last executing test programs: 21.431344489s ago: executing program 2 (id=2782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @aes128, 0x0, @desc3}) 21.154037363s ago: executing program 2 (id=2786): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000c40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe6074bdf1dc41427cb05cdcc0a6bf308e382bd3b0a7", 0x3d}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0xc0) recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/53, 0x35}], 0x1}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) 20.926169516s ago: executing program 2 (id=2789): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x66, "0f1fd6e6bfa63a44bfd888bcadf0df97fbd0ae33c9991de0a0d10ce84712354c402629064ddd12db4721bf1b5fbce2efb003f469aca4b7cf57711573d3d24c7253b925988e1707163de78bf12f19bdf594a6b67691e1acf689ae01a71a4e045a1553925bddc6"}, &(0x7f0000000100)=0x6e) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r2, 0x8000, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x6}, &(0x7f00000000c0)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES16=r1], 0xd0}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) 20.662584522s ago: executing program 2 (id=2793): r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x1, @void}, 0x10) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x47d}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000000c0)={r3, 0x5, 0xe3, "f2d999567b3aec8c70333c3cb2dc38c2aa4e23929ee387b0d6c71bdfb5c4a6159d466e800549efe185e92df4d0b7e3f373676039b2e65e13dfe043b9237e09b52c457bc011874435911c533650b46ea4a3e4d90e5442625be764290a398536fd45fc180a4bada0f01da824ead14225f25c2ec563130df4dec0af227d87da2445b5f00eba1fc86df4d2e1db7704fcc0b127e7c2ff4b0492c049eff11092122e47b18b2c565057d91978268c8f8bdc72407644572df2e6d30e520bfc4583bd893b20e2ce6bb73758b2a6e83651cc49f8de65d873daeb440372241bf8c830883903496a7b"}, 0xeb) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000001c0)=[@sack_perm, @sack_perm], 0x2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x4, 0x1, 0x0, {0xa, 0x4e24, 0xffffffd1, @private1, 0x80}}}, 0x32) r5 = socket(0x15, 0x5, 0x40) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000240)=@netrom={'nr', 0x0}, 0x10) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000280)=0x5, 0x4) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@getspdinfo={0x14, 0x25, 0x10, 0x70bd28, 0x25dfdbfc, 0x9, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x4c810) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f00000003c0)={0x1, 'team_slave_0\x00', {}, 0x80}) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400), 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r5, 0xc0385868, &(0x7f0000000540)={r2, &(0x7f0000000440)='\x00', 0x24100, &(0x7f0000000480)={@_ha_fsid={[0x1, 0x37a4]}, {0x57bf, 0x5d6e, 0xf703, 0x3ff}}, 0x3, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0x8}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x7d, 0x0}, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r6, r7, 0x1d, 0x0, @val=@target_btf_id=r8}, 0x14) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000600)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', 0x0}) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=r8, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x1ff, 0xa, 0x6, 0x50, r7, 0x8, '\x00', r9, r10, 0x2, 0x5, 0x1}, 0x50) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000780)={0x0, @llc={0x1a, 0x0, 0x8a, 0x0, 0x8, 0x54, @local}, @xdp={0x2c, 0x2, r9, 0x22}, @l2={0x1f, 0x1000, @any, 0x9, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x9d79, &(0x7f0000000740)='batadv0\x00', 0x2, 0x8, 0xfffd}) sendfile(r5, r2, &(0x7f0000000800)=0x24b9, 0x7ff) ioctl$XFS_IOC_FSINUMBERS(r2, 0xc0205867, &(0x7f0000000bc0)={&(0x7f0000000840)=0x80000001, 0x3, &(0x7f0000000880)=[{}, {}, {}, {}], &(0x7f0000000b80)}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r11, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r12, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) 20.45740833s ago: executing program 2 (id=2795): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) (async) write(r0, &(0x7f00000004c0)="a72bd43cea5f2a5bf92aecf75b0875cb9d9f6b83f0efc7572ddc1c33c533fd6b1a17a2169bfbc682f3da8c14e948111ebd1cf57ce3ef495aaa6348dc6935e3a6a54e1c7c9cb8cbcc8ef2ec553c714f94ca7c23a84de8be6132500b2bc6d1fc8e338805282ab094684c79dc1b607660d203cff1bce28f1709d305400c14d6b96d4d6f84c0a603656a142fc80ec3b775db525b08f3354bc40423b84f03f42662bcb528693c42b7dd62f6d73a9f5967fb5a94d203bb5c419f8bdb890c380a1488dffbf7632a4013e747859f282c2d62b6f9a13cfff8c3598aa3dfb9161861057671733f55a0", 0xe4) (async) r2 = socket(0x10, 0x2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r6, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r7, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008010}, 0x20004000) (async) sendmsg$nl_route(r3, 0x0, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, r5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r8, 0x0, 0x0, 0x20, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast1, 0x700, 0x8000, 0xfffffffc}}) (async) sendmsg$NLBL_CALIPSO_C_LIST(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r7, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}], 0x10) r10 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) ioctl$XFS_IOC_FSGEOMETRY_V4(r10, 0x8070587c, &(0x7f0000000300)) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, 0x0, 0x0) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x4084) (async) bind$packet(r2, &(0x7f0000000140)={0x11, 0x10, r9, 0x1, 0x9, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) (async) socket$nl_route(0x10, 0x3, 0x0) 20.396813952s ago: executing program 2 (id=2796): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x800, 0x43c, 0x0, 0xffff0001, 0x7a21, 0xfffffff8, 0x6, 0x2831}, 0x20) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000fbff00000000000000000000000000000000ffffffffffffffff000001000000000000000000000000000000000000000000000a0000000000000000000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c00000000000000ac1e00010000000000000000000000000200000004"], 0xfc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x58}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x9}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdcf}, 0x70) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x4000, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x800, 0x43c, 0x0, 0xffff0001, 0x7a21, 0xfffffff8, 0x6, 0x2831}, 0x20) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000fbff00000000000000000000000000000000ffffffffffffffff000001000000000000000000000000000000000000000000000a0000000000000000000000804000020000000000000800000000000000000000000000000000440005000a010101000000000000000000000000000000003c00000000000000ac1e00010000000000000000000000000200000004"], 0xfc}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x58}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x9}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdcf}, 0x70) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x4000, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xa010101, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async) 19.709469195s ago: executing program 1 (id=2805): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000180)={{0x2f, @broadcast, 0x4e21, 0x3, 'lblc\x00', 0x11, 0x3240, 0x2c}, {@local, 0x4e24, 0x1, 0xc3, 0x10012d5c, 0x12d5c}}, 0x44) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x4, 0x2003, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000000), &(0x7f00000002c0)=""/4096}, 0x20) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="07002a000301060040002d800a"], 0x64}}, 0x0) unshare(0x22020400) r6 = socket(0x2, 0x80805, 0x0) setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) accept4$nfc_llcp(r6, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @rand_addr=0x64010102, 0x4e24, 0x3, 'lblcr\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x4, 0xc24, 0x9, 0xffffffe9}}, 0x44) 19.456513173s ago: executing program 1 (id=2806): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = epoll_create1(0x0) r2 = socket$inet6(0xa, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000060000000000000801010000005f5f00"], 0x0, 0x28, 0x0, 0x1, 0x5}, 0x28) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) socket$inet6(0xa, 0x6, 0x8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r3, 0x0, 0x4, 0x0, 0x0) shutdown(r2, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="06d9bfa0edbe09fb7f16", 0xa}], 0x1}, 0x20004000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet(r4, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010000000000fdffffff0a000000", @ANYRES32=0x0, @ANYBLOB="000000001400030d0900000000000000000000000000000014000100200100"/44], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x4004840) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0xa0000004}) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000340)={0x40000013}) 19.125510225s ago: executing program 0 (id=2808): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000010000000000000000000000180100002020702500000000002020207baaf8ff00000000bd4106000003000047010000f8ffffffb702000008000000b7030000000000008500002dd10000001801000020786c250000000000202020db1af8ffa1000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 18.878396493s ago: executing program 1 (id=2810): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) socket(0x2, 0x80805, 0x0) (async, rerun: 32) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) (async, rerun: 64) r1 = socket$inet6(0xa, 0x3, 0x3) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r0, r2, 0x25, 0x2, @void}, 0x1c) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd70000000000010000000180001801400020076657468315f746f5f626f6e6400000005000e"], 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x4044890) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 18.745375137s ago: executing program 3 (id=2811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xcc}}, 0x0) 18.725876978s ago: executing program 0 (id=2812): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r6, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) r8 = openat$cgroup_int(r2, &(0x7f00000000c0)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[@ANYBLOB='-1'], 0x27) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000400), 0x4) 18.583446674s ago: executing program 3 (id=2813): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x4, 0x4}]}, 0x44}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r4}, 0xc) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000002040)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x4, 0x7, 0x48}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x5, 0x28, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@generic={0x82, 0x2}]}}, {0x4e26, 0x4e20, 0x10, 0x0, @opaque="4c962bf5d925f54b"}}}, 0x36) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x4, 0x4}]}, 0x44}}, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r4}, 0xc) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000002040)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x4, 0x7, 0x48}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x5, 0x28, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@generic={0x82, 0x2}]}}, {0x4e26, 0x4e20, 0x10, 0x0, @opaque="4c962bf5d925f54b"}}}, 0x36) (async) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (async) 18.44087425s ago: executing program 1 (id=2814): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000fcfff1ff00000000000000008500000036000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r2, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffc, 0x0, 0x8, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0xd, 0x2, 0x75, 0x1}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="3c020000130001002bbd700000000000fc000000000000000000000000000000ac1e000100000000000000000000000000020000000000000a0040002b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000d5b4497d8800b421000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000057000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, r7, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0xfffc, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "e5410e86db87a41f716be8e1fa0fe2fb143899778cc5c15c1337404bb397c0fc", "0c17d7b032591c2a7eb609eb8d2d9d15", {"28cbbe8b3bc8849d1e6124e7e5913283", "0080200000002000d300000000000400"}}}}}}}, 0x0) 18.279676134s ago: executing program 0 (id=2815): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/4082, 0xff2}, {&(0x7f0000000100)=""/192, 0xc0}], 0x2}, 0xfffffffc}, {{&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000000240)=[{0x0}, {&(0x7f00000002c0)=""/138, 0x8a}], 0x2}, 0xfffffec9}, {{&(0x7f00000015c0)=@tipc=@name, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001640)=""/121, 0x79}], 0x1, &(0x7f0000001700)=""/102, 0x66}, 0x5}, {{&(0x7f0000001780)=@ll, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001800)=""/230, 0xe6}, {&(0x7f0000001900)=""/162, 0xa2}, {&(0x7f00000019c0)=""/4096, 0x1000}], 0x3, &(0x7f0000002a00)=""/15, 0xf}}, {{&(0x7f0000002a40)=@ieee802154={0x24, @long}, 0x80, 0x0}, 0xa}, {{&(0x7f0000002c80)=@sco={0x1f, @none}, 0x80, 0x0, 0x0, &(0x7f0000002e00)=""/59, 0x3b}, 0x7}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000002ec0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/128, 0x80}, {&(0x7f0000003f40)=""/41, 0x29}, {&(0x7f0000003f80)=""/139, 0x8b}, {&(0x7f0000004040)=""/200, 0xc8}], 0x5, &(0x7f00000041c0)=""/84, 0x54}, 0x7fff}, {{&(0x7f0000004240)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000004400)=[{0x0}], 0x1}, 0xb784}], 0x8, 0x12, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c002835c5e93201d84f8800001000ffff28bd7000fddbcf2500000000b5d98b70f1ff1e7a6ef75112e423b685b09428d5fc37b561e4eadaa4f26fb6ecb23ed4380c13caacb90d9c0c46ce1849442f952f3426166a0eda92d878f8fd99fbc9d51ff073033f20d2babbe994110680acf88f8595", @ANYRES32=0x0, @ANYBLOB="fa0a0500230807003c0012800b000100697036746e6c00002c00028014000300fec0ffffffffffff00000000000000011400020000000000000000000000ffffe0000001"], 0x5c}}, 0x24000800) 18.148386962s ago: executing program 0 (id=2816): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400000010000900000000000300000000000200", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c61766500000000580005800500190003000000050005000000000006001f00d5000000050007000000000005000a00000000000500210001000000040018000500060001000000060002000100000008002200", @ANYRES32, @ANYBLOB="0500010005000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x20044000}, 0x4040) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f00000002c0)=@ethtool_modinfo}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000480)={0x49ade259, {{0xa, 0x4e24, 0x5960, @empty}}, {{0xa, 0x4e21, 0x10000, @private1, 0xe3}}}, 0x108) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r9, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r11, 0x1, 0x0, 0x1, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) setsockopt$RXRPC_SECURITY_KEYRING(r9, 0x110, 0x2, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r12, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x98, r13, 0x405, 0x70bd2b, 0x25dfdbfb}, 0x98}}, 0x4081) 18.001236467s ago: executing program 3 (id=2817): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000feffffff000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000d602000000000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x4000000, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000885}, 0x4054) 17.746433233s ago: executing program 1 (id=2818): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="300000002d000100000000000000000014000c0000000000000000000000000000000000080001800400f6801f18edcc1dbfea791d03b2abce95f094cdbc0285193476b98537630000000000"], 0x30}], 0x1, 0x0, 0x0, 0x8011}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x32, 0x6, 0x510, 0xd0, 0xd0, 0x1b8, 0xd0, 0x1b8, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, @private0, [0xffffffff, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xff], 'pimreg1\x00', 'syz_tun\x00', {}, {}, 0x3b, 0xf9, 0x2, 0x50}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x2}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xa}}}}, {{@ipv6={@mcast2, @loopback, [0xffffffff], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x6, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000280)) shutdown(r3, 0x1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) syz_init_net_socket$nl_generic(0xb, 0x3, 0x10) 17.744925542s ago: executing program 3 (id=2819): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x68}}, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4080) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xc5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xffe0, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}]}}]}, 0x3c}}, 0x40814) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x4, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x40, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @default]}) ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) close(r1) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f00000001c0)={0x10000000}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 17.714571984s ago: executing program 0 (id=2820): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000008000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x42, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB], 0x0, 0x3a, 0x0, 0x6}, 0x28) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0, 0x28}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8010) r5 = socket$pppoe(0x18, 0x1, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="ac000000", @ANYRES16=0x0, @ANYBLOB="000029bd7000fbdbdf25160000000c0099000a000000620000000a0006000802110000010000"], 0x2c}}, 0x10000040) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4) ioctl$SIOCX25GFACILITIES(r8, 0x89e2, 0x0) connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0xfffe, @remote, 'lo\x00'}}, 0x1e) close(r6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24008040}, 0x800) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) socket$kcm(0x10, 0x400000002, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r9, 0x5) accept(r9, 0x0, 0x0) listen(r9, 0x0) 17.500841283s ago: executing program 1 (id=2821): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0xc, "e8"}], 0x18}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042800c00018006000600800a0000140002800d001480080018"], 0x38}, 0x1, 0x0, 0x0, 0x48855}, 0xc000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x810, 0xffffffffffffffff, 0x215ec000) close(0x3) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none, 0x1}, 0xa) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000002000)=[{r3, 0x93d4}], 0x1, 0x6) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'dummy0\x00', 0x1}, 0x18) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x34, r6, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x28080) 17.258408911s ago: executing program 3 (id=2822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x32600) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r9, &(0x7f0000008240)=[{{&(0x7f0000001200)={0xa, 0x4e21, 0x4, @private2, 0x6}, 0x1c, &(0x7f0000002600)=[{&(0x7f0000001240)="bdb82195", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000003c00)=[{0x0}, {0xfffffffffffffffc}], 0x2}}], 0x2, 0xc0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000001400000011000100000000004342000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) 17.00479412s ago: executing program 3 (id=2823): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0xfb, 0x80, &(0x7f00000002c0)="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", &(0x7f0000000200)=""/128, 0x9, 0x0, 0x73, 0x50, &(0x7f00000003c0)="59d5dd5bab4c57d9f157f402e315632f08818e5f83b9c19878789a42a57e229262a20e5d32c16e74687b9cc1a63cf4fa052b6fd81ebdfee335d004851a184058eb67e0bc8b05a17ad3dcfbdeb5e900f37ac6d016311f4a0f165254c08392b7c4f9055f3bb036c36ec45f40c86439566260105b", &(0x7f0000000440)="db56c7b1919054365bc1a8f38b5fa75112f451e21ccc3569157b28d9902b4c02b08b066d0a842a195a7c176be3c2bb56a2143f6ec35e1eb43b277e6f7421abe95c7f6dd173a2863ddd44ba28f421e336", 0xf, 0x0, 0x6}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x40}, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x30}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) unshare(0x400) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000080), 0x2, 0x0) sendfile(r7, r7, &(0x7f00000000c0)=0x4, 0x38c6) (async) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "c4358bd0e3"}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "664a9f429a1c7b29bc9a70a0a0"}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4044000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) unshare(0x2c020400) 16.713500822s ago: executing program 0 (id=2824): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000000327bd7000fbdbdf2500000000", @ANYBLOB="320a050023080000bc001280080001007674690004001f80080004"], 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003740)=@newchain={0x24, 0x64, 0x2, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffff}, {0xe, 0xe}, {0x9, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x81) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01400010000600000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000000000000001000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x4) 15.78092524s ago: executing program 4 (id=2825): bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0xe4, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @func_proto, @type_tag={0xc, 0x0, 0x0, 0x12, 0x2}, @fwd={0x8}]}, {0x0, [0x0, 0x61]}}, &(0x7f00000000c0)=""/209, 0x4c, 0xd1, 0x1}, 0x28) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8924, &(0x7f0000001300)={'nr0\x00'}) 15.748067577s ago: executing program 4 (id=2826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) 15.669581227s ago: executing program 4 (id=2827): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000080)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0x2, 0x5eff, 0xd}) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x1, 0x8, 0x600, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x20008055) shutdown(r0, 0x0) getsockname$netrom(r1, &(0x7f0000000300)={{}, [@remote, @null, @netrom, @netrom, @bcast, @bcast, @null, @bcast]}, &(0x7f0000000380)=0x48) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000003c0), 0x4) getsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000000400), &(0x7f0000000440)=0x4) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000480)=0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000004c0)=0x1, 0x4) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000500)={0x6394, 0x8, 0x8000, 0x28, 0x1, 0x1a, 0x25, "81fb2b1860e507e058f119eb8075508e318e82da", "206eeb2c68925ea582a523556336f045940dfd4f"}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000540)={0x0, 0x1, "82"}, &(0x7f0000000580)=0x9) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={r2, 0x81, 0x9c}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r1, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000700)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd1, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x13, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00), 0x4) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x1d3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0xa, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, [@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xa}, @generic={0x77, 0x1, 0x0, 0x400, 0x1}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000680)='GPL\x00', 0xadce, 0x30, &(0x7f00000006c0)=""/48, 0x40f00, 0xd, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000a40)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[r1, r1, r1, r1, r1, r1, r5, r1], 0x0, 0x10, 0x6}, 0x94) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00', 0x7, 0x4, 0x408, 0x0, 0x0, 0x0, 0x320, 0x320, 0x320, 0x4, &(0x7f0000000c00), {[{{@arp={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xffffffff, 0x2, 0x0, {@mac=@local, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff]}}, 0x2, 0xef1, 0xb, 0x9, 0xc9, 0x1e15, 'syzkaller1\x00', 'pimreg0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @empty, @broadcast, 0x2, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "4f4f4da8e67415750616eaf13bbbba84df69482e0d8f27d81641f2b78417"}}, {{@arp={@loopback, @rand_addr=0x64010100, 0xffffff00, 0xff000000, 0x8, 0x5, {@mac, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x2, 0x0, 0x101, 0xc027, 0x7, 0x5, 'syz_tun\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x0, 0x10}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000010c0)={0x1b, 0x0, 0x0, 0x3, 0x0, r1, 0x2, '\x00', r3, r4, 0x3, 0x1, 0x5}, 0x50) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r7, 0x40047211, &(0x7f0000001140)=0x20) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x68, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x8, @link='syz1\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) sendmsg$nl_xfrm(r1, &(0x7f0000001640)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001600)={&(0x7f0000001300)=@getae={0x2cc, 0x1f, 0x100, 0x70bd2a, 0x25dfdbfd, {{@in=@local, 0x4d2, 0xa, 0x3c}, @in=@broadcast, 0x2, 0x3506}, [@algo_auth_trunc={0x13d, 0x14, {{'xcbc(anubis)\x00'}, 0x788, 0x100, "75c9cc04a736e720cb086f211086cbe7f0f238f442f394ab850eef847ca02a5a0a1db4fb27b9da876f98e81d05d40937f0ab04cf3ab13b4611dedfda75c8e8fef1eaea01f3386859b62c01d67770e980f97fe7cd0a43ee389b9213ed38f7d05765ebb2736016b283b1e31275dce861e0201a69a73dee1952dfd07d0ee9f9f239d3c1fb39ab7e62be8c78f7a7b8359bd6c39849203854bfba676ee9c437ff115199c990f879aadcb4c7aaa8a934b2d442c5ded96183187c15278577206493f8a3ab850bd914158f0e24f3c9dd7252b656c4e9e1a1c3a864f8fee7c0b467c6a2936fa67889fa858ebe3012140fc18df86db1"}}, @offload={0xc, 0x1c, {r3, 0x2}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x1}, @replay_val={0x10, 0xa, {0x70bd2c, 0x3, 0x1ac4}}, @address_filter={0x28, 0x1a, {@in6=@mcast2, @in=@empty, 0x2, 0x4, 0x76}}, @algo_comp={0xfe, 0x3, {{'deflate\x00'}, 0x5b0, "99ea86f280cff6b183b98b574cad0d226a2733318596fc9b32d7437fcac632c0aa5cefa84cccf76797ac8bf05a551fdc47573bb12bf10afe46ead87ef45d17b0330de0011a56a1e4e4ed11c632d52daa230e88b7ac4105553b5d0e97beb8d46fd17c27a6f0038375b10ac72f3128fee2f8bd94a91728490f61b4788a9f9c8e595da3b734b67c5d5692d300d999ce374525c1544e0258d591b72938930d262e6be197126ea661ef2ac0451308eef3275e7381518b1c04"}}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4810}, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f0000001680)) socket$nl_xfrm(0x10, 0x3, 0x6) 15.668872498s ago: executing program 4 (id=2828): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000c00)=ANY=[], 0xa4}}, 0x5) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x3, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x2, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x6}, 0x0, 0x200}, [@tmpl={0x104, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x2b}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x2, 0x0, 0x73, 0x9, 0x5, 0x7}, {{@in6=@loopback, 0x4d4, 0x2b}, 0x2, @in6=@mcast1, 0x3500, 0x0, 0x1, 0x7, 0x5, 0x3, 0x7}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x80000001, 0x2b}, 0xa, @in=@remote, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x1bc}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x48065}, 0x8000) (async, rerun: 32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x7}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000600)={r4, 0x9}, 0x8) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={r4, 0xfff, 0x8, 0x50b9, 0x9, 0xfff}, &(0x7f0000000240)=0x14) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000080095"], &(0x7f0000000040)='GPL\x00'}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r6, 0x1f}, 0x20) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, 0x0) (rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000080000000000000001000000620121000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7100030000008900000008000300", @ANYRES32=r9, @ANYBLOB="20001d801c00008006000500b000000005000c000100000005f50b0000000000"], 0x3c}}, 0x4) r10 = socket(0x11, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r10, &(0x7f00000001c0)={0x11, 0x0, r12, 0x1, 0x2, 0x6, @broadcast}, 0x14) (async) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async, rerun: 64) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd617d52f500101101fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e244e23001090780200000000000000a66ad7cba8c66d4c74b238943b6886cbe6f15d2c0bc1209b87801e9d661e5b2b4ffb5db4351ec5cb5d03d94dbbd7a20baf7f382869dd856e744dcf842e391fbdec980c2fab51d7baf18dba009c060d10ce160df6146ea98161c6165266b60169758c255085bee22d25dbed32810e9c46806851606dde6e61"], 0x0) (rerun: 64) 15.641837816s ago: executing program 4 (id=2829): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_flags=0x1000}) (fail_nth: 6) 15.353961064s ago: executing program 4 (id=2830): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000500000073019f000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@allocspi={0x1f8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x70bd25, 0x70bd26, 0x70bd29, 0x7}}, @sa={0xe4, 0x6, {{@in6=@mcast2, @in6=@private2, 0x4e24, 0x5, 0x4e22, 0x8175, 0x2, 0x80, 0x40, 0x16}, {@in=@multicast1, 0x4d2, 0xf7b07c621d3cd55b}, @in=@multicast1, {0x45, 0x1, 0x9, 0x9, 0x8, 0x8, 0xfffffffffffff800, 0x6}, {0x9, 0xc, 0x6}, {0x8, 0x3, 0x3}, 0x70bd2a, 0x3503, 0x2, 0x4, 0x6, 0x99}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @multicast1}, {0x100, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xfa, 0x0, @val=0x80}}}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x0, 0x5, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_DREG={0x0, 0x1, 0x1, 0x0, 0xb}, @NFTA_PAYLOAD_SREG={0x0, 0x5, 0x1, 0x0, 0x16}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x9}]}}}, {0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x0, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x20000840) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000009c0)={'filter\x00', 0x7, 0x4, 0x3f8, 0x0, 0x0, 0x0, 0x408, 0x408, 0x408, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @unspec=@SECMARK={0x0, 'SECMARK\x00', 0x0, {0x1, 0x2, 'system_u:object_r:pinentry_exec_t:s0\x00'}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x15}, 0xffffffff, 0xff000000, 0x5, 0x7, {@mac=@remote, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x2f, 0x4, 0x7, 0xfffc, 0xff, 0x6, 'dvmrp1\x00', 'ipvlan1\x00', {}, {0xff}, 0x0, 0xe}, 0xc0, 0xf0}, @mangle={0x0, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @private=0xa010102, @private=0xa010101, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0x32}, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x42c1088e52025bee) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003ec0)={0x24, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x7, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, 0x24}}, 0x2000c004) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000ac0)=""/246, 0xf6}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000003340)=""/4071, 0xfe7}, {&(0x7f00000009c0)=""/219, 0xdb}, {&(0x7f0000000500)=""/245, 0xf5}, {&(0x7f0000000bc0)=""/215, 0xd7}, {&(0x7f0000000240)=""/163, 0xa3}, {&(0x7f0000000300)=""/205, 0xcd}, {&(0x7f0000000140)=""/40, 0x28}, {&(0x7f0000000440)=""/153, 0x99}, {&(0x7f00000007c0)=""/94, 0x5e}, {&(0x7f0000000040)=""/12, 0xc}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000700)=""/135, 0x87}], 0xe}, 0x40002100) 2.025315295s ago: executing program 32 (id=2821): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0xc, "e8"}], 0x18}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042800c00018006000600800a0000140002800d001480080018"], 0x38}, 0x1, 0x0, 0x0, 0x48855}, 0xc000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x810, 0xffffffffffffffff, 0x215ec000) close(0x3) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @none, 0x1}, 0xa) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000002000)=[{r3, 0x93d4}], 0x1, 0x6) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'dummy0\x00', 0x1}, 0x18) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x34, r6, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x28080) 1.516246564s ago: executing program 33 (id=2824): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000000327bd7000fbdbdf2500000000", @ANYBLOB="320a050023080000bc001280080001007674690004001f80080004"], 0x38}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003740)=@newchain={0x24, 0x64, 0x2, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffff}, {0xe, 0xe}, {0x9, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x81) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01400010000600000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff05000700263a3a0914000600626f6e64300000000000000001000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x4) 1.468814884s ago: executing program 34 (id=2823): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0xfb, 0x80, &(0x7f00000002c0)="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", &(0x7f0000000200)=""/128, 0x9, 0x0, 0x73, 0x50, &(0x7f00000003c0)="59d5dd5bab4c57d9f157f402e315632f08818e5f83b9c19878789a42a57e229262a20e5d32c16e74687b9cc1a63cf4fa052b6fd81ebdfee335d004851a184058eb67e0bc8b05a17ad3dcfbdeb5e900f37ac6d016311f4a0f165254c08392b7c4f9055f3bb036c36ec45f40c86439566260105b", &(0x7f0000000440)="db56c7b1919054365bc1a8f38b5fa75112f451e21ccc3569157b28d9902b4c02b08b066d0a842a195a7c176be3c2bb56a2143f6ec35e1eb43b277e6f7421abe95c7f6dd173a2863ddd44ba28f421e336", 0xf, 0x0, 0x6}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x40}, @val={0x8, 0x3, r4}, @val={0xc}}}}, 0x30}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) (async) unshare(0x400) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000080), 0x2, 0x0) sendfile(r7, r7, &(0x7f00000000c0)=0x4, 0x38c6) (async) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r2, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "c4358bd0e3"}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "664a9f429a1c7b29bc9a70a0a0"}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4044000) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) unshare(0x2c020400) 0s ago: executing program 35 (id=2830): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000500000073019f000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@allocspi={0x1f8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd25, 0x70bd25, 0x70bd26, 0x70bd29, 0x7}}, @sa={0xe4, 0x6, {{@in6=@mcast2, @in6=@private2, 0x4e24, 0x5, 0x4e22, 0x8175, 0x2, 0x80, 0x40, 0x16}, {@in=@multicast1, 0x4d2, 0xf7b07c621d3cd55b}, @in=@multicast1, {0x45, 0x1, 0x9, 0x9, 0x8, 0x8, 0xfffffffffffff800, 0x6}, {0x9, 0xc, 0x6}, {0x8, 0x3, 0x3}, 0x70bd2a, 0x3503, 0x2, 0x4, 0x6, 0x99}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @multicast1}, {0x100, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xfa, 0x0, @val=0x80}}}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x0, 0x5, 0x1, 0x0, 0x8}, @NFTA_PAYLOAD_DREG={0x0, 0x1, 0x1, 0x0, 0xb}, @NFTA_PAYLOAD_SREG={0x0, 0x5, 0x1, 0x0, 0x16}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x9}]}}}, {0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x0, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x20000840) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000009c0)={'filter\x00', 0x7, 0x4, 0x3f8, 0x0, 0x0, 0x0, 0x408, 0x408, 0x408, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @unspec=@SECMARK={0x0, 'SECMARK\x00', 0x0, {0x1, 0x2, 'system_u:object_r:pinentry_exec_t:s0\x00'}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x15}, 0xffffffff, 0xff000000, 0x5, 0x7, {@mac=@remote, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x2f, 0x4, 0x7, 0xfffc, 0xff, 0x6, 'dvmrp1\x00', 'ipvlan1\x00', {}, {0xff}, 0x0, 0xe}, 0xc0, 0xf0}, @mangle={0x0, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @private=0xa010102, @private=0xa010101, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0x32}, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x42c1088e52025bee) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003ec0)={0x24, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x7, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, 0x24}}, 0x2000c004) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000ac0)=""/246, 0xf6}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000003340)=""/4071, 0xfe7}, {&(0x7f00000009c0)=""/219, 0xdb}, {&(0x7f0000000500)=""/245, 0xf5}, {&(0x7f0000000bc0)=""/215, 0xd7}, {&(0x7f0000000240)=""/163, 0xa3}, {&(0x7f0000000300)=""/205, 0xcd}, {&(0x7f0000000140)=""/40, 0x28}, {&(0x7f0000000440)=""/153, 0x99}, {&(0x7f00000007c0)=""/94, 0x5e}, {&(0x7f0000000040)=""/12, 0xc}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000700)=""/135, 0x87}], 0xe}, 0x40002100) kernel console output (not intermixed with test programs): .1705'. [ 276.158862][T12963] netlink: 'syz.3.1710': attribute type 29 has an invalid length. [ 276.703496][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.950250][T12963] netlink: 'syz.3.1710': attribute type 29 has an invalid length. [ 277.385940][T13006] lo speed is unknown, defaulting to 1000 [ 277.876006][T13026] syzkaller0: entered promiscuous mode [ 277.883610][T13026] syzkaller0: entered allmulticast mode [ 280.411660][ T6482] net_ratelimit: 2 callbacks suppressed [ 280.411684][ T6482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.426485][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.645988][T13038] netlink: 'syz.4.1725': attribute type 5 has an invalid length. [ 281.092256][T13079] netlink: 'syz.4.1734': attribute type 1 has an invalid length. [ 281.816454][T13103] __nla_validate_parse: 7 callbacks suppressed [ 281.816477][T13103] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1741'. [ 282.101035][T13115] netlink: 'syz.0.1741': attribute type 1 has an invalid length. [ 282.225898][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.234738][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.269820][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.318237][ T49] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.322685][T13120] netlink: 'syz.3.1746': attribute type 10 has an invalid length. [ 282.335937][ T6461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.344162][ T6491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.352346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 282.410759][T13120] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1746'. [ 282.441019][T13122] sctp: [Deprecated]: syz.2.1747 (pid 13122) Use of int in max_burst socket option. [ 282.441019][T13122] Use struct sctp_assoc_value instead [ 282.487385][T13122] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 282.494878][T13122] IPv6: NLM_F_CREATE should be set when creating new route [ 282.502474][T13122] IPv6: NLM_F_CREATE should be set when creating new route [ 282.509876][T13122] IPv6: NLM_F_CREATE should be set when creating new route [ 282.513826][T13127] hsr0: entered promiscuous mode [ 282.523077][T13122] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 282.533482][T13126] hsr0: left promiscuous mode [ 282.571606][T13130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1742'. [ 282.649565][T13129] lo speed is unknown, defaulting to 1000 [ 282.714887][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1750'. [ 282.732678][T13139] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1751'. [ 282.761686][T13139] netlink: 'syz.0.1751': attribute type 7 has an invalid length. [ 282.786679][T13140] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 282.805881][T13139] netlink: 'syz.0.1751': attribute type 8 has an invalid length. [ 282.834570][T13132] netlink: 'syz.1.1749': attribute type 1 has an invalid length. [ 282.846428][T13139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1751'. [ 282.877769][T13132] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1749'. [ 283.270912][T13164] netlink: 'syz.4.1757': attribute type 1 has an invalid length. [ 283.354250][T13164] bond4: entered promiscuous mode [ 283.359568][T13164] bond4: entered allmulticast mode [ 283.366324][T13164] 8021q: adding VLAN 0 to HW filter on device bond4 [ 283.383251][T13168] macvlan3: entered promiscuous mode [ 283.388870][T13168] macvlan3: entered allmulticast mode [ 283.397471][T13169] sctp: [Deprecated]: syz.2.1758 (pid 13169) Use of int in max_burst socket option deprecated. [ 283.397471][T13169] Use struct sctp_assoc_value instead [ 283.421992][T13168] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 283.515734][T13173] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1760'. [ 283.653948][T13171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1759'. [ 284.108325][T13198] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 284.258381][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1768'. [ 284.562892][T13217] siw: device registration error -23 [ 284.748038][T13215] lo speed is unknown, defaulting to 1000 [ 285.336495][T13248] syzkaller0: entered promiscuous mode [ 285.342550][T13248] syzkaller0: entered allmulticast mode [ 286.181822][ T6482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.191708][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.637440][T13306] hsr_slave_0: left promiscuous mode [ 286.667866][T13306] hsr_slave_1: left promiscuous mode [ 286.724309][T13313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.831857][T13315] netlink: 'syz.2.1797': attribute type 3 has an invalid length. [ 286.883633][T13319] __nla_validate_parse: 7 callbacks suppressed [ 286.883659][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'. [ 286.921882][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'. [ 286.964484][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'. [ 287.021270][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'. [ 287.095328][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'. [ 287.106874][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'. [ 287.118508][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'. [ 287.155071][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'. [ 287.182889][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'. [ 287.201618][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'. [ 287.216558][T13319] bridge0: left allmulticast mode [ 287.232084][T13319] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.468681][T13349] xt_hashlimit: size too large, truncated to 1048576 [ 287.512014][T13350] netlink: 'syz.1.1804': attribute type 2 has an invalid length. [ 288.027023][T13357] bond3: invalid ARP target 0.0.0.0 specified for addition [ 288.059924][T13357] bond3: option arp_ip_target: invalid value (0) [ 288.069391][T13357] bond3 (unregistering): Released all slaves [ 288.085542][T13364] netlink: 'syz.3.1808': attribute type 1 has an invalid length. [ 288.094519][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.103506][ T6476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.112599][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.379171][T13367] bond10: option xmit_hash_policy: invalid value (10) [ 288.410983][T13367] bond10 (unregistering): Released all slaves [ 288.731831][ T6024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.741124][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.846196][T13328] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.673962][T13410] bridge0: port 1(1¾x9ÿ) entered disabled state [ 290.694506][T13418] netlink: 'syz.2.1818': attribute type 16 has an invalid length. [ 290.722810][T13410] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.741812][T13418] netlink: 'syz.2.1818': attribute type 17 has an invalid length. [ 290.801286][T13410] bridge0: port 3(hsr0) entered disabled state [ 290.911471][T13415] bond5: entered allmulticast mode [ 290.917420][T13415] 8021q: adding VLAN 0 to HW filter on device bond5 [ 290.939575][T13418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.981755][T13420] netlink: 'syz.0.1821': attribute type 2 has an invalid length. [ 291.029861][T13427] : renamed from veth0_to_bond [ 291.179228][T13436] netlink: 'syz.0.1825': attribute type 1 has an invalid length. [ 291.582014][T13462] rdma_op ffff888035c8d9f0 conn xmit_rdma 0000000000000000 [ 291.591194][T13463] rdma_op ffff888035c8b9f0 conn xmit_rdma 0000000000000000 [ 291.602405][ T6024] IPVS: starting estimator thread 0... [ 291.707467][T13467] net_ratelimit: 2 callbacks suppressed [ 291.707490][T13467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.723863][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.732503][T13464] IPVS: using max 32 ests per chain, 76800 per kthread [ 291.783553][T13466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.793808][ T6499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.805289][T13466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.935174][ T6499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.944002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.015688][T13484] xt_CONNSECMARK: invalid mode: 0 [ 292.065563][T13487] __nla_validate_parse: 15 callbacks suppressed [ 292.065583][T13487] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1841'. [ 292.095095][T13485] syz_tun: entered allmulticast mode [ 292.123327][T13485] netem: change failed [ 292.130933][T13481] syz_tun: left allmulticast mode [ 292.255398][T13498] tipc: Enabling of bearer rejected, already enabled [ 292.287066][T13500] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1846'. [ 292.574991][T13518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1851'. [ 292.630943][T13523] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1854'. [ 292.682996][T13528] netlink: 'syz.1.1855': attribute type 4 has an invalid length. [ 292.854633][T13522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.872129][T13522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.916438][T13539] openvswitch: netlink: Multiple metadata blocks provided [ 293.149547][T13539] lo speed is unknown, defaulting to 1000 [ 293.556416][T13562] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1862'. [ 293.762049][T13570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1864'. [ 293.813684][T13575] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1866'. [ 293.850629][ T6476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.859194][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.889950][T13576] netlink: 'syz.0.1866': attribute type 4 has an invalid length. [ 294.265570][T13597] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1869'. [ 294.364894][T13603] netlink: 'syz.0.1870': attribute type 1 has an invalid length. [ 294.373071][T13603] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1870'. [ 294.440171][T13607] netlink: 'syz.0.1870': attribute type 1 has an invalid length. [ 294.489154][T13541] IPVS: length: 132 != 8 [ 294.502671][T13607] bond6: entered promiscuous mode [ 294.510854][T13607] 8021q: adding VLAN 0 to HW filter on device bond6 [ 294.564560][T13541] pimreg: entered allmulticast mode [ 294.649065][T13603] 8021q: adding VLAN 0 to HW filter on device bond6 [ 294.702041][T13603] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 294.716335][T13603] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 294.773249][T13603] bond6: (slave wireguard0): making interface the new active one [ 294.785452][T13603] wireguard0: entered promiscuous mode [ 294.793336][T13603] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 294.818191][T13541] pimreg: left allmulticast mode [ 295.241934][T13644] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1875'. [ 295.973428][T13677] ip6erspan0: entered allmulticast mode [ 296.201647][T13684] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 297.050935][ T6482] net_ratelimit: 1 callbacks suppressed [ 297.050957][ T6482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.065273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.273261][T13700] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 298.148075][T13705] syzkaller1: entered promiscuous mode [ 298.154370][T13705] syzkaller1: entered allmulticast mode [ 299.622699][ T6482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.631202][ T6461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.639395][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.527432][T13737] wlan1 speed is unknown, defaulting to 1000 [ 301.649373][T13737] wlan1 speed is unknown, defaulting to 1000 [ 301.649400][T13745] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 301.667890][T13737] wlan1 speed is unknown, defaulting to 1000 [ 301.705274][T13737] infiniband óyz2: RDMA CMA: cma_listen_on_dev, error -98 [ 301.809821][T13737] wlan1 speed is unknown, defaulting to 1000 [ 301.819564][T13737] wlan1 speed is unknown, defaulting to 1000 [ 301.828446][T13737] wlan1 speed is unknown, defaulting to 1000 [ 301.840445][T13737] wlan1 speed is unknown, defaulting to 1000 [ 301.848952][T13737] wlan1 speed is unknown, defaulting to 1000 [ 302.041004][T13771] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 302.074986][T13771] sctp: [Deprecated]: syz.2.1905 (pid 13771) Use of int in maxseg socket option. [ 302.074986][T13771] Use struct sctp_assoc_value instead [ 302.112201][T13773] netlink: 'syz.3.1906': attribute type 32 has an invalid length. [ 302.237903][T13782] netlink: 'syz.4.1909': attribute type 1 has an invalid length. [ 302.406693][T13796] __nla_validate_parse: 4 callbacks suppressed [ 302.406715][T13796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1914'. [ 302.450319][T13798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.527761][T13797] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1914'. [ 302.570651][T13806] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1914'. [ 302.728239][T13817] team_slave_0: entered promiscuous mode [ 302.734456][T13817] team_slave_1: entered promiscuous mode [ 302.742304][T13817] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 302.790885][T13819] netlink: 'syz.4.1918': attribute type 12 has an invalid length. [ 302.799040][T13819] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1918'. [ 302.812268][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.821118][ T6499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.829352][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.837527][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.887265][T13821] netlink: 'syz.4.1919': attribute type 11 has an invalid length. [ 303.016155][T13826] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1921'. [ 303.026721][T13827] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1921'. [ 303.129130][T13831] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 305.341548][T13810] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 305.400525][ T6461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.409345][ T6461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.418048][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.647707][T13859] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1929'. [ 305.683197][T13860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1931'. [ 305.716382][T13860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1931'. [ 305.744444][T13867] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1932'. [ 306.324820][T13896] Bluetooth: MGMT ver 1.23 [ 306.612595][T13915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.763070][T13905] team0: Port device team_slave_0 removed [ 306.889112][T13933] netlink: 'syz.1.1951': attribute type 1 has an invalid length. [ 307.132563][T13934] lo speed is unknown, defaulting to 1000 [ 307.141517][T13934] wlan1 speed is unknown, defaulting to 1000 [ 307.427820][T13964] __nla_validate_parse: 6 callbacks suppressed [ 307.427844][T13964] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1959'. [ 307.647846][T13955] lo speed is unknown, defaulting to 1000 [ 307.695427][T13955] wlan1 speed is unknown, defaulting to 1000 [ 307.862140][T13983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1963'. [ 308.294771][T13998] syzkaller0: entered promiscuous mode [ 308.301268][T13998] syzkaller0: entered allmulticast mode [ 308.542547][T14018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.606209][ T6482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.761804][T14031] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1975'. [ 309.003614][T14043] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 309.027279][T14043] team0 (unregistering): Port device team_slave_0 removed [ 309.045156][T14050] nbd: must specify at least one socket [ 309.059172][T14043] team0 (unregistering): Failed to send options change via netlink (err -105) [ 309.060139][T14053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1978'. [ 309.109553][T14043] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 309.205007][T14043] team0 (unregistering): Port device team_slave_1 removed [ 309.346714][T14064] bond3: entered promiscuous mode [ 309.360501][T14064] bond3: entered allmulticast mode [ 309.366541][T14064] 8021q: adding VLAN 0 to HW filter on device bond3 [ 309.383183][T14058] syzkaller1: entered promiscuous mode [ 309.398546][T14058] syzkaller1: entered allmulticast mode [ 309.445218][T14078] netlink: 'syz.0.1984': attribute type 12 has an invalid length. [ 309.453069][T14080] sctp: [Deprecated]: syz.1.1986 (pid 14080) Use of int in maxseg socket option. [ 309.453069][T14080] Use struct sctp_assoc_value instead [ 309.480254][T14078] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1984'. [ 309.554506][T14082] tipc: Enabling of bearer rejected, failed to enable media [ 309.596161][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1986'. [ 309.667116][T14085] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1986'. [ 309.724273][ T29] audit: type=1800 audit(1773053525.242:5): pid=14093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1989" name=CB dev="tmpfs" ino=2142 res=0 errno=0 [ 310.222578][T14123] netlink: 'syz.0.1994': attribute type 21 has an invalid length. [ 310.390045][T14126] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1996'. [ 310.856176][T14148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 310.924470][T14152] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2003'. [ 311.005171][T14155] netlink: 'syz.3.2004': attribute type 10 has an invalid length. [ 311.022318][T14155] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2004'. [ 311.131124][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.140065][ T6461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.177616][T14163] netlink: 'syz.1.2006': attribute type 11 has an invalid length. [ 311.525347][T14182] ..0ªî{X¹¦: renamed from gretap0 [ 311.578409][T14183] netlink: 'syz.1.2014': attribute type 1 has an invalid length. [ 311.589195][T14182] ..0ªî{X¹¦: entered allmulticast mode [ 311.634810][T14182] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 311.666036][T14190] netlink: 'syz.4.2016': attribute type 8 has an invalid length. [ 311.710739][T14183] bond3: entered promiscuous mode [ 311.718165][T14183] 8021q: adding VLAN 0 to HW filter on device bond3 [ 311.767396][T14204] tipc: Can't bind to reserved service type 0 [ 311.881235][T14182] bond3: (slave bridge7): making interface the new active one [ 311.889078][T14182] bridge7: entered promiscuous mode [ 311.920035][T14182] bridge7: left promiscuous mode [ 312.175202][T14186] lo speed is unknown, defaulting to 1000 [ 312.188101][T14214] bond4: option mode: unable to set because the bond device has slaves [ 312.208637][T14216] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 312.270510][T14186] wlan1 speed is unknown, defaulting to 1000 [ 312.498547][T14233] __nla_validate_parse: 2 callbacks suppressed [ 312.498569][T14233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2025'. [ 312.586806][T14233] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2025'. [ 312.711087][T14241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2027'. [ 312.749482][T14241] IPVS: Error connecting to the multicast addr [ 312.782372][T14246] netlink: 'syz.3.2027': attribute type 1 has an invalid length. [ 312.802073][T14243] openvswitch: netlink: Flow key attribute not present in set flow. [ 312.858372][T14241] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 312.963301][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2031'. [ 313.090886][T14261] bridge0: mtu less than device minimum [ 313.097335][T14261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 313.112427][T14261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.157385][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2033'. [ 313.187285][T14263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2033'. [ 313.242965][T14265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.351693][T14265] netlink: 'syz.1.2033': attribute type 10 has an invalid length. [ 313.608550][T14287] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2039'. [ 313.669524][T14287] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 313.715673][T14287] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 313.911298][T14300] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2044'. [ 313.974921][T14304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2046'. [ 313.984431][T14300] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2044'. [ 314.334165][ T6491] net_ratelimit: 1 callbacks suppressed [ 314.334190][ T6491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.372980][T14326] netlink: 'syz.1.2053': attribute type 2 has an invalid length. [ 314.412014][T14328] can: request_module (can-proto-4) failed. [ 314.429118][T14326] hmac(sha224): entered promiscuous mode [ 314.579968][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 314.671109][T14346] netlink: 'syz.1.2057': attribute type 1 has an invalid length. [ 315.131350][T14365] syzkaller0: entered promiscuous mode [ 315.150619][T14365] syzkaller0: entered allmulticast mode [ 315.726280][T14387] bond11: option primary_reselect: invalid value (4) [ 315.762167][T14387] bond11 (unregistering): Released all slaves [ 316.084628][T14403] netlink: 'syz.2.2072': attribute type 5 has an invalid length. [ 316.251227][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.613077][T14426] ip6erspan1: entered allmulticast mode [ 316.890887][ T6024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.899075][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.907432][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.028390][T14456] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.105470][ T5831] Bluetooth: hci4: link tx timeout [ 317.111869][ T5831] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 317.636184][T14484] netlink: 'syz.0.2091': attribute type 1 has an invalid length. [ 317.661285][T14489] syzkaller1: entered promiscuous mode [ 317.666830][T14489] syzkaller1: entered allmulticast mode [ 317.681290][T14484] __nla_validate_parse: 4 callbacks suppressed [ 317.681313][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2091'. [ 317.979450][ T29] audit: type=1800 audit(1773053533.492:6): pid=14492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2090" name="memory.events" dev="tmpfs" ino=2270 res=0 errno=0 [ 318.114041][T14498] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2094'. [ 318.442798][T14506] lo: Caught tx_queue_len zero misconfig [ 318.685520][T14520] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2097'. [ 319.130407][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 319.181593][T14539] nbd3: detected capacity change from 0 to 63 [ 319.292246][ T51] block nbd3: Receive control failed (result -104) [ 319.450659][ T6482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.170225][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.179144][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.020640][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.652215][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.210952][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.490219][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.498812][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.130599][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.410452][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.970604][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.982816][ T6024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.991810][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.250761][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.450805][ T6461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.011005][ T6461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.011651][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.650050][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.658339][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.668133][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.210987][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.770747][ T6482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.778958][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.054012][ T6024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.062709][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.971307][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.531015][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.533399][ T1682] block nbd3: Possible stuck request ffff888026ce0000: control (read@0,1024B). Runtime 30 seconds [ 349.551508][ T1682] block nbd3: Possible stuck request ffff888026ce0200: control (read@1024,1024B). Runtime 30 seconds [ 349.562629][ T1682] block nbd3: Possible stuck request ffff888026ce0400: control (read@2048,1024B). Runtime 30 seconds [ 349.573717][ T1682] block nbd3: Possible stuck request ffff888026ce0600: control (read@3072,1024B). Runtime 30 seconds [ 352.730507][ T6461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.291399][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.492867][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.131129][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.139613][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.050552][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.970143][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.978621][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.987052][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.988347][T14654] sctp: [Deprecated]: syz.2.2107 (pid 14654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 362.988347][T14654] Use struct sctp_sack_info instead [ 362.997494][T14660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2106'. [ 363.036541][T14654] sctp: [Deprecated]: syz.2.2107 (pid 14654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 363.036541][T14654] Use struct sctp_sack_info instead [ 363.070798][T14654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2107'. [ 363.179940][T14675] netlink: 'syz.4.2110': attribute type 10 has an invalid length. [ 363.187955][T14675] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 363.438965][T14692] lo speed is unknown, defaulting to 1000 [ 363.449227][T14693] netlink: 'syz.4.2115': attribute type 1 has an invalid length. [ 363.467245][T14692] wlan1 speed is unknown, defaulting to 1000 [ 363.542895][T14698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2117'. [ 363.984617][T14716] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2122'. [ 364.043798][T14716] bond11: entered promiscuous mode [ 364.093111][T14712] lo speed is unknown, defaulting to 1000 [ 364.161945][T14724] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2124'. [ 364.175594][T14712] wlan1 speed is unknown, defaulting to 1000 [ 364.250744][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.381119][T14734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.455974][T14728] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.735001][T14748] netlink: 'syz.3.2132': attribute type 10 has an invalid length. [ 365.261244][T14765] netlink: 'syz.0.2137': attribute type 1 has an invalid length. [ 365.337157][T14772] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 365.371046][T14773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2138'. [ 365.487402][T14776] netlink: 'syz.2.2140': attribute type 14 has an invalid length. [ 365.632055][T14781] xt_CT: No such helper "syz0" [ 365.650132][T14768] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2138'. [ 365.683643][T14787] netlink: 'syz.0.2143': attribute type 1 has an invalid length. [ 365.757620][T14790] macvtap0: entered promiscuous mode [ 366.025037][T14807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2149'. [ 366.297003][T14811] veth0_to_bond: entered allmulticast mode [ 366.453645][T14822] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2154'. [ 366.525913][T14825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2155'. [ 366.719461][T14834] netlink: 'syz.3.2157': attribute type 1 has an invalid length. [ 366.810888][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.069531][T14857] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 367.198040][T14860] lo speed is unknown, defaulting to 1000 [ 367.208842][T14860] wlan1 speed is unknown, defaulting to 1000 [ 367.368674][T14877] : entered promiscuous mode [ 367.608766][ T29] audit: type=1107 audit(1773053583.132:7): pid=14888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='è—Ímv6C0ÍqIÅ7Z4eoRù´Öf¼ÔWÍ<¥j£ù¼‹¼§„YI…Â;.x¤ïŽVìÐw¶òilÌÇi›ßÒ™©<ðÕ³[5Ö'ßèŸS¢ýŽ¿êÏç]˜Ô [ 367.608766][ T29] ëñH_ àïSzëW-rƒýéS'ƒ(.Y_0ç)kžý<ÊL¸¸â핲¥â›¬ ÏÎvbÀF' [ 367.645275][T14891] : entered promiscuous mode [ 367.905534][T14903] lo speed is unknown, defaulting to 1000 [ 367.917887][T14903] wlan1 speed is unknown, defaulting to 1000 [ 368.090923][ T6476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.559533][T14922] __nla_validate_parse: 4 callbacks suppressed [ 368.559586][T14922] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2181'. [ 368.676800][T14928] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2182'. [ 369.143444][T14950] lo speed is unknown, defaulting to 1000 [ 369.211069][T14950] wlan1 speed is unknown, defaulting to 1000 [ 369.222969][T14963] netlink: 'syz.4.2191': attribute type 1 has an invalid length. [ 369.228039][T14957] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 369.233829][T14963] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2191'. [ 369.518044][T14972] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.2193'. [ 369.699056][T14978] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2195'. [ 369.752114][T14985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2195'. [ 370.011608][ T6476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.042358][T14994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2200'. [ 370.066324][T14994] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2200'. [ 370.185707][T15001] netlink: 'syz.0.2201': attribute type 1 has an invalid length. [ 370.200318][T15001] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2201'. [ 370.231205][T14998] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2202'. [ 370.368613][T15017] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 370.428689][T15001] netlink: 'syz.0.2201': attribute type 21 has an invalid length. [ 370.645413][T15033] tipc: Enabled bearer , priority 0 [ 370.797996][T15033] tipc: Resetting bearer [ 371.193360][T15068] openvswitch: netlink: Actions may not be safe on all matching packets [ 371.203656][T15066] netlink: 'syz.4.2216': attribute type 5 has an invalid length. [ 371.448836][T15069] syzkaller0: entered promiscuous mode [ 371.473716][T15084] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 371.504238][T15069] syzkaller0: entered allmulticast mode [ 371.942618][ T6461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.216246][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.225134][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.858074][ T6461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.819634][T15151] __nla_validate_parse: 11 callbacks suppressed [ 374.821687][T15141] lo speed is unknown, defaulting to 1000 [ 374.828315][T15151] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2230'. [ 374.862143][T15141] wlan1 speed is unknown, defaulting to 1000 [ 374.872301][T15144] lo speed is unknown, defaulting to 1000 [ 374.895766][T15144] wlan1 speed is unknown, defaulting to 1000 [ 375.429613][T15179] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 375.487914][T15179] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 375.630752][T15187] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2238'. [ 375.696527][T15187] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2238'. [ 375.750123][T15187] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2238'. [ 375.757564][T15192] syzkaller0: entered allmulticast mode [ 375.771234][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.772662][T15192] syzkaller0: entered promiscuous mode [ 375.796912][T15187] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2238'. [ 375.835284][T15192] syzkaller0 (unregistering): left promiscuous mode [ 375.850166][T15187] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2238'. [ 375.863825][T15192] syzkaller0 (unregistering): left allmulticast mode [ 375.895665][T15187] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2238'. [ 375.945338][T15187] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2238'. [ 375.980107][T15187] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2238'. [ 375.990333][T15187] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2238'. [ 376.246096][T15207] netlink: 'syz.1.2241': attribute type 1 has an invalid length. [ 376.763295][T15217] bond12: entered promiscuous mode [ 376.801247][T15217] 8021q: adding VLAN 0 to HW filter on device bond12 [ 377.304271][T15237] netlink: 'syz.3.2250': attribute type 4 has an invalid length. [ 377.677043][T15284] netlink: 'syz.1.2261': attribute type 1 has an invalid length. [ 377.700313][ T6482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.283338][T15310] netlink: 'syz.4.2265': attribute type 11 has an invalid length. [ 378.317076][T15310] netlink: 'syz.4.2265': attribute type 23 has an invalid length. [ 378.588139][T15308] pimreg: tun_chr_ioctl cmd 1074025677 [ 378.595440][T15308] pimreg: linktype set to 516 [ 378.616947][T15314] netlink: 'syz.4.2265': attribute type 2 has an invalid length. [ 378.932632][T15312] lo speed is unknown, defaulting to 1000 [ 378.982360][T15312] wlan1 speed is unknown, defaulting to 1000 [ 379.615636][ T6457] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.624569][ T1682] block nbd3: Possible stuck request ffff888026ce0000: control (read@0,1024B). Runtime 60 seconds [ 379.637013][ T1682] block nbd3: Possible stuck request ffff888026ce0200: control (read@1024,1024B). Runtime 60 seconds [ 379.648184][ T1682] block nbd3: Possible stuck request ffff888026ce0400: control (read@2048,1024B). Runtime 60 seconds [ 379.659598][ T1682] block nbd3: Possible stuck request ffff888026ce0600: control (read@3072,1024B). Runtime 60 seconds [ 379.783758][T15355] ip6gretap0 (unregistering): left allmulticast mode [ 379.842640][T15360] __nla_validate_parse: 29 callbacks suppressed [ 379.842662][T15360] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2276'. [ 379.892617][T15362] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2276'. [ 380.531574][T15393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.658146][T15396] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2286'. [ 380.680374][T15396] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2286'. [ 380.690080][T15396] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2286'. [ 380.738177][T15401] netlink: 'syz.0.2287': attribute type 1 has an invalid length. [ 380.746499][T15401] netlink: 'syz.0.2287': attribute type 1 has an invalid length. [ 380.756031][T15401] netlink: 9172 bytes leftover after parsing attributes in process `syz.0.2287'. [ 380.769386][T15401] x_tables: duplicate underflow at hook 3 [ 380.826479][T15404] vlan1: entered promiscuous mode [ 380.833462][T15404] geneve1: entered promiscuous mode [ 380.839169][T15404] vlan1: entered allmulticast mode [ 380.846258][T15404] geneve1: entered allmulticast mode [ 380.890432][ T6461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.097986][T15419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2292'. [ 381.435715][T15436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2297'. [ 381.477197][T15436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2297'. [ 381.524571][T15436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2297'. [ 381.531598][T15437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.619891][T15436] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 381.838829][T15463] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.872636][T15457] bond4: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 381.904821][T15457] bond4 (unregistering): Released all slaves [ 382.105722][T15473] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:5 [ 382.173080][T15474] lo speed is unknown, defaulting to 1000 [ 382.181272][T15474] wlan1 speed is unknown, defaulting to 1000 [ 382.255672][T15481] netlink: 'syz.4.2310': attribute type 21 has an invalid length. [ 382.321693][T15481] netlink: 'syz.4.2310': attribute type 5 has an invalid length. [ 382.361420][T15481] netlink: 'syz.4.2310': attribute type 21 has an invalid length. [ 382.369863][T15481] netlink: 'syz.4.2310': attribute type 5 has an invalid length. [ 382.441373][T15481] netlink: 'syz.4.2310': attribute type 21 has an invalid length. [ 382.526611][T15481] netlink: 'syz.4.2310': attribute type 5 has an invalid length. [ 382.549620][T15481] netlink: 'syz.4.2310': attribute type 21 has an invalid length. [ 382.607259][T15481] netlink: 'syz.4.2310': attribute type 5 has an invalid length. [ 382.632333][T15481] netlink: 'syz.4.2310': attribute type 21 has an invalid length. [ 382.647791][T15481] netlink: 'syz.4.2310': attribute type 5 has an invalid length. [ 382.676656][T15499] x_tables: unsorted entry at hook 2 [ 382.713525][T15495] lo speed is unknown, defaulting to 1000 [ 382.756055][T15495] wlan1 speed is unknown, defaulting to 1000 [ 382.918566][T15500] netlink: 'syz.0.2315': attribute type 11 has an invalid length. [ 383.066187][T15517] bond1: option mode: unable to set because the bond device has slaves [ 383.412087][T15526] SET target dimension over the limit! [ 383.418551][T15525] openvswitch: netlink: Message has 4 unknown bytes. [ 383.426505][T15525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.453335][ T6491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.912486][T15544] syzkaller0: entered promiscuous mode [ 383.919210][T15544] syzkaller0: entered allmulticast mode [ 384.197219][T15564] vlan0: entered allmulticast mode [ 384.210265][T15564] geneve1: entered allmulticast mode [ 384.247204][T15567] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 384.277517][T15567] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 384.388297][ T6476] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.421433][ T6476] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.441867][ T6476] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.458557][ T6476] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.729875][ T6457] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.746995][T15585] pimreg: entered allmulticast mode [ 384.760874][ T6457] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.780344][ T6457] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.808748][T15585] pimreg: left allmulticast mode [ 384.912487][ T6457] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.059019][T15595] tipc: Resetting bearer [ 385.254540][T15609] batadv_slave_0: entered promiscuous mode [ 385.268737][T15604] syzkaller1: entered promiscuous mode [ 385.276311][T15604] syzkaller1: entered allmulticast mode [ 385.322001][T15604] __nla_validate_parse: 82 callbacks suppressed [ 385.322024][T15604] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2345'. [ 385.370916][ T6491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.532115][T15603] batadv_slave_0: left promiscuous mode [ 385.822533][T15619] lo speed is unknown, defaulting to 1000 [ 385.853296][T15619] wlan1 speed is unknown, defaulting to 1000 [ 385.902152][T15626] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2350'. [ 386.054263][T15631] netlink: 45 bytes leftover after parsing attributes in process `syz.3.2352'. [ 386.404234][T15643] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2356'. [ 386.482493][T15644] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2356'. [ 386.654676][ T6476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.117046][T15675] pim6reg1: entered promiscuous mode [ 387.123018][T15675] pim6reg1: entered allmulticast mode [ 387.188037][T15673] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2365'. [ 387.217907][T15678] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2364'. [ 387.241895][T15672] 8021q: adding VLAN 0 to HW filter on device bond6 [ 387.290479][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.298782][T15672] bond6: (slave ip6gretap1): making interface the new active one [ 387.299032][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.364824][T15672] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 387.535234][T15691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2370'. [ 387.771645][T15698] lo speed is unknown, defaulting to 1000 [ 387.834529][T15698] wlan1 speed is unknown, defaulting to 1000 [ 387.974832][T15710] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2375'. [ 388.019379][T15707] lo speed is unknown, defaulting to 1000 [ 388.034821][T15710] validate_nla: 62 callbacks suppressed [ 388.034844][T15710] netlink: 'syz.3.2375': attribute type 10 has an invalid length. [ 388.059385][T15707] wlan1 speed is unknown, defaulting to 1000 [ 388.070458][T15713] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2376'. [ 388.083625][T15710] netlink: 'syz.3.2375': attribute type 12 has an invalid length. [ 388.571547][ T6482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.392550][T15769] netlink: 'syz.4.2393': attribute type 1 has an invalid length. [ 389.419690][T15767] netlink: 'syz.0.2392': attribute type 1 has an invalid length. [ 389.427506][T15767] netlink: 'syz.0.2392': attribute type 2 has an invalid length. [ 389.437474][T15767] netlink: 'syz.0.2392': attribute type 22 has an invalid length. [ 389.510668][T15767] netlink: 'syz.0.2392': attribute type 22 has an invalid length. [ 389.558663][T15773] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 390.015635][T15796] delete_channel: no stack [ 390.109582][T15800] netlink: 'syz.2.2405': attribute type 3 has an invalid length. [ 390.118094][T15798] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 390.132012][T15800] netlink: 'syz.2.2405': attribute type 3 has an invalid length. [ 390.145501][T15800] netlink: 'syz.2.2405': attribute type 3 has an invalid length. [ 390.235388][T15805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.385575][T15805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.446930][T15818] nftables ruleset with unbound chain [ 390.478036][T15820] __nla_validate_parse: 20 callbacks suppressed [ 390.478063][T15820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2411'. [ 390.499345][T15818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2409'. [ 390.549131][T15811] lo speed is unknown, defaulting to 1000 [ 390.558701][T15811] wlan1 speed is unknown, defaulting to 1000 [ 390.853178][T15830] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2413'. [ 390.957252][T15832] lo speed is unknown, defaulting to 1000 [ 390.975410][T15832] wlan1 speed is unknown, defaulting to 1000 [ 391.131251][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.503038][T15858] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2423'. [ 391.545787][T15859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2422'. [ 391.617089][T15863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2424'. [ 391.627143][T15863] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 391.660292][T15863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2424'. [ 391.700755][T15863] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 391.745271][T15873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2428'. [ 391.766286][T15873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2428'. [ 391.802263][T15875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2428'. [ 392.017968][T15887] xt_bpf: check failed: parse error [ 392.035838][T15891] xt_bpf: check failed: parse error [ 392.054770][T15887] siw: device registration error -23 [ 392.420249][ T6493] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.654226][T15926] vlan2: entered promiscuous mode [ 392.670550][T15926] gretap0: entered promiscuous mode [ 392.722508][T15929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.783057][T15931] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 392.838325][T15931] bond2: (slave lo): Enslaving as an active interface with an up link [ 392.867284][T15931] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 393.097509][T15952] xt_hashlimit: invalid rate [ 393.485065][T15972] xfrm2: entered allmulticast mode [ 394.300375][T16023] bridge_slave_1: left allmulticast mode [ 394.314171][T16023] bridge_slave_1: left promiscuous mode [ 394.324770][T16023] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.333948][ T6460] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.362050][T16023] bridge_slave_0: left allmulticast mode [ 394.369211][T16023] bridge_slave_0: left promiscuous mode [ 394.377069][T16023] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.564251][T16043] validate_nla: 6 callbacks suppressed [ 394.564275][T16043] netlink: 'syz.2.2474': attribute type 21 has an invalid length. [ 394.571077][T16034] pim6reg: left allmulticast mode [ 394.581572][T16043] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20002 [ 394.667137][T16026] lo speed is unknown, defaulting to 1000 [ 394.675433][T16026] wlan1 speed is unknown, defaulting to 1000 [ 395.529612][T16085] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 395.576851][T16092] __nla_validate_parse: 84 callbacks suppressed [ 395.576879][T16092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2488'. [ 395.627980][T16096] netlink: 'syz.4.2488': attribute type 2 has an invalid length. [ 395.772165][T16087] bridge0: left allmulticast mode [ 395.784888][T16102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2490'. [ 395.786344][T16101] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2491'. [ 395.810603][T16087] team_slave_0: left promiscuous mode [ 395.816118][T16087] team_slave_1: left promiscuous mode [ 395.831059][T16104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2492'. [ 395.841190][T16098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2491'. [ 396.408351][T16087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.527456][T16087] veth1_macvtap: left allmulticast mode [ 396.583270][T16087] vlan2: left promiscuous mode [ 396.595705][T16087] bond1: left promiscuous mode [ 396.647334][T16087] ip6tnl1: left promiscuous mode [ 396.652814][T16087] ip6tnl1: left allmulticast mode [ 396.663172][T16087] vlan3: left promiscuous mode [ 396.669778][T16087] geneve1: left promiscuous mode [ 396.689952][T16087] vlan3: left allmulticast mode [ 396.694839][T16087] geneve1: left allmulticast mode [ 396.846558][T16087] macsec0: left allmulticast mode [ 396.851913][T16087] macsec1: left allmulticast mode [ 396.860855][T16087] ipvlan2: left promiscuous mode [ 396.873828][T16087] hsr0: left allmulticast mode [ 396.878635][T16087] hsr_slave_0: left allmulticast mode [ 396.896401][T16087] hsr_slave_1: left allmulticast mode [ 396.902823][T16087] macvlan2: left allmulticast mode [ 396.917031][T16087] gtp0: left promiscuous mode [ 396.923033][T16087] gtp0: left allmulticast mode [ 396.934541][T16087] bond4: left promiscuous mode [ 396.941092][T16087] bond4: left allmulticast mode [ 396.950466][T16087] bond5: left allmulticast mode [ 396.992302][T16087] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 397.008050][T16087] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 397.103896][T16117] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2493'. [ 397.115088][T16117] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2493'. [ 397.143992][ T6482] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.158345][ T6482] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.241393][T16126] netlink: 'syz.0.2494': attribute type 1 has an invalid length. [ 397.249397][ T6482] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.263365][ T6482] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.467343][T16131] 8021q: adding VLAN 0 to HW filter on device bond9 [ 397.478489][T16131] bond8: (slave bond9): making interface the new active one [ 397.487213][T16131] bond8: (slave bond9): Enslaving as an active interface with an up link [ 397.510890][T16132] bond8: (slave gretap1): Enslaving as a backup interface with an up link [ 398.606111][T16158] sctp: [Deprecated]: syz.2.2503 (pid 16158) Use of int in maxseg socket option. [ 398.606111][T16158] Use struct sctp_assoc_value instead [ 398.613284][T16160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2502'. [ 398.844060][T16168] sctp: [Deprecated]: syz.2.2504 (pid 16168) Use of struct sctp_assoc_value in delayed_ack socket option. [ 398.844060][T16168] Use struct sctp_sack_info instead [ 398.898223][T16172] bond13: option updelay: invalid value (18446744072924056005) [ 398.906548][T16172] bond13: option updelay: allowed values 0 - 2147483647 [ 398.944691][T16172] bond13 (unregistering): Released all slaves [ 399.017311][T16179] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2507'. [ 399.526299][T16202] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 399.534377][T16202] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 399.609040][T16203] netlink: 'syz.4.2513': attribute type 10 has an invalid length. [ 399.767483][T16207] syzkaller0: entered promiscuous mode [ 399.774170][T16207] syzkaller0: entered allmulticast mode [ 399.796793][T16207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2515'. [ 402.312506][T16192] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 402.321835][T16198] netlink: 'syz.3.2512': attribute type 2 has an invalid length. [ 402.571892][T16235] netlink: 'syz.0.2524': attribute type 4 has an invalid length. [ 402.579909][T16233] __nla_validate_parse: 3 callbacks suppressed [ 402.579931][T16233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2523'. [ 402.743711][T16235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2524'. [ 402.815035][T16248] netlink: 'syz.4.2527': attribute type 16 has an invalid length. [ 402.824376][T16248] netlink: 'syz.4.2527': attribute type 17 has an invalid length. [ 402.934369][T16248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.945843][T16248] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.958012][T16248] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 403.006280][ T6482] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 403.018484][ T6482] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 403.029997][ T6482] bond0: (slave bridge_slave_1): link status definitely down, disabling slave [ 403.638479][T16294] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2538'. [ 403.693082][T16297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2539'. [ 403.731720][T16290] sock: sock_set_timeout: `syz.4.2538' (pid 16290) tries to set negative timeout [ 403.965085][T16308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2542'. [ 404.017359][T16306] syzkaller1: entered promiscuous mode [ 404.023198][T16306] syzkaller1: entered allmulticast mode [ 404.263325][T16316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2544'. [ 404.332810][T16316] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2544'. [ 404.357980][T16321] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2546'. [ 404.451831][T16324] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2546'. [ 404.463918][T16321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2546'. [ 404.882005][T16347] xt_policy: neither incoming nor outgoing policy selected [ 405.006409][T16358] netlink: 'syz.2.2549': attribute type 1 has an invalid length. [ 405.033908][T16358] netlink: 'syz.2.2549': attribute type 1 has an invalid length. [ 405.296089][T16369] lo speed is unknown, defaulting to 1000 [ 405.306784][T16369] wlan1 speed is unknown, defaulting to 1000 [ 405.526519][ T6482] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 405.540058][ T6482] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 405.560012][ T8952] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 405.949945][ T8950] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 406.032313][T16396] netlink: 'syz.0.2564': attribute type 3 has an invalid length. [ 406.043057][T16396] netlink: 'syz.0.2564': attribute type 3 has an invalid length. [ 406.264928][T16406] bond4: entered allmulticast mode [ 406.276485][T16406] netlink: 'syz.1.2568': attribute type 4 has an invalid length. [ 406.295652][T16406] bridge8: entered promiscuous mode [ 406.301190][T16406] bridge8: entered allmulticast mode [ 406.310807][T16406] bond4: (slave bridge8): Enslaving as an active interface with an up link [ 406.365701][T16416] netlink: 'syz.4.2569': attribute type 1 has an invalid length. [ 406.379459][T16416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.436789][T16416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.481508][T16416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.490382][ T8950] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 406.527564][T16416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.669946][T16429] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 409.481121][T16471] __nla_validate_parse: 13 callbacks suppressed [ 409.481144][T16471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2581'. [ 409.643493][T16497] netlink: 'syz.0.2581': attribute type 1 has an invalid length. [ 409.653246][T16497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2581'. [ 409.696811][ T1682] block nbd3: Possible stuck request ffff888026ce0000: control (read@0,1024B). Runtime 90 seconds [ 409.721136][ T1682] block nbd3: Possible stuck request ffff888026ce0200: control (read@1024,1024B). Runtime 90 seconds [ 409.732263][ T1682] block nbd3: Possible stuck request ffff888026ce0400: control (read@2048,1024B). Runtime 90 seconds [ 409.743377][ T1682] block nbd3: Possible stuck request ffff888026ce0600: control (read@3072,1024B). Runtime 90 seconds [ 409.760565][ T51] block nbd0: Receive control failed (result -32) [ 409.807094][T16494] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 409.838445][T16494] bond4 (unregistering): Released all slaves [ 409.849988][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 409.877635][T16507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2589'. [ 410.559933][T16540] syzkaller1: entered promiscuous mode [ 410.577015][T16540] syzkaller1: entered allmulticast mode [ 411.188463][T16571] xt_hashlimit: overflow, rate too high: 0 [ 411.239997][ T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 411.264253][T16571] netlink: 'syz.1.2600': attribute type 16 has an invalid length. [ 411.272343][T16571] netlink: 'syz.1.2600': attribute type 17 has an invalid length. [ 411.295499][T16571] ..0ªî{X¹¦: left allmulticast mode [ 411.366463][T16580] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.2602'. [ 411.372506][T16571] ip6gretap0: left allmulticast mode [ 411.391362][T16579] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.2602'. [ 411.420052][T16571] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 411.514644][T16590] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2603'. [ 411.549939][T16590] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2603'. [ 411.795013][ T9] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 411.891959][ T29] audit: type=1800 audit(1773053627.412:8): pid=16613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2608" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2879 res=0 errno=0 [ 412.040934][T16620] bridge_slave_1: Caught tx_queue_len zero misconfig [ 412.145949][T16634] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2613'. [ 412.364690][T16638] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2616'. [ 412.510188][T16656] syzkaller0: entered promiscuous mode [ 412.516490][T16656] syzkaller0: entered allmulticast mode [ 412.525824][T16656] 0: reclassify loop, rule prio 0, protocol 800 [ 412.602762][T16661] netlink: 'syz.3.2622': attribute type 10 has an invalid length. [ 412.615964][T16659] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2621'. [ 413.256282][T16699] geneve4: entered promiscuous mode [ 413.379137][T16705] : entered promiscuous mode [ 413.606545][T16717] lo speed is unknown, defaulting to 1000 [ 413.615983][T16717] wlan1 speed is unknown, defaulting to 1000 [ 413.720020][T16713] lo speed is unknown, defaulting to 1000 [ 413.900029][T16721] netlink: 'syz.4.2642': attribute type 12 has an invalid length. [ 413.917376][T16713] wlan1 speed is unknown, defaulting to 1000 [ 414.251763][T16739] ip6gretap1: left allmulticast mode [ 414.257583][T16739] bond1: left promiscuous mode [ 414.266135][T16739] bridge1: left promiscuous mode [ 414.274018][T16739] ip6tnl1: left promiscuous mode [ 414.279380][T16739] ip6tnl1: left allmulticast mode [ 414.285080][T16739] bond2: left promiscuous mode [ 414.290496][T16739] bond4: left promiscuous mode [ 414.295538][T16739] gtp0: left promiscuous mode [ 414.300705][T16739] gtp0: left allmulticast mode [ 414.306064][T16739] erspan1: left promiscuous mode [ 414.311463][T16739] erspan1: left allmulticast mode [ 414.317242][T16739] bond6: left promiscuous mode [ 414.324725][T16739] macsec1: left promiscuous mode [ 414.331738][T16739] macsec1: left allmulticast mode [ 414.337227][T16739] bond7: left allmulticast mode [ 414.343168][T16739] vlan4: left promiscuous mode [ 414.348641][T16739] bridge0: left promiscuous mode [ 414.361118][T16739] bond11: left promiscuous mode [ 414.368359][T16739] bond12: left promiscuous mode [ 414.378674][T16739] xfrm2: left allmulticast mode [ 414.397438][T16741] vlan2: entered allmulticast mode [ 414.403712][T16741] team0: entered allmulticast mode [ 414.409239][T16741] team_slave_1: entered allmulticast mode [ 414.527122][ T6499] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.550589][ T6499] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.556111][T16758] __nla_validate_parse: 6 callbacks suppressed [ 414.556134][T16758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2649'. [ 414.643885][T16754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2648'. [ 414.654983][ T6499] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.673008][ T6499] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.810239][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.819519][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.829536][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.840554][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.936159][T16776] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2653'. [ 414.945586][T16775] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2653'. [ 414.955334][T16776] openvswitch: netlink: Flow key attr not present in new flow. [ 414.963872][T16775] openvswitch: netlink: Flow key attr not present in new flow. [ 415.033952][T16776] syzkaller1: entered promiscuous mode [ 415.066695][T16776] syzkaller1: entered allmulticast mode [ 415.113346][T16775] 8021q: VLANs not supported on wg1 [ 415.156983][T16781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.165681][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.459001][T16798] syzkaller0: entered promiscuous mode [ 415.487388][T16798] syzkaller0: entered allmulticast mode [ 415.835469][T16831] netlink: 'syz.4.2666': attribute type 9 has an invalid length. [ 415.874583][T16833] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2665'. [ 415.877736][T16831] netlink: 'syz.4.2666': attribute type 9 has an invalid length. [ 416.050742][T16831] netlink: 'syz.4.2666': attribute type 9 has an invalid length. [ 416.156708][T16831] netlink: 'syz.4.2666': attribute type 9 has an invalid length. [ 416.166889][T16831] netlink: 'syz.4.2666': attribute type 9 has an invalid length. [ 416.184484][T16831] netlink: 'syz.4.2666': attribute type 9 has an invalid length. [ 416.274884][T16831] validate_nla: 7 callbacks suppressed [ 416.274905][T16831] netlink: 'syz.4.2666': attribute type 9 has an invalid length. [ 416.316475][T16831] netlink: 'syz.4.2666': attribute type 9 has an invalid length. [ 416.353011][T16831] netlink: 'syz.4.2666': attribute type 9 has an invalid length. [ 416.373033][T16850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2670'. [ 416.391286][T16831] netlink: 'syz.4.2666': attribute type 9 has an invalid length. [ 416.424611][T16831] netlink: 'syz.4.2666': attribute type 9 has an invalid length. [ 416.448933][T16831] netlink: 'syz.4.2666': attribute type 9 has an invalid length. [ 416.478834][T16831] netlink: 'syz.4.2666': attribute type 9 has an invalid length. [ 416.488928][T16831] netlink: 'syz.4.2666': attribute type 9 has an invalid length. [ 416.500330][T16831] netlink: 'syz.4.2666': attribute type 9 has an invalid length. [ 416.513568][T16831] netlink: 'syz.4.2666': attribute type 9 has an invalid length. [ 416.698777][T16870] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2678'. [ 416.710731][T16872] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2677'. [ 416.710956][T16870] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2678'. [ 416.736138][T16872] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2677'. [ 416.840122][T16878] lo: entered allmulticast mode [ 416.914390][T16878] lo: left allmulticast mode [ 417.552246][T16927] pim6reg1: entered promiscuous mode [ 417.569767][T16927] pim6reg1: entered allmulticast mode [ 418.006103][T16948] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 418.081776][ T5192] udevd[5192]: worker [14543] /devices/virtual/block/nbd3 is taking a long time [ 418.649882][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 418.750737][T16996] bond10: entered promiscuous mode [ 418.887889][T13748] udevd[13748]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 419.133732][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.161222][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.181671][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.194969][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 419.722496][T17043] __nla_validate_parse: 12 callbacks suppressed [ 419.722525][T17043] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.2718'. [ 419.777444][T17046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2720'. [ 419.819593][T17051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2721'. [ 419.989891][T17057] tipc: Enabled bearer , priority 0 [ 420.021294][T17057] syzkaller0: entered promiscuous mode [ 420.027263][T17057] syzkaller0: entered allmulticast mode [ 420.098213][T17064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2723'. [ 420.101759][T17057] tipc: Resetting bearer [ 420.264843][T17074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2725'. [ 420.392780][T17055] tipc: Resetting bearer [ 420.463942][T17055] tipc: Disabling bearer [ 420.555427][T17093] sctp: [Deprecated]: syz.0.2728 (pid 17093) Use of int in max_burst socket option. [ 420.555427][T17093] Use struct sctp_assoc_value instead [ 420.580763][T17088] gretap0: entered allmulticast mode [ 420.604574][T17088] bond5: (slave gretap0): making interface the new active one [ 420.633465][T17093] sctp: [Deprecated]: syz.0.2728 (pid 17093) Use of int in max_burst socket option deprecated. [ 420.633465][T17093] Use struct sctp_assoc_value instead [ 420.663008][T17088] bond5: (slave gretap0): Enslaving as an active interface with an up link [ 420.919414][T17112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2732'. [ 420.937508][T17102] syzkaller1: entered promiscuous mode [ 420.958736][T17102] syzkaller1: entered allmulticast mode [ 420.969274][T17112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2732'. [ 421.116245][T17121] vcan0: Caught tx_queue_len zero misconfig [ 421.159420][T17124] dummy0: entered allmulticast mode [ 421.231155][T17124] ip6tnl0: Caught tx_queue_len zero misconfig [ 421.318900][T17127] dummy0: left allmulticast mode [ 421.391757][T17132] lo speed is unknown, defaulting to 1000 [ 421.411401][T17132] wlan1 speed is unknown, defaulting to 1000 [ 421.566222][T17148] syzkaller1: entered promiscuous mode [ 421.574379][T17152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2743'. [ 421.575734][T17148] syzkaller1: entered allmulticast mode [ 421.667381][T17158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.667777][T17152] lo speed is unknown, defaulting to 1000 [ 421.769099][T17158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.817636][T17152] wlan1 speed is unknown, defaulting to 1000 [ 422.013919][T17175] validate_nla: 27 callbacks suppressed [ 422.013943][T17175] netlink: 'syz.4.2747': attribute type 1 has an invalid length. [ 422.152910][T17175] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 422.368690][T17183] netlink: 'syz.1.2748': attribute type 2 has an invalid length. [ 422.393240][T17183] netlink: 1696 bytes leftover after parsing attributes in process `syz.1.2748'. [ 422.523433][T17201] sit0: Caught tx_queue_len zero misconfig [ 422.699511][T17212] netlink: 'syz.1.2758': attribute type 1 has an invalid length. [ 422.755061][T17220] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2760'. [ 422.779396][T17220] 8021q: VLANs not supported on tunl0 [ 422.816419][T17212] bond6: entered allmulticast mode [ 423.056044][T17212] bond6: (slave geneve5): making interface the new active one [ 423.076527][T17212] geneve5: entered allmulticast mode [ 423.103058][T17212] bond6: (slave geneve5): Enslaving as an active interface with an up link [ 423.133044][T17240] netlink: 'syz.3.2763': attribute type 29 has an invalid length. [ 423.185317][ T6482] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 423.203530][ T6482] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 423.229834][ T6482] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 423.258887][ T6482] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 423.304426][T17248] xt_TCPMSS: Only works on TCP SYN packets [ 423.529132][T17260] xt_bpf: check failed: parse error [ 423.829060][T17275] lo speed is unknown, defaulting to 1000 [ 423.840101][T17278] netlink: 'syz.3.2775': attribute type 6 has an invalid length. [ 423.857921][T17275] wlan1 speed is unknown, defaulting to 1000 [ 423.878390][T17278] netlink: 'syz.3.2775': attribute type 1 has an invalid length. [ 424.117661][T17281] geneve0: entered promiscuous mode [ 424.189595][T17289] veth1_to_team: Caught tx_queue_len zero misconfig [ 424.241072][T17285] lo speed is unknown, defaulting to 1000 [ 424.249013][T17285] wlan1 speed is unknown, defaulting to 1000 [ 424.709269][T17307] batadv_slave_0: Caught tx_queue_len zero misconfig [ 424.757881][T17321] __nla_validate_parse: 10 callbacks suppressed [ 424.757903][T17321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2783'. [ 424.774961][T17321] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2783'. [ 425.299599][T17341] netlink: 776 bytes leftover after parsing attributes in process `syz.1.2787'. [ 425.316688][T17349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2792'. [ 425.328313][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2791'. [ 425.787604][T17379] netlink: 'syz.3.2797': attribute type 2 has an invalid length. [ 425.823550][T17381] netlink: 516 bytes leftover after parsing attributes in process `syz.4.2798'. [ 426.058278][T17395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2800'. [ 426.071438][T17387] nbd1: detected capacity change from 0 to 63 [ 426.135102][ T51] block nbd1: Receive control failed (result -104) [ 426.206492][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 426.218891][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 426.257861][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 426.267785][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 426.301921][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 426.412559][T17398] lo speed is unknown, defaulting to 1000 [ 426.422406][T17398] wlan1 speed is unknown, defaulting to 1000 [ 426.899569][T17398] chnl_net:caif_netlink_parms(): no params data found [ 427.384624][T17451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2812'. [ 427.414697][T17398] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.434591][T17398] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.451765][T17398] bridge_slave_0: entered allmulticast mode [ 427.461228][T17398] bridge_slave_0: entered promiscuous mode [ 427.500719][T17398] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.508419][T17398] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.540298][T17398] bridge_slave_1: entered allmulticast mode [ 427.555649][T17398] bridge_slave_1: entered promiscuous mode [ 427.668227][T17398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.722174][T17398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.928816][T17398] team0: Port device team_slave_0 added [ 427.952303][T17473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2816'. [ 427.972124][T17398] team0: Port device team_slave_1 added [ 428.081839][T17473] 8021q: adding VLAN 0 to HW filter on device bond11 [ 428.129160][T17398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.139767][T17398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.166509][T17398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.181332][T17398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.188426][T17398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.290733][T17398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.364847][T17483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2818'. [ 428.395570][T17483] x_tables: duplicate underflow at hook 4 [ 428.422283][ T51] Bluetooth: hci5: command tx timeout [ 428.441707][T17486] pim6reg: entered allmulticast mode [ 428.498711][T17486] pim6reg: left allmulticast mode [ 428.575335][T17398] hsr_slave_0: entered promiscuous mode [ 428.576959][T17493] net_ratelimit: 1 callbacks suppressed [ 428.577049][T17493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.611109][T17398] hsr_slave_1: entered promiscuous mode [ 428.617483][T17398] debugfs: 'hsr0' already exists in 'hsr' [ 428.633852][T17398] Cannot create hsr debugfs directory [ 430.410687][T17536] FAULT_INJECTION: forcing a failure. [ 430.410687][T17536] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 430.427448][T17536] CPU: 0 UID: 0 PID: 17536 Comm: syz.4.2829 Not tainted syzkaller #0 PREEMPT(full) [ 430.427468][T17536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 430.427475][T17536] Call Trace: [ 430.427539][T17536] [ 430.427565][T17536] dump_stack_lvl+0xe8/0x150 [ 430.427692][T17536] should_fail_ex+0x412/0x560 [ 430.427771][T17536] _copy_to_user+0x31/0xb0 [ 430.427824][T17536] simple_read_from_buffer+0xe1/0x170 [ 430.427867][T17536] proc_fail_nth_read+0x1bb/0x230 [ 430.427904][T17536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.427937][T17536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.427954][T17536] ? vfs_read+0x1f1/0xa70 [ 430.427975][T17536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.427994][T17536] vfs_read+0x20c/0xa70 [ 430.428005][T17536] ? fdget_pos+0x246/0x320 [ 430.428025][T17536] ? __pfx___mutex_lock+0x10/0x10 [ 430.428126][T17536] ? __pfx_vfs_read+0x10/0x10 [ 430.428139][T17536] ? __fget_files+0x2a/0x420 [ 430.428159][T17536] ? __fget_files+0x3a0/0x420 [ 430.428175][T17536] ? __fget_files+0x2a/0x420 [ 430.428196][T17536] ksys_read+0x150/0x270 [ 430.428210][T17536] ? __pfx_ksys_read+0x10/0x10 [ 430.428223][T17536] ? __pfx_sock_ioctl+0x10/0x10 [ 430.428327][T17536] do_syscall_64+0x14d/0xf80 [ 430.428353][T17536] ? trace_irq_disable+0x3b/0x150 [ 430.428412][T17536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.428438][T17536] ? clear_bhb_loop+0x40/0x90 [ 430.428453][T17536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.428466][T17536] RIP: 0033:0x7f265015cfce [ 430.428499][T17536] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 430.428510][T17536] RSP: 002b:00007f2651138fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 430.428545][T17536] RAX: ffffffffffffffda RBX: 00007f26511396c0 RCX: 00007f265015cfce [ 430.428554][T17536] RDX: 000000000000000f RSI: 00007f26511390a0 RDI: 0000000000000003 [ 430.428562][T17536] RBP: 00007f2651139090 R08: 0000000000000000 R09: 0000000000000000 [ 430.428569][T17536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.428576][T17536] R13: 00007f2650416038 R14: 00007f2650415fa0 R15: 00007ffdb7421a88 [ 430.428595][T17536] [ 430.652036][ T5831] Bluetooth: hci5: command tx timeout [ 430.686205][T17538] netlink: 'syz.4.2830': attribute type 29 has an invalid length. [ 430.695942][T17538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2830'. [ 430.758753][T17539] netlink: 'syz.4.2830': attribute type 29 has an invalid length. [ 432.730568][ T5831] Bluetooth: hci5: command 0x040f tx timeout [ 434.650051][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 434.810182][ T5831] Bluetooth: hci5: command 0x040f tx timeout [ 436.890051][ T5831] Bluetooth: hci5: command 0x040f tx timeout [ 439.770177][ T1682] block nbd3: Possible stuck request ffff888026ce0000: control (read@0,1024B). Runtime 120 seconds [ 439.781138][ T1682] block nbd3: Possible stuck request ffff888026ce0200: control (read@1024,1024B). Runtime 120 seconds [ 439.792270][ T1682] block nbd3: Possible stuck request ffff888026ce0400: control (read@2048,1024B). Runtime 120 seconds [ 439.803566][ T1682] block nbd3: Possible stuck request ffff888026ce0600: control (read@3072,1024B). Runtime 120 seconds [ 444.089564][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 444.101078][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 444.110590][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 444.118887][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 444.128125][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 444.165115][T17593] lo speed is unknown, defaulting to 1000 [ 444.172994][T17593] wlan1 speed is unknown, defaulting to 1000 [ 444.287259][T17593] chnl_net:caif_netlink_parms(): no params data found [ 444.358547][T17593] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.365933][T17593] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.373788][T17593] bridge_slave_0: entered allmulticast mode [ 444.381686][T17593] bridge_slave_0: entered promiscuous mode [ 444.389998][T17593] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.397428][T17593] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.405570][T17593] bridge_slave_1: entered allmulticast mode [ 444.413876][T17593] bridge_slave_1: entered promiscuous mode [ 444.443914][T17593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.455918][T17593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.503511][T17593] team0: Port device team_slave_0 added [ 444.522666][T17593] team0: Port device team_slave_1 added [ 444.614395][T17593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.639903][T17593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.683059][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 444.689814][T17593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.703815][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 444.705388][T17593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.718184][T17593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.718434][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 444.755716][T17593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.768506][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 444.778442][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 444.834053][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 444.843981][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 444.853737][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 444.862093][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 444.862696][T17593] hsr_slave_0: entered promiscuous mode [ 444.877325][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 444.878374][T17593] hsr_slave_1: entered promiscuous mode [ 444.891936][T17593] debugfs: 'hsr0' already exists in 'hsr' [ 444.898171][T17593] Cannot create hsr debugfs directory [ 444.968922][T17603] lo speed is unknown, defaulting to 1000 [ 444.978603][T17603] wlan1 speed is unknown, defaulting to 1000 [ 445.050831][T17605] lo speed is unknown, defaulting to 1000 [ 445.088719][T17605] wlan1 speed is unknown, defaulting to 1000 [ 445.320931][T17603] chnl_net:caif_netlink_parms(): no params data found [ 445.449435][T17605] chnl_net:caif_netlink_parms(): no params data found [ 445.505154][T17603] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.512732][T17603] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.520697][T17603] bridge_slave_0: entered allmulticast mode [ 445.528830][T17603] bridge_slave_0: entered promiscuous mode [ 445.538505][T17603] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.545936][T17603] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.553531][T17603] bridge_slave_1: entered allmulticast mode [ 445.561213][T17603] bridge_slave_1: entered promiscuous mode [ 445.613577][T17603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.631098][T17603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.685563][T17605] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.693127][T17605] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.703947][T17605] bridge_slave_0: entered allmulticast mode [ 445.711703][T17605] bridge_slave_0: entered promiscuous mode [ 445.722836][T17603] team0: Port device team_slave_0 added [ 445.728764][T17605] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.736412][T17605] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.743833][T17605] bridge_slave_1: entered allmulticast mode [ 445.751637][T17605] bridge_slave_1: entered promiscuous mode [ 445.760931][T17603] team0: Port device team_slave_1 added [ 445.810941][T17605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.823753][T17605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.834437][T17603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.841860][T17603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.869004][T17603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.892119][T17603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.899114][T17603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.926003][T17603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.956847][T17605] team0: Port device team_slave_0 added [ 445.968091][T17605] team0: Port device team_slave_1 added [ 446.022700][T17605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.029860][T17605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.057015][T17605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.090549][T17605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.097560][T17605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.125026][T17605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.155263][T17603] hsr_slave_0: entered promiscuous mode [ 446.164889][T17603] hsr_slave_1: entered promiscuous mode [ 446.170476][ T5831] Bluetooth: hci3: command tx timeout [ 446.172339][T17603] debugfs: 'hsr0' already exists in 'hsr' [ 446.188637][T17603] Cannot create hsr debugfs directory [ 446.190375][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 446.206721][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 446.217259][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 446.226533][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 446.235858][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 446.300606][T17605] hsr_slave_0: entered promiscuous mode [ 446.307435][T17605] hsr_slave_1: entered promiscuous mode [ 446.314815][T17605] debugfs: 'hsr0' already exists in 'hsr' [ 446.321234][T17605] Cannot create hsr debugfs directory [ 446.433826][T17621] lo speed is unknown, defaulting to 1000 [ 446.455490][T17621] wlan1 speed is unknown, defaulting to 1000 [ 446.769552][T17621] chnl_net:caif_netlink_parms(): no params data found [ 446.811254][ T51] Bluetooth: hci6: command tx timeout [ 446.851381][T17621] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.858595][T17621] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.866134][T17621] bridge_slave_0: entered allmulticast mode [ 446.873677][T17621] bridge_slave_0: entered promiscuous mode [ 446.882263][T17621] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.889431][T17621] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.896950][T17621] bridge_slave_1: entered allmulticast mode [ 446.904372][T17621] bridge_slave_1: entered promiscuous mode [ 446.934767][T17621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.946780][T17621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.974419][ T51] Bluetooth: hci7: command tx timeout [ 446.982033][T17621] team0: Port device team_slave_0 added [ 446.990651][T17621] team0: Port device team_slave_1 added [ 447.017807][T17621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.025007][T17621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.051823][T17621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.064593][T17621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.071860][T17621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.098152][T17621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.143445][T17621] hsr_slave_0: entered promiscuous mode [ 447.150604][T17621] hsr_slave_1: entered promiscuous mode [ 447.156815][T17621] debugfs: 'hsr0' already exists in 'hsr' [ 447.162808][T17621] Cannot create hsr debugfs directory [ 448.249940][ T51] Bluetooth: hci3: command tx timeout [ 448.330365][ T51] Bluetooth: hci8: command tx timeout [ 448.890386][ T51] Bluetooth: hci6: command tx timeout [ 449.049997][ T51] Bluetooth: hci7: command tx timeout [ 450.329897][ T51] Bluetooth: hci3: command tx timeout [ 450.410564][ T51] Bluetooth: hci8: command tx timeout [ 450.970268][ T51] Bluetooth: hci6: command tx timeout [ 451.129926][ T51] Bluetooth: hci7: command tx timeout [ 452.409908][ T51] Bluetooth: hci3: command tx timeout [ 452.490188][ T51] Bluetooth: hci8: command tx timeout [ 453.051141][ T51] Bluetooth: hci6: command tx timeout [ 453.209959][ T51] Bluetooth: hci7: command tx timeout [ 454.570292][ T51] Bluetooth: hci8: command tx timeout [ 456.410640][ T1682] block nbd1: Possible stuck request ffff888026c58000: control (read@0,1024B). Runtime 30 seconds [ 456.421489][ T1682] block nbd1: Possible stuck request ffff888026c58200: control (read@1024,1024B). Runtime 30 seconds [ 456.432617][ T1682] block nbd1: Possible stuck request ffff888026c58400: control (read@2048,1024B). Runtime 30 seconds [ 456.444998][ T1682] block nbd1: Possible stuck request ffff888026c58600: control (read@3072,1024B). Runtime 30 seconds [ 466.650002][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 469.850110][ T1682] block nbd3: Possible stuck request ffff888026ce0000: control (read@0,1024B). Runtime 150 seconds [ 469.861591][ T1682] block nbd3: Possible stuck request ffff888026ce0200: control (read@1024,1024B). Runtime 150 seconds [ 469.873178][ T1682] block nbd3: Possible stuck request ffff888026ce0400: control (read@2048,1024B). Runtime 150 seconds [ 469.884554][ T1682] block nbd3: Possible stuck request ffff888026ce0600: control (read@3072,1024B). Runtime 150 seconds [ 486.122438][ T5831] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 486.132551][ T5831] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 486.141774][ T5831] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 486.150312][ T5831] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 486.158319][ T5831] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 486.199475][T17632] lo speed is unknown, defaulting to 1000 [ 486.206802][T17632] wlan1 speed is unknown, defaulting to 1000 [ 486.332169][T17632] chnl_net:caif_netlink_parms(): no params data found [ 486.404343][T17632] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.411829][T17632] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.419340][T17632] bridge_slave_0: entered allmulticast mode [ 486.427004][T17632] bridge_slave_0: entered promiscuous mode [ 486.436375][T17632] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.444398][T17632] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.452066][T17632] bridge_slave_1: entered allmulticast mode [ 486.459302][T17632] bridge_slave_1: entered promiscuous mode [ 486.489298][T17632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.513398][T17632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.522803][ T1682] block nbd1: Possible stuck request ffff888026c58000: control (read@0,1024B). Runtime 60 seconds [ 486.534019][ T1682] block nbd1: Possible stuck request ffff888026c58200: control (read@1024,1024B). Runtime 60 seconds [ 486.545234][ T1682] block nbd1: Possible stuck request ffff888026c58400: control (read@2048,1024B). Runtime 60 seconds [ 486.556486][ T1682] block nbd1: Possible stuck request ffff888026c58600: control (read@3072,1024B). Runtime 60 seconds [ 486.565044][T17632] team0: Port device team_slave_0 added [ 486.576162][T17632] team0: Port device team_slave_1 added [ 486.601264][T17632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.608368][T17632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.635608][T17632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.648132][T17632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.655257][T17632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.682033][T17632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.726913][T17632] hsr_slave_0: entered promiscuous mode [ 486.734750][T17632] hsr_slave_1: entered promiscuous mode [ 486.741345][T17632] debugfs: 'hsr0' already exists in 'hsr' [ 486.747216][T17632] Cannot create hsr debugfs directory [ 488.249976][ T51] Bluetooth: hci9: command tx timeout [ 490.095357][ T5192] udevd[5192]: worker [17035] /devices/virtual/block/nbd1 is taking a long time [ 490.340232][ T51] Bluetooth: hci9: command tx timeout [ 492.409924][ T51] Bluetooth: hci9: command tx timeout [ 494.489827][ T51] Bluetooth: hci9: command tx timeout [ 499.931777][ T1682] block nbd3: Possible stuck request ffff888026ce0000: control (read@0,1024B). Runtime 180 seconds [ 499.942743][ T1682] block nbd3: Possible stuck request ffff888026ce0200: control (read@1024,1024B). Runtime 180 seconds [ 499.954126][ T1682] block nbd3: Possible stuck request ffff888026ce0400: control (read@2048,1024B). Runtime 180 seconds [ 499.965391][ T1682] block nbd3: Possible stuck request ffff888026ce0600: control (read@3072,1024B). Runtime 180 seconds [ 502.117839][ T5192] udevd[5192]: worker [14543] /devices/virtual/block/nbd3 timeout; kill it [ 502.126798][ T5192] udevd[5192]: seq 20189 '/devices/virtual/block/nbd3' killed [ 504.141040][ T5831] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 504.150178][ T5831] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 504.159207][ T5831] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 504.169526][ T5831] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 504.179303][ T5831] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 504.222610][T17644] lo speed is unknown, defaulting to 1000 [ 504.229475][T17644] wlan1 speed is unknown, defaulting to 1000 [ 504.351623][T17644] chnl_net:caif_netlink_parms(): no params data found [ 504.437799][T17644] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.445275][T17644] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.452861][T17644] bridge_slave_0: entered allmulticast mode [ 504.461039][T17644] bridge_slave_0: entered promiscuous mode [ 504.469511][T17644] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.477264][T17644] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.485771][T17644] bridge_slave_1: entered allmulticast mode [ 504.493502][T17644] bridge_slave_1: entered promiscuous mode [ 504.525952][T17644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.538702][T17644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.571613][T17644] team0: Port device team_slave_0 added [ 504.580658][T17644] team0: Port device team_slave_1 added [ 504.607210][T17644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.614356][T17644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.640578][T17644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.655273][T17644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.662781][T17644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.688944][T17644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.734519][T17644] hsr_slave_0: entered promiscuous mode [ 504.741353][T17644] hsr_slave_1: entered promiscuous mode [ 504.747628][T17644] debugfs: 'hsr0' already exists in 'hsr' [ 504.753678][T17644] Cannot create hsr debugfs directory [ 505.262279][ T5831] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 505.281981][ T5831] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 505.290848][ T5831] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 505.304713][ T5143] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 505.311747][ T5831] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 505.322268][ T5831] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 505.322314][ T5143] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 505.339671][ T5143] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 505.351017][ T51] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 505.372074][ T5143] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 505.419059][T17655] lo speed is unknown, defaulting to 1000 [ 505.430450][T17655] wlan1 speed is unknown, defaulting to 1000 [ 505.447774][T17657] lo speed is unknown, defaulting to 1000 [ 505.467731][T17657] wlan1 speed is unknown, defaulting to 1000 [ 505.671371][T17655] chnl_net:caif_netlink_parms(): no params data found [ 505.751404][T17657] chnl_net:caif_netlink_parms(): no params data found [ 505.818762][T17655] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.826165][T17655] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.833778][T17655] bridge_slave_0: entered allmulticast mode [ 505.841870][T17655] bridge_slave_0: entered promiscuous mode [ 505.858903][T17655] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.866221][T17655] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.873878][T17655] bridge_slave_1: entered allmulticast mode [ 505.881342][T17655] bridge_slave_1: entered promiscuous mode [ 505.937245][T17655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.962427][T17655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.972061][T17657] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.979369][T17657] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.987064][T17657] bridge_slave_0: entered allmulticast mode [ 505.994783][T17657] bridge_slave_0: entered promiscuous mode [ 506.017467][T17657] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.024904][T17657] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.032460][T17657] bridge_slave_1: entered allmulticast mode [ 506.040136][T17657] bridge_slave_1: entered promiscuous mode [ 506.074161][T17655] team0: Port device team_slave_0 added [ 506.082691][T17655] team0: Port device team_slave_1 added [ 506.153869][T17657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.164723][T17655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.172317][T17655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.200720][T17655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.217078][T17657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.248541][T17655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.256279][ T5143] Bluetooth: hci10: command tx timeout [ 506.263176][T17655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.292399][T17655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.294075][ T5827] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 506.314348][ T5827] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 506.324300][ T5827] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 506.333736][ T5827] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 506.337428][T17657] team0: Port device team_slave_0 added [ 506.350379][ T5827] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 506.356333][T17657] team0: Port device team_slave_1 added [ 506.417824][T17655] hsr_slave_0: entered promiscuous mode [ 506.425980][T17655] hsr_slave_1: entered promiscuous mode [ 506.432905][T17655] debugfs: 'hsr0' already exists in 'hsr' [ 506.439111][T17655] Cannot create hsr debugfs directory [ 506.464165][T17657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.471342][T17657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.498098][T17657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.528098][T17657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.535399][T17657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.562122][T17657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.617949][T17672] lo speed is unknown, defaulting to 1000 [ 506.640996][T17672] wlan1 speed is unknown, defaulting to 1000 [ 506.673188][T17657] hsr_slave_0: entered promiscuous mode [ 506.680294][T17657] hsr_slave_1: entered promiscuous mode [ 506.686601][T17657] debugfs: 'hsr0' already exists in 'hsr' [ 506.692596][T17657] Cannot create hsr debugfs directory [ 507.021188][T17672] chnl_net:caif_netlink_parms(): no params data found [ 507.114664][T17672] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.122190][T17672] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.129510][T17672] bridge_slave_0: entered allmulticast mode [ 507.137535][T17672] bridge_slave_0: entered promiscuous mode [ 507.147648][T17672] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.155297][T17672] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.162925][T17672] bridge_slave_1: entered allmulticast mode [ 507.170772][T17672] bridge_slave_1: entered promiscuous mode [ 507.215209][T17672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.229342][T17672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.300703][T17672] team0: Port device team_slave_0 added [ 507.310584][T17672] team0: Port device team_slave_1 added [ 507.359455][T17672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.366655][T17672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.393713][T17672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.404698][ T5143] Bluetooth: hci11: command tx timeout [ 507.413492][T17672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.421055][T17672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.448304][T17672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.459792][ T5143] Bluetooth: hci12: command tx timeout [ 507.524551][T17672] hsr_slave_0: entered promiscuous mode [ 507.531952][T17672] hsr_slave_1: entered promiscuous mode [ 507.538394][T17672] debugfs: 'hsr0' already exists in 'hsr' [ 507.544362][T17672] Cannot create hsr debugfs directory [ 508.330996][ T5143] Bluetooth: hci10: command tx timeout [ 508.409995][ T5143] Bluetooth: hci13: command tx timeout [ 509.450027][ T5143] Bluetooth: hci11: command tx timeout [ 509.530228][ T5827] Bluetooth: hci12: command tx timeout [ 510.410554][ T5143] Bluetooth: hci10: command tx timeout [ 510.489924][ T5143] Bluetooth: hci13: command tx timeout [ 511.530028][ T5143] Bluetooth: hci11: command tx timeout [ 511.610020][ T5143] Bluetooth: hci12: command tx timeout [ 512.490015][ T5143] Bluetooth: hci10: command tx timeout [ 512.569989][ T5143] Bluetooth: hci13: command tx timeout [ 513.610037][ T5143] Bluetooth: hci11: command tx timeout [ 513.691411][ T5143] Bluetooth: hci12: command tx timeout [ 514.650024][ T5827] Bluetooth: hci13: command tx timeout [ 516.570517][ T1682] block nbd1: Possible stuck request ffff888026c58000: control (read@0,1024B). Runtime 90 seconds [ 516.581619][ T1682] block nbd1: Possible stuck request ffff888026c58200: control (read@1024,1024B). Runtime 90 seconds [ 516.592698][ T1682] block nbd1: Possible stuck request ffff888026c58400: control (read@2048,1024B). Runtime 90 seconds [ 516.603730][ T1682] block nbd1: Possible stuck request ffff888026c58600: control (read@3072,1024B). Runtime 90 seconds [ 527.449865][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 530.010179][ T1682] block nbd3: Possible stuck request ffff888026ce0000: control (read@0,1024B). Runtime 210 seconds [ 530.022197][ T1682] block nbd3: Possible stuck request ffff888026ce0200: control (read@1024,1024B). Runtime 210 seconds [ 530.033431][ T1682] block nbd3: Possible stuck request ffff888026ce0400: control (read@2048,1024B). Runtime 210 seconds [ 530.045063][ T1682] block nbd3: Possible stuck request ffff888026ce0600: control (read@3072,1024B). Runtime 210 seconds [ 546.184829][ T5143] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 546.194203][ T5143] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 546.203997][ T5143] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 546.212824][ T5143] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 546.222436][ T5143] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 546.262889][T17682] lo speed is unknown, defaulting to 1000 [ 546.270811][T17682] wlan1 speed is unknown, defaulting to 1000 [ 546.398771][T17682] chnl_net:caif_netlink_parms(): no params data found [ 546.480926][T17682] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.488339][T17682] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.496416][T17682] bridge_slave_0: entered allmulticast mode [ 546.504774][T17682] bridge_slave_0: entered promiscuous mode [ 546.514297][T17682] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.522191][T17682] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.531046][T17682] bridge_slave_1: entered allmulticast mode [ 546.538729][T17682] bridge_slave_1: entered promiscuous mode [ 546.572606][T17682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.585813][T17682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.618194][T17682] team0: Port device team_slave_0 added [ 546.626995][T17682] team0: Port device team_slave_1 added [ 546.654293][ T1682] block nbd1: Possible stuck request ffff888026c58000: control (read@0,1024B). Runtime 120 seconds [ 546.660124][T17682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.665190][ T1682] block nbd1: Possible stuck request ffff888026c58200: control (read@1024,1024B). Runtime 120 seconds [ 546.672913][T17682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.683703][ T1682] block nbd1: Possible stuck request ffff888026c58400: control (read@2048,1024B). Runtime 120 seconds [ 546.720842][ T1682] block nbd1: Possible stuck request ffff888026c58600: control (read@3072,1024B). Runtime 120 seconds [ 546.732311][T17682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.745065][T17682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.752498][T17682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.778703][T17682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.823749][T17682] hsr_slave_0: entered promiscuous mode [ 546.830913][T17682] hsr_slave_1: entered promiscuous mode [ 546.837352][T17682] debugfs: 'hsr0' already exists in 'hsr' [ 546.843311][T17682] Cannot create hsr debugfs directory [ 548.250064][ T5827] Bluetooth: hci14: command tx timeout [ 550.009984][ T5827] Bluetooth: hci5: command 0x040f tx timeout [ 550.329934][ T5143] Bluetooth: hci14: command tx timeout [ 552.409999][ T5143] Bluetooth: hci14: command tx timeout [ 554.489896][ T5143] Bluetooth: hci14: command tx timeout [ 560.090307][ T1682] block nbd3: Possible stuck request ffff888026ce0000: control (read@0,1024B). Runtime 240 seconds [ 560.101400][ T1682] block nbd3: Possible stuck request ffff888026ce0200: control (read@1024,1024B). Runtime 240 seconds [ 560.112885][ T1682] block nbd3: Possible stuck request ffff888026ce0400: control (read@2048,1024B). Runtime 240 seconds [ 560.124088][ T1682] block nbd3: Possible stuck request ffff888026ce0600: control (read@3072,1024B). Runtime 240 seconds [ 564.699843][ T5827] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 564.709483][ T5827] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 564.718859][ T5827] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 564.736903][ T5827] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 564.745286][ T5827] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 564.781925][T17693] lo speed is unknown, defaulting to 1000 [ 564.788737][T17693] wlan1 speed is unknown, defaulting to 1000 [ 564.914581][T17693] chnl_net:caif_netlink_parms(): no params data found [ 564.989390][T17693] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.997306][T17693] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.005914][T17693] bridge_slave_0: entered allmulticast mode [ 565.013688][T17693] bridge_slave_0: entered promiscuous mode [ 565.023699][T17693] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.031294][T17693] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.038884][T17693] bridge_slave_1: entered allmulticast mode [ 565.046422][T17693] bridge_slave_1: entered promiscuous mode [ 565.077457][T17693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.089916][T17693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.121051][T17693] team0: Port device team_slave_0 added [ 565.129172][T17693] team0: Port device team_slave_1 added [ 565.155143][T17693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.162362][T17693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.189349][T17693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.202578][T17693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.209682][T17693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.237397][T17693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.285289][T17693] hsr_slave_0: entered promiscuous mode [ 565.296852][T17693] hsr_slave_1: entered promiscuous mode [ 565.303790][T17693] debugfs: 'hsr0' already exists in 'hsr' [ 565.310304][T17693] Cannot create hsr debugfs directory [ 565.794150][ T5143] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 565.806775][ T5143] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 565.816486][ T5143] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 565.832279][ T5143] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 565.840857][ T5143] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 565.871162][ T5827] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 565.884050][ T5827] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 565.898088][ T5827] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 565.913604][T17703] lo speed is unknown, defaulting to 1000 [ 565.919797][ T5827] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 565.927913][ T5827] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 565.929282][T17703] wlan1 speed is unknown, defaulting to 1000 [ 566.024790][T17705] lo speed is unknown, defaulting to 1000 [ 566.032812][T17705] wlan1 speed is unknown, defaulting to 1000 [ 566.208616][T17703] chnl_net:caif_netlink_parms(): no params data found [ 566.278397][T17705] chnl_net:caif_netlink_parms(): no params data found [ 566.352774][T17703] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.360098][T17703] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.367471][T17703] bridge_slave_0: entered allmulticast mode [ 566.375163][T17703] bridge_slave_0: entered promiscuous mode [ 566.388785][T17703] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.396486][T17703] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.404275][T17703] bridge_slave_1: entered allmulticast mode [ 566.413135][T17703] bridge_slave_1: entered promiscuous mode [ 566.483112][T17703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.494194][T17705] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.502453][T17705] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.510369][T17705] bridge_slave_0: entered allmulticast mode [ 566.517869][T17705] bridge_slave_0: entered promiscuous mode [ 566.528320][T17703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.538291][T17705] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.546339][T17705] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.553934][T17705] bridge_slave_1: entered allmulticast mode [ 566.561567][T17705] bridge_slave_1: entered promiscuous mode [ 566.602199][T17703] team0: Port device team_slave_0 added [ 566.620608][T17703] team0: Port device team_slave_1 added [ 566.629986][T17705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.644671][T17705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.701244][T17705] team0: Port device team_slave_0 added [ 566.712420][T17705] team0: Port device team_slave_1 added [ 566.719331][T17703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.726865][T17703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.754003][T17703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.785252][T17703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.792832][T17703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.819655][ T5827] Bluetooth: hci15: command tx timeout [ 566.826922][T17703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.871568][T17705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.878583][T17705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.906068][T17705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.934437][T17705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.944989][T17705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.950869][ T5143] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 566.975693][T17705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.982745][ T5143] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 566.998811][ T5143] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 567.007436][ T5143] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 567.017488][ T5143] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 567.058210][T17703] hsr_slave_0: entered promiscuous mode [ 567.065500][T17703] hsr_slave_1: entered promiscuous mode [ 567.072788][T17703] debugfs: 'hsr0' already exists in 'hsr' [ 567.078656][T17703] Cannot create hsr debugfs directory [ 567.127048][T17705] hsr_slave_0: entered promiscuous mode [ 567.134799][T17705] hsr_slave_1: entered promiscuous mode [ 567.141707][T17705] debugfs: 'hsr0' already exists in 'hsr' [ 567.147744][T17705] Cannot create hsr debugfs directory [ 567.259886][T17721] lo speed is unknown, defaulting to 1000 [ 567.281866][T17721] wlan1 speed is unknown, defaulting to 1000 [ 567.552683][T17721] chnl_net:caif_netlink_parms(): no params data found [ 567.680306][T17721] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.687578][T17721] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.702676][T17721] bridge_slave_0: entered allmulticast mode [ 567.711895][T17721] bridge_slave_0: entered promiscuous mode [ 567.727658][T17721] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.736183][T17721] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.743837][T17721] bridge_slave_1: entered allmulticast mode [ 567.751428][T17721] bridge_slave_1: entered promiscuous mode [ 567.793491][T17721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.806651][T17721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.851321][T17721] team0: Port device team_slave_0 added [ 567.861425][T17721] team0: Port device team_slave_1 added [ 567.891140][T17721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.898204][T17721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.925332][T17721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.937140][ T5143] Bluetooth: hci16: command tx timeout [ 567.945854][T17721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.953106][T17721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.980252][T17721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.011890][ T5143] Bluetooth: hci17: command tx timeout [ 568.058783][T17721] hsr_slave_0: entered promiscuous mode [ 568.066227][T17721] hsr_slave_1: entered promiscuous mode [ 568.073487][T17721] debugfs: 'hsr0' already exists in 'hsr' [ 568.079263][T17721] Cannot create hsr debugfs directory [ 568.889934][ T51] Bluetooth: hci15: command tx timeout [ 569.050038][ T51] Bluetooth: hci18: command tx timeout [ 570.010114][ T51] Bluetooth: hci16: command tx timeout [ 570.089980][ T51] Bluetooth: hci17: command tx timeout [ 570.497724][ T51] Bluetooth: hci6: command 0x0406 tx timeout [ 570.504718][ T51] Bluetooth: hci7: command 0x0406 tx timeout [ 570.512613][ T51] Bluetooth: hci8: command 0x0406 tx timeout [ 570.515912][T17730] Bluetooth: hci3: command 0x0406 tx timeout [ 570.969853][ T5143] Bluetooth: hci15: command tx timeout [ 571.130543][ T5143] Bluetooth: hci18: command tx timeout [ 572.090707][ T5143] Bluetooth: hci16: command tx timeout [ 572.169942][ T5143] Bluetooth: hci17: command tx timeout [ 572.890359][ T30] INFO: task syz-executor:17398 blocked for more than 143 seconds. [ 572.898401][ T30] Not tainted syzkaller #0 [ 572.903754][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.912736][ T30] task:syz-executor state:D stack:22880 pid:17398 tgid:17398 ppid:1 task_flags:0x400140 flags:0x00080002 [ 572.925030][ T30] Call Trace: [ 572.928332][ T30] [ 572.931559][ T30] __schedule+0x15dd/0x52d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 572.936157][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 572.941396][ T30] ? __pfx___schedule+0x10/0x10 [ 572.946892][ T30] ? schedule+0x90/0x360 [ 572.951482][ T30] schedule+0x164/0x360 [ 572.955706][ T30] schedule_preempt_disabled+0x13/0x30 [ 572.961488][ T30] __mutex_lock+0x7fe/0x1300 [ 572.966118][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 573.009856][ T30] ? __mutex_lock+0x5ac/0x1300 [ 573.014727][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 573.033511][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 573.038829][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 573.044484][ T30] ? radix_tree_lookup+0x240/0x290 [ 573.050061][ T5143] Bluetooth: hci15: command tx timeout [ 573.058991][ T30] genl_rcv_msg+0x10b/0x7a0 [ 573.063752][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 573.068987][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 573.074151][ T30] netlink_rcv_skb+0x232/0x4b0 [ 573.079178][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 573.084373][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 573.089925][ T30] ? down_read+0x272/0x2e0 [ 573.094375][ T30] ? genl_rcv+0xd/0x40 [ 573.098962][ T30] genl_rcv+0x28/0x40 [ 573.103034][ T30] netlink_unicast+0x80f/0x9b0 [ 573.107830][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 573.113665][ T30] ? netlink_sendmsg+0x650/0xb40 [ 573.118778][ T30] ? skb_put+0x11b/0x210 [ 573.123723][ T30] netlink_sendmsg+0x813/0xb40 [ 573.128534][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.134505][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 573.139750][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 573.145101][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.150747][ T30] __sys_sendto+0x672/0x710 [ 573.155371][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 573.160872][ T30] ? fd_install+0x94/0x3d0 [ 573.165362][ T30] ? fd_install+0x306/0x3d0 [ 573.170302][ T30] __x64_sys_sendto+0xde/0x100 [ 573.175165][ T30] do_syscall_64+0x14d/0xf80 [ 573.180518][ T30] ? trace_irq_disable+0x3b/0x150 [ 573.185582][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.191943][ T30] ? clear_bhb_loop+0x40/0x90 [ 573.196848][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.202882][ T30] RIP: 0033:0x7f1a1415cfce [ 573.207453][ T30] RSP: 002b:00007ffca2838958 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 573.210190][ T5143] Bluetooth: hci18: command tx timeout [ 573.216259][ T30] RAX: ffffffffffffffda RBX: 00005555887f7500 RCX: 00007f1a1415cfce [ 573.229490][ T30] RDX: 0000000000000020 RSI: 00007f1a14f44670 RDI: 0000000000000005 [ 573.238353][ T30] RBP: 0000000000000001 R08: 00007ffca28389d4 R09: 000000000000000c [ 573.246892][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 573.255265][ T30] R13: 00007ffca2838a28 R14: 00007f1a14f44670 R15: 0000000000000000 [ 573.263667][ T30] [ 573.266760][ T30] INFO: task syz.1.2821:17493 blocked for more than 143 seconds. [ 573.275056][ T30] Not tainted syzkaller #0 [ 573.281007][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.290099][ T30] task:syz.1.2821 state:D stack:25976 pid:17493 tgid:17492 ppid:5823 task_flags:0x480140 flags:0x00080002 [ 573.302237][ T30] Call Trace: [ 573.305545][ T30] [ 573.308577][ T30] __schedule+0x15dd/0x52d0 [ 573.313626][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 573.319178][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 573.324441][ T30] ? __pfx___schedule+0x10/0x10 [ 573.329448][ T30] ? schedule+0x90/0x360 [ 573.333984][ T30] schedule+0x164/0x360 [ 573.338205][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 573.344282][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 573.350549][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 573.356765][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 573.363273][ T30] nbd_set_size+0x454/0x680 [ 573.367933][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 573.373497][ T30] ? nla_memcpy+0x5b/0xc0 [ 573.378097][ T30] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 573.383894][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 573.389941][ T30] ? rcu_is_watching+0x15/0xb0 [ 573.395270][ T30] ? trace_kmalloc+0x2a/0x110 [ 573.400082][ T30] ? __nla_parse+0x40/0x60 [ 573.404640][ T30] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 573.411536][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 573.417410][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 573.423793][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 573.429230][ T30] genl_rcv_msg+0x61c/0x7a0 [ 573.433960][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 573.439229][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 573.445187][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 573.450847][ T30] netlink_rcv_skb+0x232/0x4b0 [ 573.455767][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 573.461073][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 573.466582][ T30] ? down_read+0x272/0x2e0 [ 573.471113][ T30] ? genl_rcv+0xd/0x40 [ 573.475341][ T30] genl_rcv+0x28/0x40 [ 573.479997][ T30] netlink_unicast+0x80f/0x9b0 [ 573.484827][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 573.490313][ T30] ? netlink_sendmsg+0x650/0xb40 [ 573.495287][ T30] ? skb_put+0x11b/0x210 [ 573.499649][ T30] netlink_sendmsg+0x813/0xb40 [ 573.504580][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.510376][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 573.515490][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 573.520968][ T30] ____sys_sendmsg+0x972/0x9f0 [ 573.525783][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 573.531904][ T30] ? import_iovec+0x73/0xa0 [ 573.536691][ T30] ___sys_sendmsg+0x2a5/0x360 [ 573.541524][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 573.546991][ T30] ? futex_wake+0x4ac/0x580 [ 573.551881][ T30] ? __fget_files+0x2a/0x420 [ 573.556608][ T30] ? __fget_files+0x3a0/0x420 [ 573.561792][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 573.566790][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 573.572445][ T30] ? rcu_is_watching+0x15/0xb0 [ 573.577290][ T30] do_syscall_64+0x14d/0xf80 [ 573.582001][ T30] ? trace_irq_disable+0x3b/0x150 [ 573.587093][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.593456][ T30] ? clear_bhb_loop+0x40/0x90 [ 573.598187][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.604342][ T30] RIP: 0033:0x7f5cca59c799 [ 573.608801][ T30] RSP: 002b:00007f5ccb44f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 573.619663][ T30] RAX: ffffffffffffffda RBX: 00007f5cca815fa0 RCX: 00007f5cca59c799 [ 573.628341][ T30] RDX: 0000000000028080 RSI: 0000200000000640 RDI: 0000000000000008 [ 573.637268][ T30] RBP: 00007f5cca632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 573.646575][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.655763][ T30] R13: 00007f5cca816038 R14: 00007f5cca815fa0 R15: 00007ffd42223088 [ 573.663968][ T30] [ 573.667178][ T30] INFO: task syz.3.2823:17509 blocked for more than 144 seconds. [ 573.680039][ T30] Not tainted syzkaller #0 [ 573.685046][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.694359][ T30] task:syz.3.2823 state:D stack:28648 pid:17509 tgid:17506 ppid:5820 task_flags:0x400040 flags:0x00080002 [ 573.706963][ T30] Call Trace: [ 573.710442][ T30] [ 573.713412][ T30] __schedule+0x15dd/0x52d0 [ 573.718084][ T30] ? __pfx___schedule+0x10/0x10 [ 573.723311][ T30] ? schedule+0x90/0x360 [ 573.727620][ T30] schedule+0x164/0x360 [ 573.732220][ T30] schedule_preempt_disabled+0x13/0x30 [ 573.737996][ T30] __mutex_lock+0x7fe/0x1300 [ 573.743227][ T30] ? __mutex_lock+0x5ac/0x1300 [ 573.748212][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 573.753078][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 573.758152][ T30] ? __pfx___schedule+0x10/0x10 [ 573.763151][ T30] ? radix_tree_lookup+0x240/0x290 [ 573.768322][ T30] genl_rcv_msg+0x10b/0x7a0 [ 573.772967][ T30] ? irqentry_exit+0x59e/0x620 [ 573.777863][ T30] ? lockdep_hardirqs_on+0x7a/0x110 [ 573.783396][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 573.788467][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 573.793846][ T30] netlink_rcv_skb+0x232/0x4b0 [ 573.798755][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 573.803957][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 573.809356][ T30] ? down_read+0x272/0x2e0 [ 573.814030][ T30] ? genl_rcv+0xd/0x40 [ 573.818242][ T30] genl_rcv+0x28/0x40 [ 573.822693][ T30] netlink_unicast+0x80f/0x9b0 [ 573.827619][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 573.833301][ T30] ? netlink_sendmsg+0x650/0xb40 [ 573.838382][ T30] ? skb_put+0x11b/0x210 [ 573.842949][ T30] netlink_sendmsg+0x813/0xb40 [ 573.847800][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.855348][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 573.860579][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 573.865909][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.871305][ T30] __sys_sendto+0x672/0x710 [ 573.875961][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 573.881532][ T30] ? exc_page_fault+0x6a/0xc0 [ 573.886265][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 573.891666][ T30] __x64_sys_sendto+0xde/0x100 [ 573.896490][ T30] do_syscall_64+0x14d/0xf80 [ 573.901451][ T30] ? trace_irq_disable+0x3b/0x150 [ 573.906898][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.913180][ T30] ? clear_bhb_loop+0x40/0x90 [ 573.917900][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.924058][ T30] RIP: 0033:0x7efd2bd5cfce [ 573.928508][ T30] RSP: 002b:00007efd2cc55e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 573.937673][ T30] RAX: ffffffffffffffda RBX: 00007efd2cc576c0 RCX: 00007efd2bd5cfce [ 573.945849][ T30] RDX: 0000000000000020 RSI: 00007efd2cc56000 RDI: 0000000000000005 [ 573.954116][ T30] RBP: 0000000000000000 R08: 00007efd2cc55f04 R09: 000000000000000c [ 573.962194][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 573.970311][ T30] R13: 00007efd2cc55f58 R14: 00007efd2cc56000 R15: 0000000000000000 [ 573.978366][ T30] [ 573.981655][ T30] INFO: task syz.0.2824:17515 blocked for more than 144 seconds. [ 573.989495][ T30] Not tainted syzkaller #0 [ 573.998812][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.007630][ T30] task:syz.0.2824 state:D stack:27328 pid:17515 tgid:17514 ppid:5821 task_flags:0x400140 flags:0x00080002 [ 574.020207][ T30] Call Trace: [ 574.023532][ T30] [ 574.026667][ T30] __schedule+0x15dd/0x52d0 [ 574.031419][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 574.036417][ T30] ? __update_page_owner_handle+0x5a/0x570 [ 574.042426][ T30] ? __pfx___schedule+0x10/0x10 [ 574.047415][ T30] ? schedule+0x90/0x360 [ 574.051756][ T30] schedule+0x164/0x360 [ 574.056039][ T30] schedule_preempt_disabled+0x13/0x30 [ 574.061757][ T30] __mutex_lock+0x7fe/0x1300 [ 574.066578][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 574.072018][ T30] ? __mutex_lock+0x5ac/0x1300 [ 574.077271][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 574.082232][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 574.087304][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 574.092569][ T30] ? radix_tree_lookup+0x240/0x290 [ 574.097736][ T30] genl_rcv_msg+0x10b/0x7a0 [ 574.102467][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.107527][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 574.112598][ T30] netlink_rcv_skb+0x232/0x4b0 [ 574.117439][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 574.122580][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 574.127936][ T30] ? down_read+0x272/0x2e0 [ 574.133016][ T30] ? genl_rcv+0xd/0x40 [ 574.137219][ T30] genl_rcv+0x28/0x40 [ 574.141304][ T30] netlink_unicast+0x80f/0x9b0 [ 574.146120][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 574.151629][ T30] ? netlink_sendmsg+0x650/0xb40 [ 574.156631][ T30] ? skb_put+0x11b/0x210 [ 574.161034][ T30] netlink_sendmsg+0x813/0xb40 [ 574.165847][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.170401][ T5143] Bluetooth: hci16: command tx timeout [ 574.171727][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 574.182141][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 574.187726][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.193520][ T30] __sys_sendto+0x672/0x710 [ 574.198221][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 574.203388][ T30] ? exc_page_fault+0x6a/0xc0 [ 574.208549][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 574.214069][ T30] __x64_sys_sendto+0xde/0x100 [ 574.218976][ T30] do_syscall_64+0x14d/0xf80 [ 574.223705][ T30] ? trace_irq_disable+0x3b/0x150 [ 574.228864][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.235067][ T30] ? clear_bhb_loop+0x40/0x90 [ 574.240160][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.246260][ T30] RIP: 0033:0x7f7a1515cfce [ 574.250156][ T5143] Bluetooth: hci17: command tx timeout [ 574.251106][ T30] RSP: 002b:00007f7a15fe8e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 574.264946][ T30] RAX: ffffffffffffffda RBX: 00007f7a15fea6c0 RCX: 00007f7a1515cfce [ 574.273120][ T30] RDX: 0000000000000024 RSI: 00007f7a15fe9000 RDI: 0000000000000005 [ 574.281347][ T30] RBP: 0000000000000000 R08: 00007f7a15fe8f04 R09: 000000000000000c [ 574.289336][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 574.297553][ T30] R13: 00007f7a15fe8f58 R14: 00007f7a15fe9000 R15: 0000000000000000 [ 574.305764][ T30] [ 574.308890][ T30] [ 574.308890][ T30] Showing all locks held in the system: [ 574.316720][ T30] 1 lock held by khungtaskd/30: [ 574.321680][ T30] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 574.331894][ T30] 2 locks held by getty/5578: [ 574.336669][ T30] #0: ffff8880375f20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 574.346604][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 574.357110][ T30] 2 locks held by kworker/u8:13/6461: [ 574.362794][ T30] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 574.374765][ T30] #1: ffffc90004bdfc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 574.387678][ T30] 1 lock held by udevd/14543: [ 574.393210][ T30] #0: ffff888025e6a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 574.402697][ T30] 1 lock held by udevd/17035: [ 574.407471][ T30] #0: ffff888026769358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 574.416921][ T30] 2 locks held by syz-executor/17398: [ 574.422359][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.430615][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 574.439728][ T30] 6 locks held by syz.1.2821/17493: [ 574.445055][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.453520][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 574.463250][ T30] #2: ffff8880267b3a78 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 574.473692][ T30] #3: ffff888026763ff0 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 574.483263][ T30] #4: ffff888026763990 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 574.496255][ T30] #5: ffff8880267639c8 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 574.509812][ T30] 2 locks held by syz.3.2823/17509: [ 574.515074][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.523577][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 574.532954][ T30] 2 locks held by syz.0.2824/17515: [ 574.538170][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.546463][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 574.555732][ T30] 2 locks held by syz.4.2830/17538: [ 574.560993][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.569437][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 574.578809][ T30] 2 locks held by syz-executor/17593: [ 574.584268][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.592574][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 574.602265][ T30] 2 locks held by syz-executor/17603: [ 574.607678][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.616232][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 574.625878][ T30] 2 locks held by syz-executor/17605: [ 574.631443][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.639855][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 574.649095][ T30] 2 locks held by syz-executor/17621: [ 574.657815][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.666116][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 574.675188][ T30] 2 locks held by syz-executor/17632: [ 574.680836][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.689097][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 574.698223][ T30] 2 locks held by syz-executor/17644: [ 574.703892][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.712170][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 574.721326][ T30] 2 locks held by syz-executor/17655: [ 574.726719][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.736300][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 574.745872][ T30] 2 locks held by syz-executor/17657: [ 574.751616][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.759998][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 574.769208][ T30] 2 locks held by syz-executor/17672: [ 574.774680][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.783137][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 574.792622][ T30] 2 locks held by syz-executor/17682: [ 574.798033][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.806454][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 574.815852][ T30] 2 locks held by syz-executor/17693: [ 574.821352][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.830342][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 574.839410][ T30] 2 locks held by syz-executor/17703: [ 574.845169][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.853652][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 574.863059][ T30] 2 locks held by syz-executor/17705: [ 574.868483][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.877077][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 574.886324][ T30] 2 locks held by syz-executor/17721: [ 574.891914][ T30] #0: ffffffff8fc35930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 574.900437][ T30] #1: ffffffff8fc35748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 574.909464][ T30] 2 locks held by dhcpcd/17733: [ 574.914606][ T30] #0: ffff888049a90260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10 [ 574.924703][ T30] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 574.935855][ T30] [ 574.938229][ T30] ============================================= [ 574.938229][ T30] [ 574.946907][ T30] NMI backtrace for cpu 1 [ 574.946927][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 574.946960][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 574.946972][ T30] Call Trace: [ 574.946980][ T30] [ 574.946989][ T30] dump_stack_lvl+0xe8/0x150 [ 574.947022][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 574.947050][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 574.947080][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 574.947108][ T30] sys_info+0x135/0x170 [ 574.947204][ T30] watchdog+0xfd9/0x1030 [ 574.947240][ T30] ? watchdog+0x21a/0x1030 [ 574.947279][ T30] kthread+0x388/0x470 [ 574.947299][ T30] ? __pfx_watchdog+0x10/0x10 [ 574.947325][ T30] ? __pfx_kthread+0x10/0x10 [ 574.947346][ T30] ret_from_fork+0x51e/0xb90 [ 574.947377][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 574.947402][ T30] ? __switch_to+0xc7d/0x1450 [ 574.947454][ T30] ? __pfx_kthread+0x10/0x10 [ 574.947476][ T30] ret_from_fork_asm+0x1a/0x30 [ 574.947522][ T30] [ 574.947530][ T30] Sending NMI from CPU 1 to CPUs 0: [ 575.059500][ C0] NMI backtrace for cpu 0 [ 575.059522][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 575.059545][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 575.059555][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 575.059588][ C0] Code: 6e 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 b0 1a 00 fb f4 fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 575.059603][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 575.059620][ C0] RAX: 000000000023c3db RBX: ffffffff819a88ed RCX: 0000000080000001 [ 575.059633][ C0] RDX: 0000000000000001 RSI: ffffffff8def7f4f RDI: ffffffff8c27b200 [ 575.059644][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 575.059656][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff901141b0 [ 575.059667][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 575.059678][ C0] FS: 0000000000000000(0000) GS:ffff888125465000(0000) knlGS:0000000000000000 [ 575.059692][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 575.059703][ C0] CR2: 0000558840781168 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 575.059720][ C0] Call Trace: [ 575.059727][ C0] [ 575.059733][ C0] default_idle+0x9/0x20 [ 575.059752][ C0] default_idle_call+0x72/0xb0 [ 575.059770][ C0] do_idle+0x1bd/0x500 [ 575.059796][ C0] ? __pfx_do_idle+0x10/0x10 [ 575.059817][ C0] ? do_idle+0x4d2/0x500 [ 575.059839][ C0] cpu_startup_entry+0x43/0x60 [ 575.059860][ C0] rest_init+0x2de/0x300 [ 575.059879][ C0] start_kernel+0x385/0x3d0 [ 575.060036][ C0] x86_64_start_reservations+0x24/0x30 [ 575.060077][ C0] x86_64_start_kernel+0x143/0x1c0 [ 575.060096][ C0] common_startup_64+0x13e/0x147 [ 575.060120][ C0] [ 575.060603][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 575.060620][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 575.060642][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 575.060653][ T30] Call Trace: [ 575.060662][ T30] [ 575.060671][ T30] vpanic+0x56c/0xa60 [ 575.060700][ T30] ? __pfx___schedule+0x10/0x10 [ 575.060728][ T30] ? __pfx_vpanic+0x10/0x10 [ 575.060762][ T30] panic+0xc5/0xd0 [ 575.060785][ T30] ? __pfx_panic+0x10/0x10 [ 575.060812][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 575.060852][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 575.060880][ T30] watchdog+0x1023/0x1030 [ 575.060914][ T30] ? watchdog+0x21a/0x1030 [ 575.060949][ T30] kthread+0x388/0x470 [ 575.060976][ T30] ? __pfx_watchdog+0x10/0x10 [ 575.061001][ T30] ? __pfx_kthread+0x10/0x10 [ 575.061021][ T30] ret_from_fork+0x51e/0xb90 [ 575.061088][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 575.061112][ T30] ? __switch_to+0xc7d/0x1450 [ 575.061138][ T30] ? __pfx_kthread+0x10/0x10 [ 575.061157][ T30] ret_from_fork_asm+0x1a/0x30 [ 575.061201][ T30] [ 575.355609][ T30] Kernel Offset: disabled [ 575.360374][ T30] Rebooting in 86400 seconds..