ffffc9000424f701 RBX: ffffc9000424f5a0 RCX: ffffffff81759f9e [ 599.571770][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc9000424f5b8 [ 599.571781][ C0] RBP: 0000000000000000 R08: ffffc9000424f5c7 R09: 1ffff92000849eb8 [ 599.571793][ C0] R10: dffffc0000000000 R11: fffff52000849eb9 R12: ffffc9000424f5b8 [ 599.571806][ C0] R13: 1ffff92000849eaf R14: ffffc9000424f568 R15: ffffc9000424f5b0 [ 599.571820][ C0] FS: 0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 599.571834][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 599.571846][ C0] CR2: 000055abac974ee8 CR3: 000000000e346000 CR4: 00000000003526f0 [ 599.571861][ C0] Call Trace: [ 599.571868][ C0] [ 599.571875][ C0] unwind_next_frame+0xeae/0x23c0 [ 599.571901][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 599.571920][ C0] ? ref_tracker_alloc+0x1b6/0x4d0 [ 599.571944][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 599.571967][ C0] arch_stack_walk+0x11b/0x150 [ 599.571988][ C0] ? sk_alloc+0x2c3/0x390 [ 599.572011][ C0] stack_trace_save+0xa9/0x100 [ 599.572032][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 599.572059][ C0] ref_tracker_alloc+0x1b6/0x4d0 [ 599.572082][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 599.572111][ C0] ? sock_lock_init+0x41c/0x870 [ 599.572134][ C0] sk_alloc+0x2c3/0x390 [ 599.572157][ C0] inet_create+0x7a0/0x1000 [ 599.572183][ C0] ? inet_create+0x9c/0x1000 [ 599.572210][ C0] __sock_create+0x4b2/0x9d0 [ 599.572232][ C0] rds_tcp_conn_path_connect+0x2a3/0x6c0 [ 599.572256][ C0] ? finish_task_switch+0x161/0x920 [ 599.572282][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 599.572308][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 599.572328][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 599.572355][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 599.572384][ C0] rds_connect_worker+0x1d8/0x290 [ 599.572403][ C0] ? process_scheduled_works+0xa0f/0x17a0 [ 599.572429][ C0] process_scheduled_works+0xaec/0x17a0 [ 599.572469][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 599.572494][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 599.572516][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 599.572533][ C0] ? schedule+0x90/0x360 [ 599.572554][ C0] worker_thread+0xda6/0x1360 [ 599.572589][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 599.572609][ C0] kthread+0x726/0x8b0 [ 599.572637][ C0] ? __pfx_worker_thread+0x10/0x10 [ 599.572662][ C0] ? __pfx_kthread+0x10/0x10 [ 599.572688][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 599.572715][ C0] ? __pfx_kthread+0x10/0x10 [ 599.572734][ C0] ret_from_fork+0x51b/0xa40 [ 599.572762][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 599.572787][ C0] ? __switch_to+0xc82/0x1410 [ 599.572812][ C0] ? __pfx_kthread+0x10/0x10 [ 599.572831][ C0] ret_from_fork_asm+0x1a/0x30 [ 599.572864][ C0] [ 599.922298][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 599.929302][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 599.938542][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 599.948639][ T31] Call Trace: [ 599.951938][ T31] [ 599.954883][ T31] vpanic+0x1e0/0x670 [ 599.958896][ T31] panic+0xc5/0xd0 [ 599.962631][ T31] ? __pfx_panic+0x10/0x10 [ 599.967067][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 599.972574][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 599.978762][ T31] watchdog+0xfda/0xfe0 [ 599.982946][ T31] ? watchdog+0x209/0xfe0 [ 599.987298][ T31] kthread+0x726/0x8b0 [ 599.991478][ T31] ? __pfx_watchdog+0x10/0x10 [ 599.996180][ T31] ? __pfx_kthread+0x10/0x10 [ 600.000883][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 600.006106][ T31] ? __pfx_kthread+0x10/0x10 [ 600.010724][ T31] ret_from_fork+0x51b/0xa40 [ 600.015360][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 600.020514][ T31] ? __switch_to+0xc82/0x1410 [ 600.025243][ T31] ? __pfx_kthread+0x10/0x10 [ 600.029881][ T31] ret_from_fork_asm+0x1a/0x30 [ 600.034729][ T31] [ 600.038177][ T31] Kernel Offset: disabled [ 600.042525][ T31] Rebooting in 86400 seconds..