last executing test programs: 22.242669326s ago: executing program 0 (id=4011): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) (async) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="d976f308c05c"}) write$tun(r0, &(0x7f0000000340)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14, 0x7}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x6, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @empty, @broadcast}, {{0x8100, 0x6559, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x9}}}}, 0x36) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0xc}, @IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x40}}, 0x0) 22.103862894s ago: executing program 2 (id=4012): r0 = socket(0x1f, 0xc8b4187781324050, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={@loopback, 0x1, 0x0, 0x50, 0x0, [{@remote}, {@broadcast}, {@broadcast}, {@local}, {@empty}]}}) (async, rerun: 64) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb0, r1, 0x200, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4321}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4014}, 0x4000000) sendmmsg$alg(r0, &(0x7f0000001800)=[{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000300)="8b47fc9ff9cb5b292907dbccbdfe932e610e8104f124d9ea35aa74f60f85563ac7b493311a3829a7db62adab92698b3666afb8d54fedc7880c08dd94b05ee43d59a1ecdc534117f37991097c8b57c15dca819cc2ffc26bee4518d32146d1d95cc6caad4c5d2a7e715ef802d53a066433ef0d735578f189297b141e385f3ad20cdc157f66c778efa235f92479cc124b0427c0b1e5214bcc799297eaa5ed34f96d50858dcb3a21c4eadf2e304e06893bb7692efac33e9928bc6f971af30e9f0b90b8945e49e97c893d9623e676d4f2eeaa38ee", 0xd2}, {&(0x7f0000000400)="e81dc2a222c43e2c58af1f24f8a1d1329415d7a6139fa7", 0x17}, {&(0x7f0000000440)="00a3cc96315ef55b48addb8bff3931a5e2d661802f83d4f6f9cb293bb2089b008f6ffd2af1bbbd1728548e63e9b8e70859a3dfc6754e44fe2738abc7cdfbbf904cc5733f20f82ed3fd2143e2fb960077c35226a27f2c136ac14505aa2db8a4d7f41f502a46d5efe30d53bf978cea2bfc09e02e8f97a5a0e4c5061466d33f923ece40a5fd0f8744151dc263edcff623519d1f175992279e928a0ca8f6819893355a4a60b6e1ab46f11325f5d12fbc8139ace59e8bf55dc0de9a49bfeaad", 0xbd}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="3f2586cefcbf729e6858bb7d6a73c0c9482c81efda35d63e181a88654e1f0fbba41e7053e9551c5dcf9b52953ccabe9fd0c4f1b3dd6070ac53f6427682a445b8712b5e313baf1034cf2726d70c8831a3a81f992949ada61a2ffdde18c922d3afb9c96deb03ef0b781a2e551b53e0eefcb145a62f818e5799f974f2ea346fa93ec3829009e288e1719fdd59e5", 0x8c}, {&(0x7f00000015c0)="09930310639db4b256e269cbcf9f6c3beadeebf65219d109cfec5c0b37a9849d5261965d79f756886d4d99f5688b255749fabf8d91480bde02ca568fb6018f258861a3e1eba7e097cbd2e4583102cf5252a1c8e685f333b641ee829598226652dacb8ff121adc543ec8433eb3124741e20cd194cd8133e6d4272f9", 0x7b}, {&(0x7f0000001640)="e42cad9d02e32378ac4d51d966c5e98436ed699121a12c9eb2e8691060b03b460ba3170af45377e90681681db1cc45e9d5460b", 0x33}, {&(0x7f0000001680)="f1db23da1b6fe81f5414f9a989fac17664723019e79bc419aa7f39479c918983dc29c56c8bed2e0d6becda1ca580c5db9926709dca0c6ba73bf09f6688347ab0bd7a264fa22cc737d7f394f934380721a4be4b51db8b6d44e99c5ab8a111c305024b45b66f2b5575c2c9992701bf74c40f2868d73d27f471f2187a382035fb5f32f46f0cbfa891a90ea81f2199182f91fe9f2f7689df0d1d416724a3cca6e6ab9280e2b78ae7834e987bd79ad44b221f3376788bf2253960d77cb0e9e81eb0436d2e2168ca6f82ba23f6e0b9320ca0f0a493cfd4ffc5ba8ca27e610ced502822a626b3ec623a87b8", 0xe8}], 0x8, 0x0, 0x0, 0x1}], 0x1, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001880), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000001980)={&(0x7f0000001840), 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x54, r3, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044040}, 0x404c880) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000001b40)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a00)={0xf8, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x34}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x46}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x14}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2baec013}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5ef}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xa6d6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x27f5}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x20}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x27}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8001}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7f}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3ff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x354}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x520d}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2e}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6ee6a886}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x439}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x61d}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x6400c004}, 0x84) (async) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000001b80)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000004100)={&(0x7f0000001c00)=@alg, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000001c80)=""/203, 0xcb}, {&(0x7f0000001d80)=""/212, 0xd4}, {&(0x7f0000001e80)=""/161, 0xa1}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/19, 0x13}, {&(0x7f0000002f80)=""/35, 0x23}, {&(0x7f0000002fc0)=""/4096, 0x1000}], 0x7, &(0x7f0000004040)=""/177, 0xb1}, 0x22162) (async) r6 = socket(0x15, 0x2, 0x9) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004180), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000041c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f00000042c0)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x800400}, 0xc, &(0x7f0000004280)={&(0x7f0000004200)={0x80, r7, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="e30f6f5ca85a"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d182ce28ed7c"}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x1e, {0x5, 0x1, 0x80, 0xa}}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xd, {0x9, 0x40, 0xfffb, 0x7}}}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}], @NL80211_ATTR_USE_RRM={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]]}, 0x80}, 0x1, 0x0, 0x0, 0x20010000}, 0x20000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000043c0)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004380)={&(0x7f0000004340)={0x2c, r7, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40091}, 0x20000000) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000004400)={0x2, 'wg0\x00', {0x2936bd72}, 0x49}) (async) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000004440)=0x20080) (async) recvmsg$unix(r6, &(0x7f0000006a00)={&(0x7f0000004480)=@abs, 0x6e, &(0x7f0000006900)=[{&(0x7f0000004500)=""/198, 0xc6}, {&(0x7f0000004600)=""/176, 0xb0}, {&(0x7f00000046c0)=""/163, 0xa3}, {&(0x7f0000004780)=""/4096, 0x1000}, {&(0x7f0000005780)=""/4096, 0x1000}, {&(0x7f0000006780)=""/143, 0x8f}, {&(0x7f0000006840)=""/148, 0x94}], 0x7, &(0x7f0000006980)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x2020) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000006a80), r10) sendmsg$ETHTOOL_MSG_RINGS_SET(r13, &(0x7f0000006b40)={&(0x7f0000006a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000006b00)={&(0x7f0000006ac0)={0x34, r15, 0x4, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xc}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x999c}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004890}, 0x40000) sendmsg$DEVLINK_CMD_RATE_SET(r11, &(0x7f0000006c40)={&(0x7f0000006b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000006c00)={&(0x7f0000006bc0)={0x2c, r1, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8010) (async, rerun: 64) ioctl$FIBMAP(r12, 0x1, &(0x7f0000006c80)=0x3) (async, rerun: 64) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000006cc0)={0x4, 0x6, 0x4, 0x6, 0x1, 0x0, [{0x10, 0x1, 0x718, '\x00', 0x2908}]}) ioctl$PPPOEIOCSFWD(r14, 0x4008b100, &(0x7f0000006d40)={0x18, 0x0, {0x0, @link_local, 'veth0_to_team\x00'}}) sendmsg$NL80211_CMD_NEW_STATION(r12, &(0x7f0000006e80)={&(0x7f0000006d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000006e40)={&(0x7f0000006dc0)={0x5c, r7, 0x6bd6095173f5d61c, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x5}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x8001}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x8, 0x7e1}}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x4, 0x0, 0xd, 0x9, 0x4]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000007000)={&(0x7f0000006ec0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000006fc0)={&(0x7f0000006f40)={0x60, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x3, 0x401, 0xfff]}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x890}, 0x24008010) 21.684211048s ago: executing program 2 (id=4017): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59e3d", 0xd8}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_raw(r6, 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x6, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) sendto$inet6(r5, &(0x7f0000000140)="96", 0x1, 0x80d0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001100017000fddbdf2500000000000000", @ANYRES32=0x0, @ANYBLOB="92100000100200001400030076657468315f766c616e"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x10270000}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@deltfilter={0x2c, 0x2d, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xa, 0xd}, {0x0, 0x13}, {0xc, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140012"], 0x48}}, 0x400400c0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 21.324906426s ago: executing program 0 (id=4022): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000580)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xa, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d3000000000000009500"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0xf0bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xb, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x1000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 21.066099899s ago: executing program 2 (id=4025): sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="00042bbd7000ffdbdf52120000000a000600ff"], 0x48}, 0x1, 0x0, 0x0, 0x4040810}, 0x40000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) socket$inet6(0xa, 0x2, 0x7) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xb, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xd, 0x6, 0x2, 0xfffd, 0x7, 0x9, 0x200, 0x8, [{0x80, 0x575e, 0x0, 0x9}, {0x1, 0xf, 0x80, 0xd5bd}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x20002d}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000040)=0x7, 0x12) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) 20.855885547s ago: executing program 4 (id=4027): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@bloom_filter={0x1e, 0x0, 0x1f, 0x0, 0x1005}, 0x48) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x20, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000814) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x20, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000814) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f00000009c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x84}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) (async) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) recvmmsg(r0, &(0x7f0000000800)=[{{&(0x7f00000004c0)=@pppol2tpv3in6, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f0000000740)}], 0x2, &(0x7f00000007c0)=""/47, 0x2f}, 0x7}], 0x1, 0x2103, 0x0) (async) recvmmsg(r0, &(0x7f0000000800)=[{{&(0x7f00000004c0)=@pppol2tpv3in6, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f0000000740)}], 0x2, &(0x7f00000007c0)=""/47, 0x2f}, 0x7}], 0x1, 0x2103, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002500)=@newtaction={0x18, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x4}]}, 0x18}, 0x1, 0x2b1e}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002500)=@newtaction={0x18, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x4}]}, 0x18}, 0x1, 0x2b1e}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x14, r5, 0x1}, 0x14}}, 0x0) 20.41940878s ago: executing program 4 (id=4029): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711052000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async) connect$llc(r0, &(0x7f0000000240)={0x1a, 0x302, 0x0, 0x9, 0x2, 0x91, @random="4c01f00a4bb3"}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000004800030000000000000000000a000000", @ANYRES32=r3, @ANYBLOB="000000001400010000000000000000000000000000800000080002"], 0x38}}, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) (async) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async) close(r4) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) (async) r9 = accept4(r8, 0x0, 0x0, 0x80000) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r11, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r11, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x200}, {0x5}, {0x6, 0x11, 0x200}, {0x8, 0xb, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x200400c4) (async) sendto$inet(r9, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) (async) accept4$tipc(r9, 0x0, 0x0, 0x0) 20.317370021s ago: executing program 4 (id=4031): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000005c0)={{r0, &(0x7f0000000380)='##{]-&!(;\xdc%{\x00', 0x400000, &(0x7f00000002c0)={@align=0x9, {0x5, 0xfff7, 0x5, 0x3}}, 0x5, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0xffffffff}, 0x0, &(0x7f0000000500)}) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xe597}]}, 0x64}}, 0x4001) r4 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x2, &(0x7f0000000000)) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000002600090122bd7008f9ffffff02000000080003004700000008003d00", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x1000c953}, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000180)=""/51, &(0x7f00000001c0)=0x33) r5 = socket$key(0xf, 0x3, 0x2) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x803, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000540)={0x2b, @dev={0xac, 0x14, 0x14, 0x1a}, 0x4e21, 0x1, 'ovf\x00', 0x0, 0x0, 0x1}, 0x2c) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYRES32=r6, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4008044) 20.316769974s ago: executing program 0 (id=4032): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="9500"/24], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x38) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x68, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r4 = accept4(r1, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x202242, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) r6 = accept4$phonet_pipe(r4, 0x0, &(0x7f0000000040), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)={0x30, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x14, 0x2, 0x0, 0x1, [{0x4}, {0x7, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x8}]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x2}]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x7}]}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x6}]}, {}, {0x0, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x0, 0x1, 0x8}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40011}, 0x40) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010001000000000000000008000000001000006eeedb24c4", @ANYRES32=0x0, @ANYBLOB="40000000000000001400128009000100766c616e00000000040002800500100009000000"], 0x3c}}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f00000005c0)={{r1, &(0x7f0000000100)='\x00', 0x40, &(0x7f0000000140)={@_ha_fsid={[0x9, 0x4]}, {0x9, 0x989, 0x2, 0x3}}, 0x7f, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0xa}, {[0x1, 0x7ff, 0x3ff, 0x1775]}, 0xc, 0xdf, &(0x7f00000004c0)=""/223}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r9, 0x20, &(0x7f0000000700)={&(0x7f0000000640)=""/96, 0x60, 0x0, &(0x7f00000006c0)=""/51, 0x33}}, 0x10) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r6, 0x4018f50b, &(0x7f0000000200)={0x0, 0x10001, 0x9}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x20, &(0x7f0000000000)={&(0x7f00000000c0)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r10, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x10, 0x3fb, 0x8, 0x70bd2b, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x10040001}, 0x801) r12 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r12) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f4bec", 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 20.077556587s ago: executing program 2 (id=4035): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) (async) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe, 0x9}}}}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="00001ef586e764920200000f00000000000000000c001400", @ANYRES32=r6, @ANYRES32=0xee01, @ANYBLOB], 0x28}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x1540, 0x2d, 0x400, 0x0, 0x25dfdbff, {0x0, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x6, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @nested={0x1514, 0x2, 0x0, 0x1, [@nested={0x150e, 0x2, 0x0, 0x1, [@typed={0xc, 0x60, 0x0, 0x0, @u64=0x82}, @nested={0xfd0c, 0xb7, 0x0, 0x1, [@nested={0x1e7, 0x11a, 0x0, 0x1, [@typed={0x4, 0xca}, @nested={0x13b, 0x54, 0x0, 0x1, [@generic="b51684fb3f3493e4b1048792f42774", @nested={0x127, 0x120, 0x0, 0x1, [@nested={0xd9, 0x2e, 0x0, 0x1, [@typed={0x8, 0x4d, 0x0, 0x0, @pid=r5}, @generic="de6282248471c4360a394f3a6b69803e28ab195ddbfb79c437c427899b4029c44e76376bb7a922c558e849f4257ffb36c1248c5d437a1a625a89b1d66ffc75d93cbd3ada33099aced8dec220c6d268306739d9ee23011e163ebc2d2a88a6c8155ce7dd21b63734a2275e026e9d5adc483f18f3084a485bfd072f97d97a2af8d935b9c7e2b4538a616744a2ac1db9a87b4b64b23d2cb4dd191c2b1ec387ad164a51d927c27dd752bce5158e92ed2a9728af604655b14870c15049392053a74802c85445fb07", @typed={0x8, 0x6e, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @generic="10fb628f33c367056ed22d04d05cb9384e8f308ba99ba374fa2f1786aec0396c3b56ed7b9d7c864553bde4f6a19a1d5828e248b610fe1653101c355ead9470", @nested={0x8, 0x8, 0x0, 0x1, [@nested={0x4, 0x47}]}]}, @generic]}, @generic="451e07a1233009c06933d3845fb32d927109d944b662e4a6cc4e1d3de115bebabc9e6bbcf5b84ab19b5c1cb331a91d832c9d13df70ce1ebc11f98fad38e92c89186d8c840ae77e44ed498c129567df127c140d664ee769cb97b8f81c3d4d6c8f153a1d7342e8c752186db881239bb52768e187c1be3ddf81a1f88085f3715c09b7c59a0a55cb806107cba0d7ee2c1497f855cad051c07a", @typed={0x8, 0x3f, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x62}]}, @generic="939f73a325549b05cca3c0d100d7c563d2dd4a902dead5bf717161157fe3bb2e90", @nested={0xfc, 0xe5, 0x0, 0x1, [@typed={0x8, 0x157, 0x0, 0x0, @pid=r1}, @generic="fcb37eab113e04b37eee22f6775ae0f6d761f05889463bd87233e0137b3595a702c1e46ffbfe4a93c674c9316095ce52437c4b1ce1668dbf60b84735dbef1aa271cb33db5ba53af6f5e8da7aed5a9ff7c6e16f438c7b09d1b1007942094a3e96909c66b78613731d0885b8180befbb9e3b41b15104c12a9674175f4c9bc5d7abf323a08cd5fe66ea3f8f1e8949e5fd321e8a5100d20523d7270ca9aaf7ddf7b704a9d0d980ce870f6466d2ef744b9172cfed5fccd91e070f0e3df02a6aa858e9", @generic="9061f600cf0443fc47343cbb624e004f8896578ec8141b124994e114924755563d3402a6717ee9aba9a64c746df059fe77c62d86e619ffbd3330be0bbe5f498b15800cca9e344f624d056e462364498698560ede893986581b9ee0a9503b7a2e2b979760d51f75bcbd44ff039c0112451ab15beee482da6325727730f81b8fb785fc475e8cd8067e1a2707764de1484de3095fdcc1afb5f17d19291cc597d52b49b67b330468244ae1fbbe7911064933c510824fc903e50824d1c200d207e08cf9d3ab2de07614b6a116d6f731965354f811ee6352b9ed62c2d90ccb69e5f03e986a5025d16a7874", @nested={0x4, 0x15a}]}, @typed={0x8, 0xbb, 0x0, 0x0, @pid=r5}, @generic="7d95e8a75de3070fc973747c7d746f82a63f031c0e673f1d364cdeb98ea455db7ba8be7933e3fe349fd0d1941aaea2e4e70decb55321cc4eae028854854982e76093fead41f546a6228a3a51cce6682f40", @generic="430326e0fae501e85c1b82b720e064bd52f5f573782df4bb571b3fd6e276b1446f2932a6c7463460e9c605a8e76e4176546c9ed25d3c7ab43aadfbb619618425355c1202370e8b3efca65180c4189636064080c895b173007d8a5e920fc4786e507e80731bf2a92e766ca959ca5b6cd636e690f617e9952bd7c3fdc0eb5adeff4322671a7569bcbe592d75758f41269ef5010270925ac7d28c6372e76e6966ab6701ca57f5f0aab8769bf3bbd42dc92caf405b7469d93fd4e33977f43535f3ed7346fa8a6cffc2c6f1dc361d72468cf8fcc6721faee2bc1d784658a76a392ec9c9c08eba87998270615f5b50b015188685f0d333df0306aec924cc89df406bc895d1563ca7f18e7d4e131ba5eaa273259ecc997d6fc2fa1dfaa6b063ccb227b9148f29f81aeaabdd6600c18b4a4f670b43e6ef5f2dad60331d1cf6c4b4a5cd8b026aedab9cfb71ca1688b269fd3dc5ceaccdb320e0c1481297174431291453106432d817296bd1e8bc3bcf5d95abc68ab46a2fdb61ff7583929bde2089c277fc8ebbe3d755a3c29ba9f1ea0537383c274c262bc7f6371971afd7479e9155d9fbca3eb77ea397c2ec1c6e5f31617f6fafdf2c124ca7bff48fc09b6db6bca734a9b9a81407a14950548a844f4eeb67cb46416c58e8edbfb9b029b4b543e9dc2c7d379431c245804c349101e2698e16f2ffe40c2014df0ebf985d3acc5abf1c47ecff5ed5a6d7fc862bfb7875491ec8e7c8ac9de11faf1b6e0cf2bd96c1e5eebf828dddead0ca4d7b88c150812b0c8b2b5b9d12c3c8c9eb7fc68c08e4a9993705bb2c0f359e62b501e67da0045757b2530f8048110f35d64d3db07fb7f28f228b09d1d2aead06e2a9a42d1acf65128ed2a5055aa651441e262803fc11b2d446f035b3e711f722965f5f4a9844c58ecb38cc682c8e4014cf57fc48a5a80466bc5e72835e2863d58276151801570bb7288ce03b4a074d30179740777a006ef6d9eebf2d5f9f2d3f50ee6bfb69f53711297d6b90499f2bf13775271788453ba9ca660e69a886cd52aa7e13de9f2945850f7b217e3905c31d0d52d99804e950d3f4c15900af63150589c6363351f5a1878848f72c5bd23e8017d06964736dab7e12b55b0fa7284d1f72e260e828db090871e7bb49fffd98b2866bf4ce1af7eb653a55f41b2bcc4b624b5be126e75994beb2bd8aab004214a26863cb0a4a29e397c37be9e1d784b801c3549b51cb24a294034729d66a4f1d6f00ffa34add7d9b173a47e6352f53c03bf0fc8d29c5885c023b52331ca3473fa483ca7d7c405cf86a5c563a3655d72b3b859a6e84fb0ea5412c8a0a3f377f09251d940d2c5d3381200a38f112146231b801ff547c47d8951abc63a22a5d3a012db5d48006da8a7ff989250b267321f4ceb3d31f19028e7c74e5f1b33595707d046b1b2eea263ebb9a5e0b466035b8a95be0fa6f47f8354ad042a4a08613fb0ad5fa1987d1a007b248bb32019f40627488d06b5bedb4c159124a59f7c76790160cd8230b149e6cc5e534ee1e507ac24319ffbbfcf6b184860157393a003b3fac5922e4b91bf24118b1069ebce981a61a1028935f44809348ac7f8c2786c2f634d470cf4659e88d09915486d406c03b1a6beb88c1f4cb098a274295e4f8f8f81cacbab788960e6e219307f67e435141a9f4a669481e8198b4abbe6bd78348650c0189c34bed3ced9ec7cd365bdceee485ebcec2c127fbc2450ff2af3e4bb865a74fdf2a03508ef9acdc0af2168a3c545d988d141e184b9f194a32558d37b5b435c426b01cc4c107f438d25775115ef945ff7b81332f4132f5e3273e47916883e8c0f22172ea47662b24be02d1ff25413b5bc36515f1c7d819dbc526c24b3f6b53abfef883e333ef6a247959c2a04e35e2c08beb02ab3de4f1d561566d58553ee0516cd85401e002577bc2b13ae9645145362058170b1193c9a1fafdcb17bbbf2731e191f8d2b12b125a61db9bceae1016a7b7d0b86f35f1957a780fcfd40458eda0d6e057dbecb76ec47c36b110c5435b67089bdd6fefa22dd45191a17e8566e312587273924864307726a74cae080166d05624151612de82a10ff60cc62c0b5485ea720c9ea597d97f57d9e46e9e79a0974b6c53c9d8eafbe82e3e0eb9d17bf9e0630a915e74430a75a16d8be30ee0f0bb5e953417d3674821c3dc97ac90671e639489ad9062c252ff1c18515bf3993be9c0469db9c3dd81e887612c2e3a276ef02f436bef7b46d1a200d04d356c333a077f1d118671af6350162c8e5710cb3a4edbb9d528e9f97f4fe0a7b7a210ff99c04bdc204c362bd2991f63374ee56e273f4fa82ab812c3db84d3fc9d0b7a2f48f79d3c7fad940b3e5cb358a2035ec41cefcac3e557dbfad7ca69965f4a964772ed5cd3d6086072b8c6feb637ed50719d7d4cc1b6d0b1075433720e7a2225a0770ca5b7b6f3269011af044e2d0fa53cd5d7a09c7dfda41b6fd627e4fdcc0146763f0eac66d8a72fbf1b153cd1dd66bb255b4fd3026137fa7e02dead815ffb7b709f49ab2912f629efc9e178f0d4481be2797fa9837105712e16571eb985911652ec2655b0a953a8d245af5a630ac19ae81b14c4972bb370ba8bda9eeb698397bffb054d5cb78f949004f78e0803e9a2f861b79be1d38d66e836a78b3eec5156cbb5cf0fe8175adedca68e28381f26f9bf8ce2bec668b3624f919bf1625d9020c9eba46599f2902b9fa1ab9547dc77cedb47f0211fb29cfe2fb8b576f8f0384184a7dacd6e233bcccf3821d6eeb5887798dfc5b0d4b70bb8ed7b7739a09b3f95a7bed663cdc7637aa94e303d2636e24dd2589d9e8a681f39eb728ba01ddc1fbbe48ca7580bb3ef3996e8e6f6b80225efe74d206688529016f43c52c74c9621c2232df62d43f10464cecf94802c07c5df8dc812bc3e717726a015702d26f8d5afeb389d94c0955088123e0c63e5e591e59c3d5f33f456412c27291e94c8028361323487688d6f16ae58e8cae858bde57c77220696acd0fb9a0a3171837116e3d95d57f7ecb2b43bd688ab123f38cf546fb95f3e7da04ad9adddf8bee0832cb962e380d280778946344bd6f3c8209c84fe10f92e1054143862ce9f72f9cbb310b2d65a6402a79162004e45e444ce08bc73906061b0f5571cba1cb0e0d879ffb42238e4bbe6fd0be2de510ddfaf87850a66d4f766011cdf8b3fff7c4ace49a1662b4470941d4b1e735e959ecb2ea37ca13baaae4f8cb0e7adc604007e46414f4997dc4320f66fe8c549dcf3f389b49c08bf406fefadfdf5f9599841de0fa252a73ceb3280c8b0650288d6a4639e3ccb35ab868bd51b9264b1c05f3a220a30e62c0825aae9c50b9c8600483d65f0712fbea9bd820889c9c56a94b136954b485338551cc1ce2fa9a3f9ea63ebaa6257ba31c653dd007a5db8266aecdfcaccc5c9e5a65ce0b5ef27f3f3acf38d5222ea44c6a27df7446aac2af900c02575df32a33444fa15468ac7e4a9c966c52e7afcb55608138df546d535f84b36f6d022311f5f8828606f49c74f35f861aad819f89ff874ae1aa2814eb16e316fedfe410c17a5d451795cfff3ac0b2ae1ab1292abc06f41723491b4d0e81ca2164b15c41edcbd25e3857bbeafecb37dfe25d76dfbc9c6e276a2f4f5ae7aa0b3c4542c9325f332b07e16d3bc75616fa2a7c97f0446859f7a9589d10a30cf9eedfb6245807a5b8619372ee4e1ce819e48a84530da0c55d61355451171189bb37a3c9a04b28793f1e1d7b3af4b7bce29386445b7c2530e33c51e2e7e0da120ca9affd418d05b2c691dfff071c10fad4038a8f943b0b256ae81e4bb13aa45681f1ad511211b256ea6f9d6045fd2d9c2d951e88a0ecd9c171fac6701acf25bc27fb3fad8499f91e08fb45f0a7aa8fa110c80f7493509f1858e18e867de1094a1fd13f01f8b5c45b101dbf4819a1a0b94e5b90862b61fde9016b5cd8089b1142c0ed9ca53a5dd45bb72459bd737394633e96be7fa8fe3cddb4f4e8645357115cba6cf2edffe506cb0ecfec73188f2019058f2c0a303b3182f5a07a7e418ef9c00a16f1ff297c9a5acb1e3ea29a61d29a42d338cc690e8fc1b9731c887ba94c87c48a349268b722a56edb257763c805adee4906d3024b94f8f523150c761ad407527c27a42555914fb4b1ef89ef72e72a3a9a03f6372559c91d8efa8d50c0426c16d9f72ca037497de5fd32cce811f47cb6868583b02934ae317637bde8e299744578a887ed65721d56d3c6e3631559655ace39ea53ba059c3a7e2916084d760207bf960c216fad2d72ceaf99e560503874ef0a0434175a10c547ed239eb47440594a6df7d42e9c213d511cb140b5096bef5759ff8cea1929cc486d3911d0d6e3e7e2061b81dc0022c6378aef68efdc14ac4087a06f8f6f065249b1969b3d6a36fc1c8e0bfe50fcbbe03ac8004e40c9ba82a831b3184428915ed23187bde77054546437fa18bafc5ba417bb644466a807bfa46c82094873bf13864544c6ceafbfb91a9e49ac349ad8140d0482384d60eb018cf8bf9469bdfb375e0a8caa928fd1091a40384e3edb123aa101d8cb6db86c40916e4a3a50fc96df1b4193d409abbfa46a5025dee89263cc4ef172b2a0af8c17cbbd03f402965549b8b6aec43d37660f0acb7b77697cdc3e0a6d203229485a15923f2a472c851805810a60c489c6d23a22402c15e66e448062a83320bc50a1d577d30ed4ade00e2bf3c12770767121672f04ee8986082215024914d39171e7bbf756a97c10f4691454bdf8c06239fbe5eb42705633ea8f241191db483bf6b8929c92b97dfc4a0e173d12c09b6f938aa82f4d6c00fcafefc5b89fa4fb424aaeeb12e3e0f84588a1408c7c0ecb65b36274b2826c771013828f0ff96dc3e6d7a54ed514de84ddc790788e7b5601220d6b02037c223c2ec4790965f0a4fe7d2cc2b441d6b936de00949547397d8207f58ce67523d7015cf65b71f492b55be9a78a08ab4d526163e19796d15b679d86b7f2083f7fd25995425b073932a621ab5762001300f2a0d1228a5b3897bdf074855f340ccedf61809a6b05485df272b9068d68bfa5f0454a94afcac8209125ba30961a8dffb07456bb46d1f2e7344cd9dbdbff910958989f2242a03e18516259a3899742038809194e6727c3ee935920aaaedaffef7697b044bfc71145309fbc8c4002f08466d80a1d776f33fe538594cb72e1f21eda562a166c3832e1a175c2363290f13e75bd08784ee8cb7bd4fe977a6fa2fc62f1fbe61675cc3096949b3e2dd3c1cce1133f8199a7cb409ec996daec801333b6946654c0135b4afdbe8c6ec18136ec3bef642329b4ac40ab8dd42a1fb52153073d1f851c09e1b7495973fb99609496f4e9970c3c05949b6393a4fe71b97ef0ff044c179079a901b5ed38a18c507c404b5f318be36d3b5d01532ba8d0d5f0925709206e27698656dc21fc1e68bae7c8e574e8e7be50febc4ad341c5364861c781f3c31aabf4ff98a1ab61744fdad6bb1c80b2057b504d0d6e4a7abab3b92bc67c5aa48e2153f82224a32d1002e4c11b1c056cf5f4c5127f4465fce05e61b7d5ff6914b808497b306b7ec9f6c62291e6d0a8506e5c3b7e7147c542f7a9f239f79aaa96a1618ca396c43c472893604ae56cc925d6653a876e0bded091f6b06054765f0f799fb0e4ee112a293a6584af50afc781164495cbeaeff900d71dbc941add3434fcd47a31285f66e3979c8467b3bf8e4d3307ab19eb151d405ba0d835b97579c76e9cb4841ff174c5b26973ccfb132b330090a", @nested={0x10, 0x4c, 0x0, 0x1, [@nested={0x4, 0x11d}, @typed={0x8, 0x79, 0x0, 0x0, @uid=r6}]}, @typed={0x8, 0x30, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}, @generic="4090eb60516c8f4784a78a30ec458a2daf3fb63ea92f940d3f3d228c38e4335ee88c9762d761c91fcc6898db2895f19ca1a4526e12573b5cde0f848804af51b11f28875d20", @generic="08c3b5cb4c3e086d841f838d9d81fa7280abeb1c9c5fbec54bacc641575703a4d261bd19e4fd2103cd417eae54921368ebf254d76a939f1a620047965ba31f5d0d08410bdcd7ffe40d111dcc1ae78b0c0ee6e8192a3713866b89883a60d32a0c8edd50a2329182b3e9c6a6565bc8b6f58d6789f758552f1a70132aec6c5f0dc601a3fbd3", @typed={0x8, 0x14d, 0x0, 0x0, @uid=r2}, @generic="a697ff9282c1f3b1641778735e5802468cb24bbbfec0911683272058fb329c7255fc26a8b99ee588476dbf001b2123dd414edc3ae5e4985b15b51ecde21730d087881e65481e5ff500f982c0", @generic="a6c0a6876335dd0c0efb74c7b6125814a432715c38714f028d07ceafe6e3ac7895d76226a0e275a787dabd52489f227e8d1c6b44221d26b266ae3983c795fc3d9c425b35ce9c34c7983b0f3a24be7f6e38", @typed={0x5, 0x15a, 0x0, 0x0, @str='\x00'}, @typed={0x4, 0x50, 0x0, 0x0, @str}, @typed={0x8, 0x70, 0x0, 0x0, @fd=r0}]}]}]}, 0x1540}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c010) 20.007080331s ago: executing program 0 (id=4037): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x18, r1, 0x1, 0x70bd28, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 19.962096576s ago: executing program 4 (id=4038): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000000bca30000000000002403000020feffff620a00fef8ffffff71a400fe000000001f03000000000000e5000600000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000f80)={0x0, 0x1ff, 0x9}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001880)={r1, "01a470c2d6b481b1eb8457e6c8f24188"}) 19.916439104s ago: executing program 3 (id=4039): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0x8c4, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x8b0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x3d, 0x4, "59fcc376c4ec8109219918e0069365e2d7144a46ae83e2c57d4984f13c424ed7c80ad3c26ed9db6cf269ebb9c5c4cdd55684a4dbdbf93e7ef2"}, @ETHTOOL_A_BITSET_VALUE={0x869, 0x4, "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"}]}]}, 0x8c4}, 0x1, 0x0, 0x0, 0x1}, 0x4010) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000500)=r1, 0x4) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) writev(r2, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)={0x2, 'batadv_slave_0\x00', {0x211}, 0x7ff}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 19.835062024s ago: executing program 2 (id=4040): sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x8, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x7}]}}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a900)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x856}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x44040) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 19.778122737s ago: executing program 1 (id=4041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'netpci0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'netpci0\x00', 0x1}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3f}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) 19.754142035s ago: executing program 0 (id=4042): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x3, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) close(r0) 19.63799255s ago: executing program 4 (id=4043): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff0000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb2400090003001500000000000100000000000080b40000000000000005"], 0x128}}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1a}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x400c881) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r3, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008081) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x40}}, 0x0) 19.441910574s ago: executing program 0 (id=4044): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0503000000000000000007000000b947a5c989d2c6120ac6682ee380e53daf"], 0x14}, 0x1, 0x0, 0x0, 0x4004018}, 0x20000000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffc}) ioctl(r3, 0x8b22, &(0x7f0000000040)) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfffd}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0xc4) 19.213400904s ago: executing program 2 (id=4045): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x58, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x84, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8e}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x17a0000}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8827}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r1, 0x600, 0x70bd2a, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) read(r0, &(0x7f0000000300)=""/42, 0x2a) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x25, 0x1, 0x7fff6, 0x25dfdbfe, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x3c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x89}, @FRA_DST={0x8, 0x1, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 19.02836149s ago: executing program 1 (id=4046): socket$igmp6(0xa, 0x3, 0x2) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x8, 0x3, 0x3) (async) r1 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0}) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000080)=0x2, 0x3c) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f000000bb80)) 18.48576636s ago: executing program 1 (id=4047): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x3}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x6) close(r2) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600894f0000140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 18.428911618s ago: executing program 1 (id=4048): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2c107f2559cf245b4796ac74aa29c8f0a2007c3584da320beab55485972da5f2ed05794ffd7387928a77565d4200a88de68d8279758a52c7a0cf536cf75832ae6f602c664a474aa52273c7202985f5b64f85bcfcb2682f267293e1ae050afd8cff414e157b4d03e3f6429cbad8f3cb1115e2308527242151ecb864049612297e2c964de2c0538673ec999e67344480773bde27986242efce4c22806b5776223d7bac8c", 0xa3}], 0x1, 0x0, 0x0, 0x2c}, 0x40004) (async) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x14, 0x14, 0x1, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @multicast}) write$tun(r8, &(0x7f00000001c0)={@val={0x0, 0x6005}, @void, @ipv4=@udp={{0x38, 0x4, 0x1, 0x0, 0x1a5, 0x66, 0x0, 0x86, 0x11, 0x0, @broadcast, @local, {[@generic={0x82, 0x5, "6c4ac6"}, @timestamp_prespec={0x44, 0x34, 0x5e, 0x3, 0x4, [{@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@private=0xa010102, 0x1ffe00}, {@empty, 0x1}, {@private=0xa010101, 0x4}, {@loopback, 0x98f}]}, @timestamp_prespec={0x44, 0x1c, 0x94, 0x3, 0xc, [{@multicast1, 0x80000000}, {@private=0xa010101, 0x4800}, {@multicast1, 0x9}]}, @timestamp_prespec={0x44, 0x2c, 0xdf, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x8}, {@rand_addr=0x64010100, 0x7e4}, {@loopback, 0x1}, {@multicast2, 0x4}, {@multicast2, 0x4}]}, @lsrr={0x83, 0xf, 0x94, [@dev={0xac, 0x14, 0x14, 0x2d}, @empty, @dev={0xac, 0x14, 0x14, 0x38}]}, @end, @timestamp={0x44, 0x1c, 0x80, 0x0, 0x7, [0x1, 0x80, 0x0, 0x1, 0x1ff, 0x6]}, @end, @rr={0x7, 0x1b, 0x6a, [@remote, @empty, @loopback, @multicast2, @remote, @loopback]}]}}, {0x4e20, 0x4e23, 0xc5, 0x0, @opaque="843feb9b8c2ece99ef168e71aa592864dd47452c8ce89f5ee6a1e9655cad8f3b92e8a7687ebca08bf8b52e47014a51bdfdcaf6bba770e6f143821afbc9585452fa66526ca1b0e384474aaeb25dc768e2949eebb7f2270b25f68c9b7c09b240e3dc8e9bceddc6f2a496ea1765988aa5a3eb23ab985ed652bad8eed9ac938a147f01bef352dc0abe2c13d3e0d1301b9fb3fdfa1b95b0207d74061e94d9b0ebebd5cc99cf4391e0c65276c3b64df42048e27bdd96c6b58b84f6aacb27f379"}}}, 0x1a9) (async) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000001f851000000600000018100000", @ANYRES32=r10, @ANYBLOB="00000000000000000f8000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r11) 18.160163773s ago: executing program 1 (id=4049): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/19, 0x13}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002600090122bd7008f9ffffff020000000c004e00"], 0x18}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) 18.033913145s ago: executing program 1 (id=4050): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x3c, r3, 0x1, 0x10000, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x3c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r2, @ANYRESOCT=r1, @ANYRES16=r0, @ANYRESOCT=0x0], 0x48}, 0x1, 0x0, 0x0, 0x400c081}, 0xc000) 16.690948242s ago: executing program 4 (id=4051): r0 = socket(0x9, 0x2, 0x3800) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x844) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x2, 0xb, {{0x1c, 0x4, 0x3, 0x1, 0x70, 0x66, 0x0, 0x7, 0x2f, 0x0, @multicast1, @rand_addr=0x64010101, {[@lsrr={0x83, 0x1f, 0x2d, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty]}, @ssrr={0x89, 0x7, 0xdb, [@local]}, @rr={0x7, 0x27, 0x9d, [@local, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xc}, @loopback, @loopback, @private=0xa010102]}, @lsrr={0x83, 0xf, 0x26, [@rand_addr=0x64010101, @broadcast, @multicast2]}]}}}}}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000240)={@mcast1, r4}, 0x14) 16.635623574s ago: executing program 3 (id=4052): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010000000000000000000a00000000000000000000001400110064596d7270310000000100000000000008000a00", @ANYRES32=r0], 0x38}}, 0x20000000) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000004c0)={0x8, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @rand_addr=0x64010102}}}, 0x108) (async) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600fc"], 0x94}, 0x1, 0x0, 0x0, 0x80c0}, 0x24068000) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, r4, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3b}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xbe}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6cd}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x22}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x42}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xb7275bb}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x40}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5a}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x2, 0x7]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x0, 0x4]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 16.505734491s ago: executing program 3 (id=4053): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) recvmsg(r3, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000000)="05000806", 0x4, 0x4008000, &(0x7f0000000100)={0x11, 0x8100, r4, 0x1, 0x4}, 0x14) 16.435488721s ago: executing program 3 (id=4054): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206010200000000000000000000000005000100070000000c0007800800120000f5ff00050004000000000005000500020000220900020073797a310000000011000300686173683a6e65742c6e6574"], 0x58}}, 0x0) 16.378725143s ago: executing program 3 (id=4055): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000001700)=[{&(0x7f0000000180)=""/210, 0xd2}], 0x1, 0x2, 0x1) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r6, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r6, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000100)={0x6, "7679e6"}, 0x6) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a063fbc45ff6205000000000700580003480400945f640094272d7061d328b92d0900000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149224e06040800", 0x58}], 0x1) r8 = socket(0x15, 0x5, 0x0) poll(&(0x7f0000019080)=[{r2, 0x18}, {r8, 0x134}], 0x2, 0x401) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) close(0x3) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r9, 0x1, 0x3}, 0x5f) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710431000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x20006, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, r9}, 0x94) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r10, 0x0, 0xcc, &(0x7f0000000000)={@broadcast, @remote, 0x0, "34b1f718495947b168af8bc9b95393661d82de46a9ffde0029aeb43df45a0d1d", 0x5, 0x7, 0x8, 0xdf0}, 0x3c) 15.46167443s ago: executing program 3 (id=4056): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$inet_sctp(r0, &(0x7f00000009c0)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000200)="7da5c1", 0x3}], 0x1, &(0x7f0000000980)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x9, 0xb, 0x4, 0x8, 0x80000000, 0x7cd5, 0x1}}], 0x30, 0x4040081}, 0x90f0) (async) sendmsg$inet_sctp(r0, &(0x7f00000009c0)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000200)="7da5c1", 0x3}], 0x1, &(0x7f0000000980)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x9, 0xb, 0x4, 0x8, 0x80000000, 0x7cd5, 0x1}}], 0x30, 0x4040081}, 0x90f0) socket$rds(0x15, 0x5, 0x0) (async) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) 4.12480703s ago: executing program 32 (id=4044): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0503000000000000000007000000b947a5c989d2c6120ac6682ee380e53daf"], 0x14}, 0x1, 0x0, 0x0, 0x4004018}, 0x20000000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffc}) ioctl(r3, 0x8b22, &(0x7f0000000040)) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xfffd}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0xc4) 4.08861112s ago: executing program 33 (id=4045): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x58, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x84, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8e}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x17a0000}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8827}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r1, 0x600, 0x70bd2a, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) read(r0, &(0x7f0000000300)=""/42, 0x2a) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x14, 0x25, 0x1, 0x7fff6, 0x25dfdbfe, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x3c, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x89}, @FRA_DST={0x8, 0x1, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 2.057530694s ago: executing program 34 (id=4050): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x3c, r3, 0x1, 0x10000, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x3c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r2, @ANYRESOCT=r1, @ANYRES16=r0, @ANYRESOCT=0x0], 0x48}, 0x1, 0x0, 0x0, 0x400c081}, 0xc000) 1.021894311s ago: executing program 35 (id=4051): r0 = socket(0x9, 0x2, 0x3800) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x844) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x8000, 0x40, 0x2, 0xb, {{0x1c, 0x4, 0x3, 0x1, 0x70, 0x66, 0x0, 0x7, 0x2f, 0x0, @multicast1, @rand_addr=0x64010101, {[@lsrr={0x83, 0x1f, 0x2d, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty]}, @ssrr={0x89, 0x7, 0xdb, [@local]}, @rr={0x7, 0x27, 0x9d, [@local, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0xc}, @loopback, @loopback, @private=0xa010102]}, @lsrr={0x83, 0xf, 0x26, [@rand_addr=0x64010101, @broadcast, @multicast2]}]}}}}}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000240)={@mcast1, r4}, 0x14) 0s ago: executing program 36 (id=4056): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$inet_sctp(r0, &(0x7f00000009c0)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000200)="7da5c1", 0x3}], 0x1, &(0x7f0000000980)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x9, 0xb, 0x4, 0x8, 0x80000000, 0x7cd5, 0x1}}], 0x30, 0x4040081}, 0x90f0) (async) sendmsg$inet_sctp(r0, &(0x7f00000009c0)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000200)="7da5c1", 0x3}], 0x1, &(0x7f0000000980)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x9, 0xb, 0x4, 0x8, 0x80000000, 0x7cd5, 0x1}}], 0x30, 0x4040081}, 0x90f0) socket$rds(0x15, 0x5, 0x0) (async) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) kernel console output (not intermixed with test programs): 0: port 2(bridge_slave_1) entered blocking state [ 448.119710][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.220323][T17699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 448.409675][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.562433][T17711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.573079][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.816439][T17725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.315879][T17749] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3178'. [ 449.411480][T17735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3176'. [ 449.669090][T17245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.782556][T17764] bond9: entered allmulticast mode [ 449.803347][T17764] 8021q: adding VLAN 0 to HW filter on device bond9 [ 450.010554][T17245] veth0_vlan: entered promiscuous mode [ 450.078539][T17245] veth1_vlan: entered promiscuous mode [ 450.242781][T17245] veth0_macvtap: entered promiscuous mode [ 450.350598][T17775] bond10 (unregistering): Released all slaves [ 450.404730][T17245] veth1_macvtap: entered promiscuous mode [ 450.426863][T17782] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3187'. [ 450.580099][T17245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.645516][T17245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.686792][ T6452] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.696395][T17785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3188'. [ 450.956727][T17789] bond1: Unable to set down delay as MII monitoring is disabled [ 450.970111][T17796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3191'. [ 450.993046][T17789] bond1 (unregistering): Released all slaves [ 451.042127][T17800] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3192'. [ 451.087378][T17796] netlink: 'syz.2.3191': attribute type 3 has an invalid length. [ 451.186544][ T1174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.293042][ T6449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.317741][ T6449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.489579][ T1115] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.529274][ T1115] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.568973][ T5826] net_ratelimit: 5 callbacks suppressed [ 451.568990][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.608536][T17809] syzkaller0: entered promiscuous mode [ 451.636968][T17809] syzkaller0: entered allmulticast mode [ 451.654026][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.675350][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.006470][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.306859][T17834] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 452.560593][T17841] vlan2: entered promiscuous mode [ 452.568178][ T9656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.586085][T17841] hsr0: entered promiscuous mode [ 452.604265][T17841] vlan2: entered allmulticast mode [ 452.614922][T17841] hsr0: entered allmulticast mode [ 452.629646][T17841] hsr_slave_0: entered allmulticast mode [ 452.641486][T17841] hsr_slave_1: entered allmulticast mode [ 452.649505][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.865248][ T5644] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 452.879107][ T5644] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 452.893635][ T5644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 452.902020][T12415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.916077][ T5644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 452.930329][ T5644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 453.335245][T17861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3208'. [ 453.396643][T17861] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3208'. [ 453.471501][T17862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3208'. [ 453.521373][T17862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3208'. [ 453.533928][T12415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.661376][T17870] syzkaller0: entered promiscuous mode [ 453.686481][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.707932][T17870] syzkaller0: entered allmulticast mode [ 453.956956][T17884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3214'. [ 453.995210][T17848] ±ÿ speed is unknown, defaulting to 1000 [ 454.736298][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.009949][ T5626] Bluetooth: hci0: command tx timeout [ 455.495867][T17920] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3225'. [ 455.651740][T12406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.768093][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.782603][T17922] syzkaller0: entered promiscuous mode [ 455.798155][T17922] syzkaller0: entered allmulticast mode [ 456.736487][ T5719] net_ratelimit: 1 callbacks suppressed [ 456.736503][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.810414][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.882474][T17954] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3231'. [ 457.049407][ T5626] Bluetooth: hci0: command tx timeout [ 457.850230][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.501119][T17848] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.508742][T17848] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.516015][T17848] bridge_slave_0: entered allmulticast mode [ 458.523248][T17848] bridge_slave_0: entered promiscuous mode [ 458.546901][T17848] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.554177][T17848] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.594218][T17848] bridge_slave_1: entered allmulticast mode [ 458.642304][T17848] bridge_slave_1: entered promiscuous mode [ 458.742698][T17958] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3232'. [ 458.764160][T17957] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3233'. [ 458.805834][T17958] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3232'. [ 458.844604][T17848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.891414][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.931311][T17848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.997990][T17972] netlink: zone id is out of range [ 459.014446][T17972] netlink: zone id is out of range [ 459.027341][T17972] netlink: zone id is out of range [ 459.034635][T17972] netlink: zone id is out of range [ 459.042988][T17972] netlink: zone id is out of range [ 459.052180][T17972] netlink: zone id is out of range [ 459.123480][T17848] team0: Port device team_slave_0 added [ 459.132051][ T5626] Bluetooth: hci0: command tx timeout [ 459.152695][T17848] team0: Port device team_slave_1 added [ 459.233800][T17983] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3240'. [ 459.244270][T17983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3240'. [ 459.263641][T17848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.281599][T17848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.323459][T17848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.324949][T17989] netlink: 'syz.3.3242': attribute type 1 has an invalid length. [ 459.338713][T17848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.364560][T17848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.402179][T17848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.539602][T17848] hsr_slave_0: entered promiscuous mode [ 459.549449][T17848] hsr_slave_1: entered promiscuous mode [ 459.556441][T17848] debugfs: 'hsr0' already exists in 'hsr' [ 459.562281][T17848] Cannot create hsr debugfs directory [ 459.810359][T18007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3245'. [ 459.896276][ T1174] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.923319][ T1174] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.957283][ T1174] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.970134][ T1174] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.056958][T18013] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3247'. [ 460.103931][T18015] netlink: 'syz.2.3248': attribute type 21 has an invalid length. [ 460.112665][T18016] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 460.129319][T18015] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3248'. [ 460.142295][T18015] netlink: 'syz.2.3248': attribute type 21 has an invalid length. [ 460.158497][T18015] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3248'. [ 460.761473][T18037] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3254'. [ 461.207453][ T5626] Bluetooth: hci0: command tx timeout [ 462.006541][ T46] net_ratelimit: 388 callbacks suppressed [ 462.006555][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.684981][T18002] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 462.698933][T17848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 462.773593][T17848] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 462.797890][T17848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 462.807623][T12406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.858271][T17848] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 462.877729][T17848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 462.908658][T17848] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 462.923074][T17848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 462.972842][T17848] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 463.046922][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.133401][ T9656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.267526][T18063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.380257][T17848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.448285][T18063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.477238][T18072] netlink: 'syz.0.3265': attribute type 1 has an invalid length. [ 463.508238][T18063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.522900][T18063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.532621][T18063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.544115][T18063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.558980][T18068] 8021q: adding VLAN 0 to HW filter on device bond10 [ 463.579086][T17848] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.622257][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.629507][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.652325][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.659533][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.662235][T18076] netlink: 'syz.3.3266': attribute type 39 has an invalid length. [ 464.305326][T18110] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 464.338104][T18112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3274'. [ 464.367033][T18112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3274'. [ 464.400861][T18112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3274'. [ 464.532588][T18117] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3277'. [ 464.939324][T18144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3281'. [ 465.127610][T18154] netlink: 'syz.0.3284': attribute type 3 has an invalid length. [ 465.304859][T17848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.408734][T18170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3286'. [ 465.486423][T17848] veth0_vlan: entered promiscuous mode [ 465.500591][T17848] veth1_vlan: entered promiscuous mode [ 465.739005][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3290'. [ 465.744580][T17848] veth0_macvtap: entered promiscuous mode [ 465.815827][T17848] veth1_macvtap: entered promiscuous mode [ 465.822734][T18176] netlink: 'syz.4.3290': attribute type 16 has an invalid length. [ 465.933553][T17848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.995607][T17848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.060135][T12406] IPVS: starting estimator thread 0... [ 466.078090][ T6449] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.122788][T18194] xt_ecn: cannot match TCP bits for non-tcp packets [ 466.133418][T18181] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3292'. [ 466.186687][T18188] IPVS: using max 34 ests per chain, 81600 per kthread [ 466.188075][T18181] pimreg3: entered allmulticast mode [ 466.288756][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.353902][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.399664][T18203] netlink: 'syz.4.3296': attribute type 1 has an invalid length. [ 466.441800][T18203] netlink: 'syz.4.3296': attribute type 4 has an invalid length. [ 466.464296][ T1174] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.487268][T18203] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3296'. [ 467.021032][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.066267][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.201065][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.209141][ T46] net_ratelimit: 7 callbacks suppressed [ 467.209157][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.277296][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.294523][T18225] netlink: 'syz.0.3301': attribute type 11 has an invalid length. [ 467.318766][T18226] netlink: 'syz.4.3303': attribute type 29 has an invalid length. [ 467.333210][T18226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3303'. [ 467.372407][T18225] gretap0: entered promiscuous mode [ 467.407036][T18225] vlan2: entered promiscuous mode [ 467.955032][ T5644] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 467.969237][ T5644] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 467.982653][ T5644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 467.995201][ T5644] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 468.007409][ T5644] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 468.247795][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.858190][ T1174] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.907869][ T1174] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.908367][T12405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.935218][ T1174] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.970006][ T1174] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 469.060984][T18280] xt_l2tp: invalid flags combination: 8 [ 469.288576][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.621940][T18242] ±ÿ speed is unknown, defaulting to 1000 [ 469.780050][T18320] Bluetooth: MGMT ver 1.23 [ 469.806737][T18320] __nla_validate_parse: 5 callbacks suppressed [ 469.806755][T18320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3327'. [ 469.836831][T18320] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.844583][T18320] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.902343][T18324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3329'. [ 470.088465][ T5626] Bluetooth: hci1: command tx timeout [ 470.141009][T18324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.236341][T18324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.260929][T18340] netlink: 'syz.0.3331': attribute type 21 has an invalid length. [ 470.282275][T18324] bond0 (unregistering): Released all slaves [ 470.328345][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.760483][T18372] sctp: [Deprecated]: syz.1.3336 (pid 18372) Use of int in maxseg socket option. [ 470.760483][T18372] Use struct sctp_assoc_value instead [ 470.853421][ T63] bridge_slave_1: left allmulticast mode [ 470.860348][ T63] bridge_slave_1: left promiscuous mode [ 470.873078][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.909218][ T63] bridge_slave_0: left allmulticast mode [ 470.921500][ T63] bridge_slave_0: left promiscuous mode [ 470.929436][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.986476][T18378] netlink: 'syz.3.3339': attribute type 10 has an invalid length. [ 471.113858][ T63] bond9 (unregistering): (slave ip6gretap2): Releasing active interface [ 471.232480][ T63] bond2 (unregistering): (slave geneve2): Releasing active interface [ 471.321857][ T63] bond1 (unregistering): (slave veth3): Releasing active interface [ 471.330059][ T63] batadv1: entered promiscuous mode [ 471.344792][ T63] bond1 (unregistering): (slave batadv1): Releasing active interface [ 471.361549][ T63] bond1 (unregistering): (slave veth5): Releasing active interface [ 471.370644][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.382800][ T63] bond1 (unregistering): Released all slaves [ 471.402862][ T63] bond2 (unregistering): Released all slaves [ 471.418676][ T63] bond3 (unregistering): Released all slaves [ 471.433357][ T63] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 471.461478][ T63] bond4 (unregistering): (slave bond5): Releasing active interface [ 471.470266][ T63] bond4 (unregistering): Released all slaves [ 471.484535][ T63] bond5 (unregistering): Released all slaves [ 471.500176][ T63] bond6 (unregistering): Released all slaves [ 471.518330][ T63] bond7 (unregistering): Released all slaves [ 471.534179][ T63] bond8 (unregistering): Released all slaves [ 471.553718][ T63] bond9 (unregistering): Released all slaves [ 471.567798][ T63] bond10 (unregistering): Released all slaves [ 471.581632][ T63] bond11 (unregistering): Released all slaves [ 471.619742][T18377] lo: entered allmulticast mode [ 471.625882][T18377] tunl0: entered allmulticast mode [ 471.633127][T18377] gre0: entered allmulticast mode [ 471.647348][T18377] gretap0: entered allmulticast mode [ 471.658162][T18377] erspan0: entered allmulticast mode [ 471.667841][T18377] ip_vti0: entered allmulticast mode [ 471.676026][T18377] ip6_vti0: entered allmulticast mode [ 471.695305][T18377] sit0: entered allmulticast mode [ 471.724149][T18377] ip6tnl0: entered allmulticast mode [ 471.743195][T18377] ip6gre0: entered allmulticast mode [ 471.773141][T18377] syz_tun: entered allmulticast mode [ 471.803676][T18378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.835534][T18378] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 471.878793][T18242] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.886298][T18242] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.893802][T18242] bridge_slave_0: entered allmulticast mode [ 471.908307][T18242] bridge_slave_0: entered promiscuous mode [ 471.935289][T18242] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.938861][T12406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.952522][T18242] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.973327][T18242] bridge_slave_1: entered allmulticast mode [ 471.982442][T18242] bridge_slave_1: entered promiscuous mode [ 471.992431][ T63] tipc: Disabling bearer [ 471.999811][ T63] tipc: Left network mode [ 472.006007][T18381] netlink: 'syz.3.3340': attribute type 2 has an invalid length. [ 472.015370][T18381] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3340'. [ 472.040455][T18242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.075099][T18242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.079400][T18381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3340'. [ 472.170241][ T5626] Bluetooth: hci1: command tx timeout [ 472.261508][T18242] team0: Port device team_slave_0 added [ 472.278721][T18242] team0: Port device team_slave_1 added [ 472.300610][T18385] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3341'. [ 472.313616][T18310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 472.324274][T18242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.331530][T18242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.363576][T18242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.408309][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.598094][T18242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.613384][T18242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.660482][T18242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.738057][T12406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.064968][T18417] netlink: 'syz.0.3348': attribute type 1 has an invalid length. [ 473.091160][T18242] hsr_slave_0: entered promiscuous mode [ 473.099600][T18242] hsr_slave_1: entered promiscuous mode [ 473.106631][T18242] debugfs: 'hsr0' already exists in 'hsr' [ 473.112575][T18242] Cannot create hsr debugfs directory [ 473.265695][T18417] bond1: entered promiscuous mode [ 473.283585][T18417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 473.327862][T18418] bond1: (slave bridge1): making interface the new active one [ 473.336507][T18418] bridge1: entered promiscuous mode [ 473.343065][T18418] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 473.446752][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.592064][T18421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3349'. [ 473.917781][T18242] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.941609][T18242] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.114118][T18242] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.125775][T18242] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.198094][ T63] hsr_slave_0: left promiscuous mode [ 474.204177][ T63] hsr_slave_1: left promiscuous mode [ 474.212348][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.220173][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.230401][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.238007][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.246361][ T5626] Bluetooth: hci1: command tx timeout [ 474.264225][ T63] veth1_macvtap: left promiscuous mode [ 474.271747][ T63] veth0_macvtap: left allmulticast mode [ 474.277711][ T63] veth0_macvtap: left promiscuous mode [ 474.507423][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.594054][ T63] team0 (unregistering): Port device team_slave_1 removed [ 474.631579][ T63] team0 (unregistering): Port device team_slave_0 removed [ 474.851112][T18242] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.861883][T18242] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.972116][T12406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.985397][T18242] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.999317][T18242] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.279638][ T63] IPVS: stop unused estimator thread 0... [ 475.527594][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.819929][T18412] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 475.852087][T18242] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 475.894606][T18242] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 475.938375][T12406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.969488][T18242] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 476.002013][T18242] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.037085][T18242] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 476.076590][T18242] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 476.098569][T18242] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 476.132149][T18242] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 476.327057][ T5626] Bluetooth: hci1: command tx timeout [ 476.392418][T18483] Bluetooth: MGMT ver 1.23 [ 476.568281][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.578982][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.136704][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.610365][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.860321][ T9656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.017156][ T9656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.650414][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.272982][T18242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.285444][T18516] netlink: 'syz.2.3364': attribute type 1 has an invalid length. [ 479.306815][T18516] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3364'. [ 479.383452][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3365'. [ 479.384127][T18242] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.435389][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.442629][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.511608][T18529] netlink: 'syz.1.3365': attribute type 1 has an invalid length. [ 479.527714][ T6449] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.534949][ T6449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.558681][T18532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 479.592710][T18534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.602892][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.633925][T18534] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.642915][ T1174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.664347][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.694894][T18540] netlink: 'syz.0.3370': attribute type 1 has an invalid length. [ 479.727836][T18540] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3370'. [ 479.882439][T18547] netlink: 'syz.2.3372': attribute type 1 has an invalid length. [ 479.953903][T18547] nft_compat: unsupported protocol 0 [ 480.221742][T18563] netlink: 'syz.1.3377': attribute type 1 has an invalid length. [ 480.392561][T18574] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3381'. [ 480.482272][T18572] bond0: (slave bridge1): making interface the new active one [ 480.512674][T18572] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 480.548353][T18576] syzkaller0: entered promiscuous mode [ 480.556047][T18579] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3379'. [ 480.572039][T18576] syzkaller0: entered allmulticast mode [ 481.238119][T18242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.247793][T18617] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3391'. [ 481.332017][T18611] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3389'. [ 481.589004][T18627] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 481.628189][T18637] netlink: 'syz.1.3395': attribute type 32 has an invalid length. [ 481.653456][T18637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3395'. [ 481.774389][T18637] bond1: Setting coupled_control to off (0) [ 481.967767][T18656] xt_ipcomp: unknown flags 1D [ 482.111252][T18663] netlink: 452 bytes leftover after parsing attributes in process `syz.2.3401'. [ 482.362915][T18242] veth0_vlan: entered promiscuous mode [ 482.411968][T18242] veth1_vlan: entered promiscuous mode [ 482.430043][T18675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3405'. [ 482.510916][T18678] geneve2: entered promiscuous mode [ 482.631967][T18687] syzkaller0: entered promiscuous mode [ 482.671825][T18687] syzkaller0: entered allmulticast mode [ 482.710228][T18242] veth0_macvtap: entered promiscuous mode [ 482.716987][T18692] netlink: 'syz.3.3410': attribute type 1 has an invalid length. [ 482.720964][T18687] net_ratelimit: 6 callbacks suppressed [ 482.720981][T18687] 0: reclassify loop, rule prio 0, protocol 800 [ 482.753957][T18242] veth1_macvtap: entered promiscuous mode [ 482.806890][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.912204][T18242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.944761][T18242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.111877][ T1174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.163502][ T1174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.210637][T18712] netlink: 'syz.3.3414': attribute type 12 has an invalid length. [ 483.239791][T18712] netlink: 'syz.3.3414': attribute type 29 has an invalid length. [ 483.255424][T18712] netlink: 'syz.3.3414': attribute type 3 has an invalid length. [ 483.288617][ T63] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.373729][ T1174] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 483.435632][ T1174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.616274][T12405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.634918][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.679092][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.784858][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.814653][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.846629][ T1142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.335765][T18751] __nla_validate_parse: 12 callbacks suppressed [ 484.335784][T18751] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3427'. [ 484.586012][T18761] sctp: [Deprecated]: syz.1.3431 (pid 18761) Use of struct sctp_assoc_value in delayed_ack socket option. [ 484.586012][T18761] Use struct sctp_sack_info instead [ 484.725460][T18765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3433'. [ 484.760871][T18765] netlink: 'syz.4.3433': attribute type 9 has an invalid length. [ 484.773386][T18765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3433'. [ 484.877375][ T63] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.893071][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.971574][T18767] syzkaller0: entered promiscuous mode [ 485.001462][T18767] syzkaller0: entered allmulticast mode [ 485.060520][T18777] netlink: 'syz.1.3436': attribute type 1 has an invalid length. [ 485.063615][ T1174] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.133336][ T1174] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.327551][T18788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3439'. [ 485.377431][T18797] netlink: 'syz.4.3441': attribute type 15 has an invalid length. [ 485.385899][T18797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3441'. [ 485.397118][ T6447] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.586656][ T112] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 485.628262][ T112] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 485.651116][T18808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3443'. [ 485.679712][ T112] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 485.722256][ T112] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 485.773175][T18814] netlink: 'syz.2.3446': attribute type 1 has an invalid length. [ 485.811813][T18825] syzkaller0: entered promiscuous mode [ 485.838565][T18825] syzkaller0: entered allmulticast mode [ 485.869694][T18814] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 485.929319][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.227969][T18843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3453'. [ 486.240828][T12405] IPVS: starting estimator thread 0... [ 486.244986][T18843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3453'. [ 486.356290][T18847] IPVS: using max 34 ests per chain, 81600 per kthread [ 486.433758][T18853] x_tables: duplicate underflow at hook 1 [ 486.473914][T18860] sctp: [Deprecated]: syz.4.3459 (pid 18860) Use of int in maxseg socket option. [ 486.473914][T18860] Use struct sctp_assoc_value instead [ 486.516775][T18859] erspan0: entered promiscuous mode [ 486.648490][T12414] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.912196][T18880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3465'. [ 486.980160][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.028054][T18890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.058453][T18890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.645018][T18921] bond1: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 487.657253][T18921] bond1 (unregistering): Released all slaves [ 487.776427][ C0] net_ratelimit: 88 callbacks suppressed [ 487.776445][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.793345][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.803326][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.811536][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.819852][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.828009][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.867782][T18890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.882519][T18890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.891305][T18890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.901855][T18890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.302905][T18930] bond2: entered promiscuous mode [ 488.369507][T18933] netlink: 'syz.0.3475': attribute type 1 has an invalid length. [ 488.395101][T18933] 8021q: adding VLAN 0 to HW filter on device bond3 [ 488.403769][T18933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3475'. [ 488.576045][T18940] veth3: entered promiscuous mode [ 489.953208][T18894] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 490.118099][T18945] netlink: 'syz.1.3478': attribute type 7 has an invalid length. [ 490.128226][T18945] __nla_validate_parse: 2 callbacks suppressed [ 490.128238][T18945] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3478'. [ 490.454639][T18957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3481'. [ 490.478504][T18961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3484'. [ 490.500287][T18963] rdma_op ffff888033d951f0 conn xmit_rdma 0000000000000000 [ 490.533991][T18963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3485'. [ 490.705087][T18972] netlink: 'syz.1.3487': attribute type 4 has an invalid length. [ 490.735618][T18963] 8021q: adding VLAN 0 to HW filter on device bond3 [ 490.857390][T18969] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 490.999640][T18991] block nbd0: Unsupported socket: should be TCP or UNIX. [ 491.298513][T19008] xt_bpf: check failed: parse error [ 491.781706][T19021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3490'. [ 491.913001][T19029] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3503'. [ 491.932135][T19029] veth0_to_bond: default FDB implementation only supports local addresses [ 491.953653][T19034] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3505'. [ 491.988519][T19034] 0„ž{X¹¦: renamed from gretap0 (while UP) [ 492.034090][T19034] 0„ž{X¹¦: entered allmulticast mode [ 492.066932][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3505'. [ 492.159859][T19039] netlink: 'syz.1.3506': attribute type 25 has an invalid length. [ 492.184768][T19041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3507'. [ 492.224067][T19041] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3507'. [ 492.453617][T19048] xt_nat: multiple ranges no longer supported [ 493.342800][T19073] netlink: 'syz.4.3516': attribute type 11 has an invalid length. [ 493.601778][T19087] x_tables: duplicate underflow at hook 1 [ 494.765211][T19140] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 494.777950][T19140] bond3 (unregistering): Released all slaves [ 495.113964][T19160] net_ratelimit: 1314 callbacks suppressed [ 495.113981][T19160] openvswitch: netlink: Flow key attribute not present in set flow. [ 495.142300][T19160] __nla_validate_parse: 8 callbacks suppressed [ 495.142318][T19160] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3544'. [ 495.262575][T19165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3546'. [ 495.893450][T19195] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3555'. [ 496.283016][T19219] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3565'. [ 496.517011][T19228] netlink: 'syz.1.3566': attribute type 4 has an invalid length. [ 496.535192][T19232] netlink: 'syz.3.3568': attribute type 1 has an invalid length. [ 496.556802][T19228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3566'. [ 496.817310][T19251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3573'. [ 496.864766][T19241] bridge1: entered promiscuous mode [ 496.882558][T19251] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3573'. [ 497.216396][T19256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3575'. [ 497.216695][T19257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3575'. [ 497.652249][T19272] ip_tables: iptables: counters copy to user failed while replacing table [ 497.915253][T19277] xt_TCPMSS: Only works on TCP SYN packets [ 497.964127][T19275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3581'. [ 498.933499][T19309] unsupported nlmsg_type 40 [ 499.009608][T19309] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 499.300096][ T6452] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 499.317133][T19322] xt_l2tp: missing protocol rule (udp|l2tpip) [ 499.457561][T19324] netlink: 'syz.3.3594': attribute type 1 has an invalid length. [ 499.723451][T19329] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 499.802644][T19330] macvtap1: entered allmulticast mode [ 499.901220][T19332] bond1: (slave bridge2): making interface the new active one [ 499.920956][T19332] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 500.309966][T19351] __nla_validate_parse: 6 callbacks suppressed [ 500.309985][T19351] netlink: 83 bytes leftover after parsing attributes in process `syz.2.3598'. [ 500.466777][T19357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 501.808728][T19400] netlink: 420 bytes leftover after parsing attributes in process `syz.3.3609'. [ 501.961781][T19404] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3611'. [ 502.473325][T19421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3617'. [ 502.505209][T19424] bridge3: entered promiscuous mode [ 502.535602][T19424] bridge3: entered allmulticast mode [ 503.337031][T19459] ip6t_REJECT: ECHOREPLY is not supported [ 503.595434][T19475] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3631'. [ 503.642010][T19479] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3631'. [ 504.155448][T19498] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3636'. [ 504.235437][T19497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3635'. [ 504.519189][T19507] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 504.588759][T19510] bridge0: port 3(vlan2) entered blocking state [ 504.605419][T19510] bridge0: port 3(vlan2) entered disabled state [ 504.624182][T19510] vlan2: entered allmulticast mode [ 504.644399][T19510] geneve0: entered allmulticast mode [ 504.673096][T19510] vlan2: entered promiscuous mode [ 504.708622][T19510] geneve0: entered promiscuous mode [ 504.983445][T19529] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3648'. [ 505.005246][T19530] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3647'. [ 505.251896][T19538] erspan1: entered promiscuous mode [ 505.280219][T19538] erspan1: entered allmulticast mode [ 505.305034][T19542] netlink: 'syz.4.3651': attribute type 10 has an invalid length. [ 505.340766][T19544] netlink: 'syz.4.3651': attribute type 10 has an invalid length. [ 505.413374][T19548] xt_hashlimit: size too large, truncated to 1048576 [ 505.527499][T19549] block nbd0: Unsupported socket: should be TCP or UNIX. [ 505.968665][T19568] __nla_validate_parse: 1 callbacks suppressed [ 505.968683][T19568] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3657'. [ 506.063072][T19568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3657'. [ 506.382154][T19553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.423860][T19558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.672928][T19589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3665'. [ 506.703251][T19589] netlink: 'syz.4.3665': attribute type 10 has an invalid length. [ 506.714654][T19589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3665'. [ 506.784928][T19595] bond0: entered allmulticast mode [ 506.791308][T19595] bond_slave_0: entered allmulticast mode [ 506.797934][T19595] bond_slave_1: entered allmulticast mode [ 506.826715][T19595] batadv0: entered allmulticast mode [ 506.925747][T19602] x_tables: duplicate underflow at hook 3 [ 506.938752][T19600] syzkaller0: entered promiscuous mode [ 506.947779][T19600] syzkaller0: entered allmulticast mode [ 506.993321][T19600] tipc: Started in network mode [ 507.013402][T19600] tipc: Node identity 7a55a3a0a605, cluster identity 4711 [ 507.014768][T19607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3671'. [ 507.032920][T19600] tipc: Enabled bearer , priority 0 [ 507.146515][T19612] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 507.153805][T19612] IPv6: NLM_F_CREATE should be set when creating new route [ 507.192281][T19598] tipc: Resetting bearer [ 507.325660][T19598] tipc: Disabling bearer [ 507.510075][T19629] netlink: 'syz.4.3676': attribute type 4 has an invalid length. [ 507.538688][T19629] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3676'. [ 507.660531][T19638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3677'. [ 507.771295][T19645] xt_TCPMSS: Only works on TCP SYN packets [ 507.814154][T19642] veth5: entered allmulticast mode [ 507.824412][T19644] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3680'. [ 507.842244][T19642] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3679'. [ 507.854613][T19649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3682'. [ 507.866038][T19642] netlink: 'syz.1.3679': attribute type 5 has an invalid length. [ 510.522763][T19632] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 510.690005][T19664] netlink: 'syz.4.3686': attribute type 1 has an invalid length. [ 510.812901][T19671] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 510.838983][T19664] 8021q: adding VLAN 0 to HW filter on device bond2 [ 510.867420][T19681] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 510.879679][T19681] bond2: (slave batadv1): making interface the new active one [ 510.899401][T19681] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 510.954189][T19674] bond2: (slave veth3): Enslaving as an active interface with a down link [ 511.047012][T19673] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 511.081717][T19676] __nla_validate_parse: 8 callbacks suppressed [ 511.081737][T19676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3688'. [ 511.102944][ T1115] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.119306][T19676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3688'. [ 511.158916][ T1115] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.203358][T19694] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3692'. [ 511.268924][ T1115] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.310517][ T1115] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.481165][T19706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3696'. [ 511.507788][T19707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3696'. [ 511.564153][T19713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3696'. [ 511.882521][T19729] netlink: 'syz.0.3703': attribute type 1 has an invalid length. [ 511.899152][T19731] netlink: 'syz.0.3703': attribute type 1 has an invalid length. [ 511.911942][T19730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.968614][T19730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.977730][T19730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.990751][T19736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.999300][T19736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.009168][T19736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.021662][T19730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.030338][T19730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.040014][T19730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.048812][T19730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.339228][T19751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3709'. [ 512.357180][T19754] xt_hashlimit: size too large, truncated to 1048576 [ 512.399909][T19748] nbd1: detected capacity change from 0 to 63 [ 512.424380][T19760] netlink: 'syz.3.3709': attribute type 11 has an invalid length. [ 512.544303][ T5626] block nbd1: Receive control failed (result -104) [ 512.726360][ T5626] Bluetooth: hci1: command 0x0405 tx timeout [ 513.014544][T19780] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3716'. [ 513.181591][T19798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3715'. [ 513.527883][T19801] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3720'. [ 513.748500][T19801] syzkaller0: entered promiscuous mode [ 513.780380][T19801] syzkaller0: entered allmulticast mode [ 516.245576][T19832] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 516.460628][T19846] netlink: 'syz.1.3732': attribute type 1 has an invalid length. [ 516.653180][T19842] bond4: entered promiscuous mode [ 516.685525][T19842] bond4: entered allmulticast mode [ 516.790660][T19846] 8021q: adding VLAN 0 to HW filter on device bond3 [ 516.813339][T19858] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 516.823818][T19858] bond3: entered allmulticast mode [ 516.841856][T19860] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 516.855565][T19870] netlink: 'syz.4.3738': attribute type 1 has an invalid length. [ 517.057563][T19876] __nla_validate_parse: 1 callbacks suppressed [ 517.057581][T19876] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3740'. [ 517.219366][T19884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3741'. [ 517.231354][T19889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3743'. [ 517.721468][T19909] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 517.828911][T19913] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3748'. [ 517.957801][T19913] netlink: 'syz.1.3748': attribute type 2 has an invalid length. [ 518.237326][T19930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3751'. [ 518.707442][T19939] syzkaller1: entered promiscuous mode [ 518.733556][T19939] syzkaller1: entered allmulticast mode [ 519.018639][T19957] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.3759'. [ 521.593725][T19973] syzkaller0: entered promiscuous mode [ 521.626753][T19973] syzkaller0: entered allmulticast mode [ 521.649256][T19977] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3764'. [ 521.799669][T19986] netlink: 508 bytes leftover after parsing attributes in process `syz.2.3769'. [ 522.103433][T20012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3771'. [ 522.305009][T20019] netlink: 'syz.2.3776': attribute type 29 has an invalid length. [ 522.314406][T20020] netlink: 'syz.1.3777': attribute type 3 has an invalid length. [ 522.346710][T20020] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3777'. [ 522.366634][T20019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3776'. [ 522.395712][T20020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3777'. [ 522.435367][T20022] netlink: 'syz.2.3776': attribute type 29 has an invalid length. [ 522.453040][T20029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3778'. [ 522.499319][T20022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3776'. [ 522.531023][T20035] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3775'. [ 522.576686][T20020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3777'. [ 522.590755][T20024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3778'. [ 522.596638][T20016] netlink: 'syz.0.3775': attribute type 2 has an invalid length. [ 522.651204][T20030] netlink: 'syz.0.3775': attribute type 4 has an invalid length. [ 522.948907][T20050] netlink: 'syz.4.3784': attribute type 1 has an invalid length. [ 522.962567][T20050] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3784'. [ 523.008502][T20052] netlink: 'syz.4.3784': attribute type 1 has an invalid length. [ 523.052137][T20041] syzkaller0: entered promiscuous mode [ 523.076407][T20041] syzkaller0: entered allmulticast mode [ 523.263329][T20066] FAULT_INJECTION: forcing a failure. [ 523.263329][T20066] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 523.305993][T20066] CPU: 0 UID: 0 PID: 20066 Comm: syz.1.3789 Not tainted syzkaller #0 PREEMPT(full) [ 523.306016][T20066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 523.306033][T20066] Call Trace: [ 523.306039][T20066] [ 523.306046][T20066] dump_stack_lvl+0xe8/0x150 [ 523.306184][T20066] should_fail_ex+0x40c/0x560 [ 523.306282][T20066] _copy_from_user+0x2d/0xb0 [ 523.306331][T20066] ___sys_sendmsg+0x1c6/0x360 [ 523.306412][T20066] ? __lock_acquire+0x683/0x2cf0 [ 523.306453][T20066] ? __pfx____sys_sendmsg+0x10/0x10 [ 523.306495][T20066] ? __fget_files+0x2a/0x420 [ 523.306537][T20066] ? __fget_files+0x3a2/0x420 [ 523.306563][T20066] __x64_sys_sendmsg+0x1b1/0x290 [ 523.306581][T20066] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 523.306625][T20066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.306658][T20066] do_syscall_64+0x174/0x580 [ 523.306737][T20066] ? trace_irq_disable+0x3b/0x140 [ 523.306769][T20066] ? clear_bhb_loop+0x40/0x90 [ 523.306788][T20066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.306803][T20066] RIP: 0033:0x7ff241f9e019 [ 523.306822][T20066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.306834][T20066] RSP: 002b:00007ff242f32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.306851][T20066] RAX: ffffffffffffffda RBX: 00007ff242225fa0 RCX: 00007ff241f9e019 [ 523.306863][T20066] RDX: 0000000000020800 RSI: 0000200000000300 RDI: 0000000000000005 [ 523.306873][T20066] RBP: 00007ff242f32090 R08: 0000000000000000 R09: 0000000000000000 [ 523.306883][T20066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.306893][T20066] R13: 00007ff242226038 R14: 00007ff242225fa0 R15: 00007fffeb0b36f8 [ 523.306921][T20066] [ 523.906989][T20082] x_tables: duplicate underflow at hook 4 [ 526.640482][T20117] FAULT_INJECTION: forcing a failure. [ 526.640482][T20117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.684370][T20117] CPU: 1 UID: 0 PID: 20117 Comm: syz.4.3801 Not tainted syzkaller #0 PREEMPT(full) [ 526.684398][T20117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 526.684409][T20117] Call Trace: [ 526.684415][T20117] [ 526.684423][T20117] dump_stack_lvl+0xe8/0x150 [ 526.684455][T20117] should_fail_ex+0x40c/0x560 [ 526.684490][T20117] _copy_from_user+0x2d/0xb0 [ 526.684508][T20117] __copy_msghdr+0x390/0x590 [ 526.684534][T20117] ___sys_sendmsg+0x213/0x360 [ 526.684553][T20117] ? __lock_acquire+0x683/0x2cf0 [ 526.684583][T20117] ? __pfx____sys_sendmsg+0x10/0x10 [ 526.684634][T20117] ? __fget_files+0x2a/0x420 [ 526.684659][T20117] ? __fget_files+0x3a2/0x420 [ 526.684692][T20117] __x64_sys_sendmsg+0x1b1/0x290 [ 526.684716][T20117] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 526.684754][T20117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.684774][T20117] do_syscall_64+0x174/0x580 [ 526.684795][T20117] ? trace_irq_disable+0x3b/0x140 [ 526.684820][T20117] ? clear_bhb_loop+0x40/0x90 [ 526.684842][T20117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.684861][T20117] RIP: 0033:0x7f657c99e019 [ 526.684878][T20117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.684894][T20117] RSP: 002b:00007f657d7de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.684915][T20117] RAX: ffffffffffffffda RBX: 00007f657cc25fa0 RCX: 00007f657c99e019 [ 526.684929][T20117] RDX: 0000000000020800 RSI: 0000200000000300 RDI: 0000000000000005 [ 526.684942][T20117] RBP: 00007f657d7de090 R08: 0000000000000000 R09: 0000000000000000 [ 526.684954][T20117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.684964][T20117] R13: 00007f657cc26038 R14: 00007f657cc25fa0 R15: 00007fffe577cd98 [ 526.684993][T20117] [ 527.822611][T20160] syzkaller0: entered promiscuous mode [ 527.834058][T20160] syzkaller0: entered allmulticast mode [ 527.925117][T20172] netlink: 'syz.0.3813': attribute type 1 has an invalid length. [ 528.123887][T20134] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 528.135211][T20178] __nla_validate_parse: 4 callbacks suppressed [ 528.135228][T20178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3813'. [ 528.269694][T20180] FAULT_INJECTION: forcing a failure. [ 528.269694][T20180] name failslab, interval 1, probability 0, space 0, times 1 [ 528.294213][T20180] CPU: 0 UID: 0 PID: 20180 Comm: syz.2.3815 Not tainted syzkaller #0 PREEMPT(full) [ 528.294239][T20180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 528.294250][T20180] Call Trace: [ 528.294256][T20180] [ 528.294263][T20180] dump_stack_lvl+0xe8/0x150 [ 528.294305][T20180] should_fail_ex+0x40c/0x560 [ 528.294331][T20180] should_failslab+0xa8/0x100 [ 528.294401][T20180] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 528.294430][T20180] ? local_lock_release+0x9c/0x160 [ 528.294520][T20180] ? __alloc_skb+0x1d7/0x7a0 [ 528.294535][T20180] ? __alloc_skb+0x1d7/0x7a0 [ 528.294558][T20180] __alloc_skb+0x1d7/0x7a0 [ 528.294579][T20180] netlink_sendmsg+0x5d4/0xb40 [ 528.294662][T20180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 528.294688][T20180] ? aa_sock_msg_perm+0xf1/0x1b0 [ 528.294764][T20180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 528.294783][T20180] sock_sendmsg_nosec+0x13a/0x180 [ 528.294811][T20180] ____sys_sendmsg+0x54e/0x850 [ 528.294837][T20180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 528.294866][T20180] ? import_iovec+0x73/0xa0 [ 528.294925][T20180] ___sys_sendmsg+0x2a5/0x360 [ 528.294944][T20180] ? __lock_acquire+0x683/0x2cf0 [ 528.294976][T20180] ? __pfx____sys_sendmsg+0x10/0x10 [ 528.295026][T20180] ? __fget_files+0x2a/0x420 [ 528.295050][T20180] ? __fget_files+0x3a2/0x420 [ 528.295082][T20180] __x64_sys_sendmsg+0x1b1/0x290 [ 528.295105][T20180] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 528.295138][T20180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.295158][T20180] do_syscall_64+0x174/0x580 [ 528.295178][T20180] ? trace_irq_disable+0x3b/0x140 [ 528.295200][T20180] ? clear_bhb_loop+0x40/0x90 [ 528.295222][T20180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.295240][T20180] RIP: 0033:0x7eff4259e019 [ 528.295259][T20180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.295275][T20180] RSP: 002b:00007eff407f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 528.295302][T20180] RAX: ffffffffffffffda RBX: 00007eff42825fa0 RCX: 00007eff4259e019 [ 528.295315][T20180] RDX: 0000000000020800 RSI: 0000200000000300 RDI: 0000000000000005 [ 528.295326][T20180] RBP: 00007eff407f6090 R08: 0000000000000000 R09: 0000000000000000 [ 528.295337][T20180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.295347][T20180] R13: 00007eff42826038 R14: 00007eff42825fa0 R15: 00007ffde48bd4c8 [ 528.295378][T20180] [ 528.304769][T20182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3816'. [ 529.212570][ T5644] Bluetooth: hci5: command 0x0406 tx timeout [ 530.696034][T20172] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 531.109351][T20217] net_ratelimit: 39 callbacks suppressed [ 531.109369][T20217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.133413][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.542419][T20238] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3832'. [ 531.589931][T20241] netlink: 'syz.2.3833': attribute type 1 has an invalid length. [ 531.994220][T20250] IPVS: Error connecting to the multicast addr [ 532.148468][T20257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3840'. [ 532.201729][T20265] FAULT_INJECTION: forcing a failure. [ 532.201729][T20265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.206802][T20267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3842'. [ 532.230126][T20265] CPU: 0 UID: 0 PID: 20265 Comm: syz.3.3839 Not tainted syzkaller #0 PREEMPT(full) [ 532.230152][T20265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 532.230164][T20265] Call Trace: [ 532.230171][T20265] [ 532.230179][T20265] dump_stack_lvl+0xe8/0x150 [ 532.230225][T20265] should_fail_ex+0x40c/0x560 [ 532.230254][T20265] _copy_from_iter+0x1d3/0x1660 [ 532.230284][T20265] ? kmem_cache_alloc_node_noprof+0x101/0x610 [ 532.230311][T20265] ? rcu_is_watching+0x15/0xb0 [ 532.230357][T20265] ? trace_kmem_cache_alloc+0x29/0xe0 [ 532.230383][T20265] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 532.230407][T20265] ? __pfx__copy_from_iter+0x10/0x10 [ 532.230432][T20265] ? __alloc_skb+0x276/0x7a0 [ 532.230453][T20265] ? __alloc_skb+0x276/0x7a0 [ 532.230478][T20265] ? netlink_sendmsg+0x650/0xb40 [ 532.230504][T20265] ? skb_put+0x112/0x210 [ 532.230525][T20265] netlink_sendmsg+0x6c0/0xb40 [ 532.230555][T20265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.230582][T20265] ? aa_sock_msg_perm+0xf1/0x1b0 [ 532.230611][T20265] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.230632][T20265] sock_sendmsg_nosec+0x13a/0x180 [ 532.230661][T20265] ____sys_sendmsg+0x54e/0x850 [ 532.230687][T20265] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.230717][T20265] ? import_iovec+0x73/0xa0 [ 532.230748][T20265] ___sys_sendmsg+0x2a5/0x360 [ 532.230768][T20265] ? __lock_acquire+0x683/0x2cf0 [ 532.230799][T20265] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.230854][T20265] ? __fget_files+0x2a/0x420 [ 532.230879][T20265] ? __fget_files+0x3a2/0x420 [ 532.230915][T20265] __x64_sys_sendmsg+0x1b1/0x290 [ 532.230939][T20265] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 532.230978][T20265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.231000][T20265] do_syscall_64+0x174/0x580 [ 532.231022][T20265] ? trace_irq_disable+0x3b/0x140 [ 532.231046][T20265] ? clear_bhb_loop+0x40/0x90 [ 532.231070][T20265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.231094][T20265] RIP: 0033:0x7f022999e019 [ 532.231112][T20265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.231129][T20265] RSP: 002b:00007f022a887028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.231150][T20265] RAX: ffffffffffffffda RBX: 00007f0229c25fa0 RCX: 00007f022999e019 [ 532.231163][T20265] RDX: 0000000000020800 RSI: 0000200000000300 RDI: 0000000000000005 [ 532.231175][T20265] RBP: 00007f022a887090 R08: 0000000000000000 R09: 0000000000000000 [ 532.231187][T20265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.231198][T20265] R13: 00007f0229c26038 R14: 00007f0229c25fa0 R15: 00007ffdc17443a8 [ 532.231229][T20265] [ 532.610368][T20263] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3841'. [ 532.885067][T20299] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3845'. [ 532.909548][T20263] syzkaller0: entered promiscuous mode [ 532.943109][T20263] syzkaller0: entered allmulticast mode [ 532.965431][T20299] netlink: 'syz.3.3845': attribute type 8 has an invalid length. [ 533.035284][T20299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3845'. [ 533.151847][T20299] bond0: entered promiscuous mode [ 533.171658][T20299] bond_slave_0: entered promiscuous mode [ 533.200287][T20299] bond_slave_1: entered promiscuous mode [ 533.223764][T20299] batadv0: entered promiscuous mode [ 533.265686][T20299] gretap0: entered promiscuous mode [ 533.308638][T20299] team0: entered promiscuous mode [ 533.329198][T20299] team_slave_0: entered promiscuous mode [ 533.343863][T20319] netlink: 'syz.2.3850': attribute type 13 has an invalid length. [ 533.353091][T20299] team_slave_1: entered promiscuous mode [ 533.374516][T20299] debugfs: 'hsr1' already exists in 'hsr' [ 533.384810][T20299] Cannot create hsr debugfs directory [ 533.391126][T20299] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 533.412454][T20299] hsr1: entered promiscuous mode [ 533.863822][T20342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3855'. [ 534.046702][T20341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3856'. [ 534.074585][T20341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3856'. [ 534.193640][T20349] bridge_slave_0: left allmulticast mode [ 534.233932][T20349] bridge_slave_0: left promiscuous mode [ 534.262667][T20349] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.279220][T20352] Bluetooth: MGMT ver 1.23 [ 534.311267][T20357] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 534.315789][T20349] bridge_slave_1: left allmulticast mode [ 534.318546][T20357] IPv6: NLM_F_CREATE should be set when creating new route [ 534.318585][T20357] IPv6: NLM_F_CREATE should be set when creating new route [ 534.351010][T20349] bridge_slave_1: left promiscuous mode [ 534.375000][T20349] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.388807][T20366] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3862'. [ 534.416722][T20349] bond0: (slave bond_slave_0): Releasing backup interface [ 534.430033][T20349] bond0: (slave bond_slave_1): Releasing backup interface [ 534.450010][T20349] team0: Port device team_slave_0 removed [ 534.469682][T20349] team0: Port device team_slave_1 removed [ 534.476276][T20349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.483755][T20349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.503309][T20349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.515639][T20349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.525074][T20349] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 534.553949][T20350] team0: Port device xfrm0 added [ 534.560190][T20364] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3860'. [ 534.575202][T20352] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3860'. [ 534.858853][T20376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3868'. [ 534.870083][T20375] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3866'. [ 535.510225][T20410] bond0 (unregistering): Released all slaves [ 535.510860][T20407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3874'. [ 535.537888][T20412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3878'. [ 535.863338][T20424] xfrm1: entered promiscuous mode [ 535.891786][T20424] xfrm1: entered allmulticast mode [ 536.578704][T20470] FAULT_INJECTION: forcing a failure. [ 536.578704][T20470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.609953][T20470] CPU: 0 UID: 0 PID: 20470 Comm: syz.4.3892 Not tainted syzkaller #0 PREEMPT(full) [ 536.609978][T20470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 536.609989][T20470] Call Trace: [ 536.609996][T20470] [ 536.610004][T20470] dump_stack_lvl+0xe8/0x150 [ 536.610074][T20470] should_fail_ex+0x40c/0x560 [ 536.610131][T20470] _copy_from_iter+0x1d3/0x1660 [ 536.610158][T20470] ? kmem_cache_alloc_node_noprof+0x101/0x610 [ 536.610197][T20470] ? rcu_is_watching+0x15/0xb0 [ 536.610231][T20470] ? trace_kmem_cache_alloc+0x29/0xe0 [ 536.610253][T20470] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 536.610281][T20470] ? __pfx__copy_from_iter+0x10/0x10 [ 536.610301][T20470] ? __alloc_skb+0x276/0x7a0 [ 536.610338][T20470] ? __alloc_skb+0x276/0x7a0 [ 536.610356][T20470] ? netlink_sendmsg+0x650/0xb40 [ 536.610392][T20470] ? skb_put+0x112/0x210 [ 536.610413][T20470] netlink_sendmsg+0x6c0/0xb40 [ 536.610443][T20470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.610466][T20470] ? aa_sock_msg_perm+0xf1/0x1b0 [ 536.610506][T20470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.610528][T20470] sock_sendmsg_nosec+0x13a/0x180 [ 536.610558][T20470] ____sys_sendmsg+0x54e/0x850 [ 536.610585][T20470] ? __pfx_____sys_sendmsg+0x10/0x10 [ 536.610617][T20470] ? import_iovec+0x73/0xa0 [ 536.610647][T20470] ___sys_sendmsg+0x2a5/0x360 [ 536.610667][T20470] ? __lock_acquire+0x683/0x2cf0 [ 536.610703][T20470] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.610763][T20470] ? __fget_files+0x2a/0x420 [ 536.610799][T20470] ? __fget_files+0x3a2/0x420 [ 536.610834][T20470] __x64_sys_sendmsg+0x1b1/0x290 [ 536.610859][T20470] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 536.610898][T20470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.610928][T20470] do_syscall_64+0x174/0x580 [ 536.610973][T20470] ? trace_irq_disable+0x3b/0x140 [ 536.611008][T20470] ? clear_bhb_loop+0x40/0x90 [ 536.611031][T20470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.611051][T20470] RIP: 0033:0x7f657c99e019 [ 536.611070][T20470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.611087][T20470] RSP: 002b:00007f657d7de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.611108][T20470] RAX: ffffffffffffffda RBX: 00007f657cc25fa0 RCX: 00007f657c99e019 [ 536.611123][T20470] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 536.611136][T20470] RBP: 00007f657d7de090 R08: 0000000000000000 R09: 0000000000000000 [ 536.611149][T20470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.611161][T20470] R13: 00007f657cc26038 R14: 00007f657cc25fa0 R15: 00007fffe577cd98 [ 536.611193][T20470] [ 537.301388][T20478] 8021q: adding VLAN 0 to HW filter on device bond2 [ 537.341319][T20478] 8021q: adding VLAN 0 to HW filter on device bond3 [ 537.359877][T20478] 8021q: adding VLAN 0 to HW filter on device bond4 [ 537.363413][T20493] IPVS: set_ctl: invalid protocol: 4 10.1.1.0:20000 [ 537.394253][T20478] 8021q: adding VLAN 0 to HW filter on device bond5 [ 537.782302][T20515] netlink: 'syz.0.3904': attribute type 10 has an invalid length. [ 537.835742][T20515] team0: Device veth0_macvtap failed to register rx_handler [ 537.955055][T20523] tunl0: entered promiscuous mode [ 537.982079][T20523] netlink: 'syz.2.3909': attribute type 4 has an invalid length. [ 538.605957][T20545] openvswitch: netlink: Missing key (keys=40, expected=100) [ 539.254800][T20548] tipc: Started in network mode [ 539.269488][T20548] tipc: Node identity 7a3084b50223, cluster identity 4711 [ 539.278471][T20548] tipc: Enabled bearer , priority 0 [ 539.323292][T20560] syzkaller0: entered promiscuous mode [ 539.336360][T20560] syzkaller0: entered allmulticast mode [ 539.446665][ T5644] Bluetooth: hci4: command 0x0406 tx timeout [ 539.570291][T20569] netlink: 'syz.3.3921': attribute type 30 has an invalid length. [ 539.593509][T20549] tipc: Disabling bearer [ 539.831068][T20583] __nla_validate_parse: 13 callbacks suppressed [ 539.831086][T20583] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3926'. [ 539.873561][T20583] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3926'. [ 539.964911][T20588] netlink: 'syz.1.3928': attribute type 1 has an invalid length. [ 540.086863][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.096158][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.247486][T20589] bond4: (slave veth7): Enslaving as an active interface with a down link [ 540.305587][T20594] bond4: (slave veth9): Enslaving as an active interface with a down link [ 540.314444][T20603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3933'. [ 540.364481][T20608] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3935'. [ 540.663205][T20632] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3940'. [ 540.688301][T20636] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3940'. [ 540.693682][T20620] bond2: Removing last arp target with arp_interval on [ 540.945550][T20647] syzkaller0: entered promiscuous mode [ 540.952080][T20647] syzkaller0: entered allmulticast mode [ 542.495032][ T11] block nbd1: Possible stuck request ffff8880267a5080: control (read@0,4096B). Runtime 30 seconds [ 543.431242][T20611] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 543.446361][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.677552][T20669] netlink: 'syz.2.3950': attribute type 11 has an invalid length. [ 543.732854][T20663] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 543.793480][T20663] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 543.825969][T20663] gretap1: entered promiscuous mode [ 543.850258][T20663] gretap1: entered allmulticast mode [ 543.860264][T20677] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3954'. [ 543.900730][T20677] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3954'. [ 544.096908][T20689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3957'. [ 544.403965][T20710] team0: No ports can be present during mode change [ 544.430406][T20706] virt_wifi0: entered allmulticast mode [ 544.473090][T20721] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20000 [ 544.651543][T20727] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 544.795903][T20730] syzkaller0: entered promiscuous mode [ 544.831435][T20730] syzkaller0: entered allmulticast mode [ 544.871659][T20734] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 545.043548][T20745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.054095][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.946628][T20795] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3982'. [ 545.997459][T20797] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3980'. [ 546.292093][T20812] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 546.394475][T20814] netlink: 'syz.0.3987': attribute type 1 has an invalid length. [ 546.437473][T20814] 8021q: adding VLAN 0 to HW filter on device bond6 [ 546.472099][T20814] bond6: (slave geneve2): making interface the new active one [ 546.481589][T20814] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 546.539151][ T6447] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 546.592344][ T6447] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 546.619079][ T6447] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 546.639085][ T6447] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 546.754129][ T46] IPVS: starting estimator thread 0... [ 546.764116][T20826] IPVS: ip_vs_edit_dest(): server weight less than zero [ 546.787453][T20826] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 546.867256][T20827] IPVS: using max 27 ests per chain, 64800 per kthread [ 547.479363][T20845] bond3: (slave dummy0): Releasing backup interface [ 547.619537][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.662151][T20845] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 547.865896][T20871] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4000'. [ 548.042543][T20878] syzkaller0: entered promiscuous mode [ 548.062537][T20878] syzkaller0: entered allmulticast mode [ 548.173380][T20878] Cannot find add_set index 65532 as target [ 548.271959][T20885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4005'. [ 548.631820][T20907] syzkaller1: entered allmulticast mode [ 548.806414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.870043][T20909] bond7: invalid ARP target 0.0.0.0 specified for addition [ 548.885693][T20923] netlink: 'syz.1.4014': attribute type 1 has an invalid length. [ 548.922802][T20909] bond7: option arp_ip_target: invalid value (0) [ 548.954837][T20909] bond7 (unregistering): Released all slaves [ 549.000338][T20926] netlink: 'syz.3.4015': attribute type 213 has an invalid length. [ 549.045052][T20923] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 549.091154][T20924] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 549.195614][T20940] netlink: 'syz.2.4017': attribute type 21 has an invalid length. [ 549.243694][T20942] netlink: 'syz.3.4018': attribute type 1 has an invalid length. [ 549.291976][T20940] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4017'. [ 549.355473][T20946] IPv6: Can't replace route, no match found [ 549.374337][T20940] netlink: 'syz.2.4017': attribute type 18 has an invalid length. [ 549.523600][ T1115] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.577452][ T1115] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.633751][T20958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4023'. [ 549.638915][ T1115] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.705744][T20963] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4023'. [ 549.738745][ T1115] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.916545][T20970] syzkaller0: entered promiscuous mode [ 549.945620][T20970] syzkaller0: entered allmulticast mode [ 550.248682][T20985] netlink: 'syz.3.4028': attribute type 4 has an invalid length. [ 550.561966][T21001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4032'. [ 550.579725][T21004] x_tables: unsorted underflow at hook 4 [ 550.583725][T21003] netlink: 'syz.4.4031': attribute type 61 has an invalid length. [ 550.628237][T21001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4032'. [ 550.673428][T21001] netlink: 'syz.0.4032': attribute type 2 has an invalid length. [ 551.129382][T21035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.168757][T21028] bond0: Unable to set down delay as MII monitoring is disabled [ 551.173185][T21040] xt_hashlimit: size too large, truncated to 1048576 [ 551.230843][T21028] bond0 (unregistering): Released all slaves [ 551.505377][T21046] bridge_slave_0 (unregistering): left allmulticast mode [ 551.547765][T21046] bridge_slave_0 (unregistering): left promiscuous mode [ 551.589145][T21046] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.799806][T21067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4045'. [ 552.303513][T21085] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 552.405478][T21089] xt_hashlimit: size too large, truncated to 1048576 [ 552.486878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.659952][T21102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4049'. [ 553.980044][T21024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 554.003484][T21053] netlink: 'syz.0.4044': attribute type 1 has an invalid length. [ 554.050513][T21053] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4044'. [ 554.162439][T21111] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4052'. [ 554.195124][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 554.204041][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 554.216625][T12405] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 554.597133][T12405] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 554.616380][T12405] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 557.848012][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 562.968814][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 565.047018][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 565.526392][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 566.803827][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 566.822471][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 566.830955][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 566.845674][ T4942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 566.854405][ T4942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 566.860099][ T5626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 566.874618][ T5626] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 566.889759][ T5626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 566.904419][ T4942] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 566.912883][ T4942] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 567.319368][T21130] ±ÿ speed is unknown, defaulting to 1000 [ 567.345816][T21133] ±ÿ speed is unknown, defaulting to 1000 [ 567.825962][T21130] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.833510][T21130] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.841002][T21130] bridge_slave_0: entered allmulticast mode [ 567.850243][T21130] bridge_slave_0: entered promiscuous mode [ 567.879290][T21130] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.892289][T21130] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.900253][T21130] bridge_slave_1: entered allmulticast mode [ 567.908703][T21130] bridge_slave_1: entered promiscuous mode [ 567.975784][T21130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.994870][T21130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.037502][T21130] team0: Port device team_slave_0 added [ 568.047010][T21130] team0: Port device team_slave_1 added [ 568.081490][T21130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.094967][T21130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.122427][T21130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.135481][T21130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.142620][T21130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.170086][T21130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.255409][T21130] hsr_slave_0: entered promiscuous mode [ 568.262411][T21130] hsr_slave_1: entered promiscuous mode [ 568.269010][T21130] debugfs: 'hsr0' already exists in 'hsr' [ 568.274871][T21130] Cannot create hsr debugfs directory [ 568.314300][T21133] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.321657][T21133] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.332579][T21133] bridge_slave_0: entered allmulticast mode [ 568.340552][T21133] bridge_slave_0: entered promiscuous mode [ 568.354379][T21133] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.361958][T21133] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.369918][T21133] bridge_slave_1: entered allmulticast mode [ 568.377252][T21133] bridge_slave_1: entered promiscuous mode [ 568.427750][T21133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.444819][T21133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.501057][T21133] team0: Port device team_slave_0 added [ 568.513520][T21133] team0: Port device team_slave_1 added [ 568.567350][T21133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.574347][T21133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.600996][T21133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.619020][T21133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.627497][T21133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.656900][T21133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.859368][T21133] hsr_slave_0: entered promiscuous mode [ 568.866738][ T4942] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 568.870453][T21133] hsr_slave_1: entered promiscuous mode [ 568.882713][ T4942] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 568.890798][ T5644] Bluetooth: hci2: command tx timeout [ 568.904227][ T5644] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 568.915165][T21133] debugfs: 'hsr0' already exists in 'hsr' [ 568.921425][ T5644] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 568.932166][ T5644] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 568.936039][T21133] Cannot create hsr debugfs directory [ 568.968034][ T4942] Bluetooth: hci6: command tx timeout [ 569.349649][T21167] ±ÿ speed is unknown, defaulting to 1000 [ 569.687977][T21167] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.695214][T21167] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.703236][T21167] bridge_slave_0: entered allmulticast mode [ 569.711646][T21167] bridge_slave_0: entered promiscuous mode [ 569.724337][T21167] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.736438][T21167] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.748314][T21167] bridge_slave_1: entered allmulticast mode [ 569.769214][T21167] bridge_slave_1: entered promiscuous mode [ 569.816491][T21167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.832065][T21167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.874415][T21167] team0: Port device team_slave_0 added [ 569.883333][T21167] team0: Port device team_slave_1 added [ 569.908999][T21132] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 569.924953][T21132] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 569.936290][T21132] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 569.945089][T21132] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 569.947793][T21167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.952783][T21132] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 569.964789][T21167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.001920][T21167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.018217][T21167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.025216][T21167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.052026][T21167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.115458][T21167] hsr_slave_0: entered promiscuous mode [ 570.122559][T21167] hsr_slave_1: entered promiscuous mode [ 570.129805][T21167] debugfs: 'hsr0' already exists in 'hsr' [ 570.135580][T21167] Cannot create hsr debugfs directory [ 570.427077][T21185] ±ÿ speed is unknown, defaulting to 1000 [ 570.776905][T21185] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.786249][T21185] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.801017][T21185] bridge_slave_0: entered allmulticast mode [ 570.811037][T21185] bridge_slave_0: entered promiscuous mode [ 570.840131][T21185] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.849393][T21185] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.857560][T21185] bridge_slave_1: entered allmulticast mode [ 570.865597][T21185] bridge_slave_1: entered promiscuous mode [ 570.895865][ T4942] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 570.915100][T21185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.924945][ T4942] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 570.930102][T21185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.944019][ T4942] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 570.953781][ T4942] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 570.961721][ T4942] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 570.969040][ T5644] Bluetooth: hci2: command tx timeout [ 570.981154][T21185] team0: Port device team_slave_0 added [ 571.021348][T21185] team0: Port device team_slave_1 added [ 571.048742][T21132] Bluetooth: hci7: command tx timeout [ 571.048740][ T4942] Bluetooth: hci6: command tx timeout [ 571.067762][T21185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.074764][T21185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.101593][T21185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.114349][T21185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.122404][T21185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.151162][T21185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.213176][T21185] hsr_slave_0: entered promiscuous mode [ 571.219670][T21185] hsr_slave_1: entered promiscuous mode [ 571.229500][T21185] debugfs: 'hsr0' already exists in 'hsr' [ 571.235266][T21185] Cannot create hsr debugfs directory [ 571.446826][T21203] ±ÿ speed is unknown, defaulting to 1000 [ 571.842244][T21203] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.850131][T21203] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.858116][T21203] bridge_slave_0: entered allmulticast mode [ 571.865166][T21203] bridge_slave_0: entered promiscuous mode [ 571.873621][T21203] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.881025][T21203] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.888485][T21203] bridge_slave_1: entered allmulticast mode [ 571.895693][T21203] bridge_slave_1: entered promiscuous mode [ 571.924353][T21203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.938665][T21203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.969663][T21203] team0: Port device team_slave_0 added [ 571.977561][T21203] team0: Port device team_slave_1 added [ 572.000724][T21203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.007468][T21132] Bluetooth: hci8: command tx timeout [ 572.008542][T21203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.040314][T21203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.053162][T21203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.060532][T21203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.087426][T21203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.130069][T21203] hsr_slave_0: entered promiscuous mode [ 572.137491][T21203] hsr_slave_1: entered promiscuous mode [ 572.143647][T21203] debugfs: 'hsr0' already exists in 'hsr' [ 572.150558][T21203] Cannot create hsr debugfs directory [ 572.566576][ T11] block nbd1: Possible stuck request ffff8880267a5080: control (read@0,4096B). Runtime 60 seconds [ 573.046546][ T4942] Bluetooth: hci2: command tx timeout [ 573.053495][T21132] Bluetooth: hci9: command tx timeout [ 573.126208][T21132] Bluetooth: hci6: command tx timeout [ 573.137779][T21132] Bluetooth: hci7: command tx timeout [ 574.086425][T21132] Bluetooth: hci8: command tx timeout [ 575.126605][T21132] Bluetooth: hci9: command tx timeout [ 575.126782][ T4942] Bluetooth: hci2: command tx timeout [ 575.216248][ T4942] Bluetooth: hci6: command tx timeout [ 575.216723][T21132] Bluetooth: hci7: command tx timeout [ 575.299666][ T4992] udevd[4992]: worker [17671] /devices/virtual/block/nbd1 is taking a long time [ 576.166179][T21132] Bluetooth: hci8: command tx timeout [ 577.216220][T21132] Bluetooth: hci9: command tx timeout [ 577.296538][T21132] Bluetooth: hci7: command tx timeout [ 578.256562][T21132] Bluetooth: hci8: command tx timeout [ 579.286466][T21132] Bluetooth: hci9: command tx timeout [ 580.246630][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 588.847458][ T1119] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 588.873049][ T1119] bond7 (unregistering): (slave bridge0): Releasing backup interface [ 588.899517][ T1119] bond0 (unregistering): Released all slaves [ 588.914161][ T1119] bond1 (unregistering): (slave veth3): Releasing active interface [ 588.925369][ T1119] bond1 (unregistering): Released all slaves [ 588.941828][ T1119] bond2 (unregistering): Released all slaves [ 588.954848][ T1119] bond3 (unregistering): Released all slaves [ 588.976001][ T1119] bond4 (unregistering): Released all slaves [ 589.017074][ T1119] bond5 (unregistering): Released all slaves [ 589.030665][ T1119] bond6 (unregistering): Released all slaves [ 589.049758][ T1119] bond7 (unregistering): Released all slaves [ 589.072449][ T1119] bond8 (unregistering): Released all slaves [ 589.088950][ T1119] bond9 (unregistering): Released all slaves [ 589.104552][ T1119] bond10 (unregistering): Released all slaves [ 589.121735][ T1119] bond11 (unregistering): (slave bond12): Releasing backup interface [ 589.131760][ T1119] bond11 (unregistering): Released all slaves [ 589.158752][ T1119] bond12 (unregistering): Released all slaves [ 589.172289][ T1119] bond13 (unregistering): Released all slaves [ 589.409687][ T1119] tipc: Left network mode [ 589.973508][ T1119] hsr_slave_0: left promiscuous mode [ 589.990142][ T1119] hsr_slave_1: left promiscuous mode [ 589.997038][ T1119] veth0_macvtap: left allmulticast mode [ 590.594523][ T1119] IPVS: stop unused estimator thread 0... [ 602.656713][ T11] block nbd1: Possible stuck request ffff8880267a5080: control (read@0,4096B). Runtime 90 seconds [ 610.326551][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 627.348809][ T4942] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 627.360670][ T5626] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 627.368817][ T4942] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 627.381160][ T4942] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 627.383596][ T5626] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 627.390684][ T4942] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 627.400627][ T5626] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 627.405543][ T4942] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 627.413082][ T5626] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 627.426251][ T5626] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 627.868737][T21226] ±ÿ speed is unknown, defaulting to 1000 [ 627.879298][T21225] ±ÿ speed is unknown, defaulting to 1000 [ 628.370726][T21226] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.378586][T21226] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.385841][T21226] bridge_slave_0: entered allmulticast mode [ 628.393812][T21226] bridge_slave_0: entered promiscuous mode [ 628.410691][T21226] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.418048][T21226] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.425309][T21226] bridge_slave_1: entered allmulticast mode [ 628.432966][T21226] bridge_slave_1: entered promiscuous mode [ 628.482458][T21226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.501559][T21226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.547431][T21226] team0: Port device team_slave_0 added [ 628.568503][T21226] team0: Port device team_slave_1 added [ 628.609031][T21226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.616190][T21226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.642942][T21226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.656905][T21226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.663883][T21226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.690611][T21226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.783816][T21226] hsr_slave_0: entered promiscuous mode [ 628.790416][T21226] hsr_slave_1: entered promiscuous mode [ 628.810588][T21225] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.819218][T21225] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.826835][T21225] bridge_slave_0: entered allmulticast mode [ 628.833989][T21225] bridge_slave_0: entered promiscuous mode [ 628.850589][T21225] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.858262][T21225] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.865499][T21225] bridge_slave_1: entered allmulticast mode [ 628.873681][T21225] bridge_slave_1: entered promiscuous mode [ 628.926564][T21225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.945498][T21225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.006673][T21225] team0: Port device team_slave_0 added [ 629.023532][T21225] team0: Port device team_slave_1 added [ 629.084294][T21225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.091804][T21225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.118487][T21225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.137556][T21225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.145176][T21225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.171942][T21225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.290781][T21225] hsr_slave_0: entered promiscuous mode [ 629.318211][T21225] hsr_slave_1: entered promiscuous mode [ 629.326992][T21225] debugfs: 'hsr0' already exists in 'hsr' [ 629.332786][T21225] Cannot create hsr debugfs directory [ 629.375804][ T5644] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 629.395869][ T5644] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 629.409183][ T5644] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 629.420078][ T5644] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 629.428108][ T5644] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 629.449191][ T5644] Bluetooth: hci10: command tx timeout [ 629.527735][ T5626] Bluetooth: hci11: command tx timeout [ 629.778151][T21261] ±ÿ speed is unknown, defaulting to 1000 [ 630.439385][ T5644] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 630.460944][ T5644] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 630.464658][T21261] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.478233][ T5644] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 630.478367][T21261] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.488423][ T5644] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 630.494616][T21261] bridge_slave_0: entered allmulticast mode [ 630.501306][ T5644] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 630.508416][T21261] bridge_slave_0: entered promiscuous mode [ 630.547110][T21261] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.555075][T21261] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.569314][T21261] bridge_slave_1: entered allmulticast mode [ 630.578404][T21261] bridge_slave_1: entered promiscuous mode [ 630.643680][T21261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.658379][T21261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.695882][T21261] team0: Port device team_slave_0 added [ 630.705207][T21261] team0: Port device team_slave_1 added [ 630.743930][T21261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.751139][T21261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.777595][T21261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.790590][T21261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.797782][T21261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.825614][T21261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.884470][T21261] hsr_slave_0: entered promiscuous mode [ 630.891558][T21261] hsr_slave_1: entered promiscuous mode [ 630.907701][T21261] debugfs: 'hsr0' already exists in 'hsr' [ 630.918769][T21261] Cannot create hsr debugfs directory [ 631.069433][T21279] ±ÿ speed is unknown, defaulting to 1000 [ 631.527597][T21132] Bluetooth: hci12: command tx timeout [ 631.528963][ T4942] Bluetooth: hci10: command tx timeout [ 631.551364][ T4942] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 631.564320][ T4942] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 631.573293][ T4942] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 631.584094][ T4942] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 631.601816][ T4942] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 631.616961][ T4942] Bluetooth: hci11: command tx timeout [ 631.753943][T21279] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.761965][T21279] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.770457][T21279] bridge_slave_0: entered allmulticast mode [ 631.778852][T21279] bridge_slave_0: entered promiscuous mode [ 631.788869][T21279] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.796409][T21279] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.803725][T21279] bridge_slave_1: entered allmulticast mode [ 631.811340][T21279] bridge_slave_1: entered promiscuous mode [ 631.854668][T21279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.883677][T21279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.927543][T21279] team0: Port device team_slave_0 added [ 631.937038][T21279] team0: Port device team_slave_1 added [ 631.971549][T21279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.979277][T21279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.005760][T21279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.029744][T21279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.042777][T21279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.069920][T21279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.127442][T21279] hsr_slave_0: entered promiscuous mode [ 632.134325][T21279] hsr_slave_1: entered promiscuous mode [ 632.141104][T21279] debugfs: 'hsr0' already exists in 'hsr' [ 632.147025][T21279] Cannot create hsr debugfs directory [ 632.159133][T21294] ±ÿ speed is unknown, defaulting to 1000 [ 632.574323][ T5644] Bluetooth: hci13: command tx timeout [ 632.656907][T21294] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.664426][T21294] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.672091][T21294] bridge_slave_0: entered allmulticast mode [ 632.679933][T21294] bridge_slave_0: entered promiscuous mode [ 632.688844][T21294] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.696596][T21294] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.710072][T21294] bridge_slave_1: entered allmulticast mode [ 632.720004][T21294] bridge_slave_1: entered promiscuous mode [ 632.746962][ T11] block nbd1: Possible stuck request ffff8880267a5080: control (read@0,4096B). Runtime 120 seconds [ 632.790799][T21294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.823005][T21294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.873683][T21294] team0: Port device team_slave_0 added [ 632.883212][T21294] team0: Port device team_slave_1 added [ 632.924587][T21294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.931887][T21294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.958483][T21294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.972935][T21294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.980100][T21294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.006522][T21294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.045979][T21294] hsr_slave_0: entered promiscuous mode [ 633.053146][T21294] hsr_slave_1: entered promiscuous mode [ 633.059994][T21294] debugfs: 'hsr0' already exists in 'hsr' [ 633.065735][T21294] Cannot create hsr debugfs directory [ 633.606511][ T5644] Bluetooth: hci10: command tx timeout [ 633.613543][ T4942] Bluetooth: hci12: command tx timeout [ 633.686866][ T5644] Bluetooth: hci14: command tx timeout [ 633.691934][ T4942] Bluetooth: hci11: command tx timeout [ 634.647278][ T4942] Bluetooth: hci13: command tx timeout [ 635.686750][ T4942] Bluetooth: hci12: command tx timeout [ 635.687206][ T5644] Bluetooth: hci10: command tx timeout [ 635.767861][ T5644] Bluetooth: hci14: command tx timeout [ 635.767871][ T4942] Bluetooth: hci11: command tx timeout [ 636.736867][ T5644] Bluetooth: hci13: command tx timeout [ 637.766309][ T5644] Bluetooth: hci12: command tx timeout [ 637.846545][ T5644] Bluetooth: hci14: command tx timeout [ 638.806585][ T5644] Bluetooth: hci13: command tx timeout [ 639.926770][ T5644] Bluetooth: hci14: command tx timeout [ 658.246860][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.817286][ T11] block nbd1: Possible stuck request ffff8880267a5080: control (read@0,4096B). Runtime 150 seconds [ 670.487902][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 672.569087][ T5644] Bluetooth: hci1: command 0x0405 tx timeout [ 680.728605][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.435170][ T5644] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 687.457170][T21132] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 687.470045][T21132] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 687.475145][ T5644] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 687.478089][T21132] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 687.489174][ T5644] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 687.493628][T21132] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 687.501280][ T5644] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 687.507131][T21132] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 687.513642][ T5644] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 687.930728][T21317] ±ÿ speed is unknown, defaulting to 1000 [ 688.010391][T21318] ±ÿ speed is unknown, defaulting to 1000 [ 688.469356][T21317] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.476986][T21317] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.484335][T21317] bridge_slave_0: entered allmulticast mode [ 688.495003][T21317] bridge_slave_0: entered promiscuous mode [ 688.505142][T21317] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.513028][T21317] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.520682][T21317] bridge_slave_1: entered allmulticast mode [ 688.528682][T21317] bridge_slave_1: entered promiscuous mode [ 688.578259][T21317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.594214][T21317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.642875][T21317] team0: Port device team_slave_0 added [ 688.667046][T21317] team0: Port device team_slave_1 added [ 688.702498][T21317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.709793][T21317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.739070][T21317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.752196][T21317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.759722][T21317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.786734][T21317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.864529][T21317] hsr_slave_0: entered promiscuous mode [ 688.871639][T21317] hsr_slave_1: entered promiscuous mode [ 688.878401][T21317] debugfs: 'hsr0' already exists in 'hsr' [ 688.884291][T21317] Cannot create hsr debugfs directory [ 688.951506][T21318] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.958801][T21318] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.966182][T21318] bridge_slave_0: entered allmulticast mode [ 688.973370][T21318] bridge_slave_0: entered promiscuous mode [ 688.992307][T21318] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.999650][T21318] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.007379][T21318] bridge_slave_1: entered allmulticast mode [ 689.014546][T21318] bridge_slave_1: entered promiscuous mode [ 689.067559][T21318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.097439][T21318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.159060][T21318] team0: Port device team_slave_0 added [ 689.172870][T21318] team0: Port device team_slave_1 added [ 689.215872][T21318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.223079][T21318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.249757][T21318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.263180][T21318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.270925][T21318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.310622][T21318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.479006][T21318] hsr_slave_0: entered promiscuous mode [ 689.482889][ T5626] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 689.494005][T21318] hsr_slave_1: entered promiscuous mode [ 689.505867][T21318] debugfs: 'hsr0' already exists in 'hsr' [ 689.507045][ T5626] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 689.513182][T21318] Cannot create hsr debugfs directory [ 689.528982][ T5626] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 689.542155][ T5626] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 689.550872][ T5626] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 689.606612][ T5644] Bluetooth: hci16: command tx timeout [ 689.607034][ T5626] Bluetooth: hci15: command tx timeout [ 690.015340][T21353] ±ÿ speed is unknown, defaulting to 1000 [ 690.540960][ T5644] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 690.559331][ T5644] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 690.568233][ T5644] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 690.580145][T21353] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.583362][ T5644] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 690.590291][T21353] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.602484][T21353] bridge_slave_0: entered allmulticast mode [ 690.603044][ T5644] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 690.611187][T21353] bridge_slave_0: entered promiscuous mode [ 690.637194][T21353] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.652891][T21353] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.662626][T21353] bridge_slave_1: entered allmulticast mode [ 690.671488][T21353] bridge_slave_1: entered promiscuous mode [ 690.722828][T21353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.750603][T21353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.820636][T21353] team0: Port device team_slave_0 added [ 690.834210][T21353] team0: Port device team_slave_1 added [ 690.864671][T21353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.871884][T21353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.898919][T21353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.917964][T21353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.933797][T21353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.964384][T21353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.055512][T21353] hsr_slave_0: entered promiscuous mode [ 691.062819][T21353] hsr_slave_1: entered promiscuous mode [ 691.069971][T21353] debugfs: 'hsr0' already exists in 'hsr' [ 691.075778][T21353] Cannot create hsr debugfs directory [ 691.154440][T21370] ±ÿ speed is unknown, defaulting to 1000 [ 691.580865][T21134] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 691.599572][T21134] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 691.608565][T21388] Bluetooth: hci17: command tx timeout [ 691.620406][T21388] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 691.631838][T21388] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 691.639908][T21388] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 691.686900][T21380] Bluetooth: hci16: command tx timeout [ 691.697071][T21380] Bluetooth: hci15: command tx timeout [ 691.983662][T21370] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.991682][T21370] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.999829][T21370] bridge_slave_0: entered allmulticast mode [ 692.025429][T21370] bridge_slave_0: entered promiscuous mode [ 692.034845][T21370] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.045518][T21370] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.053116][T21370] bridge_slave_1: entered allmulticast mode [ 692.061968][T21370] bridge_slave_1: entered promiscuous mode [ 692.102683][T21370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.116734][T21370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.154113][T21370] team0: Port device team_slave_0 added [ 692.166961][T21370] team0: Port device team_slave_1 added [ 692.205232][T21370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.212379][T21370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.238868][T21370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.252326][T21370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.259587][T21370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.286141][T21370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.299124][T21385] ±ÿ speed is unknown, defaulting to 1000 [ 692.367401][T21370] hsr_slave_0: entered promiscuous mode [ 692.374477][T21370] hsr_slave_1: entered promiscuous mode [ 692.381883][T21370] debugfs: 'hsr0' already exists in 'hsr' [ 692.388249][T21370] Cannot create hsr debugfs directory [ 692.727404][T21380] Bluetooth: hci18: command tx timeout [ 692.889273][ T11] block nbd1: Possible stuck request ffff8880267a5080: control (read@0,4096B). Runtime 180 seconds [ 692.984525][T21385] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.991919][T21385] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.999796][T21385] bridge_slave_0: entered allmulticast mode [ 693.007542][T21385] bridge_slave_0: entered promiscuous mode [ 693.015989][T21385] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.023475][T21385] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.031173][T21385] bridge_slave_1: entered allmulticast mode [ 693.038803][T21385] bridge_slave_1: entered promiscuous mode [ 693.057858][T21380] Bluetooth: hci8: command 0x0406 tx timeout [ 693.063947][T21388] Bluetooth: hci2: command 0x0406 tx timeout [ 693.070137][T21134] Bluetooth: hci7: command 0x0406 tx timeout [ 693.076346][T21388] Bluetooth: hci6: command 0x0406 tx timeout [ 693.084445][T21385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.097503][T21385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.217013][T21385] team0: Port device team_slave_0 added [ 693.233880][T21385] team0: Port device team_slave_1 added [ 693.270353][T21385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.277611][T21385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.307789][T21385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.320822][T21385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.329333][T21385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.355746][T21385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.402066][T21385] hsr_slave_0: entered promiscuous mode [ 693.408911][T21385] hsr_slave_1: entered promiscuous mode [ 693.415193][T21385] debugfs: 'hsr0' already exists in 'hsr' [ 693.421057][T21385] Cannot create hsr debugfs directory [ 693.687027][ T4942] Bluetooth: hci19: command tx timeout [ 693.689952][T21132] Bluetooth: hci17: command tx timeout [ 693.767139][T21132] Bluetooth: hci15: command tx timeout [ 693.767166][ T4942] Bluetooth: hci16: command tx timeout [ 694.806327][ T4942] Bluetooth: hci18: command tx timeout [ 695.766556][ T4942] Bluetooth: hci17: command tx timeout [ 695.766919][T21132] Bluetooth: hci19: command tx timeout [ 695.846401][T21132] Bluetooth: hci16: command tx timeout [ 695.846531][ T4942] Bluetooth: hci15: command tx timeout [ 696.848018][ T4992] udevd[4992]: worker [17671] /devices/virtual/block/nbd1 timeout; kill it [ 696.858803][ T4992] udevd[4992]: seq 25044 '/devices/virtual/block/nbd1' killed [ 696.896766][ T4942] Bluetooth: hci18: command tx timeout [ 697.846231][ T4942] Bluetooth: hci17: command tx timeout [ 697.846614][ T5644] Bluetooth: hci19: command tx timeout [ 698.166724][ T5644] Bluetooth: hci9: command 0x0406 tx timeout [ 698.966426][T21132] Bluetooth: hci18: command tx timeout [ 699.926485][T21132] Bluetooth: hci19: command tx timeout [ 708.246903][ T30] INFO: task syz.0.4044:21053 blocked for more than 143 seconds. [ 708.254866][ T30] Not tainted syzkaller #0 [ 708.260419][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 708.269161][ T30] task:syz.0.4044 state:D stack:26312 pid:21053 tgid:21052 ppid:17245 task_flags:0x480140 flags:0x00080002 [ 708.281550][ T30] Call Trace: [ 708.284871][ T30] [ 708.287897][ T30] __schedule+0x17d9/0x56c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 708.292500][ T30] ? __lock_acquire+0x683/0x2cf0 [ 708.297854][ T30] ? __pfx___schedule+0x10/0x10 [ 708.302751][ T30] ? schedule+0x90/0x2b0 [ 708.307545][ T30] schedule+0x164/0x2b0 [ 708.312714][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 708.319434][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 708.325584][ T30] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 708.335570][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 708.344233][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 708.351172][ T30] nbd_set_size+0x454/0x680 [ 708.355839][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 708.378737][ T30] ? nla_memcpy+0x5b/0xc0 [ 708.392381][ T30] nbd_genl_reconfigure+0x7e9/0x1e80 [ 708.414256][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 708.429790][ T30] ? rcu_is_watching+0x15/0xb0 [ 708.434916][ T30] ? trace_kmalloc+0x2a/0xf0 [ 708.441167][ T30] ? __kmalloc_noprof+0x396/0x720 [ 708.447555][ T30] ? __nla_parse+0x40/0x60 [ 708.452043][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 708.459481][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 708.465875][ T30] genl_family_rcv_msg_doit+0x233/0x340 [ 708.471687][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 708.478110][ T30] ? __lock_acquire+0x683/0x2cf0 [ 708.483097][ T30] genl_rcv_msg+0x614/0x7a0 [ 708.488106][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 708.493180][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 708.499138][ T30] netlink_rcv_skb+0x226/0x4a0 [ 708.503929][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 708.509233][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 708.514587][ T30] ? down_read+0x2be/0x330 [ 708.519482][ T30] genl_rcv+0x28/0x40 [ 708.523526][ T30] netlink_unicast+0x7bb/0x940 [ 708.528560][ T30] netlink_sendmsg+0x813/0xb40 [ 708.533395][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.539200][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 708.544653][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.550336][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 708.555424][ T30] ____sys_sendmsg+0x54e/0x850 [ 708.560317][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 708.565713][ T30] ? import_iovec+0x73/0xa0 [ 708.570657][ T30] ___sys_sendmsg+0x2a5/0x360 [ 708.575378][ T30] ? __lock_acquire+0x683/0x2cf0 [ 708.580691][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 708.585921][ T30] ? futex_wait+0x2a2/0x390 [ 708.590672][ T30] ? __fget_files+0x2a/0x420 [ 708.595307][ T30] ? __fget_files+0x3a2/0x420 [ 708.600100][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 708.605070][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 708.611001][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.617458][ T30] do_syscall_64+0x174/0x580 [ 708.622098][ T30] ? trace_irq_disable+0x3b/0x140 [ 708.627999][ T30] ? clear_bhb_loop+0x40/0x90 [ 708.632743][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.638918][ T30] RIP: 0033:0x7f167c99e019 [ 708.643377][ T30] RSP: 002b:00007f167d8de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 708.652169][ T30] RAX: ffffffffffffffda RBX: 00007f167cc25fa0 RCX: 00007f167c99e019 [ 708.660425][ T30] RDX: 00000000000000c4 RSI: 0000200000000040 RDI: 0000000000000027 [ 708.668673][ T30] RBP: 00007f167ca3500c R08: 0000000000000000 R09: 0000000000000000 [ 708.677474][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.685502][ T30] R13: 00007f167cc26038 R14: 00007f167cc25fa0 R15: 00007ffd16c30a28 [ 708.694128][ T30] [ 708.697333][ T30] INFO: task syz.2.4045:21059 blocked for more than 143 seconds. [ 708.705223][ T30] Not tainted syzkaller #0 [ 708.710467][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 708.719448][ T30] task:syz.2.4045 state:D stack:28216 pid:21059 tgid:21058 ppid:16428 task_flags:0x400140 flags:0x00080002 [ 708.731681][ T30] Call Trace: [ 708.734999][ T30] [ 708.738163][ T30] __schedule+0x17d9/0x56c0 [ 708.742721][ T30] ? __lock_acquire+0x683/0x2cf0 [ 708.748311][ T30] ? __lock_acquire+0x683/0x2cf0 [ 708.753416][ T30] ? unwind_next_frame+0x8f/0x2550 [ 708.758719][ T30] ? __pfx___schedule+0x10/0x10 [ 708.763611][ T30] ? schedule+0x90/0x2b0 [ 708.768051][ T30] schedule+0x164/0x2b0 [ 708.772249][ T30] schedule_preempt_disabled+0x13/0x30 [ 708.777979][ T30] __mutex_lock+0x7bf/0x1550 [ 708.782616][ T30] ? __mutex_lock+0x5d4/0x1550 [ 708.787607][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 708.792366][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 708.797446][ T30] ? stack_trace_save+0xa9/0x100 [ 708.802423][ T30] ? __lock_acquire+0x683/0x2cf0 [ 708.808598][ T30] ? radix_tree_lookup+0x240/0x290 [ 708.813878][ T30] genl_rcv_msg+0x10b/0x7a0 [ 708.818717][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 708.823795][ T30] ? __lock_acquire+0x683/0x2cf0 [ 708.829056][ T30] netlink_rcv_skb+0x226/0x4a0 [ 708.833871][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 708.839467][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 708.844850][ T30] ? down_read+0x2be/0x330 [ 708.850108][ T30] genl_rcv+0x28/0x40 [ 708.854156][ T30] netlink_unicast+0x7bb/0x940 [ 708.859260][ T30] netlink_sendmsg+0x813/0xb40 [ 708.864086][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.869847][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 708.874849][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.880742][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 708.885824][ T30] ____sys_sendmsg+0x54e/0x850 [ 708.890972][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 708.896659][ T30] ? import_iovec+0x73/0xa0 [ 708.902533][ T30] ___sys_sendmsg+0x2a5/0x360 [ 708.907628][ T30] ? __lock_acquire+0x683/0x2cf0 [ 708.912608][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 708.918081][ T30] ? futex_wait+0x2a2/0x390 [ 708.922755][ T30] ? __fget_files+0x2a/0x420 [ 708.927508][ T30] ? __fget_files+0x3a2/0x420 [ 708.932222][ T30] __x64_sys_sendmsg+0x1b1/0x290 [ 708.937604][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 708.943133][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.949428][ T30] do_syscall_64+0x174/0x580 [ 708.954536][ T30] ? trace_irq_disable+0x3b/0x140 [ 708.959989][ T30] ? clear_bhb_loop+0x40/0x90 [ 708.964764][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.971490][ T30] RIP: 0033:0x7eff4259e019 [ 708.975971][ T30] RSP: 002b:00007eff407f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 708.984782][ T30] RAX: ffffffffffffffda RBX: 00007eff42825fa0 RCX: 00007eff4259e019 [ 708.992865][ T30] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 709.001299][ T30] RBP: 00007eff4263500c R08: 0000000000000000 R09: 0000000000000000 [ 709.009817][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.018089][ T30] R13: 00007eff42826038 R14: 00007eff42825fa0 R15: 00007ffde48bd4c8 [ 709.026635][ T30] [ 709.029718][ T30] INFO: task syz.2.4045:21062 blocked for more than 144 seconds. [ 709.037631][ T30] Not tainted syzkaller #0 [ 709.042683][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 709.052098][ T30] task:syz.2.4045 state:D stack:27872 pid:21062 tgid:21058 ppid:16428 task_flags:0x400040 flags:0x00080002 [ 709.064483][ T30] Call Trace: [ 709.068312][ T30] [ 709.071288][ T30] __schedule+0x17d9/0x56c0 [ 709.075806][ T30] ? __lock_acquire+0x683/0x2cf0 [ 709.081123][ T30] ? __lock_acquire+0x683/0x2cf0 [ 709.086316][ T30] ? __pfx___schedule+0x10/0x10 [ 709.091218][ T30] ? schedule+0x90/0x2b0 [ 709.095459][ T30] schedule+0x164/0x2b0 [ 709.099730][ T30] schedule_preempt_disabled+0x13/0x30 [ 709.105243][ T30] __mutex_lock+0x7bf/0x1550 [ 709.110267][ T30] ? __mutex_lock+0x5d4/0x1550 [ 709.115092][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 709.119961][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 709.125042][ T30] ? __dev_queue_xmit+0x29b/0x3820 [ 709.130685][ T30] ? radix_tree_lookup+0x240/0x290 [ 709.135844][ T30] genl_rcv_msg+0x10b/0x7a0 [ 709.140666][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 709.145715][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 709.151312][ T30] netlink_rcv_skb+0x226/0x4a0 [ 709.156566][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 709.161649][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 709.167356][ T30] ? down_read+0x2be/0x330 [ 709.171821][ T30] genl_rcv+0x28/0x40 [ 709.175833][ T30] netlink_unicast+0x7bb/0x940 [ 709.180842][ T30] netlink_sendmsg+0x813/0xb40 [ 709.185661][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.191161][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 709.196528][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.201851][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 709.207063][ T30] __sys_sendto+0x408/0x5a0 [ 709.211597][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 709.216689][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 709.222000][ T30] __x64_sys_sendto+0xde/0x100 [ 709.227202][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.233393][ T30] do_syscall_64+0x174/0x580 [ 709.238162][ T30] ? trace_irq_disable+0x3b/0x140 [ 709.243226][ T30] ? clear_bhb_loop+0x40/0x90 [ 709.248095][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.254024][ T30] RIP: 0033:0x7eff4255e84e [ 709.258957][ T30] RSP: 002b:00007eff407d3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 709.267562][ T30] RAX: ffffffffffffffda RBX: 00007eff407d56c0 RCX: 00007eff4255e84e [ 709.275580][ T30] RDX: 0000000000000020 RSI: 00007eff407d4000 RDI: 0000000000000003 [ 709.283737][ T30] RBP: 0000000000000000 R08: 00007eff407d3f04 R09: 000000000000000c [ 709.292448][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 709.300624][ T30] R13: 00007eff407d3f58 R14: 00007eff407d4000 R15: 0000000000000000 [ 709.308788][ T30] [ 709.311870][ T30] INFO: task syz.1.4050:21104 blocked for more than 144 seconds. [ 709.320809][ T30] Not tainted syzkaller #0 [ 709.325798][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 709.334899][ T30] task:syz.1.4050 state:D stack:27872 pid:21104 tgid:21103 ppid:17848 task_flags:0x400040 flags:0x00080002 [ 709.347381][ T30] Call Trace: [ 709.350705][ T30] [ 709.353723][ T30] __schedule+0x17d9/0x56c0 [ 709.358717][ T30] ? __lock_acquire+0x683/0x2cf0 [ 709.363815][ T30] ? __lock_acquire+0x683/0x2cf0 [ 709.369568][ T30] ? __pfx___schedule+0x10/0x10 [ 709.374480][ T30] ? schedule+0x90/0x2b0 [ 709.379732][ T30] schedule+0x164/0x2b0 [ 709.383935][ T30] schedule_preempt_disabled+0x13/0x30 [ 709.389676][ T30] __mutex_lock+0x7bf/0x1550 [ 709.394451][ T30] ? __mutex_lock+0x5d4/0x1550 [ 709.399579][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 709.404312][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 709.409883][ T30] ? __dev_queue_xmit+0x29b/0x3820 [ 709.415167][ T30] ? radix_tree_lookup+0x240/0x290 [ 709.420803][ T30] genl_rcv_msg+0x10b/0x7a0 [ 709.425344][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 709.430590][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 709.436195][ T30] netlink_rcv_skb+0x226/0x4a0 [ 709.441056][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 709.447487][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 709.452835][ T30] ? down_read+0x2be/0x330 [ 709.457515][ T30] genl_rcv+0x28/0x40 [ 709.461550][ T30] netlink_unicast+0x7bb/0x940 [ 709.467238][ T30] netlink_sendmsg+0x813/0xb40 [ 709.472066][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.477815][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 709.482804][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.488163][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 709.493258][ T30] __sys_sendto+0x408/0x5a0 [ 709.498980][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 709.504070][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 709.509920][ T30] __x64_sys_sendto+0xde/0x100 [ 709.514757][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.521563][ T30] do_syscall_64+0x174/0x580 [ 709.526554][ T30] ? trace_irq_disable+0x3b/0x140 [ 709.531655][ T30] ? clear_bhb_loop+0x40/0x90 [ 709.537135][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.543122][ T30] RIP: 0033:0x7ff241f5e84e [ 709.547711][ T30] RSP: 002b:00007ff242f30e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 709.556428][ T30] RAX: ffffffffffffffda RBX: 00007ff242f326c0 RCX: 00007ff241f5e84e [ 709.564451][ T30] RDX: 0000000000000020 RSI: 00007ff242f31000 RDI: 0000000000000006 [ 709.573444][ T30] RBP: 0000000000000000 R08: 00007ff242f30f04 R09: 000000000000000c [ 709.581614][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 709.589702][ T30] R13: 00007ff242f30f58 R14: 00007ff242f31000 R15: 0000000000000000 [ 709.598067][ T30] [ 709.601168][ T30] INFO: task syz.4.4051:21107 blocked for more than 144 seconds. [ 709.609308][ T30] Not tainted syzkaller #0 [ 709.614258][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 709.623108][ T30] task:syz.4.4051 state:D stack:27872 pid:21107 tgid:21106 ppid:18242 task_flags:0x400140 flags:0x00080002 [ 709.635329][ T30] Call Trace: [ 709.638860][ T30] [ 709.641818][ T30] __schedule+0x17d9/0x56c0 [ 709.646477][ T30] ? __lock_acquire+0x683/0x2cf0 [ 709.651474][ T30] ? __lock_acquire+0x683/0x2cf0 [ 709.656806][ T30] ? __pfx___schedule+0x10/0x10 [ 709.661723][ T30] ? schedule+0x90/0x2b0 [ 709.665958][ T30] schedule+0x164/0x2b0 [ 709.670990][ T30] schedule_preempt_disabled+0x13/0x30 [ 709.676652][ T30] __mutex_lock+0x7bf/0x1550 [ 709.681297][ T30] ? __mutex_lock+0x5d4/0x1550 [ 709.686458][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 709.691253][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 709.696573][ T30] ? __dev_queue_xmit+0x29b/0x3820 [ 709.701746][ T30] ? radix_tree_lookup+0x240/0x290 [ 709.707004][ T30] genl_rcv_msg+0x10b/0x7a0 [ 709.711566][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 709.717108][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 709.722541][ T30] netlink_rcv_skb+0x226/0x4a0 [ 709.727504][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 709.732573][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 709.738035][ T30] ? down_read+0x2be/0x330 [ 709.742489][ T30] genl_rcv+0x28/0x40 [ 709.746874][ T30] netlink_unicast+0x7bb/0x940 [ 709.751684][ T30] netlink_sendmsg+0x813/0xb40 [ 709.756616][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.761932][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 709.767252][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 709.773387][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 709.778877][ T30] __sys_sendto+0x408/0x5a0 [ 709.783455][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 709.788578][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 709.793888][ T30] __x64_sys_sendto+0xde/0x100 [ 709.798793][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.804896][ T30] do_syscall_64+0x174/0x580 [ 709.809845][ T30] ? trace_irq_disable+0x3b/0x140 [ 709.814904][ T30] ? clear_bhb_loop+0x40/0x90 [ 709.819809][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.825760][ T30] RIP: 0033:0x7f657c95e84e [ 709.830262][ T30] RSP: 002b:00007f657d7dce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 709.839000][ T30] RAX: ffffffffffffffda RBX: 00007f657d7de6c0 RCX: 00007f657c95e84e [ 709.847648][ T30] RDX: 0000000000000020 RSI: 00007f657d7dd000 RDI: 0000000000000008 [ 709.855682][ T30] RBP: 0000000000000000 R08: 00007f657d7dcf04 R09: 000000000000000c [ 709.863980][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 709.872417][ T30] R13: 00007f657d7dcf58 R14: 00007f657d7dd000 R15: 0000000000000000 [ 709.881605][ T30] [ 709.884698][ T30] INFO: task syz.3.4056:21122 blocked for more than 144 seconds. [ 709.892529][ T30] Not tainted syzkaller #0 [ 709.897901][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 709.906693][ T30] task:syz.3.4056 state:D stack:27872 pid:21122 tgid:21121 ppid:16834 task_flags:0x400040 flags:0x00080002 [ 709.918743][ T30] Call Trace: [ 709.922030][ T30] [ 709.924950][ T30] __schedule+0x17d9/0x56c0 [ 709.929955][ T30] ? __lock_acquire+0x683/0x2cf0 [ 709.934953][ T30] ? __lock_acquire+0x683/0x2cf0 [ 709.940363][ T30] ? __pfx___schedule+0x10/0x10 [ 709.945378][ T30] ? schedule+0x90/0x2b0 [ 709.949925][ T30] schedule+0x164/0x2b0 [ 709.954122][ T30] schedule_preempt_disabled+0x13/0x30 [ 709.960271][ T30] __mutex_lock+0x7bf/0x1550 [ 709.964911][ T30] ? __mutex_lock+0x5d4/0x1550 [ 709.969938][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 709.974729][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 709.980553][ T30] ? __dev_queue_xmit+0x29b/0x3820 [ 709.985749][ T30] ? radix_tree_lookup+0x240/0x290 [ 709.991142][ T30] genl_rcv_msg+0x10b/0x7a0 [ 709.995698][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 710.000970][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 710.007059][ T30] netlink_rcv_skb+0x226/0x4a0 [ 710.011877][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 710.017302][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 710.022661][ T30] ? down_read+0x2be/0x330 [ 710.027183][ T30] genl_rcv+0x28/0x40 [ 710.031187][ T30] netlink_unicast+0x7bb/0x940 [ 710.035951][ T30] netlink_sendmsg+0x813/0xb40 [ 710.040987][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 710.046640][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 710.051601][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 710.057062][ T30] sock_sendmsg_nosec+0x13a/0x180 [ 710.062136][ T30] __sys_sendto+0x408/0x5a0 [ 710.066853][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 710.071952][ T30] ? do_user_addr_fault+0xc4a/0x1340 [ 710.078414][ T30] __x64_sys_sendto+0xde/0x100 [ 710.083250][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.095486][ T30] do_syscall_64+0x174/0x580 [ 710.100312][ T30] ? trace_irq_disable+0x3b/0x140 [ 710.105379][ T30] ? clear_bhb_loop+0x40/0x90 [ 710.110353][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.116392][ T30] RIP: 0033:0x7f022995e84e [ 710.120836][ T30] RSP: 002b:00007f022a885e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 710.129386][ T30] RAX: ffffffffffffffda RBX: 00007f022a8876c0 RCX: 00007f022995e84e [ 710.137627][ T30] RDX: 0000000000000020 RSI: 00007f022a886000 RDI: 0000000000000006 [ 710.145643][ T30] RBP: 0000000000000000 R08: 00007f022a885f04 R09: 000000000000000c [ 710.153701][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 710.161801][ T30] R13: 00007f022a885f58 R14: 00007f022a886000 R15: 0000000000000000 [ 710.170394][ T30] [ 710.173512][ T30] [ 710.173512][ T30] Showing all locks held in the system: [ 710.183329][ T30] 1 lock held by khungtaskd/30: [ 710.188464][ T30] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 710.199695][ T30] 4 locks held by kworker/u8:3/48: [ 710.204919][ T30] 3 locks held by kworker/u8:8/1119: [ 710.210557][ T30] 2 locks held by getty/5382: [ 710.215264][ T30] #0: ffff888035c0f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 710.225351][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 710.235927][ T30] 5 locks held by kworker/u8:22/10653: [ 710.241709][ T30] #0: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 710.252471][ T30] #1: ffff8880b8624440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 710.261765][ T30] #2: ffff8880b8626058 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1a9/0xed0 [ 710.270851][ T30] #3: ffffffff9aa14d50 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xb7/0x420 [ 710.281477][ T30] #4: ffffffff8e9fd1a0 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 710.292586][ T30] 1 lock held by udevd/17671: [ 710.297845][ T30] #0: ffff888026732350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 710.307599][ T30] 6 locks held by syz.0.4044/21053: [ 710.312841][ T30] #0: ffffffff9009dc68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.321132][ T30] #1: ffffffff9009daa0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 710.330632][ T30] #2: ffff888026718260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4bc/0x1e80 [ 710.341168][ T30] #3: ffff88801dfcbe78 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 710.350919][ T30] #4: ffff88801dfcb840 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 710.364480][ T30] #5: ffff88801dfcb878 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 710.377290][ T30] 2 locks held by syz.2.4045/21059: [ 710.382499][ T30] #0: ffffffff9009dc68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.391438][ T30] #1: ffffffff9009daa0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 710.400934][ T30] 2 locks held by syz.2.4045/21062: [ 710.406869][ T30] #0: ffffffff9009dc68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.415134][ T30] #1: ffffffff9009daa0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 710.424448][ T30] 2 locks held by syz.1.4050/21104: [ 710.429755][ T30] #0: ffffffff9009dc68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.438420][ T30] #1: ffffffff9009daa0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 710.447868][ T30] 2 locks held by syz.4.4051/21107: [ 710.453103][ T30] #0: ffffffff9009dc68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.461660][ T30] #1: ffffffff9009daa0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 710.471128][ T30] 2 locks held by syz.3.4056/21122: [ 710.476533][ T30] #0: ffffffff9009dc68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.484785][ T30] #1: ffffffff9009daa0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 710.494719][ T30] 2 locks held by syz-executor/21130: [ 710.501141][ T30] #0: ffffffff9009dc68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.509733][ T30] #1: ffffffff9009daa0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 710.519004][ T30] 2 locks held by syz-executor/21133: [ 710.524401][ T30] #0: ffffffff9009dc68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.532898][ T30] #1: ffffffff9009daa0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 710.542051][ T30] 2 locks held by syz-executor/21167: [ 710.547558][ T30] #0: ffffffff9009dc68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.555799][ T30] #1: ffffffff9009daa0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 710.565242][ T30] 2 locks held by syz-executor/21185: [ 710.572613][ T30] #0: ffffffff9009dc68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.581048][ T30] #1: ffffffff9009daa0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 710.590515][ T30] 2 locks held by syz-executor/21203: [ 710.595932][ T30] #0: ffffffff9009dc68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.604772][ T30] #1: ffffffff9009daa0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 710.614042][ T30] 2 locks held by syz-executor/21225: [ 710.619713][ T30] #0: ffffffff9009dc68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.628442][ T30] #1: ffffffff9009daa0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 710.637935][ T30] 2 locks held by syz-executor/21226: [ 710.643424][ T30] #0: ffffffff9009dc68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.652239][ T30] #1: ffffffff9009daa0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 710.661722][ T30] 2 locks held by syz-executor/21261: [ 710.667385][ T30] #0: ffffffff9009dc68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.675629][ T30] #1: ffffffff9009daa0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 710.685102][ T30] 2 locks held by syz-executor/21279: [ 710.690650][ T30] #0: ffffffff9009dc68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.699845][ T30] #1: ffffffff9009daa0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 710.709196][ T30] 2 locks held by syz-executor/21294: [ 710.714840][ T30] #0: ffffffff9009dc68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.723244][ T30] #1: ffffffff9009daa0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 710.732548][ T30] 2 locks held by syz-executor/21317: [ 710.738571][ T30] #0: ffffffff9009dc68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.747165][ T30] #1: ffffffff9009daa0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 710.757685][ T30] 2 locks held by syz-executor/21318: [ 710.763093][ T30] #0: ffffffff9009dc68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.772052][ T30] #1: ffffffff9009daa0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 710.781299][ T30] 2 locks held by syz-executor/21353: [ 710.787173][ T30] #0: ffffffff9009dc68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.796853][ T30] #1: ffffffff9009daa0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 710.805906][ T30] 2 locks held by syz-executor/21370: [ 710.811761][ T30] #0: ffffffff9009dc68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.820202][ T30] #1: ffffffff9009daa0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 710.829943][ T30] 2 locks held by syz-executor/21385: [ 710.835352][ T30] #0: ffffffff9009dc68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 710.844574][ T30] #1: ffffffff9009daa0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 710.854004][ T30] [ 710.856734][ T30] ============================================= [ 710.856734][ T30] [ 710.865181][ T30] NMI backtrace for cpu 1 [ 710.865195][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 710.865214][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 710.865224][ T30] Call Trace: [ 710.865233][ T30] [ 710.865242][ T30] dump_stack_lvl+0xe8/0x150 [ 710.865265][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 710.865350][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 710.865376][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 710.865394][ T30] sys_info+0x135/0x170 [ 710.865409][ T30] watchdog+0xfd7/0x1030 [ 710.865431][ T30] ? watchdog+0x1c7/0x1030 [ 710.865448][ T30] kthread+0x388/0x470 [ 710.865464][ T30] ? __pfx_watchdog+0x10/0x10 [ 710.865476][ T30] ? __pfx_kthread+0x10/0x10 [ 710.865491][ T30] ret_from_fork+0x514/0xb70 [ 710.865509][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 710.865525][ T30] ? __switch_to+0xc89/0x1420 [ 710.865540][ T30] ? __pfx_kthread+0x10/0x10 [ 710.865555][ T30] ret_from_fork_asm+0x1a/0x30 [ 710.865573][ T30] [ 710.865576][ T30] Sending NMI from CPU 1 to CPUs 0: [ 710.978999][ C0] NMI backtrace for cpu 0 [ 710.979016][ C0] CPU: 0 UID: 0 PID: 48 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 710.979036][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 710.979047][ C0] Workqueue: krds_cp_wq#7/0 rds_connect_worker [ 710.979163][ C0] RIP: 0010:check_preemption_disabled+0x2a/0xe0 [ 710.979219][ C0] Code: 55 41 57 41 56 53 65 8b 05 f7 ad 9b 07 65 8b 0d ec ad 9b 07 f7 c1 ff ff ff 7f 74 0c 5b 41 5e 41 5f 5d e9 c9 e3 02 00 cc 9c 59 c1 00 02 00 00 74 ea 65 4c 8b 3d 9e ad 9b 07 41 f6 47 2f 04 74 [ 710.979233][ C0] RSP: 0018:ffffc90000b876b0 EFLAGS: 00000046 [ 710.979247][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000046 [ 710.979258][ C0] RDX: 00000000683129af RSI: ffffffff8e4b25d4 RDI: ffffffff8c4bdb80 [ 710.979270][ C0] RBP: ffffffff8a76acbb R08: ffffffff8a76acbb R09: 0000000000000000 [ 710.979282][ C0] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000002 [ 710.979293][ C0] R13: ffffffff8eb59c60 R14: 0000000000000000 R15: 0000000000000246 [ 710.979304][ C0] FS: 0000000000000000(0000) GS:ffff888124f50000(0000) knlGS:0000000000000000 [ 710.979319][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 710.979330][ C0] CR2: 0000561245184ee8 CR3: 000000000e946000 CR4: 00000000003526f0 [ 710.979346][ C0] Call Trace: [ 710.979353][ C0] [ 710.979361][ C0] ? __inet6_bind+0x49b/0xf30 [ 710.979447][ C0] lock_acquire+0x116/0x350 [ 710.979472][ C0] ? __inet6_bind+0x301/0xf30 [ 710.979491][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 710.979519][ C0] __inet6_bind+0x4b7/0xf30 [ 710.979536][ C0] ? __inet6_bind+0x49b/0xf30 [ 710.979557][ C0] kernel_bind+0x13e/0x1c0 [ 710.979579][ C0] ? __pfx_kernel_bind+0x10/0x10 [ 710.979605][ C0] ? rds_tcp_conn_path_connect+0x336/0x920 [ 710.979675][ C0] rds_tcp_conn_path_connect+0x53b/0x920 [ 710.979704][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 710.979728][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 710.979749][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 710.979769][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 710.979798][ C0] rds_connect_worker+0x1d8/0x290 [ 710.979818][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 710.979837][ C0] process_scheduled_works+0xa8e/0x14e0 [ 710.979868][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 710.979890][ C0] ? assign_work+0x3cf/0x5d0 [ 710.979911][ C0] worker_thread+0xa47/0xfb0 [ 710.979942][ C0] kthread+0x388/0x470 [ 710.979966][ C0] ? __pfx_worker_thread+0x10/0x10 [ 710.979985][ C0] ? __pfx_kthread+0x10/0x10 [ 710.980008][ C0] ret_from_fork+0x514/0xb70 [ 710.980035][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 710.980058][ C0] ? __switch_to+0xc89/0x1420 [ 710.980081][ C0] ? __pfx_kthread+0x10/0x10 [ 710.980105][ C0] ret_from_fork_asm+0x1a/0x30 [ 710.980127][ C0] [ 711.267443][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 711.274401][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 711.283525][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 711.293589][ T30] Call Trace: [ 711.296866][ T30] [ 711.299789][ T30] vpanic+0x56c/0xa60 [ 711.303765][ T30] ? __pfx___schedule+0x10/0x10 [ 711.308638][ T30] ? __pfx_vpanic+0x10/0x10 [ 711.313158][ T30] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 711.319318][ T30] panic+0xc5/0xd0 [ 711.323040][ T30] ? __pfx_panic+0x10/0x10 [ 711.327447][ T30] ? preempt_schedule_common+0x82/0xd0 [ 711.332903][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 711.338271][ T30] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 711.344434][ T30] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 711.350605][ T30] watchdog+0x1030/0x1030 [ 711.354935][ T30] ? watchdog+0x1c7/0x1030 [ 711.359347][ T30] kthread+0x388/0x470 [ 711.363514][ T30] ? __pfx_watchdog+0x10/0x10 [ 711.368270][ T30] ? __pfx_kthread+0x10/0x10 [ 711.372860][ T30] ret_from_fork+0x514/0xb70 [ 711.377446][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 711.382548][ T30] ? __switch_to+0xc89/0x1420 [ 711.387209][ T30] ? __pfx_kthread+0x10/0x10 [ 711.391799][ T30] ret_from_fork_asm+0x1a/0x30 [ 711.396556][ T30] [ 711.399914][ T30] Kernel Offset: disabled [ 711.404265][ T30] Rebooting in 86400 seconds..