last executing test programs: 27.447621182s ago: executing program 4 (id=1538): r0 = socket$inet(0x2, 0x3, 0x14) getsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000001800)=""/4096, &(0x7f0000000200)=0x1000) setsockopt$inet_buf(r0, 0x0, 0x2a, &(0x7f0000000000)="1d6c5e1bf80ed4fd89c9fbe634baaa940fd3a7974fd8af0499fda34fa3b5bc14d4ee0ccbbedc8f67fb7bef10a0a60dcd78638042fbf2c8dd957b", 0x3a) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x40, 0x8, 0x0, 0xffffffff, {{0x17, 0x4, 0x1, 0x20, 0x5c, 0x66, 0x0, 0x2, 0x7ae34bf5795233f2, 0x0, @multicast1, @loopback, {[@generic={0x7, 0xb, "a0936b596ae67c49d4"}, @lsrr={0x83, 0x23, 0x50, [@dev={0xac, 0x14, 0x14, 0x2e}, @loopback, @rand_addr=0x64010102, @rand_addr=0x64010101, @remote, @empty, @loopback, @remote]}, @generic={0x86, 0x4, "83f9"}, @lsrr={0x83, 0x13, 0xed, [@rand_addr=0x64010100, @multicast2, @multicast1, @empty]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x16e, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x2, 0x3, 0x6, 0xb, 0xb, 0xffffffffffffffff, 0xfffffffffffffffe}, @generic={0x0, 0x0, 0xf, 0x7, 0x101}, @map_fd={0x18, 0x8}]}, &(0x7f0000000180)='syzkaller\x00', 0xc, 0x0, 0x0, 0x1f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, r0], &(0x7f0000000280)=[{0x0, 0x5, 0x8}, {0x0, 0x4, 0x4, 0x9}, {0x5, 0x1, 0xf, 0xc}, {0x4, 0x2, 0x1, 0xc}, {0x5, 0x5, 0xe, 0x7}, {0x1, 0x3, 0x9, 0x3}, {0x1, 0x1, 0x2, 0x7}, {0x4, 0x2, 0x5, 0x9}, {0x5, 0x2, 0x10001, 0x7}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x8, &(0x7f00000004c0)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], &(0x7f0000000500)='GPL\x00', 0x7, 0x9c, &(0x7f0000000540)=""/156, 0x41000, 0x1, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0x9, 0xff, 0xfffffffe}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x4, 0x5, 0x9, 0x7}, {0x3, 0x1, 0xd, 0xb}, {0x5, 0x5, 0xe, 0xa}, {0x2, 0x1, 0xc, 0x3}, {0x0, 0x3, 0x0, 0x6}, {0x0, 0x4, 0xe, 0x2}, {0x4, 0x4, 0x1, 0x6}, {0x1, 0x1, 0x8, 0xc}, {0x0, 0x3, 0x10, 0x8}, {0x1, 0x1, 0x3, 0x7}], 0x10, 0x2}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)) r3 = socket$kcm(0xa, 0x1, 0x106) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000100000000000000000000009500000000000000ed317c8bc2060e9270c54b812871512116da819cb4336c4495e97a87161a157860d66319a78372ad536c64051673ab0927b6132c8002d5c4d30f601aeb83e359cfb5482fb65459b6ab2ad21aab253bc8f5bccef4c867610550084fe51fae9c028b73f8ad686b93ae63c77754e94825d43fa99888e0ea5f67469f37510df94c90527a393b6980eecdfe"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0xfffffe71, 0x1}}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000740)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568daf133e50b", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r7, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback, r6, 0x37, 0x2000, 0x0, @value, @void, @void, @void, r8}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e000000ffff0000040000000500000000100000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000024000000020000000300"/28], 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r9, 0xffffffffffffffff, 0x24, 0x2000, 0xffffffffffffffff, @value, @void, @void, @void, r8}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x1d, 0x67726ae92d7f756f, 0xffffffffffffffff, @void, @void, @value, @void, r8}, 0x20) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz1\x00', 0x200002, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000019c0)={0x6, 0x2d, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@generic={0x63, 0x1, 0x7, 0x7ff, 0x3}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}, @exit, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffe4}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @map_fd={0x18, 0x7, 0x1, 0x0, r9}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x6, 0x74, &(0x7f0000000800)=""/116, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000001940)={0x1, 0xf, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001980)=[{0x3, 0x4, 0xc}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@cgroup=r10, 0xffffffffffffffff, 0x14, 0x0, r3, @void, @value=r11, @void, @void, r8}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x19, 0x0, @val=@tcx={@void, @value=r2, @void, @void, r8}}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000880)='./cgroup.net/syz0\x00', 0x200002, 0x0) 26.885013113s ago: executing program 4 (id=1542): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f00000000c0)=0xffffffd8, 0x4) unshare(0x8040480) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x98, 0x10, 0x2, 0x70bd25, 0x0, {0x0, 0x0, 0x4, 0x0, 0x1300}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x60, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000, 0x10001}}]}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x401}}]}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7f, 0x5}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r0], 0x48) socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r6) close(0x3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c0000001800110101000000000000000a000000000200080000000008000600e00000000800170006400000f80bb39bc6005e8cb888bddb67e461fedfdd92eacbf8f58a5170a1c8ff5e00348ee1a3cb2c896f55d9ed47d8b030036f8ff450dbd04e4bc8f53b9821649329076f0c35c40ac3b5651fab5a58fc2d7d922238ac07e4145ff7c16440856bb76b0d546ce8126da512918ec2478fdd34fe0a46e68322a0061261"], 0x2c}, 0x1, 0x0, 0x0, 0x4805}, 0x4) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000080)='veth1_vlan\x00', 0x10) setsockopt$inet_int(r9, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r9, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r8, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES8=r7, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690036000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 20.304729767s ago: executing program 2 (id=1622): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0xd, 0x41}, 0xffff, [0xde99, 0x8e9, 0xc, 0x1d, 0x43, 0xfffffffffffffffb, 0x28, 0x1, 0x34e0000, 0x7ffffffffffffffb, 0x9, 0x5, 0x6, 0x8, 0x7, 0x4]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0xe) 20.258162728s ago: executing program 3 (id=1623): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000003c0)="d2fe03076003008cb89e08f086dd8a59695bf9d06fec42b8760dca0a416d67a64101ec12c094a8ed", 0x0, 0x8000d5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000140)='FREEZING\x00', 0x9) 19.938313677s ago: executing program 2 (id=1626): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000080), 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="600100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001400350062726964676530000000000000000000240116800b2101802c0001800c0004000b000000080000000c000400090000000700000010000600fdffffff7f000000070000003400018014000b00017200000000000007000000000000000c0007000800000065000000100002000e000000a500000000040000bc0001800c000400ff070000000000000c000300000000000004000014000a00080000000000000002000000000000000c000700ff0000000200000014000a000300000000000000517c0000000000000c00030005000000542d00002800010007000000aaaafad58f4800000000000000000000000000000000000000000000000000000c00040009000000000400002c000c8014000100040000003d07000002000000810000001400010000000000fc0000000700000088a80000050011"], 0x160}, 0x1, 0x0, 0x0, 0x4600}, 0x24044800) 19.792023416s ago: executing program 2 (id=1627): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, 0x0, {0x0, 0x7}, {0x0, 0x4}, {0x0, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x7ea11167df8711ce) r0 = accept4(0xffffffffffffffff, &(0x7f0000000280)=@nl, &(0x7f0000000180)=0x80, 0x80000) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000400)=0x3, 0x4) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r3, @ANYRES16], 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_TBF={0x30}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000061194c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 19.591566611s ago: executing program 1 (id=1629): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 64) unshare(0x2c000800) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, 0x1c) (async) listen(r0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @random="1a0e2c5ffd4d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) (async, rerun: 64) r1 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 64) sendmmsg$inet6(r1, &(0x7f0000006500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000480)={0x6, {{0x2, 0x400, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) (async, rerun: 32) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r5, &(0x7f0000000040)={0x0, 0x600, &(0x7f00000000c0)={&(0x7f0000000180)="98bd80d1b51fac3cd42404000000000000003395f2ad", 0x16}}, 0x94) write$tun(r2, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @private=0xa010101, @multicast1}, {0x4e20, 0x88be, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) 19.322751022s ago: executing program 3 (id=1630): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000030000000000000002000000850000007b00000085000000110000009500e1ff00000000"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfffffffa, 0xb, 0x5}}}}]}, 0x40}}, 0x4000010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e22, @rand_addr=0x64010101}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1ff, 0x4, 0x4}) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000000d0af3a300000000000000000a0000010900020073797a3100000000090001"], 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x14, 0x0, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xfd, 0x6, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2={0xff, 0x3}, 0x2000, 0xba08, 0x0, 0xfffffffd}}) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c0002800500010000000000240001"], 0x80}}, 0x0) 19.053198932s ago: executing program 0 (id=1632): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0xb}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20855}, 0x4008094) (async) unshare(0x20600) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x58, &(0x7f0000000100)}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x7, 0x56, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r2}, 0x38) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x0, 0x4a}, 0x28) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x1ff) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000000080), 0x0}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000080), &(0x7f0000000540)=""/210}, 0x20) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000100000d020000000000000000000000000000000000000400000000000002b3708f17615c960f078552e40ca48663ff203a8aa7bfeabc8794229a890d578000b6621a22aef427ec78ce4d7548146572e1fd1227b4ec888ecfc8e373f2dd5975fe005c3b5b4df49a400a60c860687456cf9ae61a77b9cceabf693438f5ec303d7dcf5899e0cdfee556e3513e862622f78117817086f94978d566f5015a3365aac722e73e316d7e2ee0a614"], &(0x7f00000009c0)=""/4096, 0x3a, 0x1000, 0x1}, 0x20) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=r8, @ANYBLOB="01980000000000003c0012800b000100697036746e6c00002c00028008000100", @ANYRES32=r8], 0x5c}}, 0x0) sendto$packet(r5, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b78", 0x22, 0x0, &(0x7f0000000040)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 18.984389235s ago: executing program 0 (id=1633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r1, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x38, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(r6, 0x8971, &(0x7f0000000100)={'netdevsim0\x00', @ifru_mtu}) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, 0x0, 0x50dc85624ea6cf59, 0x70bd25, 0x1, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x0, 0x6, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c001}, 0x400c088) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010028a6704cdbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000100000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000302040008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) 18.749643197s ago: executing program 1 (id=1634): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000002a0000009500000000000000b3e0cae776ee7025c47eb4fa971c58e5375c92068c72f78b7ffd16eaba92c300f8fbc78f16938d17d8"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="44000000200000012bbd7000fbdbdf250a80000818000003120000001400020000000000140002002001000000000000000000000000005793e7a9f0cc933b52f2b3f9010000000007128fee5a4ff47c"], 0x44}, 0x1, 0x0, 0x0, 0x240508d4}, 0x2000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x341042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000001c0)=0x3) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7200f9dbdf2517000000180001801400020076657468315f746f5f626f6e644000005bffc9bc079533a51e3bc2e33d262fb124db55cb5236aec6f80e201faf9f3f96a69b25f662d0490da9a742d0a12edee5fdb9931803d51347bbfa765a"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRESDEC], 0x2c}, 0x1, 0x0, 0x0, 0x20000884}, 0x2000c085) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000006c0)=[@in6={0xa, 0x4e20, 0x5, @remote, 0x800}]}, &(0x7f00000001c0)=0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xc, &(0x7f0000000c00)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', r3, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4080) socket$nl_generic(0x10, 0x3, 0x10) 18.749119705s ago: executing program 3 (id=1635): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) recvmsg(r0, &(0x7f0000001200)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f00000011c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/143, 0x8f}, {&(0x7f0000001180)=""/43, 0x2b}], 0x3}, 0x100) setsockopt(r0, 0x4, 0x2, &(0x7f0000001240)="25b9c6c278068936025162be6a5c150250e555deb08f26ecd04962b4d7e1d07523f72a124f303d2a696bd85999937c41e804c2a2ff82b5ce5292bbd041fd2660185c7f7e891a5fed3c80a5cb6e19793daef2aa954c6d1af1f92883ceb29c9cbec068b2b875014fd246904a1b2e89622d9d6b4ad86b", 0x75) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f00000012c0)=""/130, &(0x7f0000001380)=0x82) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000890) syz_genetlink_get_family_id$mptcp(&(0x7f0000001540), r2) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001540), r2) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x28, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c004) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x28, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c004) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, &(0x7f0000001640), &(0x7f0000001680)=0x4) socket$xdp(0x2c, 0x3, 0x0) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r2, 0xc080583d, &(0x7f00000016c0)={0x1, 0x369, 0x1, 0xe08, 0x7fff, 0x8, 0xc, 0x3}) syz_genetlink_get_family_id$ethtool(&(0x7f0000001780), r2) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001780), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000001880)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x64, r7, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xffffffff}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x2e}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xfffffff8}]}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x40010c4) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000018c0)={0x8000, 0xffffffff, 0xd, 0xff}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000018c0)={0x8000, 0xffffffff, 0xd, 0xff}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {}, {}, {0x0, @struct}}) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000001d00), &(0x7f0000001d40)=0x10, 0x80000) (async) r8 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000001d00), &(0x7f0000001d40)=0x10, 0x80000) getsockopt$IP_SET_OP_VERSION(r8, 0x1, 0x53, &(0x7f0000001d80), &(0x7f0000001dc0)=0x8) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000001f40)={{r8, &(0x7f0000001e00)='batadv\x00', 0x20000, &(0x7f0000001e40)={@align=0x7, {0x6, 0x1, 0x9, 0x65}}, 0x7e, &(0x7f0000001e80), &(0x7f0000001ec0)=0x8}, {[0x3bbd, 0x6, 0x1, 0x5]}, 0x9, 0x10, &(0x7f0000001f00)=""/16}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r9, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x30, 0x1412, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x40) socket$netlink(0x10, 0x3, 0x15) (async) r10 = socket$netlink(0x10, 0x3, 0x15) ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000002100)) (async) ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000002100)=0x0) sendmsg$nl_generic(r10, &(0x7f0000002600)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000025c0)={&(0x7f0000002140)={0x470, 0x29, 0x1, 0x70bd27, 0x25dfdbfb, {0x6}, [@nested={0x284, 0x10c, 0x0, 0x1, [@generic="3fcdbf2d023795bdf00558fc9a6b7a31e1fa3e70fda5d69e12849c998c50413a1ce741aee3dae4f46d011258ce71a5bcd01dc929a8a0213eeb8b18514f0e75bd612f75e177ac33ba6a9f37dc0053d212df318ee74b872be163a37061ff88fb341c99a7c628039142b4", @typed={0x8, 0x1f, 0x0, 0x0, @fd=r8}, @nested={0x4, 0x110}, @nested={0x4, 0x12d}, @generic="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", @generic="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", @nested={0x4, 0xa9}, @nested={0x4, 0x81}, @typed={0x8, 0xf4, 0x0, 0x0, @pid=r11}]}, @nested={0x102, 0x6e, 0x0, 0x1, [@generic="39a39a550719191d3f19dc53a749c19a3c4daf6e31175c2a2ed20b55616c29f9cbf6cbc726fa664554ed7d3332a16b9230639ec4376c8ef75766553970a7cdf6578bd6b07b7c216f57c171f572e8d21954b70d2cbee5d44b209407097ff267901fe46b0796b2986e3b13c7abef6b27c82f2805f7fbc9", @typed={0xa, 0x127, 0x0, 0x0, @str=')\xa5-\xf8/\x00'}, @generic="6c22d608650564552594d4917176a747f20d5994eb4280584d34723268e750dc34aff595ca2fd68e93a11d49e72486d496151ba9877ac5e92de2a85aa126bd209101bb04ad994ea6139c1fd50386edc0362d3627614b3110ffc7efb61d9268ceaeffe4861e8733067c92d52e629946c98dcf8d51de8f57fd5298b198"]}, @typed={0x14, 0x90, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @nested={0x14, 0xd3, 0x0, 0x1, [@typed={0xc, 0x7b, 0x0, 0x0, @u64=0x2}, @nested={0x4, 0x72}]}, @generic="1e6c86b3509ba816b1287228903a274e6ba1f0cd63575a1922cb4fe2742f03ed61238e45a60e00c6d688d8d6e259e934455ec256b154d8cb926d695b1b1dd0a92fb02003b2c32bec54", @generic="13475be191d4897b87b289c750cc4cddb879e6280e7b2509c3510845ee93ecd05f43938ac825db0754c32bda281bef897beea1e2f4708ea1dab02538afce91203e6ed0691e9f28b431252c3dd48e24d5ae8c27e2afc505a190371d629cc97804"]}, 0x470}, 0x1, 0x0, 0x0, 0x1}, 0x1) r12 = accept$inet6(r9, 0x0, &(0x7f0000002640)) bind$inet6(r12, &(0x7f0000002680)={0xa, 0x4e22, 0x8, @loopback, 0x8}, 0x1c) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002700), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r13, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x24, r14, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x52}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmsg$IEEE802154_DISASSOCIATE_REQ(r13, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x24, r14, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x52}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 18.508510214s ago: executing program 3 (id=1636): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0xd, 0x41}, 0xffff, [0xde99, 0x8e9, 0xc, 0x1d, 0x43, 0xfffffffffffffffb, 0x28, 0x1, 0x34e0000, 0x7ffffffffffffffb, 0x9, 0x5, 0x6, 0x8, 0x7, 0x4]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0xe) 18.206411319s ago: executing program 3 (id=1637): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/time\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback=r0, 0x7, 0x0, 0x2f, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback=r0, 0x7, 0x0, 0x2f, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x0, 0x0]}, 0x40) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x6, 0x894, [0x200000000700, 0x0, 0x0, 0x200000000984, 0x200000000c90], 0x0, &(0x7f0000000080), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x11, 0x2, 0x3393, 'wg1\x00', 'vlan0\x00', 'batadv_slave_1\x00', 'veth0_to_bond\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, [0x0, 0x0, 0x0, 0x0, 0xd93f4aacfed98f5f, 0xff], @multicast, [0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xfffffffffffffffd}}}], @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffc}}}}, {0x3, 0x22, 0x8848, 'veth0_to_team\x00', 'bridge0\x00', 'netpci0\x00', 'veth0_macvtap\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0xce, 0x13e, 0x176, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0x80, 0x6, 0x1, 0x4}}}, @cpu={{'cpu\x00', 0x0, 0x8}, {{0x5}}}], [@arpreply={'arpreply\x00', 0x10, {{@random="79f425aee72a", 0xfffffffffffffffe}}}, @arpreply={'arpreply\x00', 0x10, {{@multicast, 0xffffffffffffffff}}}], @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x5, 0x6b, 0xfbfb, 'ip_vti0\x00', 'bond0\x00', 'veth0_macvtap\x00', 'caif0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], @broadcast, [0x0, 0x0, 0x0, 0x0, 0xff], 0xf6, 0xf6, 0x12e, [@limit={{'limit\x00', 0x0, 0x20}, {{0x99f, 0x0, 0xc5f, 0x0, 0x9, 0x5b}}}, @mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x1, 0x3, 0x2, 0x2}}}], [], @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffc}}}}, {0x5, 0x0, 0x9200, 'team_slave_0\x00', 'ip_vti0\x00', 'veth1\x00', 'ip6gre0\x00', @random="5d98890a58d3", [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @broadcast, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0xee, 0x15e, 0x1ae, [@helper={{'helper\x00', 0x0, 0x28}, {{0x0, 'RAS\x00'}}}, @m802_3={{'802_3\x00', 0x0, 0x8}, {{0x7e, 0x5, 0x5, 0x4}}}], [@arpreply={'arpreply\x00', 0x10, {{@remote, 0xfffffffffffffffe}}}, @snat={'snat\x00', 0x10, {{@broadcast, 0xfffffffffffffffe}}}], @common=@log={'log\x00', 0x28, {{0x0, "38f02dc10dabef57794a24cf0e13c559130f2d5296e46942bdd1d8968d30", 0x8}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x1, [{0x5, 0x2, 0xf8, 'ip6gre0\x00', 'pim6reg1\x00', 'batadv_slave_1\x00', 'veth0_virt_wifi\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0x1fe], @broadcast, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xb6, [], [], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x1, 0x4, {0x4}}}}}]}, {0x0, '\x00', 0x5, 0xfffffffffffffffe, 0x1, [{0x5, 0x4, 0xaee3, 'ip6gretap0\x00', 'veth1_vlan\x00', 'bond_slave_0\x00', 'bridge0\x00', @empty, [0x0, 0x0, 0xff, 0xff, 0xff], @local, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0xbe, 0x1ee, [], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x3, {0x4}}}}], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x7, 'system_u:object_r:init_var_run_t:s0\x00'}}}}]}]}, 0x90c) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fbdbdf25010000000000000002410000001000137564708fd41d4d3a73797a32"], 0x2c}, 0x1, 0x0, 0x0, 0x51}, 0x4000000) 17.86204732s ago: executing program 4 (id=1638): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0xfffffffc, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0xfffffffb, 0x53, 0x36, 0x1c, 0x10, 0x1d, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040014}, 0x20008804) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4005, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x408d8}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x48811) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe4d, 0x10, 0x0, 0x0, 0x0}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) r11 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r11, 0x29, 0xd1, &(0x7f0000000000)=0x5f5e0ff, 0x4) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f00000004c0)={@void, @void, @mpls={[{0x8001, 0x0, 0x1}, {0xffffa, 0x0, 0x1}, {0x60}, {0x8e1, 0x0, 0x1}, {0x6}, {0x3}, {0x100}], @ipv4=@dccp={{0x17, 0x4, 0x3, 0x3, 0xf3, 0x67, 0x0, 0x2, 0x21, 0x0, @private=0xa010101, @broadcast, {[@ssrr={0x89, 0x1b, 0x34, [@multicast2, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}, @loopback, @local]}, @rr={0x7, 0x27, 0xf0, [@remote, @loopback, @local, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0xd}, @empty, @remote, @rand_addr=0x64010101]}, @end, @ra={0x94, 0x4}, @noop]}}, {{0x4e21, 0x4e24, 0x4, 0x1, 0x8, 0x0, 0x0, 0x8, 0x5, "0100", 0xe, "518827"}, "7caae8db24b329a4080e4f41e507e62df15003dbd804e2fec47c47974e0a651c3b971ea98199b54144b37d144a91011e5ce92fa9b961fe3696a0a57bab80c7fd74cc595968f2a4ce1213728e49eefca15d46eb6732f7cae26a4ff2f9b8a0ef9a2ea53cc72ff7b3786f20ec43047ff7c9a9aa6acbafc134a6baa41e34f2491d55923f233d4b96ae"}}}}, 0x10f) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000e01f0edeb00ce0c901a8b0801d149a1b2e4fe08682049966f1f629ffd532100007d3900"/49, @ANYRES64=r8, @ANYRES32=r8, @ANYRESOCT=r8], 0x14}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="48000000041400042dbd7000fbdbdf250800010000000000080001000100000008000100100000000000000002000000080001000200000008000100010000000800010002000000be2d275946fb"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040800) 16.69576577s ago: executing program 0 (id=1639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0xf, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delchain={0xb0, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x80, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x64, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0xfffffffffffffd2d, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfffe}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x80}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xc0}]}]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x5}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0xfb}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x1412, 0x800, 0x70bd2e, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x20004810) 16.656549689s ago: executing program 1 (id=1640): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000a"], 0x0, 0x26}, 0x28) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_BASE_RATE64={0xffffffffffffff52, 0x2, 0x1}]}}]}, 0x50}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="890000000000000095000000000b00003f17b1beb52a0b451fa0aa9a62743ba31bc47cf8fc685710d9448e501e269a69e04a0ed974df84fc2167f3e7835aaf6e2ba338b9fbdb4888d3e6852def2897e06ea0f8ca475c13b19764"], &(0x7f0000000280)='GPL\x00', 0x5, 0x7b, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', r3, 0x0, r0, 0x8, 0x0, 0x0, 0x90}, 0x94) 16.655925906s ago: executing program 3 (id=1641): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, 'team0\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x834f}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x40}}, 0x8000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0x4c, r1, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffff00000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r3}, 0x8) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x9, 0xfffffffffffffffc, &(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5610067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000300090c10000000008003000000", 0x58}], 0x1) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1e, 0x0, 0x5, 0xef, 0x40a6}, 0x50) r7 = socket$l2tp(0x2, 0x2, 0x73) read(r7, &(0x7f0000000440)=""/220, 0xdc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10288000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x140a, 0x800, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0xc603d09ab5c7580b) r8 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r8, 0x0, 0x0) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bind$xdp(r9, 0x0, 0x0) r10 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, 0x0, &(0x7f0000000100)) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 16.654473233s ago: executing program 4 (id=1642): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000801) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000800000000000000080000006b1149000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r1, 0x29, 0x14, 0x0, 0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070"], 0x40}}, 0x0) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.578237083s ago: executing program 2 (id=1643): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000040)={0x2, 0x2, 0x4, 0x702, 0x40, 0x8f}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000000)={'ipvlan1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 16.428037513s ago: executing program 4 (id=1644): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x2}, 0x8) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x1e1982, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x2}, 0x8) (async) close(r0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x1e1982, 0x0) (async) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async) recvmmsg(r3, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) (async) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) (async) 16.406823553s ago: executing program 2 (id=1645): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe4, 0x9, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xde}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}]}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'syz_tun\x00'}}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x7a}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xad6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}) 16.329983606s ago: executing program 1 (id=1646): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = accept4$llc(r2, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000180)=0x10, 0x40000) readv(r7, &(0x7f0000000680)=[{&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000000400)=""/74, 0x4a}, {&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000500)=""/145, 0x91}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/136, 0x88}], 0x7) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r6}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r8 = socket$kcm(0x10, 0x7, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/210, 0xd2}], 0x1}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000300000006"], 0x34c}}, 0x0) 16.326610171s ago: executing program 0 (id=1647): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0xd, 0x41}, 0xffff, [0xde99, 0x8e9, 0xc, 0x1d, 0x43, 0xfffffffffffffffb, 0x28, 0x1, 0x34e0000, 0x7ffffffffffffffb, 0x9, 0x5, 0x6, 0x8, 0x7, 0x4]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0xe) 16.286014801s ago: executing program 2 (id=1648): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0xfffffffffffffff4, [@enum64={0x9, 0x6, 0x0, 0x13, 0x0, 0x1, [{0x3, 0x6, 0x4}, {0xe, 0xffff, 0xfffff800}, {0x4, 0xffffff9d}, {0xd, 0xed3dd074, 0x6}, {0x6, 0x8, 0xb79}, {0xb, 0xd3d7, 0x80000001}, {0xf, 0x4, 0xa}]}]}, {0x0, [0x0, 0x5f, 0x7f, 0x30, 0x30]}}, &(0x7f0000000100)=""/141, 0x73, 0x8d, 0x1, 0x7}, 0x28) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000007c0)={0x13c, r0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x61}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @key_params=[@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "aebc15089a"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4787a53a16b812c50fc7aa00b5"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "783d5ffb71efda923bc9775195"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4d9ec06f9b5951eba1df43474a"}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "3c68fde9957a9935aaebead3493765b3"}], @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "5b670bbe11"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "39c6f86a8a"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @random="0e3c3231f030"}, @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, '\x00'}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1f96}]]}, 0x13c}, 0x1, 0x0, 0x0, 0x40}, 0x4008051) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000fc0)={'filter\x00', 0x0, [0x9e6, 0x2, 0x4]}, &(0x7f0000001040)=0x44) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100002500010300000000c00e0000010100800c0001"], 0x114}], 0x1}, 0x40000) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000480)=""/192, 0xc0}, {&(0x7f0000000300)=""/88, 0x58}, {&(0x7f0000000540)=""/102, 0x66}, {0x0}, {&(0x7f00000005c0)=""/225, 0xe1}, {&(0x7f00000006c0)=""/110, 0x6e}], 0x7}, 0x10) r5 = socket(0x1, 0x803, 0x0) r6 = accept4(r1, &(0x7f0000000940)=@l2tp6={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x80, 0x800) sendmsg$key(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x2, 0x3, 0x10, 0x9, 0x12, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_x_sa2={0x2, 0x13, 0xc0, 0x0, 0x0, 0x70bd27, 0x3505}, @sadb_x_filter={0x5, 0x1a, @in6=@remote, @in6=@remote, 0x1f, 0x8}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_lifetime={0x4, 0x3, 0x7, 0x2, 0x2, 0x8}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d4}]}, 0x90}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000080)="351e4be3bb5993a5cd412211d0202b9b73ad09c480563c332d52d793a0afd3864001c3aa1caba0262f1be6051a3e37eaa64b5e3ebd293d7f8e8abed4bef128610e2b1932cbd724e9d383e1a88698216be7ee8a5ddc1e4a65a6a543afbc424c6aaa5845a8cc474a037d98675ff511ff1b", 0x70) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x9}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000100)={r9}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000010c0)={r9, 0x2c, &(0x7f0000001080)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x40000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}]}, &(0x7f0000001100)=0x10) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="bf06000000f80f000304000000000017000000004200", @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300002a00028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x44}}, 0x8000) 16.20378648s ago: executing program 4 (id=1649): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$inet(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)='4', 0x1}], 0x1}, 0x8084) r3 = accept(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000095c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008110}], 0x1, 0x20000001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x9, 0x11, 0x0, 0x1, [@generic="31f9e05e2f"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 16.125883912s ago: executing program 1 (id=1650): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) close(0x3) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r3, 0x80) accept$netrom(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bind$inet(r1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e20, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x810) 16.010240244s ago: executing program 0 (id=1651): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x131}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001", @ANYRES16=r1], 0xe4}}, 0x50800) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x1, 0x2, 0x401, 0x0, 0x0, {0x7}, [@CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x20040000) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="340000001000010800000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="004004006400000008001b00000000000c002b80080001"], 0x34}, 0x1, 0x0, 0x0, 0x15}, 0x0) 15.950585889s ago: executing program 0 (id=1652): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) unshare(0x2a020400) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r1}, 0x50) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x4, 0x1, 0x1, {0xa, 0x4e22, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff8}}}, 0x32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59", 0xd}], 0x1}, 0x4) socket$kcm(0x10, 0x400000002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x86dd, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x300, 0x0, 0x1, 0x0, @private=0xa010102, @empty}, @address_request={0x11, 0x0, 0x0, 0x8}}}}}, 0x0) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1d) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r5], 0x2c}}, 0x4000000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x27b2}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a01"], 0x24}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) 15.838101465s ago: executing program 1 (id=1653): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd645c374cf4861b8}, {0x8ea}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4}, [@sec_ctx={0xc, 0x8, {0x8}}, @mark={0xc}]}, 0xd8}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={r7, 0x5}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f000000000001"], 0x48}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r9, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r10, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc00000800090005000000080007009801000020"], 0x234}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0x2f10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x100}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x4000) 1.191398321s ago: executing program 32 (id=1648): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0xfffffffffffffff4, [@enum64={0x9, 0x6, 0x0, 0x13, 0x0, 0x1, [{0x3, 0x6, 0x4}, {0xe, 0xffff, 0xfffff800}, {0x4, 0xffffff9d}, {0xd, 0xed3dd074, 0x6}, {0x6, 0x8, 0xb79}, {0xb, 0xd3d7, 0x80000001}, {0xf, 0x4, 0xa}]}]}, {0x0, [0x0, 0x5f, 0x7f, 0x30, 0x30]}}, &(0x7f0000000100)=""/141, 0x73, 0x8d, 0x1, 0x7}, 0x28) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000007c0)={0x13c, r0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x61}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @key_params=[@NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "aebc15089a"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4787a53a16b812c50fc7aa00b5"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "783d5ffb71efda923bc9775195"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4d9ec06f9b5951eba1df43474a"}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "3c68fde9957a9935aaebead3493765b3"}], @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "5b670bbe11"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "39c6f86a8a"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @random="0e3c3231f030"}, @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, '\x00'}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1f96}]]}, 0x13c}, 0x1, 0x0, 0x0, 0x40}, 0x4008051) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000fc0)={'filter\x00', 0x0, [0x9e6, 0x2, 0x4]}, &(0x7f0000001040)=0x44) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000bc0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100002500010300000000c00e0000010100800c0001"], 0x114}], 0x1}, 0x40000) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000480)=""/192, 0xc0}, {&(0x7f0000000300)=""/88, 0x58}, {&(0x7f0000000540)=""/102, 0x66}, {0x0}, {&(0x7f00000005c0)=""/225, 0xe1}, {&(0x7f00000006c0)=""/110, 0x6e}], 0x7}, 0x10) r5 = socket(0x1, 0x803, 0x0) r6 = accept4(r1, &(0x7f0000000940)=@l2tp6={0xa, 0x0, 0x0, @private1}, &(0x7f00000009c0)=0x80, 0x800) sendmsg$key(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x2, 0x3, 0x10, 0x9, 0x12, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_x_sa2={0x2, 0x13, 0xc0, 0x0, 0x0, 0x70bd27, 0x3505}, @sadb_x_filter={0x5, 0x1a, @in6=@remote, @in6=@remote, 0x1f, 0x8}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_lifetime={0x4, 0x3, 0x7, 0x2, 0x2, 0x8}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d4}]}, 0x90}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000080)="351e4be3bb5993a5cd412211d0202b9b73ad09c480563c332d52d793a0afd3864001c3aa1caba0262f1be6051a3e37eaa64b5e3ebd293d7f8e8abed4bef128610e2b1932cbd724e9d383e1a88698216be7ee8a5ddc1e4a65a6a543afbc424c6aaa5845a8cc474a037d98675ff511ff1b", 0x70) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x9}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000100)={r9}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000010c0)={r9, 0x2c, &(0x7f0000001080)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x40000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}]}, &(0x7f0000001100)=0x10) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="bf06000000f80f000304000000000017000000004200", @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300002a00028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x44}}, 0x8000) 1.149097788s ago: executing program 33 (id=1641): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, 'team0\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x834f}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x40}}, 0x8000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0x4c, r1, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffffffff00000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r3}, 0x8) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x9, 0xfffffffffffffffc, &(0x7f0000000040)) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5610067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000300090c10000000008003000000", 0x58}], 0x1) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1e, 0x0, 0x5, 0xef, 0x40a6}, 0x50) r7 = socket$l2tp(0x2, 0x2, 0x73) read(r7, &(0x7f0000000440)=""/220, 0xdc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10288000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x140a, 0x800, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0xc603d09ab5c7580b) r8 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r8, 0x0, 0x0) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bind$xdp(r9, 0x0, 0x0) r10 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r10, 0x84, 0x6c, 0x0, &(0x7f0000000100)) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.09921696s ago: executing program 34 (id=1649): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$inet(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)='4', 0x1}], 0x1}, 0x8084) r3 = accept(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000095c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008110}], 0x1, 0x20000001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x9, 0x11, 0x0, 0x1, [@generic="31f9e05e2f"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 56.546881ms ago: executing program 35 (id=1652): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) unshare(0x2a020400) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r1}, 0x50) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x4, 0x1, 0x1, {0xa, 0x4e22, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff8}}}, 0x32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59", 0xd}], 0x1}, 0x4) socket$kcm(0x10, 0x400000002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x86dd, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x300, 0x0, 0x1, 0x0, @private=0xa010102, @empty}, @address_request={0x11, 0x0, 0x0, 0x8}}}}}, 0x0) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1d) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r5], 0x2c}}, 0x4000000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x27b2}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a01"], 0x24}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) 0s ago: executing program 36 (id=1653): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd645c374cf4861b8}, {0x8ea}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4}, [@sec_ctx={0xc, 0x8, {0x8}}, @mark={0xc}]}, 0xd8}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={r7, 0x5}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f000000000001"], 0x48}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r9, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r10, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc00000800090005000000080007009801000020"], 0x234}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0x2f10}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x100}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x4000) kernel console output (not intermixed with test programs): 664084][ T9747] Cannot find del_set index 1 as target [ 256.868856][ T9760] netlink: 28 bytes leftover after parsing attributes in process `syz.4.961'. [ 256.946677][ T9758] netlink: 'syz.3.960': attribute type 1 has an invalid length. [ 256.957314][ T9758] netlink: 224 bytes leftover after parsing attributes in process `syz.3.960'. [ 257.382008][ T9779] netlink: 'syz.3.966': attribute type 13 has an invalid length. [ 257.460188][ T9791] x_tables: duplicate underflow at hook 1 [ 257.626342][ T9800] netlink: 'syz.2.972': attribute type 31 has an invalid length. [ 257.642459][ T9794] pim6reg1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 257.665284][ T9794] pim6reg1: entered promiscuous mode [ 257.677455][ T9794] pim6reg1: entered allmulticast mode [ 257.860745][ T9812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.976'. [ 257.909018][ T9819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.977'. [ 257.929974][ T9812] ip6gre2: entered promiscuous mode [ 257.950510][ T9812] ip6gre2: entered allmulticast mode [ 257.984188][ T7930] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 258.024363][ T7930] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 258.032275][ T5956] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 258.142638][ T5956] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 258.275011][ T9837] Cannot find set identified by id 0 to match [ 258.464807][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.984'. [ 258.549512][ T9846] lo speed is unknown, defaulting to 1000 [ 258.870423][ T9846] lo speed is unknown, defaulting to 1000 [ 259.046483][ T9869] netlink: 27 bytes leftover after parsing attributes in process `syz.1.992'. [ 259.068107][ T9855] nbd0: detected capacity change from 0 to 63 [ 259.092693][ T5914] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 259.101681][ T5834] block nbd0: Receive control failed (result -104) [ 259.106310][ T5829] block nbd0: Receive control failed (result -32) [ 259.109047][ T5839] block nbd0: Receive control failed (result -32) [ 259.127440][ T51] block nbd0: Receive control failed (result -32) [ 259.212404][ T9872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.251732][ T9872] Cannot find del_set index 1 as target [ 259.672601][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.999'. [ 259.700690][ T9893] netlink: 32 bytes leftover after parsing attributes in process `syz.3.999'. [ 260.685813][ T9950] netlink: 'syz.0.1011': attribute type 1 has an invalid length. [ 260.847209][ T9954] xt_CT: No such helper "snmp_trap" [ 261.392785][ T9950] 8021q: adding VLAN 0 to HW filter on device bond8 [ 261.400638][ T9940] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 261.445900][ T9951] bond8: (slave veth7): Enslaving as an active interface with a down link [ 261.468971][ T9964] __nla_validate_parse: 5 callbacks suppressed [ 261.468992][ T9964] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1015'. [ 261.500996][ T9954] bond8: (slave gretap1): making interface the new active one [ 261.513920][ T9954] gretap1: entered promiscuous mode [ 261.519636][ T9954] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 261.902354][ T9982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.935058][ T9982] ip6t_srh: unknown srh invflags BA61 [ 262.310569][T10005] netlink: 'syz.1.1025': attribute type 2 has an invalid length. [ 262.423654][T10013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1025'. [ 262.452619][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 262.466642][T10005] !©9: entered promiscuous mode [ 262.883617][T10028] nbd1: detected capacity change from 0 to 63 [ 262.893016][T10033] block nbd1: NBD_DISCONNECT [ 262.911109][T10033] block nbd1: Disconnected due to user request. [ 262.934122][T10033] block nbd1: shutting down sockets [ 262.983760][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 262.993963][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 263.003878][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 263.013583][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 263.021427][ C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 263.030993][ C0] Buffer I/O error on dev nbd1, logical block 2, async page read [ 263.038852][ C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 263.048676][ C0] Buffer I/O error on dev nbd1, logical block 3, async page read [ 263.082519][ T7277] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 263.108346][ T7277] Buffer I/O error on dev nbd1, logical block 0, async page read [ 263.136872][ T7277] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 263.151732][ T7277] Buffer I/O error on dev nbd1, logical block 1, async page read [ 263.163412][ T7277] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 263.174126][ T7277] Buffer I/O error on dev nbd1, logical block 2, async page read [ 263.183210][ T7277] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 263.188347][T10042] bond0: entered promiscuous mode [ 263.198081][ T7277] Buffer I/O error on dev nbd1, logical block 3, async page read [ 263.202752][T10042] bond_slave_0: entered promiscuous mode [ 263.206509][ T7277] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 263.221777][T10042] bond_slave_1: entered promiscuous mode [ 263.224930][T10042] batadv0: entered promiscuous mode [ 263.230345][ T7277] Buffer I/O error on dev nbd1, logical block 0, async page read [ 263.241506][ T7277] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 263.246706][T10042] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 263.251932][ T7277] Buffer I/O error on dev nbd1, logical block 1, async page read [ 263.267234][ T7277] ldm_validate_partition_table(): Disk read failed. [ 263.276854][ T7277] Dev nbd1: unable to read RDB block 0 [ 263.283648][T10042] bond0: left promiscuous mode [ 263.284527][ T7277] nbd1: unable to read partition table [ 263.288783][T10042] bond_slave_0: left promiscuous mode [ 263.302920][T10042] bond_slave_1: left promiscuous mode [ 263.310659][T10042] batadv0: left promiscuous mode [ 263.362013][ T7277] ldm_validate_partition_table(): Disk read failed. [ 263.373420][ T7277] Dev nbd1: unable to read RDB block 0 [ 263.380289][ T7277] nbd1: unable to read partition table [ 263.524006][T10054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1037'. [ 263.693045][T10054] 8021q: adding VLAN 0 to HW filter on device bond5 [ 263.765153][T10060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.784819][T10060] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.811850][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1039'. [ 263.824502][T10060] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.856185][T10062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.076274][T10073] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1041'. [ 264.316963][T10079] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1044'. [ 264.716414][T10088] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1047'. [ 265.824058][T10111] netlink: 'syz.1.1053': attribute type 9 has an invalid length. [ 265.891107][T10113] lo speed is unknown, defaulting to 1000 [ 265.921076][T10116] SET target dimension over the limit! [ 266.062266][T10115] bond5: Removing last arp target with arp_interval on [ 266.564949][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1057'. [ 267.363652][T10129] hsr_slave_0: left promiscuous mode [ 267.422697][T10129] hsr_slave_1: left promiscuous mode [ 267.559805][T10128] lo speed is unknown, defaulting to 1000 [ 267.566063][T10113] lo speed is unknown, defaulting to 1000 [ 267.704517][T10142] bond5: option ad_user_port_key: invalid value (65535) [ 267.712095][T10142] bond5: option ad_user_port_key: allowed values 0 - 1023 [ 267.736969][T10142] bond5 (unregistering): Released all slaves [ 267.845524][T10148] bond6: option lacp_active: invalid value (8) [ 267.884101][T10148] bond6 (unregistering): Released all slaves [ 267.981541][T10155] netlink: 'syz.1.1062': attribute type 4 has an invalid length. [ 268.149736][T10145] lo speed is unknown, defaulting to 1000 [ 268.156327][T10128] lo speed is unknown, defaulting to 1000 [ 268.277601][ T5914] lo speed is unknown, defaulting to 1000 [ 268.285988][ T5914] syz0: Port: 1 Link DOWN [ 268.290688][ T5914] lo speed is unknown, defaulting to 1000 [ 268.526710][T10172] žÿ: renamed from team_slave_1 (while UP) [ 268.721262][T10145] lo speed is unknown, defaulting to 1000 [ 269.434639][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1070'. [ 269.592648][T10189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1071'. [ 269.673142][T10189] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.933676][T10204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1073'. [ 269.966063][T10196] lo speed is unknown, defaulting to 1000 [ 270.035694][T10207] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.150452][T10207] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.260148][T10207] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.367564][T10207] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.542108][T10225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1080'. [ 270.551583][T10225] openvswitch: netlink: Flow key attr not present in new flow. [ 270.619773][T10202] lo speed is unknown, defaulting to 1000 [ 270.634310][T10196] lo speed is unknown, defaulting to 1000 [ 270.716859][ T35] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.757585][ T35] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.871202][ T35] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.954091][ T35] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.006560][T10230] syzkaller1: entered promiscuous mode [ 271.012088][T10230] syzkaller1: entered allmulticast mode [ 271.094424][T10202] lo speed is unknown, defaulting to 1000 [ 271.172835][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 271.373512][T10236] ip6gre2: left promiscuous mode [ 271.393568][T10236] ip6gre2: left allmulticast mode [ 271.567656][T10239] netlink: 'syz.4.1085': attribute type 1 has an invalid length. [ 271.584249][T10239] netlink: 'syz.4.1085': attribute type 2 has an invalid length. [ 272.636956][ T7934] gretap1: left promiscuous mode [ 272.681095][T10251] syzkaller0: entered promiscuous mode [ 272.696193][T10250] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .¿šØ ÕáÊÎí ÿìà´*žËî]æÌÔáÿÿÿÿÁ [ 272.719371][T10251] syzkaller0: entered allmulticast mode [ 272.981283][T10259] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1092'. [ 272.981441][T10261] netlink: 'syz.4.1093': attribute type 3 has an invalid length. [ 273.000386][T10261] netlink: 'syz.4.1093': attribute type 3 has an invalid length. [ 273.012202][T10261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1093'. [ 273.053037][T10259] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1092'. [ 273.342188][T10275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1098'. [ 273.382959][T10275] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 273.491066][T10280] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1100'. [ 273.541850][T10280] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1100'. [ 273.554028][T10280] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1100'. [ 273.578171][T10280] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1100'. [ 273.589610][T10280] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1100'. [ 273.621028][T10280] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1100'. [ 273.694255][T10286] netlink: 'syz.2.1102': attribute type 1 has an invalid length. [ 273.901787][T10293] bond6: entered promiscuous mode [ 273.907480][T10293] bond6: entered allmulticast mode [ 273.916708][T10293] 8021q: adding VLAN 0 to HW filter on device bond6 [ 274.221206][T10316] lo speed is unknown, defaulting to 1000 [ 274.528401][T10326] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 274.835059][T10333] vlan5: entered promiscuous mode [ 274.840181][T10333] batadv_slave_1: entered promiscuous mode [ 274.868059][T10316] lo speed is unknown, defaulting to 1000 [ 276.857702][T10298] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 277.091899][T10351] netlink: 'syz.1.1118': attribute type 1 has an invalid length. [ 277.153771][T10354] netlink: 'syz.1.1118': attribute type 8 has an invalid length. [ 277.161968][T10354] netlink: 'syz.1.1118': attribute type 8 has an invalid length. [ 277.297601][T10351] 8021q: adding VLAN 0 to HW filter on device bond7 [ 277.397625][T10368] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.544363][T10368] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.599865][ T5839] Bluetooth: hci4: link tx timeout [ 277.606849][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 277.638564][T10368] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.739464][T10368] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.112495][ T35] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.140791][ T35] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.175269][ T35] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.200317][ T35] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.418428][T10399] __nla_validate_parse: 63 callbacks suppressed [ 278.418449][T10399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1130'. [ 278.474267][ T1148] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.474465][T10399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1130'. [ 278.504032][T10406] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1131'. [ 278.544579][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1129'. [ 278.556694][ T1148] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.576464][ T1148] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.633592][ T1148] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.965942][T10422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1135'. [ 279.084398][T10430] syzkaller1: entered promiscuous mode [ 279.090113][T10430] syzkaller1: entered allmulticast mode [ 279.261668][T10437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1141'. [ 279.286772][T10439] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1140'. [ 279.472479][T10433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1139'. [ 279.655350][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 279.935549][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1145'. [ 280.219361][T10459] IPVS: Error connecting to the multicast addr [ 280.382005][T10462] bond9: (slave bond_slave_1): Device is not our slave [ 280.399708][T10462] bond9: option active_slave: invalid value (bond_slave_1) [ 280.410900][T10462] bond9 (unregistering): Released all slaves [ 280.656486][T10479] bridge0: port 3(syz_tun) entered blocking state [ 280.672585][T10479] bridge0: port 3(syz_tun) entered disabled state [ 280.704290][T10479] syz_tun: entered allmulticast mode [ 280.757907][T10479] syz_tun: entered promiscuous mode [ 280.766544][T10479] bridge0: port 3(syz_tun) entered blocking state [ 280.773950][T10479] bridge0: port 3(syz_tun) entered forwarding state [ 280.839878][T10461] lo speed is unknown, defaulting to 1000 [ 281.490514][T10461] lo speed is unknown, defaulting to 1000 [ 281.493734][T10531] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1164'. [ 281.588836][T10532] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 281.606724][T10532] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 281.989113][T10554] netlink: 'syz.2.1167': attribute type 1 has an invalid length. [ 282.135090][T10557] lo speed is unknown, defaulting to 1000 [ 282.200144][T10565] netlink: 'syz.0.1172': attribute type 1 has an invalid length. [ 282.253400][T10565] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 282.577467][T10584] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 282.761285][T10588] gretap0: entered promiscuous mode [ 282.767187][T10588] vlan3: entered promiscuous mode [ 282.926424][T10567] lo speed is unknown, defaulting to 1000 [ 282.960977][T10557] lo speed is unknown, defaulting to 1000 [ 283.517550][T10615] block nbd1: server does not support multiple connections per device. [ 283.548633][T10615] block nbd1: shutting down sockets [ 283.558659][T10620] syzkaller0: entered promiscuous mode [ 283.564326][T10620] syzkaller0: entered allmulticast mode [ 283.679519][T10612] lo speed is unknown, defaulting to 1000 [ 283.796517][T10624] __nla_validate_parse: 5 callbacks suppressed [ 283.796540][T10624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1186'. [ 284.135320][T10567] lo speed is unknown, defaulting to 1000 [ 284.145585][T10612] lo speed is unknown, defaulting to 1000 [ 284.253330][T10638] netlink: 'syz.2.1191': attribute type 1 has an invalid length. [ 284.334251][T10637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1191'. [ 284.854345][ T29] audit: type=1800 audit(1774160431.238:6): pid=10645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1193" name="memory.events" dev="tmpfs" ino=1268 res=0 errno=0 [ 284.941148][T10647] tipc: Enabling of bearer rejected, failed to enable media [ 285.072999][T10649] macsec1: entered promiscuous mode [ 285.078579][T10649] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 285.623370][T10679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.787769][T10685] lo speed is unknown, defaulting to 1000 [ 286.076507][T10703] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1212'. [ 286.117064][T10703] ip6gre1: entered promiscuous mode [ 286.127876][T10703] ip6gre1: entered allmulticast mode [ 286.144387][T10703] netlink: 'syz.2.1212': attribute type 6 has an invalid length. [ 286.154100][T10703] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1212'. [ 286.301646][T10703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.488234][T10703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.571847][T10713] netlink: 'syz.1.1209': attribute type 13 has an invalid length. [ 286.580061][T10713] netlink: 'syz.1.1209': attribute type 17 has an invalid length. [ 286.630633][T10719] netlink: 29 bytes leftover after parsing attributes in process `syz.1.1209'. [ 286.686154][T10685] lo speed is unknown, defaulting to 1000 [ 286.902660][T10710] nbd1: detected capacity change from 0 to 127 [ 287.002373][T10713] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.031139][ T5894] lo speed is unknown, defaulting to 1000 [ 287.037127][ T5894] syz0: Port: 1 Link ACTIVE [ 287.198114][ T5894] lo speed is unknown, defaulting to 1000 [ 287.280754][T10729] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1218'. [ 287.284485][T10727] syzkaller1: entered promiscuous mode [ 287.299766][ T51] block nbd1: Receive control failed (result -104) [ 287.312424][T10727] syzkaller1: entered allmulticast mode [ 287.330167][T10727] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 287.453829][T10735] openvswitch: netlink: Tunnel attr 47 out of range max 16 [ 287.709952][T10741] sctp: [Deprecated]: syz.3.1224 (pid 10741) Use of int in maxseg socket option. [ 287.709952][T10741] Use struct sctp_assoc_value instead [ 287.990584][T10744] Bluetooth: MGMT ver 1.23 [ 288.203726][T10761] tipc: Enabled bearer , priority 0 [ 288.222982][T10757] lo speed is unknown, defaulting to 1000 [ 288.276651][T10761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.322695][T10761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.563825][T10762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.957741][T10757] lo speed is unknown, defaulting to 1000 [ 289.074302][T10797] xt_recent: Unsupported userspace flags (000000b1) [ 289.097227][ T10] block nbd0: Connection timed out, retrying (0/4 alive) [ 289.105914][ T10] block nbd0: Connection timed out, retrying (0/4 alive) [ 289.114366][ T10] block nbd0: Connection timed out, retrying (0/4 alive) [ 289.122660][ T10] block nbd0: Connection timed out, retrying (0/4 alive) [ 289.130632][ T10] block nbd0: Dead connection, failed to find a fallback [ 289.139365][ T10] block nbd0: shutting down sockets [ 289.145363][ T10] blk_print_req_error: 138 callbacks suppressed [ 289.145382][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.163421][ T10] buffer_io_error: 138 callbacks suppressed [ 289.163442][ T10] Buffer I/O error on dev nbd0, logical block 0, async page read [ 289.178145][ T10] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.189445][ T10] Buffer I/O error on dev nbd0, logical block 3, async page read [ 289.197397][ T10] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.207279][ T10] Buffer I/O error on dev nbd0, logical block 2, async page read [ 289.215245][ T10] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.225332][ T10] Buffer I/O error on dev nbd0, logical block 1, async page read [ 289.236708][ T7276] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.256698][ T7276] Buffer I/O error on dev nbd0, logical block 0, async page read [ 289.265075][ T7276] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.275068][ T7276] Buffer I/O error on dev nbd0, logical block 1, async page read [ 289.283175][ T7276] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.293436][ T7276] Buffer I/O error on dev nbd0, logical block 2, async page read [ 289.301254][ T7276] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.311341][ T7276] Buffer I/O error on dev nbd0, logical block 3, async page read [ 289.320302][ T7276] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.340566][ T7276] Buffer I/O error on dev nbd0, logical block 0, async page read [ 289.348847][ T7276] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 289.372357][ T7276] Buffer I/O error on dev nbd0, logical block 1, async page read [ 289.380892][ T7276] ldm_validate_partition_table(): Disk read failed. [ 289.389175][ T7276] Dev nbd0: unable to read RDB block 0 [ 289.400080][ T7276] nbd0: unable to read partition table [ 289.420193][ T7276] ldm_validate_partition_table(): Disk read failed. [ 289.491654][ T7276] Dev nbd0: unable to read RDB block 0 [ 289.501842][ T7276] nbd0: unable to read partition table [ 289.533448][T10812] tipc: Can't bind to reserved service type 2 [ 289.570490][T10821] netlink: 'syz.0.1242': attribute type 1 has an invalid length. [ 289.695936][T10828] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1247'. [ 289.708198][T10807] netlink: 'syz.0.1242': attribute type 26 has an invalid length. [ 289.766808][T10828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 289.826131][T10813] lo speed is unknown, defaulting to 1000 [ 289.864628][ T51] block nbd2: Receive control failed (result -32) [ 290.546790][T10871] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1260'. [ 290.556661][T10871] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1260'. [ 290.783409][T10813] lo speed is unknown, defaulting to 1000 [ 290.872706][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1264'. [ 290.897177][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1264'. [ 290.910928][T10887] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1264'. [ 291.557185][T10928] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1270'. [ 291.814032][T10934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1271'. [ 292.230816][T10950] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1274'. [ 292.323316][T10950] nbd: socks must be embedded in a SOCK_ITEM attr [ 292.636597][ T7276] udevd[7276]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 293.430432][T10994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1284'. [ 293.455852][T10989] netlink: 'syz.4.1283': attribute type 13 has an invalid length. [ 293.598701][T11007] raw_sendmsg: syz.3.1287 forgot to set AF_INET. Fix it! [ 294.261296][T11048] netlink: 'syz.2.1298': attribute type 3 has an invalid length. [ 294.573124][T11065] netlink: 'syz.1.1304': attribute type 1 has an invalid length. [ 294.648496][T11065] 8021q: adding VLAN 0 to HW filter on device bond8 [ 294.733879][T11068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.803576][T11068] bond8: (slave batadv0): making interface the new active one [ 294.840480][T11068] bond8: (slave batadv0): Enslaving as an active interface with an up link [ 295.022532][T11084] netlink: 'syz.3.1308': attribute type 2 has an invalid length. [ 295.041601][T11084] __nla_validate_parse: 5 callbacks suppressed [ 295.041623][T11084] netlink: 1696 bytes leftover after parsing attributes in process `syz.3.1308'. [ 295.383770][T11101] netlink: 'syz.4.1310': attribute type 1 has an invalid length. [ 295.485751][T11107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1314'. [ 295.497244][T11107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1314'. [ 295.537847][T11108] netlink: 'syz.2.1314': attribute type 32 has an invalid length. [ 295.558417][T11107] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1314'. [ 295.561856][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1314'. [ 295.613970][T11107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1314'. [ 295.654278][T11108] bond7: Setting coupled_control to off (0) [ 295.702403][T11119] syzkaller0: entered promiscuous mode [ 295.707945][T11119] syzkaller0: entered allmulticast mode [ 295.982498][T11128] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1320'. [ 296.018503][T11128] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1320'. [ 296.057752][T11132] netlink: 'syz.0.1320': attribute type 13 has an invalid length. [ 296.233640][T11140] nbd3: detected capacity change from 0 to 127 [ 296.279654][T11147] mac80211_hwsim hwsim6 syzkaller0: Caught tx_queue_len zero misconfig [ 296.310170][T11148] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.1322'. [ 296.407503][ T51] block nbd3: Receive control failed (result -104) [ 296.566316][T11157] lo speed is unknown, defaulting to 1000 [ 296.825636][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'. [ 296.960782][T11170] netlink: 'syz.3.1330': attribute type 5 has an invalid length. [ 296.978714][T11170] geneve0: entered promiscuous mode [ 296.984293][T11170] geneve0: entered allmulticast mode [ 296.991752][ T1148] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 297.001098][ T1148] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 297.023743][ T1148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 297.047880][ T1148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 297.418597][T11157] lo speed is unknown, defaulting to 1000 [ 297.797935][T11198] netlink: 'syz.1.1336': attribute type 1 has an invalid length. [ 298.110218][T11199] bond9: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 298.178055][ T75] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 298.197458][T11196] 8021q: adding VLAN 0 to HW filter on device bond9 [ 298.349941][ T75] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 298.633402][T11224] netlink: 'syz.2.1344': attribute type 298 has an invalid length. [ 299.063346][T11254] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 299.099569][T11252] lo speed is unknown, defaulting to 1000 [ 299.174068][T11259] batman_adv: batadv0: Adding interface: wlan1 [ 299.191013][T11259] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.292406][T11259] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 299.343857][T11261] bridge0: port 3(team0) entered disabled state [ 299.350916][T11261] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 299.453741][T11269] netlink: 'syz.2.1354': attribute type 1 has an invalid length. [ 299.766914][T11278] netlink: 'syz.2.1357': attribute type 20 has an invalid length. [ 299.780897][T11252] lo speed is unknown, defaulting to 1000 [ 299.801324][ T1148] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.801359][T11278] netlink: 'syz.2.1357': attribute type 20 has an invalid length. [ 299.853018][ T1148] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.914102][ T1148] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.932867][ T1148] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.227793][T11295] __nla_validate_parse: 10 callbacks suppressed [ 300.227816][T11295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1361'. [ 300.253024][T11299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1362'. [ 300.365460][T11299] 8021q: adding VLAN 0 to HW filter on device bond6 [ 300.450193][T11292] ip6erspan1: entered promiscuous mode [ 300.542881][T11306] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1365'. [ 300.612932][T11311] netlink: 'syz.4.1367': attribute type 1 has an invalid length. [ 301.491209][T11357] syzkaller0: entered promiscuous mode [ 301.526056][T11357] syzkaller0: entered allmulticast mode [ 301.586664][T11357] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1379'. [ 301.710610][T11364] lo speed is unknown, defaulting to 1000 [ 301.895707][T11380] syzkaller1: entered promiscuous mode [ 301.901246][T11380] syzkaller1: entered allmulticast mode [ 302.088117][T11364] lo speed is unknown, defaulting to 1000 [ 302.228991][T11394] sctp: [Deprecated]: syz.4.1392 (pid 11394) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.228991][T11394] Use struct sctp_sack_info instead [ 302.464982][T11405] tipc: Enabling of bearer rejected, failed to enable media [ 302.521897][T11413] netlink: 'syz.4.1396': attribute type 4 has an invalid length. [ 302.540296][T11413] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1396'. [ 302.705496][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1398'. [ 302.891966][T11434] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 303.067377][T11431] lo speed is unknown, defaulting to 1000 [ 303.435587][T11431] lo speed is unknown, defaulting to 1000 [ 303.525390][T11454] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1403'. [ 303.647014][T11458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1403'. [ 303.754769][T11465] team_slave_1: Caught tx_queue_len zero misconfig [ 303.836504][T11467] Cannot find add_set index 1 as target [ 303.901909][T11470] xt_bpf: check failed: parse error [ 304.136993][T11481] lo speed is unknown, defaulting to 1000 [ 304.204222][T11488] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1409'. [ 304.220969][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1410'. [ 304.715643][T11511] sctp: [Deprecated]: syz.3.1417 (pid 11511) Use of int in max_burst socket option. [ 304.715643][T11511] Use struct sctp_assoc_value instead [ 304.842721][T11521] tipc: Enabling of bearer rejected, already enabled [ 304.921342][T11521] tipc: Resetting bearer [ 304.998164][T11481] lo speed is unknown, defaulting to 1000 [ 305.349813][T11534] dvmrp1: entered allmulticast mode [ 305.635510][T11526] lo speed is unknown, defaulting to 1000 [ 306.229742][T11569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.274202][T11565] bond10: entered allmulticast mode [ 306.290026][T11526] lo speed is unknown, defaulting to 1000 [ 306.394993][T11578] xt_hashlimit: max too large, truncated to 1048576 [ 306.422375][T11578] xt_hashlimit: overflow, try lower: 18446744073709551608/8 [ 306.718368][T11584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.027105][T11632] __nla_validate_parse: 4 callbacks suppressed [ 308.027130][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1442'. [ 308.056896][T11634] netlink: 'syz.3.1443': attribute type 58 has an invalid length. [ 308.070143][T11634] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1443'. [ 308.116428][T11638] netlink: 'syz.0.1444': attribute type 1 has an invalid length. [ 308.144451][T11640] netlink: 'syz.1.1445': attribute type 4 has an invalid length. [ 308.249444][T11632] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 308.333466][T11653] netlink: 'syz.1.1445': attribute type 4 has an invalid length. [ 308.373823][T11643] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 308.475215][ T8180] lo speed is unknown, defaulting to 1000 [ 308.481281][ T8180] syz0: Port: 1 Link DOWN [ 308.635113][T11662] netlink: 'syz.3.1446': attribute type 1 has an invalid length. [ 308.754050][T11666] netlink: 'syz.3.1446': attribute type 11 has an invalid length. [ 308.762033][T11666] netlink: 'syz.3.1446': attribute type 23 has an invalid length. [ 308.802802][T11666] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1446'. [ 309.445216][ T8180] lo speed is unknown, defaulting to 1000 [ 309.521888][T11677] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1449'. [ 309.541057][T11663] bond7: (slave geneve2): making interface the new active one [ 309.549835][T11663] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 309.569043][ T5956] lo speed is unknown, defaulting to 1000 [ 309.578418][ T5956] syz0: Port: 1 Link ACTIVE [ 309.593239][ T1148] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 309.605019][ T1148] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 309.614176][ T1148] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 309.623353][ T1148] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 309.694644][T11667] lo speed is unknown, defaulting to 1000 [ 309.883140][T11695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1452'. [ 309.907399][T11685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1451'. [ 309.960810][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'. [ 310.120443][T11707] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1458'. [ 310.227063][T11687] lo speed is unknown, defaulting to 1000 [ 310.235927][T11667] lo speed is unknown, defaulting to 1000 [ 310.270836][T11711] netlink: 'syz.1.1460': attribute type 1 has an invalid length. [ 310.333070][T11715] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1460'. [ 310.379393][T11717] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1461'. [ 310.801328][T11735] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.829588][T11735] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 310.850535][T11735] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 310.912112][T11687] lo speed is unknown, defaulting to 1000 [ 310.937907][T11746] x_tables: unsorted entry at hook 3 [ 310.996818][T11735] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.008210][T11735] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 311.019174][T11735] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 311.090457][T11749] vcan0: tx drop: invalid sa for name 0x0000000000010000 [ 311.229560][T11735] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.241030][T11735] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 311.252985][T11735] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 311.389647][T11735] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.400959][T11735] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 311.411524][T11735] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 311.640126][ T1148] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.918588][ T1148] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 311.935561][ T1148] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 312.006884][ T14] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.023728][ T14] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 312.045210][ T14] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 312.087786][ T14] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.107543][ T14] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 312.127135][T11777] smc: removing ib device syz0 [ 312.129391][ T14] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 312.175449][ T14] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.195614][ T14] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 312.210700][ T14] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 313.295599][T11819] netlink: 'syz.0.1488': attribute type 1 has an invalid length. [ 313.315949][T11819] __nla_validate_parse: 4 callbacks suppressed [ 313.315970][T11819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1488'. [ 313.351056][T11812] syzkaller0: entered promiscuous mode [ 313.379383][T11812] syzkaller0: entered allmulticast mode [ 313.415191][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 313.475043][T11820] lo speed is unknown, defaulting to 1000 [ 313.981709][T11833] IPVS: Scheduler module ip_vs_ not found [ 313.998485][T11829] IPVS: length: 24 != 73752 [ 314.100010][T11833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1492'. [ 315.529174][T11833] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1492'. [ 315.653860][T11837] lo speed is unknown, defaulting to 1000 [ 315.810369][T11856] caif0: entered allmulticast mode [ 315.967134][T11860] tipc: Enabled bearer , priority 0 [ 316.014629][T11860] tipc: Resetting bearer [ 316.191221][T11873] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1500'. [ 316.215091][T11872] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1501'. [ 316.247915][T11872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1501'. [ 316.273202][T11872] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 316.285935][T11872] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 316.334645][T11880] netlink: 'syz.1.1503': attribute type 1 has an invalid length. [ 316.345768][T11880] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1503'. [ 316.615285][T11899] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1510'. [ 316.777481][T11912] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1510'. [ 316.870848][T11913] netlink: 'syz.0.1513': attribute type 6 has an invalid length. [ 316.916381][T11913] netlink: 'syz.0.1513': attribute type 11 has an invalid length. [ 317.256573][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.263112][ T1740] block nbd1: Possible stuck request ffff888027150000: control (read@0,1024B). Runtime 30 seconds [ 317.263153][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.281614][ T1740] block nbd1: Possible stuck request ffff888027150200: control (read@1024,1024B). Runtime 30 seconds [ 317.293423][ T1740] block nbd1: Possible stuck request ffff888027150400: control (read@2048,1024B). Runtime 30 seconds [ 317.305389][ T1740] block nbd1: Possible stuck request ffff888027150600: control (read@3072,1024B). Runtime 30 seconds [ 318.158460][T11953] batadv_slave_0: Caught tx_queue_len zero misconfig [ 318.260454][T11967] netlink: 'syz.4.1528': attribute type 1 has an invalid length. [ 318.297589][T11967] bond3: entered promiscuous mode [ 318.310378][T11967] bond3: entered allmulticast mode [ 318.317346][T11967] 8021q: adding VLAN 0 to HW filter on device bond3 [ 318.332466][T11955] __nla_validate_parse: 4 callbacks suppressed [ 318.332489][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1526'. [ 318.360974][T11955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1526'. [ 318.370313][T11965] lo speed is unknown, defaulting to 1000 [ 318.441852][T11971] lo speed is unknown, defaulting to 1000 [ 318.700688][T11978] bond4: entered promiscuous mode [ 318.706190][T11978] bond4: entered allmulticast mode [ 318.712576][T11978] 8021q: adding VLAN 0 to HW filter on device bond4 [ 319.800986][T12010] sctp: [Deprecated]: syz.4.1535 (pid 12010) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.800986][T12010] Use struct sctp_sack_info instead [ 319.896087][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1537'. [ 320.070937][T12017] ip6gretap0: entered promiscuous mode [ 320.087965][T12017] gretap0: entered promiscuous mode [ 320.319608][T12031] netlink: 'syz.0.1540': attribute type 1 has an invalid length. [ 320.365213][T12031] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1540'. [ 320.563796][T12048] netlink: 'syz.0.1545': attribute type 10 has an invalid length. [ 320.600056][T12048] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1545'. [ 320.617629][T12054] IPv6: NLM_F_REPLACE set, but no existing node found! [ 320.654194][T12048] team0: entered promiscuous mode [ 320.667943][T12048] team_slave_0: entered promiscuous mode [ 320.669831][T12054] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1542'. [ 320.683474][T12048] žÿ: entered promiscuous mode [ 320.690992][T12048] team0: entered allmulticast mode [ 320.701977][T12048] team_slave_0: entered allmulticast mode [ 320.709217][T12048] žÿ: entered allmulticast mode [ 320.715814][T12048] bridge0: port 4(team0) entered blocking state [ 320.722642][T12048] bridge0: port 4(team0) entered disabled state [ 320.768266][T12048] bridge0: port 4(team0) entered blocking state [ 320.774965][T12048] bridge0: port 4(team0) entered forwarding state [ 320.955408][T12070] netlink: 'syz.1.1549': attribute type 32 has an invalid length. [ 321.060906][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1550'. [ 321.105910][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'. [ 321.513081][T12088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1553'. [ 321.574555][T12090] xt_socket: unknown flags 0x8 [ 321.617904][T12090] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.684004][T12097] netlink: 'syz.1.1557': attribute type 1 has an invalid length. [ 321.758497][T12097] bond11: entered promiscuous mode [ 321.764358][T12097] 8021q: adding VLAN 0 to HW filter on device bond11 [ 321.842892][T12109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1561'. [ 321.852721][T12109] hsr_slave_0: left promiscuous mode [ 321.861904][T12109] hsr_slave_1: left promiscuous mode [ 321.906881][T12111] 8021q: adding VLAN 0 to HW filter on device bond10 [ 322.182518][T12123] bond11: entered promiscuous mode [ 322.410640][T12134] sctp: [Deprecated]: syz.3.1567 (pid 12134) Use of int in maxseg socket option. [ 322.410640][T12134] Use struct sctp_assoc_value instead [ 322.660918][T12148] openvswitch: netlink: Actions may not be safe on all matching packets [ 322.678303][T12151] tipc: Enabling of bearer rejected, already enabled [ 322.745443][T12154] tipc: Started in network mode [ 322.754791][T12154] tipc: Node identity d, cluster identity 12 [ 322.781497][T12154] tipc: Node number set to 13 [ 322.854443][T12154] netlink: 'syz.3.1575': attribute type 1 has an invalid length. [ 323.004974][T12154] ip6t_rpfilter: unknown options [ 323.517265][T12191] IPVS: Scheduler module ip_vs_sip not found [ 323.717306][T12206] netlink: 'syz.2.1592': attribute type 3 has an invalid length. [ 323.736475][T12206] nbd: nbd2 already in use [ 323.741427][T12206] block nbd2: NBD_DISCONNECT [ 323.746364][T12206] block nbd2: Send disconnect failed -32 [ 323.754341][T12206] block nbd2: shutting down sockets [ 323.783374][T12206] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 323.830855][T12207] gre0: left promiscuous mode [ 323.837984][T12207] erspan0: left promiscuous mode [ 323.863049][T12207] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 323.997693][ T29] audit: type=1107 audit(1774160470.378:7): pid=12209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='°–­ø¶8É‚çùóŠ“጗ë]§×l¬–ª;ØÐ>¨qˆ[´Rû~‡`ûS”r„›iÐqèò¾è¥ä¤N¾³\î ´ÿÖi@Òg¢èœkÓѳ¦ŠŒoPà Ž°”ñ’-å±—pÅ£ÌR>Ô—Ìj!WrÄƽ¨y~UXIq-ØÑåAGጻwË®á×µ9' [ 324.116957][T12212] __nla_validate_parse: 11 callbacks suppressed [ 324.116982][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1594'. [ 324.371483][T12222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1596'. [ 324.392313][T12222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1596'. [ 324.794324][T12247] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 325.061309][ T1148] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.074035][ T1148] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 325.093428][ T1148] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 325.157714][ T1148] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.209523][ T1148] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 325.239637][ T1148] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 325.275315][ T1148] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.290700][ T1148] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 325.304304][ T1148] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 325.313484][ T1148] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.322102][ T1148] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 325.331873][ T1148] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 325.342081][T12267] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 325.361484][T12268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1605'. [ 325.372544][T12268] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 325.620777][T12279] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 326.059632][T12257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 326.081691][T12285] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1612'. [ 326.169577][T12289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1613'. [ 326.283977][T12294] netlink: 'syz.2.1614': attribute type 10 has an invalid length. [ 326.303694][T12294] C: left promiscuous mode [ 326.308648][T12294] team_slave_1: left promiscuous mode [ 326.337982][T12294] team0: Cannot enslave team device to itself [ 326.398832][T12298] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1615'. [ 326.423777][T12298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1615'. [ 326.861486][ T10] block nbd3: Possible stuck request ffff888027260000: control (read@0,1024B). Runtime 30 seconds [ 326.872868][ T10] block nbd3: Possible stuck request ffff888027260200: control (read@1024,1024B). Runtime 30 seconds [ 326.884006][ T10] block nbd3: Possible stuck request ffff888027260400: control (read@2048,1024B). Runtime 30 seconds [ 326.896272][ T10] block nbd3: Possible stuck request ffff888027260600: control (read@3072,1024B). Runtime 30 seconds [ 327.160812][T12336] sctp: [Deprecated]: syz.0.1624 (pid 12336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.160812][T12336] Use struct sctp_sack_info instead [ 327.359814][T12340] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1625'. [ 327.453478][T12343] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.461482][T12343] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.471349][T12343] bridge0: entered allmulticast mode [ 328.234333][T12381] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1630'. [ 328.300914][T12383] openvswitch: netlink: IP tunnel dst address not specified [ 328.456923][T12367] syz0: Port: 1 Link DOWN [ 328.471503][ T75] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.489418][ T75] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.531484][ T75] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.562557][ T75] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.594921][ T75] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.624502][ T75] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.636462][T12395] netlink: 'syz.1.1634': attribute type 10 has an invalid length. [ 328.659836][ T75] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.686479][ T75] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.722555][T12395] team0: Port device geneve0 added [ 328.743747][ T1071] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.887893][T12402] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 328.912572][ T1071] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.921286][ T5949] lo speed is unknown, defaulting to 1000 [ 328.932839][ T5949] syz2: Port: 1 Link ACTIVE [ 328.951892][T12389] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 328.969545][ T1071] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.979800][ T1071] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.573206][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.559480][T12355] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 330.687420][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.703086][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.712593][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.757027][T12422] __nla_validate_parse: 3 callbacks suppressed [ 330.757052][T12422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1639'. [ 330.782108][T12423] sctp: [Deprecated]: syz.3.1641 (pid 12423) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.782108][T12423] Use struct sctp_sack_info instead [ 330.824073][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1642'. [ 330.838982][T12433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1642'. [ 330.845619][T12422] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1639'. [ 330.862800][T12426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1640'. [ 331.041691][T12444] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1646'. [ 331.153861][T12452] netlink: 'syz.2.1648': attribute type 1 has an invalid length. [ 331.165856][T12452] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1648'. [ 331.338787][T12459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.484751][T12464] netlink: 'syz.1.1653': attribute type 1 has an invalid length. [ 331.735835][T12464] gretap2: entered allmulticast mode [ 331.745881][T12464] bond12: (slave gretap2): making interface the new active one [ 331.752648][T12469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.763583][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.802938][T12464] bond12: (slave gretap2): Enslaving as an active interface with an up link [ 331.826791][T12472] gretap2: entered promiscuous mode [ 334.133160][ T14] net_ratelimit: 5 callbacks suppressed [ 334.133182][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.243265][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.342696][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.452808][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.461065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.442612][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.542638][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.642642][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.742767][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.933742][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.942851][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.951261][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.852682][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.213047][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.221365][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.952691][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.062573][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.162561][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.264200][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.319943][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 346.332610][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 346.341269][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 346.349497][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 346.357410][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 346.403933][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 346.414593][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 346.415533][T12476] lo speed is unknown, defaulting to 1000 [ 346.429508][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 346.437818][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 346.445730][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 346.525699][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 346.535495][ T5839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 346.545171][ T5839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 346.554085][ T5839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 346.556641][T12478] lo speed is unknown, defaulting to 1000 [ 346.563561][ T5839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 346.678888][T12480] lo speed is unknown, defaulting to 1000 [ 346.695642][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.704112][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.738901][T12476] chnl_net:caif_netlink_parms(): no params data found [ 346.869292][T12476] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.876748][T12476] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.884360][T12476] bridge_slave_0: entered allmulticast mode [ 346.891721][T12476] bridge_slave_0: entered promiscuous mode [ 346.901809][T12476] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.909379][T12476] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.916968][T12476] bridge_slave_1: entered allmulticast mode [ 346.924350][T12476] bridge_slave_1: entered promiscuous mode [ 347.001219][T12476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.031084][T12476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.095693][T12476] team0: Port device team_slave_0 added [ 347.105259][T12476] team0: Port device team_slave_1 added [ 347.111477][T12478] chnl_net:caif_netlink_parms(): no params data found [ 347.185634][T12476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.192982][T12476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.219812][T12476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.231354][T12480] chnl_net:caif_netlink_parms(): no params data found [ 347.251726][T12476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.259282][T12476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.286611][T12476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.342287][ T1740] block nbd1: Possible stuck request ffff888027150000: control (read@0,1024B). Runtime 60 seconds [ 347.353437][ T1740] block nbd1: Possible stuck request ffff888027150200: control (read@1024,1024B). Runtime 60 seconds [ 347.365119][ T1740] block nbd1: Possible stuck request ffff888027150400: control (read@2048,1024B). Runtime 60 seconds [ 347.376321][ T1740] block nbd1: Possible stuck request ffff888027150600: control (read@3072,1024B). Runtime 60 seconds [ 347.393606][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.514999][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 347.532077][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 347.540892][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 347.550094][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 347.561970][ T5829] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 347.592058][ T5829] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 347.601890][T12476] hsr_slave_0: entered promiscuous mode [ 347.607997][ T5829] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 347.609214][T12476] hsr_slave_1: entered promiscuous mode [ 347.621802][ T5829] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 347.624062][T12476] debugfs: 'hsr0' already exists in 'hsr' [ 347.635900][T12476] Cannot create hsr debugfs directory [ 347.641909][ T5829] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 347.651713][ T5829] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 347.686799][T12478] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.694480][T12478] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.702119][T12478] bridge_slave_0: entered allmulticast mode [ 347.709699][T12478] bridge_slave_0: entered promiscuous mode [ 347.718878][T12478] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.727407][T12478] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.735848][T12478] bridge_slave_1: entered allmulticast mode [ 347.743349][T12478] bridge_slave_1: entered promiscuous mode [ 347.805440][T12478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.818621][T12478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.843733][T12480] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.850956][T12480] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.858648][T12480] bridge_slave_0: entered allmulticast mode [ 347.865989][T12480] bridge_slave_0: entered promiscuous mode [ 347.919855][T12478] team0: Port device team_slave_0 added [ 347.925811][T12480] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.934361][T12480] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.941809][T12480] bridge_slave_1: entered allmulticast mode [ 347.949619][T12480] bridge_slave_1: entered promiscuous mode [ 347.973658][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.974700][T12478] team0: Port device team_slave_1 added [ 347.982076][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.014839][T12499] lo speed is unknown, defaulting to 1000 [ 348.016597][T12478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.028050][T12478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.055354][T12478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.096033][T12478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.103502][T12478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.129914][T12478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.144929][T12480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.170486][T12501] lo speed is unknown, defaulting to 1000 [ 348.187804][T12480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.295448][T12480] team0: Port device team_slave_0 added [ 348.346665][T12480] team0: Port device team_slave_1 added [ 348.386622][T12478] hsr_slave_0: entered promiscuous mode [ 348.393208][T12478] hsr_slave_1: entered promiscuous mode [ 348.399289][T12478] debugfs: 'hsr0' already exists in 'hsr' [ 348.405577][T12478] Cannot create hsr debugfs directory [ 348.463391][ T5834] Bluetooth: hci5: command tx timeout [ 348.481632][T12480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.488718][T12480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.516083][T12480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.532867][ T5834] Bluetooth: hci6: command tx timeout [ 348.552608][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.561256][T12480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.568574][T12480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.595630][T12480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.622791][ T5834] Bluetooth: hci7: command tx timeout [ 348.825039][T12480] hsr_slave_0: entered promiscuous mode [ 348.831580][T12480] hsr_slave_1: entered promiscuous mode [ 348.838245][T12480] debugfs: 'hsr0' already exists in 'hsr' [ 348.844010][T12480] Cannot create hsr debugfs directory [ 348.886248][T12499] chnl_net:caif_netlink_parms(): no params data found [ 349.108381][T12501] chnl_net:caif_netlink_parms(): no params data found [ 349.162145][T12499] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.169844][T12499] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.177915][T12499] bridge_slave_0: entered allmulticast mode [ 349.185665][T12499] bridge_slave_0: entered promiscuous mode [ 349.221795][T12499] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.229606][T12499] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.237670][T12499] bridge_slave_1: entered allmulticast mode [ 349.244975][T12499] bridge_slave_1: entered promiscuous mode [ 349.333837][T12499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.368429][T12499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.434746][T12501] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.442074][T12501] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.450125][T12501] bridge_slave_0: entered allmulticast mode [ 349.457745][T12501] bridge_slave_0: entered promiscuous mode [ 349.477988][T12499] team0: Port device team_slave_0 added [ 349.487326][T12499] team0: Port device team_slave_1 added [ 349.494045][T12501] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.501301][T12501] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.509328][T12501] bridge_slave_1: entered allmulticast mode [ 349.516934][T12501] bridge_slave_1: entered promiscuous mode [ 349.587462][T12501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.598455][T12499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.605620][T12499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.632151][T12499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.652692][ T5834] Bluetooth: hci8: command tx timeout [ 349.661358][T12501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.673436][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.686318][T12499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.693474][T12499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.719893][T12499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.732579][ T5834] Bluetooth: hci9: command tx timeout [ 349.781043][T12501] team0: Port device team_slave_0 added [ 349.814305][T12501] team0: Port device team_slave_1 added [ 349.825744][T12499] hsr_slave_0: entered promiscuous mode [ 349.832147][T12499] hsr_slave_1: entered promiscuous mode [ 349.838729][T12499] debugfs: 'hsr0' already exists in 'hsr' [ 349.845100][T12499] Cannot create hsr debugfs directory [ 349.889944][T12501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.897321][T12501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.923835][T12501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.943408][T12501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.950653][T12501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.977033][T12501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.072531][T12501] hsr_slave_0: entered promiscuous mode [ 350.079142][T12501] hsr_slave_1: entered promiscuous mode [ 350.085716][T12501] debugfs: 'hsr0' already exists in 'hsr' [ 350.091627][T12501] Cannot create hsr debugfs directory [ 350.542660][ T5834] Bluetooth: hci5: command tx timeout [ 350.548409][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.612921][ T5834] Bluetooth: hci6: command tx timeout [ 350.692483][ T5834] Bluetooth: hci7: command tx timeout [ 350.773525][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.732524][ T5834] Bluetooth: hci8: command tx timeout [ 351.812599][ T5834] Bluetooth: hci9: command tx timeout [ 351.873165][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.452998][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.461379][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.612559][ T5834] Bluetooth: hci5: command tx timeout [ 352.692582][ T5834] Bluetooth: hci6: command tx timeout [ 352.772549][ T5834] Bluetooth: hci7: command tx timeout [ 352.982701][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.094765][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.103313][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.362487][ T5194] udevd[5194]: worker [10404] /devices/virtual/block/nbd1 is taking a long time [ 353.812461][ T5834] Bluetooth: hci8: command tx timeout [ 353.892664][ T5834] Bluetooth: hci9: command tx timeout [ 354.092657][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.120771][ T5834] Bluetooth: hci4: link tx timeout [ 354.126015][ T5834] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 354.692543][ T5829] Bluetooth: hci5: command tx timeout [ 354.772515][ T5829] Bluetooth: hci6: command tx timeout [ 354.853582][ T5829] Bluetooth: hci7: command tx timeout [ 355.192586][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.892465][ T5829] Bluetooth: hci8: command tx timeout [ 355.972506][ T5829] Bluetooth: hci9: command tx timeout [ 356.212438][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 356.292826][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.944876][ T10] block nbd3: Possible stuck request ffff888027260000: control (read@0,1024B). Runtime 60 seconds [ 356.956154][ T10] block nbd3: Possible stuck request ffff888027260200: control (read@1024,1024B). Runtime 60 seconds [ 356.967409][ T10] block nbd3: Possible stuck request ffff888027260400: control (read@2048,1024B). Runtime 60 seconds [ 356.979807][ T10] block nbd3: Possible stuck request ffff888027260600: control (read@3072,1024B). Runtime 60 seconds [ 357.433151][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.214411][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.222664][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.231178][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.556576][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.853372][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.861654][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.317719][ T5194] udevd[5194]: worker [7276] /devices/virtual/block/nbd3 is taking a long time [ 359.672518][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.772988][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.872508][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.972619][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.334211][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.342643][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.072639][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.612863][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.621143][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.172788][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.272629][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.372676][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.822832][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.457285][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.472650][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.093228][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.101722][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.572813][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.372940][ T7936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.381259][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.682634][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.912613][ T7934] net_ratelimit: 1 callbacks suppressed [ 372.912630][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.032701][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.853036][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.861408][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.132671][ T7936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.493123][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.501603][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.252618][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.362568][ T7936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.416217][ T1740] block nbd1: Possible stuck request ffff888027150000: control (read@0,1024B). Runtime 90 seconds [ 377.428187][ T1740] block nbd1: Possible stuck request ffff888027150200: control (read@1024,1024B). Runtime 90 seconds [ 377.439664][ T1740] block nbd1: Possible stuck request ffff888027150400: control (read@2048,1024B). Runtime 90 seconds [ 377.451764][ T1740] block nbd1: Possible stuck request ffff888027150600: control (read@3072,1024B). Runtime 90 seconds [ 378.052696][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.462642][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.695471][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.701939][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.582758][ T7936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.613712][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.621854][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.630089][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.638389][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.692728][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.802697][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.933058][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.032679][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.142855][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.252686][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.373409][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.381817][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.390046][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.398457][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.012921][ T10] block nbd3: Possible stuck request ffff888027260000: control (read@0,1024B). Runtime 90 seconds [ 387.023680][ T10] block nbd3: Possible stuck request ffff888027260200: control (read@1024,1024B). Runtime 90 seconds [ 387.034626][ T10] block nbd3: Possible stuck request ffff888027260400: control (read@2048,1024B). Runtime 90 seconds [ 387.045523][ T10] block nbd3: Possible stuck request ffff888027260600: control (read@3072,1024B). Runtime 90 seconds [ 387.352732][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.662827][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.453011][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.552808][ T35] net_ratelimit: 1 callbacks suppressed [ 389.552833][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.662685][ T7936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.762635][ T7936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.133212][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.141469][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.149647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.157841][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.862636][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.973061][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.052958][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.072625][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.172662][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.173917][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.182481][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.253264][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.282629][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.892768][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.901081][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.382670][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.492838][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.602613][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.722826][ T7936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.832786][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.012932][ T7936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.021197][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.029399][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.037710][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.932769][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.032770][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.132923][ T7936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.265200][ T5829] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 406.275422][ T5829] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 406.283954][ T5829] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 406.292084][ T5829] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 406.301905][ T5829] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 406.336905][T12632] lo speed is unknown, defaulting to 1000 [ 406.447582][T12632] chnl_net:caif_netlink_parms(): no params data found [ 406.521847][T12632] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.529215][T12632] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.537131][T12632] bridge_slave_0: entered allmulticast mode [ 406.544636][T12632] bridge_slave_0: entered promiscuous mode [ 406.552911][T12632] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.560144][T12632] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.567931][T12632] bridge_slave_1: entered allmulticast mode [ 406.575336][T12632] bridge_slave_1: entered promiscuous mode [ 406.604864][T12632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.617194][T12632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.646805][T12632] team0: Port device team_slave_0 added [ 406.655428][T12632] team0: Port device team_slave_1 added [ 406.680180][T12632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.687514][T12632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.714122][T12632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.726261][T12632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.733409][T12632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.759402][T12632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.801581][T12632] hsr_slave_0: entered promiscuous mode [ 406.808221][T12632] hsr_slave_1: entered promiscuous mode [ 406.814551][T12632] debugfs: 'hsr0' already exists in 'hsr' [ 406.820438][T12632] Cannot create hsr debugfs directory [ 406.862854][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.254438][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.341919][ T5829] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 407.352618][ T5829] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 407.364264][ T51] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 407.373254][ T51] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 407.373683][ T5829] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 407.383963][ T51] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 407.394733][ T5829] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 407.395932][ T5829] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 407.410350][ T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 407.418812][ T51] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 407.488418][T12644] lo speed is unknown, defaulting to 1000 [ 407.496083][ T1740] block nbd1: Possible stuck request ffff888027150000: control (read@0,1024B). Runtime 120 seconds [ 407.505943][T12642] lo speed is unknown, defaulting to 1000 [ 407.507065][ T1740] block nbd1: Possible stuck request ffff888027150200: control (read@1024,1024B). Runtime 120 seconds [ 407.523804][ T1740] block nbd1: Possible stuck request ffff888027150400: control (read@2048,1024B). Runtime 120 seconds [ 407.534974][ T1740] block nbd1: Possible stuck request ffff888027150600: control (read@3072,1024B). Runtime 120 seconds [ 407.740483][T12644] chnl_net:caif_netlink_parms(): no params data found [ 407.806646][T12642] chnl_net:caif_netlink_parms(): no params data found [ 407.887238][T12644] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.895132][T12644] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.903210][T12644] bridge_slave_0: entered allmulticast mode [ 407.910332][T12644] bridge_slave_0: entered promiscuous mode [ 407.924847][T12644] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.932534][T12644] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.939892][T12644] bridge_slave_1: entered allmulticast mode [ 407.947635][T12644] bridge_slave_1: entered promiscuous mode [ 408.008342][T12644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.019268][T12642] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.026864][T12642] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.034531][T12642] bridge_slave_0: entered allmulticast mode [ 408.041759][T12642] bridge_slave_0: entered promiscuous mode [ 408.054346][T12644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.064117][T12642] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.071532][T12642] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.078969][T12642] bridge_slave_1: entered allmulticast mode [ 408.086675][T12642] bridge_slave_1: entered promiscuous mode [ 408.133026][ T7936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.141609][ T7936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.145252][T12642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.149985][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.164355][T12642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.167203][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.193938][T12644] team0: Port device team_slave_0 added [ 408.213760][T12644] team0: Port device team_slave_1 added [ 408.221376][T12642] team0: Port device team_slave_0 added [ 408.244456][T12642] team0: Port device team_slave_1 added [ 408.271592][T12644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.278685][T12644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.306329][T12644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.373820][ T5829] Bluetooth: hci10: command tx timeout [ 408.392904][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.396043][T12644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.422359][T12644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.472887][T12644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.488019][ T5839] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 408.499455][T12642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.508300][T12642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.508658][ T5839] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 408.545644][T12642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.545788][ T5839] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 408.567922][ T5839] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 408.577604][ T5839] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 408.608031][T12642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.613217][ T5829] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 408.616868][T12642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.634019][ T5829] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 408.649743][T12642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.669917][ T5829] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 408.679564][ T5829] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 408.689256][ T5829] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 408.771007][T12644] hsr_slave_0: entered promiscuous mode [ 408.778655][T12644] hsr_slave_1: entered promiscuous mode [ 408.785910][T12644] debugfs: 'hsr0' already exists in 'hsr' [ 408.791885][T12644] Cannot create hsr debugfs directory [ 408.797875][T12660] lo speed is unknown, defaulting to 1000 [ 408.819533][T12642] hsr_slave_0: entered promiscuous mode [ 408.826283][T12642] hsr_slave_1: entered promiscuous mode [ 408.832708][T12642] debugfs: 'hsr0' already exists in 'hsr' [ 408.838441][T12642] Cannot create hsr debugfs directory [ 408.934517][T12662] lo speed is unknown, defaulting to 1000 [ 409.328918][T12660] chnl_net:caif_netlink_parms(): no params data found [ 409.402041][T12662] chnl_net:caif_netlink_parms(): no params data found [ 409.492728][ T5839] Bluetooth: hci11: command tx timeout [ 409.503319][ T5829] Bluetooth: hci12: command tx timeout [ 409.522696][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.565597][T12660] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.574440][T12660] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.581696][T12660] bridge_slave_0: entered allmulticast mode [ 409.589293][T12660] bridge_slave_0: entered promiscuous mode [ 409.597890][T12660] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.605291][T12660] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.612883][T12660] bridge_slave_1: entered allmulticast mode [ 409.620164][T12660] bridge_slave_1: entered promiscuous mode [ 409.628966][T12662] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.636494][T12662] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.644350][T12662] bridge_slave_0: entered allmulticast mode [ 409.651639][T12662] bridge_slave_0: entered promiscuous mode [ 409.678793][T12662] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.686370][T12662] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.694017][T12662] bridge_slave_1: entered allmulticast mode [ 409.701317][T12662] bridge_slave_1: entered promiscuous mode [ 409.745607][T12660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.768801][T12660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.793734][T12662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.824091][T12662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.835708][T12660] team0: Port device team_slave_0 added [ 409.857913][T12660] team0: Port device team_slave_1 added [ 409.902876][T12662] team0: Port device team_slave_0 added [ 409.912766][T12662] team0: Port device team_slave_1 added [ 409.922448][T12660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.929422][T12660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.958413][T12660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.000944][T12660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.010992][T12660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.038066][T12660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.050086][T12662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.057981][T12662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.084765][T12662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.098096][T12662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.105532][T12662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.131968][T12662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.217225][T12660] hsr_slave_0: entered promiscuous mode [ 410.223933][T12660] hsr_slave_1: entered promiscuous mode [ 410.230247][T12660] debugfs: 'hsr0' already exists in 'hsr' [ 410.236412][T12660] Cannot create hsr debugfs directory [ 410.293225][T12662] hsr_slave_0: entered promiscuous mode [ 410.299730][T12662] hsr_slave_1: entered promiscuous mode [ 410.307389][T12662] debugfs: 'hsr0' already exists in 'hsr' [ 410.313240][T12662] Cannot create hsr debugfs directory [ 410.452967][ T5829] Bluetooth: hci10: command tx timeout [ 410.612939][ T5829] Bluetooth: hci13: command tx timeout [ 410.643812][ T7936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.772494][ T5829] Bluetooth: hci14: command tx timeout [ 411.572481][ T5839] Bluetooth: hci11: command tx timeout [ 411.578327][ T5829] Bluetooth: hci12: command tx timeout [ 411.753141][ T7936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.532424][ T5829] Bluetooth: hci10: command tx timeout [ 412.692586][ T5829] Bluetooth: hci13: command tx timeout [ 412.852494][ T5829] Bluetooth: hci14: command tx timeout [ 412.858520][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.652501][ T5829] Bluetooth: hci12: command tx timeout [ 413.652511][ T5839] Bluetooth: hci11: command tx timeout [ 413.892965][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.901337][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.910579][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.919052][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.962735][ T7936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.612432][ T5829] Bluetooth: hci10: command tx timeout [ 414.772416][ T5829] Bluetooth: hci13: command tx timeout [ 414.932675][ T5829] Bluetooth: hci14: command tx timeout [ 415.072576][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.732618][ T5839] Bluetooth: hci11: command tx timeout [ 415.738186][ T5829] Bluetooth: hci12: command tx timeout [ 416.182751][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.452878][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.852615][ T5829] Bluetooth: hci13: command tx timeout [ 417.012547][ T5829] Bluetooth: hci14: command tx timeout [ 417.092685][ T10] block nbd3: Possible stuck request ffff888027260000: control (read@0,1024B). Runtime 120 seconds [ 417.103620][ T10] block nbd3: Possible stuck request ffff888027260200: control (read@1024,1024B). Runtime 120 seconds [ 417.114642][ T10] block nbd3: Possible stuck request ffff888027260400: control (read@2048,1024B). Runtime 120 seconds [ 417.125772][ T10] block nbd3: Possible stuck request ffff888027260600: control (read@3072,1024B). Runtime 120 seconds [ 417.282588][ T7936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.382747][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.482575][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.653449][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.661905][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.670142][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.678275][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.582785][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.682745][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.792693][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.892928][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.003058][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.413098][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.421253][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.429528][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.437654][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.052639][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.122683][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.232588][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.332645][ T7936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.442733][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.542777][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.172985][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.181231][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.189614][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.197769][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.643091][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.753273][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.863060][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.962977][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.652756][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.063105][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.292902][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.301168][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.933339][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.941858][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.172963][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.573546][ T1740] block nbd1: Possible stuck request ffff888027150000: control (read@0,1024B). Runtime 150 seconds [ 437.584409][ T1740] block nbd1: Possible stuck request ffff888027150200: control (read@1024,1024B). Runtime 150 seconds [ 437.595474][ T1740] block nbd1: Possible stuck request ffff888027150400: control (read@2048,1024B). Runtime 150 seconds [ 437.606951][ T1740] block nbd1: Possible stuck request ffff888027150600: control (read@3072,1024B). Runtime 150 seconds [ 438.283082][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.392935][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.135574][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.141985][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.492959][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.592908][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.693280][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.701687][ T7936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.709985][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.333447][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.341885][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.822670][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.922543][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.253920][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.022838][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.122783][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.182268][ T10] block nbd3: Possible stuck request ffff888027260000: control (read@0,1024B). Runtime 150 seconds [ 447.193149][ T10] block nbd3: Possible stuck request ffff888027260200: control (read@1024,1024B). Runtime 150 seconds [ 447.204300][ T10] block nbd3: Possible stuck request ffff888027260400: control (read@2048,1024B). Runtime 150 seconds [ 447.215487][ T10] block nbd3: Possible stuck request ffff888027260600: control (read@3072,1024B). Runtime 150 seconds [ 448.222707][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.453279][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.461660][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.093375][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.101686][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.322601][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.422807][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.522873][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.622875][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.722955][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.832857][ T7936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.862956][ T7936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.871290][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.879815][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.932900][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.042955][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.143025][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.252925][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.974067][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.982557][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.352563][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.452583][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.533616][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.541985][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.552521][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.652930][ T7936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.453272][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.762863][ T7936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.013096][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.021588][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.862814][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.833061][ T5839] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 466.841943][ T5839] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 466.851663][ T5839] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 466.863780][ T5839] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 466.871725][ T5839] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 466.907448][T12684] lo speed is unknown, defaulting to 1000 [ 466.963267][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.029780][T12684] chnl_net:caif_netlink_parms(): no params data found [ 467.103969][T12684] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.111284][T12684] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.119049][T12684] bridge_slave_0: entered allmulticast mode [ 467.126536][T12684] bridge_slave_0: entered promiscuous mode [ 467.135166][T12684] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.142687][T12684] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.150198][T12684] bridge_slave_1: entered allmulticast mode [ 467.158102][T12684] bridge_slave_1: entered promiscuous mode [ 467.189787][T12684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.202716][T12684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.234587][T12684] team0: Port device team_slave_0 added [ 467.243077][T12684] team0: Port device team_slave_1 added [ 467.271848][T12684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.278867][T12684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.305971][T12684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.319035][T12684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.326613][T12684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.353926][T12684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.396693][T12684] hsr_slave_0: entered promiscuous mode [ 467.403480][T12684] hsr_slave_1: entered promiscuous mode [ 467.410018][T12684] debugfs: 'hsr0' already exists in 'hsr' [ 467.416661][T12684] Cannot create hsr debugfs directory [ 467.654345][ T1740] block nbd1: Possible stuck request ffff888027150000: control (read@0,1024B). Runtime 180 seconds [ 467.665208][ T1740] block nbd1: Possible stuck request ffff888027150200: control (read@1024,1024B). Runtime 180 seconds [ 467.678488][ T1740] block nbd1: Possible stuck request ffff888027150400: control (read@2048,1024B). Runtime 180 seconds [ 467.690309][ T1740] block nbd1: Possible stuck request ffff888027150600: control (read@3072,1024B). Runtime 180 seconds [ 467.934669][ T5839] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 467.945851][ T5839] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 467.954591][ T5839] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 467.964429][ T5839] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 467.983720][ T5839] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 468.013716][ T5829] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 468.025138][ T5829] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 468.035364][ T5829] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 468.040706][T12694] lo speed is unknown, defaulting to 1000 [ 468.051000][ T5829] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 468.062534][ T5829] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 468.083140][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.157769][T12696] lo speed is unknown, defaulting to 1000 [ 468.284876][T12694] chnl_net:caif_netlink_parms(): no params data found [ 468.293417][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.301698][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.424263][T12694] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.431597][T12694] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.439516][T12694] bridge_slave_0: entered allmulticast mode [ 468.446884][T12694] bridge_slave_0: entered promiscuous mode [ 468.461646][T12694] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.469245][T12694] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.477104][T12694] bridge_slave_1: entered allmulticast mode [ 468.485506][T12694] bridge_slave_1: entered promiscuous mode [ 468.528012][T12694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.538807][T12696] chnl_net:caif_netlink_parms(): no params data found [ 468.553114][T12694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.598848][T12694] team0: Port device team_slave_0 added [ 468.619025][T12694] team0: Port device team_slave_1 added [ 468.657761][T12694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.665089][T12694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.691593][T12694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.711080][T12694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.718183][T12694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.744752][T12694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.808752][T12696] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.826434][T12696] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.843088][T12696] bridge_slave_0: entered allmulticast mode [ 468.862584][T12696] bridge_slave_0: entered promiscuous mode [ 468.909399][T12696] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.922936][T12696] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.930604][T12696] bridge_slave_1: entered allmulticast mode [ 468.952717][ T5829] Bluetooth: hci15: command tx timeout [ 468.966052][T12696] bridge_slave_1: entered promiscuous mode [ 468.976207][ T5839] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 468.986262][ T5839] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 468.994949][ T5839] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 469.003497][ T5839] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 469.011529][ T5839] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 469.017968][T12694] hsr_slave_0: entered promiscuous mode [ 469.044682][T12694] hsr_slave_1: entered promiscuous mode [ 469.051387][T12694] debugfs: 'hsr0' already exists in 'hsr' [ 469.062115][T12694] Cannot create hsr debugfs directory [ 469.063420][ T5839] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 469.080104][ T5839] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 469.091538][ T5839] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 469.099136][T12696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.110514][ T5839] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 469.119252][ T5839] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 469.157277][T12696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.183737][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.203859][T12696] team0: Port device team_slave_0 added [ 469.223427][T12696] team0: Port device team_slave_1 added [ 469.312724][T12696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.319708][T12696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.349566][T12696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.360697][T12712] lo speed is unknown, defaulting to 1000 [ 469.362560][T12696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.374037][T12696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.400259][T12696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.425077][T12714] lo speed is unknown, defaulting to 1000 [ 469.520536][T12696] hsr_slave_0: entered promiscuous mode [ 469.527743][T12696] hsr_slave_1: entered promiscuous mode [ 469.534565][T12696] debugfs: 'hsr0' already exists in 'hsr' [ 469.540301][T12696] Cannot create hsr debugfs directory [ 469.918895][T12712] chnl_net:caif_netlink_parms(): no params data found [ 469.995192][T12714] chnl_net:caif_netlink_parms(): no params data found [ 470.052481][ T5839] Bluetooth: hci16: command tx timeout [ 470.132480][ T5839] Bluetooth: hci17: command tx timeout [ 470.162512][T12712] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.169646][T12712] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.177679][T12712] bridge_slave_0: entered allmulticast mode [ 470.185036][T12712] bridge_slave_0: entered promiscuous mode [ 470.195137][T12712] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.202717][T12712] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.210009][T12712] bridge_slave_1: entered allmulticast mode [ 470.218977][T12712] bridge_slave_1: entered promiscuous mode [ 470.257518][T12714] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.264976][T12714] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.272405][T12714] bridge_slave_0: entered allmulticast mode [ 470.279932][T12714] bridge_slave_0: entered promiscuous mode [ 470.291923][T12714] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.300722][T12714] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.308499][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.308797][T12714] bridge_slave_1: entered allmulticast mode [ 470.325158][T12714] bridge_slave_1: entered promiscuous mode [ 470.350265][T12712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.386689][T12712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.432356][T12714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.459500][T12714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.477685][T12712] team0: Port device team_slave_0 added [ 470.496808][T12712] team0: Port device team_slave_1 added [ 470.530020][T12714] team0: Port device team_slave_0 added [ 470.538719][T12714] team0: Port device team_slave_1 added [ 470.575981][T12712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.584250][T12712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.610581][T12712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.640212][T12712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.647575][T12712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.675033][T12712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.687208][T12714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.695277][T12714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.721861][T12714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.734775][T12714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.741758][T12714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.768514][T12714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.843505][T12712] hsr_slave_0: entered promiscuous mode [ 470.850321][T12712] hsr_slave_1: entered promiscuous mode [ 470.861697][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.862642][T12712] debugfs: 'hsr0' already exists in 'hsr' [ 470.870392][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.876492][T12712] Cannot create hsr debugfs directory [ 470.919037][T12714] hsr_slave_0: entered promiscuous mode [ 470.925794][T12714] hsr_slave_1: entered promiscuous mode [ 470.933144][T12714] debugfs: 'hsr0' already exists in 'hsr' [ 470.939128][T12714] Cannot create hsr debugfs directory [ 471.012879][ T5841] Bluetooth: hci15: command tx timeout [ 471.093631][ T5841] Bluetooth: hci18: command tx timeout [ 471.172609][ T5841] Bluetooth: hci19: command tx timeout [ 471.432602][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.132533][ T5841] Bluetooth: hci16: command tx timeout [ 472.212356][ T5841] Bluetooth: hci17: command tx timeout [ 472.532850][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.935729][ T5825] Bluetooth: hci8: command 0x0406 tx timeout [ 472.941975][ T5825] Bluetooth: hci6: command 0x0406 tx timeout [ 472.948190][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 472.953010][T12728] Bluetooth: hci7: command 0x0406 tx timeout [ 472.956075][ T5825] Bluetooth: hci9: command 0x0406 tx timeout [ 473.092561][ T5829] Bluetooth: hci15: command tx timeout [ 473.172615][ T5829] Bluetooth: hci18: command tx timeout [ 473.262486][ T5829] Bluetooth: hci19: command tx timeout [ 473.422894][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.431249][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.652947][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.052826][ T5956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.212576][ T5829] Bluetooth: hci16: command tx timeout [ 474.302476][ T5829] Bluetooth: hci17: command tx timeout [ 474.762808][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.172545][ T5829] Bluetooth: hci15: command tx timeout [ 475.252460][ T5829] Bluetooth: hci18: command tx timeout [ 475.332579][ T5829] Bluetooth: hci19: command tx timeout [ 475.862831][ T7934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.991561][ T5194] udevd[5194]: worker [10404] /devices/virtual/block/nbd1 timeout; kill it [ 476.000435][ T5194] udevd[5194]: seq 18022 '/devices/virtual/block/nbd1' killed [ 476.292409][ T5829] Bluetooth: hci16: command tx timeout [ 476.372507][ T5829] Bluetooth: hci17: command tx timeout [ 476.613175][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.621579][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.972838][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.262264][ T10] block nbd3: Possible stuck request ffff888027260000: control (read@0,1024B). Runtime 180 seconds [ 477.273307][ T10] block nbd3: Possible stuck request ffff888027260200: control (read@1024,1024B). Runtime 180 seconds [ 477.284329][ T10] block nbd3: Possible stuck request ffff888027260400: control (read@2048,1024B). Runtime 180 seconds [ 477.295672][ T10] block nbd3: Possible stuck request ffff888027260600: control (read@3072,1024B). Runtime 180 seconds [ 477.332456][ T5829] Bluetooth: hci18: command tx timeout [ 477.413918][ T5829] Bluetooth: hci19: command tx timeout [ 478.082756][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.452857][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.461221][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.012263][ T5194] udevd[5194]: worker [7276] /devices/virtual/block/nbd3 timeout; kill it [ 479.021051][ T5194] udevd[5194]: seq 18496 '/devices/virtual/block/nbd3' killed [ 479.192527][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.293214][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.412944][ T7932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.373400][ T7932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.382350][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.512782][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.612688][ T7932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.655024][ T5949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.293308][ T7932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.301685][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.712642][ T7932] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.822704][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.922674][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.032482][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.132814][ T1071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.141128][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.772842][ T30] INFO: task syz.3.1641:12421 blocked for more than 143 seconds. [ 488.780601][ T30] Not tainted syzkaller #0 [ 488.787357][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 488.796436][ T30] task:syz.3.1641 state:D stack:26240 pid:12421 tgid:12420 ppid:5827 task_flags:0x480140 flags:0x00080002 [ 488.808751][ T30] Call Trace: [ 488.812076][ T30] [ 488.815259][ T30] __schedule+0x15dd/0x52d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 488.819903][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 488.825915][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 488.830982][ T30] ? __pfx___schedule+0x10/0x10 [ 488.837494][ T30] ? schedule+0x90/0x360 [ 488.841790][ T30] schedule+0x164/0x360 [ 488.846539][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 488.858349][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 488.882464][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 488.888698][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 488.910789][ T30] nbd_set_size+0x454/0x680 [ 488.916118][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 488.921212][ T30] ? nla_memcpy+0x5b/0xc0 [ 488.930651][ T30] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 488.938599][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 488.944907][ T30] ? rcu_is_watching+0x15/0xb0 [ 488.949697][ T30] ? trace_kmalloc+0x2a/0x110 [ 488.954516][ T30] ? __nla_parse+0x40/0x60 [ 488.959275][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 488.965706][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 488.972087][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 488.977710][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 488.984117][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 488.989077][ T30] genl_rcv_msg+0x61c/0x7a0 [ 488.993633][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.998766][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 489.004598][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 489.009570][ T30] netlink_rcv_skb+0x232/0x4b0 [ 489.014941][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 489.020041][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 489.025488][ T30] ? down_read+0x272/0x2e0 [ 489.030024][ T30] ? genl_rcv+0xd/0x40 [ 489.034194][ T30] genl_rcv+0x28/0x40 [ 489.038287][ T30] netlink_unicast+0x80f/0x9b0 [ 489.043231][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 489.048585][ T30] ? netlink_sendmsg+0x650/0xb40 [ 489.053919][ T30] ? skb_put+0x11b/0x210 [ 489.058214][ T30] netlink_sendmsg+0x813/0xb40 [ 489.063100][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.068409][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 489.073578][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 489.078906][ T30] ____sys_sendmsg+0x972/0x9f0 [ 489.083844][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 489.089174][ T30] ? import_iovec+0x73/0xa0 [ 489.094710][ T30] ___sys_sendmsg+0x2a5/0x360 [ 489.099449][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 489.104904][ T30] ? futex_wake+0x4ac/0x580 [ 489.109612][ T30] ? __fget_files+0x2a/0x420 [ 489.114776][ T30] ? __fget_files+0x3a0/0x420 [ 489.119655][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 489.124892][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 489.130562][ T30] ? rcu_is_watching+0x15/0xb0 [ 489.135646][ T30] do_syscall_64+0x14d/0xf80 [ 489.135867][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.140277][ T30] ? trace_irq_disable+0x3b/0x150 [ 489.153720][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.159988][ T30] ? clear_bhb_loop+0x40/0x90 [ 489.165038][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.170972][ T30] RIP: 0033:0x7f1ad1f9c799 [ 489.175650][ T30] RSP: 002b:00007f1ad2db2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.184551][ T30] RAX: ffffffffffffffda RBX: 00007f1ad2215fa0 RCX: 00007f1ad1f9c799 [ 489.192839][ T30] RDX: 0000000000008000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 489.201222][ T30] RBP: 00007f1ad2032c99 R08: 0000000000000000 R09: 0000000000000000 [ 489.209740][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.217854][ T30] R13: 00007f1ad2216038 R14: 00007f1ad2215fa0 R15: 00007ffdb95281a8 [ 489.226261][ T30] [ 489.229389][ T30] INFO: task syz.2.1648:12448 blocked for more than 143 seconds. [ 489.238148][ T30] Not tainted syzkaller #0 [ 489.243319][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 489.252090][ T30] task:syz.2.1648 state:D stack:28824 pid:12448 tgid:12446 ppid:5828 task_flags:0x400040 flags:0x00080002 [ 489.264494][ T30] Call Trace: [ 489.267776][ T30] [ 489.270791][ T30] __schedule+0x15dd/0x52d0 [ 489.275420][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 489.280478][ T30] ? __pfx___schedule+0x10/0x10 [ 489.285514][ T30] ? schedule+0x90/0x360 [ 489.289783][ T30] schedule+0x164/0x360 [ 489.294205][ T30] schedule_preempt_disabled+0x13/0x30 [ 489.299697][ T30] __mutex_lock+0x7fe/0x1300 [ 489.304404][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 489.310258][ T30] ? __mutex_lock+0x5ac/0x1300 [ 489.315119][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 489.320010][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 489.325424][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 489.330383][ T30] ? radix_tree_lookup+0x240/0x290 [ 489.335843][ T30] genl_rcv_msg+0x10b/0x7a0 [ 489.340358][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 489.345752][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 489.350721][ T30] netlink_rcv_skb+0x232/0x4b0 [ 489.355794][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 489.361127][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 489.366731][ T30] ? down_read+0x272/0x2e0 [ 489.371180][ T30] ? genl_rcv+0xd/0x40 [ 489.375549][ T30] genl_rcv+0x28/0x40 [ 489.379666][ T30] netlink_unicast+0x80f/0x9b0 [ 489.384886][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 489.390371][ T30] ? netlink_sendmsg+0x650/0xb40 [ 489.395578][ T30] ? skb_put+0x11b/0x210 [ 489.399857][ T30] netlink_sendmsg+0x813/0xb40 [ 489.404803][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.410218][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 489.415880][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 489.421286][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.426750][ T30] __sys_sendto+0x672/0x710 [ 489.431377][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 489.436706][ T30] ? exc_page_fault+0x6a/0xc0 [ 489.441440][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 489.447151][ T30] __x64_sys_sendto+0xde/0x100 [ 489.451955][ T30] do_syscall_64+0x14d/0xf80 [ 489.456752][ T30] ? trace_irq_disable+0x3b/0x150 [ 489.461989][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.468202][ T30] ? clear_bhb_loop+0x40/0x90 [ 489.472955][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.478849][ T30] RIP: 0033:0x7fd92135cfce [ 489.483400][ T30] RSP: 002b:00007fd9221c1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 489.491833][ T30] RAX: ffffffffffffffda RBX: 00007fd9221c36c0 RCX: 00007fd92135cfce [ 489.500152][ T30] RDX: 0000000000000020 RSI: 00007fd9221c2000 RDI: 0000000000000003 [ 489.508426][ T30] RBP: 0000000000000000 R08: 00007fd9221c1f04 R09: 000000000000000c [ 489.517048][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 489.525453][ T30] R13: 00007fd9221c1f58 R14: 00007fd9221c2000 R15: 0000000000000000 [ 489.533512][ T30] [ 489.536547][ T30] INFO: task syz.4.1649:12450 blocked for more than 144 seconds. [ 489.544428][ T30] Not tainted syzkaller #0 [ 489.549385][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 489.558324][ T30] task:syz.4.1649 state:D stack:28736 pid:12450 tgid:12449 ppid:5835 task_flags:0x400040 flags:0x00080002 [ 489.570705][ T30] Call Trace: [ 489.574437][ T30] [ 489.577398][ T30] __schedule+0x15dd/0x52d0 [ 489.581920][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 489.587027][ T30] ? __pfx___schedule+0x10/0x10 [ 489.591941][ T30] ? schedule+0x90/0x360 [ 489.596319][ T30] schedule+0x164/0x360 [ 489.600521][ T30] schedule_preempt_disabled+0x13/0x30 [ 489.606270][ T30] __mutex_lock+0x7fe/0x1300 [ 489.610996][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 489.616451][ T30] ? __mutex_lock+0x5ac/0x1300 [ 489.621443][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 489.626270][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 489.631390][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 489.636559][ T30] ? radix_tree_lookup+0x240/0x290 [ 489.641811][ T30] genl_rcv_msg+0x10b/0x7a0 [ 489.646675][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 489.651855][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 489.657326][ T30] netlink_rcv_skb+0x232/0x4b0 [ 489.662513][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 489.667608][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 489.673108][ T30] ? down_read+0x272/0x2e0 [ 489.677720][ T30] ? genl_rcv+0xd/0x40 [ 489.681883][ T30] genl_rcv+0x28/0x40 [ 489.686353][ T30] netlink_unicast+0x80f/0x9b0 [ 489.691203][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 489.696601][ T30] ? netlink_sendmsg+0x650/0xb40 [ 489.701619][ T30] ? skb_put+0x11b/0x210 [ 489.706066][ T30] netlink_sendmsg+0x813/0xb40 [ 489.710865][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.716457][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 489.721709][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 489.727256][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.732789][ T30] __sys_sendto+0x672/0x710 [ 489.737296][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 489.742452][ T30] ? exc_page_fault+0x6a/0xc0 [ 489.747413][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 489.752790][ T30] __x64_sys_sendto+0xde/0x100 [ 489.757682][ T30] do_syscall_64+0x14d/0xf80 [ 489.762376][ T30] ? trace_irq_disable+0x3b/0x150 [ 489.767435][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.773774][ T30] ? clear_bhb_loop+0x40/0x90 [ 489.778469][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.784433][ T30] RIP: 0033:0x7fb5ac55cfce [ 489.788863][ T30] RSP: 002b:00007fb5ad507e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 489.797634][ T30] RAX: ffffffffffffffda RBX: 00007fb5ad5096c0 RCX: 00007fb5ac55cfce [ 489.805690][ T30] RDX: 0000000000000020 RSI: 00007fb5ad508000 RDI: 0000000000000003 [ 489.813889][ T30] RBP: 0000000000000000 R08: 00007fb5ad507f04 R09: 000000000000000c [ 489.821881][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 489.830423][ T30] R13: 00007fb5ad507f58 R14: 00007fb5ad508000 R15: 0000000000000000 [ 489.838675][ T30] [ 489.841727][ T30] INFO: task syz.4.1649:12455 blocked for more than 144 seconds. [ 489.856183][ T30] Not tainted syzkaller #0 [ 489.861229][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 489.870378][ T30] task:syz.4.1649 state:D stack:27608 pid:12455 tgid:12449 ppid:5835 task_flags:0x400040 flags:0x00080002 [ 489.882554][ T30] Call Trace: [ 489.885833][ T30] [ 489.888759][ T30] __schedule+0x15dd/0x52d0 [ 489.893573][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 489.898810][ T30] ? __pfx___schedule+0x10/0x10 [ 489.903915][ T30] ? schedule+0x90/0x360 [ 489.908199][ T30] schedule+0x164/0x360 [ 489.912486][ T30] schedule_preempt_disabled+0x13/0x30 [ 489.918083][ T30] __mutex_lock+0x7fe/0x1300 [ 489.922756][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 489.928142][ T30] ? __mutex_lock+0x5ac/0x1300 [ 489.933076][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 489.937785][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 489.943174][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 489.948147][ T30] ? radix_tree_lookup+0x240/0x290 [ 489.953347][ T30] genl_rcv_msg+0x10b/0x7a0 [ 489.957877][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 489.963058][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 489.968049][ T30] netlink_rcv_skb+0x232/0x4b0 [ 489.973335][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 489.978391][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 489.983838][ T30] ? down_read+0x272/0x2e0 [ 489.988366][ T30] ? genl_rcv+0xd/0x40 [ 489.992712][ T30] genl_rcv+0x28/0x40 [ 489.996704][ T30] netlink_unicast+0x80f/0x9b0 [ 490.001652][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 490.007226][ T30] ? netlink_sendmsg+0x650/0xb40 [ 490.012240][ T30] ? skb_put+0x11b/0x210 [ 490.016617][ T30] netlink_sendmsg+0x813/0xb40 [ 490.021395][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.027016][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 490.031994][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 490.037542][ T30] ____sys_sendmsg+0x972/0x9f0 [ 490.042451][ T30] ? futex_unqueue+0x211/0x240 [ 490.047253][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.053035][ T30] ? import_iovec+0x73/0xa0 [ 490.053048][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.057647][ T30] ___sys_sendmsg+0x2a5/0x360 [ 490.066481][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.070710][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.084259][ T30] ? futex_wait+0x29a/0x380 [ 490.088910][ T30] ? __fget_files+0x2a/0x420 [ 490.093599][ T30] ? __fget_files+0x3a0/0x420 [ 490.098319][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 490.103613][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.109081][ T30] ? rcu_is_watching+0x15/0xb0 [ 490.114205][ T30] do_syscall_64+0x14d/0xf80 [ 490.118833][ T30] ? trace_irq_disable+0x3b/0x150 [ 490.123980][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.130219][ T30] ? clear_bhb_loop+0x40/0x90 [ 490.135127][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.141124][ T30] RIP: 0033:0x7fb5ac59c799 [ 490.145733][ T30] RSP: 002b:00007fb5ad4e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.154437][ T30] RAX: ffffffffffffffda RBX: 00007fb5ac816090 RCX: 00007fb5ac59c799 [ 490.162674][ T30] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 490.170670][ T30] RBP: 00007fb5ac632c99 R08: 0000000000000000 R09: 0000000000000000 [ 490.179083][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.187370][ T30] R13: 00007fb5ac816128 R14: 00007fb5ac816090 R15: 00007ffe0b93fda8 [ 490.195521][ T30] [ 490.198669][ T30] INFO: task syz.0.1652:12467 blocked for more than 144 seconds. [ 490.206602][ T30] Not tainted syzkaller #0 [ 490.211549][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 490.220489][ T30] task:syz.0.1652 state:D stack:27880 pid:12467 tgid:12460 ppid:5823 task_flags:0x400040 flags:0x00080002 [ 490.232845][ T30] Call Trace: [ 490.236150][ T30] [ 490.239100][ T30] __schedule+0x15dd/0x52d0 [ 490.243961][ T30] ? __pfx___schedule+0x10/0x10 [ 490.248862][ T30] ? schedule+0x90/0x360 [ 490.253209][ T30] schedule+0x164/0x360 [ 490.257388][ T30] schedule_preempt_disabled+0x13/0x30 [ 490.262944][ T30] __mutex_lock+0x7fe/0x1300 [ 490.267564][ T30] ? __mutex_lock+0x5ac/0x1300 [ 490.272508][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 490.277348][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 490.282584][ T30] ? __dev_queue_xmit+0x28b/0x3870 [ 490.282798][ T75] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.287826][ T30] ? radix_tree_lookup+0x240/0x290 [ 490.301372][ T30] genl_rcv_msg+0x10b/0x7a0 [ 490.306088][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.311139][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 490.316255][ T30] netlink_rcv_skb+0x232/0x4b0 [ 490.321059][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.326343][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 490.331665][ T30] ? down_read+0x272/0x2e0 [ 490.336451][ T30] ? genl_rcv+0xd/0x40 [ 490.340668][ T30] genl_rcv+0x28/0x40 [ 490.344850][ T30] netlink_unicast+0x80f/0x9b0 [ 490.349654][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 490.355060][ T30] ? netlink_sendmsg+0x650/0xb40 [ 490.360030][ T30] ? skb_put+0x11b/0x210 [ 490.364469][ T30] netlink_sendmsg+0x813/0xb40 [ 490.369398][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.374913][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 490.379914][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 490.385502][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.390822][ T30] __sys_sendto+0x672/0x710 [ 490.395441][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 490.400514][ T30] ? exc_page_fault+0x6a/0xc0 [ 490.405314][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 490.410627][ T30] __x64_sys_sendto+0xde/0x100 [ 490.415664][ T30] do_syscall_64+0x14d/0xf80 [ 490.420374][ T30] ? trace_irq_disable+0x3b/0x150 [ 490.425579][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.431772][ T30] ? clear_bhb_loop+0x40/0x90 [ 490.436874][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.442831][ T30] RIP: 0033:0x7f1e3395cfce [ 490.447262][ T30] RSP: 002b:00007f1e34848e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 490.455783][ T30] RAX: ffffffffffffffda RBX: 00007f1e3484a6c0 RCX: 00007f1e3395cfce [ 490.463937][ T30] RDX: 0000000000000020 RSI: 00007f1e34849000 RDI: 0000000000000007 [ 490.471930][ T30] RBP: 0000000000000000 R08: 00007f1e34848f04 R09: 000000000000000c [ 490.480044][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 490.488249][ T30] R13: 00007f1e34848f58 R14: 00007f1e34849000 R15: 0000000000000000 [ 490.496688][ T30] [ 490.499775][ T30] INFO: task syz.0.1652:12469 blocked for more than 145 seconds. [ 490.507651][ T30] Not tainted syzkaller #0 [ 490.512797][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 490.521648][ T30] task:syz.0.1652 state:D stack:25000 pid:12469 tgid:12460 ppid:5823 task_flags:0x400140 flags:0x00080002 [ 490.533874][ T30] Call Trace: [ 490.537172][ T30] [ 490.540283][ T30] __schedule+0x15dd/0x52d0 [ 490.545350][ T30] ? __pfx___schedule+0x10/0x10 [ 490.550232][ T30] ? schedule+0x90/0x360 [ 490.554559][ T30] schedule+0x164/0x360 [ 490.558734][ T30] schedule_preempt_disabled+0x13/0x30 [ 490.564255][ T30] __mutex_lock+0x7fe/0x1300 [ 490.568886][ T30] ? __mutex_lock+0x5ac/0x1300 [ 490.573857][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 490.578598][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 490.583744][ T30] ? __dev_queue_xmit+0x28b/0x3870 [ 490.589002][ T30] ? radix_tree_lookup+0x240/0x290 [ 490.594352][ T30] genl_rcv_msg+0x10b/0x7a0 [ 490.598994][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.604307][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 490.609296][ T30] netlink_rcv_skb+0x232/0x4b0 [ 490.614407][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.619467][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 490.624978][ T30] ? down_read+0x272/0x2e0 [ 490.629516][ T30] ? genl_rcv+0xd/0x40 [ 490.633757][ T30] genl_rcv+0x28/0x40 [ 490.637780][ T30] netlink_unicast+0x80f/0x9b0 [ 490.642968][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 490.648310][ T30] ? netlink_sendmsg+0x650/0xb40 [ 490.653702][ T30] ? skb_put+0x11b/0x210 [ 490.658007][ T30] netlink_sendmsg+0x813/0xb40 [ 490.663034][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.668706][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 490.673750][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 490.679241][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.684635][ T30] __sys_sendto+0x672/0x710 [ 490.689165][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 490.694955][ T30] ? fd_install+0x94/0x3d0 [ 490.699412][ T30] ? fd_install+0x306/0x3d0 [ 490.704198][ T30] __x64_sys_sendto+0xde/0x100 [ 490.708991][ T30] do_syscall_64+0x14d/0xf80 [ 490.713887][ T30] ? trace_irq_disable+0x3b/0x150 [ 490.719115][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.725343][ T30] ? clear_bhb_loop+0x40/0x90 [ 490.730476][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.736465][ T30] RIP: 0033:0x7f1e3395cfce [ 490.740897][ T30] RSP: 002b:00007f1e34827e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 490.749599][ T30] RAX: ffffffffffffffda RBX: 00007f1e348296c0 RCX: 00007f1e3395cfce [ 490.757689][ T30] RDX: 0000000000000020 RSI: 00007f1e34828000 RDI: 000000000000000a [ 490.765934][ T30] RBP: 0000000000000000 R08: 00007f1e34827f04 R09: 000000000000000c [ 490.774352][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 490.782648][ T30] R13: 00007f1e34827f58 R14: 00007f1e34828000 R15: 0000000000000000 [ 490.790668][ T30] [ 490.793845][ T30] INFO: task syz.1.1653:12468 blocked for more than 145 seconds. [ 490.801661][ T30] Not tainted syzkaller #0 [ 490.806914][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 490.815752][ T30] task:syz.1.1653 state:D stack:27880 pid:12468 tgid:12463 ppid:5837 task_flags:0x400040 flags:0x00080002 [ 490.827803][ T30] Call Trace: [ 490.831102][ T30] [ 490.834148][ T30] __schedule+0x15dd/0x52d0 [ 490.838712][ T30] ? __pfx___schedule+0x10/0x10 [ 490.843651][ T30] ? schedule+0x90/0x360 [ 490.848070][ T30] schedule+0x164/0x360 [ 490.852421][ T30] schedule_preempt_disabled+0x13/0x30 [ 490.857914][ T30] __mutex_lock+0x7fe/0x1300 [ 490.862583][ T30] ? __mutex_lock+0x5ac/0x1300 [ 490.867372][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 490.872075][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 490.877496][ T30] ? __dev_queue_xmit+0x28b/0x3870 [ 490.882687][ T30] ? radix_tree_lookup+0x240/0x290 [ 490.887815][ T30] genl_rcv_msg+0x10b/0x7a0 [ 490.892416][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.897591][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 490.902640][ T30] netlink_rcv_skb+0x232/0x4b0 [ 490.907520][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.912765][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 490.918102][ T30] ? down_read+0x272/0x2e0 [ 490.922593][ T30] ? genl_rcv+0xd/0x40 [ 490.926680][ T30] genl_rcv+0x28/0x40 [ 490.930660][ T30] netlink_unicast+0x80f/0x9b0 [ 490.935800][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 490.941118][ T30] ? netlink_sendmsg+0x650/0xb40 [ 490.946127][ T30] ? skb_put+0x11b/0x210 [ 490.950545][ T30] netlink_sendmsg+0x813/0xb40 [ 490.955402][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.960802][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 490.965871][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 490.971176][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.976531][ T30] __sys_sendto+0x672/0x710 [ 490.981072][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 490.986426][ T30] ? exc_page_fault+0x6a/0xc0 [ 490.991140][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 490.996605][ T30] __x64_sys_sendto+0xde/0x100 [ 491.001403][ T30] do_syscall_64+0x14d/0xf80 [ 491.006114][ T30] ? trace_irq_disable+0x3b/0x150 [ 491.011259][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.017714][ T30] ? clear_bhb_loop+0x40/0x90 [ 491.022509][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.028435][ T30] RIP: 0033:0x7fc43cb5cfce [ 491.032973][ T30] RSP: 002b:00007fc43d983e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 491.041421][ T30] RAX: ffffffffffffffda RBX: 00007fc43d9856c0 RCX: 00007fc43cb5cfce [ 491.049643][ T30] RDX: 0000000000000020 RSI: 00007fc43d984000 RDI: 000000000000000a [ 491.058135][ T30] RBP: 0000000000000000 R08: 00007fc43d983f04 R09: 000000000000000c [ 491.066208][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 491.074398][ T30] R13: 00007fc43d983f58 R14: 00007fc43d984000 R15: 0000000000000000 [ 491.082500][ T30] [ 491.085586][ T30] [ 491.085586][ T30] Showing all locks held in the system: [ 491.093859][ T30] 1 lock held by khungtaskd/30: [ 491.098748][ T30] #0: ffffffff8e75e520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 491.108743][ T30] 1 lock held by klogd/5183: [ 491.113693][ T30] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 491.123818][ T30] 2 locks held by getty/5584: [ 491.128526][ T30] #0: ffff888032a150a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 491.138629][ T30] #1: ffffc9000322b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 491.148925][ T30] 1 lock held by udevd/7276: [ 491.153929][ T30] #0: ffff888027170358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 491.163457][ T30] 1 lock held by udevd/10404: [ 491.168143][ T30] #0: ffff888027032358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 491.177919][ T30] 6 locks held by syz.3.1641/12421: [ 491.183317][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 491.191562][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 491.200705][ T30] #2: ffff88802717d278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 491.211336][ T30] #3: ffff88802702ace0 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 491.220835][ T30] #4: ffff88802702a680 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 491.233020][ T30] #5: ffff88802702a6b8 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 491.245388][ T30] 2 locks held by syz.2.1648/12448: [ 491.250608][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 491.259197][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 491.268367][ T30] 2 locks held by syz.4.1649/12450: [ 491.273675][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 491.281927][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 491.290981][ T30] 2 locks held by syz.4.1649/12455: [ 491.296247][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 491.304606][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 491.313889][ T30] 2 locks held by syz.0.1652/12467: [ 491.319192][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 491.327591][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 491.336791][ T30] 2 locks held by syz.0.1652/12469: [ 491.342099][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 491.350481][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 491.359887][ T30] 2 locks held by syz.1.1653/12468: [ 491.365189][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 491.373562][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 491.382620][ T30] 2 locks held by syz-executor/12476: [ 491.388001][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 491.396376][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 491.405436][ T30] 2 locks held by syz-executor/12478: [ 491.410812][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 491.419294][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 491.428522][ T30] 2 locks held by syz-executor/12480: [ 491.432827][ T1148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.434045][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 491.450413][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 491.459557][ T30] 2 locks held by syz-executor/12499: [ 491.465271][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 491.474186][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 491.483446][ T30] 2 locks held by syz-executor/12501: [ 491.488882][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 491.497214][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 491.506448][ T30] 2 locks held by syz-executor/12632: [ 491.512296][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 491.520544][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 491.529706][ T30] 2 locks held by syz-executor/12642: [ 491.535261][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 491.543555][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 491.552633][ T30] 2 locks held by syz-executor/12644: [ 491.558083][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 491.566569][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 491.575754][ T30] 2 locks held by syz-executor/12660: [ 491.581121][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 491.589499][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 491.598713][ T30] 2 locks held by syz-executor/12662: [ 491.604214][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 491.612760][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 491.621728][ T30] 2 locks held by syz-executor/12684: [ 491.627164][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 491.635535][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 491.644837][ T30] 2 locks held by syz-executor/12694: [ 491.650319][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 491.658896][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 491.668126][ T30] 2 locks held by syz-executor/12696: [ 491.673585][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 491.681983][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 491.691115][ T30] 2 locks held by syz-executor/12712: [ 491.696546][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 491.704863][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 491.714121][ T30] 2 locks held by syz-executor/12714: [ 491.719527][ T30] #0: ffffffff8fc36410 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 491.728040][ T30] #1: ffffffff8fc36248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 491.737731][ T30] [ 491.740098][ T30] ============================================= [ 491.740098][ T30] [ 491.748582][ T30] NMI backtrace for cpu 1 [ 491.748599][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 491.748618][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 491.748629][ T30] Call Trace: [ 491.748637][ T30] [ 491.748646][ T30] dump_stack_lvl+0xe8/0x150 [ 491.748679][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 491.748707][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 491.748734][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 491.748765][ T30] sys_info+0x135/0x170 [ 491.748789][ T30] watchdog+0xfd9/0x1030 [ 491.748825][ T30] ? watchdog+0x21a/0x1030 [ 491.748862][ T30] kthread+0x388/0x470 [ 491.748883][ T30] ? __pfx_watchdog+0x10/0x10 [ 491.748910][ T30] ? __pfx_kthread+0x10/0x10 [ 491.748942][ T30] ret_from_fork+0x51e/0xb90 [ 491.748973][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 491.748998][ T30] ? __switch_to+0xc7d/0x1450 [ 491.749027][ T30] ? __pfx_kthread+0x10/0x10 [ 491.749049][ T30] ret_from_fork_asm+0x1a/0x30 [ 491.749094][ T30] [ 491.749103][ T30] Sending NMI from CPU 1 to CPUs 0: [ 491.860570][ C0] NMI backtrace for cpu 0 [ 491.860588][ C0] CPU: 0 UID: 0 PID: 1148 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 491.860607][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 491.860617][ C0] Workqueue: events_unbound toggle_allocation_gate [ 491.860645][ C0] RIP: 0010:kasan_check_range+0xa0/0x2c0 [ 491.860667][ C0] Code: 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 0f 85 9e 01 00 00 49 ff c3 <48> ff c3 75 ee e9 1d 01 00 00 44 89 dd 83 e5 07 0f 84 b5 00 00 00 [ 491.860681][ C0] RSP: 0018:ffffc900049bf4d0 EFLAGS: 00000082 [ 491.860695][ C0] RAX: 0000000000000001 RBX: ffffffffffffffff RCX: ffffffff819b2ee1 [ 491.860707][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901149b0 [ 491.860717][ C0] RBP: 000000000000b8f3 R08: ffffffff901149b7 R09: 1ffffffff2022936 [ 491.860728][ C0] R10: dffffc0000000000 R11: fffffbfff2022937 R12: 0000000000000001 [ 491.860739][ C0] R13: 000000000158f400 R14: fffffbfff2022937 R15: 1ffffffff2022936 [ 491.860751][ C0] FS: 0000000000000000(0000) GS:ffff888125461000(0000) knlGS:0000000000000000 [ 491.860764][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 491.860776][ C0] CR2: 00007fe8418cbd57 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 491.860792][ C0] Call Trace: [ 491.860799][ C0] [ 491.860809][ C0] __update_load_avg_cfs_rq+0x6e1/0xc10 [ 491.860833][ C0] update_cfs_rq_load_avg+0x3fb/0x4e0 [ 491.860855][ C0] update_load_avg+0x1b0/0x1ec0 [ 491.860879][ C0] dequeue_entities+0x3175/0x3710 [ 491.860897][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 491.860914][ C0] ? rcu_is_watching+0x15/0xb0 [ 491.860936][ C0] ? rcu_is_watching+0x15/0xb0 [ 491.860958][ C0] dequeue_task_fair+0x1fd/0x7b0 [ 491.860976][ C0] __schedule+0x666/0x52d0 [ 491.860993][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 491.861013][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 491.861036][ C0] ? static_key_enable+0x1a/0x20 [ 491.861060][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 491.861077][ C0] ? __pfx___schedule+0x10/0x10 [ 491.861098][ C0] ? schedule+0x90/0x360 [ 491.861115][ C0] schedule+0x164/0x360 [ 491.861132][ C0] toggle_allocation_gate+0x17c/0x290 [ 491.861151][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 491.861169][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 491.861190][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 491.861210][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 491.861230][ C0] process_scheduled_works+0xb6e/0x18c0 [ 491.861271][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 491.861294][ C0] ? assign_work+0x3d5/0x5e0 [ 491.861314][ C0] worker_thread+0xa53/0xfc0 [ 491.861346][ C0] kthread+0x388/0x470 [ 491.861362][ C0] ? __pfx_worker_thread+0x10/0x10 [ 491.861381][ C0] ? __pfx_kthread+0x10/0x10 [ 491.861397][ C0] ret_from_fork+0x51e/0xb90 [ 491.861418][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 491.861437][ C0] ? __switch_to+0xc7d/0x1450 [ 491.861455][ C0] ? __pfx_kthread+0x10/0x10 [ 491.861471][ C0] ret_from_fork_asm+0x1a/0x30 [ 491.861501][ C0] [ 492.166140][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 492.173157][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 492.182257][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 492.192656][ T30] Call Trace: [ 492.195930][ T30] [ 492.198854][ T30] vpanic+0x56c/0xa60 [ 492.202833][ T30] ? __pfx___schedule+0x10/0x10 [ 492.207681][ T30] ? __pfx_vpanic+0x10/0x10 [ 492.212187][ T30] ? __pfx_console_unlock+0x10/0x10 [ 492.217677][ T30] panic+0xc5/0xd0 [ 492.221532][ T30] ? __pfx_panic+0x10/0x10 [ 492.226046][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 492.231537][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 492.237708][ T30] watchdog+0x1023/0x1030 [ 492.242058][ T30] ? watchdog+0x21a/0x1030 [ 492.246597][ T30] kthread+0x388/0x470 [ 492.250698][ T30] ? __pfx_watchdog+0x10/0x10 [ 492.255409][ T30] ? __pfx_kthread+0x10/0x10 [ 492.260028][ T30] ret_from_fork+0x51e/0xb90 [ 492.264631][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 492.269748][ T30] ? __switch_to+0xc7d/0x1450 [ 492.274437][ T30] ? __pfx_kthread+0x10/0x10 [ 492.279039][ T30] ret_from_fork_asm+0x1a/0x30 [ 492.283911][ T30] [ 492.287643][ T30] Kernel Offset: disabled [ 492.292657][ T30] Rebooting in 86400 seconds..