last executing test programs: 5.114985391s ago: executing program 1 (id=537): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r6, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 4.118948846s ago: executing program 3 (id=547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, &(0x7f00000018c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x43}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 3.880545579s ago: executing program 3 (id=550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 3.873134073s ago: executing program 1 (id=551): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000040000000400000009"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000230000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r4}, 0xc) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000080), &(0x7f0000000280)=r5}, 0x20) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x0) sendto$rose(0xffffffffffffffff, 0x0, 0x0, 0x4011, &(0x7f00000003c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x6c, 0x64, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x6c}}, 0x48010) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3.537570288s ago: executing program 0 (id=556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000001280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="080026bdd87b00000000000000030000030401000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x1103, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r2, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@bloom_filter={0x1e, 0xc, 0x2, 0xfffffffe, 0x2, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xd}, 0x50) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x20, 0x17, {0x1b, 0x3, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}}}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) socket$key(0xf, 0x3, 0x2) syz_80211_inject_frame(0x0, 0x0, 0xb5) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}}, 0x10) 3.319508428s ago: executing program 3 (id=558): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x5, 0x1, 0xc, 0xa, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xec, &(0x7f00000004c0)=""/236}, 0x90) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffe0}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) 2.860423336s ago: executing program 1 (id=561): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r5, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 2.76019568s ago: executing program 3 (id=562): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000140)={0x8000000000000001, 0x8, '\x00', 0x1, &(0x7f0000000100)=[0x0]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x7, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r5) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0x190, r6, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffc0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x20000084}, 0x20004000) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000218}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x845}, 0x20004014) read(r4, &(0x7f0000000000)=""/7, 0x7) socket$l2tp(0x2, 0x2, 0x73) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000200)) 2.650353289s ago: executing program 0 (id=564): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 2.166195178s ago: executing program 2 (id=565): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x100}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, 0x0, &(0x7f0000000040)) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r5, &(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x2, 0x3}, 0x4}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 1.85397845s ago: executing program 0 (id=566): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r2], 0x5c}}, 0x40) 1.765463355s ago: executing program 4 (id=567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xb, 0x1, 'nfacct\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 1.73998982s ago: executing program 1 (id=568): r0 = socket$tipc(0x1e, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f00000007c0)="b1146dfecca5a421821d08e9ed95ae282f62b6a6ecc2e49b5206cee1c3ab0b5736ac581429bbd906bbb449aaa251c746292ef4f126b595b4610a782bcd7471b7", 0x40}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000640)=[{&(0x7f00000004c0)='\'', 0x1}], 0x1}}], 0x2, 0x24040800) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) unshare(0x26020480) connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xa9}}, 0x8) setsockopt$inet_int(r1, 0x0, 0x32, &(0x7f00000000c0)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000007000000008000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00004000000000000000000000000000000000000000800000000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe0c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x50) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc0200000000000000000000000000000000000000000000000000001e000000000000030002000002000000890000", @ANYRESHEX=r7, @ANYBLOB], 0x1fc}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x11, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000011000000000000000000000b7080000000000007baaf8ff00000000b5080000098000007b8af0ff0056eadb5540ecb47f1b4eb1cc4d000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRESOCT=r0, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0xb, &(0x7f0000000000)=0x1ff, 0x4) sendto$inet(r10, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r10, 0x0, 0xb, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0, 0xf}, 0x3) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r11, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) 1.478390446s ago: executing program 3 (id=569): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x0, 0x8}}]}, {0xfffffffffffffec3}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 1.477315446s ago: executing program 4 (id=570): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.384636535s ago: executing program 4 (id=571): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000040000000400000009"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000230000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r4}, 0xc) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000080), &(0x7f0000000280)=r5}, 0x20) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x0) sendto$rose(0xffffffffffffffff, 0x0, 0x0, 0x4011, &(0x7f00000003c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x6c, 0x64, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x6c}}, 0x48010) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.372737441s ago: executing program 1 (id=572): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x5, 0x1, 0xc, 0xa, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xec, &(0x7f00000004c0)=""/236}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffe0}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) 1.345155647s ago: executing program 0 (id=573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, &(0x7f00000018c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x43}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1.317611267s ago: executing program 2 (id=574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000001280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="080026bdd87b00000000000000030000030401000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x1103, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r2, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@bloom_filter={0x1e, 0xc, 0x2, 0xfffffffe, 0x2, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xd}, 0x50) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x20, 0x17, {0x1b, 0x3, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}}}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) socket$key(0xf, 0x3, 0x2) syz_80211_inject_frame(0x0, 0x0, 0xb5) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}}, 0x10) 1.177373122s ago: executing program 3 (id=575): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x5, 0x1, 0xc, 0xa, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xec, &(0x7f00000004c0)=""/236}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x1800000000000000) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000200)={0x2, @none={0x0, 0xffff}}, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvfrom$packet(r3, 0x0, 0x0, 0x40, 0x0, 0x0) close(r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffe0}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, 0x0, 0x41) syz_80211_inject_frame(0x0, &(0x7f0000001fc0)=@ctrl_frame=@ba={{}, {0xf}, @device_a, @device_b, @basic={{0x1, 0x0, 0x0, 0x0, 0x6}, {0x6, 0x1}, "89b3630fd2bead961be2761f5a56762f3e77cd8cac6fdc963ab4cd268ff65c42950fa7580a36581d0536609be6cdd5b5848eefc43a9b307032fa8480546ad2c157ca3940d9586bf5d49d6ce6f5404f6f10ed55359ff61e4b653a4541ec0d5563606e4536196bdd84661efd3905d57c7b6e2a4afa9dbc7a9efb358e7dea9711d4"}}, 0x94) 1.10058439s ago: executing program 0 (id=576): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="aa8e0cf56164be", 0x7) 916.523647ms ago: executing program 0 (id=577): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$kcm(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="b3ffe14e4d56"}) 850.681216ms ago: executing program 1 (id=578): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r5, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 561.09821ms ago: executing program 2 (id=579): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x178}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 379.683456ms ago: executing program 4 (id=580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xb, 0x1, 'nfacct\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 352.270441ms ago: executing program 2 (id=581): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 249.488601ms ago: executing program 2 (id=582): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001200030200"/53, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010008081c000a"], 0x70}}, 0x0) 151.960578ms ago: executing program 4 (id=583): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x30044889) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x2d}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0, 0x0, 0x5}, 0x18) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=0x10) connect$l2tp(r3, &(0x7f0000000180)={0x2, 0x0, @remote, 0x1}, 0x10) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0) write$rfkill(r4, &(0x7f0000000000)={0x5, 0x0, 0x3, 0xfc}, 0x1) accept4(r1, 0x0, &(0x7f0000000240), 0x80800) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x20000000) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, 0x0, 0x0) 134.847755ms ago: executing program 2 (id=584): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x100}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, 0x0, &(0x7f0000000040)) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=585): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004) recvmmsg(r1, &(0x7f0000000840)=[{{&(0x7f0000000700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000b40), 0x0, &(0x7f00000007c0)=""/116, 0x74}, 0x80001bb}], 0x1, 0x10102, &(0x7f0000000880)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.195' (ED25519) to the list of known hosts. [ 86.192918][ T5825] cgroup: Unknown subsys name 'net' [ 86.454733][ T5825] cgroup: Unknown subsys name 'cpuset' [ 86.510093][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.109661][ T9] cfg80211: failed to load regulatory.db [ 88.701464][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.210709][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.214224][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.215282][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.216848][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.217926][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.243461][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.245978][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.248378][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.251854][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.252841][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.367638][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.370410][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.371426][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.390186][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.401355][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.411741][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.413314][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.414042][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.415229][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.416022][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.480559][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.488609][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.504312][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.516915][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.517857][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.481996][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 94.512481][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 94.574602][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 94.600334][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 94.936863][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 95.411292][ T59] Bluetooth: hci0: command tx timeout [ 95.411511][ T5841] Bluetooth: hci1: command tx timeout [ 95.489552][ T59] Bluetooth: hci3: command tx timeout [ 95.489704][ T5841] Bluetooth: hci2: command tx timeout [ 95.569546][ T5841] Bluetooth: hci4: command tx timeout [ 95.780669][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.781955][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.782330][ T5837] bridge_slave_0: entered allmulticast mode [ 95.784171][ T5837] bridge_slave_0: entered promiscuous mode [ 95.788375][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.788535][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.788727][ T5836] bridge_slave_0: entered allmulticast mode [ 95.794200][ T5836] bridge_slave_0: entered promiscuous mode [ 96.000068][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.000249][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.000481][ T5837] bridge_slave_1: entered allmulticast mode [ 96.004011][ T5837] bridge_slave_1: entered promiscuous mode [ 96.014257][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.014469][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.014997][ T5836] bridge_slave_1: entered allmulticast mode [ 96.017883][ T5836] bridge_slave_1: entered promiscuous mode [ 96.058775][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.058921][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.070676][ T5845] bridge_slave_0: entered allmulticast mode [ 96.073592][ T5845] bridge_slave_0: entered promiscuous mode [ 96.081871][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.082013][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.089594][ T5843] bridge_slave_0: entered allmulticast mode [ 96.092966][ T5843] bridge_slave_0: entered promiscuous mode [ 96.361147][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.361316][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.361561][ T5845] bridge_slave_1: entered allmulticast mode [ 96.364939][ T5845] bridge_slave_1: entered promiscuous mode [ 96.367365][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.367480][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.367623][ T5843] bridge_slave_1: entered allmulticast mode [ 96.370632][ T5843] bridge_slave_1: entered promiscuous mode [ 96.854066][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.895892][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.896294][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.896508][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.896695][ T5849] bridge_slave_0: entered allmulticast mode [ 96.899162][ T5849] bridge_slave_0: entered promiscuous mode [ 97.116189][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.119121][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.121932][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.122076][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.122272][ T5849] bridge_slave_1: entered allmulticast mode [ 97.125166][ T5849] bridge_slave_1: entered promiscuous mode [ 97.142503][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.164243][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.292566][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.384644][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.495191][ T5841] Bluetooth: hci1: command tx timeout [ 97.495227][ T5841] Bluetooth: hci0: command tx timeout [ 97.570083][ T59] Bluetooth: hci3: command tx timeout [ 97.570119][ T59] Bluetooth: hci2: command tx timeout [ 97.649525][ T5841] Bluetooth: hci4: command tx timeout [ 97.835626][ T5837] team0: Port device team_slave_0 added [ 97.938999][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.023227][ T5836] team0: Port device team_slave_0 added [ 98.025727][ T5837] team0: Port device team_slave_1 added [ 98.175449][ T5843] team0: Port device team_slave_0 added [ 98.182787][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.185203][ T5845] team0: Port device team_slave_0 added [ 98.188999][ T5836] team0: Port device team_slave_1 added [ 98.271909][ T5843] team0: Port device team_slave_1 added [ 98.345069][ T5845] team0: Port device team_slave_1 added [ 98.773506][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.773526][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.773553][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.877335][ T5849] team0: Port device team_slave_0 added [ 98.953329][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.953347][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.953374][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.955044][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.955057][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.955093][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.958325][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.958339][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.958364][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.965491][ T5849] team0: Port device team_slave_1 added [ 98.967278][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.967301][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.967323][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.970492][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.970506][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.970529][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.987374][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.987390][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.987413][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.082009][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.082025][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.082048][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.408219][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.408233][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.408247][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.525790][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.525803][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.525818][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.579742][ T5841] Bluetooth: hci0: command tx timeout [ 99.579779][ T5841] Bluetooth: hci1: command tx timeout [ 99.651002][ T59] Bluetooth: hci2: command tx timeout [ 99.651041][ T59] Bluetooth: hci3: command tx timeout [ 99.729586][ T5841] Bluetooth: hci4: command tx timeout [ 99.933119][ T5837] hsr_slave_0: entered promiscuous mode [ 99.934905][ T5837] hsr_slave_1: entered promiscuous mode [ 100.178007][ T5836] hsr_slave_0: entered promiscuous mode [ 100.191540][ T5836] hsr_slave_1: entered promiscuous mode [ 100.192903][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 100.193006][ T5836] Cannot create hsr debugfs directory [ 100.217545][ T5843] hsr_slave_0: entered promiscuous mode [ 100.226133][ T5843] hsr_slave_1: entered promiscuous mode [ 100.227168][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 100.227194][ T5843] Cannot create hsr debugfs directory [ 100.254561][ T5845] hsr_slave_0: entered promiscuous mode [ 100.255476][ T5845] hsr_slave_1: entered promiscuous mode [ 100.256121][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 100.256139][ T5845] Cannot create hsr debugfs directory [ 100.938222][ T5849] hsr_slave_0: entered promiscuous mode [ 100.939153][ T5849] hsr_slave_1: entered promiscuous mode [ 100.948660][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 100.948688][ T5849] Cannot create hsr debugfs directory [ 101.649601][ T5841] Bluetooth: hci1: command tx timeout [ 101.649659][ T5841] Bluetooth: hci0: command tx timeout [ 101.729764][ T59] Bluetooth: hci3: command tx timeout [ 101.729785][ T5841] Bluetooth: hci2: command tx timeout [ 101.809491][ T5841] Bluetooth: hci4: command tx timeout [ 102.643727][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.697579][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.726197][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.805763][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.952808][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.994125][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.032373][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.087452][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.254888][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.307579][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.353791][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.416218][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.589956][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.651166][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.706265][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.752929][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.956422][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.006928][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.044571][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.090468][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.152461][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.232468][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.296637][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.297283][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.333134][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.375445][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.375714][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.492652][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.544772][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.545109][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.595054][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.618499][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.618668][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.786619][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.794764][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.891548][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.891724][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.943427][ T3627] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.943645][ T3627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.035248][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.084086][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.115033][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.115801][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.204975][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.205158][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.289146][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.355036][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.355278][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.424213][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.424457][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.645899][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.751404][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.100252][ T5837] veth0_vlan: entered promiscuous mode [ 106.211504][ T5837] veth1_vlan: entered promiscuous mode [ 106.266000][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.282173][ T5843] veth0_vlan: entered promiscuous mode [ 106.356369][ T5843] veth1_vlan: entered promiscuous mode [ 106.478145][ T5837] veth0_macvtap: entered promiscuous mode [ 106.493419][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.525563][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.542308][ T5837] veth1_macvtap: entered promiscuous mode [ 106.702210][ T5843] veth0_macvtap: entered promiscuous mode [ 106.705801][ T5836] veth0_vlan: entered promiscuous mode [ 106.758314][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.762228][ T5843] veth1_macvtap: entered promiscuous mode [ 106.808478][ T5836] veth1_vlan: entered promiscuous mode [ 106.816846][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.907844][ T1038] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.934492][ T1038] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.938633][ T1038] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.947698][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.965482][ T1038] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.075786][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.124265][ T5845] veth0_vlan: entered promiscuous mode [ 107.206392][ T44] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.247562][ T44] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.261901][ T44] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.282641][ T44] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.326027][ T5845] veth1_vlan: entered promiscuous mode [ 107.361707][ T5836] veth0_macvtap: entered promiscuous mode [ 107.472694][ T5836] veth1_macvtap: entered promiscuous mode [ 107.681357][ T1052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.681380][ T1052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.814850][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.879956][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.879989][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.884010][ T5849] veth0_vlan: entered promiscuous mode [ 107.936007][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.987417][ T5845] veth0_macvtap: entered promiscuous mode [ 107.991051][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.991069][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.038764][ T1052] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.052224][ T5845] veth1_macvtap: entered promiscuous mode [ 108.063225][ T5849] veth1_vlan: entered promiscuous mode [ 108.076584][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.106720][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.127695][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.204603][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.204625][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.322536][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.443784][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.599632][ T1052] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.624580][ T1052] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.693536][ T1052] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.750376][ T5849] veth0_macvtap: entered promiscuous mode [ 108.763931][ T1052] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.791068][ T3627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.791089][ T3627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.831597][ T5849] veth1_macvtap: entered promiscuous mode [ 109.145602][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.145624][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.148727][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.312176][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.462826][ T1052] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.521425][ T3627] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.521747][ T3627] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.522466][ T3627] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.570453][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.570477][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.050503][ T1052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.050527][ T1052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.427549][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.427570][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.675262][ T5989] Zero length message leads to an empty skb [ 110.929161][ T1052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.929184][ T1052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.628542][ T6012] warning: `syz.1.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.782296][ T6010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 112.508135][ T6021] tipc: Started in network mode [ 112.508168][ T6021] tipc: Node identity 6a4fa8f2f27c, cluster identity 4711 [ 112.508819][ T6021] tipc: Enabled bearer , priority 0 [ 112.514296][ T6021] syzkaller0: entered promiscuous mode [ 112.514323][ T6021] syzkaller0: entered allmulticast mode [ 112.594641][ T6021] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 112.859727][ T6020] tipc: Resetting bearer [ 113.110558][ T6020] tipc: Disabling bearer [ 113.282623][ T6028] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 113.784760][ T6045] syzkaller0: entered promiscuous mode [ 113.784787][ T6045] syzkaller0: entered allmulticast mode [ 113.787912][ T6048] netlink: 44 bytes leftover after parsing attributes in process `syz.0.35'. [ 113.787947][ T6048] netlink: 44 bytes leftover after parsing attributes in process `syz.0.35'. [ 113.788500][ T6048] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 113.822264][ T6052] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.311806][ T6062] netlink: 'syz.4.38': attribute type 9 has an invalid length. [ 114.311832][ T6062] netlink: 155628 bytes leftover after parsing attributes in process `syz.4.38'. [ 114.975694][ T6067] netlink: 28 bytes leftover after parsing attributes in process `syz.4.40'. [ 114.975830][ T6067] netlink: 28 bytes leftover after parsing attributes in process `syz.4.40'. [ 115.006536][ T6068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.40'. [ 115.006568][ T6068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.40'. [ 115.013923][ T6068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.40'. [ 115.014030][ T6068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.40'. [ 115.400837][ T6078] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 115.591204][ T6080] bond_slave_0: entered promiscuous mode [ 115.591272][ T6080] bond_slave_1: entered promiscuous mode [ 115.591598][ T6080] vlan2: entered promiscuous mode [ 115.591611][ T6080] bond0: entered promiscuous mode [ 115.959874][ T6089] gretap0: entered promiscuous mode [ 117.272573][ T6108] syzkaller0: entered promiscuous mode [ 117.272609][ T6108] syzkaller0: entered allmulticast mode [ 117.719638][ T6128] __nla_validate_parse: 2 callbacks suppressed [ 117.719662][ T6128] netlink: 44 bytes leftover after parsing attributes in process `syz.4.64'. [ 117.772681][ T6129] syz.4.64 uses obsolete (PF_INET,SOCK_PACKET) [ 117.986411][ T6134] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.65'. [ 118.182845][ T6136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.66'. [ 118.338025][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.67'. [ 128.439953][ T6138] caif0: Master is either lo or non-ether device [ 129.002888][ T6159] netlink: 'syz.3.73': attribute type 1 has an invalid length. [ 129.002916][ T6159] netlink: 224 bytes leftover after parsing attributes in process `syz.3.73'. [ 129.312896][ T6173] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.709644][ T6170] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 129.711966][ T6170] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 130.122489][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 130.245180][ T6196] caif0: Master is either lo or non-ether device [ 130.583399][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.84'. [ 131.018196][ T6210] tipc: Enabling of bearer rejected, failed to enable media [ 131.301944][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 131.338565][ T6227] caif0: Master is either lo or non-ether device [ 131.549782][ T6233] tipc: Started in network mode [ 131.549814][ T6233] tipc: Node identity 1aa75f9ecf23, cluster identity 4711 [ 131.550055][ T6233] tipc: Enabled bearer , priority 0 [ 131.633022][ T6233] tipc: Resetting bearer [ 131.718033][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 131.850393][ T6232] tipc: Disabling bearer [ 132.220574][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.105'. [ 132.247096][ T6254] openvswitch: netlink: Duplicate or invalid key (type 0). [ 132.247135][ T6254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.388830][ T6242] team0: No ports can be present during mode change [ 132.641592][ T6263] lo speed is unknown, defaulting to 1000 [ 132.645212][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'. [ 132.648781][ T6263] lo speed is unknown, defaulting to 1000 [ 132.651030][ T6262] caif0: Master is either lo or non-ether device [ 132.677744][ T6263] lo speed is unknown, defaulting to 1000 [ 132.756390][ T6263] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 132.785487][ T6263] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 133.008490][ T6263] lo speed is unknown, defaulting to 1000 [ 133.118618][ T6263] lo speed is unknown, defaulting to 1000 [ 133.148392][ T6263] lo speed is unknown, defaulting to 1000 [ 133.176998][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.218003][ T6263] lo speed is unknown, defaulting to 1000 [ 133.284826][ T6263] lo speed is unknown, defaulting to 1000 [ 133.450898][ T6272] tipc: Enabling of bearer rejected, failed to enable media [ 133.540841][ T6276] lo speed is unknown, defaulting to 1000 [ 133.920527][ T6291] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 134.059826][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.257836][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 134.665431][ T1119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.666780][ T1119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.861800][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.090554][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.672994][ T6337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.136'. [ 135.890025][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.129619][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.375093][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.402009][ T6353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.140'. [ 136.835913][ T6366] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.976027][ T6371] netlink: 28 bytes leftover after parsing attributes in process `syz.3.149'. [ 136.976062][ T6371] netlink: 28 bytes leftover after parsing attributes in process `syz.3.149'. [ 137.012110][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.021321][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.049969][ T6371] ip6gretap0: entered promiscuous mode [ 137.069888][ T6371] syz_tun: entered promiscuous mode [ 137.180642][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.362766][ T6389] netlink: 'syz.3.154': attribute type 23 has an invalid length. [ 137.611806][ T6387] syzkaller0: entered promiscuous mode [ 137.611843][ T6387] syzkaller0: entered allmulticast mode [ 137.615319][ T6393] netlink: 'syz.3.154': attribute type 1 has an invalid length. [ 137.615344][ T6393] netlink: 'syz.3.154': attribute type 1 has an invalid length. [ 137.615357][ T6393] netlink: 204 bytes leftover after parsing attributes in process `syz.3.154'. [ 138.211453][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.052069][ T5905] net_ratelimit: 2 callbacks suppressed [ 140.052091][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.289910][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.329678][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.379967][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.090085][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.414710][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.418360][ T6304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.059527][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.059771][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.449993][ T6304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.490770][ T6304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.542436][ T6304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.089742][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.260635][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.572361][ T6304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.609667][ T6304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.920413][ T6412] netlink: 56 bytes leftover after parsing attributes in process `syz.2.164'. [ 149.245144][ T6416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.165'. [ 149.312633][ T6426] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.169'. [ 149.650202][ T6304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.735531][ T6438] tipc: Enabled bearer , priority 0 [ 149.736475][ T6438] syzkaller0: entered promiscuous mode [ 149.736505][ T6438] syzkaller0: entered allmulticast mode [ 149.828207][ T6441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.176'. [ 150.095242][ T6446] tipc: Resetting bearer [ 150.139771][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.145727][ T6437] tipc: Resetting bearer [ 150.160225][ T6454] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.181'. [ 150.416147][ T6437] tipc: Disabling bearer [ 150.700279][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.048839][ T6470] syzkaller0: entered promiscuous mode [ 151.048874][ T6470] syzkaller0: entered allmulticast mode [ 151.742606][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.986165][ T6507] netlink: 212172 bytes leftover after parsing attributes in process `syz.1.195'. [ 152.439587][ T6514] tipc: Started in network mode [ 152.439620][ T6514] tipc: Node identity 022d561b02e1, cluster identity 4711 [ 152.440096][ T6514] tipc: Enabled bearer , priority 0 [ 152.442838][ T6517] syzkaller0: entered promiscuous mode [ 152.442870][ T6517] syzkaller0: entered allmulticast mode [ 152.713213][ T6514] tipc: Resetting bearer [ 152.769688][ T6304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.945123][ T6536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.205'. [ 153.015086][ T6511] tipc: Resetting bearer [ 153.033859][ T6536] netlink: 'syz.0.205': attribute type 11 has an invalid length. [ 153.145783][ T6511] tipc: Disabling bearer [ 153.174853][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.183543][ T5841] Bluetooth: hci4: link tx timeout [ 153.183807][ T5841] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.191897][ T59] Bluetooth: hci4: link tx timeout [ 153.191916][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.192043][ T59] Bluetooth: hci4: link tx timeout [ 153.192053][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.192172][ T59] Bluetooth: hci4: link tx timeout [ 153.192182][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.192298][ T59] Bluetooth: hci4: link tx timeout [ 153.192308][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.192425][ T59] Bluetooth: hci4: link tx timeout [ 153.192435][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.192551][ T59] Bluetooth: hci4: link tx timeout [ 153.192562][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.192800][ T59] Bluetooth: hci4: link tx timeout [ 153.192811][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.192944][ T59] Bluetooth: hci4: link tx timeout [ 153.192955][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.193074][ T59] Bluetooth: hci4: link tx timeout [ 153.193084][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.193200][ T59] Bluetooth: hci4: link tx timeout [ 153.193210][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.193491][ T59] Bluetooth: hci4: link tx timeout [ 153.193502][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.193629][ T59] Bluetooth: hci4: link tx timeout [ 153.193639][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.193757][ T59] Bluetooth: hci4: link tx timeout [ 153.193767][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.203778][ T59] Bluetooth: hci4: link tx timeout [ 153.203797][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.204891][ T59] Bluetooth: hci4: link tx timeout [ 153.204904][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.205125][ T59] Bluetooth: hci4: link tx timeout [ 153.205138][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.207033][ T59] Bluetooth: hci4: link tx timeout [ 153.207046][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.207170][ T59] Bluetooth: hci4: link tx timeout [ 153.207180][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.207486][ T59] Bluetooth: hci4: link tx timeout [ 153.207497][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.207629][ T59] Bluetooth: hci4: link tx timeout [ 153.207639][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.207765][ T59] Bluetooth: hci4: link tx timeout [ 153.207775][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.211244][ T59] Bluetooth: hci4: link tx timeout [ 153.211260][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.215283][ T59] Bluetooth: hci4: link tx timeout [ 153.215301][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.215460][ T59] Bluetooth: hci4: link tx timeout [ 153.215472][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.215699][ T59] Bluetooth: hci4: link tx timeout [ 153.215709][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.215968][ T59] Bluetooth: hci4: link tx timeout [ 153.215980][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.216172][ T59] Bluetooth: hci4: link tx timeout [ 153.216182][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.216300][ T59] Bluetooth: hci4: link tx timeout [ 153.216310][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.219065][ T59] Bluetooth: hci4: link tx timeout [ 153.219079][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.236966][ T59] Bluetooth: hci4: link tx timeout [ 153.236988][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.237133][ T59] Bluetooth: hci4: link tx timeout [ 153.237144][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.250699][ T59] Bluetooth: hci4: link tx timeout [ 153.250719][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.250853][ T59] Bluetooth: hci4: link tx timeout [ 153.250863][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.251094][ T59] Bluetooth: hci4: link tx timeout [ 153.251105][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.251252][ T59] Bluetooth: hci4: link tx timeout [ 153.251262][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.253069][ T59] Bluetooth: hci4: link tx timeout [ 153.253082][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.253210][ T59] Bluetooth: hci4: link tx timeout [ 153.253220][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.253338][ T59] Bluetooth: hci4: link tx timeout [ 153.253348][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.253465][ T59] Bluetooth: hci4: link tx timeout [ 153.253475][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.253604][ T59] Bluetooth: hci4: link tx timeout [ 153.253614][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.254253][ T59] Bluetooth: hci4: link tx timeout [ 153.254264][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.254382][ T59] Bluetooth: hci4: link tx timeout [ 153.254392][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.255413][ T59] Bluetooth: hci4: link tx timeout [ 153.255424][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.255552][ T59] Bluetooth: hci4: link tx timeout [ 153.255562][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.255683][ T59] Bluetooth: hci4: link tx timeout [ 153.255693][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.255810][ T59] Bluetooth: hci4: link tx timeout [ 153.255820][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.256535][ T59] Bluetooth: hci4: link tx timeout [ 153.256546][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.256697][ T59] Bluetooth: hci4: link tx timeout [ 153.256708][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.268018][ T59] Bluetooth: hci4: link tx timeout [ 153.268037][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.268176][ T59] Bluetooth: hci4: link tx timeout [ 153.268188][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.268311][ T59] Bluetooth: hci4: link tx timeout [ 153.268321][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.268441][ T59] Bluetooth: hci4: link tx timeout [ 153.268451][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.269136][ T59] Bluetooth: hci4: link tx timeout [ 153.269148][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.282548][ T59] Bluetooth: hci4: link tx timeout [ 153.282566][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.283434][ T59] Bluetooth: hci4: link tx timeout [ 153.283447][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.283653][ T59] Bluetooth: hci4: link tx timeout [ 153.283664][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.283783][ T59] Bluetooth: hci4: link tx timeout [ 153.283793][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.283919][ T59] Bluetooth: hci4: link tx timeout [ 153.283929][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.284051][ T59] Bluetooth: hci4: link tx timeout [ 153.284061][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.284182][ T59] Bluetooth: hci4: link tx timeout [ 153.284192][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.284311][ T59] Bluetooth: hci4: link tx timeout [ 153.284321][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.287692][ T59] Bluetooth: hci4: link tx timeout [ 153.287709][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.287831][ T59] Bluetooth: hci4: link tx timeout [ 153.287841][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.287970][ T59] Bluetooth: hci4: link tx timeout [ 153.287981][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.288228][ T59] Bluetooth: hci4: link tx timeout [ 153.288239][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.288358][ T59] Bluetooth: hci4: link tx timeout [ 153.288369][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.288489][ T59] Bluetooth: hci4: link tx timeout [ 153.288499][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.288673][ T59] Bluetooth: hci4: link tx timeout [ 153.288684][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.292977][ T59] Bluetooth: hci4: link tx timeout [ 153.292993][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.293117][ T59] Bluetooth: hci4: link tx timeout [ 153.293128][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.294848][ T59] Bluetooth: hci4: link tx timeout [ 153.294860][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.295105][ T59] Bluetooth: hci4: link tx timeout [ 153.295116][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.295238][ T59] Bluetooth: hci4: link tx timeout [ 153.295256][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.295376][ T59] Bluetooth: hci4: link tx timeout [ 153.295386][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.295677][ T59] Bluetooth: hci4: link tx timeout [ 153.295688][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.298681][ T59] Bluetooth: hci4: link tx timeout [ 153.298705][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.298826][ T59] Bluetooth: hci4: link tx timeout [ 153.298837][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.298974][ T59] Bluetooth: hci4: link tx timeout [ 153.298984][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.299102][ T59] Bluetooth: hci4: link tx timeout [ 153.299112][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.299823][ T59] Bluetooth: hci4: link tx timeout [ 153.299836][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.303049][ T59] Bluetooth: hci4: link tx timeout [ 153.303063][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.305454][ T59] Bluetooth: hci4: link tx timeout [ 153.305467][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.305594][ T59] Bluetooth: hci4: link tx timeout [ 153.305604][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.305733][ T59] Bluetooth: hci4: link tx timeout [ 153.305744][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.305862][ T59] Bluetooth: hci4: link tx timeout [ 153.305872][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.306017][ T59] Bluetooth: hci4: link tx timeout [ 153.306027][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.306144][ T59] Bluetooth: hci4: link tx timeout [ 153.306154][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.306991][ T59] Bluetooth: hci4: link tx timeout [ 153.307002][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.307933][ T59] Bluetooth: hci4: link tx timeout [ 153.307944][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.308061][ T59] Bluetooth: hci4: link tx timeout [ 153.308071][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.308978][ T59] Bluetooth: hci4: link tx timeout [ 153.308989][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.309107][ T59] Bluetooth: hci4: link tx timeout [ 153.309117][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.310113][ T59] Bluetooth: hci4: link tx timeout [ 153.310126][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.310356][ T59] Bluetooth: hci4: link tx timeout [ 153.310366][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.316706][ T59] Bluetooth: hci4: link tx timeout [ 153.316722][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.316957][ T59] Bluetooth: hci4: link tx timeout [ 153.316968][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.317088][ T59] Bluetooth: hci4: link tx timeout [ 153.317098][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.317978][ T59] Bluetooth: hci4: link tx timeout [ 153.317989][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.318093][ T59] Bluetooth: hci4: link tx timeout [ 153.318103][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.318805][ T59] Bluetooth: hci4: link tx timeout [ 153.318816][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.318941][ T59] Bluetooth: hci4: link tx timeout [ 153.318951][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.320752][ T59] Bluetooth: hci4: link tx timeout [ 153.320766][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.322288][ T59] Bluetooth: hci4: link tx timeout [ 153.322300][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.322419][ T59] Bluetooth: hci4: link tx timeout [ 153.322429][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.322548][ T59] Bluetooth: hci4: link tx timeout [ 153.322558][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.322675][ T59] Bluetooth: hci4: link tx timeout [ 153.322685][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.323085][ T59] Bluetooth: hci4: link tx timeout [ 153.323096][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.323402][ T59] Bluetooth: hci4: link tx timeout [ 153.323413][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.325378][ T59] Bluetooth: hci4: link tx timeout [ 153.325390][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.326440][ T59] Bluetooth: hci4: link tx timeout [ 153.326452][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.326593][ T59] Bluetooth: hci4: link tx timeout [ 153.326604][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.326819][ T59] Bluetooth: hci4: link tx timeout [ 153.326830][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.328164][ T59] Bluetooth: hci4: link tx timeout [ 153.328176][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.328299][ T59] Bluetooth: hci4: link tx timeout [ 153.328309][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.329069][ T59] Bluetooth: hci4: link tx timeout [ 153.329080][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.330875][ T59] Bluetooth: hci4: link tx timeout [ 153.330901][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.331138][ T59] Bluetooth: hci4: link tx timeout [ 153.331149][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.332087][ T59] Bluetooth: hci4: link tx timeout [ 153.332099][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.333349][ T59] Bluetooth: hci4: link tx timeout [ 153.333361][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.333500][ T59] Bluetooth: hci4: link tx timeout [ 153.333511][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.337789][ T59] Bluetooth: hci4: link tx timeout [ 153.337802][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.337938][ T59] Bluetooth: hci4: link tx timeout [ 153.337948][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.338910][ T59] Bluetooth: hci4: link tx timeout [ 153.338922][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.339092][ T59] Bluetooth: hci4: link tx timeout [ 153.339103][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.339740][ T59] Bluetooth: hci4: link tx timeout [ 153.339752][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.342215][ T59] Bluetooth: hci4: link tx timeout [ 153.342227][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.342379][ T59] Bluetooth: hci4: link tx timeout [ 153.342389][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.342606][ T59] Bluetooth: hci4: link tx timeout [ 153.342617][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.342736][ T59] Bluetooth: hci4: link tx timeout [ 153.342746][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.343524][ T59] Bluetooth: hci4: link tx timeout [ 153.343535][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.343859][ T59] Bluetooth: hci4: link tx timeout [ 153.343871][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.345644][ T59] Bluetooth: hci4: link tx timeout [ 153.345656][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.346783][ T59] Bluetooth: hci4: link tx timeout [ 153.346794][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.347182][ T59] Bluetooth: hci4: link tx timeout [ 153.347193][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.347970][ T59] Bluetooth: hci4: link tx timeout [ 153.347982][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.349072][ T59] Bluetooth: hci4: link tx timeout [ 153.349084][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.350230][ T59] Bluetooth: hci4: link tx timeout [ 153.350243][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.350662][ T59] Bluetooth: hci4: link tx timeout [ 153.350673][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.354740][ T59] Bluetooth: hci4: link tx timeout [ 153.354753][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.354859][ T59] Bluetooth: hci4: link tx timeout [ 153.354869][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.355079][ T59] Bluetooth: hci4: link tx timeout [ 153.355090][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.355209][ T59] Bluetooth: hci4: link tx timeout [ 153.355277][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.355961][ T59] Bluetooth: hci4: link tx timeout [ 153.355973][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.357095][ T59] Bluetooth: hci4: link tx timeout [ 153.357107][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.361446][ T59] Bluetooth: hci4: link tx timeout [ 153.361461][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.362912][ T59] Bluetooth: hci4: link tx timeout [ 153.362925][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.363046][ T59] Bluetooth: hci4: link tx timeout [ 153.363056][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.364095][ T59] Bluetooth: hci4: link tx timeout [ 153.364107][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.365149][ T59] Bluetooth: hci4: link tx timeout [ 153.365160][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.365327][ T59] Bluetooth: hci4: link tx timeout [ 153.365337][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.365455][ T59] Bluetooth: hci4: link tx timeout [ 153.365465][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.368552][ T59] Bluetooth: hci4: link tx timeout [ 153.368565][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.373431][ T59] Bluetooth: hci4: link tx timeout [ 153.373448][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.374195][ T59] Bluetooth: hci4: link tx timeout [ 153.374206][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.376725][ T59] Bluetooth: hci4: link tx timeout [ 153.376738][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.380886][ T59] Bluetooth: hci4: link tx timeout [ 153.380901][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.383237][ T59] Bluetooth: hci4: link tx timeout [ 153.383249][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.384434][ T59] Bluetooth: hci4: link tx timeout [ 153.384446][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.384605][ T59] Bluetooth: hci4: link tx timeout [ 153.384616][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.388955][ T59] Bluetooth: hci4: link tx timeout [ 153.388969][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.397577][ T59] Bluetooth: hci4: link tx timeout [ 153.397599][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.397727][ T59] Bluetooth: hci4: link tx timeout [ 153.397741][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.398455][ T59] Bluetooth: hci4: link tx timeout [ 153.398469][ T59] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.571889][ T5919] tipc: Node number set to 13391387 [ 153.689669][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.819754][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.293684][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.295264][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.849788][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.252063][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 155.424727][ T6562] netlink: 212172 bytes leftover after parsing attributes in process `syz.0.206'. [ 155.903373][ T6304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.149828][ T6578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.211'. [ 156.149859][ T6578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.211'. [ 156.929959][ T991] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.212084][ T6610] netlink: 212172 bytes leftover after parsing attributes in process `syz.0.219'. [ 157.329593][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.539588][ T6618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.223'. [ 157.539621][ T6618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.223'. [ 157.969911][ T6304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.868657][ T6640] syzkaller0: entered promiscuous mode [ 158.868692][ T6640] syzkaller0: entered allmulticast mode [ 158.932603][ T6650] Bluetooth: MGMT ver 1.23 [ 159.009789][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.051765][ T6304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.369721][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.012908][ T5841] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 161.014390][ T5841] Bluetooth: hci2: command 0x0401 tx timeout [ 161.089877][ T6304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.129650][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.169990][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.409763][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.893114][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.899199][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.212254][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.251102][ T6304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.289670][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.449702][ T5919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.330077][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.370853][ T6304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.409709][ T6304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.489843][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.449909][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.051432][ T6662] netlink: 28 bytes leftover after parsing attributes in process `syz.4.235'. [ 171.051461][ T6662] netlink: 28 bytes leftover after parsing attributes in process `syz.4.235'. [ 171.415358][ T6717] netlink: 24 bytes leftover after parsing attributes in process `syz.3.246'. [ 171.491429][ T6304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.658834][ T6722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.662800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.119366][ T6734] netlink: 212172 bytes leftover after parsing attributes in process `syz.1.254'. [ 172.426382][ T6743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.434646][ T6738] syz.2.257 (6738) used greatest stack depth: 18968 bytes left [ 172.463244][ T6743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.464417][ T6743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.465476][ T6743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.467747][ T6743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.501635][ T6743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.533026][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.976553][ T6759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.266'. [ 173.052511][ T6759] vlan2: entered promiscuous mode [ 173.052536][ T6759] team0: entered promiscuous mode [ 173.052548][ T6759] team_slave_0: entered promiscuous mode [ 173.052839][ T6759] team_slave_1: entered promiscuous mode [ 174.057089][ T6780] netlink: 24 bytes leftover after parsing attributes in process `syz.3.274'. [ 174.153356][ T6780] netlink: 'syz.3.274': attribute type 11 has an invalid length. [ 174.434882][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.278'. [ 175.073272][ T6809] team_slave_0: entered promiscuous mode [ 175.073346][ T6809] team_slave_1: entered promiscuous mode [ 175.078681][ T6809] vlan2: entered promiscuous mode [ 175.078707][ T6809] team0: entered promiscuous mode [ 175.322285][ T6818] netlink: 'syz.0.288': attribute type 9 has an invalid length. [ 175.322311][ T6818] netlink: 212164 bytes leftover after parsing attributes in process `syz.0.288'. [ 175.587491][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'. [ 175.746511][ T6823] bond_slave_0: entered promiscuous mode [ 175.746569][ T6823] bond_slave_1: entered promiscuous mode [ 175.748769][ T6823] macvtap1: entered promiscuous mode [ 175.748792][ T6823] bond0: entered promiscuous mode [ 175.752303][ T6823] macvtap1: entered allmulticast mode [ 175.752323][ T6823] bond0: entered allmulticast mode [ 175.752335][ T6823] bond_slave_0: entered allmulticast mode [ 175.752355][ T6823] bond_slave_1: entered allmulticast mode [ 175.777771][ T6823] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 176.690913][ T6304] net_ratelimit: 16 callbacks suppressed [ 176.690932][ T6304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.750530][ T6851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.300'. [ 176.968263][ T6851] vlan2: entered promiscuous mode [ 177.620074][ T6872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.312'. [ 177.623668][ T6874] siw: device registration error -23 [ 177.732349][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.972803][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.276765][ T6895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.611367][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.611553][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.770063][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.304090][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.627823][ T6926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.333'. [ 179.809754][ T5912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.990440][ T6935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.204625][ T6943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.341'. [ 180.599599][ T6959] netlink: 24 bytes leftover after parsing attributes in process `syz.0.348'. [ 180.920158][ T6965] netlink: 'syz.1.349': attribute type 4 has an invalid length. [ 181.324328][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.353'. [ 181.439777][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.354'. [ 181.503257][ T6973] bond_slave_0: entered promiscuous mode [ 181.503338][ T6973] bond_slave_1: entered promiscuous mode [ 181.503713][ T6973] macvtap1: entered promiscuous mode [ 181.503729][ T6973] bond0: entered promiscuous mode [ 181.504641][ T6973] macvtap1: entered allmulticast mode [ 181.504658][ T6973] bond0: entered allmulticast mode [ 181.504670][ T6973] bond_slave_0: entered allmulticast mode [ 181.504693][ T6973] bond_slave_1: entered allmulticast mode [ 181.506770][ T6973] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 181.631797][ T6974] bond0: left allmulticast mode [ 181.631823][ T6974] bond_slave_0: left allmulticast mode [ 181.631848][ T6974] bond_slave_1: left allmulticast mode [ 181.631902][ T6974] bond0: left promiscuous mode [ 181.632831][ T6974] bond_slave_0: left promiscuous mode [ 181.632916][ T6974] bond_slave_1: left promiscuous mode [ 181.774220][ T6979] tipc: Enabled bearer , priority 0 [ 181.830825][ T6976] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 181.895794][ T6979] tipc: Resetting bearer [ 182.016819][ T991] IPVS: starting estimator thread 0... [ 182.030555][ T6985] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 182.119910][ T6986] IPVS: using max 7 ests per chain, 16800 per kthread [ 182.140361][ T6975] tipc: Disabling bearer [ 182.222604][ T6988] netlink: 'syz.2.359': attribute type 1 has an invalid length. [ 182.239589][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'. [ 182.528092][ T6988] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.532476][ T6993] nlmon0: Master is either lo or non-ether device [ 182.606987][ T6992] bond1: (slave gretap1): making interface the new active one [ 182.634911][ T6992] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 182.728183][ T6990] lo speed is unknown, defaulting to 1000 [ 182.882438][ T7002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.363'. [ 182.903751][ T7002] vlan2: entered promiscuous mode [ 182.903773][ T7002] team0: entered promiscuous mode [ 182.903784][ T7002] team_slave_0: entered promiscuous mode [ 182.904091][ T7002] team_slave_1: entered promiscuous mode [ 182.998381][ T6992] syz.2.359 (6992) used greatest stack depth: 18552 bytes left [ 183.189755][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'. [ 183.191712][ T7008] tipc: Started in network mode [ 183.191743][ T7008] tipc: Node identity 76f9abb28f5c, cluster identity 4711 [ 183.191989][ T7008] tipc: Enabled bearer , priority 0 [ 183.233587][ T7010] syzkaller0: entered promiscuous mode [ 183.233622][ T7010] syzkaller0: entered allmulticast mode [ 183.315423][ T7004] tipc: Resetting bearer [ 183.660691][ T7003] tipc: Resetting bearer [ 183.782960][ T7003] tipc: Disabling bearer [ 184.484459][ T7027] tipc: Enabled bearer , priority 0 [ 184.489969][ T7027] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 184.542938][ T7027] tipc: Resetting bearer [ 184.553029][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 184.725394][ T7025] tipc: Disabling bearer [ 184.926192][ T7031] nlmon0: Master is either lo or non-ether device [ 184.956741][ T7018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.309857][ T7041] team0: Device macvtap1 is already an upper device of the team interface [ 186.008665][ T7066] tipc: Enabled bearer , priority 0 [ 186.059289][ T7066] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 186.097870][ T7066] tipc: Resetting bearer [ 186.324735][ T7065] tipc: Disabling bearer [ 186.470895][ T7071] netlink: 44 bytes leftover after parsing attributes in process `syz.4.388'. [ 186.470933][ T7071] netlink: 44 bytes leftover after parsing attributes in process `syz.4.388'. [ 186.477110][ T7071] net_ratelimit: 1 callbacks suppressed [ 186.477132][ T7071] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 186.811958][ T7077] openvswitch: netlink: Flow actions attr not present in new flow. [ 187.558604][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.403'. [ 187.852822][ T7114] openvswitch: netlink: Flow actions attr not present in new flow. [ 187.939948][ T7088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.266650][ T7123] siw: device registration error -23 [ 188.742294][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.417'. [ 188.800651][ T7138] openvswitch: netlink: Flow actions attr not present in new flow. [ 188.972050][ T7146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.421'. [ 189.440763][ T7164] siw: device registration error -23 [ 189.746331][ T7176] openvswitch: netlink: Message has 8 unknown bytes. [ 189.746372][ T7176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.805304][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.434'. [ 190.462420][ T7168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.775996][ T7213] siw: device registration error -23 [ 190.891485][ T7217] openvswitch: netlink: Message has 8 unknown bytes. [ 190.891525][ T7217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.650408][ T7246] siw: device registration error -23 [ 191.774841][ T7253] openvswitch: netlink: Message has 8 unknown bytes. [ 191.774985][ T7253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.964403][ T7255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 192.146808][ T7263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.465'. [ 192.199669][ T7257] netlink: 96 bytes leftover after parsing attributes in process `syz.3.461'. [ 192.940137][ T7293] netlink: 96 bytes leftover after parsing attributes in process `syz.3.476'. [ 193.089843][ T5841] Bluetooth: hci2: command 0x0401 tx timeout [ 193.090060][ T59] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 193.275702][ T7270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.651034][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.481'. [ 193.852905][ T7321] netlink: 44 bytes leftover after parsing attributes in process `syz.4.485'. [ 193.852946][ T7321] netlink: 44 bytes leftover after parsing attributes in process `syz.4.485'. [ 193.853518][ T7321] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 193.867531][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'. [ 193.886701][ T7323] bond_slave_0: entered promiscuous mode [ 193.886759][ T7323] bond_slave_1: entered promiscuous mode [ 193.887068][ T7323] macvtap1: entered promiscuous mode [ 193.887080][ T7323] bond0: entered promiscuous mode [ 193.887787][ T7323] macvtap1: entered allmulticast mode [ 193.887800][ T7323] bond0: entered allmulticast mode [ 193.887810][ T7323] bond_slave_0: entered allmulticast mode [ 193.887829][ T7323] bond_slave_1: entered allmulticast mode [ 193.895637][ T7323] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 194.025059][ T7323] bond0: left allmulticast mode [ 194.025085][ T7323] bond_slave_0: left allmulticast mode [ 194.025109][ T7323] bond_slave_1: left allmulticast mode [ 194.025164][ T7323] bond0: left promiscuous mode [ 194.026022][ T7323] bond_slave_0: left promiscuous mode [ 194.026107][ T7323] bond_slave_1: left promiscuous mode [ 194.442547][ T7331] netlink: 96 bytes leftover after parsing attributes in process `syz.4.488'. [ 194.626365][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.843840][ T7344] netlink: 240 bytes leftover after parsing attributes in process `syz.4.492'. [ 195.213546][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.499'. [ 195.479630][ T7373] netlink: 36 bytes leftover after parsing attributes in process `syz.1.502'. [ 195.597068][ T7374] lo speed is unknown, defaulting to 1000 [ 195.930506][ T7361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.958455][ T7386] netlink: 24 bytes leftover after parsing attributes in process `syz.4.506'. [ 196.189136][ T7388] netlink: 'syz.1.507': attribute type 13 has an invalid length. [ 197.848463][ T7414] vlan2: entered promiscuous mode [ 199.432006][ T7440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.442746][ T7471] netlink: 'syz.2.531': attribute type 1 has an invalid length. [ 199.442770][ T7471] netlink: 236 bytes leftover after parsing attributes in process `syz.2.531'. [ 199.507174][ T7469] team_slave_0: entered promiscuous mode [ 199.507239][ T7469] team_slave_1: entered promiscuous mode [ 199.507407][ T7469] vlan2: entered promiscuous mode [ 199.507420][ T7469] team0: entered promiscuous mode [ 201.193697][ T7522] netlink: 'syz.1.551': attribute type 1 has an invalid length. [ 201.193723][ T7522] netlink: 236 bytes leftover after parsing attributes in process `syz.1.551'. [ 201.528508][ T7530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.055895][ T7523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.233685][ T7552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.564'. [ 202.278488][ T7553] netlink: 3 bytes leftover after parsing attributes in process `syz.3.562'. [ 202.852606][ T7553] batadv1: entered promiscuous mode [ 202.852638][ T7553] batadv1: entered allmulticast mode [ 203.240641][ T7563] tipc: Can't bind to reserved service type 2 [ 203.244888][ T7570] netlink: 324 bytes leftover after parsing attributes in process `syz.1.568'. [ 203.455720][ T7574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.569'. [ 203.455752][ T7574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.569'. [ 203.601167][ T7581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.647972][ T7585] netlink: 'syz.4.571': attribute type 1 has an invalid length. [ 203.647995][ T7585] netlink: 236 bytes leftover after parsing attributes in process `syz.4.571'. [ 204.295730][ T7596] syzkaller0: entered promiscuous mode [ 204.295768][ T7596] syzkaller0: entered allmulticast mode [ 204.429138][ T7583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.757550][ T7612] [ 204.757561][ T7612] ====================================================== [ 204.757565][ T7612] WARNING: possible circular locking dependency detected [ 204.757571][ T7612] syzkaller #0 Not tainted [ 204.757578][ T7612] ------------------------------------------------------ [ 204.757582][ T7612] syz.4.583/7612 is trying to acquire lock: [ 204.757589][ T7612] ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 204.757626][ T7612] [ 204.757626][ T7612] but task is already holding lock: [ 204.757630][ T7612] ffffffff8efa7168 (smc_v4_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 204.757657][ T7612] [ 204.757657][ T7612] which lock already depends on the new lock. [ 204.757657][ T7612] [ 204.757661][ T7612] [ 204.757661][ T7612] the existing dependency chain (in reverse order) is: [ 204.757665][ T7612] [ 204.757665][ T7612] -> #1 (smc_v4_hashinfo.lock){++.+}-{3:3}: [ 204.757681][ T7612] lock_acquire+0x120/0x360 [ 204.757695][ T7612] rt_write_lock+0x6a/0x110 [ 204.757706][ T7612] smc_hash_sk+0x8f/0x2a0 [ 204.757717][ T7612] smc_sk_init+0x5a1/0x7f0 [ 204.757728][ T7612] __smc_create+0x10d/0x280 [ 204.757740][ T7612] __sock_create+0x4b0/0x9f0 [ 204.757753][ T7612] __sys_socket+0xd7/0x1b0 [ 204.757763][ T7612] __x64_sys_socket+0x7a/0x90 [ 204.757773][ T7612] do_syscall_64+0xfa/0x3b0 [ 204.757787][ T7612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.757796][ T7612] [ 204.757796][ T7612] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 204.757810][ T7612] validate_chain+0xb9b/0x2140 [ 204.757833][ T7612] __lock_acquire+0xab9/0xd20 [ 204.757845][ T7612] reacquire_held_locks+0x127/0x1d0 [ 204.757860][ T7612] lock_release+0x1b4/0x3e0 [ 204.757872][ T7612] __local_bh_enable_ip+0x10c/0x270 [ 204.757884][ T7612] sock_i_ino+0xa9/0xc0 [ 204.757897][ T7612] smc_diag_dump_proto+0xa4c/0x1fb0 [ 204.757909][ T7612] smc_diag_dump+0x27/0xa0 [ 204.757920][ T7612] netlink_dump+0x6e1/0xe90 [ 204.757932][ T7612] __netlink_dump_start+0x5cb/0x7e0 [ 204.757944][ T7612] smc_diag_handler_dump+0x178/0x210 [ 204.757955][ T7612] sock_diag_rcv_msg+0x4cc/0x600 [ 204.757966][ T7612] netlink_rcv_skb+0x208/0x470 [ 204.757977][ T7612] netlink_unicast+0x846/0xa10 [ 204.757987][ T7612] netlink_sendmsg+0x805/0xb30 [ 204.757999][ T7612] __sock_sendmsg+0x21c/0x270 [ 204.758009][ T7612] ____sys_sendmsg+0x508/0x820 [ 204.758022][ T7612] ___sys_sendmsg+0x21f/0x2a0 [ 204.758034][ T7612] __x64_sys_sendmsg+0x1a1/0x260 [ 204.758047][ T7612] do_syscall_64+0xfa/0x3b0 [ 204.758059][ T7612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.758069][ T7612] [ 204.758069][ T7612] other info that might help us debug this: [ 204.758069][ T7612] [ 204.758072][ T7612] Possible unsafe locking scenario: [ 204.758072][ T7612] [ 204.758075][ T7612] CPU0 CPU1 [ 204.758078][ T7612] ---- ---- [ 204.758081][ T7612] rlock(smc_v4_hashinfo.lock); [ 204.758089][ T7612] lock((softirq_ctrl.lock)); [ 204.758097][ T7612] lock(smc_v4_hashinfo.lock); [ 204.758104][ T7612] lock((softirq_ctrl.lock)); [ 204.758111][ T7612] [ 204.758111][ T7612] *** DEADLOCK *** [ 204.758111][ T7612] [ 204.758114][ T7612] 3 locks held by syz.4.583/7612: [ 204.758121][ T7612] #0: ffff88805bffa908 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 204.758147][ T7612] #1: ffffffff8efa7168 (smc_v4_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 204.758230][ T7612] #2: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x1f8/0x360 [ 204.758277][ T7612] [ 204.758277][ T7612] stack backtrace: [ 204.758288][ T7612] CPU: 1 UID: 0 PID: 7612 Comm: syz.4.583 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 204.758310][ T7612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.758321][ T7612] Call Trace: [ 204.758328][ T7612] [ 204.758333][ T7612] dump_stack_lvl+0x189/0x250 [ 204.758350][ T7612] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.758364][ T7612] ? __pfx__printk+0x10/0x10 [ 204.758379][ T7612] ? print_lock_name+0xde/0x100 [ 204.758393][ T7612] print_circular_bug+0x2ee/0x310 [ 204.758407][ T7612] check_noncircular+0x134/0x160 [ 204.758437][ T7612] validate_chain+0xb9b/0x2140 [ 204.758456][ T7612] ? validate_chain+0x897/0x2140 [ 204.758476][ T7612] __lock_acquire+0xab9/0xd20 [ 204.758492][ T7612] reacquire_held_locks+0x127/0x1d0 [ 204.758507][ T7612] ? __local_bh_disable_ip+0x264/0x400 [ 204.758522][ T7612] lock_release+0x1b4/0x3e0 [ 204.758535][ T7612] ? __local_bh_enable_ip+0x100/0x270 [ 204.758549][ T7612] __local_bh_enable_ip+0x10c/0x270 [ 204.758562][ T7612] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 204.758577][ T7612] ? rt_read_unlock+0x65/0xa0 [ 204.758589][ T7612] ? sock_i_ino+0x24/0xc0 [ 204.758604][ T7612] sock_i_ino+0xa9/0xc0 [ 204.758618][ T7612] smc_diag_dump_proto+0xa4c/0x1fb0 [ 204.758636][ T7612] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 204.758648][ T7612] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 204.758665][ T7612] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 204.758682][ T7612] ? __phys_addr+0xd3/0x180 [ 204.758696][ T7612] ? __kasan_kmalloc_large+0x85/0xa0 [ 204.758710][ T7612] ? rcu_is_watching+0x15/0xb0 [ 204.758725][ T7612] ? rcu_is_watching+0x15/0xb0 [ 204.758739][ T7612] ? trace_kmalloc+0x1f/0xd0 [ 204.758752][ T7612] ? __kmalloc_node_track_caller_noprof+0x213/0x450 [ 204.758768][ T7612] ? __build_skb_around+0x257/0x3e0 [ 204.758782][ T7612] smc_diag_dump+0x27/0xa0 [ 204.758794][ T7612] netlink_dump+0x6e1/0xe90 [ 204.758809][ T7612] ? __pfx_netlink_dump+0x10/0x10 [ 204.758820][ T7612] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 204.758833][ T7612] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.758852][ T7612] __netlink_dump_start+0x5cb/0x7e0 [ 204.758865][ T7612] smc_diag_handler_dump+0x178/0x210 [ 204.758878][ T7612] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 204.758890][ T7612] ? __pfx_smc_diag_dump+0x10/0x10 [ 204.758902][ T7612] ? sock_diag_lock_handler+0x19/0x290 [ 204.758913][ T7612] ? sock_diag_lock_handler+0x19/0x290 [ 204.758926][ T7612] sock_diag_rcv_msg+0x4cc/0x600 [ 204.758939][ T7612] netlink_rcv_skb+0x208/0x470 [ 204.758951][ T7612] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 204.758963][ T7612] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 204.758978][ T7612] ? netlink_deliver_tap+0x2e/0x1b0 [ 204.758992][ T7612] netlink_unicast+0x846/0xa10 [ 204.759005][ T7612] ? __pfx_netlink_unicast+0x10/0x10 [ 204.759016][ T7612] ? netlink_sendmsg+0x642/0xb30 [ 204.759028][ T7612] ? skb_put+0x11b/0x210 [ 204.759041][ T7612] netlink_sendmsg+0x805/0xb30 [ 204.759056][ T7612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.759070][ T7612] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 204.759081][ T7612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.759093][ T7612] __sock_sendmsg+0x21c/0x270 [ 204.759105][ T7612] ____sys_sendmsg+0x508/0x820 [ 204.759121][ T7612] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.759137][ T7612] ? import_iovec+0x74/0xa0 [ 204.759151][ T7612] ___sys_sendmsg+0x21f/0x2a0 [ 204.759173][ T7612] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.759197][ T7612] ? __fget_files+0x2a/0x420 [ 204.759221][ T7612] ? __fget_files+0x3a6/0x420 [ 204.759248][ T7612] __x64_sys_sendmsg+0x1a1/0x260 [ 204.759275][ T7612] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 204.759308][ T7612] ? do_syscall_64+0xbe/0x3b0 [ 204.759334][ T7612] do_syscall_64+0xfa/0x3b0 [ 204.759357][ T7612] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.759381][ T7612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.759400][ T7612] ? clear_bhb_loop+0x60/0xb0 [ 204.759420][ T7612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.759437][ T7612] RIP: 0033:0x7fd0479febe9 [ 204.759456][ T7612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.759470][ T7612] RSP: 002b:00007fd045c66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.759483][ T7612] RAX: ffffffffffffffda RBX: 00007fd047c35fa0 RCX: 00007fd0479febe9 [ 204.759491][ T7612] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000004 [ 204.759499][ T7612] RBP: 00007fd047a81e19 R08: 0000000000000000 R09: 0000000000000000 [ 204.759506][ T7612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.759512][ T7612] R13: 00007fd047c36038 R14: 00007fd047c35fa0 R15: 00007ffc77b2a418 [ 204.759525][ T7612] [ 205.249376][ T5841] Bluetooth: hci4: command 0x0406 tx timeout