last executing test programs: 23.31612732s ago: executing program 1 (id=2794): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100000000000000000000000000000000000000000000000000000000000000f47646cf094b1c90e1bddaa14ee8833f3ffb13b7596a6f41d917a7f09e7f01d5bd7b82a4e257223acc7b0a54a96525e740d6bbb829ec5b53c2243f57d82dc00398ef2d97ff227e526dad5ffa106ca4250af65a8f6dc7e3ec7e1db3ec9aa0b67f835e1458c22888a5b6b9adcebf0e28be0c1f948754898671345b339d88d153b52a", @ANYRES8=r0, @ANYBLOB="0181000000e7c6cbd93b3ca9ea25eebbe0862b6dbb8418fb505920f2420900800000d8ccb6accc942894e4fe8d35936d3e9b42168dfa17539cdbd32aa3623690eeccdc33427daea636f38bea4d2250c7567caa1d2579f0b0a14dcda9dee97d3f87a3f87c7ec22769739b700e8595b6287e13833d764e580d6c8776623359c8d19c8e7d8e8c44ab21a8ac66c474d0d437f524708a30b9ca20f44861b82c4212b059bb09fd3b31ecf275a9a15e8b"], 0x40) r1 = socket$nl_rdma(0x10, 0x3, 0x14) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a01040000000a0000040900010073797a3100000000080005800000003f0900020073797a310000000008000a40ffffff060946544fbb00013014000000110001ffffffffffffffe4000100000aa3c309acf1c21ffc5596165b63581c91213437ad1bd9d59edb026b037da7400c8420ca8c011d85eb49d2597b7bd002b71f611a551c71419b95aed2febe308a5467c85f67c061"], 0x6c}, 0x1, 0x0, 0x0, 0x4000810}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x18c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x108, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x4c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_DYNSET_EXPRESSIONS={0x20, 0xa, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_DYNSET_SET_ID={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x54, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000810}, 0x40) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) pipe(0x0) (async) pipe(0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r6) (async) close(r6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000440)={{0x2, 0x4e20, @remote}, {0x1}, 0x10, {0x2, 0x4e23, @remote}, 'veth1_to_bridge\x00'}) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) recvmmsg(r5, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000001040)=""/4100, 0x1004}, {&(0x7f0000000980)=""/158, 0x9e}], 0x3}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000005780)=""/4096, 0x1000}, {&(0x7f0000004740)=""/4082, 0xff2}, {&(0x7f0000000340)=""/242, 0xf2}], 0x3}, 0x4}], 0x7, 0x0, 0x0) (async) recvmmsg(r5, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000001040)=""/4100, 0x1004}, {&(0x7f0000000980)=""/158, 0x9e}], 0x3}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000005780)=""/4096, 0x1000}, {&(0x7f0000004740)=""/4082, 0xff2}, {&(0x7f0000000340)=""/242, 0xf2}], 0x3}, 0x4}], 0x7, 0x0, 0x0) recvmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004700)=""/4083, 0xff3}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000000780)=""/4137, 0x1029}, {&(0x7f00000004c0)=""/106, 0x6a}, {&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f0000000280)=""/164, 0xa4}], 0x6}, 0x120) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r7, 0x0, 0x400000008000f28, 0x0) 21.5291795s ago: executing program 3 (id=2811): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000300)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x7fff, 0x1000, 0x3a, 0x0, 0xfffffffd}, 0x1c) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x34, r7, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}]}, 0x34}}, 0x0) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000005465d400", @ANYRES16=r9, @ANYBLOB="07000000000000000000020000000c0001800500020001000000"], 0x20}, 0x1, 0x0, 0x0, 0x8050}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000140)=r0, 0x4) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$can_raw(0x1d, 0x3, 0x1) (async) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r12, @ANYBLOB="bffacf601554eb7b5a46cb2ac7b8ffffffffffffff8777ae7806124e70ef519941b3d6c33bd0a23eaf38c5846c17889e3a1cada8d77e6b7868d575d5a72d67ed6c7baf4c834af35771c5464c78e914964738de0eca75cc70fefce5327772afdecd3cd3441b8b39374aff0e66c08c4467db79004e7eb510eaaa2fb46d73"], 0xcf}, 0x1000c080) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000004, 0x100010, r11, 0x4b15c000) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 20.540966085s ago: executing program 3 (id=2817): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x2000000026fe, 0x0, 0x1}}, 0x40) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r0, 0x20, &(0x7f0000000200)={&(0x7f0000000000)=""/135, 0x87, 0x0, &(0x7f00000000c0)=""/196, 0xc4}}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendfile(r1, r2, 0x0, 0x2) close(r2) 20.315372494s ago: executing program 3 (id=2819): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x2d0, 0xffffffff, 0x2e0, 0x0, 0x2e0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x0, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x6}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) (async) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f00000000c0), 0x4) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x4}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000000)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) (async) sendmsg$tipc(r0, &(0x7f0000000000)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) socket(0x18, 0x3, 0x1) 19.981434419s ago: executing program 3 (id=2821): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000600)={0x0, 0xea60}, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0xc8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)={0x68, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6f93}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x24}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x200}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xd2ee}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9f8f}]}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x1, 0x2, 0x3, 0x5]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_LABELS={0x0, 0x16, 0x1, 0x0, [0x7, 0x47b1ed6f, 0xfff, 0x80, 0x3, 0x6, 0x5, 0x2]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x80) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000003c0)=""/119, &(0x7f0000000440)=0x77) (async) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x5d}, [@ldst={0x5}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) (async) recvmsg$can_bcm(r2, &(0x7f0000001dc0)={&(0x7f00000006c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000740)=""/142, 0x8e}, {&(0x7f0000000800)=""/84, 0x54}, {&(0x7f0000000880)=""/57, 0x39}, {&(0x7f00000008c0)=""/134, 0x86}, {&(0x7f0000000980)=""/17, 0x11}, {&(0x7f00000009c0)=""/104, 0x68}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/131, 0x83}], 0x8, &(0x7f0000001cc0)=""/210, 0xd2}, 0x40000000) (async) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) 19.979520159s ago: executing program 1 (id=2822): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000340)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2d002, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x320) 19.929924534s ago: executing program 4 (id=2823): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind(r0, &(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x5, @empty, 0x8fc7}}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r1, @ANYRES64=r1, @ANYBLOB="0000000008000000240012800c0001006d6163766c616e00140002800800010004000008004470accd40de575cd21fd901a7d3ffffffff140035006d6163767eac2b90b202d42c4f9acd2055"], 0x58}}, 0x8000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) bind(r0, &(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x5, @empty, 0x8fc7}}, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r1, @ANYRES64=r1, @ANYBLOB="0000000008000000240012800c0001006d6163766c616e00140002800800010004000008004470accd40de575cd21fd901a7d3ffffffff140035006d6163767eac2b90b202d42c4f9acd2055"], 0x58}}, 0x8000) (async) 19.585157587s ago: executing program 1 (id=2825): ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000001000)={&(0x7f0000000000)=""/4096, 0x1000}) r0 = socket(0x2, 0x2, 0x1) bind$can_j1939(r0, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000001640)={&(0x7f0000001040)=@isdn, 0x80, &(0x7f00000015c0)=[{&(0x7f00000010c0)=""/246, 0xf6}, {&(0x7f00000011c0)=""/10, 0xa}, {&(0x7f0000001200)=""/222, 0xde}, {&(0x7f0000001300)=""/242, 0xf2}, {&(0x7f0000001400)=""/158, 0x9e}, {&(0x7f00000014c0)=""/1, 0x1}, {&(0x7f0000001500)=""/151, 0x97}], 0x7}, 0x40) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) 19.505123747s ago: executing program 4 (id=2826): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0xc, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@ipv6_newroute={0x38, 0x18, 0x4, 0x70bd31, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xff, 0x2, 0xff, 0x0, 0x100}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x8}}]}, 0x38}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB="4c020000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf25010000001400020077673200000000000000000000000000240003000000000000000000000000000000000000000000000000000000000000000000000208805400008024000200935fcc0d76a5bcfce584052ea21b4b2622057154ff788c325f3b596e54307c08080003000200000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696ba80100802400010004000000000000004f020211456727082f5cebee8b1bf5eb7337341b459b392208000a00010000007801098040000080060001000200000008000200640101010500030003000000060001000800000014000200fe880000000000000000000000000101050003000300000064000080060001000200000008000200e00000020500030003000000060001000200000008000200000000000500030002000000060001000200000008000200ffffffff05000300030000000600010002000000080002007f000001050003"], 0x24c}, 0x1, 0x0, 0x0, 0xc004}, 0x4004040) 19.288789772s ago: executing program 3 (id=2827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x6, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe"], 0xfdef) 19.148626539s ago: executing program 1 (id=2829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000005010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'team_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000200)={r7, 0x87e, 0x9, [0xffd6, 0x7, 0x0, 0x81, 0xe4, 0x0, 0x4, 0xb3d3, 0x3]}, &(0x7f0000000240)=0x1a) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x74, &(0x7f0000000500)={r8, 0x20, 0x30, 0x1, 0x4}, &(0x7f00000005c0)=0x18) sendmsg$AUDIT_GET_FEATURE(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3fb, 0x100, 0x70bd2c, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000600)={0x1, 'ipvlan0\x00'}, 0x18) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000600)={0x1, 'ipvlan0\x00'}, 0x18) socket$netlink(0x10, 0x3, 0xe) (async) socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r5], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008095) 18.597753986s ago: executing program 4 (id=2832): r0 = socket$netlink(0x10, 0x3, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x2e4001, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@empty, @broadcast}, 0xc) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="b4e400005e00250e000000000000000008000000", @ANYRES32=0x0, @ANYBLOB], 0x18}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000000000800000000080000100851000000600000018000000", @ANYRES32, @ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x39}, 0x94) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 18.338861937s ago: executing program 4 (id=2834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r5 = accept(r0, &(0x7f00000003c0), &(0x7f0000000440)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@gettclass={0x24, 0x2a, 0x4, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3, 0xfff3}, {0x1d, 0xb}, {0x7, 0xc}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000016c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000000)={0x4c, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @broadcast, @device_a, @from_mac=@broadcast, {0x3, 0x7}}, 0x0, @val={0x8c, 0x10, {0x283, "726712ea1b02", @short="f485b152f9066e05"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2={0xfc, 0x2, '\x00', 0xff}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x32, 0x4, 0x0, 0x3504, 0x2, 0x2}]}]}, 0xa0}}, 0x0) r8 = socket$unix(0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="260a00000000000061117c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) connect$unix(r8, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 18.273472537s ago: executing program 1 (id=2835): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = accept(r0, &(0x7f0000000740)=@caif=@dbg, &(0x7f00000007c0)=0x80) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005d090100000000007b0000000000000018010000646c6c2500000000002020207b1af8fb00000000bfa100000000000007010000f8ffffffb702000008000000b703000068030000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005d090100000000007b0000000000000018010000646c6c2500000000002020207b1af8fb00000000bfa100000000000007010000f8ffffffb702000008000000b703000068030000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000800), &(0x7f0000000880)=0x4) (async) getsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000800), &(0x7f0000000880)=0x4) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0x1bc, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0x104, 0x5, [{{@in=@remote, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000001}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x2, 0x48, 0x4, 0xffff, 0x5}, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4d4, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x0, 0x4, 0x1, 0x3, 0x0, 0x2, 0x6}, {{@in=@multicast2, 0x4d4, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3, 0x0, 0x3, 0xfffffff9, 0x103ff, 0xd9}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) (async) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0x1bc, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0x104, 0x5, [{{@in=@remote, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000001}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x2, 0x48, 0x4, 0xffff, 0x5}, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4d4, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x0, 0x4, 0x1, 0x3, 0x0, 0x2, 0x6}, {{@in=@multicast2, 0x4d4, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3, 0x0, 0x3, 0xfffffff9, 0x103ff, 0xd9}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000900)=@add_del={0x2, &(0x7f00000008c0)='veth0_to_team\x00'}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) socket(0x1e, 0x4, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x568, 0x2f8, 0x228, 0x0, 0x0, 0x3c8, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, 0x0, {[{{@ipv6={@local, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x1}, 0x0, 0x120, 0x148, 0x0, {0x7a00000010000000}, [@common=@unspec=@cluster={{0x30}, {0x4, 0xb, 0x5}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@rand_addr=' \x01\x00', [0xffffff00, 0x0, 0xffffffff, 0xff000000], 0x4e20, 0x2f, 0x6, 0x4e22, 0x0, 0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xff}, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x2b}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xffffffffffffffff}, {0x2}, 0x800001}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8fd, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 17.933529113s ago: executing program 3 (id=2838): r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x100}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000200)={{r0, &(0x7f0000000040)='%[\x00', 0x78d002, &(0x7f0000000080)={@_ha_fsid={[0x40]}, {0x0, 0x2, 0xfffffe01, 0x77f}}, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0xffff}, {[0xee4, 0x6, 0x3, 0xffffffff]}, 0xb, 0x86, &(0x7f0000000140)=""/134}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r2, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x80, 0x7e}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2010}, 0x0) socket$inet(0x2, 0x4, 0xfffffffe) sendmsg$key(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x2, 0x15, 0x2f, 0x0, 0x14, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, @in6={0xa, 0x4e21, 0x91, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, @sadb_x_sa2={0x2, 0x13, 0xf, 0x0, 0x0, 0x70bd29}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e23}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}]}, 0xa0}}, 0x24000800) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000540)={0x6, 0xffff, 0x7}, 0xc) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000580), &(0x7f00000005c0)=0x4) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000600)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000640)={'netpci0\x00', @broadcast}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000680)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) pipe(&(0x7f0000000740)={0xffffffffffffffff}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000880)={r0, &(0x7f0000000780)='\xff\xff\xff\xff\xff\xff', 0x801, &(0x7f00000007c0)={@align=0x4, {0x800, 0xfff, 0x80000001, 0x7fffffff}}, 0x5, &(0x7f0000000800), &(0x7f0000000840)=0x9}) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xb0, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xdd}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xff0c}]}, 0xb0}}, 0x44000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r1) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000000a80)={@multicast1, @loopback, 0x0}, &(0x7f0000000ac0)=0xc) sendmsg$nl_xfrm(r9, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)=@delpolicy={0x78, 0x14, 0x4, 0x70bd2a, 0x25dfdbfe, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, 0x4e22, 0x5, 0x4e22, 0x2, 0xa, 0xa0, 0x80, 0x29, r10, 0xee01}, 0x6e6bb9}, [@address_filter={0x28, 0x1a, {@in=@local, @in=@multicast2, 0x2, 0x8, 0x9}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4010}, 0x4008001) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_SET_OP_GET_BYINDEX(r11, 0x1, 0x53, &(0x7f0000000c00), &(0x7f0000000c40)=0x28) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r8, 0x400c6615, &(0x7f0000000c80)={0x0, @aes256, 0x0, @desc2}) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000d40)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x9c, r12, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x64, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) 17.632216168s ago: executing program 4 (id=2840): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r1, 0x11}, 0xa) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, r1, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="120000005400012c000000000000000007"], 0x18}}, 0x0) 17.518798268s ago: executing program 1 (id=2842): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfdbf8, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x2040080}, 0x4000000) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x3) 17.269655295s ago: executing program 4 (id=2844): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, 0x0, &(0x7f0000000300)}, 0x20) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0xfffc, 0x0, @mcast2, 0x7}, 0x1c) (async) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0xfffc, 0x0, @mcast2, 0x7}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000050) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000050) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x481}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ','}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x800a000) (async) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x481}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ','}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x800a000) sendmmsg$inet6(r1, &(0x7f0000007540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="8211", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 17.150146484s ago: executing program 0 (id=2846): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00', 0x0, 0x20, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000100)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x0, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000200)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e0000001800028014001d"], 0x48}}, 0x0) 16.904377995s ago: executing program 2 (id=2847): r0 = socket(0x23, 0x5, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) getsockname$tipc(r0, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080021"], 0x3c}}, 0x0) 16.769153368s ago: executing program 0 (id=2848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x14, 0x1, "8c7457ff8f99b8233ba7d81496e1da69"}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)={0x9, 0x6, 0x4, 0xced, 0x4, 0x0, [{0x8, 0x4, 0x7, '\x00', 0x400}, {0xe, 0xbf7, 0x3}, {0x4, 0x8001, 0x7fff, '\x00', 0x2806}, {0xffffffff, 0x0, 0x6, '\x00', 0x400}]}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) 16.628795452s ago: executing program 0 (id=2849): sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}}], 0x2, 0x0) 16.610423549s ago: executing program 2 (id=2850): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd92, &(0x7f000000cf3d)=""/195, 0x0, 0x6}, 0x48) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14, 0x80000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004040) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x66, @empty, 0x5}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000040)={0xffffffffffffffff, 0x8, 0x8, 0xfffffffe, @vifc_lcl_addr=@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r1}) 16.441729166s ago: executing program 0 (id=2851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$inet(r0, &(0x7f0000001a40)={&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, &(0x7f00000017c0)=[{&(0x7f00000001c0)="f69bdd9f171ac3d0ec94e07e649a84813ea161239500692cdb61acb2ad753864a8f2bcab8f3260d22b60783dd6b1ef8734102c", 0x33}, {&(0x7f0000000200)="c2659dbe93413505a84f58f3e32a0af165ab46ccbff17544d794f535fc7ece98903c91ac1ac763626c0774a34cf877da639d4b5f31b8084552a5a544b111875c68f1be05ab6c", 0x46}, {&(0x7f00000007c0)="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", 0x1000}], 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x4000055) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010000100ffef0000efff00001b00000a5c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d103"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 16.441406523s ago: executing program 2 (id=2852): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x1) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r1, 0x100000000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x44}}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x9}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x31, 0x1, 0xc5, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup=r1, r1, 0xa, 0x2010, 0x0, @value, @void, @void, @void, r7}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="911007000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 16.345693742s ago: executing program 2 (id=2853): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x20000000000000ba, &(0x7f0000000540)=ANY=[@ANYRESHEX=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x34, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 16.299023996s ago: executing program 0 (id=2854): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000000000000009000000000000020001"], 0x70}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {0x0, 0x10}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000180), &(0x7f00000001c0)='GPL\x00', 0xe, 0x17, &(0x7f0000000200)=""/23, 0x41000, 0x10, '\x00', 0x0, 0x18, r1, 0x8, &(0x7f0000000380)={0x4, 0x4}, 0x5b, 0x10, &(0x7f0000000480)={0x0, 0x4, 0x6, 0x2}, 0x10, 0x2c975, r1, 0x8, &(0x7f00000004c0)=[r1, r1, r1, r1, r1, r1, r1, r1, r1, r1], &(0x7f0000000500)=[{0x1, 0x5, 0x4, 0x1}, {0x4, 0x1, 0xb, 0x4}, {0x3, 0x4, 0xf, 0x1}, {0x2, 0x2, 0x5, 0xc}, {0x2, 0x4, 0x8, 0xc}, {0x1, 0x5, 0xa, 0xa}, {0x3, 0x5, 0x8, 0x2}, {0x6, 0x4, 0xd, 0x5}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0xfe86}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x200, 0x0, 0xa, 0x547b31180522e14c, 0x0, 0x3b}, {0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@multicast2, 0x4d2}, 0x0, @in6=@private1, 0xfffffffd, 0x0, 0x0, 0x0, 0x7fffffff}}, 0xe8) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.193725566s ago: executing program 2 (id=2855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) ioctl$sock_netdev_private(r1, 0x89fb, &(0x7f0000000d00)="b20d7ae419697c86da96606a5d10b86b8d14f7af2bda38c225d3eff1918f8f57b86208011fded8c176bd3fa92d4189b7fd5a80d310116e31cf984d135ba813d5945764b86e22f9300ef3eb351f4f31d06fb54b1859fd76a2dc8a34844e54148c") r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000c80)={&(0x7f00000009c0)=@hci, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a40)=""/86, 0x56}, {&(0x7f0000000ac0)=""/108, 0x6c}, {&(0x7f0000000b40)=""/27, 0x1b}, {&(0x7f0000000cc0)=""/57, 0x39}, {&(0x7f0000000bc0)=""/45, 0x2d}], 0x5}, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323900080003400000000720000480060001000002000005000200110000000c000300080001000000001e14000000110001"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a0103"], 0x28}}, 0x0) 16.175765789s ago: executing program 0 (id=2856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x40, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x10, 0x0, 0x1, [@nested={0x18, 0xb, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}, @typed={0xc, 0x133, 0x0, 0x0, @u64=0x6}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x6c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x4a, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb08002c00001c0000000001010000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e8f67a6eae8c74bb6d88367cdb0c8571c"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x6c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002fbd6ff6fc0008000300", @ANYRES32=r7, @ANYBLOB="18001d801400008006000500720000000500060000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x82c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r2) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="88000000", @ANYRES16=r10, @ANYBLOB="04002bbd7000fbdbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d6a38983088555150d2235230000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000080001007063690011000200303030303a30303a31302e30000000000800030001000000"], 0x88}, 0x1, 0x0, 0x0, 0x4008000}, 0x8050) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002cbd7000ffdbdf255300000008000300", @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x40) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x82b3, 0x56}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008040) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_NETNS_COOKIE(r5, 0x1, 0x47, &(0x7f00000002c0), &(0x7f0000000300)=0x8) socket(0x26, 0x4, 0x40) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x6e8, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x618, 0xffffffff, 0xffffffff, 0x618, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x330, 0x358, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', {0x6}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x748) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) 15.313223422s ago: executing program 2 (id=2857): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000010180)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0020380004804e2d4e3a", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x24048001}, 0x2000c000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x42}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bond0\x00', &(0x7f0000000180)=@ethtool_cmd={0x26, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="61159f00000000006113500000000000bf5000000000000004000000080000003d03010000000000250500000000000069163e0000000000bf07000000000000450607000fff0720670600003f000000160300000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e273827017826251ed834f2af97787f696649a462e7ee4bcf800000000000000000000004000bc00f679629709e75b99f9632b6ce78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1fff5f1be1969a1ba791ad46d800000000c7f26a0337302f3341eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf48903d3fc78700d429a2d4c8b6d803eb83eecfe4c700000000a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d4a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798a9c2dca871073f6bd61940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d1542c882e672fea96aedf346279ec000000000000000000000000c6427829b65ee55eef70520871b2a26df69559b5a06ad06d3d0183ae3b317478fff42cc48b461c56baea65a667000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8c30}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x7ffffffe}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) close(r3) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(r2, 0x29, 0x17, &(0x7f0000000140)=0x7, 0x4) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r7) 2.359506945s ago: executing program 32 (id=2842): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfdbf8, {0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x2040080}, 0x4000000) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x3) 2.299421401s ago: executing program 33 (id=2838): r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x100}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000200)={{r0, &(0x7f0000000040)='%[\x00', 0x78d002, &(0x7f0000000080)={@_ha_fsid={[0x40]}, {0x0, 0x2, 0xfffffe01, 0x77f}}, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0xffff}, {[0xee4, 0x6, 0x3, 0xffffffff]}, 0xb, 0x86, &(0x7f0000000140)=""/134}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r2, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x80, 0x7e}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2010}, 0x0) socket$inet(0x2, 0x4, 0xfffffffe) sendmsg$key(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x2, 0x15, 0x2f, 0x0, 0x14, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, @in6={0xa, 0x4e21, 0x91, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, @sadb_x_sa2={0x2, 0x13, 0xf, 0x0, 0x0, 0x70bd29}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e23}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}}]}, 0xa0}}, 0x24000800) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000540)={0x6, 0xffff, 0x7}, 0xc) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000580), &(0x7f00000005c0)=0x4) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000600)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000640)={'netpci0\x00', @broadcast}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000680)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff) pipe(&(0x7f0000000740)={0xffffffffffffffff}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000880)={r0, &(0x7f0000000780)='\xff\xff\xff\xff\xff\xff', 0x801, &(0x7f00000007c0)={@align=0x4, {0x800, 0xfff, 0x80000001, 0x7fffffff}}, 0x5, &(0x7f0000000800), &(0x7f0000000840)=0x9}) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000009c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xb0, r6, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xdd}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x70, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xe}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xff0c}]}, 0xb0}}, 0x44000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r1) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000000a80)={@multicast1, @loopback, 0x0}, &(0x7f0000000ac0)=0xc) sendmsg$nl_xfrm(r9, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)=@delpolicy={0x78, 0x14, 0x4, 0x70bd2a, 0x25dfdbfe, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, 0x4e22, 0x5, 0x4e22, 0x2, 0xa, 0xa0, 0x80, 0x29, r10, 0xee01}, 0x6e6bb9}, [@address_filter={0x28, 0x1a, {@in=@local, @in=@multicast2, 0x2, 0x8, 0x9}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4010}, 0x4008001) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP_SET_OP_GET_BYINDEX(r11, 0x1, 0x53, &(0x7f0000000c00), &(0x7f0000000c40)=0x28) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r8, 0x400c6615, &(0x7f0000000c80)={0x0, @aes256, 0x0, @desc2}) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000d40)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x9c, r12, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x64, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) 1.242151234s ago: executing program 34 (id=2844): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, 0x0, &(0x7f0000000300)}, 0x20) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0xfffc, 0x0, @mcast2, 0x7}, 0x1c) (async) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0xfffc, 0x0, @mcast2, 0x7}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000050) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000050) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x481}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ','}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x800a000) (async) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x481}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, ','}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000800}, 0x800a000) sendmmsg$inet6(r1, &(0x7f0000007540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="8211", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 139.074305ms ago: executing program 35 (id=2856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x40, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x10, 0x0, 0x1, [@nested={0x18, 0xb, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}, @typed={0xc, 0x133, 0x0, 0x0, @u64=0x6}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x6c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x4a, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb08002c00001c0000000001010000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e8f67a6eae8c74bb6d88367cdb0c8571c"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x6c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002fbd6ff6fc0008000300", @ANYRES32=r7, @ANYBLOB="18001d801400008006000500720000000500060000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x82c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r2) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="88000000", @ANYRES16=r10, @ANYBLOB="04002bbd7000fbdbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d6a38983088555150d2235230000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000080001007063690011000200303030303a30303a31302e30000000000800030001000000"], 0x88}, 0x1, 0x0, 0x0, 0x4008000}, 0x8050) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002cbd7000ffdbdf255300000008000300", @ANYRES32=r12], 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x40) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x82b3, 0x56}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008040) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_NETNS_COOKIE(r5, 0x1, 0x47, &(0x7f00000002c0), &(0x7f0000000300)=0x8) socket(0x26, 0x4, 0x40) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x6e8, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x618, 0xffffffff, 0xffffffff, 0x618, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x330, 0x358, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', {0x6}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xc4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xffffffffffffffff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x8000, 0x16a, 0x1, 'syz1\x00', 'syz0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x748) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) 0s ago: executing program 36 (id=2857): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000010180)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0020380004804e2d4e3a", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x24048001}, 0x2000c000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x42}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bond0\x00', &(0x7f0000000180)=@ethtool_cmd={0x26, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x4, 0x0, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8c30}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x7ffffffe}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) close(r3) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(r2, 0x29, 0x17, &(0x7f0000000140)=0x7, 0x4) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r7) kernel console output (not intermixed with test programs): 2941][T13448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1907'. [ 323.582970][T13448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1907'. [ 323.807965][T13458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1908'. [ 323.852498][T13457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1909'. [ 323.889331][T13462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.910213][T13463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.918297][T13460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1910'. [ 323.925315][T13465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.925684][T13460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1910'. [ 324.007280][T13469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1912'. [ 324.047601][T13460] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1910'. [ 324.064785][T13472] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1913'. [ 324.064813][T13472] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1913'. [ 324.568467][T13496] ip6gre1: entered allmulticast mode [ 324.918612][T13483] netlink: 'syz.3.1916': attribute type 142 has an invalid length. [ 325.140672][T13492] infiniband syz2: set down [ 325.140695][T13492] infiniband syz2: added ipvlan1 [ 325.201925][T13492] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 325.201980][T13492] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 325.202019][T13492] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 325.327914][T13492] RDS/IB: syz2: added [ 325.337481][T13492] smc: adding ib device syz2 with port count 1 [ 325.337703][T13492] smc: ib device syz2 port 1 has no pnetid [ 325.440587][T13519] netlink: 'syz.3.1925': attribute type 83 has an invalid length. [ 325.462321][T13515] bond8: option lp_interval: invalid value (0) [ 325.462349][T13515] bond8: option lp_interval: allowed values 1 - 2147483647 [ 325.467424][T13515] bond8 (unregistering): Released all slaves [ 325.789058][T13530] tipc: Enabled bearer , priority 0 [ 325.801247][T13522] xt_CT: No such helper "snmp_trap" [ 325.807628][T13530] syzkaller0: MTU too low for tipc bearer [ 325.807651][T13530] tipc: Disabling bearer [ 325.875799][T13523] xt_CT: No such helper "snmp_trap" [ 325.918206][T13533] netlink: 'syz.3.1929': attribute type 4 has an invalid length. [ 325.983521][T13535] ip_tables: iptables: counters copy to user failed while replacing table [ 326.108349][T13538] netlink: 'syz.4.1930': attribute type 1 has an invalid length. [ 326.179216][T13538] 8021q: adding VLAN 0 to HW filter on device bond6 [ 326.559965][T13557] xt_TCPMSS: Only works on TCP SYN packets [ 326.587023][T13557] netlink: 'syz.0.1935': attribute type 12 has an invalid length. [ 326.695550][T13557] bond8: option primary_reselect: invalid value (255) [ 326.701001][T13557] bond8 (unregistering): Released all slaves [ 327.001692][T13575] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 328.397165][T13630] xt_CT: No such helper "netbios-ns" [ 328.640156][T13646] netlink: 'syz.4.1959': attribute type 11 has an invalid length. [ 328.644805][T13646] __nla_validate_parse: 10 callbacks suppressed [ 328.644823][T13646] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1959'. [ 329.046140][T13659] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 329.230254][T13669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1968'. [ 329.264204][T13669] 8021q: adding VLAN 0 to HW filter on device bond10 [ 329.317595][T13670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1967'. [ 329.362578][T13673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1969'. [ 329.517521][T13679] netlink: 'syz.2.1969': attribute type 1 has an invalid length. [ 330.119825][T13714] x_tables: unsorted entry at hook 2 [ 330.339191][T13719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1981'. [ 330.401451][T13722] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1982'. [ 330.405736][T13722] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 330.405753][T13722] IPv6: NLM_F_CREATE should be set when creating new route [ 330.406066][T13722] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1982'. [ 330.464145][T13728] netlink: 'syz.3.1982': attribute type 6 has an invalid length. [ 330.483812][T13726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1983'. [ 330.497818][T13726] vlan2: entered promiscuous mode [ 332.319325][T13673] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 332.363473][T13736] netlink: 'syz.4.1985': attribute type 1 has an invalid length. [ 332.363499][T13736] netlink: 'syz.4.1985': attribute type 2 has an invalid length. [ 332.528101][ T31] audit: type=1107 audit(1790056406.263:5): pid=13758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='²1hÅÀºìõøú½‰dR+û³UNÉúeÖR¸“ú6ìÐØ²b²1aÊaó$ÇÎgâÊe.òò�‰�±'N‘hk€×F ' [ 332.528361][T13759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1987'. [ 332.894289][T13784] netlink: 'syz.2.1993': attribute type 1 has an invalid length. [ 332.933591][T13784] 8021q: adding VLAN 0 to HW filter on device bond12 [ 332.939230][T13784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1993'. [ 333.038319][T13784] bond12: (slave geneve2): making interface the new active one [ 333.048300][T13784] bond12: (slave geneve2): Enslaving as an active interface with an up link [ 333.170459][T13790] erspan0: entered promiscuous mode [ 333.170518][T13795] netlink: 'syz.0.1996': attribute type 2 has an invalid length. [ 333.170730][T13790] vlan4: entered promiscuous mode [ 333.195437][T13797] netlink: 'syz.0.1996': attribute type 2 has an invalid length. [ 333.543970][T13807] smbdirect: ib_dev[syz0] removed [ 333.680478][T13818] __nla_validate_parse: 5 callbacks suppressed [ 333.680500][T13818] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2004'. [ 334.250139][T13841] IPVS: length: 121 != 8 [ 334.286687][T13846] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2013'. [ 334.737908][T13868] netlink: 'syz.4.2019': attribute type 2 has an invalid length. [ 334.839528][T13872] netlink: 'syz.4.2019': attribute type 2 has an invalid length. [ 334.861168][T13879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2020'. [ 334.881335][T13879] netdevsim netdevsim3: Direct firmware load for ÿ failed with error -2 [ 334.881365][T13879] netdevsim netdevsim3: Falling back to sysfs fallback for: ÿ [ 334.933154][T13883] Cannot find set identified by id 4 to match [ 334.958491][T13882] netlink: 'syz.3.2020': attribute type 4 has an invalid length. [ 335.189100][T13895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2025'. [ 335.197932][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.197969][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.197993][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.198016][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.198039][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.198062][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.198093][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.198116][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.198139][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.198162][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.198185][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.198208][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.200558][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.200591][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.200614][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.200637][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.200660][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.200683][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.200706][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.200729][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.200752][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.200775][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.200798][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.200821][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.200844][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.200867][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.200890][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.200912][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.200935][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.200958][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.200981][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.201005][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.201030][T13894] IPVS: set_ctl: invalid protocol: 0 172.20.20.18:20001 [ 335.579648][T13907] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2027'. [ 335.579856][T13907] 0·: renamed from hsr0 (while UP) [ 335.617737][T13907] 0·: entered allmulticast mode [ 335.617763][T13907] hsr_slave_0: entered allmulticast mode [ 335.617802][T13907] hsr_slave_1: entered allmulticast mode [ 335.623490][T13907] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 335.744870][T13913] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 335.747490][T13911] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2028'. [ 335.771958][ T30] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 335.800807][T13911] gretap0: entered promiscuous mode [ 335.811958][T13917] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2030'. [ 336.114188][T13923] bond13: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 336.192444][ T30] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 336.200574][T13935] netlink: 'syz.1.2035': attribute type 1 has an invalid length. [ 336.201539][T13937] netlink: 'syz.1.2035': attribute type 1 has an invalid length. [ 336.204995][T13920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.240935][T13936] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 336.296540][T13935] 8021q: adding VLAN 0 to HW filter on device bond7 [ 336.300002][T13920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2032'. [ 336.300100][T13920] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2032'. [ 336.411043][T13947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2037'. [ 336.454897][T13941] bond7: (slave veth3): Enslaving as an active interface with a down link [ 336.507408][T13942] bond7: (slave veth5): Enslaving as an active interface with a down link [ 336.508296][T13940] veth0_to_bond: entered allmulticast mode [ 336.569817][T13935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.579018][T13935] bond7: (slave batadv0): making interface the new active one [ 336.581930][T13935] batadv0: entered promiscuous mode [ 336.586769][T13935] bond7: (slave batadv0): Enslaving as an active interface with an up link [ 336.621640][T13937] bond7: (slave veth7): Enslaving as an active interface with a down link [ 336.786794][T13967] netlink: 'syz.1.2040': attribute type 1 has an invalid length. [ 336.786828][T13967] netlink: 'syz.1.2040': attribute type 2 has an invalid length. [ 336.787144][T13968] netlink: 'syz.1.2040': attribute type 1 has an invalid length. [ 336.787162][T13968] netlink: 'syz.1.2040': attribute type 2 has an invalid length. [ 337.124888][T13979] netlink: 'syz.1.2043': attribute type 11 has an invalid length. [ 337.407782][T13990] sock: sock_timestamping_bind_phc: sock not bind to device [ 337.583335][T13994] bond14: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 337.678172][T14001] nbd2: detected capacity change from 0 to 63 [ 337.729289][T14005] nbd3: detected capacity change from 0 to 63 [ 337.757888][ T5618] block nbd2: Receive control failed (result -104) [ 337.759972][ T5621] block nbd3: Receive control failed (result -32) [ 338.370071][T14048] 8021q: adding VLAN 0 to HW filter on device bond8 [ 339.038839][T14079] __nla_validate_parse: 8 callbacks suppressed [ 339.038861][T14079] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2065'. [ 339.082896][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2065'. [ 339.104822][T14080] netlink: 'syz.4.2066': attribute type 1 has an invalid length. [ 339.316774][T14089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2068'. [ 339.384425][T14093] openvswitch: netlink: IPv6 tunnel dst address is zero [ 339.498725][ T5621] Bluetooth: hci2: unexpected cc 0x2003 length: 0 < 9 [ 339.508088][T14098] xt_TCPMSS: Only works on TCP SYN packets [ 339.509940][ T5621] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 339.740179][T14111] netlink: zone id is out of range [ 339.740216][T14111] netlink: zone id is out of range [ 339.740360][T14111] netlink: zone id is out of range [ 339.740388][T14111] netlink: zone id is out of range [ 339.740861][T14111] netlink: zone id is out of range [ 340.385819][T14139] Bluetooth: ISO socket layer initialized [ 340.502490][T14145] sctp: [Deprecated]: syz.3.2083 (pid 14145) Use of int in max_burst socket option. [ 340.502490][T14145] Use struct sctp_assoc_value instead [ 340.713669][T14155] sctp: [Deprecated]: syz.3.2083 (pid 14155) Use of int in max_burst socket option. [ 340.713669][T14155] Use struct sctp_assoc_value instead [ 341.475235][T14128] batman_adv: batadv0: Interface deactivated: gretap1 [ 341.602486][ T6550] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.602592][ T6550] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.602644][ T6550] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.602680][ T6550] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.619290][T14150] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2083'. [ 341.673215][T14161] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2083'. [ 342.985690][T14226] net_ratelimit: 3 callbacks suppressed [ 342.985714][T14226] openvswitch: netlink: Invalid VLAN frame [ 343.075466][T14233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2098'. [ 343.404733][T14253] netlink: 'syz.1.2104': attribute type 11 has an invalid length. [ 343.576345][ T5621] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 343.576418][ T5621] Bluetooth: hci2: Injecting HCI hardware error event [ 343.578706][ T5618] Bluetooth: hci2: hardware error 0x00 [ 343.643782][T14256] IPVS: length: 140 != 24 [ 343.875763][T14268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.927612][T14271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2110'. [ 343.980583][T14273] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2110'. [ 343.997551][T14258] syz_tun: entered allmulticast mode [ 344.012415][T14277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2110'. [ 344.014842][T14273] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2110'. [ 344.222988][T14273] __nla_validate_parse: 1 callbacks suppressed [ 344.223011][T14273] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2110'. [ 344.223061][T14273] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2110'. [ 344.247773][T14283] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2113'. [ 344.427789][T14273] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2110'. [ 344.427846][T14273] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2110'. [ 344.898995][T14322] xt_ecn: cannot match TCP bits for non-tcp packets [ 345.283577][T14340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2122'. [ 345.295548][T14340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2122'. [ 345.317835][T14341] netlink: 'syz.0.2119': attribute type 1 has an invalid length. [ 345.317861][T14341] nbd: error processing sock list [ 345.466788][T14348] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2124'. [ 345.732499][ T5618] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 345.879642][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2130'. [ 345.903222][T14368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2130'. [ 346.018820][T14373] ip_tables: iptables: counters copy to user failed while replacing table [ 346.173327][T14379] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 346.375477][T14380] macvlan3: entered promiscuous mode [ 346.375505][T14380] macvlan3: entered allmulticast mode [ 347.094819][T14433] bond9: option all_slaves_active: invalid value (179) [ 347.098856][T14433] bond9 (unregistering): Released all slaves [ 347.617046][T11388] batadv0: left promiscuous mode [ 348.016487][T14488] netlink: 'syz.1.2159': attribute type 11 has an invalid length. [ 348.677873][T14516] netlink: 'syz.4.2164': attribute type 10 has an invalid length. [ 348.725235][T14513] hsr_slave_1 (unregistering): left promiscuous mode [ 348.744630][T14515] ÿÿÿÿÿÿ: renamed from virt_wifi0 (while UP) [ 348.758311][T14519] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 348.768836][T14519] netlink: 'syz.0.2166': attribute type 2 has an invalid length. [ 349.045383][T14530] xt_CT: You must specify a L4 protocol and not use inversions on it [ 349.420744][T14559] __nla_validate_parse: 8 callbacks suppressed [ 349.420788][T14559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2179'. [ 349.420842][T14559] IPv6: Can't replace route, no match found [ 349.711033][T14575] openvswitch: netlink: Missing key (keys=40, expected=100) [ 350.011452][T14602] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2188'. [ 350.191232][T14608] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 350.266343][T14610] netlink: 'syz.1.2192': attribute type 4 has an invalid length. [ 350.266369][T14610] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2192'. [ 350.292997][T14610] .`: renamed from bond0 (while UP) [ 350.339229][T14612] netlink: 'syz.0.2193': attribute type 3 has an invalid length. [ 351.017953][T14639] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2204'. [ 351.070036][T14645] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2203'. [ 351.376156][T14658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2207'. [ 351.376184][T14658] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2207'. [ 351.398659][T14660] veth0: entered promiscuous mode [ 351.614789][ T30] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 351.717050][T14667] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 351.804670][T14659] veth0: left promiscuous mode [ 352.014585][T14687] Bluetooth: hci0: unsupported parameter 5134 [ 352.014612][T14687] Bluetooth: hci0: invalid len left 9, exp >= 101 [ 352.268014][T14697] syzkaller0: entered promiscuous mode [ 352.268040][T14697] syzkaller0: entered allmulticast mode [ 352.396859][T14706] ip6t_hbh: Not strict - not implemented [ 352.518089][T14709] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.545365][ T30] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 352.587473][T14710] netlink: 'syz.0.2224': attribute type 10 has an invalid length. [ 352.589428][T14710] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.589704][T14710] bridge0: left allmulticast mode [ 352.863642][T14730] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2229'. [ 352.863670][T14730] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2229'. [ 353.129689][T14741] xt_hashlimit: size too large, truncated to 1048576 [ 353.431826][T14760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2242'. [ 353.892412][T14790] netlink: 'syz.0.2250': attribute type 2 has an invalid length. [ 354.221675][T14808] dvmrp1: entered allmulticast mode [ 354.601532][T14824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2258'. [ 354.629115][T14824] x_tables: duplicate underflow at hook 1 [ 354.650580][T14824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2258'. [ 354.662423][T14824] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2258'. [ 354.728775][T14827] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2259'. [ 354.825027][T14832] sock: sock_timestamping_bind_phc: sock not bind to device [ 354.981608][T14830] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2259'. [ 355.237939][T14853] can: request_module (can-proto-3) failed. [ 355.307772][T14862] smc: net device lo applied user defined pnetid SYZ0 [ 355.307947][T14862] smc: smcd device lo applied user defined pnetid SYZ0 [ 355.410002][T14867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2269'. [ 355.508062][T14881] IPVS: length: 250 != 24 [ 355.966581][T14894] 8021q: VLANs not supported on ip6gre0 [ 356.019049][T14898] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2278'. [ 356.325919][T14913] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2282'. [ 356.474844][T14923] sctp: [Deprecated]: syz.3.2285 (pid 14923) Use of struct sctp_assoc_value in delayed_ack socket option. [ 356.474844][T14923] Use struct sctp_sack_info instead [ 356.481028][T14926] netlink: 4384 bytes leftover after parsing attributes in process `syz.2.2281'. [ 356.563430][T14932] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2286'. [ 357.054072][ T6549] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.054109][ T6549] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.224483][T14961] openvswitch: netlink: VLAN attribute unexpected. [ 357.228396][T14963] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 357.359008][T14970] netlink: 'syz.2.2298': attribute type 2 has an invalid length. [ 357.359173][T14970] netlink: 'syz.2.2298': attribute type 2 has an invalid length. [ 357.359319][T14970] netlink: 'syz.2.2298': attribute type 2 has an invalid length. [ 357.359429][T14970] netlink: 'syz.2.2298': attribute type 2 has an invalid length. [ 357.359536][T14970] netlink: 'syz.2.2298': attribute type 2 has an invalid length. [ 357.359642][T14970] netlink: 'syz.2.2298': attribute type 2 has an invalid length. [ 357.359783][T14970] netlink: 'syz.2.2298': attribute type 2 has an invalid length. [ 357.359902][T14970] netlink: 'syz.2.2298': attribute type 2 has an invalid length. [ 357.360032][T14970] netlink: 'syz.2.2298': attribute type 2 has an invalid length. [ 357.360149][T14970] netlink: 'syz.2.2298': attribute type 2 has an invalid length. [ 357.683691][T14991] rdma_rxe: rxe_newlink: failed to add wg1 [ 357.809757][T14996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.974775][T15003] wireguard0: entered promiscuous mode [ 358.618974][T15038] nbd: must specify a device to reconfigure [ 358.668875][T15040] block nbd4: Unsupported socket: should be TCP or UNIX. [ 359.134010][T15062] syzkaller0: entered promiscuous mode [ 359.134036][T15062] syzkaller0: entered allmulticast mode [ 359.198795][T15066] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.219133][T15066] bond0: (slave team0): Enslaving as an active interface with an up link [ 360.220359][T15132] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 360.230217][T15135] netlink: NAT attribute has 1 unknown bytes [ 360.230282][T15135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.230862][T15136] netlink: NAT attribute has 1 unknown bytes [ 360.230889][T15136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.293718][ T6556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.316016][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.317019][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.317400][T14157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.389516][T15138] x_tables: ip6_tables: CT target: only valid in raw table, not nl80211 [ 360.633215][T15155] __nla_validate_parse: 12 callbacks suppressed [ 360.633238][T15155] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2353'. [ 360.832322][ T3305] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.832372][ T3305] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.832406][ T3305] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.832440][ T3305] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 361.255747][T15182] geneve3: entered promiscuous mode [ 361.255775][T15182] geneve3: entered allmulticast mode [ 361.275124][ T3305] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 361.275187][ T3305] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 361.275222][ T3305] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 361.303460][T15175] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2360'. [ 361.310041][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2360'. [ 361.313535][T15182] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2360'. [ 361.605349][T15192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2362'. [ 361.726580][T15200] ip6t_hbh: too many supported opts specified [ 362.206679][T15225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2372'. [ 362.206709][T15225] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2372'. [ 362.409126][T15230] syzkaller1: entered promiscuous mode [ 362.409151][T15230] syzkaller1: entered allmulticast mode [ 362.473822][T14173] net_ratelimit: 2 callbacks suppressed [ 362.473871][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.799892][T15251] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2378'. [ 362.925650][T15242] syzkaller1: entered promiscuous mode [ 362.925676][T15242] syzkaller1: entered allmulticast mode [ 363.085333][T15283] validate_nla: 3 callbacks suppressed [ 363.085381][T15283] netlink: 'syz.4.2383': attribute type 21 has an invalid length. [ 363.085395][T15283] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2383'. [ 363.085473][T15283] netlink: 'syz.4.2383': attribute type 5 has an invalid length. [ 363.085487][T15283] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2383'. [ 363.263251][T15289] vlan4: entered promiscuous mode [ 363.263274][T15289] geneve1: entered promiscuous mode [ 363.263467][T15289] vlan4: entered allmulticast mode [ 363.263481][T15289] geneve1: entered allmulticast mode [ 363.416917][T15275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.420819][T15303] pim6reg: entered allmulticast mode [ 363.421288][T15301] tipc: Started in network mode [ 363.421312][T15301] tipc: Node identity ac1414aa, cluster identity 4711 [ 363.421551][T15301] tipc: New replicast peer: 172.20.20.187 [ 363.421758][T15301] tipc: Enabled bearer , priority 10 [ 363.458892][T15303] pim6reg: left allmulticast mode [ 363.496573][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.606802][T15309] bond0: (slave ip6tnl0): refused to change device type [ 363.814208][T15327] netlink: 'syz.0.2396': attribute type 5 has an invalid length. [ 363.814234][T15327] netlink: 'syz.0.2396': attribute type 9 has an invalid length. [ 364.051396][T15338] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 364.242412][ T31] audit: type=1800 audit(1790056437.983:6): pid=15342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2403" name="memory.events" dev="tmpfs" ino=2229 res=0 errno=0 [ 364.293295][ T31] audit: type=1804 audit(1790056438.023:7): pid=15342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2403" name="/newroot/433/memory.events" dev="tmpfs" ino=2229 res=1 errno=0 [ 364.306098][T15358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.363231][T15342] openvswitch: netlink: IP tunnel dst address not specified [ 364.363537][T15342] openvswitch: netlink: IP tunnel dst address not specified [ 364.363785][T15342] openvswitch: netlink: IP tunnel dst address not specified [ 364.364037][T15342] openvswitch: netlink: IP tunnel dst address not specified [ 364.364354][T15342] openvswitch: netlink: IP tunnel dst address not specified [ 364.364602][T15342] openvswitch: netlink: IP tunnel dst address not specified [ 364.368276][T15342] openvswitch: netlink: IP tunnel dst address not specified [ 364.402480][T15363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.535399][T14173] tipc: Node number set to 2886997162 [ 364.743602][T15380] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 364.843028][T15385] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20004 [ 366.084412][T15460] __nla_validate_parse: 8 callbacks suppressed [ 366.084435][T15460] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2436'. [ 366.353963][T15467] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.638668][T15485] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2444'. [ 366.638701][T15485] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2444'. [ 366.638718][T15485] netlink: 'syz.2.2444': attribute type 6 has an invalid length. [ 366.638731][T15485] netlink: 'syz.2.2444': attribute type 5 has an invalid length. [ 366.638744][T15485] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2444'. [ 366.658335][T15479] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2442'. [ 367.653635][T14174] net_ratelimit: 31 callbacks suppressed [ 367.653661][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.760054][T15516] xt_time: unknown flags 0x68 [ 367.760907][T15516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2450'. [ 367.870739][T15520] ip_tables: iptables: counters copy to user failed while replacing table [ 367.982687][ T1973] block nbd2: Possible stuck request ffff888027155080: control (read@0,1024B). Runtime 30 seconds [ 367.983576][ T1973] block nbd2: Possible stuck request ffff888027155240: control (read@1024,1024B). Runtime 30 seconds [ 367.983611][ T1973] block nbd2: Possible stuck request ffff888027155400: control (read@2048,1024B). Runtime 30 seconds [ 367.983636][ T1973] block nbd2: Possible stuck request ffff8880271555c0: control (read@3072,1024B). Runtime 30 seconds [ 367.994786][ T1973] block nbd3: Possible stuck request ffff8880271be000: control (read@0,1024B). Runtime 30 seconds [ 367.994827][ T1973] block nbd3: Possible stuck request ffff8880271be1c0: control (read@1024,1024B). Runtime 30 seconds [ 367.994853][ T1973] block nbd3: Possible stuck request ffff8880271be380: control (read@2048,1024B). Runtime 30 seconds [ 367.994879][ T1973] block nbd3: Possible stuck request ffff8880271be540: control (read@3072,1024B). Runtime 30 seconds [ 368.405063][T15537] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2458'. [ 368.415471][T15535] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.415642][T15535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.502705][T15539] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2459'. [ 368.570512][T15549] netlink: 'syz.0.2462': attribute type 5 has an invalid length. [ 368.696196][T15539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2459'. [ 368.702065][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.766816][T15546] netlink: 'syz.3.2458': attribute type 4 has an invalid length. [ 368.858199][T15564] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2464'. [ 369.092669][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.093588][T15580] vlan2: entered promiscuous mode [ 369.093722][ T49] wlan1: Trigger new scan to find an IBSS to join [ 369.205679][T15592] netlink: 'syz.3.2469': attribute type 1 has an invalid length. [ 369.248015][T15597] ieee802154 phy0 wpan0: encryption failed: -22 [ 369.495455][T15274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.658095][T15614] block nbd1: NBD_DISCONNECT [ 369.658128][T15614] block nbd1: Send disconnect failed -32 [ 369.658148][T15614] block nbd1: Send disconnect failed -32 [ 369.658166][T15614] block nbd1: shutting down sockets [ 369.708668][T15618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.737493][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.050411][T15628] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 370.094628][T15628] xt_hashlimit: size too large, truncated to 1048576 [ 370.273616][T15634] Bluetooth: hci0: unsupported parameter 5135 [ 370.273643][T15634] Bluetooth: hci0: unsupported parameter 8192 [ 370.273655][T15634] Bluetooth: hci0: unsupported parameter 5135 [ 370.273668][T15634] Bluetooth: hci0: unsupported parameter 8192 [ 370.776918][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.243034][T15669] __nla_validate_parse: 19 callbacks suppressed [ 371.243057][T15669] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2489'. [ 371.674703][T15680] 8021q: adding VLAN 0 to HW filter on device bond9 [ 371.700156][T15689] syzkaller0: entered promiscuous mode [ 371.700183][T15689] syzkaller0: entered allmulticast mode [ 371.788759][T15678] TC_ACT_REPEAT abuse ? [ 371.789097][T15693] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2495'. [ 371.826921][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.384552][T15707] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2499'. [ 372.518686][T15713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2500'. [ 372.765316][T15275] net_ratelimit: 2 callbacks suppressed [ 372.765339][T15275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.861145][T15706] 8021q: adding VLAN 0 to HW filter on device .` [ 372.893806][T15706] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.944830][T15706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.972403][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.251236][T15706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 373.251263][T15706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 373.314143][T15706] veth1_vlan: left promiscuous mode [ 373.409510][T15706] veth1_vlan: entered promiscuous mode [ 373.509893][T15706] veth0_macvtap: left promiscuous mode [ 373.534239][T15706] veth0_macvtap: entered promiscuous mode [ 373.548769][T15706] veth1_macvtap: entered promiscuous mode [ 373.681857][T15706] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.800599][T15706] 8021q: adding VLAN 0 to HW filter on device bond2 [ 373.906275][T15706] 8021q: adding VLAN 0 to HW filter on device bond3 [ 373.946552][T15706] 8021q: adding VLAN 0 to HW filter on device bond4 [ 373.970588][T15706] 8021q: adding VLAN 0 to HW filter on device bond5 [ 373.989761][T15706] batman_adv: batadv0: Interface activated: gretap1 [ 374.015821][T15706] 8021q: adding VLAN 0 to HW filter on device bond6 [ 374.069797][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.085969][T15706] 8021q: adding VLAN 0 to HW filter on device bond7 [ 374.136558][ T61] wlan1: Trigger new scan to find an IBSS to join [ 374.259200][T15706] 8021q: adding VLAN 0 to HW filter on device bond8 [ 374.331837][T15706] 8021q: adding VLAN 0 to HW filter on device eth0 [ 374.376797][T15706] 8021q: adding VLAN 0 to HW filter on device eth1 [ 374.391320][T15706] 8021q: adding VLAN 0 to HW filter on device eth2 [ 374.395341][T15706] 8021q: adding VLAN 0 to HW filter on device eth3 [ 374.480117][T15706] 8021q: adding VLAN 0 to HW filter on device bond9 [ 374.527820][T15706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.555952][T15706] 8021q: adding VLAN 0 to HW filter on device bond10 [ 374.557820][T15706] 8021q: adding VLAN 0 to HW filter on device bond11 [ 374.559826][T15706] 8021q: adding VLAN 0 to HW filter on device bond12 [ 374.594075][T15706] 8021q: adding VLAN 0 to HW filter on device bond13 [ 374.595908][T15706] 8021q: adding VLAN 0 to HW filter on device bond14 [ 374.600231][T15706] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 374.606175][ T3305] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.606205][ T3305] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.607410][ T3305] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.607441][ T3305] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.608405][ T3305] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.608435][ T3305] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.683605][ T6556] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.683637][ T6556] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.799201][T15726] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2503'. [ 375.073627][ T3305] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 375.104918][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.137537][T11389] wlan1: Creating new IBSS network, BSSID 52:ed:f0:5d:5a:ac [ 375.702469][T15796] netlink: 'syz.1.2512': attribute type 1 has an invalid length. [ 375.732513][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.794488][T15811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2512'. [ 375.807872][T15795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.821893][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.017758][T15794] bond15 (unregistering): Released all slaves [ 376.139977][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.485240][T15796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.609419][T15832] atomic_op ffff88807bd949e0 conn xmit_atomic 0000000000000000 [ 377.177804][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.434254][T15857] netlink: 'syz.3.2523': attribute type 21 has an invalid length. [ 377.929960][T15876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2527'. [ 377.959773][T15876] netlink: 'syz.2.2527': attribute type 1 has an invalid length. [ 377.959799][T15876] netlink: 756 bytes leftover after parsing attributes in process `syz.2.2527'. [ 378.235802][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.254226][T15879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2529'. [ 378.389704][T15881] netlink: 'syz.3.2529': attribute type 1 has an invalid length. [ 378.577643][T15881] bond9: entered promiscuous mode [ 378.577694][T15881] bond9: entered allmulticast mode [ 378.578920][T15881] 8021q: adding VLAN 0 to HW filter on device bond9 [ 378.718343][T15883] erspan1: entered allmulticast mode [ 378.856803][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 378.859493][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.859722][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.873780][T15274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.254806][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.287837][T15917] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2538'. [ 379.304306][T15918] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2538'. [ 379.432869][T15919] ipt_ECN: cannot use operation on non-tcp rule [ 379.496512][T15920] netlink: 'syz.3.2536': attribute type 1 has an invalid length. [ 379.496770][T15920] netlink: 'syz.3.2536': attribute type 1 has an invalid length. [ 380.052196][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 380.281484][T15944] netlink: 'syz.1.2545': attribute type 10 has an invalid length. [ 380.294508][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.518651][T15944] netlink: 'syz.1.2545': attribute type 2 has an invalid length. [ 380.518679][T15944] netlink: 'syz.1.2545': attribute type 11 has an invalid length. [ 380.518692][T15944] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2545'. [ 380.637053][T15974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2549'. [ 380.691440][T15949] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 380.887460][T15977] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2550'. [ 381.346994][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.901044][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.258996][T16026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2561'. [ 382.327079][T16026] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 382.376018][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.404458][T16031] netlink: 'syz.1.2564': attribute type 3 has an invalid length. [ 382.407077][T16031] tc_dump_action: action bad kind [ 382.479380][T16035] netlink: 'syz.4.2563': attribute type 1 has an invalid length. [ 382.769148][T16046] syzkaller1: entered promiscuous mode [ 382.769425][T16046] syzkaller1: entered allmulticast mode [ 383.413749][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.463799][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.779088][T16015] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 384.934284][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.035534][T16073] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2571'. [ 385.110585][T16074] netlink: 'syz.3.2569': attribute type 5 has an invalid length. [ 385.170931][T16074] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 385.251223][T16085] netlink: 'syz.3.2569': attribute type 5 has an invalid length. [ 385.305478][T16082] tipc: Enabled bearer , priority 0 [ 385.310160][T16090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2572'. [ 385.325481][T16091] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 385.364808][T16082] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 385.364849][T16082] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 385.495680][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.528373][T16097] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1514) ! [ 385.550356][T16099] tipc: Resetting bearer [ 385.877344][T16105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2578'. [ 385.915925][T16107] ip_tables: iptables: counters copy to user failed while replacing table [ 385.968517][T16112] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2581'. [ 386.229732][T16105] macvtap1: entered promiscuous mode [ 386.231383][T16105] macvtap1: entered allmulticast mode [ 386.231405][T16105] vlan0: entered allmulticast mode [ 386.231419][T16105] veth0_vlan: entered allmulticast mode [ 386.306865][T16125] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 8388609, id = 0 [ 386.532407][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 386.545283][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.676934][T16133] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2587'. [ 386.806488][T16139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2585'. [ 387.574076][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.974431][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.470465][T16140] netlink: 'syz.4.2588': attribute type 3 has an invalid length. [ 388.642471][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.834896][T16170] sock: sock_timestamping_bind_phc: sock not bind to device [ 389.414382][T16188] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2598'. [ 389.424054][T16188] ipt_REJECT: TCP_RESET invalid for non-tcp [ 389.458137][T16191] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2599'. [ 389.458180][T16191] netlink: 'syz.1.2599': attribute type 7 has an invalid length. [ 389.458195][T16191] netlink: 'syz.1.2599': attribute type 8 has an invalid length. [ 389.458208][T16191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2599'. [ 389.546853][T16191] bridge0: entered promiscuous mode [ 389.600005][T16191] ip6gretap0: entered promiscuous mode [ 389.606509][T16200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2602'. [ 389.626892][T16191] gretap0: entered promiscuous mode [ 389.630094][T16191] debugfs: 'hsr0' already exists in 'hsr' [ 389.630119][T16191] Cannot create hsr debugfs directory [ 389.653645][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.448953][T16224] netlink: 6248 bytes leftover after parsing attributes in process `syz.2.2607'. [ 390.585718][T16230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2609'. [ 390.816137][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.031241][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.172524][T16251] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2613'. [ 391.172553][T16251] nbd: illegal input index 65508 [ 391.206714][T16251] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2613'. [ 391.502312][T16257] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2614'. [ 391.521417][T16260] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2614'. [ 392.150917][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.280949][T16234] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 392.280988][T16234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.429389][T16283] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2618'. [ 392.484070][T16285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2619'. [ 392.484449][T16285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2619'. [ 393.129379][T16308] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2624'. [ 393.208083][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.252547][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.460973][T16309] Cannot find del_set index 3 as target [ 393.857749][T16316] bond11: entered promiscuous mode [ 393.857773][T16316] bond11: entered allmulticast mode [ 394.052514][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.247210][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.903269][T16359] xt_cluster: node mask cannot exceed total number of nodes [ 395.284756][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.381210][T16382] netlink: 'syz.2.2645': attribute type 3 has an invalid length. [ 395.466154][T16385] __nla_validate_parse: 8 callbacks suppressed [ 395.466177][T16385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2646'. [ 395.484319][T16388] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2645'. [ 395.633358][T16392] gretap3: entered promiscuous mode [ 395.635342][T16392] batman_adv: batadv0: Adding interface: gretap3 [ 395.635357][T16392] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.635383][T16392] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 395.641124][T16394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2647'. [ 395.876632][T16409] x_tables: duplicate underflow at hook 2 [ 396.323903][T16415] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.393306][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.624622][T16427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2654'. [ 396.688806][T16427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2654'. [ 396.747594][T16431] netlink: 420 bytes leftover after parsing attributes in process `syz.1.2656'. [ 396.747620][T16431] openvswitch: netlink: Flow key attr not present in new flow. [ 396.774457][T16433] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2657'. [ 397.066163][T16444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2660'. [ 397.094826][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.136187][T16448] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2662'. [ 397.279713][T16453] openvswitch: netlink: Key type 344 is out of range max 32 [ 397.301323][T16453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.377734][T16457] ipt_REJECT: TCP_RESET invalid for non-tcp [ 397.506386][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.872909][T16456] netlink: 'syz.3.2666': attribute type 1 has an invalid length. [ 398.025107][T16482] netlink: 'syz.4.2667': attribute type 1 has an invalid length. [ 398.031196][T16477] netlink: 'syz.4.2667': attribute type 1 has an invalid length. [ 398.361977][T16492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2672'. [ 398.375958][T15528] block nbd3: Possible stuck request ffff8880271be000: control (read@0,1024B). Runtime 60 seconds [ 398.376006][T15528] block nbd3: Possible stuck request ffff8880271be1c0: control (read@1024,1024B). Runtime 60 seconds [ 398.376033][T15528] block nbd3: Possible stuck request ffff8880271be380: control (read@2048,1024B). Runtime 60 seconds [ 398.376059][T15528] block nbd3: Possible stuck request ffff8880271be540: control (read@3072,1024B). Runtime 60 seconds [ 398.377533][ T1973] block nbd2: Possible stuck request ffff888027155080: control (read@0,1024B). Runtime 60 seconds [ 398.377573][ T1973] block nbd2: Possible stuck request ffff888027155240: control (read@1024,1024B). Runtime 60 seconds [ 398.377601][ T1973] block nbd2: Possible stuck request ffff888027155400: control (read@2048,1024B). Runtime 60 seconds [ 398.377626][ T1973] block nbd2: Possible stuck request ffff8880271555c0: control (read@3072,1024B). Runtime 60 seconds [ 398.630940][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.980457][T16507] netlink: 'syz.4.2678': attribute type 1 has an invalid length. [ 399.167012][T16518] netlink: 'syz.3.2681': attribute type 1 has an invalid length. [ 399.322628][T16511] bond9: (slave geneve4): making interface the new active one [ 399.325133][T16511] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 399.585720][T11388] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 399.596816][ T49] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 399.597355][ T49] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 399.597393][ T49] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 399.730060][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.845033][T16538] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 399.865813][T16539] netlink: 'syz.2.2685': attribute type 62 has an invalid length. [ 400.133900][T15271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.154376][T16528] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 400.822590][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.963641][T16580] __nla_validate_parse: 7 callbacks suppressed [ 400.963661][T16580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2698'. [ 401.172523][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.172957][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.255037][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 401.492530][ T5621] Bluetooth: hci0: command 0x0c3a tx timeout [ 401.543227][T16595] netlink: 'syz.0.2704': attribute type 64 has an invalid length. [ 401.543486][T16595] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2704'. [ 401.907055][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.246317][T16618] can: request_module (can-proto-0) failed. [ 402.379179][T16625] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2712'. [ 402.714498][T16640] tap0: tun_chr_ioctl cmd 1074025672 [ 402.714523][T16640] tap0: ignored: set checksum disabled [ 402.831644][T16646] netdevsim netdevsim3: Direct firmware load for failed with error -2 [ 402.831675][T16646] netdevsim netdevsim3: Falling back to sysfs fallback for: [ 402.919019][T16650] vlan0: entered allmulticast mode [ 402.919046][T16650] bond0: entered allmulticast mode [ 402.919061][T16650] bond_slave_0: entered allmulticast mode [ 402.919079][T16650] team0: entered allmulticast mode [ 402.919091][T16650] team_slave_0: entered allmulticast mode [ 402.919106][T16650] team_slave_1: entered allmulticast mode [ 402.919122][T16650] dummy0: entered allmulticast mode [ 402.954159][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.177665][T15274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.206021][T16652] netlink: 'syz.0.2721': attribute type 10 has an invalid length. [ 403.393177][T16660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.561003][T16664] netlink: 'syz.1.2726': attribute type 10 has an invalid length. [ 404.351551][T16695] Cannot find map_set index 135 as target [ 404.359783][T16695] netlink: 3080 bytes leftover after parsing attributes in process `syz.4.2734'. [ 404.359809][T16695] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.2734'. [ 404.474477][T16698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2735'. [ 404.655664][T16702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2738'. [ 404.655689][T16702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2738'. [ 404.692037][T16699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2733'. [ 405.176173][ T30] net_ratelimit: 6 callbacks suppressed [ 405.176196][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.479808][T16727] netlink: 'syz.4.2744': attribute type 1 has an invalid length. [ 405.667118][T16727] 8021q: adding VLAN 0 to HW filter on device bond10 [ 405.738363][T16727] bond10: (slave bridge6): making interface the new active one [ 405.739173][T16727] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 405.912752][T16748] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 3, id = 0 [ 406.215683][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.236359][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.252639][T16755] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2750'. [ 406.532547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.533132][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.786698][T16775] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2756'. [ 406.873721][T16777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2756'. [ 406.939445][T16777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2756'. [ 407.281547][T16787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2759'. [ 407.307176][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.322072][T16789] netlink: 'syz.1.2760': attribute type 10 has an invalid length. [ 407.434119][T16797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2761'. [ 407.436056][T16789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.436886][T16789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.437662][T16789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.438661][T16789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.658711][T11389] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 407.796729][T16809] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2766'. [ 408.475763][T16829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2772'. [ 408.539698][T16840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2774'. [ 408.539735][T16840] netlink: 'syz.1.2774': attribute type 8 has an invalid length. [ 408.539749][T16840] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2774'. [ 408.898547][T16847] Bluetooth: MGMT ver 1.23 [ 409.153109][T16854] nbd: nbd2 already in use [ 409.270220][T16855] sch_tbf: burst 0 is lower than device lo mtu (1294) ! [ 409.641814][T16880] xt_socket: unknown flags 0xe4 [ 410.275846][T16872] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 410.585966][ T30] net_ratelimit: 7 callbacks suppressed [ 410.585989][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.923549][T16926] netlink: 'syz.0.2795': attribute type 20 has an invalid length. [ 410.965416][T16926] netlink: 'syz.0.2795': attribute type 20 has an invalid length. [ 410.972462][T11386] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.972527][T11386] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.972561][T11386] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.972595][T11386] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.719124][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.292873][T15274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.792268][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.918048][T16993] __nla_validate_parse: 8 callbacks suppressed [ 412.918070][T16993] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2813'. [ 413.593132][ T4985] udevd[4985]: worker [11657] /devices/virtual/block/nbd3 is taking a long time [ 413.593189][ T4985] udevd[4985]: worker [11678] /devices/virtual/block/nbd2 is taking a long time [ 413.843704][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.851882][T17017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2820'. [ 413.851919][T17017] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 413.953411][T17020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2821'. [ 414.132673][ T5621] Bluetooth: hci3: command 0x0406 tx timeout [ 414.464932][T17036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2824'. [ 414.692263][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 414.895776][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.967867][T17051] IPVS: Error connecting to the multicast addr [ 414.970615][T17052] IPVS: Error connecting to the multicast addr [ 415.152316][T17060] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2830'. [ 415.327441][T17066] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2831'. [ 415.346952][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.384632][T17066] netlink: 'syz.0.2831': attribute type 4 has an invalid length. [ 415.384669][T17066] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.2831'. [ 415.567178][T17069] xt_CT: You must specify a L4 protocol and not use inversions on it [ 415.943685][T17084] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20003 [ 415.976303][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.538013][T17104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2843'. [ 416.724716][T17115] netlink: 'syz.0.2846': attribute type 29 has an invalid length. [ 416.939520][T17117] netlink: 'syz.2.2847': attribute type 33 has an invalid length. [ 417.008392][T17117] bond15: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 417.013022][T17117] bond15 (unregistering): Released all slaves [ 417.054781][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.055726][ T177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.061148][T15274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.089053][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.387208][T17127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2851'. [ 417.387239][T17127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2851'. [ 417.653332][T17136] netlink: 'syz.0.2856': attribute type 1 has an invalid length. [ 418.136744][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.373081][T15274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.193453][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.219645][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.256599][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.412677][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.303209][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.338710][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.394644][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.453255][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.422745][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.468977][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.493072][T15274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.513809][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.652182][T15269] page_pool_release_retry() stalled pool shutdown: id 65, 1 inflight 60 sec [ 428.543149][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.772901][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 428.790024][T15528] block nbd2: Possible stuck request ffff888027155080: control (read@0,1024B). Runtime 90 seconds [ 428.790065][T15528] block nbd2: Possible stuck request ffff888027155240: control (read@1024,1024B). Runtime 90 seconds [ 428.790087][T15528] block nbd2: Possible stuck request ffff888027155400: control (read@2048,1024B). Runtime 90 seconds [ 428.790119][T15528] block nbd2: Possible stuck request ffff8880271555c0: control (read@3072,1024B). Runtime 90 seconds [ 428.790162][ T1973] block nbd3: Possible stuck request ffff8880271be000: control (read@0,1024B). Runtime 90 seconds [ 428.790188][ T1973] block nbd3: Possible stuck request ffff8880271be1c0: control (read@1024,1024B). Runtime 90 seconds [ 428.790212][ T1973] block nbd3: Possible stuck request ffff8880271be380: control (read@2048,1024B). Runtime 90 seconds [ 428.790459][ T1973] block nbd3: Possible stuck request ffff8880271be540: control (read@3072,1024B). Runtime 90 seconds [ 429.588300][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.533183][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.627962][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.629315][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 431.654138][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 431.655467][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 431.659475][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 431.660213][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 431.662752][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.785233][ T5618] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 431.799647][ T5618] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 431.801240][ T5618] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 431.807373][ T5618] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 431.808702][ T5618] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 432.710743][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.807296][ T5621] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 432.810882][ T5621] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 432.831244][ T5621] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 432.837398][ T5621] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 432.838971][ T5621] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 433.573584][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.732384][ T5618] Bluetooth: hci5: command tx timeout [ 433.740254][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.894340][ T5618] Bluetooth: hci6: command tx timeout [ 434.227242][ T5621] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 434.233725][ T5621] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 434.234542][ T5621] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 434.235499][ T5621] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 434.236093][ T5621] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 434.346303][ T5621] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 434.360882][ T5621] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 434.370212][ T5621] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 434.377382][ T5621] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 434.381269][ T5621] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 434.412034][T17155] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.412717][T17155] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.413093][T17155] bridge_slave_0: entered allmulticast mode [ 434.544932][T17155] bridge_slave_0: entered promiscuous mode [ 434.610072][T17155] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.610796][T17155] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.610956][T17155] bridge_slave_1: entered allmulticast mode [ 434.639064][T17155] bridge_slave_1: entered promiscuous mode [ 434.833237][T17155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.852204][ T5621] Bluetooth: hci7: command tx timeout [ 434.961104][T17155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.032403][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.216742][T17152] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.217302][T17152] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.217587][T17152] bridge_slave_0: entered allmulticast mode [ 435.244476][T17152] bridge_slave_0: entered promiscuous mode [ 435.280151][T17155] team0: Port device team_slave_0 added [ 435.300927][T17155] team0: Port device team_slave_1 added [ 435.316832][T17152] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.317403][T17152] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.317778][T17152] bridge_slave_1: entered allmulticast mode [ 435.331107][T17152] bridge_slave_1: entered promiscuous mode [ 435.443830][T17155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.443849][T17155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.443875][T17155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.446086][T17155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.446101][T17155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.446124][T17155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.684042][T17152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.783695][T17152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.825914][ T5621] Bluetooth: hci5: command tx timeout [ 435.837426][T17155] hsr_slave_0: entered promiscuous mode [ 435.838502][T17155] hsr_slave_1: entered promiscuous mode [ 435.840233][T17155] debugfs: 'hsr0' already exists in 'hsr' [ 435.840252][T17155] Cannot create hsr debugfs directory [ 435.972522][ T5621] Bluetooth: hci6: command tx timeout [ 435.977067][T17152] team0: Port device team_slave_0 added [ 436.044996][T17152] team0: Port device team_slave_1 added [ 436.063286][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.206770][T17152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.206788][T17152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.206813][T17152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.254327][T17152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.254344][T17152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.254367][T17152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.372545][ T5621] Bluetooth: hci8: command tx timeout [ 436.454316][ T5621] Bluetooth: hci9: command tx timeout [ 436.585267][T17152] hsr_slave_0: entered promiscuous mode [ 436.586483][T17152] hsr_slave_1: entered promiscuous mode [ 436.587365][T17152] debugfs: 'hsr0' already exists in 'hsr' [ 436.587385][T17152] Cannot create hsr debugfs directory [ 436.612902][T15274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.933414][ T5621] Bluetooth: hci7: command tx timeout [ 437.105877][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.638219][T17173] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.638338][T17173] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.638815][T17173] bridge_slave_0: entered allmulticast mode [ 437.646782][T17173] bridge_slave_0: entered promiscuous mode [ 437.693626][T17173] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.693780][T17173] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.693958][T17173] bridge_slave_1: entered allmulticast mode [ 437.700385][T17173] bridge_slave_1: entered promiscuous mode [ 437.838032][T17173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.893211][ T5621] Bluetooth: hci5: command tx timeout [ 437.899064][T17173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.019752][T17173] team0: Port device team_slave_0 added [ 438.052711][ T5621] Bluetooth: hci6: command tx timeout [ 438.059506][T17173] team0: Port device team_slave_1 added [ 438.191614][T17173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.191634][T17173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.191658][T17173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.292507][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.296960][T17173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.296978][T17173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.297003][T17173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.453304][ T5621] Bluetooth: hci8: command tx timeout [ 438.532327][ T5621] Bluetooth: hci9: command tx timeout [ 438.536469][T17173] hsr_slave_0: entered promiscuous mode [ 438.537599][T17173] hsr_slave_1: entered promiscuous mode [ 438.539058][T17173] debugfs: 'hsr0' already exists in 'hsr' [ 438.539080][T17173] Cannot create hsr debugfs directory [ 438.811767][T17198] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.811960][T17198] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.827334][T17198] bridge_slave_0: entered allmulticast mode [ 438.830085][T17198] bridge_slave_0: entered promiscuous mode [ 438.878743][T17198] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.878951][T17198] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.879389][T17198] bridge_slave_1: entered allmulticast mode [ 438.881817][T17198] bridge_slave_1: entered promiscuous mode [ 439.014148][ T5621] Bluetooth: hci7: command tx timeout [ 439.040183][T17198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.088390][T17197] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.088598][T17197] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.088738][T17197] bridge_slave_0: entered allmulticast mode [ 439.090905][T17197] bridge_slave_0: entered promiscuous mode [ 439.125307][T17198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.147064][T17197] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.147288][T17197] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.147834][T17197] bridge_slave_1: entered allmulticast mode [ 439.150547][T17197] bridge_slave_1: entered promiscuous mode [ 439.285837][T17197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.308019][T17198] team0: Port device team_slave_0 added [ 439.321823][T17198] team0: Port device team_slave_1 added [ 439.345363][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.363848][T17197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.448946][T17198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.448966][T17198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.448990][T17198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.524551][T17197] team0: Port device team_slave_0 added [ 439.525439][T17198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.525453][T17198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.525480][T17198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.596723][T17197] team0: Port device team_slave_1 added [ 439.655706][T15274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.689530][T17197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.689550][T17197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.689575][T17197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.777979][T17197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.777997][T17197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.778022][T17197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.830951][T17198] hsr_slave_0: entered promiscuous mode [ 439.838341][T17198] hsr_slave_1: entered promiscuous mode [ 439.839194][T17198] debugfs: 'hsr0' already exists in 'hsr' [ 439.839214][T17198] Cannot create hsr debugfs directory [ 439.940661][T17197] hsr_slave_0: entered promiscuous mode [ 439.941742][T17197] hsr_slave_1: entered promiscuous mode [ 439.954599][T17197] debugfs: 'hsr0' already exists in 'hsr' [ 439.954623][T17197] Cannot create hsr debugfs directory [ 439.973925][ T5621] Bluetooth: hci5: command tx timeout [ 440.132883][ T5621] Bluetooth: hci6: command tx timeout [ 440.298051][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.375836][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.533355][ T5621] Bluetooth: hci8: command tx timeout [ 440.612262][ T5621] Bluetooth: hci9: command tx timeout [ 441.092218][ T5621] Bluetooth: hci7: command tx timeout [ 441.424328][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.467821][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.612284][ T5621] Bluetooth: hci8: command tx timeout [ 442.692776][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.693150][ T5621] Bluetooth: hci9: command tx timeout [ 443.504734][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.542999][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.577587][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.733865][T15274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.624718][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.663449][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.707283][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.772587][T15275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.744081][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.774887][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.813448][T15275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.831601][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.863523][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.735800][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 453.902658][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.854235][T15275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.946095][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.975431][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.022932][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.892908][T15275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.056962][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.857865][T15528] block nbd3: Possible stuck request ffff8880271be000: control (read@0,1024B). Runtime 120 seconds [ 458.857897][T15528] block nbd3: Possible stuck request ffff8880271be1c0: control (read@1024,1024B). Runtime 120 seconds [ 458.857913][T15528] block nbd3: Possible stuck request ffff8880271be380: control (read@2048,1024B). Runtime 120 seconds [ 458.857928][T15528] block nbd3: Possible stuck request ffff8880271be540: control (read@3072,1024B). Runtime 120 seconds [ 458.857959][ T1973] block nbd2: Possible stuck request ffff888027155080: control (read@0,1024B). Runtime 120 seconds [ 458.857976][ T1973] block nbd2: Possible stuck request ffff888027155240: control (read@1024,1024B). Runtime 120 seconds [ 458.857991][ T1973] block nbd2: Possible stuck request ffff888027155400: control (read@2048,1024B). Runtime 120 seconds [ 458.858009][ T1973] block nbd2: Possible stuck request ffff8880271555c0: control (read@3072,1024B). Runtime 120 seconds [ 459.095202][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.133748][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.932829][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.185453][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.216147][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.263034][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.972657][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.305562][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.336010][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.382929][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.012715][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.415955][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.456776][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.493359][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.052849][T15275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.545543][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.584231][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.622688][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.092518][T15275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.666010][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.695678][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.734012][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.132836][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.788964][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.814976][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.863346][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.174023][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.898500][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.944222][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.973979][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.212701][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.016333][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.055505][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.103283][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.252919][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.734103][ T6549] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 486.145937][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.374381][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 487.174433][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.215268][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.292777][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.935023][T15528] block nbd2: Possible stuck request ffff888027155080: control (read@0,1024B). Runtime 150 seconds [ 488.935054][T15528] block nbd2: Possible stuck request ffff888027155240: control (read@1024,1024B). Runtime 150 seconds [ 488.935070][T15528] block nbd2: Possible stuck request ffff888027155400: control (read@2048,1024B). Runtime 150 seconds [ 488.935085][T15528] block nbd2: Possible stuck request ffff8880271555c0: control (read@3072,1024B). Runtime 150 seconds [ 488.936146][ T1973] block nbd3: Possible stuck request ffff8880271be000: control (read@0,1024B). Runtime 150 seconds [ 488.936174][ T1973] block nbd3: Possible stuck request ffff8880271be1c0: control (read@1024,1024B). Runtime 150 seconds [ 488.936189][ T1973] block nbd3: Possible stuck request ffff8880271be380: control (read@2048,1024B). Runtime 150 seconds [ 488.936346][ T1973] block nbd3: Possible stuck request ffff8880271be540: control (read@3072,1024B). Runtime 150 seconds [ 489.264670][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.294116][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.332482][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.343752][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.173604][ T5621] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 492.178861][ T5621] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 492.223737][ T5621] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 492.224719][ T5621] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 492.225315][ T5621] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 492.264722][ T4934] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 492.274683][ T4934] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 492.277428][ T5623] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 492.279730][ T5623] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 492.281130][ T5623] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 492.379783][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.367301][ T5618] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 493.369841][ T5618] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 493.372122][ T5618] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 493.387356][ T5618] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 493.402873][ T5618] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 493.413913][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.293150][ T5618] Bluetooth: hci10: command tx timeout [ 494.373499][T15275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.396973][ T5618] Bluetooth: hci11: command tx timeout [ 494.446217][ T5621] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 494.463651][ T5621] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 494.464525][ T5621] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 494.466281][ T5621] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 494.466368][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.467281][ T5621] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 494.794484][ T5621] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 494.799776][ T5621] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 494.829521][ T5621] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 494.830496][ T5621] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 494.831169][ T5621] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 494.907678][T17251] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.919628][T17251] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.919809][T17251] bridge_slave_0: entered allmulticast mode [ 494.949392][T17251] bridge_slave_0: entered promiscuous mode [ 494.970488][T17251] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.974960][T17251] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.975428][T17251] bridge_slave_1: entered allmulticast mode [ 495.009136][T17251] bridge_slave_1: entered promiscuous mode [ 495.233695][T17251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.257899][T17251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.449290][T17251] team0: Port device team_slave_0 added [ 495.490835][T17251] team0: Port device team_slave_1 added [ 495.496101][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.498607][ T5621] Bluetooth: hci12: command tx timeout [ 495.858191][T17251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.858212][T17251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.858237][T17251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.035877][T17251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.035895][T17251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.035921][T17251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.036815][T17249] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.037216][T17249] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.037370][T17249] bridge_slave_0: entered allmulticast mode [ 496.039432][T17249] bridge_slave_0: entered promiscuous mode [ 496.136770][T17249] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.137613][T17249] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.137761][T17249] bridge_slave_1: entered allmulticast mode [ 496.139870][T17249] bridge_slave_1: entered promiscuous mode [ 496.373498][ T5621] Bluetooth: hci10: command tx timeout [ 496.432961][T17251] hsr_slave_0: entered promiscuous mode [ 496.434220][T17251] hsr_slave_1: entered promiscuous mode [ 496.435214][T17251] debugfs: 'hsr0' already exists in 'hsr' [ 496.435235][T17251] Cannot create hsr debugfs directory [ 496.454029][ T5621] Bluetooth: hci11: command tx timeout [ 496.484145][T17249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.544274][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.608501][T17249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.618273][ T5621] Bluetooth: hci13: command tx timeout [ 496.817271][T17249] team0: Port device team_slave_0 added [ 496.883757][T17249] team0: Port device team_slave_1 added [ 496.933715][ T5621] Bluetooth: hci14: command tx timeout [ 497.083017][T17249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.083037][T17249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.083062][T17249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.155765][T17249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.155785][T17249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.155812][T17249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.412523][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.560253][T17249] hsr_slave_0: entered promiscuous mode [ 497.561441][T17249] hsr_slave_1: entered promiscuous mode [ 497.574001][ T5621] Bluetooth: hci12: command tx timeout [ 497.580171][T17249] debugfs: 'hsr0' already exists in 'hsr' [ 497.580195][T17249] Cannot create hsr debugfs directory [ 497.585295][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.369184][T17270] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.369302][T17270] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.369444][T17270] bridge_slave_0: entered allmulticast mode [ 498.371501][T17270] bridge_slave_0: entered promiscuous mode [ 498.399362][T17270] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.399557][T17270] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.399718][T17270] bridge_slave_1: entered allmulticast mode [ 498.406502][T17270] bridge_slave_1: entered promiscuous mode [ 498.452453][ T5621] Bluetooth: hci10: command tx timeout [ 498.534103][ T5621] Bluetooth: hci11: command tx timeout [ 498.596514][T17270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.630724][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.639909][T17270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.693734][ T5621] Bluetooth: hci13: command tx timeout [ 498.743762][T17270] team0: Port device team_slave_0 added [ 498.799762][T17270] team0: Port device team_slave_1 added [ 498.940478][T17270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.940498][T17270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.940522][T17270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.981489][T17270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.981507][T17270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.981530][T17270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.012592][ T5621] Bluetooth: hci14: command tx timeout [ 499.075525][T17287] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.075711][T17287] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.076181][T17287] bridge_slave_0: entered allmulticast mode [ 499.078349][T17287] bridge_slave_0: entered promiscuous mode [ 499.105793][T17287] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.105962][T17287] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.106443][T17287] bridge_slave_1: entered allmulticast mode [ 499.108925][T17287] bridge_slave_1: entered promiscuous mode [ 499.297827][T17287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.307543][T17287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.354789][T17296] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.354977][T17296] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.355115][T17296] bridge_slave_0: entered allmulticast mode [ 499.358246][T17296] bridge_slave_0: entered promiscuous mode [ 499.381296][T17270] hsr_slave_0: entered promiscuous mode [ 499.386277][T17270] hsr_slave_1: entered promiscuous mode [ 499.387104][T17270] debugfs: 'hsr0' already exists in 'hsr' [ 499.387124][T17270] Cannot create hsr debugfs directory [ 499.428317][T17287] team0: Port device team_slave_0 added [ 499.428560][T17296] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.428746][T17296] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.428887][T17296] bridge_slave_1: entered allmulticast mode [ 499.433190][T17296] bridge_slave_1: entered promiscuous mode [ 499.455355][T17287] team0: Port device team_slave_1 added [ 499.584610][T17296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.610197][T17287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.610217][T17287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.610243][T17287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.646896][T17296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.653048][ T5621] Bluetooth: hci12: command tx timeout [ 499.659672][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.668805][T17287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.668822][T17287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.668844][T17287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.766627][T17296] team0: Port device team_slave_0 added [ 499.809248][T17296] team0: Port device team_slave_1 added [ 499.974547][T17287] hsr_slave_0: entered promiscuous mode [ 499.975821][T17287] hsr_slave_1: entered promiscuous mode [ 499.976670][T17287] debugfs: 'hsr0' already exists in 'hsr' [ 499.976690][T17287] Cannot create hsr debugfs directory [ 499.990048][T17296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.990064][T17296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.990087][T17296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.026110][T17296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.026128][T17296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.026152][T17296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.237701][T17296] hsr_slave_0: entered promiscuous mode [ 500.239018][T17296] hsr_slave_1: entered promiscuous mode [ 500.239920][T17296] debugfs: 'hsr0' already exists in 'hsr' [ 500.239939][T17296] Cannot create hsr debugfs directory [ 500.454937][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.532974][ T5621] Bluetooth: hci10: command tx timeout [ 500.612550][ T5621] Bluetooth: hci11: command tx timeout [ 500.693105][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.772935][ T5621] Bluetooth: hci13: command tx timeout [ 501.093058][ T5621] Bluetooth: hci14: command tx timeout [ 501.737143][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.741800][ T5621] Bluetooth: hci12: command tx timeout [ 501.759541][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.783121][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.852404][ T5621] Bluetooth: hci13: command tx timeout [ 503.172940][ T5621] Bluetooth: hci14: command tx timeout [ 503.492838][T15275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.823452][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.865582][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.895052][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.532510][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 506.945704][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.979863][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.023473][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.572476][T15274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.053274][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.107267][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.143932][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.613067][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.185532][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.219317][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.264439][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.652498][T15271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.653440][ T6546] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.670518][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.689378][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.295596][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.337495][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.733757][ T6546] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 518.384425][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.694013][T15271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.014422][T15528] block nbd3: Possible stuck request ffff8880271be000: control (read@0,1024B). Runtime 180 seconds [ 519.014468][T15528] block nbd3: Possible stuck request ffff8880271be1c0: control (read@1024,1024B). Runtime 180 seconds [ 519.014495][T15528] block nbd3: Possible stuck request ffff8880271be380: control (read@2048,1024B). Runtime 180 seconds [ 519.014521][T15528] block nbd3: Possible stuck request ffff8880271be540: control (read@3072,1024B). Runtime 180 seconds [ 519.014572][ T1973] block nbd2: Possible stuck request ffff888027155080: control (read@0,1024B). Runtime 180 seconds [ 519.014603][ T1973] block nbd2: Possible stuck request ffff888027155240: control (read@1024,1024B). Runtime 180 seconds [ 519.014628][ T1973] block nbd2: Possible stuck request ffff888027155400: control (read@2048,1024B). Runtime 180 seconds [ 519.014654][ T1973] block nbd2: Possible stuck request ffff8880271555c0: control (read@3072,1024B). Runtime 180 seconds [ 519.424164][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.950086][ T4985] udevd[4985]: worker [11657] /devices/virtual/block/nbd3 timeout; kill it [ 519.950200][ T4985] udevd[4985]: seq 17646 '/devices/virtual/block/nbd3' killed [ 519.950245][ T4985] udevd[4985]: worker [11678] /devices/virtual/block/nbd2 timeout; kill it [ 519.951314][ T4985] udevd[4985]: seq 17645 '/devices/virtual/block/nbd2' killed [ 520.457325][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.503227][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.732411][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.543548][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.584649][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.614414][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.773441][T15271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.653726][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.707330][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.336040][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 527.734471][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.812608][T15271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.773887][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.817213][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.854367][T15271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.863114][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.904085][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.938299][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.895543][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.982968][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.014665][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.066448][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 536.940772][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.093270][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.144426][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.176301][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.973243][T15271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.213877][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.263890][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.306936][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.692568][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 543.013293][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.333226][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.383666][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.424811][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.052704][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.463500][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.503671][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.537226][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.093713][T15271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.110694][T15528] block nbd2: Possible stuck request ffff888027155080: control (read@0,1024B). Runtime 210 seconds [ 549.110736][T15528] block nbd2: Possible stuck request ffff888027155240: control (read@1024,1024B). Runtime 210 seconds [ 549.110762][T15528] block nbd2: Possible stuck request ffff888027155400: control (read@2048,1024B). Runtime 210 seconds [ 549.110787][T15528] block nbd2: Possible stuck request ffff8880271555c0: control (read@3072,1024B). Runtime 210 seconds [ 549.110834][ T1973] block nbd3: Possible stuck request ffff8880271be000: control (read@0,1024B). Runtime 210 seconds [ 549.110864][ T1973] block nbd3: Possible stuck request ffff8880271be1c0: control (read@1024,1024B). Runtime 210 seconds [ 549.110889][ T1973] block nbd3: Possible stuck request ffff8880271be380: control (read@2048,1024B). Runtime 210 seconds [ 549.110914][ T1973] block nbd3: Possible stuck request ffff8880271be540: control (read@3072,1024B). Runtime 210 seconds [ 549.573729][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.734021][ T6556] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 550.615308][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.666900][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.143669][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.233564][ T5618] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 552.243620][ T5618] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 552.252447][ T5618] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 552.268503][ T5618] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 552.269676][ T5618] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 552.448073][ T5618] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 552.470276][ T5618] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 552.479518][ T5618] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 552.481445][ T5618] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 552.500233][ T5618] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 552.693323][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.561745][T17371] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 553.580200][T17371] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 553.581659][T17371] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 553.598576][T17371] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 553.601497][T17371] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 553.765308][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.203979][T17346] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.204311][T17346] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.204476][T17346] bridge_slave_0: entered allmulticast mode [ 554.209868][T17346] bridge_slave_0: entered promiscuous mode [ 554.248019][T17346] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.249042][T17346] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.249201][T17346] bridge_slave_1: entered allmulticast mode [ 554.271142][T17346] bridge_slave_1: entered promiscuous mode [ 554.382604][T17362] Bluetooth: hci15: command tx timeout [ 554.583909][T17346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.615474][T17362] Bluetooth: hci16: command tx timeout [ 554.617564][T17346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.707056][T17371] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 554.710543][T17371] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 554.714090][T17371] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 554.768616][T17392] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 554.778596][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.803248][T17392] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 554.803977][T17392] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 554.806081][T17392] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 554.809457][T17392] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 554.879279][T17392] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 554.891825][T17392] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 555.021919][T17392] Bluetooth: hci5: command 0x0406 tx timeout [ 555.023194][T17392] Bluetooth: hci7: command 0x0406 tx timeout [ 555.023228][T17392] Bluetooth: hci6: command 0x0406 tx timeout [ 555.094528][T17346] team0: Port device team_slave_0 added [ 555.122764][T17346] team0: Port device team_slave_1 added [ 555.175177][T15271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.270040][T17346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.270060][T17346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.270086][T17346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.347752][T17346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.347771][T17346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.347795][T17346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.812111][ T5623] Bluetooth: hci17: command tx timeout [ 555.814734][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.960477][T17346] hsr_slave_0: entered promiscuous mode [ 555.961761][T17346] hsr_slave_1: entered promiscuous mode [ 555.982683][T17346] debugfs: 'hsr0' already exists in 'hsr' [ 555.982709][T17346] Cannot create hsr debugfs directory [ 556.456450][ T5623] Bluetooth: hci15: command tx timeout [ 556.693088][ T5623] Bluetooth: hci16: command tx timeout [ 556.853374][ T5623] Bluetooth: hci18: command tx timeout [ 556.864229][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.004035][T17349] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.004157][T17349] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.004343][T17349] bridge_slave_0: entered allmulticast mode [ 557.012392][ T5623] Bluetooth: hci19: command tx timeout [ 557.041469][T17349] bridge_slave_0: entered promiscuous mode [ 557.133144][T17349] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.133357][T17349] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.133536][T17349] bridge_slave_1: entered allmulticast mode [ 557.138688][T17349] bridge_slave_1: entered promiscuous mode [ 557.351906][T17349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.378395][T17349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.701519][T17349] team0: Port device team_slave_0 added [ 557.711574][T17349] team0: Port device team_slave_1 added [ 557.814463][T17349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.814481][T17349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.814508][T17349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.821919][T17349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.822058][T17349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.822085][T17349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.904168][ T5623] Bluetooth: hci17: command tx timeout [ 557.933797][T14173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.211532][T17349] hsr_slave_0: entered promiscuous mode [ 558.227586][T17349] hsr_slave_1: entered promiscuous mode [ 558.231612][T17349] debugfs: 'hsr0' already exists in 'hsr' [ 558.231637][T17349] Cannot create hsr debugfs directory [ 558.330794][T15269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.533166][ T5621] Bluetooth: hci15: command tx timeout [ 558.655928][T17369] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.656120][T17369] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.656604][T17369] bridge_slave_0: entered allmulticast mode [ 558.660261][T17369] bridge_slave_0: entered promiscuous mode [ 558.728735][T17369] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.728928][T17369] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.729363][T17369] bridge_slave_1: entered allmulticast mode [ 558.731693][T17369] bridge_slave_1: entered promiscuous mode [ 558.772552][ T5621] Bluetooth: hci16: command tx timeout [ 558.909928][T17369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.926628][T17369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.935220][ T5621] Bluetooth: hci18: command tx timeout [ 558.985092][T17369] team0: Port device team_slave_0 added [ 558.988606][T17369] team0: Port device team_slave_1 added [ 559.012910][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.060312][T17369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.060330][T17369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.060355][T17369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.097876][ T5621] Bluetooth: hci19: command tx timeout [ 559.120337][T17369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.120357][T17369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.120381][T17369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.245400][T17369] hsr_slave_0: entered promiscuous mode [ 559.248706][T17369] hsr_slave_1: entered promiscuous mode [ 559.249666][T17369] debugfs: 'hsr0' already exists in 'hsr' [ 559.249686][T17369] Cannot create hsr debugfs directory [ 559.806387][T17388] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.806508][T17388] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.806953][T17388] bridge_slave_0: entered allmulticast mode [ 559.809305][T17388] bridge_slave_0: entered promiscuous mode [ 559.870160][T17388] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.870367][T17388] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.870537][T17388] bridge_slave_1: entered allmulticast mode [ 559.895492][T17388] bridge_slave_1: entered promiscuous mode [ 559.972882][ T5621] Bluetooth: hci17: command tx timeout [ 560.065275][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.093935][T17388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.097665][T17388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.138639][ T5621] Bluetooth: hci9: command 0x0406 tx timeout [ 560.138684][ T5621] Bluetooth: hci8: command 0x0406 tx timeout [ 560.242995][T17388] team0: Port device team_slave_0 added [ 560.281320][T17388] team0: Port device team_slave_1 added [ 560.368087][T17388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.368107][T17388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.368130][T17388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.390374][T17388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.390392][T17388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.390415][T17388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.449502][T17389] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.449692][T17389] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.449838][T17389] bridge_slave_0: entered allmulticast mode [ 560.453949][T17389] bridge_slave_0: entered promiscuous mode [ 560.593569][T17389] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.593692][T17389] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.593867][T17389] bridge_slave_1: entered allmulticast mode [ 560.596223][T17389] bridge_slave_1: entered promiscuous mode [ 560.612524][ T5618] Bluetooth: hci15: command tx timeout [ 560.654972][T17388] hsr_slave_0: entered promiscuous mode [ 560.656234][T17388] hsr_slave_1: entered promiscuous mode [ 560.657086][T17388] debugfs: 'hsr0' already exists in 'hsr' [ 560.657105][T17388] Cannot create hsr debugfs directory [ 560.715469][T17389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.738200][T17389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.852700][ T5618] Bluetooth: hci16: command tx timeout [ 560.861250][T17389] team0: Port device team_slave_0 added [ 560.897491][T17389] team0: Port device team_slave_1 added [ 561.014452][ T5618] Bluetooth: hci18: command tx timeout [ 561.027869][T17389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.027886][T17389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.027911][T17389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.030069][T17389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.030082][T17389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.030106][T17389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.114583][T14174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.149308][T17389] hsr_slave_0: entered promiscuous mode [ 561.150525][T17389] hsr_slave_1: entered promiscuous mode [ 561.151376][T17389] debugfs: 'hsr0' already exists in 'hsr' [ 561.151396][T17389] Cannot create hsr debugfs directory [ 561.173431][ T5618] Bluetooth: hci19: command tx timeout [ 561.340738][T15271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.053041][ T5618] Bluetooth: hci17: command tx timeout [ 562.143694][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.092501][ T5618] Bluetooth: hci18: command tx timeout [ 563.183510][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 563.184965][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.252419][ T5618] Bluetooth: hci19: command tx timeout [ 563.812908][ T32] INFO: task syz.3.2838:17087 blocked for more than 143 seconds. [ 563.812938][ T32] Not tainted syzkaller #0 [ 563.812949][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 563.812959][ T32] task:syz.3.2838 state:D stack:26536 pid:17087 tgid:17085 ppid:5614 task_flags:0x480140 flags:0x00080002 [ 563.813020][ T32] Call Trace: [ 563.813056][ T32] [ 563.813139][ T32] __schedule+0x17db/0x58f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 563.813312][ T32] ? __lock_acquire+0x747/0x2de0 [ 563.813425][ T32] ? __pfx___schedule+0x10/0x10 [ 563.813446][ T32] ? lock_acquire+0x115/0x350 [ 563.813477][ T32] ? schedule+0x90/0x2b0 [ 563.813503][ T32] schedule+0x164/0x2b0 [ 563.813527][ T32] blk_mq_freeze_queue_wait+0x101/0x180 [ 563.813636][ T32] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 563.813664][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 563.813707][ T32] queue_limits_commit_update_frozen+0x55/0xd0 [ 563.813734][ T32] nbd_set_size+0x4c5/0x7d0 [ 563.813812][ T32] ? __pfx_nbd_set_size+0x10/0x10 [ 563.813856][ T32] ? nla_memcpy+0x5b/0xc0 [ 563.813935][ T32] nbd_genl_reconfigure+0x7e1/0x1040 [ 563.813971][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 563.813996][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 563.814055][ T32] ? __nla_parse+0x40/0x60 [ 563.814085][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 563.814287][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 563.814321][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 563.814357][ T32] ? __lock_acquire+0x747/0x2de0 [ 563.814389][ T32] genl_rcv_msg+0x614/0x7a0 [ 563.814429][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.814452][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 563.814489][ T32] netlink_rcv_skb+0x226/0x4a0 [ 563.814543][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.814568][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 563.814614][ T32] ? down_read+0x2be/0x330 [ 563.814663][ T32] genl_rcv+0x28/0x40 [ 563.814685][ T32] netlink_unicast+0x7bd/0x940 [ 563.814732][ T32] netlink_sendmsg+0x813/0xb40 [ 563.814772][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.814810][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 563.816893][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.816926][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 563.817010][ T32] ____sys_sendmsg+0x54e/0x850 [ 563.817043][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 563.817081][ T32] ? import_iovec+0x73/0xa0 [ 563.817144][ T32] ___sys_sendmsg+0x2a5/0x360 [ 563.817169][ T32] ? __lock_acquire+0x747/0x2de0 [ 563.817195][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 563.817226][ T32] ? futex_wait+0x2a2/0x390 [ 563.817313][ T32] ? __fget_files+0x2a/0x420 [ 563.817357][ T32] ? __fget_files+0x3a2/0x420 [ 563.817395][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 563.817433][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 563.817482][ T32] do_syscall_64+0x166/0x520 [ 563.817548][ T32] ? trace_irq_disable+0x3b/0x140 [ 563.817581][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.817626][ T32] ? clear_bhb_loop+0x70/0xc0 [ 563.817668][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.817689][ T32] RIP: 0033:0x7f4c57d9e159 [ 563.817716][ T32] RSP: 002b:00007f4c58bb9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.817762][ T32] RAX: ffffffffffffffda RBX: 00007f4c58025fa0 RCX: 00007f4c57d9e159 [ 563.817785][ T32] RDX: 0000000000044000 RSI: 00002000000009c0 RDI: 0000000000000006 [ 563.817799][ T32] RBP: 00007f4c57e3506b R08: 0000000000000000 R09: 0000000000000000 [ 563.817811][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.817824][ T32] R13: 00007f4c58026038 R14: 00007f4c58025fa0 R15: 00007ffd635b22e8 [ 563.817858][ T32] [ 563.817867][ T32] INFO: task syz.3.2838:17088 blocked for more than 143 seconds. [ 563.817883][ T32] Not tainted syzkaller #0 [ 563.817893][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 563.817903][ T32] task:syz.3.2838 state:D stack:27872 pid:17088 tgid:17085 ppid:5614 task_flags:0x400040 flags:0x00080002 [ 563.817960][ T32] Call Trace: [ 563.817967][ T32] [ 563.817980][ T32] __schedule+0x17db/0x58f0 [ 563.818034][ T32] ? __pfx___schedule+0x10/0x10 [ 563.818067][ T32] ? schedule+0x90/0x2b0 [ 563.818093][ T32] schedule+0x164/0x2b0 [ 563.818118][ T32] schedule_preempt_disabled+0x13/0x30 [ 563.818139][ T32] __mutex_lock+0x7c1/0x1550 [ 563.818170][ T32] ? __mutex_lock+0x5d4/0x1550 [ 563.818197][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 563.818223][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 563.818255][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 563.818334][ T32] ? radix_tree_lookup+0x240/0x290 [ 563.818421][ T32] genl_rcv_msg+0x10b/0x7a0 [ 563.818452][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.818513][ T32] netlink_rcv_skb+0x226/0x4a0 [ 563.818543][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.818568][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 563.818614][ T32] ? down_read+0x2be/0x330 [ 563.818644][ T32] genl_rcv+0x28/0x40 [ 563.818665][ T32] netlink_unicast+0x7bd/0x940 [ 563.818704][ T32] netlink_sendmsg+0x813/0xb40 [ 563.818744][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.818783][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 563.818807][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.818834][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 563.818858][ T32] __sys_sendto+0x408/0x5a0 [ 563.818889][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 563.818910][ T32] ? errseq_sample+0x40/0x70 [ 563.818985][ T32] ? fd_install+0x94/0x3d0 [ 563.819008][ T32] ? fd_install+0x309/0x3d0 [ 563.819042][ T32] __x64_sys_sendto+0xde/0x100 [ 563.819070][ T32] do_syscall_64+0x166/0x520 [ 563.819092][ T32] ? trace_irq_disable+0x3b/0x140 [ 563.819111][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.819130][ T32] ? clear_bhb_loop+0x70/0xc0 [ 563.819156][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.819175][ T32] RIP: 0033:0x7f4c57d5e98e [ 563.819193][ T32] RSP: 002b:00007f4c58b96e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 563.819213][ T32] RAX: ffffffffffffffda RBX: 00007f4c58b986c0 RCX: 00007f4c57d5e98e [ 563.819228][ T32] RDX: 0000000000000020 RSI: 00007f4c58b97000 RDI: 0000000000000008 [ 563.819241][ T32] RBP: 0000000000000000 R08: 00007f4c58b96f04 R09: 000000000000000c [ 563.819254][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 563.819266][ T32] R13: 00007f4c58b96f58 R14: 00007f4c58b97000 R15: 0000000000000000 [ 563.819300][ T32] [ 563.819308][ T32] INFO: task syz.3.2838:17089 blocked for more than 143 seconds. [ 563.819322][ T32] Not tainted syzkaller #0 [ 563.819332][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 563.819341][ T32] task:syz.3.2838 state:D stack:28712 pid:17089 tgid:17085 ppid:5614 task_flags:0x400140 flags:0x00080002 [ 563.819404][ T32] Call Trace: [ 563.819419][ T32] [ 563.819432][ T32] __schedule+0x17db/0x58f0 [ 563.819485][ T32] ? __pfx___schedule+0x10/0x10 [ 563.819517][ T32] ? schedule+0x90/0x2b0 [ 563.819543][ T32] schedule+0x164/0x2b0 [ 563.819567][ T32] schedule_preempt_disabled+0x13/0x30 [ 563.819589][ T32] __mutex_lock+0x7c1/0x1550 [ 563.819618][ T32] ? __mutex_lock+0x5d4/0x1550 [ 563.819645][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 563.819670][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 563.819695][ T32] ? stack_trace_save+0xa9/0x100 [ 563.819728][ T32] ? __lock_acquire+0x747/0x2de0 [ 563.819753][ T32] ? radix_tree_lookup+0x240/0x290 [ 563.819778][ T32] genl_rcv_msg+0x10b/0x7a0 [ 563.819808][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.819849][ T32] netlink_rcv_skb+0x226/0x4a0 [ 563.819879][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.819904][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 563.819949][ T32] ? down_read+0x2be/0x330 [ 563.819978][ T32] genl_rcv+0x28/0x40 [ 563.819999][ T32] netlink_unicast+0x7bd/0x940 [ 563.820038][ T32] netlink_sendmsg+0x813/0xb40 [ 563.820077][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.820115][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 563.820139][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.820165][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 563.820189][ T32] __sys_sendto+0x408/0x5a0 [ 563.820220][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 563.820277][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 563.820323][ T32] __x64_sys_sendto+0xde/0x100 [ 563.820352][ T32] do_syscall_64+0x166/0x520 [ 563.820374][ T32] ? trace_irq_disable+0x3b/0x140 [ 563.820393][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.820420][ T32] ? clear_bhb_loop+0x70/0xc0 [ 563.820445][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.820464][ T32] RIP: 0033:0x7f4c57d5e98e [ 563.820481][ T32] RSP: 002b:00007f4c55ff4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 563.820501][ T32] RAX: ffffffffffffffda RBX: 00007f4c55ff66c0 RCX: 00007f4c57d5e98e [ 563.820515][ T32] RDX: 0000000000000024 RSI: 00007f4c55ff5000 RDI: 0000000000000006 [ 563.820527][ T32] RBP: 0000000000000000 R08: 00007f4c55ff4f04 R09: 000000000000000c [ 563.820540][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 563.820551][ T32] R13: 00007f4c55ff4f58 R14: 00007f4c55ff5000 R15: 0000000000000000 [ 563.820584][ T32] [ 563.820594][ T32] INFO: task syz.1.2842:17100 blocked for more than 143 seconds. [ 563.820607][ T32] Not tainted syzkaller #0 [ 563.820616][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 563.820624][ T32] task:syz.1.2842 state:D stack:27200 pid:17100 tgid:17099 ppid:5615 task_flags:0x400040 flags:0x00080002 [ 563.820678][ T32] Call Trace: [ 563.820684][ T32] [ 563.820697][ T32] __schedule+0x17db/0x58f0 [ 563.820749][ T32] ? __pfx___schedule+0x10/0x10 [ 563.820781][ T32] ? schedule+0x90/0x2b0 [ 563.820806][ T32] schedule+0x164/0x2b0 [ 563.820831][ T32] schedule_preempt_disabled+0x13/0x30 [ 563.820852][ T32] __mutex_lock+0x7c1/0x1550 [ 563.820881][ T32] ? __mutex_lock+0x5d4/0x1550 [ 563.820909][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 563.820933][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 563.820965][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 563.820996][ T32] ? radix_tree_lookup+0x240/0x290 [ 563.821021][ T32] genl_rcv_msg+0x10b/0x7a0 [ 563.821051][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.821093][ T32] netlink_rcv_skb+0x226/0x4a0 [ 563.821121][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.821147][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 563.821194][ T32] ? down_read+0x2be/0x330 [ 563.821224][ T32] genl_rcv+0x28/0x40 [ 563.821245][ T32] netlink_unicast+0x7bd/0x940 [ 563.821283][ T32] netlink_sendmsg+0x813/0xb40 [ 563.821322][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.821360][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 563.821384][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.821419][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 563.821443][ T32] ____sys_sendmsg+0x54e/0x850 [ 563.821476][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 563.821512][ T32] ? import_iovec+0x73/0xa0 [ 563.821540][ T32] ___sys_sendmsg+0x2a5/0x360 [ 563.821565][ T32] ? __lock_acquire+0x747/0x2de0 [ 563.821590][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 563.821621][ T32] ? futex_wait+0x2a2/0x390 [ 563.821681][ T32] ? __fget_files+0x2a/0x420 [ 563.821706][ T32] ? __fget_files+0x3a2/0x420 [ 563.821744][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 563.821773][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 563.821824][ T32] do_syscall_64+0x166/0x520 [ 563.821846][ T32] ? trace_irq_disable+0x3b/0x140 [ 563.821865][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.821885][ T32] ? clear_bhb_loop+0x70/0xc0 [ 563.821910][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.887331][ T32] RIP: 0033:0x7ff5b6b9e159 [ 563.887358][ T32] RSP: 002b:00007ff5b7b3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.887381][ T32] RAX: ffffffffffffffda RBX: 00007ff5b6e25fa0 RCX: 00007ff5b6b9e159 [ 563.887396][ T32] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 563.887418][ T32] RBP: 00007ff5b6c3506b R08: 0000000000000000 R09: 0000000000000000 [ 563.887430][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 563.887443][ T32] R13: 00007ff5b6e26038 R14: 00007ff5b6e25fa0 R15: 00007ffe50ec4448 [ 563.887477][ T32] [ 563.887488][ T32] INFO: task syz.4.2844:17109 blocked for more than 143 seconds. [ 563.887503][ T32] Not tainted syzkaller #0 [ 563.887513][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 563.887522][ T32] task:syz.4.2844 state:D stack:26408 pid:17109 tgid:17108 ppid:5617 task_flags:0x400140 flags:0x00080002 [ 563.887578][ T32] Call Trace: [ 563.887585][ T32] [ 563.887598][ T32] __schedule+0x17db/0x58f0 [ 563.887656][ T32] ? __pfx___schedule+0x10/0x10 [ 563.887689][ T32] ? schedule+0x90/0x2b0 [ 563.887715][ T32] schedule+0x164/0x2b0 [ 563.887739][ T32] schedule_preempt_disabled+0x13/0x30 [ 563.887760][ T32] __mutex_lock+0x7c1/0x1550 [ 563.887789][ T32] ? __mutex_lock+0x5d4/0x1550 [ 563.887818][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 563.887844][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 563.887875][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 563.887908][ T32] ? radix_tree_lookup+0x240/0x290 [ 563.887931][ T32] genl_rcv_msg+0x10b/0x7a0 [ 563.887958][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.888000][ T32] netlink_rcv_skb+0x226/0x4a0 [ 563.888030][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.888055][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 563.888099][ T32] ? down_read+0x2be/0x330 [ 563.888129][ T32] genl_rcv+0x28/0x40 [ 563.888150][ T32] netlink_unicast+0x7bd/0x940 [ 563.888190][ T32] netlink_sendmsg+0x813/0xb40 [ 563.888229][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.888267][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 563.888293][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.888325][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 563.888350][ T32] __sys_sendto+0x408/0x5a0 [ 563.888381][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 563.888482][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 563.888509][ T32] __x64_sys_sendto+0xde/0x100 [ 563.888537][ T32] do_syscall_64+0x166/0x520 [ 563.888560][ T32] ? trace_irq_disable+0x3b/0x140 [ 563.888580][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.888600][ T32] ? clear_bhb_loop+0x70/0xc0 [ 563.977855][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.977886][ T32] RIP: 0033:0x7ff415f5e98e [ 563.977912][ T32] RSP: 002b:00007ff416ee6e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 563.977935][ T32] RAX: ffffffffffffffda RBX: 00007ff416ee86c0 RCX: 00007ff415f5e98e [ 563.977948][ T32] RDX: 000000000000001c RSI: 00007ff416ee7000 RDI: 0000000000000007 [ 563.977960][ T32] RBP: 0000000000000000 R08: 00007ff416ee6f04 R09: 000000000000000c [ 563.977971][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 563.977982][ T32] R13: 00007ff416ee6f58 R14: 00007ff416ee7000 R15: 0000000000000000 [ 563.978014][ T32] [ 563.978049][ T32] INFO: task syz.4.2844:17110 blocked for more than 143 seconds. [ 563.978064][ T32] Not tainted syzkaller #0 [ 563.978074][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 563.978082][ T32] task:syz.4.2844 state:D stack:26408 pid:17110 tgid:17108 ppid:5617 task_flags:0x400140 flags:0x00080002 [ 563.978133][ T32] Call Trace: [ 563.978140][ T32] [ 563.978152][ T32] __schedule+0x17db/0x58f0 [ 563.978415][ T32] ? __pfx___schedule+0x10/0x10 [ 563.978451][ T32] ? schedule+0x90/0x2b0 [ 563.978493][ T32] schedule+0x164/0x2b0 [ 563.978516][ T32] schedule_preempt_disabled+0x13/0x30 [ 563.978535][ T32] __mutex_lock+0x7c1/0x1550 [ 563.978563][ T32] ? __mutex_lock+0x5d4/0x1550 [ 563.978588][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 563.978612][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 563.978641][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 563.978670][ T32] ? __lock_acquire+0x747/0x2de0 [ 563.978688][ T32] ? radix_tree_lookup+0x240/0x290 [ 563.978711][ T32] genl_rcv_msg+0x10b/0x7a0 [ 563.978739][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.978776][ T32] netlink_rcv_skb+0x226/0x4a0 [ 563.978804][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.978826][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 563.978868][ T32] ? down_read+0x2be/0x330 [ 563.978896][ T32] genl_rcv+0x28/0x40 [ 563.978922][ T32] netlink_unicast+0x7bd/0x940 [ 563.978957][ T32] netlink_sendmsg+0x813/0xb40 [ 563.978992][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.979027][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 563.979050][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.979075][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 563.979097][ T32] __sys_sendto+0x408/0x5a0 [ 563.979125][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 563.979144][ T32] ? errseq_sample+0x40/0x70 [ 563.979401][ T32] ? rcu_is_watching+0x16/0xb0 [ 563.979431][ T32] __x64_sys_sendto+0xde/0x100 [ 563.979456][ T32] do_syscall_64+0x166/0x520 [ 563.979477][ T32] ? trace_irq_disable+0x3b/0x140 [ 563.979494][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.979513][ T32] ? clear_bhb_loop+0x70/0xc0 [ 563.979535][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.979553][ T32] RIP: 0033:0x7ff415f5e98e [ 563.979569][ T32] RSP: 002b:00007ff416ec5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 563.979588][ T32] RAX: ffffffffffffffda RBX: 00007ff416ec76c0 RCX: 00007ff415f5e98e [ 563.979601][ T32] RDX: 000000000000001c RSI: 00007ff416ec6000 RDI: 0000000000000005 [ 563.979613][ T32] RBP: 0000000000000000 R08: 00007ff416ec5f04 R09: 000000000000000c [ 563.979624][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 563.979635][ T32] R13: 00007ff416ec5f58 R14: 00007ff416ec6000 R15: 0000000000000000 [ 563.979666][ T32] [ 563.979675][ T32] INFO: task syz.0.2856:17136 blocked for more than 143 seconds. [ 563.979687][ T32] Not tainted syzkaller #0 [ 563.979697][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 563.979705][ T32] task:syz.0.2856 state:D stack:26496 pid:17136 tgid:17135 ppid:5634 task_flags:0x400140 flags:0x00080002 [ 563.979753][ T32] Call Trace: [ 563.979759][ T32] [ 563.979771][ T32] __schedule+0x17db/0x58f0 [ 563.979820][ T32] ? __pfx___schedule+0x10/0x10 [ 563.979850][ T32] ? schedule+0x90/0x2b0 [ 563.979873][ T32] schedule+0x164/0x2b0 [ 563.979895][ T32] schedule_preempt_disabled+0x13/0x30 [ 563.979975][ T32] __mutex_lock+0x7c1/0x1550 [ 563.980002][ T32] ? __mutex_lock+0x5d4/0x1550 [ 563.980027][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 563.980050][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 563.980078][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 563.980108][ T32] ? radix_tree_lookup+0x240/0x290 [ 563.980130][ T32] genl_rcv_msg+0x10b/0x7a0 [ 563.980157][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.980398][ T32] netlink_rcv_skb+0x226/0x4a0 [ 563.980425][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 563.980448][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 563.980489][ T32] ? down_read+0x2be/0x330 [ 563.980516][ T32] genl_rcv+0x28/0x40 [ 564.002388][ T32] netlink_unicast+0x7bd/0x940 [ 564.002437][ T32] netlink_sendmsg+0x813/0xb40 [ 564.002475][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.002510][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 564.002532][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.002557][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 564.002580][ T32] __sys_sendto+0x408/0x5a0 [ 564.002607][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 564.002659][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 564.002683][ T32] __x64_sys_sendto+0xde/0x100 [ 564.002709][ T32] do_syscall_64+0x166/0x520 [ 564.002731][ T32] ? trace_irq_disable+0x3b/0x140 [ 564.002749][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.002768][ T32] ? clear_bhb_loop+0x70/0xc0 [ 564.002791][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.002809][ T32] RIP: 0033:0x7f6fe235e98e [ 564.002826][ T32] RSP: 002b:00007f6fe31a3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 564.002847][ T32] RAX: ffffffffffffffda RBX: 00007f6fe31a56c0 RCX: 00007f6fe235e98e [ 564.002861][ T32] RDX: 0000000000000020 RSI: 00007f6fe31a4000 RDI: 0000000000000008 [ 564.002873][ T32] RBP: 0000000000000000 R08: 00007f6fe31a3f04 R09: 000000000000000c [ 564.002884][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 564.002895][ T32] R13: 00007f6fe31a3f58 R14: 00007f6fe31a4000 R15: 0000000000000000 [ 564.002934][ T32] [ 564.002943][ T32] INFO: task syz.0.2856:17140 blocked for more than 143 seconds. [ 564.002957][ T32] Not tainted syzkaller #0 [ 564.002966][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 564.002974][ T32] task:syz.0.2856 state:D stack:26784 pid:17140 tgid:17135 ppid:5634 task_flags:0x400040 flags:0x00080002 [ 564.003024][ T32] Call Trace: [ 564.003030][ T32] [ 564.003042][ T32] __schedule+0x17db/0x58f0 [ 564.003093][ T32] ? __pfx___schedule+0x10/0x10 [ 564.003122][ T32] ? schedule+0x90/0x2b0 [ 564.003145][ T32] schedule+0x164/0x2b0 [ 564.003376][ T32] schedule_preempt_disabled+0x13/0x30 [ 564.003397][ T32] __mutex_lock+0x7c1/0x1550 [ 564.003423][ T32] ? __mutex_lock+0x5d4/0x1550 [ 564.003449][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 564.003472][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 564.003501][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 564.003531][ T32] ? radix_tree_lookup+0x240/0x290 [ 564.003554][ T32] genl_rcv_msg+0x10b/0x7a0 [ 564.003581][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 564.003619][ T32] netlink_rcv_skb+0x226/0x4a0 [ 564.003646][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 564.003668][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 564.003710][ T32] ? down_read+0x2be/0x330 [ 564.003737][ T32] genl_rcv+0x28/0x40 [ 564.003755][ T32] netlink_unicast+0x7bd/0x940 [ 564.003790][ T32] netlink_sendmsg+0x813/0xb40 [ 564.003826][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.003860][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 564.003882][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.003914][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 564.003936][ T32] __sys_sendto+0x408/0x5a0 [ 564.003964][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 564.003984][ T32] ? errseq_sample+0x40/0x70 [ 564.004034][ T32] ? rcu_is_watching+0x16/0xb0 [ 564.004063][ T32] __x64_sys_sendto+0xde/0x100 [ 564.004088][ T32] do_syscall_64+0x166/0x520 [ 564.004108][ T32] ? trace_irq_disable+0x3b/0x140 [ 564.004125][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.004142][ T32] ? clear_bhb_loop+0x70/0xc0 [ 564.004368][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.004387][ T32] RIP: 0033:0x7f6fe235e98e [ 564.004402][ T32] RSP: 002b:00007f6fe3182e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 564.004420][ T32] RAX: ffffffffffffffda RBX: 00007f6fe31846c0 RCX: 00007f6fe235e98e [ 564.004433][ T32] RDX: 0000000000000020 RSI: 00007f6fe3183000 RDI: 0000000000000009 [ 564.004444][ T32] RBP: 0000000000000000 R08: 00007f6fe3182f04 R09: 000000000000000c [ 564.004455][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 564.004466][ T32] R13: 00007f6fe3182f58 R14: 00007f6fe3183000 R15: 0000000000000000 [ 564.004497][ T32] [ 564.004504][ T32] INFO: task syz.0.2856:17142 blocked for more than 143 seconds. [ 564.004517][ T32] Not tainted syzkaller #0 [ 564.004525][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 564.004533][ T32] task:syz.0.2856 state:D stack:27872 pid:17142 tgid:17135 ppid:5634 task_flags:0x400040 flags:0x00080002 [ 564.004582][ T32] Call Trace: [ 564.004588][ T32] [ 564.004599][ T32] __schedule+0x17db/0x58f0 [ 564.004647][ T32] ? __pfx___schedule+0x10/0x10 [ 564.004677][ T32] ? schedule+0x90/0x2b0 [ 564.004699][ T32] schedule+0x164/0x2b0 [ 564.004722][ T32] schedule_preempt_disabled+0x13/0x30 [ 564.004740][ T32] __mutex_lock+0x7c1/0x1550 [ 564.004767][ T32] ? __mutex_lock+0x5d4/0x1550 [ 564.004792][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 564.004814][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 564.004843][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 564.004876][ T32] ? radix_tree_lookup+0x240/0x290 [ 564.004902][ T32] genl_rcv_msg+0x10b/0x7a0 [ 564.004940][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 564.004981][ T32] netlink_rcv_skb+0x226/0x4a0 [ 564.005008][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 564.005031][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 564.005072][ T32] ? down_read+0x2be/0x330 [ 564.005099][ T32] genl_rcv+0x28/0x40 [ 564.005118][ T32] netlink_unicast+0x7bd/0x940 [ 564.005153][ T32] netlink_sendmsg+0x813/0xb40 [ 564.021979][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.022027][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 564.022051][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.022075][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 564.022099][ T32] __sys_sendto+0x408/0x5a0 [ 564.022126][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 564.022145][ T32] ? errseq_sample+0x40/0x70 [ 564.022569][ T32] ? fd_install+0x94/0x3d0 [ 564.022594][ T32] ? fd_install+0x309/0x3d0 [ 564.022624][ T32] __x64_sys_sendto+0xde/0x100 [ 564.022650][ T32] do_syscall_64+0x166/0x520 [ 564.022671][ T32] ? trace_irq_disable+0x3b/0x140 [ 564.022689][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.022708][ T32] ? clear_bhb_loop+0x70/0xc0 [ 564.022731][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.022749][ T32] RIP: 0033:0x7f6fe235e98e [ 564.022766][ T32] RSP: 002b:00007f6fe05f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 564.022787][ T32] RAX: ffffffffffffffda RBX: 00007f6fe05f66c0 RCX: 00007f6fe235e98e [ 564.022800][ T32] RDX: 0000000000000020 RSI: 00007f6fe05f5000 RDI: 000000000000000b [ 564.022811][ T32] RBP: 0000000000000000 R08: 00007f6fe05f4f04 R09: 000000000000000c [ 564.022822][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 564.022834][ T32] R13: 00007f6fe05f4f58 R14: 00007f6fe05f5000 R15: 0000000000000000 [ 564.022864][ T32] [ 564.022874][ T32] INFO: task syz.2.2857:17146 blocked for more than 143 seconds. [ 564.022889][ T32] Not tainted syzkaller #0 [ 564.022899][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 564.022916][ T32] task:syz.2.2857 state:D stack:27200 pid:17146 tgid:17145 ppid:5616 task_flags:0x400040 flags:0x00080002 [ 564.022967][ T32] Call Trace: [ 564.022974][ T32] [ 564.022986][ T32] __schedule+0x17db/0x58f0 [ 564.023036][ T32] ? __pfx___schedule+0x10/0x10 [ 564.023066][ T32] ? schedule+0x90/0x2b0 [ 564.023089][ T32] schedule+0x164/0x2b0 [ 564.023112][ T32] schedule_preempt_disabled+0x13/0x30 [ 564.023132][ T32] __mutex_lock+0x7c1/0x1550 [ 564.023158][ T32] ? __mutex_lock+0x5d4/0x1550 [ 564.023389][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 564.023413][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 564.023442][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 564.023472][ T32] ? radix_tree_lookup+0x240/0x290 [ 564.023495][ T32] genl_rcv_msg+0x10b/0x7a0 [ 564.023523][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 564.023561][ T32] netlink_rcv_skb+0x226/0x4a0 [ 564.023588][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 564.023610][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 564.023652][ T32] ? down_read+0x2be/0x330 [ 564.023679][ T32] genl_rcv+0x28/0x40 [ 564.023698][ T32] netlink_unicast+0x7bd/0x940 [ 564.023733][ T32] netlink_sendmsg+0x813/0xb40 [ 564.023768][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.023802][ T32] ? apparmor_socket_sendmsg+0x18b/0x360 [ 564.023824][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.023848][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 564.023870][ T32] ____sys_sendmsg+0x54e/0x850 [ 564.023900][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 564.023941][ T32] ? import_iovec+0x73/0xa0 [ 564.023967][ T32] ___sys_sendmsg+0x2a5/0x360 [ 564.023989][ T32] ? __lock_acquire+0x747/0x2de0 [ 564.024013][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.024041][ T32] ? futex_wait+0x2a2/0x390 [ 564.024097][ T32] ? __fget_files+0x2a/0x420 [ 564.024119][ T32] ? __fget_files+0x3a2/0x420 [ 564.024152][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 564.024258][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 564.024310][ T32] do_syscall_64+0x166/0x520 [ 564.024333][ T32] ? trace_irq_disable+0x3b/0x140 [ 564.024351][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.024372][ T32] ? clear_bhb_loop+0x70/0xc0 [ 564.024397][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.024415][ T32] RIP: 0033:0x7fb58799e159 [ 564.024432][ T32] RSP: 002b:00007fb5888a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.024451][ T32] RAX: ffffffffffffffda RBX: 00007fb587c25fa0 RCX: 00007fb58799e159 [ 564.024464][ T32] RDX: 000000002000c000 RSI: 0000200000000000 RDI: 0000000000000004 [ 564.024476][ T32] RBP: 00007fb587a3506b R08: 0000000000000000 R09: 0000000000000000 [ 564.024488][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.024499][ T32] R13: 00007fb587c26038 R14: 00007fb587c25fa0 R15: 00007fffc27c8fc8 [ 564.024531][ T32] [ 564.024538][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 564.024546][ T32] INFO: task syz.2.2857:17147 blocked for more than 143 seconds. [ 564.024559][ T32] Not tainted syzkaller #0 [ 564.024568][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 564.024576][ T32] task:syz.2.2857 state:D stack:25320 pid:17147 tgid:17145 ppid:5616 task_flags:0x400140 flags:0x00080002 [ 564.024623][ T32] Call Trace: [ 564.024629][ T32] [ 564.075786][ T32] __schedule+0x17db/0x58f0 [ 564.075856][ T32] ? __pfx___schedule+0x10/0x10 [ 564.075888][ T32] ? schedule+0x90/0x2b0 [ 564.075923][ T32] schedule+0x164/0x2b0 [ 564.075947][ T32] schedule_preempt_disabled+0x13/0x30 [ 564.075968][ T32] __mutex_lock+0x7c1/0x1550 [ 564.075997][ T32] ? __mutex_lock+0x5d4/0x1550 [ 564.076025][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 564.076052][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 564.076077][ T32] ? stack_trace_save+0xa9/0x100 [ 564.076101][ T32] ? __lock_acquire+0x747/0x2de0 [ 564.076128][ T32] ? radix_tree_lookup+0x240/0x290 [ 564.076153][ T32] genl_rcv_msg+0x10b/0x7a0 [ 564.076390][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 564.076430][ T32] netlink_rcv_skb+0x226/0x4a0 [ 564.076457][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 564.076480][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 564.076521][ T32] ? down_read+0x2be/0x330 [ 564.076548][ T32] genl_rcv+0x28/0x40 [ 564.076567][ T32] netlink_unicast+0x7bd/0x940 [ 564.076603][ T32] netlink_sendmsg+0x813/0xb40 [ 564.076638][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.076673][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 564.076696][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.076720][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 564.076742][ T32] __sys_sendto+0x408/0x5a0 [ 564.076770][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 564.076822][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 564.076846][ T32] __x64_sys_sendto+0xde/0x100 [ 564.076871][ T32] do_syscall_64+0x166/0x520 [ 564.076892][ T32] ? trace_irq_disable+0x3b/0x140 [ 564.076919][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.076938][ T32] ? clear_bhb_loop+0x70/0xc0 [ 564.076961][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.076979][ T32] RIP: 0033:0x7fb58795e98e [ 564.076997][ T32] RSP: 002b:00007fb58887de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 564.077017][ T32] RAX: ffffffffffffffda RBX: 00007fb58887f6c0 RCX: 00007fb58795e98e [ 564.077031][ T32] RDX: 000000000000001c RSI: 00007fb58887e000 RDI: 000000000000000a [ 564.077042][ T32] RBP: 0000000000000000 R08: 00007fb58887df04 R09: 000000000000000c [ 564.077054][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 564.077065][ T32] R13: 00007fb58887df58 R14: 00007fb58887e000 R15: 0000000000000000 [ 564.077096][ T32] [ 564.077104][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 564.077374][ T32] [ 564.077374][ T32] Showing all locks held in the system: [ 564.077383][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 564.077504][ T32] #0: ffffffff8ec364f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 564.077608][ T32] #1: ffffffff9ad3d098 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 564.077714][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 564.077726][ T32] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 564.077814][ T32] locks held by getty/5371: 2, on CPU#1: [ 564.077826][ T32] #0: ffff8880361ee0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 564.077958][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 564.078005][ T32] locks held by syz-executor/5604: 2, last CPU#1: [ 564.078017][ T32] #0: ffff888034deb6b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 564.078073][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 564.078128][ T32] locks held by kworker/u8:14/6549: 3, last CPU#1: [ 564.078140][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 564.078401][ T32] #1: ffffc900055d7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 564.078450][ T32] #2: ffff88807722f258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40 [ 564.078605][ T32] locks held by kworker/u8:22/11387: 2, on CPU#1: [ 564.078617][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 564.078665][ T32] #1: ffffc9000384fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 564.078712][ T32] locks held by udevd/11657: 1, on CPU#1: [ 564.078724][ T32] #0: ffff88802716b350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 564.078790][ T32] locks held by udevd/11678: 1, on CPU#0: [ 564.078802][ T32] #0: ffff8880270bf350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 564.078852][ T32] locks held by syz.3.2838/17087: 6, on CPU#0: [ 564.078864][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.078916][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.078960][ T32] #2: ffff8880270ab260 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4a6/0x1040 [ 564.079003][ T32] #3: ffff8880270b2bd8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x284/0x7d0 [ 564.079046][ T32] #4: ffff8880270b25a0 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 564.079096][ T32] #5: ffff8880270b25d8 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 564.079145][ T32] locks held by syz.3.2838/17088: 2, on CPU#0: [ 564.079157][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.101287][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.101336][ T32] locks held by syz.3.2838/17089: 2, on CPU#1: [ 564.101349][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.101392][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.101436][ T32] locks held by syz.1.2842/17100: 2, on CPU#0: [ 564.101448][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.101491][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.101536][ T32] locks held by syz.4.2844/17109: 2, on CPU#0: [ 564.101548][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.101589][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.101633][ T32] locks held by syz.4.2844/17110: 2, on CPU#0: [ 564.101846][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.101889][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.102532][ T32] locks held by syz.0.2856/17136: 2, on CPU#0: [ 564.102545][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.102588][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.102633][ T32] locks held by syz.0.2856/17140: 2, on CPU#0: [ 564.102645][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.102688][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.102732][ T32] locks held by syz.0.2856/17142: 2, on CPU#0: [ 564.102745][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.102787][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.102832][ T32] locks held by syz.2.2857/17146: 2, on CPU#0: [ 564.102843][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.102886][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.102938][ T32] locks held by syz.2.2857/17147: 2, on CPU#0: [ 564.102950][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.102992][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.103036][ T32] locks held by syz-executor/17152: 2, on CPU#1: [ 564.103048][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.103091][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.103136][ T32] locks held by syz-executor/17155: 2, on CPU#0: [ 564.103147][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.103394][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.103439][ T32] locks held by syz-executor/17173: 2, on CPU#0: [ 564.103451][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.103494][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.103539][ T32] locks held by syz-executor/17197: 2, on CPU#0: [ 564.103551][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.103593][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.103636][ T32] locks held by syz-executor/17198: 2, on CPU#0: [ 564.103648][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.103691][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.103738][ T32] locks held by syz-executor/17249: 2, on CPU#0: [ 564.103750][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.103792][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.103836][ T32] locks held by syz-executor/17251: 2, on CPU#0: [ 564.103847][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.103890][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.103994][ T32] locks held by syz-executor/17270: 2, on CPU#0: [ 564.104006][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.104049][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.104094][ T32] locks held by syz-executor/17287: 2, on CPU#0: [ 564.104106][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.104149][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.104398][ T32] locks held by syz-executor/17296: 2, on CPU#0: [ 564.104411][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.145088][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.145140][ T32] locks held by syz-executor/17345: 2, last CPU#0: [ 564.145154][ T32] #0: ffff888022ef5038 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 564.145414][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 564.145462][ T32] locks held by syz-executor/17346: 2, on CPU#0: [ 564.145474][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.145516][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.145561][ T32] locks held by syz-executor/17349: 2, on CPU#0: [ 564.145573][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.145616][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.145660][ T32] locks held by syz-executor/17365: 2, last CPU#1: [ 564.145672][ T32] #0: ffff88807ccf9d38 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 564.145720][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 564.145771][ T32] locks held by syz-executor/17369: 2, on CPU#0: [ 564.145784][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.145832][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.145882][ T32] locks held by syz-executor/17384: 1, last CPU#1: [ 564.145896][ T32] #0: ffff88807e241d38 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 564.145960][ T32] locks held by syz-executor/17385: 2, last CPU#1: [ 564.145975][ T32] #0: ffff88807f7e5038 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 564.146027][ T32] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 564.146075][ T32] locks held by syz-executor/17388: 2, on CPU#0: [ 564.146088][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.146132][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.146386][ T32] locks held by syz-executor/17389: 2, on CPU#0: [ 564.146399][ T32] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 564.146442][ T32] #1: ffffffff902c4280 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 564.146509][ T32] [ 564.146514][ T32] ============================================= [ 564.146514][ T32] [ 564.146523][ T32] NMI backtrace for cpu 1 [ 564.146536][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 564.146555][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 564.146565][ T32] Call Trace: [ 564.146573][ T32] [ 564.146581][ T32] dump_stack_lvl+0xe8/0x150 [ 564.146633][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 564.146708][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 564.146736][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 564.146765][ T32] sys_info+0x135/0x170 [ 564.146788][ T32] watchdog+0xfd7/0x1030 [ 564.146814][ T32] ? watchdog+0x1c7/0x1030 [ 564.146838][ T32] kthread+0x38b/0x480 [ 564.146857][ T32] ? __pfx_watchdog+0x10/0x10 [ 564.146873][ T32] ? __pfx_kthread+0x10/0x10 [ 564.146891][ T32] ret_from_fork+0x514/0xb70 [ 564.146919][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 564.146937][ T32] ? __switch_to+0xc89/0x1420 [ 564.146981][ T32] ? __pfx_kthread+0x10/0x10 [ 564.147000][ T32] ret_from_fork_asm+0x1a/0x30 [ 564.147040][ T32] [ 564.147047][ T32] Sending NMI from CPU 1 to CPUs 0: [ 564.147073][ C0] NMI backtrace for cpu 0 [ 564.147087][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 564.147107][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 564.147118][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 564.147175][ C0] Code: e8 2e de 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ef e5 c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 da d4 75 06 cc 44 89 f9 80 e1 07 [ 564.147220][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 564.147242][ C0] RAX: 1ffffffff35a7a00 RBX: 00000000000003fd RCX: 0000000000000000 [ 564.147256][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 564.147269][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 564.147282][ C0] R10: dffffc0000000000 R11: ffffffff8572f400 R12: dffffc0000000000 [ 564.147296][ C0] R13: 0000000000000000 R14: ffffffff9ad3d0c0 R15: 0000000000000000 [ 564.147310][ C0] FS: 0000000000000000(0000) GS:ffff888124cce000(0000) knlGS:0000000000000000 [ 564.147326][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 564.147339][ C0] CR2: 00007fff2b1fffec CR3: 000000000eb48000 CR4: 00000000003526f0 [ 564.147358][ C0] Call Trace: [ 564.147366][ C0] [ 564.147376][ C0] wait_for_lsr+0x184/0x2f0 [ 564.147399][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 564.147437][ C0] serial8250_console_write+0xaa1/0x1200 [ 564.147456][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 564.147481][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 564.147499][ C0] ? __schedule+0x17f1/0x58f0 [ 564.147525][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 564.147553][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 564.147575][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 564.147601][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 564.147621][ C0] nbcon_kthread_func+0x679/0x880 [ 564.147643][ C0] ? nbcon_kthread_func+0x163/0x880 [ 564.147661][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 564.147682][ C0] ? __kthread_parkme+0x71/0x1f0 [ 564.147707][ C0] ? __kthread_parkme+0x199/0x1f0 [ 564.147734][ C0] kthread+0x38b/0x480 [ 564.147750][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 564.147767][ C0] ? __pfx_kthread+0x10/0x10 [ 564.147785][ C0] ret_from_fork+0x514/0xb70 [ 564.147803][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 564.147819][ C0] ? __switch_to+0xc89/0x1420 [ 564.147843][ C0] ? __pfx_kthread+0x10/0x10 [ 564.147861][ C0] ret_from_fork_asm+0x1a/0x30 [ 564.147894][ C0] [ 564.207487][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 568.210045][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 568.219165][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 568.229238][ T32] Call Trace: [ 568.232543][ T32] [ 568.235481][ T32] vpanic+0x56d/0xa60 [ 568.239481][ T32] ? __pfx___schedule+0x10/0x10 [ 568.244360][ T32] ? __pfx_vpanic+0x10/0x10 [ 568.248918][ T32] panic+0xc5/0xd0 [ 568.252665][ T32] ? __pfx_panic+0x10/0x10 [ 568.257092][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 568.262556][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 568.267934][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 568.274112][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 568.280297][ T32] watchdog+0x1030/0x1030 [ 568.284644][ T32] ? watchdog+0x1c7/0x1030 [ 568.289077][ T32] kthread+0x38b/0x480 [ 568.293153][ T32] ? __pfx_watchdog+0x10/0x10 [ 568.297845][ T32] ? __pfx_kthread+0x10/0x10 [ 568.302483][ T32] ret_from_fork+0x514/0xb70 [ 568.307094][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 568.312208][ T32] ? __switch_to+0xc89/0x1420 [ 568.316896][ T32] ? __pfx_kthread+0x10/0x10 [ 568.321487][ T32] ret_from_fork_asm+0x1a/0x30 [ 568.326274][ T32] [ 568.329430][ T32] Kernel Offset: disabled [ 568.333769][ T32] Rebooting in 86400 seconds..