last executing test programs: 23.731818171s ago: executing program 4 (id=2927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) 23.574095905s ago: executing program 4 (id=2929): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_emit_ethernet(0x76, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3c86dd6000004000403a00fe8000000000000000000000000000bbff0200000000000000000000000000010301907800000000608b9235628e0ff1d2c4c600002fff00000000000000000000000000000000fc01000000000000000000000000e3ff310000006800000087"], 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b140000001100010000000000000000000100000aa2bc5e9c86d9a1db554d15287a31198653b636a804dc12a1029ee522a05512d169b4590108b41e67a4dfabb364ece1097b220e3202601935"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x20, r4, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0xc000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f00000062c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/196, 0xc4}, {&(0x7f0000000200)=""/51, 0x33}], 0x2}}], 0x1, 0x2001, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002740)=@newchain={0x43c, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xe}, {0x9, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x6, 0xffffffc0, 0x0, 0x5, 0x48d5, 0x6, 0x8, 0x8, 0x6, 0xd, 0x8, 0x933, 0x6, 0x1, 0x7, 0x1, 0x872, 0xbf, 0x0, 0x145, 0xfffffffa, 0x2, 0x8, 0x6000000, 0x9, 0xd, 0xc64, 0x3, 0x1c000, 0x2, 0x3, 0x9, 0x8, 0x5, 0x0, 0x8ec, 0x6, 0x6, 0x2, 0x2, 0x4, 0x8, 0x2, 0xbda, 0x7fff, 0x8db, 0xcb56, 0x0, 0x4, 0xb1a, 0x1, 0x8, 0xfd77, 0x1, 0x4, 0xd8fd, 0x80000001, 0x5, 0x8, 0x2, 0x7ff, 0x3, 0x32a, 0x1, 0x8, 0xc, 0x1, 0x5, 0x0, 0x2, 0x2, 0x5, 0x0, 0x1, 0x4, 0xc0, 0xd, 0x2c, 0xe, 0x2, 0x2, 0xe109, 0x80000001, 0x5e, 0xfffffffb, 0x297, 0x3, 0x81, 0x6ee, 0xce8, 0x7fffffff, 0x7, 0xd, 0x42e, 0x9, 0x8, 0x3, 0x8, 0xfffffffc, 0x5, 0x6, 0x3, 0x5, 0x6, 0xd7d8, 0x35, 0x1, 0x8, 0x6, 0x81, 0xb4, 0x80000001, 0x1, 0x3ff, 0xffff33f7, 0x4, 0x6, 0x10000000, 0x5, 0x9, 0x5, 0x7, 0x7, 0x0, 0x52e, 0x5, 0x8, 0x0, 0x0, 0x1, 0x4, 0x4, 0x1, 0x9, 0x1, 0x5, 0x6, 0x8000, 0x10000, 0x4, 0xffff2237, 0x3, 0x400010, 0xe, 0x5, 0x2, 0x8, 0x7, 0x67e, 0x7, 0x200, 0x6, 0x4, 0x5, 0x9, 0x5, 0x39, 0xe71, 0x6, 0x3, 0x9, 0x2, 0x7, 0xf34, 0xb, 0x0, 0x400, 0x7ef4, 0xa, 0x265, 0x80000001, 0x8, 0x48, 0x7, 0x5, 0x46d, 0x8f, 0x8, 0x7, 0x7, 0x8, 0x8, 0x1, 0x6, 0xdb25, 0xb41c, 0x0, 0x5, 0x4, 0x1, 0x9, 0xe, 0x9, 0x1, 0xd5, 0x4, 0x3, 0x9, 0x2, 0x5, 0x4, 0xf1a, 0x7, 0x2, 0x95, 0x5, 0x993, 0x9, 0xe, 0x7, 0x91, 0x4, 0x400, 0x1, 0x1, 0x3, 0x4, 0x1, 0x2, 0x8001, 0x819, 0xb, 0x8, 0x800, 0x7f, 0x9, 0x2, 0x1, 0x0, 0xffffffff, 0x1, 0x2, 0x1, 0x0, 0x0, 0x9, 0x6, 0x2, 0x2, 0x2, 0x1b328f44, 0x4, 0x6, 0x9, 0x1, 0x0, 0x8, 0x1, 0x3, 0xfffffde0, 0x7, 0x4, 0x6, 0x80000001, 0x7]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x4004880}, 0x44000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r9], 0x3c}}, 0x0) sendmsg$L2TP_CMD_NOOP(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r8, 0x200, 0x4, 0x25dfdbff, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x884}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x49, &(0x7f0000000040)=r10, 0x4) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$tipc(r12, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close(r11) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 23.116638611s ago: executing program 4 (id=2934): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) (async) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000200), 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) (async) write$tun(r2, &(0x7f0000000400)={@void, @val={0x2, 0x4, 0x4, 0x9, 0x8, 0x9}, @eth={@remote, @remote, @val={@val={0x88a8, 0x1}, {0x8100, 0x6, 0x1, 0x3}}, {@mpls_uc={0x8847, {[], @ipv6=@gre_packet={0xc, 0x6, "007f00", 0x48, 0x2f, 0x1, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x4, 0x5]}, {0x8, 0x88be, 0x1, {{0xd, 0x1, 0x4, 0x0, 0x1, 0x2, 0x4, 0x6}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x3, 0x3, 0x1, 0x2}, 0x2, {0x61, 0x1, 0x3, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}}}, 0x90) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000001300)={0x21c, r1, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x21c}}, 0x20000000) (async) r5 = socket$qrtr(0x2a, 0x2, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, r7, 0x5, 0x0, 0x0, {0x6, 0x74, 0x600}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:udev_helper_exec_t:s0\x00'}]}, 0x40}, 0x1, 0xffffffff00000003}, 0x0) (async) r8 = socket$kcm(0xa, 0x922000000003, 0x11) (async) r9 = socket$kcm(0x10, 0x2, 0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f0000000100)=r10, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r10, 0x10e, 0x5, &(0x7f0000000300)=0x2, 0x4) (async) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000200)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque="0b80d010da6a6a3c"}}}}}, 0x0) syz_emit_ethernet(0xd81, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd73, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xd5f, 0x0, @gue={{0x1, 0x1, 0x3, 0x6, 0x0, @void}, "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"}}}}}}, 0x0) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r11, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x4a}, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x2000c851) (async) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000001580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001540)={&(0x7f0000000340)={0x8c, r12, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe9}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000082}, 0x8800) 23.02252766s ago: executing program 4 (id=2937): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x40000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="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"], 0x2040}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000640)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x1e, 0x2, @TCA_ETF_PARMS={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xfff}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x21c, 0x8, 0xa, 0xb00, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xeb, 0x7, 0x1, 0x0, "f3cd4951e5df0b6e38c910058223568505d8eee7de5ff255d70a921a892d6569d0ccc1ad34bf2f9e1ff1424fa07ebed5522f4a01924ee84507ca7f6553b21eb6cdd361a17bf41e8a39a654ea5569f66698396d146a17baa7fc3f14fdc93f4c48ebc403e0c160001b36d643e31193e9c7ef338b6ef6287cfea74416cd5965d3aa8dc2278d5970eb769576de23e83854d8193378621e32ee7cc35a220aca4ab973a344260f1ea3d8ba426e0478709a107715598b17b91d1aec33fb502bf5f43c10f03f5f920f7b286a9d30ac965a07bc1a1181bb77d79b9ca19c2a1b6f5ed82ac17d3cfa7654934f"}, @NFTA_RULE_EXPRESSIONS={0xec, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_LIMIT_RATE={0xc}]}}}, {0x5c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x8000000000000001}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x8001}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x44, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x26}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x32}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x32}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0xc8, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0xa4, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}]}}}, {0x40, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x344}, 0x1, 0x0, 0x0, 0x20}, 0x4) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x1c, 0x21, 0x1, 0x70bd2d, 0x0, {0x2, 0x0, 0x0, 0x7f}}, 0x1c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000a000400aaaaaaaaaa00000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r5], 0x80}}, 0x0) 22.539237602s ago: executing program 4 (id=2943): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000003400)={0x2, 0x4e22, @broadcast}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r4}, 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r5, &(0x7f0000000180)="8e7ef7a0e72453e1264832b9a2a7c0394552b6b20ec8e2b1e3788100ccb8d4919e2bd9c4a27921fef5530132c8c36c056fff1b92139e7c44471cd8aabeda4af2055af44001445784c281272d464bb59dd55015f25c3b4e77dcada7655e7f40bee886201759adda173a48466e65", &(0x7f0000000240)=""/178}, 0x20) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d52a99295b2f"}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 22.372718388s ago: executing program 4 (id=2945): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/264, 0x108}], 0x1}, 0x1f00) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4) 18.559845248s ago: executing program 2 (id=2996): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) r2 = accept(0xffffffffffffffff, &(0x7f0000000000)=@ieee802154={0x24, @short}, &(0x7f0000000080)=0x80) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 18.543531433s ago: executing program 0 (id=2997): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}], 0x10) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x1, 0x2000c051, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000d, 0x50, r0, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)={'bridge0', 0x32, 0x32}, 0xa) 18.432889264s ago: executing program 2 (id=2998): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r1, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r4, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}]}, 0x3c}, 0x1, 0x620b}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl(r2, 0x89, &(0x7f00000001c0)="fae4771d48534fc1e5db6f6668dd461ab10e766fdf0540e5c9f33701ea7f640271bfcd5483c4cf4b5faccb46126af3f5f4422eae48bbcfd66812226659f02bb6e87b66dd2443a4fb42de4132a4c5dad511f946a8587aa19d468e8b3d819d2737d70af56ff39bad0a7c73727f7a6d29c23634c4ab98b84502d7c89bc121f4aaf1c5d744e7f26091cb3b50a5b9fefda7ec6948448771747cbf19b56bc798e48f7ea7eb13df5f1c2c6f87ef58ec8d4d3713de397211d3fb4f44dccdf940b25922f3a648ef2e63e226a49a3fa2") sendto$inet6(r6, &(0x7f0000000180)="a40141ad", 0x4, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x20000, @mcast2, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f00000000c0)) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)}, 0x40002000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r1, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r2, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r4, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}]}, 0x3c}, 0x1, 0x620b}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl(r2, 0x89, &(0x7f00000001c0)="fae4771d48534fc1e5db6f6668dd461ab10e766fdf0540e5c9f33701ea7f640271bfcd5483c4cf4b5faccb46126af3f5f4422eae48bbcfd66812226659f02bb6e87b66dd2443a4fb42de4132a4c5dad511f946a8587aa19d468e8b3d819d2737d70af56ff39bad0a7c73727f7a6d29c23634c4ab98b84502d7c89bc121f4aaf1c5d744e7f26091cb3b50a5b9fefda7ec6948448771747cbf19b56bc798e48f7ea7eb13df5f1c2c6f87ef58ec8d4d3713de397211d3fb4f44dccdf940b25922f3a648ef2e63e226a49a3fa2") (async) sendto$inet6(r6, &(0x7f0000000180)="a40141ad", 0x4, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x20000, @mcast2, 0x4}, 0x1c) (async) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f00000000c0)) (async) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)}, 0x40002000) (async) 18.340137774s ago: executing program 0 (id=2999): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1, 0x2}, &(0x7f00000000c0)=0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=@getspdinfo={0x14, 0x25, 0x1}, 0x14}}, 0x0) 18.159921778s ago: executing program 2 (id=3002): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20044002) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040)=ANY=[], 0x4) syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@canfd={0xd, {{0x1, 0x0, 0x0, 0x1}, 0x25, 0x1, 0x0, 0x0, "8335126e052893e2a35cb143a5f60bb0d202d9c0a04ee43553245a001fc35d54464a52fc17e835f1c12689f58fa9e79b52ea04eab7cac7f06ca2373c3bad5d9b"}}}}, 0x0) shutdown(r0, 0x0) 18.093951641s ago: executing program 0 (id=3004): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket(0x2b, 0x80801, 0x1) ioctl$SIOCGETNODEID(r4, 0x89e1, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "688d33f2"}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f000114000000110600ac141414e0000001808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xb) 17.959636117s ago: executing program 2 (id=3007): syz_emit_ethernet(0x252, &(0x7f00000000c0)={@multicast, @multicast, @val={@void, {0x8100, 0x6, 0x1, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x218, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a, 0x37, '\x00', [@ra={0x5, 0x2, 0x3}, @generic={0xa, 0x76, "5a4a34be90326746dedeab3e40821564b93824349a77307d7d60379104dc3bb5a0d942d5e6a7a6771745e7085cf86c5ee2eb25ff68215b7e724ef6dc5b2bff16b7be7c6bc0c1b82c958169ba458c615f04a8eb87971d28b3ef310102f68d43c9c3dab516e6f2d99bdea82893c43c3411c5494995be4e"}, @generic={0x34, 0xe9, "61c48dd16627fc2f5246da815f8570b128236191182b775966ac8ce88db5e74665585ffa622c535f8a18fb604e9f169b47267bff43c003c92765ea570bfaec0867bf0a904c4f094643db805aa8631c610ae750821b1530bcc8c1af013bfc8e06e54bf5a6be19610c20f917a06d1be4bc48b0049a106cb69c554a766ad9d040d8e41281142607108a3a389dc9878898f7c58e4e8bc3b3a217350e209da8e7897ffe34606f4cd23e60c371c34aac4c4817a65da82106dc4fc54f6f7b57b2333c706cd6ad57479fbc9a206b760b86e324c6af76625bada41b12b3fe7d38902ec6252558281e5e3d316e24"}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x0, 0x6, 0x5d, 0x400, [0x6, 0x401, 0x1]}}, @pad1, @calipso={0x7, 0x8, {0x3, 0x0, 0x4, 0x2}}, @hao={0xc9, 0x10, @mcast1}]}, @fragment={0x6, 0x0, 0x7f, 0x1, 0x0, 0x9, 0x68}, @fragment={0x3b, 0x0, 0x1, 0x1, 0x0, 0x7, 0x67}], @dest_unreach={0x1, 0x3, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @loopback, @local, [@hopopts={0xbe}], "7bf354a4d44f873e"}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000007440)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x2000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f8483f0000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 17.881401607s ago: executing program 0 (id=3009): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r1, 0x1, 0x20, 0x7fffffffffffffff, 0x6}, &(0x7f0000000280)=0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r1, 0x1, 0x20, 0x7fffffffffffffff, 0x6}, &(0x7f0000000280)=0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) 17.62543426s ago: executing program 0 (id=3012): r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x1016, &(0x7f00000010c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa81004000001142027f62ef"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0xeaddb0ce1851e778, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x344}]}, 0x34}}, 0x0) 17.623678241s ago: executing program 2 (id=3013): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) 17.451074962s ago: executing program 0 (id=3015): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES16=r1, @ANYBLOB="030b000000000000000013000000"], 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000ffdbdf2514000000080001000100000008001d00", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket(0x6, 0x5, 0x5) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25030000000c0002000700000000000000100007800c00018008000100", @ANYRES32=r6, @ANYBLOB="100000000000000001000100", @ANYRES32=r7, @ANYBLOB="0c00040017eb0000000000000800010000000000"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x604, r2, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x2d4, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xeb}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x94}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x258, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x230, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0xf53, 0xfff, 0x82, 0x7, 0x6, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x0, 0x2, 0x6, 0xe, 0x1, 0x1, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0x2, 0xfff9, 0xa, 0x7c, 0x7fff, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xa47, 0xd, 0x0, 0x4, 0xfa, 0x1000, 0x970]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x60, 0x1, 0x10, 0x18, 0x48, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x4, 0x0, 0x9, 0x4, 0x4, 0x8000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0xa}, {0x5, 0x3}, {0x4, 0x2}, {0x5, 0x4}, {0x4, 0xa}, {0x5, 0x8}, {0x5, 0x6}, {0x6, 0xa}, {0x1, 0x3}, {0x7, 0x1}, {0x5, 0x6}, {0x4, 0x7}, {0x7, 0x2}, {0x2, 0x5}, {0x0, 0x3}, {0x4, 0x8}, {0x1, 0x6}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x5, 0x2}, {0x4, 0x6}, {0x2}, {0x1, 0x5}, {0x7, 0x4}, {0x2, 0x7}, {0x4, 0x7}, {0x5, 0x7}, {0x2, 0x2}, {0x2, 0x8}, {0x1, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x0, 0x8, 0x1, 0xd4a, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1a1a, 0x6, 0x4, 0x8, 0x3ff, 0xfac, 0x30, 0x583]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0x30, 0x48, 0x4, 0x30]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x2}, {0x1, 0xa}, {0x5}, {0x7, 0x9}, {0x7}, {0x1, 0x6}, {0x2, 0x7}, {0x5, 0xa}, {0x4, 0x9}, {0x5, 0x4}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x2, 0x1000, 0x4, 0x1, 0x4, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0x36, 0x12, 0x5, 0x12, 0x77a2fb25639ebb20, 0x2, 0x48, 0xb, 0x5, 0x32, 0x3, 0x9, 0x3, 0xb, 0x30, 0x30, 0x2, 0x1b, 0x16, 0x36, 0x24, 0x3, 0xb, 0x9, 0x9, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x48, 0x60, 0x36, 0x12, 0x3, 0x18, 0x3, 0x1b, 0x24, 0x30, 0x1b, 0x48, 0x1b, 0x0, 0x1, 0x30, 0x6c, 0x48, 0x1b, 0x9, 0x16, 0x6c, 0x6, 0x16, 0xc, 0x5, 0x6, 0x18, 0x9, 0x24, 0x48]}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x3, 0x1}, {0x1, 0x7}, {0x3, 0x3}, {0x1}, {0x2, 0x5}, {0x1, 0x6}, {0x0, 0x4}, {0x4}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x6}, {0x1, 0x9}, {0x1, 0x1}, {0x6, 0x7}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x2}, {0x3, 0x7}, {0x6, 0x5}, {0x0, 0x5}, {0x7, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x3, 0x3}, {0x2, 0xa}, {0x7, 0x6}, {0x7, 0x9}, {0x6, 0x1}, {0x6, 0x5}, {0x5, 0x8}, {0x1}, {0x6, 0x9}, {0x7, 0x8}, {0x1, 0x8}, {0x5, 0x9}, {0x0, 0x9}, {0x6, 0x7}, {0x1, 0x4}, {0x7, 0x5}, {0x4, 0x4}, {0x4, 0xa}, {0x7, 0x4}, {0x1, 0x5}, {0x0, 0x5}, {0x1, 0xa}, {0x0, 0x5}, {0x5, 0x1}, {0x1, 0x9}, {0x4, 0x2}, {0x6, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xdd57, 0x8, 0x96a6, 0x4, 0x5, 0x4, 0xbae2]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1147}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd1}]}]}, @NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xea}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x50, 0x11d, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x28}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3ff}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x5c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbf}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x16c, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xb3e}]}, {0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6e}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x110, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xdc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x48, 0x1b, 0x48, 0x6, 0x36, 0xf5703c0e5196dbf2, 0x3, 0x60, 0x18, 0x18, 0xb, 0x3, 0x3, 0xb, 0x24, 0x16, 0x2, 0x12, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9977, 0x7, 0x4, 0x9, 0x1, 0x4, 0x9, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0xd971, 0x8, 0x6, 0x7, 0x9, 0x7]}}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5, 0x6}, {0x2, 0x5}, {0x0, 0x6}, {0x0, 0x2}, {0x2, 0x2}, {0x2, 0x8}, {0x2, 0x1}, {0x4}, {0x5, 0x8}, {0x2, 0x6}, {0x2}, {0x0, 0x9}, {0x4, 0x7}, {0x6, 0x6}, {0x2, 0x6}, {0x1, 0x1}, {0x7, 0x6}, {0x3, 0x5}, {0x5, 0x2}, {0x5, 0xa}, {0x6, 0x6}, {0x4, 0x3}, {0x5, 0xa}, {0x0, 0x4}, {0x6, 0x8}, {0x6, 0x4}, {0x2, 0x3}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x6}, {0x0, 0x1}, {0x2, 0x1}, {0x6, 0x6}, {0x1, 0x5}, {0x7, 0x8}, {0x5, 0x7}, {0x0, 0x4}, {0x2, 0x1}, {0x0, 0x6}, {0x0, 0x1}, {0x5, 0xa}, {0x4, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xfff, 0x7, 0xe, 0x81, 0x5, 0x8, 0xfe14]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x1, 0x9}, {0x4, 0x9}, {0x1, 0x4}, {0x6}, {0x7, 0x4}, {0x7, 0x8}, {0x0, 0x5}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x7}, {0x4, 0xa}, {0x1, 0x5}, {0x6, 0x8}, {0x5}, {0x7, 0x6}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x7}, {0x4, 0x1}, {0x5, 0xa}, {0x4, 0x3}, {0x1, 0x2}, {0x3, 0x9}, {0x6, 0x7}, {0x4, 0x4}, {0x3, 0x5}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0x8}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x58, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}]}]}, 0x604}, 0x1, 0x0, 0x0, 0x800}, 0x40400c4) 17.414078141s ago: executing program 2 (id=3016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x882}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xfffffffffffffea5, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) clock_gettime(0xfffffffffffffffd, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f00000f0012800b00010067726574617000001c07028006000e00010000000800070064010101060010004e221e0008000a40", @ANYRES32=r7, @ANYBLOB], 0x54}}, 0x24000000) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000010900020073797a3100000000014a010380100000800c0001800600"/64], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 17.072405616s ago: executing program 1 (id=3020): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x27, 0x6, 0x8, 0xf2c, 0x4000, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x11, 0x40, 0x0, 0x8, 0x222, 0x1, 0xf0f6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x7, 0x9, 0x5, 0x401, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0xd}, 0x50) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x81, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x10, &(0x7f0000000180)=@raw=[@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x9}, @alu={0x7, 0x0, 0x6, 0x0, 0x8, 0x6, 0x4}, @call={0x85, 0x0, 0x0, 0xbd}, @ldst={0x2, 0x3, 0x0, 0x6, 0x3, 0xc, 0x1}], &(0x7f0000000080)='syzkaller\x00', 0x42d885e6, 0x5, &(0x7f0000000240)=""/5, 0x40f00, 0x44, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x0, 0x7f, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r2, r3, r4], 0x0, 0x10, 0x4}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCGIFNETMASK(r7, 0x891b, &(0x7f0000000480)={'veth1_to_bridge\x00', {0x2, 0x0, @remote}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r10, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 16.226197448s ago: executing program 1 (id=3022): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x8080) syz_genetlink_get_family_id$nl80211(0x0, r4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0x7d, &(0x7f0000000700)={r7, 0xfffff801, 0x11e2000, 0x62c, 0x4, 0x2, 0x2, 0x4, {0x0, @in={{0x2, 0x4e21, @local}}, 0x4, 0xfffffffb, 0x3, 0x1000, 0x1}}, &(0x7f00000007c0)=0xb0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) socket$netlink(0x10, 0x3, 0x0) 15.548321966s ago: executing program 3 (id=3027): unshare(0x28000600) r0 = socket(0x10, 0x3, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000140)="410002000100e6", 0x7) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x1, 0x8, "51915b", 0xf3, 0x63}) r2 = accept4$nfc_llcp(r0, &(0x7f0000000240), &(0x7f00000000c0)=0x60, 0x80000) ioctl$AUTOFS_IOC_FAIL(r2, 0x9361, 0xbf8) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@deltaction={0x18, 0x31, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x84, 0x0, 0x0, @fd=r4}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 15.536100404s ago: executing program 3 (id=3028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000007740)={0x16, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r2, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) (async) r3 = socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r3) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000005600)={0xffffffffffffffff, 0x0, 0x25, 0x9, @void}, 0x10) (async) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r8 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r8, 0x0, 0x0, 0x40000, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x28, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7ffff, {0x0, 0x0, 0x0, r10, {0xffff, 0x2}, {0xffff, 0xb}, {0x4c2399b2ec5c1593}}, [@TCA_RATE={0x6, 0x5, {0x3, 0xa}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48050}, 0x4008000) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000020c0)='memory.current\x00', 0x0, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000006e40)={0x20, 0x5, &(0x7f0000007800)=ANY=[@ANYRES32=0x0, @ANYRES64=r9, @ANYBLOB="d9d6e258d0d80d006cb1e07f1e7b8402c47f8041d608d112afd555eac2da17d7761f71b629f381dec829ad66b9c0d45aeed1d405971af28504f1af315eb468490741cb8fdd51f83a8ebb8505fe2588dc7fc3bcdbcf", @ANYRES16=r2, @ANYRES32=r2, @ANYRES64=r8, @ANYRESHEX=r6], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback=0x23, r12, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r13, 0x0, 0x15, 0x0, &(0x7f00000006c0)="5c71f91b05c413550230b4c817a62875483efe176d", 0x0, 0x8, 0x0, 0x1, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) (async) clock_gettime(0x0, &(0x7f0000007300)={0x0, 0x0}) (async) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001e0001000000000000000000020000000100000700000000080001000000000008000f"], 0x2c}, 0x1, 0x0, 0x0, 0x4008012}, 0x0) (async) recvmmsg$unix(r11, &(0x7f00000070c0)=[{{&(0x7f0000000400), 0x6e, &(0x7f0000002200)=[{&(0x7f0000000480)=""/64, 0x40}, {&(0x7f00000074c0)=""/201, 0xc9}, {&(0x7f00000005c0)=""/155, 0x9b}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000680)=""/121, 0x79}, {&(0x7f0000000700)=""/104, 0x68}, {&(0x7f0000004c00)=""/18, 0x12}, {&(0x7f0000002100)=""/151, 0x97}, {&(0x7f0000005200)=""/4, 0x4}], 0x9, &(0x7f00000022c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002300)=@abs, 0x6e, &(0x7f00000037c0)=[{&(0x7f0000002380)=""/252, 0xfc}, {&(0x7f0000002480)=""/207, 0xcf}, {&(0x7f0000002580)=""/193, 0xc1}, {&(0x7f0000002680)=""/25, 0x19}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/239, 0xef}], 0x6, &(0x7f0000003840)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f00000004c0), 0x6e, &(0x7f00000059c0)=[{&(0x7f00000039c0)=""/121, 0x79}, {&(0x7f0000003a40)=""/32, 0x20}, {&(0x7f0000003a80)=""/94, 0x5e}, {&(0x7f0000003b00)=""/168, 0xa8}, {&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f0000005940)=""/100, 0x64}], 0x6}}, {{0x0, 0x0, &(0x7f0000004f00)=[{&(0x7f0000004c40)=""/40, 0x28}, {&(0x7f0000004c80)=""/176, 0xb0}, {&(0x7f0000004d40)=""/230, 0xe6}, {&(0x7f0000004e40)=""/30, 0x1e}, {&(0x7f0000004e80)=""/90, 0x5a}], 0x5, &(0x7f0000004f80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000004fc0), 0x6e, &(0x7f00000054c0)=[{&(0x7f0000005040)=""/175, 0xaf}, {&(0x7f0000005100)=""/243, 0xf3}, {&(0x7f0000005900)=""/19, 0x13}, {&(0x7f0000005240)=""/48, 0x30}, {&(0x7f0000005280)=""/30, 0x1e}, {&(0x7f00000052c0)=""/54, 0x36}, {&(0x7f0000005300)=""/21, 0xfffffffffffffeee}, {&(0x7f0000005340)=""/185, 0xb9}, {&(0x7f0000005400)=""/155, 0xa4}], 0x9, &(0x7f0000005580)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f00000075c0)=@abs, 0x6e, &(0x7f00000058c0)=[{&(0x7f0000005680)=""/166, 0xa6}, {&(0x7f0000005740)=""/76, 0x4c}, {&(0x7f00000057c0)=""/248, 0xf8}], 0x3, &(0x7f0000007380)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f0000005a40)=@abs, 0x6e, &(0x7f0000005bc0)=[{&(0x7f0000005ac0)=""/237, 0xed}], 0x1, &(0x7f0000005c00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000005d00), 0x6e, &(0x7f0000006f40)=[{&(0x7f0000005d80)=""/158, 0x9e}, {&(0x7f0000005e40)=""/4096, 0x1000}, {&(0x7f0000007640)=""/248, 0xf8}], 0x3, &(0x7f0000006f80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006fc0)=""/96, 0x60}], 0x1, &(0x7f0000007080)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}], 0x9, 0x10202, &(0x7f0000007340)={r14, r15+10000000}) ioctl$TUNGETVNETHDRSZ(r17, 0x800454d7, &(0x7f0000004bc0)) 15.440482799s ago: executing program 3 (id=3029): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast2}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @dev={0xac, 0x14, 0x14, 0x19}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast2}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x7d}}, &(0x7f0000000480)='GPL\x00'}, 0x80) 15.360541111s ago: executing program 3 (id=3030): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x4044884) 15.359684613s ago: executing program 3 (id=3031): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0) 15.327824767s ago: executing program 1 (id=3032): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001300e9992dbd700000000000fc000000000000000000000000000000ac1e00010000000000000000000000004e220000000000000a00302011000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000717a34c4000000000000000000000000000080000000000000000000000000000000feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000001000000000000"], 0xb8}}, 0x4000) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) (async) r1 = socket$inet(0x2, 0xa, 0x100) (async) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000580)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=@ipv4_getrule={0x1c, 0x22, 0x100, 0x70bd2a, 0x25dfdbfe, {0x2, 0x0, 0x14, 0x0, 0x8, 0x0, 0x0, 0x6, 0x10000}, ["", "", "", "", "", ""]}, 0x1c}}, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r4, &(0x7f0000000180)={0x27}, 0x14) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r5, 0x32d, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x4a}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040005}, 0x67739a769c237017) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) (async) getsockopt$IP_SET_OP_VERSION(r8, 0x1, 0x53, &(0x7f0000000380), &(0x7f00000003c0)=0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x0, 0x7ffffffff000}, 0x7, 0x0, 0xff, 0x5}, 0x20) (async, rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x0, 0x2}, 0x20) (rerun: 64) r11 = socket(0x2b, 0x1, 0x0) listen(r11, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209adf70000000000000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100013b37f5c5d250ae3866b54df21ba00f2eaeb951254465d775de7ddc2461baedde9b4102a2bde3071ce6aa05ef8723dc9b1486e8976d938e6a2794c537c1ce56448801bc9dc46290dddcd75e6eab7494664b992302a1a5fe0576"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 15.314337079s ago: executing program 3 (id=3033): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r1, 0x110, 0x6, 0x0, &(0x7f0000000280)) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x44, r6, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x2}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0xbe66}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xf4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000) (async) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x10, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x2c}}, 0x0) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000400", @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000"], 0x14}, 0x1, 0x0, 0x0, 0x60}, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x9c, 0x1, 0xa, 0x905, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x58, 0x6, "4f0c2ed87c7de6834d8ce479cb4db07252730b6e95f4d7fc0232078975ddf890fca62f589d4908aefa3702f5e37c3cab1f878b5fb058d75051c45521c739d8a7b0b325bbede275c8d835cb4043c1554992d49c2f"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) 15.216812553s ago: executing program 1 (id=3034): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x1e09aa98}], 0x1}, 0x1f00) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, r2, 0xe08b8000) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000000a9000000000000000000000cfc55b886b0d4962b000000000000000000170ef2d1bd47ba717ced0965e5f3de2491feabebcf66aa"], 0x50) readv(r3, &(0x7f0000001400)=[{&(0x7f0000000180)=""/207, 0xcf}, {&(0x7f0000000080)=""/65, 0x41}, {&(0x7f0000000280)=""/127, 0x7f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/252, 0xfc}], 0x5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000009000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x6}, 0x94) 15.209439054s ago: executing program 1 (id=3035): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'lo\x00', &(0x7f0000000140)=@ethtool_ringparam={0x1f, 0x0, 0x2, 0x37d7, 0x9, 0x6, 0x7, 0x1, 0x10}}) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$MAP_CREATE_TAIL_CALL(0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000ce8bc3c6a35d00"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff9}, {0x6, 0xffff}, {0xfff2}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x95, 0xc37f, 0x8, 0x1, 0x6, 0x3a0, 0x1}}, {0x6, 0x2, [0x7fff]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24048804}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) accept4$bt_l2cap(r5, 0x0, 0x0, 0x800) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400ad8df47d85b2", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x86dd, r4, 0x1, 0xd7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000001940)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'nicvf0\x00', {0x7ff}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x5, 0x3}, {0xffffffffffffffff, 0x5, 0x2}, 0xda, 0xfffffff8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1d, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'lo\x00', &(0x7f0000000140)=@ethtool_ringparam={0x1f, 0x0, 0x2, 0x37d7, 0x9, 0x6, 0x7, 0x1, 0x10}}) (async) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) bpf$MAP_CREATE_TAIL_CALL(0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000ce8bc3c6a35d00"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff9}, {0x6, 0xffff}, {0xfff2}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x95, 0xc37f, 0x8, 0x1, 0x6, 0x3a0, 0x1}}, {0x6, 0x2, [0x7fff]}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24048804}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) (async) accept4$bt_l2cap(r5, 0x0, 0x0, 0x800) (async) socket$packet(0x11, 0x3, 0x300) (async) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400ad8df47d85b2", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x86dd, r4, 0x1, 0xd7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000001940)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'nicvf0\x00', {0x7ff}}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x41}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x5, 0x3}, {0xffffffffffffffff, 0x5, 0x2}, 0xda, 0xfffffff8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1d, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 15.164717746s ago: executing program 1 (id=3036): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003900000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f00000001c0)) bind$bt_hci(r0, &(0x7f0000000180)={0x27}, 0x6) r3 = socket$inet6(0x10, 0x2, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000007140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000007280)={0x0, 0x0, &(0x7f0000007240)={&(0x7f00000071c0)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendto$inet6(r3, &(0x7f0000000100)="4c000000123161b4ff5a01d7a600dd15b9409b8402af378627aa5095eb52c8a1487904a5780900000008000000030038c88cc055c5ac32a6bfb068daa9947b14be22d0bf46d323452536005ad94a461cdbfee9bd", 0x54, 0x44040054, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYRES8=r3], &(0x7f0000000480)='GPL\x00'}, 0x94) 2.131153617s ago: executing program 32 (id=3015): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="01000000", @ANYRES16=r1, @ANYBLOB="030b000000000000000013000000"], 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000ffdbdf2514000000080001000100000008001d00", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket(0x6, 0x5, 0x5) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000006880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25030000000c0002000700000000000000100007800c00018008000100", @ANYRES32=r6, @ANYBLOB="100000000000000001000100", @ANYRES32=r7, @ANYBLOB="0c00040017eb0000000000000800010000000000"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x604, r2, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x2d4, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xeb}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x94}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x258, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x230, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0xf53, 0xfff, 0x82, 0x7, 0x6, 0x5]}}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x0, 0x2, 0x6, 0xe, 0x1, 0x1, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0x2, 0xfff9, 0xa, 0x7c, 0x7fff, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xa47, 0xd, 0x0, 0x4, 0xfa, 0x1000, 0x970]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x60, 0x1, 0x10, 0x18, 0x48, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x4, 0x0, 0x9, 0x4, 0x4, 0x8000]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0xa}, {0x5, 0x3}, {0x4, 0x2}, {0x5, 0x4}, {0x4, 0xa}, {0x5, 0x8}, {0x5, 0x6}, {0x6, 0xa}, {0x1, 0x3}, {0x7, 0x1}, {0x5, 0x6}, {0x4, 0x7}, {0x7, 0x2}, {0x2, 0x5}, {0x0, 0x3}, {0x4, 0x8}, {0x1, 0x6}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x5, 0x2}, {0x4, 0x6}, {0x2}, {0x1, 0x5}, {0x7, 0x4}, {0x2, 0x7}, {0x4, 0x7}, {0x5, 0x7}, {0x2, 0x2}, {0x2, 0x8}, {0x1, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x0, 0x8, 0x1, 0xd4a, 0x1, 0x2, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1a1a, 0x6, 0x4, 0x8, 0x3ff, 0xfac, 0x30, 0x583]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1, 0x30, 0x48, 0x4, 0x30]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x3, 0x2}, {0x1, 0xa}, {0x5}, {0x7, 0x9}, {0x7}, {0x1, 0x6}, {0x2, 0x7}, {0x5, 0xa}, {0x4, 0x9}, {0x5, 0x4}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x2, 0x1000, 0x4, 0x1, 0x4, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0x36, 0x12, 0x5, 0x12, 0x77a2fb25639ebb20, 0x2, 0x48, 0xb, 0x5, 0x32, 0x3, 0x9, 0x3, 0xb, 0x30, 0x30, 0x2, 0x1b, 0x16, 0x36, 0x24, 0x3, 0xb, 0x9, 0x9, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x48, 0x60, 0x36, 0x12, 0x3, 0x18, 0x3, 0x1b, 0x24, 0x30, 0x1b, 0x48, 0x1b, 0x0, 0x1, 0x30, 0x6c, 0x48, 0x1b, 0x9, 0x16, 0x6c, 0x6, 0x16, 0xc, 0x5, 0x6, 0x18, 0x9, 0x24, 0x48]}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x3, 0x1}, {0x1, 0x7}, {0x3, 0x3}, {0x1}, {0x2, 0x5}, {0x1, 0x6}, {0x0, 0x4}, {0x4}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x6}, {0x1, 0x9}, {0x1, 0x1}, {0x6, 0x7}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x2}, {0x3, 0x7}, {0x6, 0x5}, {0x0, 0x5}, {0x7, 0x9}, {0x1, 0x7}, {0x5, 0x4}, {0x3, 0x3}, {0x2, 0xa}, {0x7, 0x6}, {0x7, 0x9}, {0x6, 0x1}, {0x6, 0x5}, {0x5, 0x8}, {0x1}, {0x6, 0x9}, {0x7, 0x8}, {0x1, 0x8}, {0x5, 0x9}, {0x0, 0x9}, {0x6, 0x7}, {0x1, 0x4}, {0x7, 0x5}, {0x4, 0x4}, {0x4, 0xa}, {0x7, 0x4}, {0x1, 0x5}, {0x0, 0x5}, {0x1, 0xa}, {0x0, 0x5}, {0x5, 0x1}, {0x1, 0x9}, {0x4, 0x2}, {0x6, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xdd57, 0x8, 0x96a6, 0x4, 0x5, 0x4, 0xbae2]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb9}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1147}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd1}]}]}, @NL80211_ATTR_TID_CONFIG={0xac, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xea}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4d}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa6}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x9e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x50, 0x11d, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x28}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3ff}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x5c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbf}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x16c, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xb3e}]}, {0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6e}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x110, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xdc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x48, 0x1b, 0x48, 0x6, 0x36, 0xf5703c0e5196dbf2, 0x3, 0x60, 0x18, 0x18, 0xb, 0x3, 0x3, 0xb, 0x24, 0x16, 0x2, 0x12, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9977, 0x7, 0x4, 0x9, 0x1, 0x4, 0x9, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x6, 0xd971, 0x8, 0x6, 0x7, 0x9, 0x7]}}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x5, 0x6}, {0x2, 0x5}, {0x0, 0x6}, {0x0, 0x2}, {0x2, 0x2}, {0x2, 0x8}, {0x2, 0x1}, {0x4}, {0x5, 0x8}, {0x2, 0x6}, {0x2}, {0x0, 0x9}, {0x4, 0x7}, {0x6, 0x6}, {0x2, 0x6}, {0x1, 0x1}, {0x7, 0x6}, {0x3, 0x5}, {0x5, 0x2}, {0x5, 0xa}, {0x6, 0x6}, {0x4, 0x3}, {0x5, 0xa}, {0x0, 0x4}, {0x6, 0x8}, {0x6, 0x4}, {0x2, 0x3}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x6}, {0x0, 0x1}, {0x2, 0x1}, {0x6, 0x6}, {0x1, 0x5}, {0x7, 0x8}, {0x5, 0x7}, {0x0, 0x4}, {0x2, 0x1}, {0x0, 0x6}, {0x0, 0x1}, {0x5, 0xa}, {0x4, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xfff, 0x7, 0xe, 0x81, 0x5, 0x8, 0xfe14]}}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x1, 0x9}, {0x4, 0x9}, {0x1, 0x4}, {0x6}, {0x7, 0x4}, {0x7, 0x8}, {0x0, 0x5}, {0x3, 0x1}, {0x4, 0x6}, {0x7, 0x7}, {0x4, 0xa}, {0x1, 0x5}, {0x6, 0x8}, {0x5}, {0x7, 0x6}, {0x0, 0x2}, {0x0, 0x2}, {0x5, 0x7}, {0x4, 0x1}, {0x5, 0xa}, {0x4, 0x3}, {0x1, 0x2}, {0x3, 0x9}, {0x6, 0x7}, {0x4, 0x4}, {0x3, 0x5}, {0x1, 0x9}, {0x1, 0x3}, {0x0, 0x8}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x58, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}]}]}, 0x604}, 0x1, 0x0, 0x0, 0x800}, 0x40400c4) 2.08583314s ago: executing program 33 (id=3016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r1) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x882}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xfffffffffffffea5, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x0) clock_gettime(0xfffffffffffffffd, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f00000f0012800b00010067726574617000001c07028006000e00010000000800070064010101060010004e221e0008000a40", @ANYRES32=r7, @ANYBLOB], 0x54}}, 0x24000000) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000010900020073797a3100000000014a010380100000800c0001800600"/64], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 72.140481ms ago: executing program 34 (id=3036): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003900000095"], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f00000001c0)) bind$bt_hci(r0, &(0x7f0000000180)={0x27}, 0x6) r3 = socket$inet6(0x10, 0x2, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000007140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000007280)={0x0, 0x0, &(0x7f0000007240)={&(0x7f00000071c0)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendto$inet6(r3, &(0x7f0000000100)="4c000000123161b4ff5a01d7a600dd15b9409b8402af378627aa5095eb52c8a1487904a5780900000008000000030038c88cc055c5ac32a6bfb068daa9947b14be22d0bf46d323452536005ad94a461cdbfee9bd", 0x54, 0x44040054, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYRES8=r3], &(0x7f0000000480)='GPL\x00'}, 0x94) 0s ago: executing program 35 (id=3033): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r1, 0x110, 0x6, 0x0, &(0x7f0000000280)) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x44, r6, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x2}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0xbe66}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xf4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000) (async) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x10, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@local}]}]}, 0x2c}}, 0x0) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000400", @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000"], 0x14}, 0x1, 0x0, 0x0, 0x60}, 0x0) (async) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x9c, 0x1, 0xa, 0x905, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x58, 0x6, "4f0c2ed87c7de6834d8ce479cb4db07252730b6e95f4d7fc0232078975ddf890fca62f589d4908aefa3702f5e37c3cab1f878b5fb058d75051c45521c739d8a7b0b325bbede275c8d835cb4043c1554992d49c2f"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) kernel console output (not intermixed with test programs): 13625] netlink: 'syz.0.2027': attribute type 6 has an invalid length. [ 278.714084][T13626] netlink: 'syz.4.2026': attribute type 1 has an invalid length. [ 278.716977][T13625] netlink: 'syz.0.2027': attribute type 5 has an invalid length. [ 278.801035][T13626] bond5: entered promiscuous mode [ 278.808470][T13626] 8021q: adding VLAN 0 to HW filter on device bond5 [ 278.965463][T13612] vxcan1 speed is unknown, defaulting to 1000 [ 279.196861][T13452] vxcan1 speed is unknown, defaulting to 1000 [ 279.478215][T13649] __nla_validate_parse: 13 callbacks suppressed [ 279.478237][T13649] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2033'. [ 279.625743][T13653] block nbd3: not configured, cannot reconfigure [ 280.076073][T13674] IPv6: NLM_F_CREATE should be specified when creating new route [ 280.198213][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2044'. [ 280.319247][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2046'. [ 280.341216][T13690] vlan1: entered allmulticast mode [ 280.346491][T13690] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 280.388184][T13695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2047'. [ 280.618874][T13726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2053'. [ 280.638616][T13726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2053'. [ 280.822621][T13736] netlink: 1044 bytes leftover after parsing attributes in process `syz.2.2056'. [ 280.839247][T13735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2055'. [ 280.851182][T13736] netlink: 212304 bytes leftover after parsing attributes in process `syz.2.2056'. [ 281.183444][T13752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2061'. [ 281.501577][T13774] Cannot find set identified by id 65534 to match [ 281.537594][T13774] Cannot find set identified by id 65534 to match [ 281.942039][T13816] validate_nla: 3 callbacks suppressed [ 281.942058][T13816] netlink: 'syz.4.2080': attribute type 33 has an invalid length. [ 281.946311][T13814] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 281.966105][T13814] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 281.975934][T13818] tunl0: entered promiscuous mode [ 281.989064][T13818] netlink: 'syz.2.2078': attribute type 3 has an invalid length. [ 282.008462][T13818] netlink: 'syz.2.2078': attribute type 3 has an invalid length. [ 282.154074][T13824] syzkaller0: entered promiscuous mode [ 282.164403][T13824] syzkaller0: entered allmulticast mode [ 282.190559][T13824] tipc: Enabling of bearer rejected, already enabled [ 282.202940][T13827] syzkaller0: entered promiscuous mode [ 282.208716][T13827] syzkaller0: entered allmulticast mode [ 282.249620][T13824] tipc: Resetting bearer [ 282.603720][T13852] syz.4.2091 (13852) used obsolete PPPIOCDETACH ioctl [ 282.952595][T13869] netlink: 'syz.0.2096': attribute type 1 has an invalid length. [ 283.020723][T13869] openvswitch: netlink: Flow key attr not present in new flow. [ 283.036604][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 283.044661][ C1] lec:lec_tx_timeout: lec0 [ 283.049321][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 283.059955][T13880] netlink: 'syz.2.2098': attribute type 10 has an invalid length. [ 283.164368][ T5828] udevd[5828]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 283.179347][T13880] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 283.196096][ T6277] udevd[6277]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 283.800342][T13930] syzkaller0: entered promiscuous mode [ 283.805881][T13930] syzkaller0: entered allmulticast mode [ 283.873862][T13944] openvswitch: netlink: Tunnel attr 9 has unexpected len 4 expected 2 [ 283.933234][T13946] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 284.091930][T13949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.370313][T13974] tipc: Enabling of bearer rejected, already enabled [ 284.449875][T13972] netlink: 'syz.0.2124': attribute type 13 has an invalid length. [ 284.472087][T13982] tipc: Enabling of bearer rejected, failed to enable media [ 284.594488][T13990] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20004 [ 285.178808][T14022] __nla_validate_parse: 22 callbacks suppressed [ 285.178835][T14022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2135'. [ 285.219368][T14029] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2138'. [ 285.250540][T14022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2135'. [ 285.326661][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.336807][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.806532][T14053] syzkaller0: entered promiscuous mode [ 285.812358][T14053] syzkaller0: entered allmulticast mode [ 285.888740][T14060] IPVS: Unknown mcast interface: vcan0 [ 285.932367][T14060] 8021q: adding VLAN 0 to HW filter on device bond8 [ 286.092746][T14069] netlink: 'syz.1.2151': attribute type 2 has an invalid length. [ 286.135735][T14069] only policy match revision 0 supported [ 286.135756][T14069] unable to load match [ 286.268118][T14074] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.2154'. [ 286.366684][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.375020][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.416849][T14086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2157'. [ 286.607353][T14093] netem: change failed [ 286.675225][T14093] netlink: 'syz.3.2160': attribute type 1 has an invalid length. [ 286.769186][T14107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2165'. [ 286.813207][T14093] bond5: entered promiscuous mode [ 286.827362][T14093] 8021q: adding VLAN 0 to HW filter on device bond5 [ 287.106818][T14112] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2164'. [ 287.158097][T14104] bond5: (slave bridge9): making interface the new active one [ 287.176351][T14104] bridge9: entered promiscuous mode [ 287.186338][T14104] bridge9: left promiscuous mode [ 287.263875][T14118] syzkaller0: entered promiscuous mode [ 287.276825][T14118] syzkaller0: entered allmulticast mode [ 287.342079][T14136] netlink: 'syz.1.2170': attribute type 9 has an invalid length. [ 287.350047][T14136] netlink: 'syz.1.2170': attribute type 11 has an invalid length. [ 287.357986][T14136] netlink: 'syz.1.2170': attribute type 12 has an invalid length. [ 287.365994][T14136] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.2170'. [ 287.386770][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2170'. [ 287.417461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.425717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.642460][T14152] netlink: 'syz.3.2174': attribute type 4 has an invalid length. [ 287.878620][T14168] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2178'. [ 287.918098][T14166] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.947063][T14166] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.033630][T14166] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.045917][T14166] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.056638][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 288.064725][ C1] lec:lec_tx_timeout: lec0 [ 288.069338][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 288.148891][T14166] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.162865][T14166] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.273963][T14166] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.306838][T14166] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.446770][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.465324][T11622] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.475564][T11622] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.523305][T11622] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.537317][T11622] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.616147][ T6906] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.631466][ T6906] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.653099][ T6906] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.661828][ T6906] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.709661][T14211] Cannot find add_set index 2 as target [ 288.723343][T14207] virt_wifi0 speed is unknown, defaulting to 1000 [ 288.732582][T14211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.751564][T14207] vxcan1 speed is unknown, defaulting to 1000 [ 289.180392][T14232] netlink: 'syz.2.2201': attribute type 32 has an invalid length. [ 289.485523][T14232] bond9: Setting coupled_control to off (0) [ 289.491656][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.491776][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.723542][T14247] netlink: 'syz.3.2205': attribute type 1 has an invalid length. [ 290.051429][T14273] block nbd1: Unsupported socket: should be TCP or UNIX. [ 290.174141][T14278] netlink: 'syz.3.2214': attribute type 3 has an invalid length. [ 290.200858][T14278] netlink: 'syz.3.2214': attribute type 83 has an invalid length. [ 290.276344][T14285] netlink: 'syz.2.2216': attribute type 1 has an invalid length. [ 290.303969][T14285] __nla_validate_parse: 7 callbacks suppressed [ 290.304005][T14285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2216'. [ 290.382779][ T56] block nbd0: Possible stuck request ffff888024f98000: control (read@0,1024B). Runtime 90 seconds [ 290.399053][ T56] block nbd0: Possible stuck request ffff888024f98200: control (read@1024,1024B). Runtime 90 seconds [ 290.411690][ T56] block nbd0: Possible stuck request ffff888024f98400: control (read@2048,1024B). Runtime 90 seconds [ 290.411754][T14292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2219'. [ 290.425283][ T56] block nbd0: Possible stuck request ffff888024f98600: control (read@3072,1024B). Runtime 90 seconds [ 290.526704][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.534902][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.589550][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2221'. [ 290.613371][T14298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2221'. [ 290.636382][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2222'. [ 290.636382][T14300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2222'. [ 290.689475][T14303] netlink: zone id is out of range [ 290.694657][T14303] netlink: del zone limit has 4 unknown bytes [ 290.758673][T14300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2222'. [ 290.838605][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2222'. [ 290.930222][T14320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2228'. [ 291.566792][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.869372][T14367] netlink: 'syz.3.2239': attribute type 1 has an invalid length. [ 291.962151][T14379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2240'. [ 292.023671][T14373] bond7: (slave veth5): Enslaving as an active interface with a down link [ 292.058227][T14373] 8021q: adding VLAN 0 to HW filter on device bond7 [ 292.075538][T14377] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 292.077052][T14382] veth0: entered promiscuous mode [ 292.234947][T14385] bond5: (slave vlan2): Releasing active interface [ 292.259693][T14373] bridge10: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 292.606657][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.620964][T14416] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20001 [ 292.638890][T14413] validate_nla: 1 callbacks suppressed [ 292.638913][T14413] netlink: 'syz.2.2249': attribute type 13 has an invalid length. [ 293.076605][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 293.084713][ C1] lec:lec_tx_timeout: lec0 [ 293.089972][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 293.281988][T14441] netlink: 'syz.4.2255': attribute type 1 has an invalid length. [ 293.285995][T14439] netlink: 'syz.2.2256': attribute type 1 has an invalid length. [ 293.341565][T14441] netlink: 'syz.4.2255': attribute type 1 has an invalid length. [ 293.444975][T14443] tipc: Enabled bearer , priority 0 [ 293.495096][T14442] tipc: Disabling bearer [ 293.646714][ C1] net_ratelimit: 1 callbacks suppressed [ 293.646736][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.660658][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.190112][T14486] syzkaller0: entered promiscuous mode [ 294.206146][T14486] syzkaller0: entered allmulticast mode [ 294.671574][T14505] team0: Caught tx_queue_len zero misconfig [ 294.696681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.704931][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.052783][T14534] tipc: Enabled bearer , priority 10 [ 295.163949][T14534] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 295.365241][T14560] syzkaller1: entered promiscuous mode [ 295.380326][T14560] syzkaller1: entered allmulticast mode [ 295.619241][T14578] pim6reg: entered allmulticast mode [ 295.726681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.833012][T14595] __nla_validate_parse: 9 callbacks suppressed [ 295.833033][T14595] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2301'. [ 295.881696][T14595] 0ªî{X¹¦: renamed from gretap0 [ 295.914288][T14595] 0ªî{X¹¦: entered allmulticast mode [ 295.943652][T14595] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 295.975800][T14600] netlink: 'syz.2.2304': attribute type 3 has an invalid length. [ 296.135362][T14608] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2307'. [ 296.241282][T14615] netlink: 'syz.3.2309': attribute type 3 has an invalid length. [ 296.275332][T14615] netlink: 'syz.3.2309': attribute type 3 has an invalid length. [ 296.401289][T14633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2314'. [ 296.444627][T14621] openvswitch: netlink: Missing valid actions attribute. [ 296.454043][T14621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.464078][T14633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2314'. [ 296.475469][T14636] xt_hashlimit: size too large, truncated to 1048576 [ 296.588365][T14642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2316'. [ 296.605691][T14644] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2317'. [ 296.622182][T14644] vlan2: entered allmulticast mode [ 296.628574][T14644] gretap0: entered allmulticast mode [ 296.775092][T14655] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2320'. [ 296.777002][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.786047][T14655] xt_policy: neither incoming nor outgoing policy selected [ 296.792263][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.870859][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2321'. [ 296.903669][T14659] 8021q: adding VLAN 0 to HW filter on device bond6 [ 298.096777][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 298.104906][ C1] lec:lec_tx_timeout: lec0 [ 298.109504][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 298.846725][ C1] net_ratelimit: 2 callbacks suppressed [ 298.846748][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.238877][T14617] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.410878][T14672] netlink: 'syz.0.2326': attribute type 13 has an invalid length. [ 299.423235][T14672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2326'. [ 299.432510][T14672] netlink: 'syz.0.2326': attribute type 13 has an invalid length. [ 299.440534][T14672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2326'. [ 299.446202][T14667] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 299.472060][T14664] sit0: entered promiscuous mode [ 299.508078][T14667] netlink: 'syz.4.2322': attribute type 13 has an invalid length. [ 299.510764][T14664] netlink: 'syz.2.2323': attribute type 1 has an invalid length. [ 299.527001][T14674] netlink: 'syz.4.2322': attribute type 13 has an invalid length. [ 299.677895][T14686] netlink: 'syz.0.2328': attribute type 3 has an invalid length. [ 299.697663][ T9732] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 299.708395][T14686] netlink: 'syz.0.2328': attribute type 3 has an invalid length. [ 299.762386][T14689] xt_CT: You must specify a L4 protocol and not use inversions on it [ 299.868155][ T9733] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 299.886630][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.894837][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.041566][T14710] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 300.128602][T14715] syzkaller0: Caught tx_queue_len zero misconfig [ 300.477186][T14727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.489216][T14727] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 300.516755][T14729] netlink: 'syz.3.2341': attribute type 2 has an invalid length. [ 300.869892][T14757] __nla_validate_parse: 5 callbacks suppressed [ 300.869912][T14757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2348'. [ 300.885443][T14757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2348'. [ 300.902826][T14757] vlan2: entered allmulticast mode [ 300.908183][T14757] geneve1: entered allmulticast mode [ 300.926898][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.935076][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.963402][T14759] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2349'. [ 301.014640][T14763] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.065508][T14765] netlink: 'syz.4.2351': attribute type 12 has an invalid length. [ 301.080703][ T30] audit: type=1800 audit(1770415021.141:3): pid=14765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2351" name="memory.events" dev="tmpfs" ino=2467 res=0 errno=0 [ 301.136792][ T30] audit: type=1804 audit(1770415021.171:4): pid=14765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2351" name="/newroot/479/memory.events" dev="tmpfs" ino=2467 res=1 errno=0 [ 301.248431][T14772] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 301.334336][T14783] netlink: 'syz.2.2355': attribute type 15 has an invalid length. [ 301.342608][T14783] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2355'. [ 301.361075][T14772] bond7 (unregistering): Released all slaves [ 301.771136][T14801] syzkaller0: entered allmulticast mode [ 301.806066][T14798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2358'. [ 301.929079][T14798] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 301.939242][T14801] netlink: 516 bytes leftover after parsing attributes in process `syz.1.2359'. [ 301.962806][T14798] team1: entered promiscuous mode [ 301.968105][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.986625][T14798] team1: entered allmulticast mode [ 302.007265][T14800] syzkaller0: left allmulticast mode [ 302.270539][T14821] sctp: [Deprecated]: syz.4.2366 (pid 14821) Use of int in maxseg socket option. [ 302.270539][T14821] Use struct sctp_assoc_value instead [ 302.341876][T14823] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.359815][T14823] bridge_slave_1: left allmulticast mode [ 302.365489][T14823] bridge_slave_1: left promiscuous mode [ 302.373137][T14823] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.382442][T14827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2368'. [ 302.398202][T14823] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 302.440806][T14827] lo: entered promiscuous mode [ 302.825565][T14858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2376'. [ 302.958393][T14869] veth0_to_team: Caught tx_queue_len zero misconfig [ 302.978919][T14869] xt_ipcomp: unknown flags 1D [ 303.064465][T14875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2384'. [ 303.112874][T14880] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2386'. [ 303.126623][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 303.134722][ C1] lec:lec_tx_timeout: lec0 [ 303.140191][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 303.234864][T14885] `: renamed from bond0 (while UP) [ 303.596283][T14896] ip6tnl0: Caught tx_queue_len zero misconfig [ 303.919054][T14911] IPVS: Unknown mcast interface: vcan0 [ 304.244203][T14927] bond0: Device is already in use. [ 304.268939][T14928] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20004 [ 304.302383][T14928] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 304.309659][T14928] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 304.660237][T14943] net_ratelimit: 2 callbacks suppressed [ 304.660260][T14943] openvswitch: netlink: IPv6 tunnel dst address is zero [ 304.777114][T14947] validate_nla: 8 callbacks suppressed [ 304.777134][T14947] netlink: 'syz.3.2412': attribute type 1 has an invalid length. [ 305.573660][T15009] netlink: 'syz.0.2418': attribute type 21 has an invalid length. [ 305.905162][T15025] __nla_validate_parse: 12 callbacks suppressed [ 305.905186][T15025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2435'. [ 305.953783][T15031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2434'. [ 306.011815][T15031] geneve3: entered promiscuous mode [ 306.088955][T15039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2439'. [ 306.118036][T15035] syzkaller0: entered promiscuous mode [ 306.135265][T15035] syzkaller0: entered allmulticast mode [ 306.220052][T15044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2441'. [ 306.356764][T15054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2443'. [ 306.622465][T15071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2448'. [ 306.827892][T15086] lo: Caught tx_queue_len zero misconfig [ 307.025598][T15092] xt_hashlimit: size too large, truncated to 1048576 [ 307.044658][T15098] tipc: Enabling of bearer rejected, failed to enable media [ 307.119869][T15093] vxlan1: entered promiscuous mode [ 307.125215][T15093] vxlan1: entered allmulticast mode [ 307.185935][T15102] vxlan1: entered promiscuous mode [ 307.191471][T15102] vxlan1: entered allmulticast mode [ 307.213764][T15109] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:18979 [ 307.633079][T15128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2469'. [ 307.663411][T15128] netlink: 'syz.1.2469': attribute type 1 has an invalid length. [ 307.693561][T15128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2469'. [ 307.908839][T15128] veth1_macvtap: renamed from veth0_macvtap [ 308.146575][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 308.154687][ C1] lec:lec_tx_timeout: lec0 [ 308.159313][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 308.166145][T15154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2477'. [ 308.389685][T15173] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2481'. [ 308.428230][T15178] syzkaller0: entered promiscuous mode [ 308.433927][T15178] syzkaller0: entered allmulticast mode [ 308.664788][T15180] IPVS: length: 24 != 16106128056 [ 308.944370][T15210] netlink: 'syz.4.2489': attribute type 1 has an invalid length. [ 309.145237][T15223] netlink: 'syz.0.2494': attribute type 10 has an invalid length. [ 309.242270][T15223] veth0_vlan: left promiscuous mode [ 309.255426][T15223] veth0_vlan: entered promiscuous mode [ 309.276388][T15223] team0: Device veth0_vlan failed to register rx_handler [ 309.514982][ T5490] veth1_macvtap: left promiscuous mode [ 309.968721][T15264] bond7: entered promiscuous mode [ 309.975431][T15264] bond7: entered allmulticast mode [ 310.000164][T15264] 8021q: adding VLAN 0 to HW filter on device bond7 [ 310.008566][T15268] ip6tnl0: Caught tx_queue_len zero misconfig [ 310.228161][T15285] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 310.250143][T15285] 0ªî{X¹¦: entered allmulticast mode [ 310.271894][T15285] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 310.510189][T15300] lo: Caught tx_queue_len zero misconfig [ 310.595190][T15307] netlink: 'syz.0.2513': attribute type 28 has an invalid length. [ 310.613195][T15308] netlink: 'syz.1.2512': attribute type 3 has an invalid length. [ 310.615455][T15307] netlink: 'syz.0.2513': attribute type 3 has an invalid length. [ 310.652371][T15311] openvswitch: netlink: IP tunnel dst address not specified [ 310.674904][T15308] netlink: 'syz.1.2512': attribute type 1 has an invalid length. [ 311.141700][T15333] veth0_to_hsr: entered promiscuous mode [ 311.158101][T15333] veth0_to_hsr: entered allmulticast mode [ 311.333428][T15344] __nla_validate_parse: 13 callbacks suppressed [ 311.333449][T15344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2522'. [ 311.354652][T15345] virt_wifi0 speed is unknown, defaulting to 1000 [ 311.463708][T15344] syzkaller0: entered promiscuous mode [ 311.478306][T15344] syzkaller0: entered allmulticast mode [ 311.598741][T15359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2526'. [ 311.615282][T15359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2526'. [ 311.667055][T15359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2526'. [ 311.736811][T15362] netlink: 'syz.4.2527': attribute type 18 has an invalid length. [ 311.754598][T15359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2526'. [ 311.774061][T15359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2526'. [ 311.795325][T15359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2526'. [ 311.906607][T15373] netlink: 'syz.1.2531': attribute type 33 has an invalid length. [ 312.003214][ T30] audit: type=1800 audit(1770415032.051:5): pid=15379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2530" name="memory.events" dev="tmpfs" ino=2532 res=0 errno=0 [ 312.048566][T15382] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.2534'. [ 312.180774][T15390] veth0: entered promiscuous mode [ 312.188099][T15390] bridge0: entered promiscuous mode [ 312.193613][T15390] bridge0: left promiscuous mode [ 312.201820][T15390] veth0: left promiscuous mode [ 312.349383][T15410] sctp: [Deprecated]: syz.0.2542 (pid 15410) Use of int in maxseg socket option. [ 312.349383][T15410] Use struct sctp_assoc_value instead [ 312.477757][T15414] syzkaller0: left promiscuous mode [ 312.483052][T15414] syzkaller0: left allmulticast mode [ 312.552273][T15423] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.563034][T15423] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.614440][T15431] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2546'. [ 312.624478][T15429] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 312.694708][T15423] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.733383][T15423] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.861502][T15443] netlink: 'syz.2.2550': attribute type 1 has an invalid length. [ 312.876862][T15443] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2550'. [ 312.912230][T15423] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.941575][T15423] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.006020][T15423] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.016752][T15423] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.255201][ T6906] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.267519][ T6906] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.307674][T11625] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.317167][T11625] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.382773][ T79] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.424421][ T79] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.466676][ T6899] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.487530][ T6899] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.555221][T15476] sctp: [Deprecated]: syz.1.2561 (pid 15476) Use of struct sctp_assoc_value in delayed_ack socket option. [ 313.555221][T15476] Use struct sctp_sack_info instead [ 313.577604][T15478] openvswitch: netlink: IP tunnel dst address not specified [ 313.931213][T15496] bond6: entered promiscuous mode [ 314.046568][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5890 ms [ 314.054680][ C1] lec:lec_tx_timeout: lec0 [ 314.060432][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 314.071310][T15510] rdma_rxe: rxe_newlink: failed to add lo [ 314.130212][T15515] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 314.164164][T15515] bond0: (slave gre0): Error -95 calling set_mac_address [ 314.320607][T15523] syzkaller0: entered promiscuous mode [ 314.326168][T15523] syzkaller0: entered allmulticast mode [ 314.548645][T15537] pim6reg: entered allmulticast mode [ 314.563047][T15537] pim6reg: left allmulticast mode [ 314.872285][T15559] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 314.887429][T15566] x_tables: duplicate underflow at hook 3 [ 315.069948][T15572] block nbd1: Unsupported socket: should be TCP or UNIX. [ 315.095880][T15577] netlink: 'syz.1.2586': attribute type 1 has an invalid length. [ 315.190693][T15581] bond8: (slave gretap0): making interface the new active one [ 315.218209][T15581] bond8: (slave gretap0): Enslaving as an active interface with an up link [ 315.319998][T15576] virt_wifi0 speed is unknown, defaulting to 1000 [ 315.340298][T15576] vxcan1 speed is unknown, defaulting to 1000 [ 315.681745][T15605] syzkaller0: entered promiscuous mode [ 315.687460][T15605] syzkaller0: entered allmulticast mode [ 317.045230][T15620] syzkaller0: entered promiscuous mode [ 317.051359][T15620] syzkaller0: entered allmulticast mode [ 317.165440][T15630] netlink: 'syz.4.2602': attribute type 2 has an invalid length. [ 317.182001][T15630] __nla_validate_parse: 15 callbacks suppressed [ 317.182020][T15630] netlink: 119 bytes leftover after parsing attributes in process `syz.4.2602'. [ 317.202957][T15628] netlink: 'syz.0.2601': attribute type 15 has an invalid length. [ 317.219103][T15628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2601'. [ 317.360214][T15638] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2605'. [ 317.431387][T15639] netlink: 'syz.0.2605': attribute type 4 has an invalid length. [ 317.455686][T15638] netlink: 'syz.0.2605': attribute type 4 has an invalid length. [ 317.475406][T15644] netlink: 'syz.1.2606': attribute type 1 has an invalid length. [ 317.492876][T15643] syzkaller0: left promiscuous mode [ 317.498348][T15645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2606'. [ 317.512866][T15643] syzkaller0: left allmulticast mode [ 317.534830][T15643] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 317.584680][T15647] netlink: 'syz.0.2608': attribute type 1 has an invalid length. [ 317.641841][T15647] bond7: entered promiscuous mode [ 317.648662][T15647] 8021q: adding VLAN 0 to HW filter on device bond7 [ 317.719433][T15647] bond7: (slave bridge9): making interface the new active one [ 317.751212][T15647] bridge9: entered promiscuous mode [ 317.758089][T15647] bond7: (slave bridge9): Enslaving as an active interface with an up link [ 317.776349][T15647] netlink: 'syz.0.2608': attribute type 1 has an invalid length. [ 317.801676][T15658] netlink: 'syz.1.2611': attribute type 29 has an invalid length. [ 317.817602][T15658] netlink: 'syz.1.2611': attribute type 29 has an invalid length. [ 317.835365][T15659] netlink: 'syz.1.2611': attribute type 29 has an invalid length. [ 317.951291][T15670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2614'. [ 317.971251][T15670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2614'. [ 318.174560][T15692] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2619'. [ 318.346504][T15704] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2624'. [ 318.355964][T15704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2624'. [ 318.369147][T15704] Bluetooth: MGMT ver 1.23 [ 318.387072][T15705] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2623'. [ 319.066605][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 319.074694][ C1] lec:lec_tx_timeout: lec0 [ 319.079712][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 319.221662][T15760] bond9: entered promiscuous mode [ 319.227596][T15760] 8021q: adding VLAN 0 to HW filter on device bond9 [ 319.396470][T15777] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 319.559505][T15771] bond9: (slave bridge4): making interface the new active one [ 319.579553][T15771] bridge4: entered promiscuous mode [ 319.597095][T15771] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 320.449722][ T56] block nbd0: Possible stuck request ffff888024f98000: control (read@0,1024B). Runtime 120 seconds [ 320.460895][ T56] block nbd0: Possible stuck request ffff888024f98200: control (read@1024,1024B). Runtime 120 seconds [ 320.472767][ T56] block nbd0: Possible stuck request ffff888024f98400: control (read@2048,1024B). Runtime 120 seconds [ 320.484360][ T56] block nbd0: Possible stuck request ffff888024f98600: control (read@3072,1024B). Runtime 120 seconds [ 320.496496][T15841] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 321.003816][T15874] syzkaller1: entered promiscuous mode [ 321.015175][T15874] syzkaller1: entered allmulticast mode [ 321.390823][T15893] pim6reg: left allmulticast mode [ 321.922572][T15924] openvswitch: netlink: IP tunnel dst address not specified [ 322.320135][T15955] __nla_validate_parse: 22 callbacks suppressed [ 322.320156][T15955] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2692'. [ 322.321356][T15958] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.341724][T15960] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2691'. [ 322.509666][T15971] validate_nla: 9 callbacks suppressed [ 322.509686][T15971] netlink: 'syz.1.2694': attribute type 13 has an invalid length. [ 322.571275][T15971] netlink: 'syz.1.2694': attribute type 58 has an invalid length. [ 322.608590][T15971] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2694'. [ 322.680901][T15983] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2697'. [ 322.768039][T15986] netlink: 'syz.2.2698': attribute type 1 has an invalid length. [ 322.843319][T15986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.843723][T15994] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2698'. [ 322.897544][T15985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2697'. [ 322.915411][T15986] bond0: (slave veth0_to_bond): making interface the new active one [ 322.931192][T15986] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 322.946402][T15986] netlink: 'syz.2.2698': attribute type 1 has an invalid length. [ 322.957724][T15986] netlink: 'syz.2.2698': attribute type 2 has an invalid length. [ 322.982337][T15996] netlink: 'syz.3.2697': attribute type 17 has an invalid length. [ 322.990372][T15996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2697'. [ 322.999830][T15996] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2697'. [ 323.419776][T16028] syzkaller0: entered promiscuous mode [ 323.425758][T16028] syzkaller0: entered allmulticast mode [ 323.435856][T16028] netlink: 'syz.0.2707': attribute type 1 has an invalid length. [ 323.683653][T16036] netlink: 'syz.3.2709': attribute type 9 has an invalid length. [ 323.964934][T16042] 8021q: adding VLAN 0 to HW filter on device ` [ 324.019843][T16042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 324.086702][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 324.094805][ C1] lec:lec_tx_timeout: lec0 [ 324.100521][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 324.472921][T16084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.529648][T16091] lo: Caught tx_queue_len zero misconfig [ 324.630254][T16088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2718'. [ 324.639589][T16088] ksmbd: Unknown IPC event: 3, ignore. [ 324.647653][T16088] openvswitch: netlink: Flow actions attr not present in new flow. [ 324.813733][T16113] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2727'. [ 324.905078][T16119] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 324.911597][T16119] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 325.119482][T16136] netlink: 'syz.2.2735': attribute type 2 has an invalid length. [ 325.140810][T16136] : entered promiscuous mode [ 325.321321][T16146] openvswitch: netlink: IP tunnel dst address not specified [ 325.349079][T16145] 8021q: adding VLAN 0 to HW filter on device bond10 [ 325.402442][T16149] macvlan2: entered promiscuous mode [ 325.418181][T16149] macvlan2: entered allmulticast mode [ 325.425122][T16160] netlink: 'syz.4.2739': attribute type 1 has an invalid length. [ 325.447812][T16149] bond10: entered allmulticast mode [ 325.453175][T16149] bond10: entered promiscuous mode [ 325.470715][T16149] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 325.482787][T16149] team0: Port device macvlan2 added [ 325.876508][T16189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.949723][T16186] bond11 (unregistering): Released all slaves [ 326.934214][T16242] netlink: 'syz.3.2767': attribute type 11 has an invalid length. [ 327.095215][T16249] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 327.299835][T16260] syz_tun: refused to change device tx_queue_len [ 327.347192][T16264] syzkaller0: left promiscuous mode [ 327.358938][T16264] syzkaller0: left allmulticast mode [ 327.378238][T16264] __nla_validate_parse: 16 callbacks suppressed [ 327.378258][T16264] netlink: 294 bytes leftover after parsing attributes in process `syz.1.2775'. [ 327.466677][T16264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.523543][T16270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2778'. [ 327.550405][T16270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2778'. [ 327.577732][T16270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2778'. [ 327.596715][T16270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2778'. [ 327.819339][T16290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2783'. [ 327.846624][T16290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2783'. [ 327.868678][T16296] sock: sock_set_timeout: `syz.4.2781' (pid 16296) tries to set negative timeout [ 327.920081][T16300] vlan0: entered allmulticast mode [ 327.925427][T16300] geneve1: entered allmulticast mode [ 327.959235][T16290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2783'. [ 327.969802][T16290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2783'. [ 328.084605][T16304] netlink: set zone limit has 4 unknown bytes [ 328.163321][T16311] x_tables: duplicate underflow at hook 1 [ 328.176154][T16311] validate_nla: 69 callbacks suppressed [ 328.176172][T16311] netlink: 'syz.3.2789': attribute type 2 has an invalid length. [ 328.200418][T16311] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2789'. [ 329.011897][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.106595][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 329.114688][ C1] lec:lec_tx_timeout: lec0 [ 329.119315][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 329.276848][T16381] syz_tun: entered allmulticast mode [ 329.459296][T16397] netlink: 'syz.0.2817': attribute type 21 has an invalid length. [ 329.535044][T16402] netlink: 'syz.3.2815': attribute type 4 has an invalid length. [ 329.549791][T16403] netlink: 'syz.2.2819': attribute type 7 has an invalid length. [ 329.578480][T16403] netlink: 'syz.2.2819': attribute type 8 has an invalid length. [ 329.607497][T16391] netlink: 'syz.3.2815': attribute type 10 has an invalid length. [ 329.617032][T16403] netlink: 'syz.2.2819': attribute type 3 has an invalid length. [ 330.047032][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.155978][T16432] bond11 (unregistering): Released all slaves [ 330.531610][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.088304][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.328730][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.739475][T16517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.769177][T16520] netlink: 'syz.1.2848': attribute type 21 has an invalid length. [ 331.792359][T16520] netlink: 'syz.1.2848': attribute type 22 has an invalid length. [ 331.812386][T16520] netlink: 'syz.1.2848': attribute type 23 has an invalid length. [ 332.267474][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.332322][T16541] sctp: [Deprecated]: syz.3.2853 (pid 16541) Use of struct sctp_assoc_value in delayed_ack socket option. [ 332.332322][T16541] Use struct sctp_sack_info instead [ 332.594803][T16553] __nla_validate_parse: 17 callbacks suppressed [ 332.594823][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2857'. [ 332.752192][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 332.762477][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 332.771471][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 332.779640][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 332.788290][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 332.851439][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 332.858960][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 332.866392][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 332.874615][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 332.883318][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 332.970711][T16560] virt_wifi0 speed is unknown, defaulting to 1000 [ 333.185007][T16560] vxcan1 speed is unknown, defaulting to 1000 [ 333.198967][T16574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.247754][T11624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.336761][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.507008][T16588] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 333.547107][T16587] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 333.657091][T16588] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2867'. [ 333.748913][T16580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.126714][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 334.134934][ C1] lec:lec_tx_timeout: lec0 [ 334.139555][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 334.195293][T16560] chnl_net:caif_netlink_parms(): no params data found [ 334.306222][T16631] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2879'. [ 334.321777][T16635] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2879'. [ 334.376843][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.408729][T16560] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.417942][T16560] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.425256][T16560] bridge_slave_0: entered allmulticast mode [ 334.449066][T16560] bridge_slave_0: entered promiscuous mode [ 334.478746][T16560] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.493852][T16560] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.507143][T16650] validate_nla: 1 callbacks suppressed [ 334.507161][T16650] netlink: 'syz.1.2883': attribute type 58 has an invalid length. [ 334.512143][T16560] bridge_slave_1: entered allmulticast mode [ 334.513175][T16650] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2883'. [ 334.536971][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.548094][T16560] bridge_slave_1: entered promiscuous mode [ 334.649708][T16560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.661555][T16643] virt_wifi0 speed is unknown, defaulting to 1000 [ 334.669510][T16560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.725651][T16643] vxcan1 speed is unknown, defaulting to 1000 [ 334.768302][T16560] team0: Port device team_slave_0 added [ 334.789796][T16560] team0: Port device team_slave_1 added [ 334.817616][T16660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2886'. [ 334.843543][T16662] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20004 [ 334.888871][T16662] x_tables: duplicate underflow at hook 2 [ 334.926972][ T5839] Bluetooth: hci5: command tx timeout [ 334.956171][T16560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.983264][T16560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.063627][T16560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.085941][T16667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2887'. [ 335.108545][T16560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.115555][T16560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.179086][T16560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.293004][T16678] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 335.313489][T16680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2892'. [ 335.372164][T16560] hsr_slave_0: entered promiscuous mode [ 335.381321][T16560] hsr_slave_1: entered promiscuous mode [ 335.406795][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.456997][T16686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2895'. [ 335.491553][T16686] IPVS: Unknown mcast interface: vcan0 [ 335.508064][T16691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2896'. [ 335.584398][T16692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.609092][T16686] syzkaller0: entered promiscuous mode [ 335.615390][T16686] syzkaller0: entered allmulticast mode [ 335.678906][T16686] tipc: Enabled bearer , priority 0 [ 335.845127][T16560] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.855671][T16560] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.961138][T16560] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.976010][T16560] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.055980][T16560] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.067954][T16560] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.112206][T16705] netlink: 'syz.4.2901': attribute type 1 has an invalid length. [ 336.154391][T16560] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.168513][T16560] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.268665][T16685] tipc: Resetting bearer [ 336.287243][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.323040][T16685] tipc: Disabling bearer [ 336.339694][T16712] dummy0: left allmulticast mode [ 336.345106][T16712] bridge0: port 4(dummy0) entered disabled state [ 336.362607][T16712] batadv1: left allmulticast mode [ 336.369486][T16712] batadv1: left promiscuous mode [ 336.374693][T16712] bridge0: port 3(batadv1) entered disabled state [ 336.408970][T16712] bridge_slave_0: left allmulticast mode [ 336.435009][T16712] bridge_slave_0: left promiscuous mode [ 336.447523][T16712] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.632935][T16726] syzkaller0: entered promiscuous mode [ 336.638566][T16726] syzkaller0: entered allmulticast mode [ 336.752772][T16560] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 336.815419][T16560] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 336.828321][T16560] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 336.889253][T16733] netlink: 'syz.3.2911': attribute type 29 has an invalid length. [ 336.916206][T16560] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 336.982189][T16750] dvmrp8: entered allmulticast mode [ 336.990167][T16750] dvmrp8: left allmulticast mode [ 337.017230][ T5839] Bluetooth: hci5: command tx timeout [ 337.107558][T16759] syzkaller1: entered promiscuous mode [ 337.113534][T16759] syzkaller1: entered allmulticast mode [ 337.129453][T16759] syzkaller0: entered promiscuous mode [ 337.135041][T16759] syzkaller0: entered allmulticast mode [ 337.487398][ T24] net_ratelimit: 8 callbacks suppressed [ 337.487415][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.727934][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 338.367729][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.526977][T13321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.086855][ T5839] Bluetooth: hci5: command tx timeout [ 339.146906][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 339.155015][ C1] lec:lec_tx_timeout: lec0 [ 339.159641][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 339.567389][T13321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.780136][T16747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 339.943643][T16777] __nla_validate_parse: 5 callbacks suppressed [ 339.943666][T16777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2920'. [ 339.960735][T16777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2920'. [ 340.035122][T16777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2920'. [ 340.049073][T16560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.057071][T16777] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2920'. [ 340.099017][T16560] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.121924][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.129225][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.188265][T11624] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.195453][T11624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.294933][T16560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 340.346576][T16560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 340.405109][T16806] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 340.607878][T13321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.834478][T16835] netlink: 'syz.2.2933': attribute type 83 has an invalid length. [ 340.862922][T16560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.930775][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.013820][T16843] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2937'. [ 341.030680][T16843] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2937'. [ 341.035929][T16847] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2939'. [ 341.088250][T16560] veth0_vlan: entered promiscuous mode [ 341.119600][T16560] veth1_vlan: entered promiscuous mode [ 341.169598][ T5839] Bluetooth: hci5: command tx timeout [ 341.191281][T16560] veth0_macvtap: entered promiscuous mode [ 341.204890][T16560] veth1_macvtap: entered promiscuous mode [ 341.236851][T16560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.252691][T16560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.289025][T11624] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.315329][T11624] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.338654][T16856] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2940'. [ 341.362163][T11624] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.398364][T11624] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.421443][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.569871][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.579554][T13321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.635936][T16872] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2944'. [ 341.720526][T11624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.759458][T11624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.841316][T11624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.863908][T11624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.949802][T16890] bridge0: entered promiscuous mode [ 341.955075][T16890] bridge0: entered allmulticast mode [ 342.042843][T16897] netlink: 'syz.0.2855': attribute type 4 has an invalid length. [ 342.080190][T16897] netlink: 'syz.0.2855': attribute type 4 has an invalid length. [ 342.133484][T16900] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2952'. [ 342.687017][ T24] net_ratelimit: 8 callbacks suppressed [ 342.687037][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.060243][T16945] netlink: 'syz.2.2963': attribute type 29 has an invalid length. [ 343.077327][T16945] netlink: 'syz.2.2963': attribute type 29 has an invalid length. [ 343.115422][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 343.131886][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 343.146951][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 343.157285][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 343.165066][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 343.294619][T16950] virt_wifi0 speed is unknown, defaulting to 1000 [ 343.394358][T16950] vxcan1 speed is unknown, defaulting to 1000 [ 343.479248][T16967] netlink: 'syz.1.2968': attribute type 1 has an invalid length. [ 343.648746][ T5830] syz_tun (unregistering): left allmulticast mode [ 343.728737][T13321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.924852][T16992] netlink: 'syz.3.2976': attribute type 2 has an invalid length. [ 344.128532][ T6906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.297741][T17007] @0Ù: renamed from bond_slave_1 (while UP) [ 344.308819][T17010] virt_wifi0 speed is unknown, defaulting to 1000 [ 344.360365][T17010] vxcan1 speed is unknown, defaulting to 1000 [ 344.778444][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.990264][T16950] chnl_net:caif_netlink_parms(): no params data found [ 345.120745][T17045] bond11 (unregistering): Released all slaves [ 345.257321][ T5834] Bluetooth: hci2: command tx timeout [ 345.406565][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6250 ms [ 345.414745][ C1] lec:lec_tx_timeout: lec0 [ 345.420416][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 345.699429][T16950] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.722583][T16950] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.734803][T16950] bridge_slave_0: entered allmulticast mode [ 345.743770][T16950] bridge_slave_0: entered promiscuous mode [ 345.758220][T16950] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.765809][T16950] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.773681][T16950] bridge_slave_1: entered allmulticast mode [ 345.785135][T16950] bridge_slave_1: entered promiscuous mode [ 345.807534][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.864748][T16950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.898760][T16950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.033407][T16950] team0: Port device team_slave_0 added [ 346.040098][T17101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.049746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.063814][T17103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.076496][T16950] team0: Port device team_slave_1 added [ 346.097935][T17101] netlink: 'syz.2.3007': attribute type 10 has an invalid length. [ 346.138990][T17101] veth0_macvtap: left promiscuous mode [ 346.169232][T16950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.196699][T16950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.247003][T17112] netlink: 'syz.1.3011': attribute type 11 has an invalid length. [ 346.248993][T17111] netlink: 'syz.1.3011': attribute type 11 has an invalid length. [ 346.266973][T17109] netlink: 'syz.3.3010': attribute type 23 has an invalid length. [ 346.295179][T16950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.319680][T16950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.327480][T16950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.358260][T16950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.537463][T16950] hsr_slave_0: entered promiscuous mode [ 346.548284][T16950] hsr_slave_1: entered promiscuous mode [ 346.555392][T16950] debugfs: 'hsr0' already exists in 'hsr' [ 346.555910][T17127] netlink: 'syz.3.3017': attribute type 1 has an invalid length. [ 346.562307][T16950] Cannot create hsr debugfs directory [ 346.605601][T17131] __nla_validate_parse: 16 callbacks suppressed [ 346.605622][T17131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3016'. [ 346.630814][T17127] 8021q: adding VLAN 0 to HW filter on device bond8 [ 346.665817][T17131] netlink: 'syz.2.3016': attribute type 1 has an invalid length. [ 346.709554][T17131] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3016'. [ 346.740409][T17140] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 346.750979][T17140] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 346.762777][T17141] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3016'. [ 347.327564][ T5834] Bluetooth: hci2: command tx timeout [ 347.601975][T17144] netlink: 81 bytes leftover after parsing attributes in process `syz.1.3020'. [ 347.718130][T17149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3022'. [ 347.725706][T16950] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.827360][T16950] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.890851][ T24] net_ratelimit: 9222 callbacks suppressed [ 347.890869][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.920717][T16950] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.935806][T17155] SET target dimension over the limit! [ 347.999965][T16950] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 348.010640][T16950] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.183047][T17163] netlink: 'syz.3.3026': attribute type 1 has an invalid length. [ 348.183074][T17162] netlink: 'syz.3.3026': attribute type 1 has an invalid length. [ 348.213512][T17162] netlink: 'syz.3.3026': attribute type 1 has an invalid length. [ 348.228700][T17163] bond9: (slave gretap2): making interface the new active one [ 348.237036][T17163] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 348.246055][T17162] netlink: 'syz.3.3026': attribute type 1 has an invalid length. [ 348.329870][T17166] Bluetooth: MGMT ver 1.23 [ 348.607405][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.927367][T13321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.247228][T11624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.406726][ T5834] Bluetooth: hci2: command tx timeout [ 349.967676][T13321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.527196][ T56] block nbd0: Possible stuck request ffff888024f98000: control (read@0,1024B). Runtime 150 seconds [ 350.538508][ T56] block nbd0: Possible stuck request ffff888024f98200: control (read@1024,1024B). Runtime 150 seconds [ 350.539182][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.549660][ T56] block nbd0: Possible stuck request ffff888024f98400: control (read@2048,1024B). Runtime 150 seconds [ 350.569734][ T56] block nbd0: Possible stuck request ffff888024f98600: control (read@3072,1024B). Runtime 150 seconds [ 351.006941][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.166624][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 351.174730][ C1] lec:lec_tx_timeout: lec0 [ 351.180233][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 351.486860][ T5834] Bluetooth: hci2: command tx timeout [ 352.047602][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.287250][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.091020][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.099208][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.127047][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.008555][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.167240][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.649304][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.658532][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.217345][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.926626][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 356.934687][ C1] lec:lec_tx_timeout: lec0 [ 356.939759][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 357.247334][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.047403][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.287451][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.326889][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.367060][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.777091][ T6906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.407085][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.966718][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 361.974866][ C1] lec:lec_tx_timeout: lec0 [ 361.979575][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 362.083766][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.099454][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.107785][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.115853][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.126484][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.161745][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 362.172498][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 362.181189][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 362.192059][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 362.200600][T17204] virt_wifi0 speed is unknown, defaulting to 1000 [ 362.200613][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 362.212984][T17204] vxcan1 speed is unknown, defaulting to 1000 [ 362.258009][T17206] virt_wifi0 speed is unknown, defaulting to 1000 [ 362.378440][T17206] vxcan1 speed is unknown, defaulting to 1000 [ 362.448839][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.573140][T17204] chnl_net:caif_netlink_parms(): no params data found [ 362.686991][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.701576][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.720972][T17204] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.728268][T17204] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.735626][T17204] bridge_slave_0: entered allmulticast mode [ 362.744132][T17204] bridge_slave_0: entered promiscuous mode [ 362.752801][T17204] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.760723][T17204] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.768553][T17204] bridge_slave_1: entered allmulticast mode [ 362.776088][T17204] bridge_slave_1: entered promiscuous mode [ 362.811377][T17204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.825956][T17204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.875510][T17204] team0: Port device team_slave_0 added [ 362.889386][T17204] team0: Port device team_slave_1 added [ 362.936269][T17204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.943589][T17204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.970487][T17204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.985919][T17204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.993351][T17204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.021689][T17204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.049628][T17206] chnl_net:caif_netlink_parms(): no params data found [ 363.111621][T17204] hsr_slave_0: entered promiscuous mode [ 363.118600][T17204] hsr_slave_1: entered promiscuous mode [ 363.124809][T17204] debugfs: 'hsr0' already exists in 'hsr' [ 363.131026][T17204] Cannot create hsr debugfs directory [ 363.221274][T17206] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.228691][T17206] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.235886][T17206] bridge_slave_0: entered allmulticast mode [ 363.243659][T17206] bridge_slave_0: entered promiscuous mode [ 363.258748][T17206] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.265966][T17206] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.273637][T17206] bridge_slave_1: entered allmulticast mode [ 363.281174][T17206] bridge_slave_1: entered promiscuous mode [ 363.340037][T17206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.355224][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.355406][T17206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.421881][T17206] team0: Port device team_slave_0 added [ 363.436468][T17206] team0: Port device team_slave_1 added [ 363.478544][T17206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.485546][T17206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.488660][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.514256][T17206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.544606][T17206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.551726][T17206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.579025][T17206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.659015][T17206] hsr_slave_0: entered promiscuous mode [ 363.666001][T17206] hsr_slave_1: entered promiscuous mode [ 363.672796][T17206] debugfs: 'hsr0' already exists in 'hsr' [ 363.678642][T17206] Cannot create hsr debugfs directory [ 364.044283][ T5834] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 364.067143][ T5834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 364.075107][ T5834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 364.088929][ T5834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 364.100499][ T5834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 364.105794][ T5146] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 364.118788][ T5839] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 364.128344][ T5839] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 364.137175][ T5839] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 364.144806][ T5839] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 364.193204][T17222] virt_wifi0 speed is unknown, defaulting to 1000 [ 364.207669][ T5839] Bluetooth: hci3: command tx timeout [ 364.214334][T17222] vxcan1 speed is unknown, defaulting to 1000 [ 364.215183][T17224] virt_wifi0 speed is unknown, defaulting to 1000 [ 364.286728][ T5839] Bluetooth: hci6: command tx timeout [ 364.363452][T17224] vxcan1 speed is unknown, defaulting to 1000 [ 364.527872][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.552222][T17222] chnl_net:caif_netlink_parms(): no params data found [ 364.684548][T17222] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.692060][T17222] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.700007][T17222] bridge_slave_0: entered allmulticast mode [ 364.707429][T17222] bridge_slave_0: entered promiscuous mode [ 364.719907][T17222] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.727385][T17222] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.734646][T17222] bridge_slave_1: entered allmulticast mode [ 364.742158][T17222] bridge_slave_1: entered promiscuous mode [ 364.785296][T17222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.798309][T17222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.834972][T17222] team0: Port device team_slave_0 added [ 364.849980][T17222] team0: Port device team_slave_1 added [ 364.899266][T17222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.906248][T17222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.932948][T17222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.950945][T17222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.958283][T17222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.984456][T17222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.054747][T17222] hsr_slave_0: entered promiscuous mode [ 365.061883][T17222] hsr_slave_1: entered promiscuous mode [ 365.068548][T17222] debugfs: 'hsr0' already exists in 'hsr' [ 365.074319][T17222] Cannot create hsr debugfs directory [ 365.082470][T17224] chnl_net:caif_netlink_parms(): no params data found [ 365.221873][T17224] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.229247][T17224] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.236483][T17224] bridge_slave_0: entered allmulticast mode [ 365.244315][T17224] bridge_slave_0: entered promiscuous mode [ 365.261885][T17224] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.269251][T17224] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.276456][T17224] bridge_slave_1: entered allmulticast mode [ 365.284078][T17224] bridge_slave_1: entered promiscuous mode [ 365.341583][T17224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.361231][T17224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.414963][T17224] team0: Port device team_slave_0 added [ 365.423856][T17224] team0: Port device team_slave_1 added [ 365.472337][T17224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.479705][T17224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.506448][T17224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.519512][T17224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.526491][T17224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.552979][T17224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.568218][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.629852][T17224] hsr_slave_0: entered promiscuous mode [ 365.636320][T17224] hsr_slave_1: entered promiscuous mode [ 365.642779][T17224] debugfs: 'hsr0' already exists in 'hsr' [ 365.649091][T17224] Cannot create hsr debugfs directory [ 366.127159][ T5839] Bluetooth: hci7: command tx timeout [ 366.207234][ T5839] Bluetooth: hci8: command tx timeout [ 366.286935][ T5839] Bluetooth: hci3: command tx timeout [ 366.367017][ T5839] Bluetooth: hci6: command tx timeout [ 366.527804][T11621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.607879][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.986622][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 366.994657][ C1] lec:lec_tx_timeout: lec0 [ 366.999692][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 367.648923][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.206934][ T5839] Bluetooth: hci7: command tx timeout [ 368.287131][ T5839] Bluetooth: hci8: command tx timeout [ 368.367132][ T5839] Bluetooth: hci3: command tx timeout [ 368.447197][ T5839] Bluetooth: hci6: command tx timeout [ 368.687062][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.728254][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.736481][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.745311][T13321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.286754][ T5839] Bluetooth: hci7: command tx timeout [ 370.367675][ T5839] Bluetooth: hci8: command tx timeout [ 370.446949][ T5839] Bluetooth: hci3: command tx timeout [ 370.527000][ T5839] Bluetooth: hci6: command tx timeout [ 370.768452][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.648219][T11625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.807052][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.006938][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 372.014984][ C1] lec:lec_tx_timeout: lec0 [ 372.019576][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 372.366961][ T5839] Bluetooth: hci7: command tx timeout [ 372.446964][ T5839] Bluetooth: hci8: command tx timeout [ 372.848167][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.928311][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.887670][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.848180][T11621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.937625][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.967584][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.766847][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.007788][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.026725][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 377.034769][ C1] lec:lec_tx_timeout: lec0 [ 377.407684][T11622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.047873][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.087210][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.968234][T11624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.127159][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.617151][ T56] block nbd0: Possible stuck request ffff888024f98000: control (read@0,1024B). Runtime 180 seconds [ 380.628038][ T56] block nbd0: Possible stuck request ffff888024f98200: control (read@1024,1024B). Runtime 180 seconds [ 380.639167][ T56] block nbd0: Possible stuck request ffff888024f98400: control (read@2048,1024B). Runtime 180 seconds [ 380.650449][ T56] block nbd0: Possible stuck request ffff888024f98600: control (read@3072,1024B). Runtime 180 seconds [ 380.841208][ T5195] udevd[5195]: worker [5848] /devices/virtual/block/nbd0 timeout; kill it [ 380.850313][ T5195] udevd[5195]: seq 14893 '/devices/virtual/block/nbd0' killed [ 381.167706][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.207591][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.527132][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.167205][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.246984][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.808436][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.820540][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 383.827939][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.288925][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.008423][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.329470][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.367766][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.407691][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.447453][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.928010][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5110 ms [ 388.929145][ T6906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.936057][ C1] lec:lec_tx_timeout: lec0 [ 389.487768][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.208854][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.527338][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.848987][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.857934][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.567187][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.607960][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.407601][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.647288][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.047417][T11621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.687575][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.727851][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.887123][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.969129][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.767317][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.807828][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.848045][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.168035][T11624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.387536][ T8120] lec:lec_start_xmit: lec0:No lecd attached [ 399.889013][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.927301][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.088070][T11624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.729039][T11621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.968259][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.008505][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.016675][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.102069][ T5847] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 403.110300][ T5847] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 403.119599][ T5847] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 403.128291][ T5847] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 403.135966][ T5847] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 403.175300][T17243] virt_wifi0 speed is unknown, defaulting to 1000 [ 403.183474][T17243] vxcan1 speed is unknown, defaulting to 1000 [ 403.434235][T17243] chnl_net:caif_netlink_parms(): no params data found [ 403.513468][T17243] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.520791][T17243] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.528400][T17243] bridge_slave_0: entered allmulticast mode [ 403.535693][T17243] bridge_slave_0: entered promiscuous mode [ 403.544236][T17243] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.551873][T17243] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.559295][T17243] bridge_slave_1: entered allmulticast mode [ 403.567426][T17243] bridge_slave_1: entered promiscuous mode [ 403.599602][T17243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.612063][T17243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.644048][T17243] team0: Port device team_slave_0 added [ 403.653969][T17243] team0: Port device team_slave_1 added [ 403.680829][T17243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.687882][T17243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.715498][T17243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.728538][T17243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.735601][T17243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.762103][T17243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.808498][T17243] hsr_slave_0: entered promiscuous mode [ 403.815015][T17243] hsr_slave_1: entered promiscuous mode [ 403.821783][T17243] debugfs: 'hsr0' already exists in 'hsr' [ 403.827892][T17243] Cannot create hsr debugfs directory [ 404.048218][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.289691][ T6906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.927620][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5540 ms [ 404.935754][ C1] lec:lec_tx_timeout: lec0 [ 405.097436][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.166802][ T5839] Bluetooth: hci9: command tx timeout [ 406.127206][T11619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.137298][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.167307][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.246775][ T5839] Bluetooth: hci9: command tx timeout [ 407.488764][T11624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.207871][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.247444][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.327221][ T5839] Bluetooth: hci9: command tx timeout [ 410.047352][T11619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.288118][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.698516][ T56] block nbd0: Possible stuck request ffff888024f98000: control (read@0,1024B). Runtime 210 seconds [ 410.709589][ T56] block nbd0: Possible stuck request ffff888024f98200: control (read@1024,1024B). Runtime 210 seconds [ 410.720757][ T56] block nbd0: Possible stuck request ffff888024f98400: control (read@2048,1024B). Runtime 210 seconds [ 410.732887][ T56] block nbd0: Possible stuck request ffff888024f98600: control (read@3072,1024B). Runtime 210 seconds [ 411.327581][T11619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.335806][T11619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.406908][ T5839] Bluetooth: hci9: command tx timeout [ 412.368000][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.610876][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.247840][T11624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.407141][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.447733][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.167508][T11621] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.487219][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.526950][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.087698][T11619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.567023][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.368335][ T6906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.608891][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.647728][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.287327][T11619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.697365][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.727021][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.171713][ T5847] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 422.186808][ T5847] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 422.195156][ T5847] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 422.203369][ T5847] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 422.211390][T11624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.220702][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.229752][ T5847] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 422.253061][ T5847] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 422.262788][ T5847] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 422.271215][ T5847] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 422.279711][ T5847] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 422.290540][ T5847] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 422.320423][T17254] virt_wifi0 speed is unknown, defaulting to 1000 [ 422.330179][T17254] vxcan1 speed is unknown, defaulting to 1000 [ 422.353421][T17256] virt_wifi0 speed is unknown, defaulting to 1000 [ 422.484512][T17256] vxcan1 speed is unknown, defaulting to 1000 [ 422.662453][T17254] chnl_net:caif_netlink_parms(): no params data found [ 422.777222][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.798624][T17254] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.807909][T17254] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.815632][T17254] bridge_slave_0: entered allmulticast mode [ 422.823297][T17254] bridge_slave_0: entered promiscuous mode [ 422.837585][T17254] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.844768][T17254] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.852565][T17254] bridge_slave_1: entered allmulticast mode [ 422.860668][T17254] bridge_slave_1: entered promiscuous mode [ 422.898365][T17254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.911063][T17254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.955871][T17254] team0: Port device team_slave_0 added [ 422.971840][T17254] team0: Port device team_slave_1 added [ 423.021776][T17254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.028975][T17254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.055491][T17254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.075018][T17254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.083657][T17254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.110740][T17254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.173719][T17254] hsr_slave_0: entered promiscuous mode [ 423.181338][T17254] hsr_slave_1: entered promiscuous mode [ 423.188034][T17254] debugfs: 'hsr0' already exists in 'hsr' [ 423.193783][T17254] Cannot create hsr debugfs directory [ 423.199940][T17256] chnl_net:caif_netlink_parms(): no params data found [ 423.346753][T17256] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.353926][T17256] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.362623][T17256] bridge_slave_0: entered allmulticast mode [ 423.370267][T17256] bridge_slave_0: entered promiscuous mode [ 423.388864][T17256] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.396055][T17256] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.403453][T17256] bridge_slave_1: entered allmulticast mode [ 423.411934][T17256] bridge_slave_1: entered promiscuous mode [ 423.463921][T17256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.484376][T17256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.532336][T17256] team0: Port device team_slave_0 added [ 423.540740][T17256] team0: Port device team_slave_1 added [ 423.580285][T17256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.588496][T17256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.614877][T17256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.628829][T17256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.635791][T17256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.663144][T17256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.726897][T17256] hsr_slave_0: entered promiscuous mode [ 423.733765][T17256] hsr_slave_1: entered promiscuous mode [ 423.740503][T17256] debugfs: 'hsr0' already exists in 'hsr' [ 423.746241][T17256] Cannot create hsr debugfs directory [ 423.807888][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.129834][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.287256][ T5839] Bluetooth: hci10: command tx timeout [ 424.316107][ T5847] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 424.325762][ T5847] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 424.335950][ T5847] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 424.347634][ T5146] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 424.356237][ T5146] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 424.367489][ T5146] Bluetooth: hci11: command tx timeout [ 424.373451][ T5146] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 424.381431][T17276] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 424.389153][ T5146] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 424.399648][ T5839] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 424.411348][ T5839] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 424.458158][T17272] virt_wifi0 speed is unknown, defaulting to 1000 [ 424.466390][T17272] vxcan1 speed is unknown, defaulting to 1000 [ 424.482156][T17274] virt_wifi0 speed is unknown, defaulting to 1000 [ 424.613680][T17274] vxcan1 speed is unknown, defaulting to 1000 [ 424.814604][T17272] chnl_net:caif_netlink_parms(): no params data found [ 424.848198][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.959768][T17272] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.967727][T17272] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.975160][T17272] bridge_slave_0: entered allmulticast mode [ 424.983069][T17272] bridge_slave_0: entered promiscuous mode [ 424.992245][T17272] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.000996][T17272] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.010724][T17272] bridge_slave_1: entered allmulticast mode [ 425.018411][T17272] bridge_slave_1: entered promiscuous mode [ 425.052358][T17272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.067485][T17272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.121051][T17272] team0: Port device team_slave_0 added [ 425.134843][T17272] team0: Port device team_slave_1 added [ 425.178573][T17272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.185632][T17272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.212143][T17272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.231845][T17272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.239188][T17272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.265684][T17272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.323608][T17272] hsr_slave_0: entered promiscuous mode [ 425.330756][T17272] hsr_slave_1: entered promiscuous mode [ 425.337785][T17272] debugfs: 'hsr0' already exists in 'hsr' [ 425.338681][T11619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.343545][T17272] Cannot create hsr debugfs directory [ 425.365338][T17274] chnl_net:caif_netlink_parms(): no params data found [ 425.508684][T17274] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.516005][T17274] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.524056][T17274] bridge_slave_0: entered allmulticast mode [ 425.531677][T17274] bridge_slave_0: entered promiscuous mode [ 425.546106][T17274] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.553699][T17274] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.561009][T17274] bridge_slave_1: entered allmulticast mode [ 425.569714][T17274] bridge_slave_1: entered promiscuous mode [ 425.621667][T17274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.634993][T17274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.689873][T17274] team0: Port device team_slave_0 added [ 425.699286][T17274] team0: Port device team_slave_1 added [ 425.754105][T17274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.761805][T17274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.788286][T17274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.807133][T17274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.814157][T17274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.841626][T17274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.886969][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.902551][T17274] hsr_slave_0: entered promiscuous mode [ 425.910332][T17274] hsr_slave_1: entered promiscuous mode [ 425.917530][T17274] debugfs: 'hsr0' already exists in 'hsr' [ 425.923308][T17274] Cannot create hsr debugfs directory [ 426.367129][ T5839] Bluetooth: hci10: command tx timeout [ 426.447049][ T5839] Bluetooth: hci13: command tx timeout [ 426.447139][ T5847] Bluetooth: hci11: command tx timeout [ 426.455409][ T5146] Bluetooth: hci12: command tx timeout [ 426.928385][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.967427][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.975736][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.447715][ T5146] Bluetooth: hci10: command tx timeout [ 428.526916][ T5839] Bluetooth: hci13: command tx timeout [ 428.527218][ T5847] Bluetooth: hci11: command tx timeout [ 428.532724][ T5146] Bluetooth: hci12: command tx timeout [ 429.007080][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.889090][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.047255][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.526823][ T5146] Bluetooth: hci10: command tx timeout [ 430.607276][ T5146] Bluetooth: hci11: command tx timeout [ 430.607312][ T5847] Bluetooth: hci12: command tx timeout [ 430.612829][ T5146] Bluetooth: hci13: command tx timeout [ 431.088913][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.167520][T11624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.808286][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.817181][ T6906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.826063][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.835366][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.127092][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.687105][ T5839] Bluetooth: hci12: command tx timeout [ 432.692659][ T5146] Bluetooth: hci13: command tx timeout [ 433.169072][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.727767][T11624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.217327][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.287013][ T24] net_ratelimit: 2 callbacks suppressed [ 436.287035][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.927761][T11622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.327007][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.367340][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.407660][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.487943][T11622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.447269][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.768848][ T56] block nbd0: Possible stuck request ffff888024f98000: control (read@0,1024B). Runtime 240 seconds [ 440.779919][ T56] block nbd0: Possible stuck request ffff888024f98200: control (read@1024,1024B). Runtime 240 seconds [ 440.791017][ T56] block nbd0: Possible stuck request ffff888024f98400: control (read@2048,1024B). Runtime 240 seconds [ 440.802649][ T56] block nbd0: Possible stuck request ffff888024f98600: control (read@3072,1024B). Runtime 240 seconds [ 441.408533][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.416709][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.487405][ T5929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.968889][ T6906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.527246][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.568741][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.607544][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.615702][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.253240][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 445.647761][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.168624][T11624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.807336][ T6906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.727783][T11622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.926680][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5670 ms [ 450.934734][ C1] lec:lec_tx_timeout: lec0 [ 451.007373][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.015571][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.928771][T11624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.567361][T11624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.767607][T11624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.767460][T11622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.566883][ T5146] Bluetooth: hci5: command 0x0406 tx timeout [ 458.687376][T11622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.695563][T11622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.609491][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.618882][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.527444][ T6906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.807180][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.831531][ T5146] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 463.840659][ T5146] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 463.850395][ T5146] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 463.858780][ T5146] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 463.866739][ T5146] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 463.887364][ T8120] lec:lec_start_xmit: lec0:No lecd attached [ 463.909516][T17294] virt_wifi0 speed is unknown, defaulting to 1000 [ 463.917358][T17294] vxcan1 speed is unknown, defaulting to 1000 [ 464.164014][T17294] chnl_net:caif_netlink_parms(): no params data found [ 464.242326][T17294] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.249868][T17294] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.257593][T17294] bridge_slave_0: entered allmulticast mode [ 464.264916][T17294] bridge_slave_0: entered promiscuous mode [ 464.273633][T17294] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.281162][T17294] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.288960][T17294] bridge_slave_1: entered allmulticast mode [ 464.296343][T17294] bridge_slave_1: entered promiscuous mode [ 464.328659][T17294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.341383][T17294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.374661][T17294] team0: Port device team_slave_0 added [ 464.383409][T17294] team0: Port device team_slave_1 added [ 464.411174][T17294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.418775][T17294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.444980][T17294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.456870][T11622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.464242][T17294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.472403][T17294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.499033][T17294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.544982][T17294] hsr_slave_0: entered promiscuous mode [ 464.551793][T17294] hsr_slave_1: entered promiscuous mode [ 464.558886][T17294] debugfs: 'hsr0' already exists in 'hsr' [ 464.564626][T17294] Cannot create hsr debugfs directory [ 465.886787][ T5146] Bluetooth: hci14: command tx timeout [ 466.377334][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.806887][ T5146] Bluetooth: hci2: command 0x0406 tx timeout [ 467.967294][ T5839] Bluetooth: hci14: command tx timeout [ 468.287689][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.926642][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 468.934707][ C1] lec:lec_tx_timeout: lec0 [ 469.567465][ T6906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.575713][ T6906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.046998][ T5839] Bluetooth: hci14: command tx timeout [ 470.207160][ T9733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.854696][ T56] block nbd0: Possible stuck request ffff888024f98000: control (read@0,1024B). Runtime 270 seconds [ 470.866207][ T56] block nbd0: Possible stuck request ffff888024f98200: control (read@1024,1024B). Runtime 270 seconds [ 470.878919][ T56] block nbd0: Possible stuck request ffff888024f98400: control (read@2048,1024B). Runtime 270 seconds [ 470.890705][ T56] block nbd0: Possible stuck request ffff888024f98600: control (read@3072,1024B). Runtime 270 seconds [ 471.407357][T11624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.126922][ T5839] Bluetooth: hci14: command tx timeout [ 473.407465][T11619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.327813][ T6906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.335986][ T6906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.967636][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 477.247419][T11619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.167357][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.808332][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.091637][ T6906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.873441][ T5146] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 482.884663][ T5146] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 482.894326][ T5146] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 482.904285][ T5146] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 482.912224][ T5146] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 482.934951][ T5847] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 482.948146][ T5847] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 482.958018][ T5847] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 482.967959][ T5847] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 482.975842][ T5847] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 482.996000][T17305] virt_wifi0 speed is unknown, defaulting to 1000 [ 483.007492][T11624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.017966][T17305] vxcan1 speed is unknown, defaulting to 1000 [ 483.049749][T17307] virt_wifi0 speed is unknown, defaulting to 1000 [ 483.187203][T17307] vxcan1 speed is unknown, defaulting to 1000 [ 483.355513][T17305] chnl_net:caif_netlink_parms(): no params data found [ 483.490235][T17305] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.498034][T17305] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.505534][T17305] bridge_slave_0: entered allmulticast mode [ 483.513203][T17305] bridge_slave_0: entered promiscuous mode [ 483.525299][T17305] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.533418][T17305] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.541201][T17305] bridge_slave_1: entered allmulticast mode [ 483.549261][T17305] bridge_slave_1: entered promiscuous mode [ 483.585859][T17305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.601948][T17305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.657970][T17305] team0: Port device team_slave_0 added [ 483.675222][T17305] team0: Port device team_slave_1 added [ 483.718366][T17305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.725377][T17305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.752496][T17305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.766106][T17305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.773848][T17305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.801548][T17305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.844407][T17307] chnl_net:caif_netlink_parms(): no params data found [ 483.885614][T17305] hsr_slave_0: entered promiscuous mode [ 483.893352][T17305] hsr_slave_1: entered promiscuous mode [ 483.899869][T17305] debugfs: 'hsr0' already exists in 'hsr' [ 483.905633][T17305] Cannot create hsr debugfs directory [ 484.021118][T17307] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.028855][T17307] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.036452][T17307] bridge_slave_0: entered allmulticast mode [ 484.044500][T17307] bridge_slave_0: entered promiscuous mode [ 484.059914][T17307] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.067746][T17307] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.075037][T17307] bridge_slave_1: entered allmulticast mode [ 484.083536][T17307] bridge_slave_1: entered promiscuous mode [ 484.140194][T17307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.163674][T17307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.212733][T17307] team0: Port device team_slave_0 added [ 484.227672][T17307] team0: Port device team_slave_1 added [ 484.277722][T17307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.284713][T17307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.311284][T11624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.320419][T17307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.349464][T17307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.356765][T17307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.386291][T17307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.443585][T17307] hsr_slave_0: entered promiscuous mode [ 484.450917][T17307] hsr_slave_1: entered promiscuous mode [ 484.457816][T17307] debugfs: 'hsr0' already exists in 'hsr' [ 484.463554][T17307] Cannot create hsr debugfs directory [ 484.928480][ T5847] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 484.948241][ T5847] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 484.956652][ T5847] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 484.977641][ T5146] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 484.985719][ T5146] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 484.996417][ T5146] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 484.997446][T17276] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 485.011525][ T5146] Bluetooth: hci16: command tx timeout [ 485.017172][ T5146] Bluetooth: hci15: command tx timeout [ 485.023237][ T5146] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 485.035391][T17276] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 485.045758][T17276] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 485.133392][T17323] virt_wifi0 speed is unknown, defaulting to 1000 [ 485.160001][T17325] virt_wifi0 speed is unknown, defaulting to 1000 [ 485.166622][T17323] vxcan1 speed is unknown, defaulting to 1000 [ 485.320059][T17325] vxcan1 speed is unknown, defaulting to 1000 [ 485.519569][T17323] chnl_net:caif_netlink_parms(): no params data found [ 485.647914][T17323] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.655236][T17323] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.663447][T17323] bridge_slave_0: entered allmulticast mode [ 485.671084][T17323] bridge_slave_0: entered promiscuous mode [ 485.683992][T17323] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.692824][T17323] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.700516][T17323] bridge_slave_1: entered allmulticast mode [ 485.708626][T17323] bridge_slave_1: entered promiscuous mode [ 485.748286][T17323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.760994][T17323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.804673][T17323] team0: Port device team_slave_0 added [ 485.814352][T17323] team0: Port device team_slave_1 added [ 485.863888][T17323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.871319][T17323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.898087][T17323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.913087][T17323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.920230][T17323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 485.947249][T17323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.020517][T17323] hsr_slave_0: entered promiscuous mode [ 486.028105][T17323] hsr_slave_1: entered promiscuous mode [ 486.034418][T17323] debugfs: 'hsr0' already exists in 'hsr' [ 486.040553][T17323] Cannot create hsr debugfs directory [ 486.053442][T17325] chnl_net:caif_netlink_parms(): no params data found [ 486.196903][T17325] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.204141][T17325] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.221349][T17325] bridge_slave_0: entered allmulticast mode [ 486.229683][T17325] bridge_slave_0: entered promiscuous mode [ 486.239681][T17325] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.248107][T17325] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.255423][T17325] bridge_slave_1: entered allmulticast mode [ 486.263443][T17325] bridge_slave_1: entered promiscuous mode [ 486.320827][T17325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.341134][T17325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.388220][T17325] team0: Port device team_slave_0 added [ 486.397567][T17325] team0: Port device team_slave_1 added [ 486.454809][T17325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.462165][T17325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.490291][T17325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.503222][T17325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.510388][T17325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.536947][T17325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.602913][T17325] hsr_slave_0: entered promiscuous mode [ 486.610045][T17325] hsr_slave_1: entered promiscuous mode [ 486.616299][T17325] debugfs: 'hsr0' already exists in 'hsr' [ 486.624483][T17325] Cannot create hsr debugfs directory [ 486.847610][T11624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.087273][ T5839] Bluetooth: hci18: command tx timeout [ 487.093879][T17339] Bluetooth: hci17: command tx timeout [ 487.095142][T17340] Bluetooth: hci15: command tx timeout [ 487.101465][ T5839] Bluetooth: hci16: command tx timeout [ 488.287020][T17339] Bluetooth: hci7: command 0x0406 tx timeout [ 488.294039][ T5839] Bluetooth: hci8: command 0x0406 tx timeout [ 488.297919][T17341] Bluetooth: hci3: command 0x0406 tx timeout [ 488.301814][T17339] Bluetooth: hci6: command 0x0406 tx timeout [ 488.767354][T11622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.167145][ T5834] Bluetooth: hci15: command tx timeout [ 489.167162][ T5146] Bluetooth: hci18: command tx timeout [ 489.172717][ T5834] Bluetooth: hci16: command tx timeout [ 489.179022][T17276] Bluetooth: hci17: command tx timeout [ 489.407205][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.415358][ T6899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.424249][ T9734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.247251][T17276] Bluetooth: hci15: command tx timeout [ 491.247265][ T5834] Bluetooth: hci18: command tx timeout [ 491.247295][ T5834] Bluetooth: hci17: command tx timeout [ 491.252988][ T5146] Bluetooth: hci16: command tx timeout [ 492.607508][T11624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.247307][ T31] INFO: task syz-executor:16950 blocked for more than 143 seconds. [ 493.255363][ T31] Not tainted syzkaller #0 [ 493.260753][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 493.269742][ T31] task:syz-executor state:D stack:22456 pid:16950 tgid:16950 ppid:1 task_flags:0x400140 flags:0x00080002 [ 493.282278][ T31] Call Trace: [ 493.285610][ T31] [ 493.288695][ T31] __schedule+0x14ea/0x5050 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 493.293280][ T31] ? __pfx___schedule+0x10/0x10 [ 493.298889][ T31] ? schedule+0x90/0x360 [ 493.303349][ T31] schedule+0x164/0x360 [ 493.307933][ T31] schedule_preempt_disabled+0x13/0x30 [ 493.313784][ T31] __mutex_lock+0x7fe/0x1300 [ 493.318786][ T31] ? __mutex_lock+0x5ac/0x1300 [ 493.323611][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 493.327273][ T5834] Bluetooth: hci18: command tx timeout [ 493.330592][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 493.333894][ T5834] Bluetooth: hci17: command tx timeout [ 493.341577][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 493.350077][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 493.355505][ T31] ? radix_tree_lookup+0x240/0x290 [ 493.361143][ T31] genl_rcv_msg+0x10b/0x7a0 [ 493.365715][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.371533][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 493.376858][ T31] netlink_rcv_skb+0x232/0x4b0 [ 493.381683][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.408813][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 493.414196][ T31] ? genl_rcv+0x19/0x40 [ 493.418830][ T31] ? down_read+0x272/0x2e0 [ 493.423300][ T31] ? genl_rcv+0xd/0x40 [ 493.427891][ T31] genl_rcv+0x28/0x40 [ 493.432002][ T31] netlink_unicast+0x80f/0x9b0 [ 493.437187][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 493.442547][ T31] ? __alloc_skb+0x193/0x390 [ 493.447301][ T31] ? netlink_sendmsg+0x650/0xb40 [ 493.452287][ T31] ? skb_put+0x11b/0x210 [ 493.458113][ T31] netlink_sendmsg+0x813/0xb40 [ 493.462958][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.468701][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 493.473695][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 493.479154][ T31] __sys_sendto+0x709/0x7a0 [ 493.483719][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 493.492373][ T31] ? fd_install+0x94/0x3d0 [ 493.499913][ T31] ? fd_install+0x306/0x3d0 [ 493.504873][ T31] __x64_sys_sendto+0xde/0x100 [ 493.511236][ T31] do_syscall_64+0xe2/0xf80 [ 493.515810][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.522569][ T31] ? trace_irq_disable+0x37/0x100 [ 493.546603][ T31] ? clear_bhb_loop+0x60/0xb0 [ 493.551495][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.558027][ T31] RIP: 0033:0x7fe095d5b78e [ 493.562488][ T31] RSP: 002b:00007ffd86cd01d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 493.571540][ T31] RAX: ffffffffffffffda RBX: 00005555856ca500 RCX: 00007fe095d5b78e [ 493.579698][ T31] RDX: 0000000000000020 RSI: 00007fe096b44670 RDI: 0000000000000005 [ 493.588053][ T31] RBP: 0000000000000001 R08: 00007ffd86cd0254 R09: 000000000000000c [ 493.596059][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 493.604164][ T31] R13: 00007ffd86cd02a8 R14: 00007fe096b44670 R15: 0000000000000000 [ 493.612579][ T31] [ 493.615694][ T31] INFO: task syz.0.3015:17123 blocked for more than 143 seconds. [ 493.623982][ T31] Not tainted syzkaller #0 [ 493.629026][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 493.637786][ T31] task:syz.0.3015 state:D stack:25664 pid:17123 tgid:17121 ppid:16560 task_flags:0x480140 flags:0x00080002 [ 493.650257][ T31] Call Trace: [ 493.653628][ T31] [ 493.656708][ T31] __schedule+0x14ea/0x5050 [ 493.661286][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 493.666323][ T31] ? __pfx___schedule+0x10/0x10 [ 493.671356][ T31] ? schedule+0x90/0x360 [ 493.675654][ T31] schedule+0x164/0x360 [ 493.680310][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 493.685942][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 493.692193][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 493.698639][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 493.704735][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 493.711254][ T31] nbd_set_size+0x516/0x6d0 [ 493.715820][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 493.721193][ T31] ? nla_memcpy+0x5b/0xc0 [ 493.725569][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 493.731167][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 493.737318][ T31] ? rcu_is_watching+0x15/0xb0 [ 493.742147][ T31] ? __nla_parse+0x40/0x60 [ 493.746759][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 493.753148][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 493.758935][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 493.765057][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 493.770442][ T31] genl_rcv_msg+0x61c/0x7a0 [ 493.774991][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.780289][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 493.786081][ T31] netlink_rcv_skb+0x232/0x4b0 [ 493.791056][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 493.796148][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 493.801867][ T31] ? genl_rcv+0x19/0x40 [ 493.806103][ T31] ? down_read+0x272/0x2e0 [ 493.811002][ T31] ? genl_rcv+0xd/0x40 [ 493.815140][ T31] genl_rcv+0x28/0x40 [ 493.819298][ T31] netlink_unicast+0x80f/0x9b0 [ 493.824126][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 493.829962][ T31] ? __alloc_skb+0x193/0x390 [ 493.834581][ T31] ? netlink_sendmsg+0x650/0xb40 [ 493.839641][ T31] netlink_sendmsg+0x813/0xb40 [ 493.844453][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.849856][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 493.854837][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 493.860616][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.865947][ T31] ____sys_sendmsg+0xa68/0xad0 [ 493.870855][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.876192][ T31] ? import_iovec+0x73/0xa0 [ 493.880833][ T31] ___sys_sendmsg+0x2a5/0x360 [ 493.885555][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 493.891032][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.896295][ T31] ? futex_wake+0x4ac/0x580 [ 493.900977][ T31] ? __fget_files+0x2a/0x420 [ 493.905627][ T31] ? __fget_files+0x3a0/0x420 [ 493.910453][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 493.915457][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 493.921357][ T31] ? rcu_is_watching+0x15/0xb0 [ 493.926191][ T31] do_syscall_64+0xe2/0xf80 [ 493.930845][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.937278][ T31] ? trace_irq_disable+0x37/0x100 [ 493.942356][ T31] ? clear_bhb_loop+0x60/0xb0 [ 493.947440][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.953381][ T31] RIP: 0033:0x7f7596f9aeb9 [ 493.957935][ T31] RSP: 002b:00007f7597e2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.966400][ T31] RAX: ffffffffffffffda RBX: 00007f7597215fa0 RCX: 00007f7596f9aeb9 [ 493.974746][ T31] RDX: 0000000000000044 RSI: 0000200000000300 RDI: 0000000000000005 [ 493.983136][ T31] RBP: 00007f7597008c1f R08: 0000000000000000 R09: 0000000000000000 [ 493.991284][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.999402][ T31] R13: 00007f7597216038 R14: 00007f7597215fa0 R15: 00007ffe0c7c2948 [ 494.007759][ T31] [ 494.010854][ T31] INFO: task syz.2.3016:17125 blocked for more than 144 seconds. [ 494.018770][ T31] Not tainted syzkaller #0 [ 494.023741][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.032560][ T31] task:syz.2.3016 state:D stack:26608 pid:17125 tgid:17124 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 494.044904][ T31] Call Trace: [ 494.048548][ T31] [ 494.051526][ T31] __schedule+0x14ea/0x5050 [ 494.056084][ T31] ? __pfx___schedule+0x10/0x10 [ 494.061120][ T31] ? schedule+0x90/0x360 [ 494.065419][ T31] schedule+0x164/0x360 [ 494.069969][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.075460][ T31] __mutex_lock+0x7fe/0x1300 [ 494.080184][ T31] ? __mutex_lock+0x5ac/0x1300 [ 494.084992][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 494.089801][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 494.094874][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 494.100473][ T31] ? radix_tree_lookup+0x240/0x290 [ 494.105621][ T31] genl_rcv_msg+0x10b/0x7a0 [ 494.110235][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.115337][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 494.120451][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 494.125880][ T31] netlink_rcv_skb+0x232/0x4b0 [ 494.131296][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.136386][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 494.141849][ T31] ? genl_rcv+0x19/0x40 [ 494.146058][ T31] ? down_read+0x272/0x2e0 [ 494.150615][ T31] ? genl_rcv+0xd/0x40 [ 494.154736][ T31] genl_rcv+0x28/0x40 [ 494.159250][ T31] netlink_unicast+0x80f/0x9b0 [ 494.164054][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 494.169500][ T31] ? __alloc_skb+0x193/0x390 [ 494.174148][ T31] ? netlink_sendmsg+0x650/0xb40 [ 494.179199][ T31] ? skb_put+0x11b/0x210 [ 494.183498][ T31] netlink_sendmsg+0x813/0xb40 [ 494.188676][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.193989][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 494.199078][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.204411][ T31] __sys_sendto+0x709/0x7a0 [ 494.209251][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 494.214359][ T31] ? exc_page_fault+0x6a/0xc0 [ 494.219443][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 494.224792][ T31] __x64_sys_sendto+0xde/0x100 [ 494.229697][ T31] do_syscall_64+0xe2/0xf80 [ 494.234243][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.240446][ T31] ? trace_irq_disable+0x37/0x100 [ 494.245510][ T31] ? clear_bhb_loop+0x60/0xb0 [ 494.250555][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.256600][ T31] RIP: 0033:0x7fc64c75b78e [ 494.261052][ T31] RSP: 002b:00007fc64a9f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 494.269748][ T31] RAX: ffffffffffffffda RBX: 00007fc64a9f66c0 RCX: 00007fc64c75b78e [ 494.278020][ T31] RDX: 0000000000000020 RSI: 00007fc64a9f5000 RDI: 0000000000000004 [ 494.286003][ T31] RBP: 0000000000000000 R08: 00007fc64a9f4f04 R09: 000000000000000c [ 494.294328][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 494.302467][ T31] R13: 00007fc64a9f4f58 R14: 00007fc64a9f5000 R15: 0000000000000000 [ 494.310864][ T31] [ 494.313972][ T31] INFO: task syz.3.3033:17185 blocked for more than 144 seconds. [ 494.327773][ T31] Not tainted syzkaller #0 [ 494.332765][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.342379][ T31] task:syz.3.3033 state:D stack:24128 pid:17185 tgid:17181 ppid:5833 task_flags:0x400140 flags:0x00080002 [ 494.354560][ T31] Call Trace: [ 494.358109][ T31] [ 494.361069][ T31] __schedule+0x14ea/0x5050 [ 494.365607][ T31] ? __pfx___schedule+0x10/0x10 [ 494.371381][ T31] ? schedule+0x90/0x360 [ 494.375688][ T31] schedule+0x164/0x360 [ 494.380175][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.385670][ T31] __mutex_lock+0x7fe/0x1300 [ 494.390384][ T31] ? __mutex_lock+0x5ac/0x1300 [ 494.395194][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 494.400260][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 494.405315][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 494.410582][ T31] ? radix_tree_lookup+0x240/0x290 [ 494.415746][ T31] genl_rcv_msg+0x10b/0x7a0 [ 494.422972][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.428548][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 494.433547][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 494.439107][ T31] netlink_rcv_skb+0x232/0x4b0 [ 494.443925][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.449253][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 494.454579][ T31] ? genl_rcv+0x19/0x40 [ 494.459142][ T31] ? down_read+0x272/0x2e0 [ 494.463612][ T31] ? genl_rcv+0xd/0x40 [ 494.467850][ T31] genl_rcv+0x28/0x40 [ 494.471882][ T31] netlink_unicast+0x80f/0x9b0 [ 494.476769][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 494.482114][ T31] ? __alloc_skb+0x193/0x390 [ 494.487220][ T31] ? netlink_sendmsg+0x650/0xb40 [ 494.492187][ T31] ? skb_put+0x11b/0x210 [ 494.496448][ T31] netlink_sendmsg+0x813/0xb40 [ 494.501412][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.506807][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 494.511792][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.517488][ T31] __sys_sendto+0x709/0x7a0 [ 494.522055][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 494.527478][ T31] ? exc_page_fault+0x6a/0xc0 [ 494.532209][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 494.537634][ T31] __x64_sys_sendto+0xde/0x100 [ 494.539550][T11624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.542448][ T31] do_syscall_64+0xe2/0xf80 [ 494.557491][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.563594][ T31] ? trace_irq_disable+0x37/0x100 [ 494.568708][ T31] ? clear_bhb_loop+0x60/0xb0 [ 494.573443][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.579901][ T31] RIP: 0033:0x7fb80275b78e [ 494.584355][ T31] RSP: 002b:00007fb8035fce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 494.593019][ T31] RAX: ffffffffffffffda RBX: 00007fb8035fe6c0 RCX: 00007fb80275b78e [ 494.601237][ T31] RDX: 0000000000000020 RSI: 00007fb8035fd000 RDI: 0000000000000008 [ 494.609618][ T31] RBP: 0000000000000000 R08: 00007fb8035fcf04 R09: 000000000000000c [ 494.617709][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 494.625718][ T31] R13: 00007fb8035fcf58 R14: 00007fb8035fd000 R15: 0000000000000000 [ 494.633920][ T31] [ 494.637387][ T31] INFO: task syz.1.3036:17200 blocked for more than 144 seconds. [ 494.645133][ T31] Not tainted syzkaller #0 [ 494.650250][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.659233][ T31] task:syz.1.3036 state:D stack:24856 pid:17200 tgid:17199 ppid:5826 task_flags:0x400140 flags:0x00080002 [ 494.671732][ T31] Call Trace: [ 494.675069][ T31] [ 494.678151][ T31] __schedule+0x14ea/0x5050 [ 494.682752][ T31] ? __pfx___schedule+0x10/0x10 [ 494.688132][ T31] ? schedule+0x90/0x360 [ 494.692427][ T31] schedule+0x164/0x360 [ 494.696988][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.702486][ T31] __mutex_lock+0x7fe/0x1300 [ 494.707390][ T31] ? __mutex_lock+0x5ac/0x1300 [ 494.712203][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 494.717017][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 494.722098][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 494.727424][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 494.732828][ T31] ? radix_tree_lookup+0x240/0x290 [ 494.738106][ T31] genl_rcv_msg+0x10b/0x7a0 [ 494.742668][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.747866][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 494.752869][ T31] netlink_rcv_skb+0x232/0x4b0 [ 494.757993][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 494.763161][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 494.768806][ T31] ? genl_rcv+0x19/0x40 [ 494.773002][ T31] ? down_read+0x272/0x2e0 [ 494.777542][ T31] ? genl_rcv+0xd/0x40 [ 494.781668][ T31] genl_rcv+0x28/0x40 [ 494.785694][ T31] netlink_unicast+0x80f/0x9b0 [ 494.790936][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 494.796278][ T31] ? __alloc_skb+0x193/0x390 [ 494.801051][ T31] ? netlink_sendmsg+0x650/0xb40 [ 494.806032][ T31] ? skb_put+0x11b/0x210 [ 494.810397][ T31] netlink_sendmsg+0x813/0xb40 [ 494.815231][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.821282][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 494.826256][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 494.831731][ T31] __sys_sendto+0x709/0x7a0 [ 494.836290][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 494.841520][ T31] ? exc_page_fault+0x6a/0xc0 [ 494.846244][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 494.852042][ T31] __x64_sys_sendto+0xde/0x100 [ 494.856981][ T31] do_syscall_64+0xe2/0xf80 [ 494.861528][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.867752][ T31] ? trace_irq_disable+0x37/0x100 [ 494.872805][ T31] ? clear_bhb_loop+0x60/0xb0 [ 494.877908][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.883852][ T31] RIP: 0033:0x7fe83115b78e [ 494.888366][ T31] RSP: 002b:00007fe831fefe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 494.896950][ T31] RAX: ffffffffffffffda RBX: 00007fe831ff16c0 RCX: 00007fe83115b78e [ 494.904967][ T31] RDX: 0000000000000024 RSI: 00007fe831ff0000 RDI: 0000000000000008 [ 494.913342][ T31] RBP: 0000000000000000 R08: 00007fe831feff04 R09: 000000000000000c [ 494.921497][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 494.929765][ T31] R13: 00007fe831feff58 R14: 00007fe831ff0000 R15: 0000000000000000 [ 494.938181][ T31] [ 494.941327][ T31] [ 494.941327][ T31] Showing all locks held in the system: [ 494.949131][ T31] 1 lock held by khungtaskd/31: [ 494.954021][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 494.964196][ T31] 3 locks held by klogd/5184: [ 494.969166][ T31] #0: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 494.979233][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: fs_reclaim_acquire+0x7c/0x100 [ 494.988487][ T31] #2: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 494.997776][ T31] 2 locks held by getty/5584: [ 495.002483][ T31] #0: ffff888033f0d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 495.012629][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 495.022944][ T31] 1 lock held by udevd/5848: [ 495.027804][ T31] #0: ffff8881423a6358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 495.037375][ T31] 2 locks held by syz-executor/16950: [ 495.042775][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.051077][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 495.060387][ T31] 6 locks held by syz.0.3015/17123: [ 495.065588][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.073981][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 495.083242][ T31] #2: ffff888024e56a78 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 495.094187][ T31] #3: ffff888024d55c88 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2ba/0x6d0 [ 495.103832][ T31] #4: ffff888024d55628 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 495.115979][ T31] #5: ffff888024d55660 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 495.128685][ T31] 2 locks held by syz.2.3016/17125: [ 495.133898][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.142220][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 495.151463][ T31] 2 locks held by syz.3.3033/17185: [ 495.157034][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.165286][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 495.174672][ T31] 2 locks held by syz.1.3036/17200: [ 495.175023][T11619] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.180026][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.195413][T11624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.196765][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 495.214300][ T31] 2 locks held by syz-executor/17204: [ 495.220144][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.228650][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 495.237805][ T31] 2 locks held by syz-executor/17206: [ 495.243228][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.252117][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 495.261454][ T31] 2 locks held by syz-executor/17222: [ 495.267003][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.275252][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 495.284614][ T31] 2 locks held by syz-executor/17224: [ 495.290201][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.298608][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 495.308046][ T31] 2 locks held by syz-executor/17243: [ 495.313433][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.321770][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 495.331202][ T31] 2 locks held by syz-executor/17254: [ 495.336927][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.345205][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 495.354472][ T31] 2 locks held by syz-executor/17256: [ 495.360513][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.369332][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 495.378503][ T31] 2 locks held by syz-executor/17272: [ 495.383901][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.392284][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 495.401625][ T31] 2 locks held by syz-executor/17274: [ 495.407561][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.415825][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 495.424944][ T31] 2 locks held by syz-executor/17294: [ 495.430695][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.439037][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 495.448163][ T31] 2 locks held by syz-executor/17305: [ 495.453568][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.462148][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 495.471475][ T31] 2 locks held by syz-executor/17307: [ 495.477151][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.485427][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 495.495006][ T31] 2 locks held by syz-executor/17323: [ 495.500507][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.508891][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 495.518302][ T31] 2 locks held by syz-executor/17325: [ 495.523701][ T31] #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 495.532032][ T31] #1: ffffffff8fa1a048 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 495.541211][ T31] [ 495.543581][ T31] ============================================= [ 495.543581][ T31] [ 495.553130][ T31] NMI backtrace for cpu 0 [ 495.553146][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 495.553162][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 495.553170][ T31] Call Trace: [ 495.553175][ T31] [ 495.553181][ T31] dump_stack_lvl+0xe8/0x150 [ 495.553204][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 495.553231][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 495.553255][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 495.553278][ T31] sys_info+0x135/0x170 [ 495.553294][ T31] watchdog+0xf90/0xfe0 [ 495.553313][ T31] ? watchdog+0x209/0xfe0 [ 495.553333][ T31] kthread+0x726/0x8b0 [ 495.553351][ T31] ? __pfx_watchdog+0x10/0x10 [ 495.553365][ T31] ? __pfx_kthread+0x10/0x10 [ 495.553383][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 495.553396][ T31] ? __pfx_kthread+0x10/0x10 [ 495.553413][ T31] ret_from_fork+0x51b/0xa40 [ 495.553428][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 495.553440][ T31] ? __switch_to+0xc82/0x1410 [ 495.553461][ T31] ? __pfx_kthread+0x10/0x10 [ 495.553478][ T31] ret_from_fork_asm+0x1a/0x30 [ 495.553508][ T31] [ 495.553513][ T31] Sending NMI from CPU 0 to CPUs 1: [ 495.674802][ C1] NMI backtrace for cpu 1 [ 495.674820][ C1] CPU: 1 UID: 0 PID: 11619 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(full) [ 495.674840][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 495.674852][ C1] Workqueue: bat_events batadv_tt_purge [ 495.674883][ C1] RIP: 0010:kasan_check_range+0x1ca/0x2c0 [ 495.674907][ C1] Code: dc 4d 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 7c 49 ff c3 49 ff cc 75 f2 5b 41 5c <41> 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 45 84 ff 0f 85 a1 00 00 00 [ 495.674923][ C1] RSP: 0018:ffffc9000b657918 EFLAGS: 00000297 [ 495.674937][ C1] RAX: 00000000ffffff01 RBX: ffff888064d6a2c0 RCX: ffffffff81a0ee9b [ 495.674950][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc9000b657980 [ 495.674966][ C1] RBP: ffffc9000b6579e8 R08: 0000000000000003 R09: 0000000000000004 [ 495.674977][ C1] R10: dffffc0000000000 R11: fffff520016caf30 R12: 1ffff920016caf2c [ 495.674990][ C1] R13: ffff888064d6a2c8 R14: fffff520016caf31 R15: 1ffff920016caf30 [ 495.675004][ C1] FS: 0000000000000000(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000 [ 495.675018][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 495.675030][ C1] CR2: 00005587490fef40 CR3: 000000000e346000 CR4: 00000000003526f0 [ 495.675045][ C1] Call Trace: [ 495.675053][ C1] [ 495.675063][ C1] do_raw_spin_lock+0x12b/0x2f0 [ 495.675085][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 495.675107][ C1] ? batadv_tt_purge+0x11b/0x9e0 [ 495.675135][ C1] batadv_tt_purge+0x11b/0x9e0 [ 495.675165][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 495.675192][ C1] process_scheduled_works+0xaec/0x17a0 [ 495.675234][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 495.675258][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 495.675279][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 495.675297][ C1] ? schedule+0x90/0x360 [ 495.675318][ C1] worker_thread+0xda6/0x1360 [ 495.675359][ C1] kthread+0x726/0x8b0 [ 495.675380][ C1] ? __pfx_worker_thread+0x10/0x10 [ 495.675405][ C1] ? __pfx_kthread+0x10/0x10 [ 495.675426][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 495.675441][ C1] ? __pfx_kthread+0x10/0x10 [ 495.675461][ C1] ret_from_fork+0x51b/0xa40 [ 495.675478][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 495.675492][ C1] ? __switch_to+0xc82/0x1410 [ 495.675517][ C1] ? __pfx_kthread+0x10/0x10 [ 495.675537][ C1] ret_from_fork_asm+0x1a/0x30 [ 495.675569][ C1] [ 495.917566][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 495.924466][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 495.933603][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 495.943683][ T31] Call Trace: [ 495.947005][ T31] [ 495.949963][ T31] vpanic+0x1e0/0x670 [ 495.953985][ T31] panic+0xc5/0xd0 [ 495.957738][ T31] ? __pfx_panic+0x10/0x10 [ 495.962186][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 495.967599][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 495.973789][ T31] watchdog+0xfda/0xfe0 [ 495.977984][ T31] ? watchdog+0x209/0xfe0 [ 495.982360][ T31] kthread+0x726/0x8b0 [ 495.986456][ T31] ? __pfx_watchdog+0x10/0x10 [ 495.991160][ T31] ? __pfx_kthread+0x10/0x10 [ 495.995777][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.000995][ T31] ? __pfx_kthread+0x10/0x10 [ 496.005642][ T31] ret_from_fork+0x51b/0xa40 [ 496.010254][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 496.015386][ T31] ? __switch_to+0xc82/0x1410 [ 496.020099][ T31] ? __pfx_kthread+0x10/0x10 [ 496.024745][ T31] ret_from_fork_asm+0x1a/0x30 [ 496.029553][ T31] [ 496.033210][ T31] Kernel Offset: disabled [ 496.037549][ T31] Rebooting in 86400 seconds..