last executing test programs: 20.543908328s ago: executing program 0 (id=1421): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_ext={0x1c, 0xc, &(0x7f0000000800)=@raw=[@call={0x85, 0x0, 0x0, 0xc6}, @alu={0x4, 0x0, 0x6, 0xb, 0x2, 0x10, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x101}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000780)='syzkaller\x00', 0xaffb, 0x0, 0x0, 0x1f00, 0x61, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000880)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x5, 0x4, 0x3, 0x3}, 0x10, 0x1bb62, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r1, 0xfffffffffffffcac}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0xee) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000d00000000085000000500000009500010000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdb, &(0x7f0000000100)=[{&(0x7f0000000400)=""/247, 0x200105d0}], 0xc}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000400000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="0101020000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r8, @ANYBLOB="67dd3ac88caa84a2"], 0x44}, 0x1, 0xba01}, 0x810) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 19.688794438s ago: executing program 1 (id=1431): writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYRESOCT=r3], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='writeback_sb_inodes_requeue\x00', r0, 0x0, 0x4}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000, 0x0, 0x1}}) r5 = socket(0x1d, 0x2, 0x6) bind$inet(r5, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r7, 0xfffffffc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/16], 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000600)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r9, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0) recvmmsg$unix(r6, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) writev(r1, &(0x7f00000002c0), 0x0) 19.660415384s ago: executing program 4 (id=1432): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x1c, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001000)={r2, 0x1, 0x7, 0x40000000, 0x937, 0x1}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x80000005, 0x3, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r6, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r6, @ANYBLOB="080002005bcecf6111e23863a03e544bf0e6269a11672b7ef43a8e51805a423acf5879f23ac88b7f8a9ca9a3b80b3a2f68738d8a475be13516a8c323780621e631d52a1f9dab5f33b503955fe2eb57c847ae688b51cecff81a6abf467886283284616ace535e63dce57e"], 0x20}}, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x8, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_TIMER_SLACK={0x8, 0xd, 0xfffffffe}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x6, 0x200, 0x2, 0x1}}, {0x4}}]}]}, 0x5c}}, 0x4000010) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}}}, 0x24}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@remote, @in=@broadcast, 0x4e20, 0x6, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x62, r8, r11}, {0x200, 0x8, 0x8b, 0x10000, 0x3, 0x0, 0x5, 0x870}, {0x6, 0x5, 0xfffffffffffffff9, 0x5b}, 0x3, 0x6e6bbf, 0x2, 0x1, 0x2, 0x3}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x34ff, 0x1, 0x2, 0x6, 0xfffff800, 0x3, 0x2b}}, 0xe8) socket$netlink(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006000600800a000008000100", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r13, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="080028bd7000fbdbdf25180000001800308014000400630165f5c7d16cd3260e3f0d829c49f00800e2ff16c093c676dd8a421b6b9219065bf578714f06000000000000002c45cbc8d5e3501ccc7a583a2198a7f036b4e4d90472f15d8e2856dbbca9aa48b3dbf1879f8183c74069353dc311b3fb6b2c45d8ac7b7730b3e4c816511a4a12", @ANYRES32=0x0, @ANYBLOB="0c0006000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 19.365311668s ago: executing program 3 (id=1433): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) (async) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000400)={@broadcast, @empty, 0x1, "7d1f88f80bbe8d286c57f04c843abbec3737db4a9d77a557438242a50a4dad20", 0xaa4, 0x3, 0x3, 0x1}, 0x3c) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000165d5a5e778d8258a000000000a54000000060a09"], 0x7c}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000165d5a5e778d8258a000000000a54000000060a09"], 0x7c}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r9 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xa6, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x70, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1c, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5}, @md5sig={0x13, 0x12, "ca0c73a263a2ef1df706fbd1dd9500"}, @md5sig={0x13, 0x12, "38da0615cb47e300b6c11a585dc53925"}, @md5sig={0x13, 0x12, "2bdd4b74a18800000010000000002000"}, @timestamp={0x8, 0xa}, @generic={0x0, 0xf, "09c910cf857a3cd90dc17ef2a4"}]}}}}}}}}, 0x0) (async) syz_emit_ethernet(0xa6, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x70, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1c, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5}, @md5sig={0x13, 0x12, "ca0c73a263a2ef1df706fbd1dd9500"}, @md5sig={0x13, 0x12, "38da0615cb47e300b6c11a585dc53925"}, @md5sig={0x13, 0x12, "2bdd4b74a18800000010000000002000"}, @timestamp={0x8, 0xa}, @generic={0x0, 0xf, "09c910cf857a3cd90dc17ef2a4"}]}}}}}}}}, 0x0) sendmmsg$inet_sctp(r9, &(0x7f0000000f40)=[{&(0x7f0000000040)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)="1528e3e780", 0x5}], 0x1, &(0x7f0000000200)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x4005}], 0x1, 0x8008) (async) sendmmsg$inet_sctp(r9, &(0x7f0000000f40)=[{&(0x7f0000000040)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)="1528e3e780", 0x5}], 0x1, &(0x7f0000000200)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x4005}], 0x1, 0x8008) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f0000000300)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x3, 'virt_wifi0\x00'}) (async) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f0000000300)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x3, 'virt_wifi0\x00'}) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00@\x00', @ANYRES16=r3, @ANYBLOB="000127bd7000fcdbdf250800000014000980080002000101000008000200ff0700003800058007000100696200000c000280080003000500000007000100696200000c00028008000300010000000c0002800800010000000000100004800900010073797a3100000000"], 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x440c0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x4) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="38000000000b010400000000000000000700000608000240000000040800034000e8ffff110001002e2f6367726f75702f73797a31000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040040}, 0xc0) 19.179382195s ago: executing program 0 (id=1434): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x1) (async) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) ioctl$SIOCAX25OPTRT(r0, 0x89e7, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x2, 0x20}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fddbdf252000000008000300", @ANYRES32=r6, @ANYBLOB="24002d8005000400000000400500010007000000080002000200000011"], 0x40}, 0x1, 0x0, 0x0, 0x20008894}, 0x44010) (async) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, r4, 0x321, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0xa4) (async) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 19.145358043s ago: executing program 0 (id=1435): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x3000000, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x80, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff80, 0x4}, {0x0, 0x2001}}, [@tmpl={0x104, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@local, 0x0, 0x1, 0x3}, {{@in=@multicast2, 0x4d3, 0x2b}, 0x2, @in=@dev, 0xffffffff, 0x1, 0x0, 0x0, 0x3, 0x2}, {{@in=@private=0xa010102, 0x0, 0x6c}, 0x30, @in6=@mcast2, 0x0, 0x4, 0x2, 0x0, 0x0, 0x8eb6}]}]}, 0x1bc}}, 0x0) 19.115822746s ago: executing program 3 (id=1436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000002000000d9bb000085000000b50000009507929dbaffffffff6394acb51a41371b168146ff14fb7d511594bec398fdaafda9526738aca15b498ba19e2bfd472a203850a8dcbe9fc2abaa0ac67500e4e0940316f656746b4ba3d48a02a30fe72cac7ccd8fc5ff29e12696def505ccb720407ecd280e8b17be92102425bda2eabda9e900"/149], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) close(0x3) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000000000dc4db50053000000fbffffff00"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140005"], 0x80}}, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400410000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) 19.008797218s ago: executing program 4 (id=1437): sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="00012abd7000fddbdf250c00000005002f000100000005003000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x1, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'veth0_to_bond\x00', 0xc201}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x34}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x20050800) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 18.940289867s ago: executing program 0 (id=1438): socketpair(0x1e, 0x3, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082bbd7000fedbdf251400000008001200900000000800100001002000050019000000000008000f0000000000050019000000000005000b0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x80c5) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f0000000600)=0x9) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000308010100000000000000000000000006000240000000002c541180"], 0x50}}, 0x0) (async) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="460006800b003c002a2f5e285b0800008e861fdb89ce39db0c3d8d026062e398a919722e80abd90a4e3ef1cfeb910ae9efed3702f067253e9d7137738801c4ca8894486acd670000"], 0x158}], 0x1, 0x0, 0x0, 0x20040814}, 0x4) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r8, 0x0) sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca900"], 0xe0}], 0x1}, 0x40040) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x50, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x2405a050) (async) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r11], 0x1c}}, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0x7, @remote, 0xffff}, 0x1c) write$nci(r5, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) (async) write$nci(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="4002040102cd42dd4e6221b7f0128c9615648f40fe7e5be14fddd5618059c67d6dda2315a511a99f11e7cdd358d92c90f224bee77bbea3a44fd49d1c2cedc62212d6f4028c944c"], 0x7) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) recvmsg$unix(r2, &(0x7f0000000200)={&(0x7f0000000000), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000004840)=""/4105, 0x1009}, {&(0x7f0000000280)=""/144, 0x90}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000000440)=""/109, 0x6d}], 0x4, &(0x7f0000000780)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}, 0x40000000) 18.760596584s ago: executing program 1 (id=1440): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xb0c84a6357b9da4f, &(0x7f0000000000)={@remote, 0x0}, &(0x7f0000000040)=0x14) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1000, 0x5, 0xff, 0x0, 0xffffffffffffffff, 0x40, '\x00', r0, r1, 0x4, 0x2, 0x0, 0xc}, 0x50) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000001c0)={0x1d, 0x4, '\x00', [@ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0xf}, @pad1, @ra={0x5, 0x2, 0x200}, @hao={0xc9, 0x10, @remote}]}, 0x30) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0) (async) getpeername(r3, &(0x7f0000000240)=@alg, &(0x7f00000002c0)=0x80) r4 = accept4$tipc(r2, &(0x7f0000000300)=@id, &(0x7f0000000340)=0x10, 0x800) getsockname$tipc(r4, &(0x7f0000000380)=@name, &(0x7f00000003c0)=0x10) r5 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400)) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000440)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0x7, 0x4e24, 0x0, 0xa, 0x0, 0xc0, 0x11, r0, 0xee00}, {0x9, 0x7, 0x0, 0x5c, 0x8, 0x6, 0x4, 0x5}, {0x5, 0x5, 0xffffffffffffffff, 0x3}, 0x401, 0x6e6bb0, 0x2, 0x0, 0x3, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d5, 0x33}, 0x2, @in=@multicast2, 0x3503, 0x0, 0x2, 0x81, 0x3af, 0xb4, 0xffffffff}}, 0xe8) (async) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000540)={0x0, "e2148b023e57e357c3761d14c02a5862"}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000001540)={{}, {@val={r6}, @actul_num={@void, 0x3, 0x6b}}}) pipe(&(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f0000001600)={0x4, &(0x7f00000015c0)=[{0x4, 0x4f, 0x1, 0x40}, {0xfff, 0x7, 0x0, 0x4}, {0x4, 0xd5, 0x5, 0x5}, {0x4000, 0x4, 0x7, 0xfffff302}]}) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001680), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r9, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x34, r10, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000050}, 0x20008000) r11 = socket(0x6, 0x1, 0x10001) openat$tun(0xffffffffffffff9c, &(0x7f0000001780), 0x80000, 0x0) (async, rerun: 64) write(r1, &(0x7f00000017c0)="139c1b7b238207e32178c7cdeecb424a8f3ecda936a89430847fe7f09d688cdc02d0342b92ab3d23774b941945edea882c669068ddf10559234af66e82d4092bebfbb5936d52", 0x46) (rerun: 64) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), r11) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000018c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000001a40)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001a00)={&(0x7f0000001900)={0xf0, r12, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x7, 0x1b}}}}, [@NL80211_ATTR_TX_RATES={0x80, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x7c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xe265, 0x6, 0x6f, 0xffff, 0x1, 0x40, 0x1]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x3, 0x3}, {0x3, 0xa}, {0x0, 0x7}, {0x7, 0x7}, {0x0, 0x1}, {0x7, 0x6}, {0x2, 0x5}, {0x2, 0x9}, {0x6, 0x4}, {0x4, 0x2}, {0x5}, {0x6, 0x2}, {0x5, 0x2}, {0x5, 0x5}, {}, {0x1, 0x6}, {0x7, 0x6}, {0x4}, {0x0, 0x9}, {0x1}, {0x7, 0x1}, {0x1, 0xa}, {0x3, 0x7}, {0x6, 0xa}, {0x0, 0x9}, {0x6, 0x4}, {0x6, 0x6}, {0x4, 0xa}, {0x4, 0x6}, {0x5, 0x4}, {0x2, 0x4}, {0x7, 0x8}, {0x4, 0x7}, {0x4}, {0x6}, {}, {0x4, 0x5}, {0x7}, {0x3, 0x2}, {0x1, 0x1}, {0x7, 0x2}, {0x4, 0x2}, {0x0, 0xa}, {0x2, 0xa}, {0x3, 0x3}, {0x3, 0x7}, {0x4, 0x3}, {0x0, 0x4}, {0x7, 0x4}, {0x0, 0x2}, {0x1, 0x3}, {0x6}, {0x2, 0x9}, {0x7, 0x9}, {0x1}, {0x0, 0x9}, {0x2, 0x4}, {0x1, 0x8}, {0x2, 0x3}, {0x1, 0x6}, {0x1, 0x9}, {0x4, 0x4}, {0x1, 0x7}, {0x0, 0x2}, {0x0, 0x6}, {0x0, 0x9}, {0x1, 0x3}, {0x1}, {0x1, 0x6}, {0x3, 0x7}, {0x3, 0x6}, {0x1}, {0x3}, {0x7, 0x6}, {0x1}, {0x6, 0x4}, {0x6, 0x1}]}]}]}, @NL80211_ATTR_MESH_SETUP={0x14, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xf}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x5}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0xf0}}, 0x4000800) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000001a80)={0x80000000, 0x4, 0x5, 0x40}, 0x10) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001b00), r7) (rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r14, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x1c, r15, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000001dc0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001d80)={&(0x7f0000001c80)={0xd8, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000081) 18.760248558s ago: executing program 3 (id=1441): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000280)) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@ipv6_getnexthop={0x28, 0x6a, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r4}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x24004840) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (async) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x120, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xd4, 0x8, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0xffffffffffffffce}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x120}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) (async) accept4(r0, 0x0, &(0x7f0000000080), 0x40800) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r9, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x35}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21700, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c582", 0x5) r12 = accept4(r11, 0x0, 0x0, 0x80800) sendmmsg$alg(r12, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba800000000", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280", 0x13}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2000847}], 0x1, 0x40800) 18.628715673s ago: executing program 4 (id=1443): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0) r1 = socket$inet(0x2, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r6, @ANYBLOB="0800c300741300000800c40001000000", @ANYRESOCT=r6], 0x30}}, 0x40000) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r1, 0x0) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000140)={r7, 0x10, 0x726c0564}) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 17.932088175s ago: executing program 3 (id=1445): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd25, 0xfffffffd, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xd, 0xffff}, {0xfff3, 0x4}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000818) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x2e, &(0x7f0000001180)=""/249, &(0x7f0000001280)=0xf9) (async) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000001500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x108}}], 0x1, 0x2000c041) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x8) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={&(0x7f0000000140)="1aa6d8539d67894a98a7e2a7814b228d5f24ea244a455b064b74b4fc7fed2e4eb5e93faab33e571c71b5d6e2060b7fc66bb07db6eb87d395479041124463ee08ae2eaa77f055fa1d61cde1a62cbf666720b491aaacf178b128c0229a37d21468ad216aadf3e0b365544b60353af21a49d190dbf82ef7272b7ee61bdd45b71f8349ed9524d9642ce0d1ab154cdd3b11f6d02d05b57b53699e46387bfe068a4041a7bf8e8002f80dca5302e40d633f5b1b004d5c14ec", &(0x7f0000001540)=""/4096, &(0x7f0000000200)="ebc1e13505d1c2b100b242b3be9b376401154054a54200e0357a89abb115df584bf7c5901432df3e2a6c72ca5e33e47a00a8e7e595796ac32c9d98cd819737f62005015eb80b", &(0x7f0000000280)="fdb17ff9ae6200d647227d461287d7fac9e54ceacbae3ee2f3e60587b4cdba1176a8ae393d2eb4223febb6c4f86783d19fc9a05fa19a4da4ec64d43ff128b7", 0x10000, r2}, 0x38) (async) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000140)="a7", 0x1) setsockopt$inet6_int(r4, 0x29, 0x2, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c9d1b13", @ANYRES16=r5, @ANYBLOB="05072bbd7000ffdbdf25010000000800028004003380"], 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) 17.931539477s ago: executing program 1 (id=1446): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000002c0)={{0x6, 0xaac}, 0x1a}, 0x10) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000300)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYBLOB="0000000000000000b7040000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2341, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='rcu_utilization\x00', r3}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRESDEC=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0xfffffffc, {0x2, 0x0, 0x0, 0x0, 0x20, 0x66, 0x8}, [@NDA_DST_MAC={0xa}, @NDA_PROTOCOL={0x5, 0xc, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x1804}, 0x4) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r5, 0x40049366, &(0x7f0000000340)) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) close(r6) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000a91358601433b9280afe"], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000900)={'batadv0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000940)={0x0, @private, @initdev}, &(0x7f0000000ac0)=0xc) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r10, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r11}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x86}], 0x1}}], 0x1, 0x4000040) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000b00)=0x0, &(0x7f0000000b40)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)=ANY=[@ANYBLOB="d8000000550000042bbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="00010200fc0000000000000000000000000000000000000020000100", @ANYRES32=r8, @ANYBLOB="b3010000ac1414aa0000000000000000000000000000000020000100", @ANYRES32=0x0, @ANYBLOB="01020400ac1414bb000000000000000000000000cdb3000020000100", @ANYRES32=r9, @ANYBLOB="01010200ac1414aa00000000000000000000000086dd000020000100", @ANYRES32=r11, @ANYBLOB="00010200ac1414bb000000000000000000100000ab67000020000100", @ANYRES32=r12, @ANYBLOB="0000030000000000000000000000ffffac1e000108000000"], 0xd8}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r13}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.916181282s ago: executing program 0 (id=1447): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000002c0)={0xffffffffffffffff, 0x1, 0xd, 0x200}) (async, rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x5, 0x0, 0x0, 0x40ffe, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 32) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f00000001c0)=0x87a) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200ea100000000000000000000000850000009e00000095000000a1024d680cc7c7bb00000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r4, 0x6, 0x2, 0x0, &(0x7f0000000040)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) socket(0x10, 0x803, 0x0) (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$kcm(0x29, 0x5, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1, 0x803, 0x0) (async) socket$inet6(0xa, 0x80003, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) (async, rerun: 32) socket$inet_tcp(0x2, 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)=ANY=[@ANYRES8=r2, @ANYRESDEC, @ANYBLOB="1076487c04f36cc68eb01aeab15ca2b4421b5ad0d19ae221bb3953155db87eda810ce8b7fce0c88096d6206a54fde22afc163f2a80ebdc98f783f419afaa3180b316acfd7baa469c9e5034cc0a15ea7d0109cced285a2c34ff6cc752c0be164bb7e30ccc09b935f389f619edcab4d401427191962de7e05d089476ecc4ba5dc870abe947eac70dd08009ec4643bd91c88a", @ANYRES8=r3, @ANYRES64=r5, @ANYRES16=0x0], 0x20) (rerun: 64) 17.82090521s ago: executing program 3 (id=1448): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x4, 0x7, 0x1, 0x4}, {0xfedc, 0xd, 0x2, 0x9}]}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r1], 0x30}, 0x1, 0x0, 0x0, 0x24044800}, 0x240008f1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r5, 0xc) connect$x25(r5, &(0x7f0000000a80), 0x12) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000040000000400000005"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000080000000600000001"], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x2, [{0x2}, {0x6, 0x1}, {0x2, 0x20000001}, {0x8, 0x4}]}]}}, &(0x7f0000000f40)=""/4089, 0x46, 0xff9, 0x1, 0x802}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) recvmmsg(r4, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/5, 0x5}], 0x1}}], 0x1, 0x12102, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000001580)={r8, 0x0, "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", "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"}) 17.690637766s ago: executing program 1 (id=1450): unshare(0x46000380) unshare(0x8040300) 17.648361221s ago: executing program 0 (id=1451): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYRES8=r3], 0x90}, 0x1, 0x7}, 0x40004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYRES8=r3], 0x90}, 0x1, 0x7}, 0x40004) (async) 17.492723857s ago: executing program 1 (id=1452): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="21949c82b5c22c000027", @ANYRES16=r6, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) bind$packet(r4, &(0x7f0000000180)={0x11, 0x19, 0x0, 0x1, 0x3, 0x6, @random="21b50e368a49"}, 0x14) 17.492245793s ago: executing program 3 (id=1453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf252500dd000e0001"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x20000030) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r4, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000800) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1080880}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x34, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff0}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x1) 16.708199034s ago: executing program 2 (id=1454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="58000000020605efad953346e0234d000000000105000100070000000900020073797a30000000000c00078008001340000000000500050002000000050004000000000011000300686173683a6e65742c6e6574"], 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x4004010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)={@val={0x1c, 0x800}, @val={0x1, 0x3, 0x0, 0x14, 0x14, 0x1}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x67, 0x0, 0x0, 0x84, 0x0, @rand_addr=0x640100fd, @local}, {{0x200, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x40, 0x1, 0x0, 0x1c}, {"5afe"}}}}}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="8932ff0f6d7ff1cec405cc64b12e385dcf2a3cd06cd4aadea45cb2a5cd0ae16461de06c1fe362772371652bfa497bfdd83f17a215328ed1107", 0x39, 0x6000c804, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x87) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20000000100000001c001280090001006970697027d6fc6015b652eea28f3b"], 0x3c}}, 0x20000000) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x11e, 0x487, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, 0xa, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0x6}, [@IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfffffffa}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'team_slave_0\x00'}}]}]}, 0x7c}}, 0x40814) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 16.496802082s ago: executing program 2 (id=1455): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030426bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b5ad11b856d20500"], 0x44}}, 0x440088c4) 16.413754612s ago: executing program 1 (id=1456): socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072", @ANYRES16=0x0, @ANYRES8=0xffffffffffffffff], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) close(r0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f0000000580)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1000003}, 0x8, 0x10, &(0x7f0000000000)={0x5, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9a35}, 0x94) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r4}, 0x8) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="7800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a44001280110001006272696467655f736c617665000000002c00058005001900030000000500090001000000050005000000000005000800000000000500040001000000140003006272696467655f63536176655f30000057dff26f88336e01c3a593"], 0x78}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1d000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r8, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40000000000905000000000000000000000000070c00048008000100020900010073797a31000000000c0004800800014000000008c50c5dbc42f541874da39120a13cc08e7e14f4af880aab298c8815f8a2cca9093a3dc4177541143a0bb7c9b12fe3b16814947fdeca5618406d1281a545ccad13cc5a7f818052b0d43f14f454f6120f8e37f6b51ee6a63004ee8be4d38cbe37ba370260fdd7b13bbaee3b8ed144d7879446f441a7b8c2b25b0c1990a3aee8bb3a4b32d1e9f16e3759e99443314340dd47427d0fb5a3fe0452dc0f3dc1ccdb3cc281df1e9c583d48ed46d750"], 0x40}, 0x1, 0x0, 0x0, 0x20008080}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r10, @ANYBLOB="050000000000000000", @ANYRES32=r11, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000226bd7000fddbdf250b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000100000000000c006e80040001000400020004000a00080037000100000011000700681e51d44aec74e759950448380000000800adb20d16526dcb01eb66a30d98090002d60700f3bfa1a2df7590718f5ed6419d9aefd9dca17fd85082ec0e335d85c29fab4820b315cb3e61d8c981d020ef07b3f72eeb9263ae6c994c8d30b009902b030bbc57e77b75ef0691614df535e5cbf08f51dd9803d6879de4497ccea69819626a9031c4d21b7b68a4fa18edd8735315d5f3741bf9566e3cff1780c88e1a132a240edc37843992b68bcb564d1fcb24940c9757f263e27c3cdf26c82bbac0f7380b37bda3a78a29b62dfd4e17090bbde02330ab5fb2003d4461e8691441911bd3626043530bdff49863d181fe0ec78d1a77ff28d22d421f2ae828aebd0edd10fab036573afd6adb50f138459d2f55307828984c3be71340c81c1e9fcc27288a72da5ccce1b9890f872884eceaf97b104da7f42d4dab5b121ae4fd829d8a09e1639d184d0300"/378], 0x68}, 0x1, 0x0, 0x0, 0x40040}, 0x20000814) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x709843, 0x0) unshare(0x2c020400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)}, 0x2) 16.375081924s ago: executing program 2 (id=1457): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000840)=""/120, 0x78}, {&(0x7f0000000300)=""/134, 0x86}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f00000006c0)=""/21, 0x15}], 0x63}, 0x4}], 0x2, 0x60, 0x0) 16.301280701s ago: executing program 2 (id=1458): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) sendmmsg(r1, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000040)=0x4, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x1, 0x3, 0x1c00, 0xf, 0x8, 0x1, 0x4, {0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}}, 0x99, 0xfffffffe, 0x800, 0xfff, 0x7}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0x3, r3}, 0x10) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001400)={r3, 0x2, 0x4006}, 0x8) socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r4, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="fc", 0x1}], 0x1}, 0x41) recvmsg(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2002) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_DEL_MFC(r6, 0x29, 0xcd, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=r7, @ANYRES32], 0x50) socket$inet6(0xa, 0x800000000000002, 0x0) 15.840354189s ago: executing program 4 (id=1459): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000040)=""/54, 0x36}, {&(0x7f0000000380)=""/240, 0xf0}], 0x3, &(0x7f0000000480)=""/230, 0xe6}, 0x40000000) (async) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000380)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xee00}) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x700}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x8, 0xf, 0x6, 0x6, 0x1, 0xb, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x5, 0x5, {0x3, 0x4}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat$cgroup_ro(r11, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x200, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ECN={0x8}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x40}}, 0x0) (async) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x8010, r12, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r15 = socket$alg(0x26, 0x5, 0x0) bind$alg(r15, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 15.576568967s ago: executing program 4 (id=1460): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040), 0x1a}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2001daa5949f86d90c1c8b42fec000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000060000002f4900007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000100), 0xca, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000001ac0)={r3, 0x0, 0x0}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="1c000000190081054e81f782db4cb904022008000300000000000007", 0x1c}], 0x1}, 0x14) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900"], 0x128}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0x3, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x10c}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)}, 0x10100) 15.519044797s ago: executing program 4 (id=1461): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x7, 0x3, '\x00'}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x700, 0x40, 0x8, 0xffffffff, {{0x24, 0x4, 0x1, 0x0, 0x90, 0x66, 0x259, 0x5, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x2b, 0x17, [@private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @broadcast, @local, @empty, @rand_addr=0x64010102, @loopback, @local]}, @cipso={0x86, 0x12, 0xffffffffffffffff, [{0x0, 0xc, "d9da192466dedce99fb9"}]}, @rr={0x7, 0xb, 0xeb, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @lsrr={0x83, 0x1f, 0xd, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2e}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @local]}, @rr={0x7, 0x13, 0x35, [@multicast2, @dev={0xac, 0x14, 0x14, 0x26}, @multicast2, @loopback]}, @end]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@initdev, 0x0}, &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xe4, r2, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x4}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000804}, 0x40801) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.424985832s ago: executing program 2 (id=1462): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x84}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d5, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x1f}, {}, {0x8000, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x70bd2b, 0x0, 0x2, 0x0, 0x0, 0x22}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newtaction={0x90, 0x30, 0x1, 0xfffffffd, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 15.300907962s ago: executing program 2 (id=1463): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000001c0), 0x37) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0xf) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000c00180004ac0f000a5a4588"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) (async, rerun: 32) sendto(r2, 0x0, 0x0, 0x800, &(0x7f0000000500)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1000005}, [@null, @default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x80) (async, rerun: 32) close(r1) (async) socket$xdp(0x2c, 0x3, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}, 0x40480d5) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x100) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x110}}, 0x0) (async) r9 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r10, 0x5452, &(0x7f00000000c0)=0x400) (async) r12 = getpid() ioctl$sock_SIOCSPGRP(r10, 0x8902, &(0x7f0000000140)=r12) (async) bpf$MAP_CREATE(0x15, &(0x7f0000000340)=ANY=[@ANYBLOB="1e00000000040000000000000000000042040000", @ANYRES32, @ANYBLOB="80000000000000000000", @ANYRES8=r0, @ANYRES32, @ANYBLOB="fffffffffcffffff00000000"], 0x50) (async) sendmsg$inet(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x400c941) (async) setsockopt(r8, 0x9, 0x4c, &(0x7f0000000400)="b319cbee3643f7627a1c1b6b37795140114c99b7488c0c59df24f9e5fb7164a606a01042165185a84954969e270d9193057a936eea0e4507a976730ebb75c774d07ad22f1a2075e09cf1f2b5fc14de5de7868d6a98f092e67724d9a3dec938308de88704f9fce43151f760657b4e5955d1edf2905bfd0e4b4c4d329758f57c82d6d8e2630a1822e6e87840", 0x8b) (async) sendmmsg(r9, &(0x7f0000000480), 0x2e9, 0xffe0) 2.51858835s ago: executing program 32 (id=1451): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYRES8=r3], 0x90}, 0x1, 0x7}, 0x40004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYRES8=r3], 0x90}, 0x1, 0x7}, 0x40004) (async) 1.499302726s ago: executing program 33 (id=1453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf252500dd000e0001"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x20000030) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r4, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000800) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1080880}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x34, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff0}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x1) 479.458579ms ago: executing program 34 (id=1456): socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072", @ANYRES16=0x0, @ANYRES8=0xffffffffffffffff], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) close(r0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f0000000580)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1000003}, 0x8, 0x10, &(0x7f0000000000)={0x5, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9a35}, 0x94) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r4}, 0x8) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="7800000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a44001280110001006272696467655f736c617665000000002c00058005001900030000000500090001000000050005000000000005000800000000000500040001000000140003006272696467655f63536176655f30000057dff26f88336e01c3a593"], 0x78}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1d000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r8, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40000000000905000000000000000000000000070c00048008000100020900010073797a31000000000c0004800800014000000008c50c5dbc42f541874da39120a13cc08e7e14f4af880aab298c8815f8a2cca9093a3dc4177541143a0bb7c9b12fe3b16814947fdeca5618406d1281a545ccad13cc5a7f818052b0d43f14f454f6120f8e37f6b51ee6a63004ee8be4d38cbe37ba370260fdd7b13bbaee3b8ed144d7879446f441a7b8c2b25b0c1990a3aee8bb3a4b32d1e9f16e3759e99443314340dd47427d0fb5a3fe0452dc0f3dc1ccdb3cc281df1e9c583d48ed46d750"], 0x40}, 0x1, 0x0, 0x0, 0x20008080}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r10, @ANYBLOB="050000000000000000", @ANYRES32=r11, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000226bd7000fddbdf250b00000008000300", @ANYRES32=0x0, @ANYBLOB="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"/378], 0x68}, 0x1, 0x0, 0x0, 0x40040}, 0x20000814) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x709843, 0x0) unshare(0x2c020400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000380)}, 0x2) 445.575582ms ago: executing program 35 (id=1461): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x7, 0x3, '\x00'}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}}}}}}, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x700, 0x40, 0x8, 0xffffffff, {{0x24, 0x4, 0x1, 0x0, 0x90, 0x66, 0x259, 0x5, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x2b, 0x17, [@private=0xa010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @broadcast, @local, @empty, @rand_addr=0x64010102, @loopback, @local]}, @cipso={0x86, 0x12, 0xffffffffffffffff, [{0x0, 0xc, "d9da192466dedce99fb9"}]}, @rr={0x7, 0xb, 0xeb, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @lsrr={0x83, 0x1f, 0xd, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x2e}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @local]}, @rr={0x7, 0x13, 0x35, [@multicast2, @dev={0xac, 0x14, 0x14, 0x26}, @multicast2, @loopback]}, @end]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000002c0)={@initdev, 0x0}, &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xe4, r2, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x4}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000804}, 0x40801) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 36 (id=1463): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000001c0), 0x37) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0xf) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000c00180004ac0f000a5a4588"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) (async, rerun: 32) sendto(r2, 0x0, 0x0, 0x800, &(0x7f0000000500)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1000005}, [@null, @default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x80) (async, rerun: 32) close(r1) (async) socket$xdp(0x2c, 0x3, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}, 0x40480d5) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x100) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x110}}, 0x0) (async) r9 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r10, 0x5452, &(0x7f00000000c0)=0x400) (async) r12 = getpid() ioctl$sock_SIOCSPGRP(r10, 0x8902, &(0x7f0000000140)=r12) (async) bpf$MAP_CREATE(0x15, &(0x7f0000000340)=ANY=[@ANYBLOB="1e00000000040000000000000000000042040000", @ANYRES32, @ANYBLOB="80000000000000000000", @ANYRES8=r0, @ANYRES32, @ANYBLOB="fffffffffcffffff00000000"], 0x50) (async) sendmsg$inet(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x400c941) (async) setsockopt(r8, 0x9, 0x4c, &(0x7f0000000400)="b319cbee3643f7627a1c1b6b37795140114c99b7488c0c59df24f9e5fb7164a606a01042165185a84954969e270d9193057a936eea0e4507a976730ebb75c774d07ad22f1a2075e09cf1f2b5fc14de5de7868d6a98f092e67724d9a3dec938308de88704f9fce43151f760657b4e5955d1edf2905bfd0e4b4c4d329758f57c82d6d8e2630a1822e6e87840", 0x8b) (async) sendmmsg(r9, &(0x7f0000000480), 0x2e9, 0xffe0) kernel console output (not intermixed with test programs): an invalid length. [ 123.663988][ T7311] netlink: 'syz.0.307': attribute type 5 has an invalid length. [ 123.673819][ T7019] udevd[7019]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 123.859391][ T7324] ieee802154 phy0 wpan0: encryption failed: -22 [ 123.996759][ T7335] netlink: 'syz.1.312': attribute type 4 has an invalid length. [ 124.023552][ T7335] netlink: 'syz.1.312': attribute type 4 has an invalid length. [ 124.259373][ T7347] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 124.304721][ T7347] bond2: (slave dummy0): Releasing active interface [ 124.335711][ T7347] dummy0: left promiscuous mode [ 124.385507][ T7347] bridge_slave_0: left allmulticast mode [ 124.414025][ T7347] bridge_slave_0: left promiscuous mode [ 124.423971][ T7347] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.437733][ T7347] bridge_slave_1: left allmulticast mode [ 124.443484][ T7347] bridge_slave_1: left promiscuous mode [ 124.449473][ T7347] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.464014][ T7347] bond0: (slave bond_slave_0): Releasing backup interface [ 124.478896][ T7352] x_tables: duplicate underflow at hook 3 [ 124.481671][ T7351] x_tables: duplicate underflow at hook 3 [ 124.495681][ T7347] bond0: (slave bond_slave_1): Releasing backup interface [ 124.522085][ T7347] team0: Port device team_slave_0 removed [ 124.535946][ T7347] team0: Port device team_slave_1 removed [ 124.544866][ T7347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.554847][ T7347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.565497][ T7347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.584276][ T7364] netlink: 'syz.2.320': attribute type 1 has an invalid length. [ 124.585922][ T7347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.602428][ T7347] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 124.843770][ T7364] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.904121][ T7369] vlan2: entered promiscuous mode [ 124.927121][ T7369] bond1: entered promiscuous mode [ 124.932793][ T7369] vlan2: entered allmulticast mode [ 124.938358][ T7369] bond1: entered allmulticast mode [ 125.016817][ T7382] netlink: 'syz.0.324': attribute type 54 has an invalid length. [ 125.184538][ T7393] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 125.207484][ T7393] pim6reg1: linktype set to 805 [ 125.227916][ T7395] wg1 speed is unknown, defaulting to 1000 [ 125.247343][ T7395] wg1 speed is unknown, defaulting to 1000 [ 125.260508][ T7393] pimreg: tun_chr_ioctl cmd 2147767506 [ 125.339899][ T7395] wg1 speed is unknown, defaulting to 1000 [ 125.365948][ T7395] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 125.468804][ T7408] xt_TCPMSS: Only works on TCP SYN packets [ 125.588654][ T7395] wg1 speed is unknown, defaulting to 1000 [ 125.619449][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 125.627804][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 125.630130][ T7395] wg1 speed is unknown, defaulting to 1000 [ 125.679440][ T7395] wg1 speed is unknown, defaulting to 1000 [ 125.702182][ T7395] wg1 speed is unknown, defaulting to 1000 [ 125.712097][ T7395] wg1 speed is unknown, defaulting to 1000 [ 126.246476][ T7451] tipc: Enabling of bearer rejected, failed to enable media [ 126.274334][ T7447] wg1 speed is unknown, defaulting to 1000 [ 126.289960][ T7447] wg1 speed is unknown, defaulting to 1000 [ 127.147880][ T7481] __nla_validate_parse: 5 callbacks suppressed [ 127.147898][ T7481] netlink: 36 bytes leftover after parsing attributes in process `syz.1.350'. [ 127.259454][ T7481] netlink: 88 bytes leftover after parsing attributes in process `syz.1.350'. [ 127.296034][ T7491] netlink: 'syz.4.353': attribute type 2 has an invalid length. [ 127.333827][ T7491] : entered promiscuous mode [ 127.576242][ T7508] team0: Port device team_slave_0 removed [ 127.658548][ T7517] netlink: 32 bytes leftover after parsing attributes in process `syz.2.360'. [ 127.686470][ T7517] openvswitch: netlink: Flow actions attr not present in new flow. [ 127.765152][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 127.795354][ T7517] can: request_module (can-proto-0) failed. [ 127.994414][ T7530] netlink: 'syz.3.363': attribute type 1 has an invalid length. [ 128.090860][ T7530] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.258430][ T7534] 8021q: adding VLAN 0 to HW filter on device bond3 [ 128.268034][ T7534] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 128.283078][ T7534] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 128.330440][ T7530] vlan2: entered allmulticast mode [ 128.341673][ T7530] team0: entered allmulticast mode [ 128.352629][ T7530] bond3: (slave vlan2): Enslaving as an active interface with a down link [ 128.361478][ T7548] netlink: 52 bytes leftover after parsing attributes in process `syz.0.368'. [ 128.861487][ T7565] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 129.376644][ T7594] trusted_key: syz.4.382 sent an empty control message without MSG_MORE. [ 129.461657][ T7594] bridge2: entered promiscuous mode [ 129.476014][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'. [ 129.997485][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 130.607677][ T7635] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 130.780335][ T7651] validate_nla: 1 callbacks suppressed [ 130.780353][ T7651] netlink: 'syz.2.399': attribute type 1 has an invalid length. [ 130.861342][ T7655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.400'. [ 130.909141][ T7651] bond2: entered promiscuous mode [ 130.940841][ T7651] bond2: entered allmulticast mode [ 130.994397][ T7664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.403'. [ 131.339451][ T7681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.406'. [ 131.401809][ T7685] bond3: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 131.421070][ T7685] bond3 (unregistering): Released all slaves [ 131.496721][ T7681] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 131.635458][ T7682] team0: Port device team_slave_0 removed [ 131.693984][ T7655] syz.0.400 (7655) used greatest stack depth: 17832 bytes left [ 131.783433][ T7698] sctp: [Deprecated]: syz.2.411 (pid 7698) Use of int in maxseg socket option. [ 131.783433][ T7698] Use struct sctp_assoc_value instead [ 131.829554][ T7697] sctp: [Deprecated]: syz.3.410 (pid 7697) Use of int in maxseg socket option. [ 131.829554][ T7697] Use struct sctp_assoc_value instead [ 132.171728][ T7706] netlink: 'syz.3.413': attribute type 1 has an invalid length. [ 132.297106][ T7706] 8021q: adding VLAN 0 to HW filter on device bond4 [ 132.343166][ T7710] veth7: entered promiscuous mode [ 132.351931][ T7710] bond4: (slave veth7): Enslaving as an active interface with a down link [ 132.644412][ T7726] wg1 speed is unknown, defaulting to 1000 [ 132.660945][ T7726] wg1 speed is unknown, defaulting to 1000 [ 132.870977][ T7737] wg1 speed is unknown, defaulting to 1000 [ 132.885208][ T7742] batadv0: entered promiscuous mode [ 132.902097][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.910431][ T7745] netlink: 'syz.4.425': attribute type 1 has an invalid length. [ 132.918224][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.926580][ T7742] batadv0: left promiscuous mode [ 132.957092][ T7745] __nla_validate_parse: 3 callbacks suppressed [ 132.964906][ T7745] netlink: 224 bytes leftover after parsing attributes in process `syz.4.425'. [ 132.976461][ T7740] netlink: 36 bytes leftover after parsing attributes in process `syz.3.424'. [ 133.009769][ T7737] wg1 speed is unknown, defaulting to 1000 [ 133.053838][ T7743] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.079996][ T7746] netlink: 156 bytes leftover after parsing attributes in process `syz.1.423'. [ 133.437946][ T7743] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.513227][ T7768] netlink: 'syz.3.431': attribute type 4 has an invalid length. [ 133.569580][ T7769] netlink: 'syz.3.431': attribute type 4 has an invalid length. [ 133.659627][ T7743] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.129736][ T7743] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.172815][ T7785] veth1_to_bond: entered allmulticast mode [ 135.189601][ T7779] wg1 speed is unknown, defaulting to 1000 [ 135.203276][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.435'. [ 135.288780][ T7785] veth1_to_bond (unregistering): left allmulticast mode [ 135.330140][ T7779] wg1 speed is unknown, defaulting to 1000 [ 135.570731][ T7217] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.600268][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.670012][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.717081][ T43] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.768602][ T7815] netlink: 'syz.0.441': attribute type 1 has an invalid length. [ 135.997788][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.447'. [ 136.028820][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.3.446'. [ 136.205135][ T7840] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 136.313894][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 136.358917][ T30] audit: type=1107 audit(1762588707.628:4): pid=7846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 136.641264][ T7865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.458'. [ 136.952921][ T7874] veth5: entered promiscuous mode [ 137.400434][ T7858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.687037][ T7891] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.163115][ T7891] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.217216][ T7908] netlink: 88 bytes leftover after parsing attributes in process `syz.1.468'. [ 138.352376][ T7891] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.533049][ T7891] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.573847][ T7942] tun0: tun_chr_ioctl cmd 1074025675 [ 138.607694][ T7942] tun0: persist enabled [ 138.642631][ T7937] tun0: tun_chr_ioctl cmd 1074025675 [ 138.663716][ T7947] netlink: 'syz.0.475': attribute type 6 has an invalid length. [ 138.668646][ T7937] tun0: persist enabled [ 138.718014][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.475'. [ 138.770732][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.810368][ T7950] netlink: 240 bytes leftover after parsing attributes in process `syz.4.477'. [ 138.822616][ T7950] netlink: 'syz.4.477': attribute type 13 has an invalid length. [ 138.900724][ T1145] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.180924][ T7950] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.188884][ T7950] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.485631][ T7950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.522888][ T7950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.901866][ T1145] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.919934][ T1145] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.930906][ T7951] wg1 speed is unknown, defaulting to 1000 [ 139.954564][ T1145] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.973904][ T1145] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.991656][ T7951] wg1 speed is unknown, defaulting to 1000 [ 139.998088][ T1145] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.015250][ T7963] siw: device registration error -23 [ 140.067597][ T1145] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.143580][ T7986] netlink: 'syz.1.482': attribute type 1 has an invalid length. [ 140.483821][ T8005] netlink: 20 bytes leftover after parsing attributes in process `syz.4.487'. [ 140.601646][ T7986] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.609516][ T7986] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.118610][ T7986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.621831][ T1145] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.647504][ T1145] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.679076][ T1145] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.697826][ T1145] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.755774][ T8017] syzkaller0: entered promiscuous mode [ 141.761924][ T8017] syzkaller0: entered allmulticast mode [ 141.840349][ T8019] wg1 speed is unknown, defaulting to 1000 [ 141.871733][ T8019] wg1 speed is unknown, defaulting to 1000 [ 142.145181][ T8033] IPVS: set_ctl: invalid protocol: 135 172.30.1.5:20003 [ 142.229227][ T8029] tipc: Resetting bearer [ 142.366863][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.493'. [ 142.410053][ T8041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.494'. [ 142.464786][ T30] audit: type=1804 audit(1762588713.728:5): pid=8043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.495" name="/newroot/101/memory.events" dev="tmpfs" ino=533 res=1 errno=0 [ 142.511513][ T30] audit: type=1800 audit(1762588713.728:6): pid=8043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.495" name="memory.events" dev="tmpfs" ino=533 res=0 errno=0 [ 143.011636][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.499'. [ 143.086115][ T8062] xt_CONNSECMARK: invalid mode: 0 [ 143.261480][ T8073] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 143.295918][ T8073] netlink: 32 bytes leftover after parsing attributes in process `syz.3.501'. [ 143.448693][ T8086] netlink: 504 bytes leftover after parsing attributes in process `syz.1.505'. [ 143.549416][ T8092] netlink: zone id is out of range [ 143.618147][ T8094] syzkaller0: entered promiscuous mode [ 143.635683][ T8094] syzkaller0: entered allmulticast mode [ 143.911819][ T8106] netlink: 'syz.0.512': attribute type 1 has an invalid length. [ 143.957667][ T8107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.512'. [ 144.000124][ T8106] bond2: entered promiscuous mode [ 144.005762][ T8106] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.617949][ T8142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.521'. [ 144.712063][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 144.740206][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 144.813823][ T8142] wg1 speed is unknown, defaulting to 1000 [ 144.845030][ T8142] wg1 speed is unknown, defaulting to 1000 [ 145.433685][ T8163] GUP no longer grows the stack in syz.1.527 (8163): 200000003000-20000000a000 (200000001000) [ 145.455055][ T8163] CPU: 0 UID: 0 PID: 8163 Comm: syz.1.527 Not tainted syzkaller #0 PREEMPT(full) [ 145.455080][ T8163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 145.455098][ T8163] Call Trace: [ 145.455106][ T8163] [ 145.455114][ T8163] dump_stack_lvl+0x189/0x250 [ 145.455153][ T8163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.455177][ T8163] ? __pfx__printk+0x10/0x10 [ 145.455193][ T8163] ? find_vma+0xe7/0x160 [ 145.455229][ T8163] __get_user_pages+0x2470/0x2a00 [ 145.455278][ T8163] ? __gup_longterm_locked+0xc63/0x1660 [ 145.455301][ T8163] ? down_read_killable+0x1d1/0x350 [ 145.455326][ T8163] __gup_longterm_locked+0xde4/0x1660 [ 145.455362][ T8163] ? sanity_check_pinned_pages+0x123a/0x1300 [ 145.455394][ T8163] gup_fast_fallback+0x1d65/0x22d0 [ 145.455415][ T8163] ? is_bpf_text_address+0x26/0x2b0 [ 145.455480][ T8163] ? __pfx_gup_fast_fallback+0x10/0x10 [ 145.455501][ T8163] ? stack_trace_save+0x9c/0xe0 [ 145.455528][ T8163] ? stack_depot_save_flags+0x40/0x860 [ 145.455555][ T8163] ? __page_table_check_zero+0x51/0x530 [ 145.455585][ T8163] ? pin_user_pages_fast+0x4d/0xb0 [ 145.455610][ T8163] iov_iter_extract_pages+0x35f/0x5e0 [ 145.455641][ T8163] extract_iter_to_sg+0xe46/0x24e0 [ 145.455677][ T8163] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 145.455716][ T8163] ? __asan_memset+0x22/0x50 [ 145.455741][ T8163] af_alg_get_rsgl+0x436/0x810 [ 145.455784][ T8163] aead_recvmsg+0x4d5/0x13b0 [ 145.455808][ T8163] ? finish_task_switch+0x266/0x950 [ 145.455839][ T8163] ? aa_sk_perm+0x81e/0x950 [ 145.455868][ T8163] ? __schedule+0x17ae/0x4cc0 [ 145.455893][ T8163] ? __pfx_aead_recvmsg+0x10/0x10 [ 145.455918][ T8163] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 145.455936][ T8163] ? __pfx_aead_recvmsg+0x10/0x10 [ 145.455960][ T8163] sock_recvmsg_nosec+0x186/0x1c0 [ 145.455988][ T8163] ____sys_recvmsg+0x3aa/0x460 [ 145.456019][ T8163] ? __pfx_____sys_recvmsg+0x10/0x10 [ 145.456057][ T8163] ? import_iovec+0x74/0xa0 [ 145.456082][ T8163] ___sys_recvmsg+0x1b5/0x510 [ 145.456109][ T8163] ? __pfx____sys_recvmsg+0x10/0x10 [ 145.456164][ T8163] ? __might_fault+0xb0/0x130 [ 145.456192][ T8163] do_recvmmsg+0x307/0x770 [ 145.456222][ T8163] ? __pfx_do_recvmmsg+0x10/0x10 [ 145.456256][ T8163] ? __pfx_do_futex+0x10/0x10 [ 145.456299][ T8163] __x64_sys_recvmmsg+0x190/0x240 [ 145.456323][ T8163] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 145.456349][ T8163] ? do_syscall_64+0xbe/0xfa0 [ 145.456374][ T8163] do_syscall_64+0xfa/0xfa0 [ 145.456395][ T8163] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.456418][ T8163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.456436][ T8163] ? clear_bhb_loop+0x60/0xb0 [ 145.456457][ T8163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.456484][ T8163] RIP: 0033:0x7f9310d8f6c9 [ 145.456510][ T8163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.456525][ T8163] RSP: 002b:00007f9311c65038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 145.456544][ T8163] RAX: ffffffffffffffda RBX: 00007f9310fe5fa0 RCX: 00007f9310d8f6c9 [ 145.456558][ T8163] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000008 [ 145.456569][ T8163] RBP: 00007f9310e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 145.456580][ T8163] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 145.456591][ T8163] R13: 00007f9310fe6038 R14: 00007f9310fe5fa0 R15: 00007ffdec85b5e8 [ 145.456623][ T8163] [ 145.534359][ T8165] syzkaller0: entered promiscuous mode [ 145.875285][ T8165] syzkaller0: entered allmulticast mode [ 146.101198][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.534'. [ 146.157884][ T43] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.157974][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.1.534'. [ 146.183195][ T43] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.213650][ T43] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.238789][ T8197] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 146.240872][ T43] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.303893][ T8198] netlink: 'syz.3.536': attribute type 16 has an invalid length. [ 146.620589][ T8216] wg1 speed is unknown, defaulting to 1000 [ 146.644067][ T8216] wg1 speed is unknown, defaulting to 1000 [ 146.644671][ T8226] tipc: Failed to obtain node identity [ 146.692992][ T8226] tipc: Enabling of bearer rejected, failed to enable media [ 146.869036][ T8231] syzkaller0: entered promiscuous mode [ 146.874626][ T8231] syzkaller0: entered allmulticast mode [ 147.643258][ T8255] netlink: 104 bytes leftover after parsing attributes in process `syz.1.552'. [ 148.495253][ T8259] netlink: 'syz.3.554': attribute type 1 has an invalid length. [ 148.519171][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 148.638199][ T8263] netlink: 40 bytes leftover after parsing attributes in process `syz.2.555'. [ 148.736310][ T8260] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 148.748553][ T8260] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 148.790716][ T8261] bond5: (slave gretap1): making interface the new active one [ 148.801072][ T8261] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 148.878844][ T8279] netlink: 28 bytes leftover after parsing attributes in process `syz.1.558'. [ 148.905716][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.556'. [ 148.982614][ T8274] wg1 speed is unknown, defaulting to 1000 [ 148.995698][ T8274] wg1 speed is unknown, defaulting to 1000 [ 149.010175][ T8282] syzkaller1: entered promiscuous mode [ 149.032252][ T8282] syzkaller1: entered allmulticast mode [ 149.090858][ T8272] netlink: 28 bytes leftover after parsing attributes in process `syz.4.557'. [ 149.100922][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.557'. [ 149.109766][ T8272] netlink: 156 bytes leftover after parsing attributes in process `syz.4.557'. [ 149.691621][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 149.727920][ T8319] openvswitch: netlink: Missing key (keys=40, expected=80) [ 149.987826][ T8324] nbd0: detected capacity change from 0 to 127 [ 150.027770][ T8326] netlink: 248 bytes leftover after parsing attributes in process `syz.4.571'. [ 150.087877][ T51] block nbd0: Receive control failed (result -104) [ 150.316190][ T8342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 150.621174][ T8366] netlink: 'syz.4.583': attribute type 3 has an invalid length. [ 150.841592][ T8379] bond0: entered promiscuous mode [ 150.846798][ T8379] bond_slave_0: entered promiscuous mode [ 150.853476][ T8379] bond_slave_1: entered promiscuous mode [ 150.859833][ T8379] team0: entered promiscuous mode [ 150.864972][ T8379] team_slave_1: entered promiscuous mode [ 150.876524][ T8379] batadv0: entered promiscuous mode [ 150.883994][ T8379] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 150.927295][ T8379] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 150.956797][ T8379] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 150.993487][ T8379] bond0: left promiscuous mode [ 151.007022][ T8379] bond_slave_0: left promiscuous mode [ 151.016599][ T8379] bond_slave_1: left promiscuous mode [ 151.023197][ T8379] team0: left promiscuous mode [ 151.028666][ T8379] team_slave_1: left promiscuous mode [ 151.035663][ T8379] batadv0: left promiscuous mode [ 151.137814][ T5919] wg1 speed is unknown, defaulting to 1000 [ 151.742876][ T8432] wg1 speed is unknown, defaulting to 1000 [ 151.781800][ T8432] wg1 speed is unknown, defaulting to 1000 [ 152.146807][ T8459] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 152.160186][ T8459] netlink: 'syz.4.610': attribute type 12 has an invalid length. [ 153.674537][ T8474] bond3: entered promiscuous mode [ 153.682830][ T8474] bond3: entered allmulticast mode [ 153.689577][ T8474] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.805298][ T8477] lo: Caught tx_queue_len zero misconfig [ 153.819558][ T8488] openvswitch: netlink: Key 2 has unexpected len 2 expected 4 [ 153.928880][ T8497] __nla_validate_parse: 4 callbacks suppressed [ 153.928897][ T8497] netlink: 40 bytes leftover after parsing attributes in process `syz.2.620'. [ 154.026956][ T8498] wg1 speed is unknown, defaulting to 1000 [ 154.093988][ T8502] netlink: 64 bytes leftover after parsing attributes in process `syz.3.623'. [ 154.718220][ T8498] wg1 speed is unknown, defaulting to 1000 [ 155.013946][ T8520] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 155.040705][ T8509] wg1 speed is unknown, defaulting to 1000 [ 155.058164][ T8509] wg1 speed is unknown, defaulting to 1000 [ 155.082343][ T8522] netlink: 666 bytes leftover after parsing attributes in process `syz.2.629'. [ 155.101786][ T8524] netlink: 12 bytes leftover after parsing attributes in process `syz.4.630'. [ 155.157754][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.630'. [ 155.352981][ T8534] netlink: 14 bytes leftover after parsing attributes in process `syz.0.632'. [ 155.363152][ T8534] hsr_slave_0: left promiscuous mode [ 155.395019][ T8534] hsr_slave_1: left promiscuous mode [ 155.467953][ T8544] netlink: 'syz.2.635': attribute type 15 has an invalid length. [ 155.957042][ T8557] netlink: 108 bytes leftover after parsing attributes in process `syz.3.638'. [ 155.978175][ T8553] wg1 speed is unknown, defaulting to 1000 [ 155.986370][ T8553] wg1 speed is unknown, defaulting to 1000 [ 156.196096][ T8567] netlink: 192 bytes leftover after parsing attributes in process `syz.4.641'. [ 156.216400][ T8570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.643'. [ 156.238694][ T8572] wg1 speed is unknown, defaulting to 1000 [ 156.246510][ T8572] wg1 speed is unknown, defaulting to 1000 [ 156.356723][ T8578] xt_hashlimit: size too large, truncated to 1048576 [ 156.653743][ T8590] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 156.838172][ T8597] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.007102][ T8605] netlink: 156 bytes leftover after parsing attributes in process `syz.0.654'. [ 157.141342][ T8615] netlink: 'syz.0.657': attribute type 63 has an invalid length. [ 157.163406][ T8618] wg1 speed is unknown, defaulting to 1000 [ 157.179661][ T8618] wg1 speed is unknown, defaulting to 1000 [ 157.805469][ T8649] tipc: Enabling of bearer rejected, already enabled [ 158.074727][ T8658] Ï: option downdelay: invalid value (18446744073709547007) [ 158.108188][ T8658] Ï: option downdelay: allowed values 0 - 2147483647 [ 158.179200][ T8658] Ï (unregistering): Released all slaves [ 158.442844][ T8676] syzkaller1: entered promiscuous mode [ 158.466725][ T8676] syzkaller1: entered allmulticast mode [ 158.522462][ T8679] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 158.529429][ T8679] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 158.845213][ T5919] IPVS: starting estimator thread 0... [ 158.957667][ T8694] IPVS: using max 32 ests per chain, 76800 per kthread [ 159.732342][ T8726] tipc: Started in network mode [ 159.757272][ T8726] tipc: Node identity 4668c6aa98, cluster identity 4711 [ 159.764478][ T8726] tipc: Enabled bearer , priority 0 [ 159.812859][ T8729] syzkaller0: entered promiscuous mode [ 159.827884][ T8729] syzkaller0: entered allmulticast mode [ 159.868557][ T8726] __nla_validate_parse: 5 callbacks suppressed [ 159.868576][ T8726] netlink: 2 bytes leftover after parsing attributes in process `syz.3.689'. [ 159.928825][ T8726] tipc: Resetting bearer [ 159.975387][ T8726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.043632][ T8726] bond6 (unregistering): Released all slaves [ 160.289099][ T8744] wg1 speed is unknown, defaulting to 1000 [ 160.327541][ T8725] tipc: Resetting bearer [ 160.370781][ T8725] tipc: Disabling bearer [ 160.403341][ T8744] wg1 speed is unknown, defaulting to 1000 [ 160.473363][ T8754] wg1 speed is unknown, defaulting to 1000 [ 160.518992][ T8754] wg1 speed is unknown, defaulting to 1000 [ 160.584178][ T8740] wg1 speed is unknown, defaulting to 1000 [ 160.712742][ T8764] netlink: 1496 bytes leftover after parsing attributes in process `syz.3.696'. [ 160.747408][ T8740] wg1 speed is unknown, defaulting to 1000 [ 161.062702][ T8780] netlink: 'syz.3.699': attribute type 1 has an invalid length. [ 161.115017][ T8782] ipt_REJECT: ECHOREPLY no longer supported. [ 161.267094][ T8782] bond6: (slave gretap2): making interface the new active one [ 161.279460][ T8782] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 161.501284][ T8783] wg1 speed is unknown, defaulting to 1000 [ 161.583305][ T8783] wg1 speed is unknown, defaulting to 1000 [ 161.884975][ T8814] netlink: 104 bytes leftover after parsing attributes in process `syz.3.703'. [ 162.012689][ T8818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.705'. [ 162.042869][ T8818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.705'. [ 162.192537][ T8818] wg1 speed is unknown, defaulting to 1000 [ 162.270028][ T8818] wg1 speed is unknown, defaulting to 1000 [ 162.657863][ T8849] veth1_virt_wifi: entered promiscuous mode [ 162.664018][ T8849] netlink: 40 bytes leftover after parsing attributes in process `syz.1.710'. [ 162.673516][ T8849] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 162.760698][ T8854] syzkaller0: entered promiscuous mode [ 162.766292][ T8854] syzkaller0: entered allmulticast mode [ 162.882612][ T8862] netlink: 'syz.0.714': attribute type 1 has an invalid length. [ 162.930080][ T8861] netlink: 'syz.3.713': attribute type 10 has an invalid length. [ 162.950887][ T8862] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.986327][ T8866] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.994123][ T8866] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 163.005672][ T8866] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 163.097936][ T8862] 8021q: adding VLAN 0 to HW filter on device bond4 [ 163.122944][ T8868] netlink: 'syz.4.716': attribute type 2 has an invalid length. [ 163.131744][ T8868] netlink: 'syz.4.716': attribute type 2 has an invalid length. [ 163.386238][ T8888] siw: device registration error -23 [ 163.444041][ T8892] netlink: 'syz.2.720': attribute type 1 has an invalid length. [ 163.649793][ T8908] ªªªªªª: renamed from wg2 (while UP) [ 163.662928][ T8899] netlink: 'syz.0.724': attribute type 9 has an invalid length. [ 163.682217][ T8899] netlink: 'syz.0.724': attribute type 6 has an invalid length. [ 163.973776][ T8922] wg1 speed is unknown, defaulting to 1000 [ 164.004929][ T8922] wg1 speed is unknown, defaulting to 1000 [ 164.011531][ T8931] netlink: 'syz.2.734': attribute type 5 has an invalid length. [ 164.212493][ T8927] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 164.270701][ T8932] wg1 speed is unknown, defaulting to 1000 [ 164.337068][ T8932] wg1 speed is unknown, defaulting to 1000 [ 164.346139][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 164.390820][ T8941] block nbd1: shutting down sockets [ 164.422453][ T8946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.735'. [ 164.458879][ T8929] wg1 speed is unknown, defaulting to 1000 [ 164.483537][ T8929] wg1 speed is unknown, defaulting to 1000 [ 164.540400][ T8939] wg1 speed is unknown, defaulting to 1000 [ 164.549504][ T8939] wg1 speed is unknown, defaulting to 1000 [ 164.920100][ T8970] xt_CT: No such helper "syz1" [ 164.925320][ T8922] wg1 speed is unknown, defaulting to 1000 [ 164.973389][ T8922] wg1 speed is unknown, defaulting to 1000 [ 165.304589][ T8990] : entered promiscuous mode [ 165.356258][ T8990] syzkaller1: entered allmulticast mode [ 165.486256][ T9004] netlink: 132 bytes leftover after parsing attributes in process `syz.2.750'. [ 165.529702][ T9004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.750'. [ 165.549586][ T51] Bluetooth: hci4: link tx timeout [ 165.556159][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.563640][ T9003] wg1 speed is unknown, defaulting to 1000 [ 165.569526][ T5831] Bluetooth: hci4: link tx timeout [ 165.575169][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.589281][ T5831] Bluetooth: hci4: link tx timeout [ 165.589764][ T9006] tipc: Started in network mode [ 165.594553][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.600482][ T9006] tipc: Node identity fe44defb543b, cluster identity 4711 [ 165.615652][ T9006] tipc: Enabled bearer , priority 0 [ 165.616487][ T5831] Bluetooth: hci4: link tx timeout [ 165.628065][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.647330][ T5831] Bluetooth: hci4: link tx timeout [ 165.652490][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.662410][ T9003] wg1 speed is unknown, defaulting to 1000 [ 165.672180][ T5831] Bluetooth: hci4: link tx timeout [ 165.678288][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.686394][ T5831] Bluetooth: hci4: link tx timeout [ 165.692337][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.828262][ T9005] tipc: Disabling bearer [ 166.003370][ T9030] x_tables: duplicate underflow at hook 2 [ 166.019600][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'. [ 166.273382][ T9038] netlink: 32 bytes leftover after parsing attributes in process `syz.1.760'. [ 166.280168][ T9046] bridge4: entered allmulticast mode [ 166.326183][ T9047] Can't find ip_set type hash:n [ 166.615830][ T9056] wg1 speed is unknown, defaulting to 1000 [ 166.651585][ T9056] wg1 speed is unknown, defaulting to 1000 [ 166.816651][ T9065] wg1 speed is unknown, defaulting to 1000 [ 166.831042][ T9065] wg1 speed is unknown, defaulting to 1000 [ 166.861041][ T9062] wg1 speed is unknown, defaulting to 1000 [ 167.157560][ T9062] wg1 speed is unknown, defaulting to 1000 [ 167.336660][ T9075] wg1 speed is unknown, defaulting to 1000 [ 167.348810][ T9075] wg1 speed is unknown, defaulting to 1000 [ 167.572655][ T9093] netlink: 28 bytes leftover after parsing attributes in process `syz.2.770'. [ 167.601478][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.771'. [ 167.607642][ T9088] wg1: left promiscuous mode [ 167.619728][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 167.735186][ T9103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.775'. [ 168.129603][ T9107] wg1 speed is unknown, defaulting to 1000 [ 168.201099][ T9115] macsec1: entered promiscuous mode [ 168.206456][ T9115] bridge0: entered promiscuous mode [ 168.212925][ T9115] bridge0: port 3(macsec1) entered blocking state [ 168.232167][ T9115] bridge0: port 3(macsec1) entered disabled state [ 168.239858][ T9115] macsec1: entered allmulticast mode [ 168.245360][ T9115] bridge0: entered allmulticast mode [ 168.259864][ T9115] macsec1: left allmulticast mode [ 168.265190][ T9115] bridge0: left allmulticast mode [ 168.274902][ T9115] bridge0: left promiscuous mode [ 168.312838][ T9107] wg1 speed is unknown, defaulting to 1000 [ 168.500522][ T9125] syzkaller1: entered promiscuous mode [ 168.515881][ T9125] syzkaller1: entered allmulticast mode [ 168.912370][ T9145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.788'. [ 169.040809][ T9134] netlink: 'syz.4.784': attribute type 10 has an invalid length. [ 169.160294][ T9153] bond5: entered promiscuous mode [ 169.165630][ T9153] bond5: entered allmulticast mode [ 169.172013][ T9153] 8021q: adding VLAN 0 to HW filter on device bond5 [ 169.261653][ T9160] vlan3: entered allmulticast mode [ 169.280597][ T9162] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 169.287627][ T9160] macvtap0: entered allmulticast mode [ 169.296642][ T9160] veth0_macvtap: entered allmulticast mode [ 169.432632][ T9172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.791'. [ 169.655319][ T9181] netlink: 100 bytes leftover after parsing attributes in process `syz.3.795'. [ 169.776976][ T9185] bridge0: port 3(macvtap1) entered blocking state [ 169.794980][ T9185] bridge0: port 3(macvtap1) entered disabled state [ 169.807538][ T9185] macvtap1: entered allmulticast mode [ 169.823291][ T9185] bridge0: entered allmulticast mode [ 169.849138][ T9185] macvtap1: left allmulticast mode [ 169.868672][ T9185] bridge0: left allmulticast mode [ 169.936921][ T9195] tipc: Enabled bearer , priority 0 [ 169.951462][ T9195] syzkaller0: entered promiscuous mode [ 169.967561][ T9195] syzkaller0: entered allmulticast mode [ 170.022431][ T9195] tipc: Resetting bearer [ 170.154244][ T9194] tipc: Resetting bearer [ 170.179316][ T9194] tipc: Disabling bearer [ 170.638812][ T9214] wg1 speed is unknown, defaulting to 1000 [ 170.653783][ T9228] __nla_validate_parse: 3 callbacks suppressed [ 170.653800][ T9228] netlink: 256 bytes leftover after parsing attributes in process `syz.3.808'. [ 170.679040][ T9214] wg1 speed is unknown, defaulting to 1000 [ 170.702643][ T9228] unsupported nlmsg_type 40 [ 170.733161][ T9229] netlink: 'syz.1.809': attribute type 1 has an invalid length. [ 170.740258][ T9230] delete_channel: no stack [ 170.754516][ T9229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.796164][ T9233] netlink: 277 bytes leftover after parsing attributes in process `syz.2.810'. [ 170.814403][ T9235] syz_tun: entered allmulticast mode [ 170.866144][ T9228] dvmrp8: entered allmulticast mode [ 170.897574][ T9239] tipc: Enabling of bearer rejected, failed to enable media [ 170.916430][ T9242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.812'. [ 170.933422][ T9226] syz_tun: left allmulticast mode [ 171.455688][ T9268] netlink: 165 bytes leftover after parsing attributes in process `syz.4.818'. [ 171.794920][ T9287] netlink: 'syz.0.820': attribute type 58 has an invalid length. [ 171.825822][ T9289] vxcan3: entered promiscuous mode [ 171.860186][ T9287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.820'. [ 171.919926][ T9282] netlink: 20 bytes leftover after parsing attributes in process `syz.0.820'. [ 172.088593][ T9292] wg1 speed is unknown, defaulting to 1000 [ 172.125088][ T9292] wg1 speed is unknown, defaulting to 1000 [ 172.203862][ T9298] wg1 speed is unknown, defaulting to 1000 [ 172.214923][ T9298] wg1 speed is unknown, defaulting to 1000 [ 172.270024][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.825'. [ 172.413866][ T9305] netlink: 'syz.3.825': attribute type 2 has an invalid length. [ 172.663074][ T9317] netlink: 165 bytes leftover after parsing attributes in process `syz.0.827'. [ 173.776409][ T9348] netlink: 40 bytes leftover after parsing attributes in process `syz.1.835'. [ 174.385661][ T9326] wg1 speed is unknown, defaulting to 1000 [ 174.423849][ T9326] wg1 speed is unknown, defaulting to 1000 [ 174.423861][ T9340] wg1 speed is unknown, defaulting to 1000 [ 174.445139][ T9342] wg1 speed is unknown, defaulting to 1000 [ 174.499967][ T9340] wg1 speed is unknown, defaulting to 1000 [ 174.571263][ T9353] macvtap1: entered allmulticast mode [ 174.578010][ T9353] dummy0: entered allmulticast mode [ 174.584669][ T9353] team0: Device macvtap1 failed to register rx_handler [ 174.592349][ T9353] dummy0: left allmulticast mode [ 174.626421][ T9357] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.838'. [ 174.664194][ T9342] wg1 speed is unknown, defaulting to 1000 [ 174.958616][ T9363] wg1 speed is unknown, defaulting to 1000 [ 174.990182][ T9363] wg1 speed is unknown, defaulting to 1000 [ 175.273081][ T9376] tipc: Trying to set illegal importance in message [ 175.380303][ T9370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.468743][ T9370] netlink: 'syz.0.842': attribute type 3 has an invalid length. [ 175.644640][ T9404] tc_dump_action: action bad kind [ 175.661682][ T9405] __nla_validate_parse: 2 callbacks suppressed [ 175.661698][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.852'. [ 175.769238][ T9414] netlink: 16 bytes leftover after parsing attributes in process `syz.3.854'. [ 175.792576][ T9413] netlink: 16 bytes leftover after parsing attributes in process `syz.3.854'. [ 175.805463][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.853'. [ 175.837340][ T9403] Bluetooth: MGMT ver 1.23 [ 175.961460][ T9428] xt_NFQUEUE: number of queues (65532) out of range (got 118598) [ 176.111131][ T9440] netlink: 24 bytes leftover after parsing attributes in process `syz.0.858'. [ 177.065375][ T9479] netlink: 'syz.0.873': attribute type 12 has an invalid length. [ 177.358211][ T9486] sctp: [Deprecated]: syz.2.875 (pid 9486) Use of int in max_burst socket option. [ 177.358211][ T9486] Use struct sctp_assoc_value instead [ 177.484765][ T9490] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 177.568181][ T9487] wg1 speed is unknown, defaulting to 1000 [ 177.575710][ T9487] wg1 speed is unknown, defaulting to 1000 [ 177.804279][ T9499] wg1 speed is unknown, defaulting to 1000 [ 177.839562][ T9499] wg1 speed is unknown, defaulting to 1000 [ 177.902911][ T30] audit: type=1804 audit(1762588749.158:7): pid=9505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.879" name="/newroot/171/x000000000000000600000000000000000000006" dev="tmpfs" ino=898 res=1 errno=0 [ 177.997274][ T30] audit: type=1800 audit(1762588749.158:8): pid=9505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.879" name="x000000000000000600000000000000000000006" dev="tmpfs" ino=898 res=0 errno=0 [ 178.070205][ T9511] netlink: 'syz.2.880': attribute type 1 has an invalid length. [ 178.241339][ T9511] bond3: (slave gretap1): making interface the new active one [ 178.291304][ T9511] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 178.385595][ T9515] vlan3: entered allmulticast mode [ 178.391631][ T9515] bond3: entered allmulticast mode [ 178.396780][ T9515] gretap1: entered allmulticast mode [ 178.406714][ T9515] bond3: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 178.406797][ T9524] netlink: 36 bytes leftover after parsing attributes in process `syz.4.883'. [ 178.950882][ T9520] wg1 speed is unknown, defaulting to 1000 [ 179.057660][ T9520] wg1 speed is unknown, defaulting to 1000 [ 179.092077][ T9550] wg1 speed is unknown, defaulting to 1000 [ 179.112836][ T9558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.892'. [ 179.123135][ T9558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.892'. [ 179.165657][ T9550] wg1 speed is unknown, defaulting to 1000 [ 179.172497][ T9522] wg1 speed is unknown, defaulting to 1000 [ 179.202859][ T9522] wg1 speed is unknown, defaulting to 1000 [ 179.232323][ T9561] openvswitch: netlink: Message has 8 unknown bytes. [ 179.240608][ T9563] openvswitch: netlink: Message has 8 unknown bytes. [ 179.288597][ T9560] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.893'. [ 179.656695][ T9581] vlan3: entered promiscuous mode [ 179.663855][ T9581] vlan3: entered allmulticast mode [ 179.670426][ T9581] hsr_slave_1: entered allmulticast mode [ 179.783552][ T9589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.898'. [ 179.904316][ T9587] wg1 speed is unknown, defaulting to 1000 [ 179.929531][ T9587] wg1 speed is unknown, defaulting to 1000 [ 179.959553][ T9601] netlink: 'syz.4.903': attribute type 1 has an invalid length. [ 179.968885][ T9601] ip6t_srh: unknown srh match flags 4000 [ 180.263851][ T55] block nbd0: Possible stuck request ffff888024c60000: control (read@0,1024B). Runtime 30 seconds [ 180.276449][ T55] block nbd0: Possible stuck request ffff888024c601c0: control (read@1024,1024B). Runtime 30 seconds [ 180.287636][ T55] block nbd0: Possible stuck request ffff888024c60380: control (read@2048,1024B). Runtime 30 seconds [ 180.298641][ T55] block nbd0: Possible stuck request ffff888024c60540: control (read@3072,1024B). Runtime 30 seconds [ 180.412385][ T9618] wg1 speed is unknown, defaulting to 1000 [ 180.459308][ T9618] wg1 speed is unknown, defaulting to 1000 [ 180.552873][ T9626] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 180.756582][ T9635] veth0_to_batadv: entered promiscuous mode [ 180.767763][ T9635] veth0_to_batadv: entered allmulticast mode [ 180.884785][ T9642] __nla_validate_parse: 3 callbacks suppressed [ 180.884804][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.915'. [ 181.043810][ T9654] netlink: 'syz.0.917': attribute type 1 has an invalid length. [ 181.151506][ T9661] netlink: 20 bytes leftover after parsing attributes in process `syz.3.918'. [ 181.228722][ T9654] macvlan0: entered promiscuous mode [ 181.235304][ T9654] macvlan0: entered allmulticast mode [ 181.262400][ T9654] bond6: entered promiscuous mode [ 181.268690][ T9654] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 181.279846][ T9654] bond6: left promiscuous mode [ 181.410396][ T9672] syzkaller0: entered promiscuous mode [ 181.416090][ T9672] syzkaller0: entered allmulticast mode [ 181.441093][ T9659] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 181.452389][ T9659] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 181.488282][ T9662] bond6: (slave gretap1): making interface the new active one [ 181.498948][ T9662] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 181.532239][ T9678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.563550][ T9674] tipc: Enabling of bearer rejected, failed to enable media [ 181.999665][ T9692] ipvlan0: entered allmulticast mode [ 182.007269][ T9692] veth0_vlan: entered allmulticast mode [ 183.455840][ T9706] netlink: 2 bytes leftover after parsing attributes in process `syz.1.928'. [ 183.482338][ T9683] wg1 speed is unknown, defaulting to 1000 [ 183.510901][ T9683] wg1 speed is unknown, defaulting to 1000 [ 183.511894][ T9701] wg1 speed is unknown, defaulting to 1000 [ 183.552926][ T9701] wg1 speed is unknown, defaulting to 1000 [ 183.929683][ T9722] wg1 speed is unknown, defaulting to 1000 [ 183.949968][ T9722] wg1 speed is unknown, defaulting to 1000 [ 183.954572][ T9724] wg1 speed is unknown, defaulting to 1000 [ 183.975304][ T9724] wg1 speed is unknown, defaulting to 1000 [ 184.480060][ T9744] wg1 speed is unknown, defaulting to 1000 [ 184.510082][ T9744] wg1 speed is unknown, defaulting to 1000 [ 184.936330][ T9786] netlink: 'syz.3.947': attribute type 1 has an invalid length. [ 184.976320][ T9779] nbd4: detected capacity change from 0 to 63 [ 185.022087][ T9787] block nbd4: NBD_DISCONNECT [ 185.032329][ T9774] netlink: 20 bytes leftover after parsing attributes in process `syz.4.945'. [ 185.070868][ T9787] block nbd4: Disconnected due to user request. [ 185.136365][ T9787] block nbd4: shutting down sockets [ 185.207895][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.217401][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 185.227218][ C1] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.236400][ C1] Buffer I/O error on dev nbd4, logical block 1, async page read [ 185.244281][ C1] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.253391][ C1] Buffer I/O error on dev nbd4, logical block 2, async page read [ 185.261330][ C1] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.270462][ C1] Buffer I/O error on dev nbd4, logical block 3, async page read [ 185.287769][ T6899] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.301135][ T6899] Buffer I/O error on dev nbd4, logical block 0, async page read [ 185.314921][ T6899] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.366389][ T6899] Buffer I/O error on dev nbd4, logical block 1, async page read [ 185.387221][ T9798] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 185.395643][ T6899] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.415747][ T6899] Buffer I/O error on dev nbd4, logical block 2, async page read [ 185.430685][ T6899] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.461666][ T6899] Buffer I/O error on dev nbd4, logical block 3, async page read [ 185.501171][ T6899] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.520781][ T6899] Buffer I/O error on dev nbd4, logical block 0, async page read [ 185.540928][ T6899] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 185.582687][ T6899] Buffer I/O error on dev nbd4, logical block 1, async page read [ 185.603840][ T6899] ldm_validate_partition_table(): Disk read failed. [ 185.615528][ T9813] netlink: 'syz.3.957': attribute type 1 has an invalid length. [ 185.634628][ T6899] Dev nbd4: unable to read RDB block 0 [ 185.649004][ T6899] nbd4: unable to read partition table [ 185.689168][ T6899] ldm_validate_partition_table(): Disk read failed. [ 185.705434][ T9822] netlink: 40 bytes leftover after parsing attributes in process `syz.2.958'. [ 185.722398][ T6899] Dev nbd4: unable to read RDB block 0 [ 185.732892][ T9819] netlink: 20 bytes leftover after parsing attributes in process `syz.4.959'. [ 185.732924][ T6899] nbd4: unable to read partition table [ 185.793045][ T9821] bond7: (slave gretap3): making interface the new active one [ 185.801605][ T9821] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 185.900708][ T9816] vlan3: entered promiscuous mode [ 185.905882][ T9816] team0: entered promiscuous mode [ 185.933354][ T9836] syz.3.963 uses old SIOCAX25GETINFO [ 185.981401][ T9816] team_slave_0: entered promiscuous mode [ 185.993940][ T9816] team_slave_1: entered promiscuous mode [ 186.127372][ T9839] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 186.134952][ T9827] wg1 speed is unknown, defaulting to 1000 [ 186.157410][ T9827] wg1 speed is unknown, defaulting to 1000 [ 186.410004][ T9846] netlink: 'syz.3.965': attribute type 1 has an invalid length. [ 186.542893][ T9849] netlink: 136 bytes leftover after parsing attributes in process `syz.4.967'. [ 186.564576][ T9849] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 186.712209][ T9846] 8021q: adding VLAN 0 to HW filter on device bond8 [ 186.726483][ T9855] ipvlan0: entered allmulticast mode [ 186.732193][ T9855] bond8: entered allmulticast mode [ 187.149170][ T9882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.977'. [ 187.332688][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.978'. [ 187.776562][ T9905] wg1 speed is unknown, defaulting to 1000 [ 187.784510][ T9905] wg1 speed is unknown, defaulting to 1000 [ 187.798080][ T9918] netlink: 16 bytes leftover after parsing attributes in process `syz.0.983'. [ 187.879134][ T9910] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 187.879176][ T9918] netlink: 4456 bytes leftover after parsing attributes in process `syz.0.983'. [ 188.706811][ T9955] wg1 speed is unknown, defaulting to 1000 [ 188.715617][ T9955] wg1 speed is unknown, defaulting to 1000 [ 188.896028][ T9966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.994'. [ 188.915612][ T9966] vlan2: entered promiscuous mode [ 188.941839][ T9966] bond0: entered promiscuous mode [ 188.946929][ T9966] bond_slave_0: entered promiscuous mode [ 188.980558][ T9966] bond_slave_1: entered promiscuous mode [ 189.006860][ T9966] team0: entered promiscuous mode [ 189.014889][ T9976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.998'. [ 189.025175][ T9966] team_slave_1: entered promiscuous mode [ 189.065854][ T9977] netlink: 68 bytes leftover after parsing attributes in process `syz.3.997'. [ 189.070839][ T9976] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 189.226221][ T9986] netlink: 'syz.3.1000': attribute type 4 has an invalid length. [ 189.248940][ T9986] netlink: 'syz.3.1000': attribute type 4 has an invalid length. [ 189.384008][ T9995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1004'. [ 189.413646][ T9993] netlink: 7906 bytes leftover after parsing attributes in process `syz.3.1000'. [ 189.462737][ T9995] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:0 [ 189.506156][ T9995] wg1 speed is unknown, defaulting to 1000 [ 189.824809][ T9995] wg1 speed is unknown, defaulting to 1000 [ 189.904012][T10045] netlink: 'syz.2.1008': attribute type 1 has an invalid length. [ 190.010081][T10045] 8021q: adding VLAN 0 to HW filter on device bond4 [ 190.038184][T10014] wg1 speed is unknown, defaulting to 1000 [ 190.133174][T10014] wg1 speed is unknown, defaulting to 1000 [ 190.194934][T10051] wg1 speed is unknown, defaulting to 1000 [ 190.335305][T10051] wg1 speed is unknown, defaulting to 1000 [ 190.816468][T10076] syzkaller0: entered promiscuous mode [ 190.831293][T10076] syzkaller0: entered allmulticast mode [ 191.297356][ T5831] Bluetooth: hci2: command 0x0401 tx timeout [ 191.298842][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 191.511366][T10117] syz_tun: entered allmulticast mode [ 191.550156][T10117] syz_tun (unregistering): left allmulticast mode [ 191.585737][T10124] netlink: 'syz.4.1030': attribute type 1 has an invalid length. [ 191.711354][T10124] bond4: entered promiscuous mode [ 191.716852][T10124] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.805273][T10124] 8021q: adding VLAN 0 to HW filter on device bond5 [ 191.814478][T10124] bond4: (slave bond5): making interface the new active one [ 191.823338][T10124] bond5: entered promiscuous mode [ 191.830162][T10124] bond4: (slave bond5): Enslaving as an active interface with an up link [ 192.150909][ T30] audit: type=1804 audit(1762588763.428:9): pid=10142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1035" name="x000000000000000800000000000000000000010" dev="tmpfs" ino=1066 res=1 errno=0 [ 192.177725][T10144] __nla_validate_parse: 4 callbacks suppressed [ 192.177741][T10144] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1036'. [ 192.198692][ T30] audit: type=1800 audit(1762588763.428:10): pid=10142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1035" name="x000000000000000800000000000000000000010" dev="tmpfs" ino=1066 res=0 errno=0 [ 192.224196][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'. [ 192.945175][T10188] sctp: [Deprecated]: syz.3.1048 (pid 10188) Use of int in max_burst socket option. [ 192.945175][T10188] Use struct sctp_assoc_value instead [ 193.070091][T10189] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1046'. [ 193.382221][T10202] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 193.393667][T10202] bridge0: entered allmulticast mode [ 193.737368][T10211] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1054'. [ 193.746355][T10211] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1054'. [ 193.758113][T10210] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1054'. [ 193.770189][T10213] netlink: zone id is out of range [ 193.787842][T10213] netlink: zone id is out of range [ 193.794435][T10213] netlink: set zone limit has 8 unknown bytes [ 193.807408][T10210] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1054'. [ 193.821569][T10213] netlink: zone id is out of range [ 193.826725][T10213] netlink: zone id is out of range [ 193.846825][T10213] netlink: set zone limit has 8 unknown bytes [ 193.928381][T10213] netlink: zone id is out of range [ 193.930751][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1057'. [ 193.949235][T10213] netlink: zone id is out of range [ 193.957850][T10213] netlink: set zone limit has 8 unknown bytes [ 193.990728][T10216] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1055'. [ 194.002219][T10213] netlink: zone id is out of range [ 194.110497][ T5919] IPVS: starting estimator thread 0... [ 194.202676][T10237] IPVS: using max 31 ests per chain, 74400 per kthread [ 194.303198][T10246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1060'. [ 194.345349][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.351972][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.363863][T10246] macsec1: entered allmulticast mode [ 194.381987][T10246] syz_tun: entered allmulticast mode [ 194.431414][T10246] syz_tun: left allmulticast mode [ 194.483174][T10253] : renamed from bond_slave_0 [ 194.773550][T10272] netlink: 'syz.4.1070': attribute type 3 has an invalid length. [ 194.842009][T10281] 8021q: VLANs not supported on nlmon0 [ 195.113586][T10294] vlan2: entered allmulticast mode [ 195.156309][T10294] bridge0: port 3(vlan2) entered blocking state [ 195.178622][T10294] bridge0: port 3(vlan2) entered disabled state [ 195.196594][T10294] vlan2: entered promiscuous mode [ 195.473354][T10320] netlink: 'syz.4.1086': attribute type 1 has an invalid length. [ 195.478258][T10321] netlink: 'syz.4.1086': attribute type 1 has an invalid length. [ 195.542454][T10320] 8021q: adding VLAN 0 to HW filter on device bond6 [ 195.590120][T10326] bond6: (slave veth7): Enslaving as an active interface with a down link [ 195.630560][T10320] bond6: (slave dummy0): making interface the new active one [ 195.640167][T10320] dummy0: entered promiscuous mode [ 195.645981][T10320] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 195.679092][T10324] wg1 speed is unknown, defaulting to 1000 [ 195.686880][T10324] wg1 speed is unknown, defaulting to 1000 [ 195.783398][T10317] wg1 speed is unknown, defaulting to 1000 [ 195.877316][T10317] wg1 speed is unknown, defaulting to 1000 [ 196.200806][T10344] sctp: [Deprecated]: syz.4.1091 (pid 10344) Use of int in max_burst socket option. [ 196.200806][T10344] Use struct sctp_assoc_value instead [ 196.332483][T10358] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20002 [ 196.342750][T10358] syzkaller0: entered promiscuous mode [ 196.352050][T10358] syzkaller0: entered allmulticast mode [ 196.422398][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 196.425553][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 196.428535][ T5832] Bluetooth: hci2: command 0x0401 tx timeout [ 196.695850][T10375] Cannot find set identified by id 65534 to match [ 196.730153][T10370] dummy0: Caught tx_queue_len zero misconfig [ 197.046009][T10032] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 197.205092][T10413] __nla_validate_parse: 6 callbacks suppressed [ 197.205108][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1105'. [ 197.978460][T10436] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1116'. [ 197.981996][T10430] wg1 speed is unknown, defaulting to 1000 [ 197.995175][T10436] 8021q: VLANs not supported on ipvlan1 [ 198.001909][T10430] wg1 speed is unknown, defaulting to 1000 [ 198.023494][T10436] macsec1: entered promiscuous mode [ 198.030424][T10436] macsec1: entered allmulticast mode [ 198.053476][T10436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1116'. [ 198.068045][T10436] netlink: 'syz.2.1116': attribute type 1 has an invalid length. [ 198.076057][T10436] netlink: 'syz.2.1116': attribute type 2 has an invalid length. [ 198.084131][T10436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1116'. [ 198.360148][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1115'. [ 198.375728][T10445] x_tables: duplicate underflow at hook 4 [ 198.472930][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1115'. [ 198.485990][T10437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1115'. [ 199.019359][T10488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1130'. [ 199.090496][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1129'. [ 199.175819][T10497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1129'. [ 199.539931][ T5147] Bluetooth: hci4: command 0x0406 tx timeout [ 199.547906][T10494] bond5 (unregistering): Released all slaves [ 199.872846][T10536] netlink: 'syz.1.1141': attribute type 1 has an invalid length. [ 199.916145][T10541] 8021q: VLANs not supported on gre0 [ 199.989329][T10541] wg1 speed is unknown, defaulting to 1000 [ 200.038250][T10541] wg1 speed is unknown, defaulting to 1000 [ 200.290184][T10562] net_ratelimit: 91 callbacks suppressed [ 200.290200][T10562] netlink: del zone limit has 4 unknown bytes [ 201.289968][T10611] netlink: 'syz.3.1158': attribute type 21 has an invalid length. [ 201.298274][T10611] netlink: 'syz.3.1158': attribute type 4 has an invalid length. [ 201.307404][T10611] netlink: 'syz.3.1158': attribute type 5 has an invalid length. [ 201.366138][T10614] tap0: tun_chr_ioctl cmd 2147767507 [ 201.474919][T10622] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 201.633953][T10625] pim6reg1: entered promiscuous mode [ 201.639397][T10625] pim6reg1: entered allmulticast mode [ 201.716055][T10635] bridge2: entered promiscuous mode [ 201.721435][T10635] bridge2: entered allmulticast mode [ 202.609513][T10648] wg1 speed is unknown, defaulting to 1000 [ 202.625075][T10648] wg1 speed is unknown, defaulting to 1000 [ 202.714531][T10657] __nla_validate_parse: 12 callbacks suppressed [ 202.714548][T10657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1177'. [ 202.972491][T10670] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1180'. [ 203.059644][T10662] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 203.083783][T10662] bond1 (unregistering): Released all slaves [ 203.310885][T10689] tipc: Enabled bearer , priority 0 [ 203.331176][T10689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1186'. [ 203.385478][T10689] tipc: Resetting bearer [ 203.429018][T10693] netlink: 'syz.2.1189': attribute type 2 has an invalid length. [ 203.510013][T10700] netlink: 'syz.0.1191': attribute type 4 has an invalid length. [ 203.518560][T10700] netlink: 'syz.0.1191': attribute type 2 has an invalid length. [ 203.526304][T10700] netlink: 'syz.0.1191': attribute type 8 has an invalid length. [ 203.543103][T10700] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1191'. [ 203.821369][T10726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 203.948548][T10740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1202'. [ 204.014563][T10740] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1202'. [ 204.103944][T10751] syzkaller0: entered promiscuous mode [ 204.116028][T10751] syzkaller0: entered allmulticast mode [ 204.125784][T10747] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1204'. [ 204.160377][T10747] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1204'. [ 204.173549][T10754] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1205'. [ 204.200539][T10754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1205'. [ 204.294537][T10754] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 204.407243][ T1170] tipc: Node number set to 3731408554 [ 204.848118][T10781] batadv_slave_1: entered promiscuous mode [ 204.877885][T10781] batman_adv: batadv0: Adding interface: macvlan3 [ 204.899549][T10781] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.926591][T10781] batman_adv: batadv0: Interface activated: macvlan3 [ 204.957541][T10784] syzkaller0: entered promiscuous mode [ 204.967405][T10784] syzkaller0: entered allmulticast mode [ 205.694557][T10813] syzkaller1: entered promiscuous mode [ 205.712270][T10813] syzkaller1: entered allmulticast mode [ 205.750211][T10808] bond0: (slave rose0): Enslaving as an active interface with an up link [ 205.783540][T10816] vlan4: entered promiscuous mode [ 205.789181][T10816] bond0: entered promiscuous mode [ 205.794297][T10816] : entered promiscuous mode [ 205.799449][T10816] bond_slave_1: entered promiscuous mode [ 205.834001][T10804] netlink: 'syz.2.1222': attribute type 6 has an invalid length. [ 206.062886][T10837] siw: device registration error -23 [ 206.093436][T10830] wg1 speed is unknown, defaulting to 1000 [ 206.095570][T10831] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 206.139558][T10837] xt_TCPMSS: Only works on TCP SYN packets [ 206.187601][T10831] bridge_slave_0: left allmulticast mode [ 206.220504][T10831] bridge_slave_0: left promiscuous mode [ 206.239649][T10831] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.265985][T10831] bridge_slave_1: left allmulticast mode [ 206.273355][T10831] bridge_slave_1: left promiscuous mode [ 206.281649][T10831] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.302686][T10831] team0: Port device team_slave_1 removed [ 206.309109][T10831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.318300][T10831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.329305][T10831] bond0: (slave ip6gretap1): Removing an active aggregator [ 206.340167][T10831] bond0: (slave ip6gretap1): Releasing backup interface [ 206.355737][T10831] bond6: (slave gretap1): Releasing active interface [ 206.629818][T10862] netlink: 'syz.4.1237': attribute type 2 has an invalid length. [ 206.659617][T10032] dummy0: left promiscuous mode [ 207.238331][T10878] wg1 speed is unknown, defaulting to 1000 [ 207.261388][T10885] lo speed is unknown, defaulting to 1000 [ 207.311829][T10885] lo speed is unknown, defaulting to 1000 [ 207.346609][T10885] lo speed is unknown, defaulting to 1000 [ 207.706979][ T5919] lo speed is unknown, defaulting to 1000 [ 207.720128][T10885] infiniband syz2: set down [ 207.732105][T10885] infiniband syz2: added lo [ 207.766374][T10911] __nla_validate_parse: 12 callbacks suppressed [ 207.766393][T10911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1253'. [ 207.880659][T10885] RDS/IB: syz2: added [ 207.885912][T10885] smc: adding ib device syz2 with port count 1 [ 207.910344][T10885] smc: ib device syz2 port 1 has no pnetid [ 207.920477][ T5919] lo speed is unknown, defaulting to 1000 [ 207.935534][T10914] netlink: 'syz.1.1255': attribute type 10 has an invalid length. [ 207.959786][T10885] lo speed is unknown, defaulting to 1000 [ 207.979419][T10914] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1255'. [ 207.990568][T10914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.998200][T10914] bridge0: port 4(bond0) entered blocking state [ 208.004832][T10914] bridge0: port 4(bond0) entered disabled state [ 208.011739][T10914] bond0: entered allmulticast mode [ 208.016970][T10914] : entered allmulticast mode [ 208.022710][T10914] bond_slave_1: entered allmulticast mode [ 208.338079][T10930] tipc: Enabling of bearer rejected, already enabled [ 208.727071][T10956] netlink: 'syz.0.1265': attribute type 11 has an invalid length. [ 208.741525][T10956] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.1265'. [ 208.816279][T10965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.839521][T10885] lo speed is unknown, defaulting to 1000 [ 208.905660][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1267'. [ 208.973697][T10974] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1268'. [ 209.076371][T10978] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 209.156008][T10981] vlan4: entered promiscuous mode [ 209.167706][T10981] dummy0: entered promiscuous mode [ 209.240075][T10885] lo speed is unknown, defaulting to 1000 [ 209.598517][T10885] lo speed is unknown, defaulting to 1000 [ 209.826976][T11004] netlink: 'syz.0.1279': attribute type 2 has an invalid length. [ 209.836773][T11004] netlink: 'syz.0.1279': attribute type 1 has an invalid length. [ 209.846328][T11004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1279'. [ 210.066561][T10885] lo speed is unknown, defaulting to 1000 [ 210.163549][T11008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1282'. [ 210.218135][T11010] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1283'. [ 210.362422][ T55] block nbd0: Possible stuck request ffff888024c60000: control (read@0,1024B). Runtime 60 seconds [ 210.370211][T11026] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1286'. [ 210.373507][ T55] block nbd0: Possible stuck request ffff888024c601c0: control (read@1024,1024B). Runtime 60 seconds [ 210.395172][ T55] block nbd0: Possible stuck request ffff888024c60380: control (read@2048,1024B). Runtime 60 seconds [ 210.406488][ T55] block nbd0: Possible stuck request ffff888024c60540: control (read@3072,1024B). Runtime 60 seconds [ 210.610158][T10885] lo speed is unknown, defaulting to 1000 [ 210.629234][T11041] xt_TCPMSS: Only works on TCP SYN packets [ 210.792811][T11052] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20003 [ 211.007685][T11062] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 211.065222][T10885] lo speed is unknown, defaulting to 1000 [ 211.332266][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1298'. [ 211.344436][T10885] lo speed is unknown, defaulting to 1000 [ 211.627861][T10885] lo speed is unknown, defaulting to 1000 [ 211.681856][T11078] syzkaller0: entered promiscuous mode [ 211.687892][T11078] syzkaller0: entered allmulticast mode [ 211.698997][T11078] syzkaller0: mtu less than device minimum [ 211.845945][T10885] lo speed is unknown, defaulting to 1000 [ 211.974254][T10885] lo speed is unknown, defaulting to 1000 [ 212.098972][T11047] wg1 speed is unknown, defaulting to 1000 [ 212.115391][T11060] wg1 speed is unknown, defaulting to 1000 [ 212.137700][T11080] wg1 speed is unknown, defaulting to 1000 [ 212.184082][T11063] wg1 speed is unknown, defaulting to 1000 [ 212.189397][T11082] ieee802154 phy0 wpan0: encryption failed: -22 [ 212.229683][T11011] wg1 speed is unknown, defaulting to 1000 [ 212.252897][T11087] Bluetooth: MGMT ver 1.23 [ 212.864706][T11098] __nla_validate_parse: 2 callbacks suppressed [ 212.864722][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1305'. [ 213.559406][T11108] netlink: 'syz.4.1309': attribute type 3 has an invalid length. [ 213.859273][T11112] wg1 speed is unknown, defaulting to 1000 [ 213.883684][T11112] lo speed is unknown, defaulting to 1000 [ 214.064734][T11124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1313'. [ 214.207387][T11124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1313'. [ 214.292405][T11129] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1315'. [ 214.337690][T11129] netlink: 'syz.4.1315': attribute type 9 has an invalid length. [ 214.371459][T11129] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1315'. [ 214.423812][T11129] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1315'. [ 214.621215][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1321'. [ 215.347824][T11187] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1331'. [ 215.506923][T11194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1331'. [ 215.547049][T11194] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1331'. [ 215.559526][T11196] syzkaller0: entered promiscuous mode [ 215.565122][T11196] syzkaller0: entered allmulticast mode [ 216.269705][T11214] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.324989][T11214] macsec1: entered allmulticast mode [ 216.353918][T11214] macsec0: entered allmulticast mode [ 216.613397][T11236] syzkaller0: entered promiscuous mode [ 216.635843][T11236] syzkaller0: entered allmulticast mode [ 216.847653][T11257] Cannot find del_set index 3 as target [ 217.051496][T11260] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.285518][T11260] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.421997][T11262] netlink: 'syz.4.1349': attribute type 1 has an invalid length. [ 217.540000][T11260] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.634654][T11262] 8021q: adding VLAN 0 to HW filter on device bond7 [ 217.691132][T11273] bond7: (slave geneve2): making interface the new active one [ 217.702351][T11273] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 217.763762][T11260] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.799113][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.817047][T11286] wg1 speed is unknown, defaulting to 1000 [ 217.886579][T11293] sctp: [Deprecated]: syz.2.1356 (pid 11293) Use of int in maxseg socket option. [ 217.886579][T11293] Use struct sctp_assoc_value instead [ 217.903437][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.923246][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.945099][T11286] lo speed is unknown, defaulting to 1000 [ 217.945250][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.045310][ T43] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.161546][T10042] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.221351][ T43] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.280626][ T43] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.732318][T11313] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 219.064153][T11323] syzkaller0: entered promiscuous mode [ 219.075143][T11323] syzkaller0: entered allmulticast mode [ 219.739850][T11336] __nla_validate_parse: 9 callbacks suppressed [ 219.739867][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1367'. [ 219.761121][T11336] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1367'. [ 220.855191][T11336] gretap1: entered promiscuous mode [ 220.871395][T11344] wg1 speed is unknown, defaulting to 1000 [ 220.886437][T11344] lo speed is unknown, defaulting to 1000 [ 221.276521][T11360] wg1 speed is unknown, defaulting to 1000 [ 221.276572][T11365] netlink: 'syz.0.1375': attribute type 27 has an invalid length. [ 221.350851][T11363] wg1 speed is unknown, defaulting to 1000 [ 221.382403][T11371] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1375'. [ 221.387166][T11365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1375'. [ 221.401826][T11360] lo speed is unknown, defaulting to 1000 [ 221.427006][T11374] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1374'. [ 221.501718][T11367] wg1 speed is unknown, defaulting to 1000 [ 221.844422][T11392] sctp: [Deprecated]: syz.4.1383 (pid 11392) Use of int in maxseg socket option. [ 221.844422][T11392] Use struct sctp_assoc_value instead [ 221.863551][T11363] lo speed is unknown, defaulting to 1000 [ 221.945084][T11396] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1385'. [ 221.955201][T11396] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1385'. [ 221.965092][T11396] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1385'. [ 221.975143][T11396] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1385'. [ 221.984944][T11396] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1385'. [ 222.328453][T11367] lo speed is unknown, defaulting to 1000 [ 222.708393][T11415] wg1 speed is unknown, defaulting to 1000 [ 222.859604][T11415] lo speed is unknown, defaulting to 1000 [ 223.783564][T11443] openvswitch: netlink: Flow key attr not present in new flow. [ 223.971745][T11449] netlink: 'syz.2.1399': attribute type 1 has an invalid length. [ 224.076775][T11452] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 224.084654][T11452] IPv6: NLM_F_CREATE should be set when creating new route [ 224.092072][T11452] IPv6: NLM_F_CREATE should be set when creating new route [ 224.107948][T11452] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 224.199987][T11449] bond5: entered promiscuous mode [ 224.205525][T11449] 8021q: adding VLAN 0 to HW filter on device bond5 [ 224.275114][T11451] 8021q: adding VLAN 0 to HW filter on device bond5 [ 224.282639][T11451] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 224.293342][T11451] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 224.308866][T11451] bond5: (slave wireguard0): making interface the new active one [ 224.317397][T11451] wireguard0: entered promiscuous mode [ 224.323958][T11451] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 224.665168][T11471] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 224.825678][T11475] __nla_validate_parse: 31 callbacks suppressed [ 224.825697][T11475] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1404'. [ 225.433534][T11515] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1416'. [ 225.564796][T11521] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1417'. [ 225.596115][T11521] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1417'. [ 225.606364][T11521] netlink: 'syz.2.1417': attribute type 5 has an invalid length. [ 225.615805][T11521] netlink: 'syz.2.1417': attribute type 6 has an invalid length. [ 225.624159][T11521] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1417'. [ 225.722042][T11524] syzkaller0: entered promiscuous mode [ 225.738110][T11524] syzkaller0: entered allmulticast mode [ 226.168800][T11540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1421'. [ 226.318417][T11540] ipvlan0: entered promiscuous mode [ 226.369182][T11540] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 226.588518][T11551] wg1 speed is unknown, defaulting to 1000 [ 226.630462][T11551] lo speed is unknown, defaulting to 1000 [ 226.764982][T11572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1429'. [ 227.055790][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1431'. [ 227.070596][T11588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1432'. [ 227.177707][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1432'. [ 227.235074][T11586] openvswitch: netlink: Unknown key attributes 2 [ 228.938191][T11661] netlink: 'syz.0.1451': attribute type 3 has an invalid length. [ 229.112719][T11670] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 230.099585][T11680] __nla_validate_parse: 8 callbacks suppressed [ 230.099604][T11680] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1455'. [ 230.417457][T11688] dvmrp0: entered allmulticast mode [ 230.953411][T11700] netlink: 'syz.4.1460': attribute type 33 has an invalid length. [ 230.961560][T11700] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1460'. [ 230.972229][T11700] `: renamed from team0 [ 232.053350][ T5197] udevd[5197]: worker [7019] /devices/virtual/block/nbd0 is taking a long time [ 240.417951][ T55] block nbd0: Possible stuck request ffff888024c60000: control (read@0,1024B). Runtime 90 seconds [ 240.428697][ T55] block nbd0: Possible stuck request ffff888024c601c0: control (read@1024,1024B). Runtime 90 seconds [ 240.439692][ T55] block nbd0: Possible stuck request ffff888024c60380: control (read@2048,1024B). Runtime 90 seconds [ 240.450721][ T55] block nbd0: Possible stuck request ffff888024c60540: control (read@3072,1024B). Runtime 90 seconds [ 244.164209][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 244.172783][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 244.180818][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 244.188866][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 244.196593][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 244.229860][T11714] wg1 speed is unknown, defaulting to 1000 [ 244.236627][T11714] lo speed is unknown, defaulting to 1000 [ 244.440927][T11714] chnl_net:caif_netlink_parms(): no params data found [ 244.509244][T11714] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.516420][T11714] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.523761][T11714] bridge_slave_0: entered allmulticast mode [ 244.530999][T11714] bridge_slave_0: entered promiscuous mode [ 244.540001][T11714] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.547281][T11714] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.554508][T11714] bridge_slave_1: entered allmulticast mode [ 244.562103][T11714] bridge_slave_1: entered promiscuous mode [ 244.590437][T11714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.601991][T11714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.632165][T11714] team0: Port device team_slave_0 added [ 244.639949][T11714] team0: Port device team_slave_1 added [ 244.665299][T11714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.673455][T11714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.699374][T11714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.711352][T11714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.718354][T11714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.744388][T11714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.784441][T11714] hsr_slave_0: entered promiscuous mode [ 244.791521][T11714] hsr_slave_1: entered promiscuous mode [ 244.798037][T11714] debugfs: 'hsr0' already exists in 'hsr' [ 244.803771][T11714] Cannot create hsr debugfs directory [ 245.184966][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 245.193055][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 245.201224][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 245.211232][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 245.219852][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 245.254076][T11723] wg1 speed is unknown, defaulting to 1000 [ 245.261061][T11723] lo speed is unknown, defaulting to 1000 [ 245.478948][T11723] chnl_net:caif_netlink_parms(): no params data found [ 245.546061][T11723] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.554309][T11723] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.561693][T11723] bridge_slave_0: entered allmulticast mode [ 245.569081][T11723] bridge_slave_0: entered promiscuous mode [ 245.578154][T11723] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.585382][T11723] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.592779][T11723] bridge_slave_1: entered allmulticast mode [ 245.599988][T11723] bridge_slave_1: entered promiscuous mode [ 245.628987][T11723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.641244][T11723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.673140][T11723] team0: Port device team_slave_0 added [ 245.681308][T11723] team0: Port device team_slave_1 added [ 245.707041][T11723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.714144][T11723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.740510][T11723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.752678][T11723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.760054][T11723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.786315][T11723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.828737][T11723] hsr_slave_0: entered promiscuous mode [ 245.835161][T11723] hsr_slave_1: entered promiscuous mode [ 245.841592][T11723] debugfs: 'hsr0' already exists in 'hsr' [ 245.847395][T11723] Cannot create hsr debugfs directory [ 246.257316][ T5147] Bluetooth: hci5: command tx timeout [ 246.320033][ T5831] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 246.331076][ T5831] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 246.341156][ T5831] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 246.350741][ T5831] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 246.360162][ T5831] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 246.385474][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 246.395898][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 246.405322][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 246.413055][T11733] wg1 speed is unknown, defaulting to 1000 [ 246.416199][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 246.421600][T11733] lo speed is unknown, defaulting to 1000 [ 246.427581][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 246.478347][T11735] wg1 speed is unknown, defaulting to 1000 [ 246.640006][T11735] lo speed is unknown, defaulting to 1000 [ 246.836265][ T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 246.845978][ T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 246.858554][ T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 246.866535][ T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 246.887259][ T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 246.944889][T11739] wg1 speed is unknown, defaulting to 1000 [ 246.970169][T11733] chnl_net:caif_netlink_parms(): no params data found [ 246.997996][T11739] lo speed is unknown, defaulting to 1000 [ 247.145189][T11733] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.152946][T11733] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.160340][T11733] bridge_slave_0: entered allmulticast mode [ 247.168876][T11733] bridge_slave_0: entered promiscuous mode [ 247.188049][T11733] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.195286][T11733] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.203338][T11733] bridge_slave_1: entered allmulticast mode [ 247.211476][T11733] bridge_slave_1: entered promiscuous mode [ 247.294162][T11733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.307718][ T5831] Bluetooth: hci6: command tx timeout [ 247.340365][T11733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.404605][T11733] team0: Port device team_slave_0 added [ 247.413623][T11733] team0: Port device team_slave_1 added [ 247.468785][T11735] chnl_net:caif_netlink_parms(): no params data found [ 247.480858][T11733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.487958][T11733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.514161][T11733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.535878][T11733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.543247][T11733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.570161][T11733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.701560][T11733] hsr_slave_0: entered promiscuous mode [ 247.708351][T11733] hsr_slave_1: entered promiscuous mode [ 247.714732][T11733] debugfs: 'hsr0' already exists in 'hsr' [ 247.721089][T11733] Cannot create hsr debugfs directory [ 247.731419][T11739] chnl_net:caif_netlink_parms(): no params data found [ 247.805386][T11735] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.813002][T11735] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.820533][T11735] bridge_slave_0: entered allmulticast mode [ 247.827916][T11735] bridge_slave_0: entered promiscuous mode [ 247.846590][T11735] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.854170][T11735] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.861615][T11735] bridge_slave_1: entered allmulticast mode [ 247.869897][T11735] bridge_slave_1: entered promiscuous mode [ 247.943973][T11735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.957538][T11735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.994427][T11739] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.001655][T11739] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.009147][T11739] bridge_slave_0: entered allmulticast mode [ 248.016423][T11739] bridge_slave_0: entered promiscuous mode [ 248.043520][T11739] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.051000][T11739] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.058386][T11739] bridge_slave_1: entered allmulticast mode [ 248.065468][T11739] bridge_slave_1: entered promiscuous mode [ 248.080991][T11735] team0: Port device team_slave_0 added [ 248.118740][T11735] team0: Port device team_slave_1 added [ 248.154607][T11739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.173789][T11739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.211474][T11735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.218639][T11735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.245132][T11735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.279979][T11735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.287042][T11735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.313820][T11735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.333790][T11739] team0: Port device team_slave_0 added [ 248.341553][ T5831] Bluetooth: hci5: command tx timeout [ 248.345372][T11739] team0: Port device team_slave_1 added [ 248.422113][T11735] hsr_slave_0: entered promiscuous mode [ 248.427409][ T5831] Bluetooth: hci7: command tx timeout [ 248.428965][T11735] hsr_slave_1: entered promiscuous mode [ 248.439941][T11735] debugfs: 'hsr0' already exists in 'hsr' [ 248.445673][T11735] Cannot create hsr debugfs directory [ 248.452395][T11739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.459403][T11739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.487299][T11739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.498356][ T5831] Bluetooth: hci8: command tx timeout [ 248.529444][T11739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.536406][T11739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.564150][T11739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.659256][T11739] hsr_slave_0: entered promiscuous mode [ 248.665614][T11739] hsr_slave_1: entered promiscuous mode [ 248.672312][T11739] debugfs: 'hsr0' already exists in 'hsr' [ 248.678194][T11739] Cannot create hsr debugfs directory [ 248.977417][ T5831] Bluetooth: hci9: command tx timeout [ 249.377803][ T5831] Bluetooth: hci6: command tx timeout [ 250.427487][ T5831] Bluetooth: hci5: command tx timeout [ 250.497310][ T5831] Bluetooth: hci7: command tx timeout [ 250.577725][ T5831] Bluetooth: hci8: command tx timeout [ 251.057436][ T5831] Bluetooth: hci9: command tx timeout [ 251.457447][ T5831] Bluetooth: hci6: command tx timeout [ 252.497349][ T5831] Bluetooth: hci5: command tx timeout [ 252.578226][ T5831] Bluetooth: hci7: command tx timeout [ 252.657404][ T5831] Bluetooth: hci8: command tx timeout [ 253.137364][ T5831] Bluetooth: hci9: command tx timeout [ 253.537337][ T5831] Bluetooth: hci6: command tx timeout [ 254.667292][ T5831] Bluetooth: hci7: command tx timeout [ 254.737377][ T5831] Bluetooth: hci8: command tx timeout [ 255.217338][ T5831] Bluetooth: hci9: command tx timeout [ 255.779524][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.785862][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.497508][ T55] block nbd0: Possible stuck request ffff888024c60000: control (read@0,1024B). Runtime 120 seconds [ 270.508416][ T55] block nbd0: Possible stuck request ffff888024c601c0: control (read@1024,1024B). Runtime 120 seconds [ 270.519409][ T55] block nbd0: Possible stuck request ffff888024c60380: control (read@2048,1024B). Runtime 120 seconds [ 270.530626][ T55] block nbd0: Possible stuck request ffff888024c60540: control (read@3072,1024B). Runtime 120 seconds [ 300.579547][ T55] block nbd0: Possible stuck request ffff888024c60000: control (read@0,1024B). Runtime 150 seconds [ 300.590368][ T55] block nbd0: Possible stuck request ffff888024c601c0: control (read@1024,1024B). Runtime 150 seconds [ 300.601439][ T55] block nbd0: Possible stuck request ffff888024c60380: control (read@2048,1024B). Runtime 150 seconds [ 300.612446][ T55] block nbd0: Possible stuck request ffff888024c60540: control (read@3072,1024B). Runtime 150 seconds [ 304.267993][ T51] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 304.276451][ T51] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 304.284626][ T51] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 304.293647][ T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 304.302591][ T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 304.334989][T11759] wg1 speed is unknown, defaulting to 1000 [ 304.342105][T11759] lo speed is unknown, defaulting to 1000 [ 304.557465][T11759] chnl_net:caif_netlink_parms(): no params data found [ 304.625343][T11759] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.632729][T11759] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.640330][T11759] bridge_slave_0: entered allmulticast mode [ 304.648344][T11759] bridge_slave_0: entered promiscuous mode [ 304.658014][T11759] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.665171][T11759] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.672540][T11759] bridge_slave_1: entered allmulticast mode [ 304.679768][T11759] bridge_slave_1: entered promiscuous mode [ 304.709532][T11759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.721590][T11759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.753132][T11759] team0: Port device team_slave_0 added [ 304.762105][T11759] team0: Port device team_slave_1 added [ 304.788243][T11759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.795203][T11759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.823027][T11759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.835387][T11759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.842467][T11759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.869215][T11759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.911012][T11759] hsr_slave_0: entered promiscuous mode [ 304.918247][T11759] hsr_slave_1: entered promiscuous mode [ 304.924390][T11759] debugfs: 'hsr0' already exists in 'hsr' [ 304.930224][T11759] Cannot create hsr debugfs directory [ 305.288380][ T51] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 305.297001][ T51] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 305.306499][ T51] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 305.316981][ T51] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 305.324986][ T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 305.392370][T11768] wg1 speed is unknown, defaulting to 1000 [ 305.404490][T11768] lo speed is unknown, defaulting to 1000 [ 305.635098][T11768] chnl_net:caif_netlink_parms(): no params data found [ 305.702796][T11768] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.710055][T11768] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.717710][T11768] bridge_slave_0: entered allmulticast mode [ 305.724880][T11768] bridge_slave_0: entered promiscuous mode [ 305.733317][T11768] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.740885][T11768] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.748368][T11768] bridge_slave_1: entered allmulticast mode [ 305.755562][T11768] bridge_slave_1: entered promiscuous mode [ 305.787201][T11768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.799336][T11768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.831023][T11768] team0: Port device team_slave_0 added [ 305.839818][T11768] team0: Port device team_slave_1 added [ 305.868013][T11768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.874962][T11768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.901102][T11768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.913572][T11768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.920920][T11768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.947361][T11768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.989428][T11768] hsr_slave_0: entered promiscuous mode [ 305.995799][T11768] hsr_slave_1: entered promiscuous mode [ 306.002343][T11768] debugfs: 'hsr0' already exists in 'hsr' [ 306.008180][T11768] Cannot create hsr debugfs directory [ 306.337267][ T5831] Bluetooth: hci10: command tx timeout [ 306.453545][ T51] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 306.463864][ T51] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 306.483477][ T51] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 306.493127][ T51] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 306.501366][ T51] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 306.510546][ T51] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 306.520597][ T5147] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 306.530362][ T5147] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 306.549722][ T5147] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 306.558695][ T5147] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 306.622607][T11780] wg1 speed is unknown, defaulting to 1000 [ 306.631796][T11780] lo speed is unknown, defaulting to 1000 [ 306.631796][T11778] wg1 speed is unknown, defaulting to 1000 [ 306.746896][T11778] lo speed is unknown, defaulting to 1000 [ 306.936496][T11780] chnl_net:caif_netlink_parms(): no params data found [ 307.059904][T11780] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.067533][T11780] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.074956][T11780] bridge_slave_0: entered allmulticast mode [ 307.082697][T11780] bridge_slave_0: entered promiscuous mode [ 307.094994][T11780] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.102264][T11780] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.109661][T11780] bridge_slave_1: entered allmulticast mode [ 307.116753][T11780] bridge_slave_1: entered promiscuous mode [ 307.159654][T11780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.185772][T11780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.289637][T11780] team0: Port device team_slave_0 added [ 307.304893][T11780] team0: Port device team_slave_1 added [ 307.379375][ T5147] Bluetooth: hci11: command tx timeout [ 307.404502][T11778] chnl_net:caif_netlink_parms(): no params data found [ 307.420201][T11780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.430097][T11780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.456724][T11780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.466046][T10364] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 307.477781][T10364] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 307.486335][T10364] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 307.494532][T10364] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 307.495007][T11780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.503045][T10364] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 307.509813][T11780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 307.542000][T11780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.628407][T11780] hsr_slave_0: entered promiscuous mode [ 307.635541][T11780] hsr_slave_1: entered promiscuous mode [ 307.642000][T11780] debugfs: 'hsr0' already exists in 'hsr' [ 307.647804][T11780] Cannot create hsr debugfs directory [ 307.701963][T11778] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.709509][T11778] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.716747][T11778] bridge_slave_0: entered allmulticast mode [ 307.724163][T11778] bridge_slave_0: entered promiscuous mode [ 307.732147][T11792] wg1 speed is unknown, defaulting to 1000 [ 307.733171][T11778] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.745239][T11778] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.752598][T11778] bridge_slave_1: entered allmulticast mode [ 307.759862][T11778] bridge_slave_1: entered promiscuous mode [ 307.785505][T11792] lo speed is unknown, defaulting to 1000 [ 307.848554][T11778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.870450][T11778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.934378][T11778] team0: Port device team_slave_0 added [ 307.961132][T11778] team0: Port device team_slave_1 added [ 308.040233][T11778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.047361][T11778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.073931][T11778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.101641][T11778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.108874][T11778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.135120][T11778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.218930][T11778] hsr_slave_0: entered promiscuous mode [ 308.225429][T11778] hsr_slave_1: entered promiscuous mode [ 308.232490][T11778] debugfs: 'hsr0' already exists in 'hsr' [ 308.238426][T11778] Cannot create hsr debugfs directory [ 308.417505][T10364] Bluetooth: hci10: command tx timeout [ 308.503468][T11792] chnl_net:caif_netlink_parms(): no params data found [ 308.577364][T10364] Bluetooth: hci12: command tx timeout [ 308.604935][T11792] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.612960][T11792] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.621169][T11792] bridge_slave_0: entered allmulticast mode [ 308.628809][T11792] bridge_slave_0: entered promiscuous mode [ 308.644039][T11792] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.651718][T11792] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.660046][T11792] bridge_slave_1: entered allmulticast mode [ 308.667479][T11792] bridge_slave_1: entered promiscuous mode [ 308.667598][T10364] Bluetooth: hci13: command tx timeout [ 308.712425][T11792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.725831][T11792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.762565][T11792] team0: Port device team_slave_0 added [ 308.771223][T11792] team0: Port device team_slave_1 added [ 308.806990][T11792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.814484][T11792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.841292][T11792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.854619][T11792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.861698][T11792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 308.887769][T11792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.945909][T11792] hsr_slave_0: entered promiscuous mode [ 308.952862][T11792] hsr_slave_1: entered promiscuous mode [ 308.959838][T11792] debugfs: 'hsr0' already exists in 'hsr' [ 308.965592][T11792] Cannot create hsr debugfs directory [ 309.457486][T10364] Bluetooth: hci11: command tx timeout [ 309.547441][T10364] Bluetooth: hci14: command tx timeout [ 310.497350][T10364] Bluetooth: hci10: command tx timeout [ 310.657503][T10364] Bluetooth: hci12: command tx timeout [ 310.737342][T10364] Bluetooth: hci13: command tx timeout [ 311.537305][T10364] Bluetooth: hci11: command tx timeout [ 311.617403][T10364] Bluetooth: hci14: command tx timeout [ 312.577261][T10364] Bluetooth: hci10: command tx timeout [ 312.738296][T10364] Bluetooth: hci12: command tx timeout [ 312.817326][T10364] Bluetooth: hci13: command tx timeout [ 313.617250][T10364] Bluetooth: hci11: command tx timeout [ 313.697393][T10364] Bluetooth: hci14: command tx timeout [ 314.817358][T10364] Bluetooth: hci12: command tx timeout [ 314.907300][T10364] Bluetooth: hci13: command tx timeout [ 315.777477][T10364] Bluetooth: hci14: command tx timeout [ 317.220996][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.227447][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.377283][ T5197] udevd[5197]: worker [7019] /devices/virtual/block/nbd0 timeout; kill it [ 330.385953][ T5197] udevd[5197]: seq 14792 '/devices/virtual/block/nbd0' killed [ 330.658859][ T55] block nbd0: Possible stuck request ffff888024c60000: control (read@0,1024B). Runtime 180 seconds [ 330.669752][ T55] block nbd0: Possible stuck request ffff888024c601c0: control (read@1024,1024B). Runtime 180 seconds [ 330.681004][ T55] block nbd0: Possible stuck request ffff888024c60380: control (read@2048,1024B). Runtime 180 seconds [ 330.692054][ T55] block nbd0: Possible stuck request ffff888024c60540: control (read@3072,1024B). Runtime 180 seconds [ 339.777606][ T5147] Bluetooth: hci4: command 0x0406 tx timeout [ 360.739141][ T55] block nbd0: Possible stuck request ffff888024c60000: control (read@0,1024B). Runtime 210 seconds [ 360.750064][ T55] block nbd0: Possible stuck request ffff888024c601c0: control (read@1024,1024B). Runtime 210 seconds [ 360.761317][ T55] block nbd0: Possible stuck request ffff888024c60380: control (read@2048,1024B). Runtime 210 seconds [ 360.772646][ T55] block nbd0: Possible stuck request ffff888024c60540: control (read@3072,1024B). Runtime 210 seconds [ 364.355743][ T5147] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 364.364090][ T5147] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 364.372987][ T5147] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 364.382941][ T5147] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 364.391000][ T5147] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 364.424650][T11804] wg1 speed is unknown, defaulting to 1000 [ 364.432104][T11804] lo speed is unknown, defaulting to 1000 [ 364.645957][T11804] chnl_net:caif_netlink_parms(): no params data found [ 364.721074][T11804] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.728444][T11804] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.735879][T11804] bridge_slave_0: entered allmulticast mode [ 364.743523][T11804] bridge_slave_0: entered promiscuous mode [ 364.751595][T11804] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.759178][T11804] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.766519][T11804] bridge_slave_1: entered allmulticast mode [ 364.773889][T11804] bridge_slave_1: entered promiscuous mode [ 364.803335][T11804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.815743][T11804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.849974][T11804] team0: Port device team_slave_0 added [ 364.858366][T11804] team0: Port device team_slave_1 added [ 364.884881][T11804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.891895][T11804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.919546][T11804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.933285][T11804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.940890][T11804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.967635][T11804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.008975][T11804] hsr_slave_0: entered promiscuous mode [ 365.015533][T11804] hsr_slave_1: entered promiscuous mode [ 365.022050][T11804] debugfs: 'hsr0' already exists in 'hsr' [ 365.028076][T11804] Cannot create hsr debugfs directory [ 365.381333][ T5147] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 365.391956][ T5147] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 365.400218][ T5147] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 365.409072][ T5147] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 365.417979][ T5147] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 365.492620][T11813] wg1 speed is unknown, defaulting to 1000 [ 365.499851][T11813] lo speed is unknown, defaulting to 1000 [ 365.728258][T11813] chnl_net:caif_netlink_parms(): no params data found [ 365.801062][T11813] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.808381][T11813] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.815828][T11813] bridge_slave_0: entered allmulticast mode [ 365.823326][T11813] bridge_slave_0: entered promiscuous mode [ 365.832052][T11813] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.839361][T11813] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.846648][T11813] bridge_slave_1: entered allmulticast mode [ 365.854182][T11813] bridge_slave_1: entered promiscuous mode [ 365.889658][T11813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.901548][T11813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.933613][T11813] team0: Port device team_slave_0 added [ 365.942770][T11813] team0: Port device team_slave_1 added [ 365.970116][T11813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.977594][T11813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.003972][T11813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.016259][T11813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.023853][T11813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.050728][T11813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.092282][T11813] hsr_slave_0: entered promiscuous mode [ 366.099464][T11813] hsr_slave_1: entered promiscuous mode [ 366.105896][T11813] debugfs: 'hsr0' already exists in 'hsr' [ 366.111737][T11813] Cannot create hsr debugfs directory [ 366.419403][ T5147] Bluetooth: hci15: command tx timeout [ 366.566813][T10364] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 366.589229][T10364] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 366.598490][ T51] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 366.608757][ T51] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 366.619280][T10364] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 366.626777][ T51] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 366.636568][ T51] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 366.644153][ T51] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 366.652340][T10364] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 366.662356][T10364] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 366.720051][T11823] wg1 speed is unknown, defaulting to 1000 [ 366.727648][T11823] lo speed is unknown, defaulting to 1000 [ 366.741535][T11825] wg1 speed is unknown, defaulting to 1000 [ 366.849036][T11825] lo speed is unknown, defaulting to 1000 [ 367.034869][T11823] chnl_net:caif_netlink_parms(): no params data found [ 367.166058][T11823] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.173609][T11823] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.181752][T11823] bridge_slave_0: entered allmulticast mode [ 367.190282][T11823] bridge_slave_0: entered promiscuous mode [ 367.199754][T11823] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.207586][T11823] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.215498][T11823] bridge_slave_1: entered allmulticast mode [ 367.224636][T11823] bridge_slave_1: entered promiscuous mode [ 367.284953][T11823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.336600][T11823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.431591][T11823] team0: Port device team_slave_0 added [ 367.450747][T11823] team0: Port device team_slave_1 added [ 367.463639][ T51] Bluetooth: hci16: command tx timeout [ 367.505610][ T5831] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 367.515529][ T5831] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 367.525696][ T5831] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 367.528103][T11825] chnl_net:caif_netlink_parms(): no params data found [ 367.536250][ T5831] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 367.549355][ T5831] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 367.555169][T11823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.563544][T11823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.590092][T11823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.608677][T11823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.615736][T11823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.642263][T11823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.766431][T11823] hsr_slave_0: entered promiscuous mode [ 367.773551][T11823] hsr_slave_1: entered promiscuous mode [ 367.780665][T11823] debugfs: 'hsr0' already exists in 'hsr' [ 367.786390][T11823] Cannot create hsr debugfs directory [ 367.792462][T11825] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.799886][T11825] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.807216][T11825] bridge_slave_0: entered allmulticast mode [ 367.814391][T11825] bridge_slave_0: entered promiscuous mode [ 367.821868][T11837] wg1 speed is unknown, defaulting to 1000 [ 367.822792][T11825] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.835454][T11825] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.843033][T11825] bridge_slave_1: entered allmulticast mode [ 367.850344][T11825] bridge_slave_1: entered promiscuous mode [ 367.871885][T11837] lo speed is unknown, defaulting to 1000 [ 367.920570][T11825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.956413][T11825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.025063][T11825] team0: Port device team_slave_0 added [ 368.042786][T11825] team0: Port device team_slave_1 added [ 368.111157][T11825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.118292][T11825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.144433][T11825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.176381][T11825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.183765][T11825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.211480][T11825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.332948][T11825] hsr_slave_0: entered promiscuous mode [ 368.340425][T11825] hsr_slave_1: entered promiscuous mode [ 368.346721][T11825] debugfs: 'hsr0' already exists in 'hsr' [ 368.353082][T11825] Cannot create hsr debugfs directory [ 368.507566][ T51] Bluetooth: hci15: command tx timeout [ 368.595242][T11837] chnl_net:caif_netlink_parms(): no params data found [ 368.696028][T11837] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.703359][T11837] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.711022][T11837] bridge_slave_0: entered allmulticast mode [ 368.718497][T11837] bridge_slave_0: entered promiscuous mode [ 368.726453][T11837] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.733712][T11837] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.741789][T11837] bridge_slave_1: entered allmulticast mode [ 368.747404][ T51] Bluetooth: hci18: command tx timeout [ 368.750771][T11837] bridge_slave_1: entered promiscuous mode [ 368.753890][ T51] Bluetooth: hci17: command tx timeout [ 368.802264][T11837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.814505][T11837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.853745][T11837] team0: Port device team_slave_0 added [ 368.861790][T11837] team0: Port device team_slave_1 added [ 368.891932][T11837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.899833][T11837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.925960][T11837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.939419][T11837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.946913][T11837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.974496][T11837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.037926][T11837] hsr_slave_0: entered promiscuous mode [ 369.044434][T11837] hsr_slave_1: entered promiscuous mode [ 369.051512][T11837] debugfs: 'hsr0' already exists in 'hsr' [ 369.057612][T11837] Cannot create hsr debugfs directory [ 369.537620][ T5827] Bluetooth: hci16: command tx timeout [ 369.617325][ T5827] Bluetooth: hci19: command tx timeout [ 370.500410][ T5827] Bluetooth: hci9: command 0x0406 tx timeout [ 370.501742][T11848] Bluetooth: hci8: command 0x0406 tx timeout [ 370.508628][ T5827] Bluetooth: hci7: command 0x0406 tx timeout [ 370.515184][T11848] Bluetooth: hci5: command 0x0406 tx timeout [ 370.519436][ T5827] Bluetooth: hci6: command 0x0406 tx timeout [ 370.577353][ T5831] Bluetooth: hci15: command tx timeout [ 370.817313][ T5831] Bluetooth: hci17: command tx timeout [ 370.817390][T10364] Bluetooth: hci18: command tx timeout [ 371.618562][T10364] Bluetooth: hci16: command tx timeout [ 371.697272][T10364] Bluetooth: hci19: command tx timeout [ 372.657254][T10364] Bluetooth: hci15: command tx timeout [ 372.897397][T10364] Bluetooth: hci18: command tx timeout [ 372.902933][T10364] Bluetooth: hci17: command tx timeout [ 373.697423][T10364] Bluetooth: hci16: command tx timeout [ 373.777312][T10364] Bluetooth: hci19: command tx timeout [ 374.977265][T10364] Bluetooth: hci17: command tx timeout [ 374.977295][ T5831] Bluetooth: hci18: command tx timeout [ 375.457387][ T31] INFO: task syz.0.1451:11661 blocked for more than 143 seconds. [ 375.465154][ T31] Not tainted syzkaller #0 [ 375.470178][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 375.478886][ T31] task:syz.0.1451 state:D stack:25944 pid:11661 tgid:11659 ppid:5836 task_flags:0x480140 flags:0x00080002 [ 375.491148][ T31] Call Trace: [ 375.494438][ T31] [ 375.497456][ T31] __schedule+0x1798/0x4cc0 [ 375.502001][ T31] ? __lock_acquire+0xab9/0xd20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 375.506873][ T31] ? __lock_acquire+0xab9/0xd20 [ 375.511858][ T31] ? __pfx___schedule+0x10/0x10 [ 375.516751][ T31] ? schedule+0x91/0x360 [ 375.521137][ T31] schedule+0x165/0x360 [ 375.525336][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 375.530937][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 375.567196][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 375.573321][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 375.596766][ T31] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 375.603146][ T31] nbd_set_size+0x47e/0x6a0 [ 375.607819][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 375.612875][ T31] ? nla_memcpy+0x5b/0xc0 [ 375.617368][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 375.622406][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 375.627994][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 375.633985][ T31] ? bpf_lsm_capable+0x9/0x20 [ 375.638705][ T31] ? security_capable+0x7e/0x2e0 [ 375.643649][ T31] ? radix_tree_lookup+0x240/0x290 [ 375.648847][ T31] nbd_genl_reconfigure+0x414/0x1a50 [ 375.654161][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 375.659947][ T31] ? rcu_is_watching+0x15/0xb0 [ 375.664726][ T31] ? __nla_parse+0x40/0x60 [ 375.669261][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 375.676105][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 375.681846][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 375.688024][ T31] ? stack_trace_save+0x9c/0xe0 [ 375.692956][ T31] genl_rcv_msg+0x60e/0x790 [ 375.697638][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 375.702674][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 375.708514][ T31] netlink_rcv_skb+0x208/0x470 [ 375.713311][ T31] ? __lock_acquire+0xab9/0xd20 [ 375.718207][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 375.723323][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 375.728687][ T31] ? down_read+0x1ad/0x2e0 [ 375.733153][ T31] genl_rcv+0x28/0x40 [ 375.737187][ T31] netlink_unicast+0x82f/0x9e0 [ 375.741979][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 375.747361][ T31] ? netlink_sendmsg+0x642/0xb30 [ 375.752305][ T31] ? skb_put+0x11b/0x210 [ 375.756553][ T31] netlink_sendmsg+0x805/0xb30 [ 375.761424][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.766738][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 375.771729][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 375.777049][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.782360][ T31] __sock_sendmsg+0x21c/0x270 [ 375.787465][ T31] ____sys_sendmsg+0x505/0x830 [ 375.792262][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.797603][ T31] ? import_iovec+0x74/0xa0 [ 375.802117][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 375.806777][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.812056][ T31] ? __fget_files+0x2a/0x420 [ 375.816658][ T31] ? __fget_files+0x3a0/0x420 [ 375.821786][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 375.826805][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 375.832412][ T31] ? do_syscall_64+0xbe/0xfa0 [ 375.837190][ T31] do_syscall_64+0xfa/0xfa0 [ 375.841716][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.847146][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.853263][ T31] ? clear_bhb_loop+0x60/0xb0 [ 375.858175][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.864115][ T31] RIP: 0033:0x7f5b3f38f6c9 [ 375.868623][ T31] RSP: 002b:00007f5b40267038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.868697][ T5831] Bluetooth: hci19: command tx timeout [ 375.877500][ T31] RAX: ffffffffffffffda RBX: 00007f5b3f5e5fa0 RCX: 00007f5b3f38f6c9 [ 375.890785][ T31] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000004 [ 375.899156][ T31] RBP: 00007f5b3f411f91 R08: 0000000000000000 R09: 0000000000000000 [ 375.907344][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.915419][ T31] R13: 00007f5b3f5e6038 R14: 00007f5b3f5e5fa0 R15: 00007ffde1982c78 [ 375.923777][ T31] [ 375.926819][ T31] INFO: task syz.0.1451:11664 blocked for more than 143 seconds. [ 375.935498][ T31] Not tainted syzkaller #0 [ 375.941080][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 375.950091][ T31] task:syz.0.1451 state:D stack:28712 pid:11664 tgid:11659 ppid:5836 task_flags:0x400040 flags:0x00080002 [ 375.962128][ T31] Call Trace: [ 375.965412][ T31] [ 375.968417][ T31] __schedule+0x1798/0x4cc0 [ 375.972980][ T31] ? __lock_acquire+0xab9/0xd20 [ 375.978079][ T31] ? __lock_acquire+0xab9/0xd20 [ 375.982934][ T31] ? __pfx___schedule+0x10/0x10 [ 375.987970][ T31] ? schedule+0x91/0x360 [ 375.992219][ T31] schedule+0x165/0x360 [ 375.996361][ T31] schedule_preempt_disabled+0x13/0x30 [ 376.002376][ T31] __mutex_lock+0x7e6/0x1350 [ 376.006985][ T31] ? __mutex_lock+0x5bb/0x1350 [ 376.012069][ T31] ? genl_rcv_msg+0x10d/0x790 [ 376.016796][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 376.022069][ T31] ? stack_trace_save+0x9c/0xe0 [ 376.026944][ T31] ? radix_tree_lookup+0x240/0x290 [ 376.032249][ T31] genl_rcv_msg+0x10d/0x790 [ 376.036797][ T31] ? __lock_acquire+0xab9/0xd20 [ 376.041742][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.046822][ T31] netlink_rcv_skb+0x208/0x470 [ 376.051747][ T31] ? __lock_acquire+0xab9/0xd20 [ 376.056603][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.061795][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 376.067257][ T31] ? down_read+0x1ad/0x2e0 [ 376.071678][ T31] genl_rcv+0x28/0x40 [ 376.075644][ T31] netlink_unicast+0x82f/0x9e0 [ 376.080523][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 376.085821][ T31] ? netlink_sendmsg+0x642/0xb30 [ 376.090819][ T31] ? skb_put+0x11b/0x210 [ 376.095065][ T31] netlink_sendmsg+0x805/0xb30 [ 376.100308][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.105619][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 376.110770][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 376.116166][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.121736][ T31] __sock_sendmsg+0x21c/0x270 [ 376.126452][ T31] __sys_sendto+0x3bd/0x520 [ 376.131106][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 376.136149][ T31] ? __lock_acquire+0xab9/0xd20 [ 376.141177][ T31] ? fd_install+0x97/0x540 [ 376.145612][ T31] ? fd_install+0x30d/0x540 [ 376.150210][ T31] __x64_sys_sendto+0xde/0x100 [ 376.155022][ T31] do_syscall_64+0xfa/0xfa0 [ 376.159838][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.165057][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.171266][ T31] ? clear_bhb_loop+0x60/0xb0 [ 376.176225][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.182465][ T31] RIP: 0033:0x7f5b3f39155c [ 376.186902][ T31] RSP: 002b:00007f5b40223ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 376.195430][ T31] RAX: ffffffffffffffda RBX: 00007f5b40223fc0 RCX: 00007f5b3f39155c [ 376.203566][ T31] RDX: 000000000000001c RSI: 00007f5b40224010 RDI: 0000000000000007 [ 376.211712][ T31] RBP: 0000000000000000 R08: 00007f5b40223f14 R09: 000000000000000c [ 376.219979][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 376.228267][ T31] R13: 00007f5b40223f68 R14: 00007f5b40224010 R15: 0000000000000000 [ 376.236351][ T31] [ 376.239490][ T31] INFO: task syz.3.1453:11669 blocked for more than 144 seconds. [ 376.249400][ T31] Not tainted syzkaller #0 [ 376.254374][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.263330][ T31] task:syz.3.1453 state:D stack:28328 pid:11669 tgid:11667 ppid:5828 task_flags:0x400040 flags:0x00080002 [ 376.275352][ T31] Call Trace: [ 376.278769][ T31] [ 376.281724][ T31] __schedule+0x1798/0x4cc0 [ 376.286239][ T31] ? __lock_acquire+0xab9/0xd20 [ 376.291244][ T31] ? __lock_acquire+0xab9/0xd20 [ 376.296113][ T31] ? __pfx___schedule+0x10/0x10 [ 376.301148][ T31] ? schedule+0x91/0x360 [ 376.305404][ T31] schedule+0x165/0x360 [ 376.309640][ T31] schedule_preempt_disabled+0x13/0x30 [ 376.315109][ T31] __mutex_lock+0x7e6/0x1350 [ 376.319793][ T31] ? __mutex_lock+0x5bb/0x1350 [ 376.324572][ T31] ? genl_rcv_msg+0x10d/0x790 [ 376.329545][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 376.334586][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 376.340455][ T31] ? radix_tree_lookup+0x240/0x290 [ 376.345628][ T31] genl_rcv_msg+0x10d/0x790 [ 376.350226][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.355270][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 376.360400][ T31] ? __asan_memcpy+0x40/0x70 [ 376.365000][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 376.370460][ T31] netlink_rcv_skb+0x208/0x470 [ 376.375270][ T31] ? __lock_acquire+0xab9/0xd20 [ 376.380205][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.385259][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 376.390706][ T31] ? down_read+0x1ad/0x2e0 [ 376.395129][ T31] genl_rcv+0x28/0x40 [ 376.399210][ T31] netlink_unicast+0x82f/0x9e0 [ 376.404031][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 376.409411][ T31] ? netlink_sendmsg+0x642/0xb30 [ 376.414385][ T31] ? skb_put+0x11b/0x210 [ 376.418832][ T31] netlink_sendmsg+0x805/0xb30 [ 376.424176][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.429595][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 376.434576][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 376.440017][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.445315][ T31] __sock_sendmsg+0x21c/0x270 [ 376.450256][ T31] __sys_sendto+0x3bd/0x520 [ 376.454773][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 376.459880][ T31] ? count_memcg_event_mm+0x21/0x260 [ 376.465212][ T31] ? exc_page_fault+0x82/0x100 [ 376.470075][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 376.475368][ T31] __x64_sys_sendto+0xde/0x100 [ 376.480174][ T31] do_syscall_64+0xfa/0xfa0 [ 376.484690][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.489964][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.496037][ T31] ? clear_bhb_loop+0x60/0xb0 [ 376.501162][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.507162][ T31] RIP: 0033:0x7f47f4d9155c [ 376.511562][ T31] RSP: 002b:00007f47f5c39ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 376.520063][ T31] RAX: ffffffffffffffda RBX: 00007f47f5c39fc0 RCX: 00007f47f4d9155c [ 376.528238][ T31] RDX: 0000000000000020 RSI: 00007f47f5c3a010 RDI: 0000000000000004 [ 376.536411][ T31] RBP: 0000000000000000 R08: 00007f47f5c39f14 R09: 000000000000000c [ 376.544459][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 376.552968][ T31] R13: 00007f47f5c39f68 R14: 00007f47f5c3a010 R15: 0000000000000000 [ 376.561383][ T31] [ 376.564444][ T31] INFO: task syz.3.1453:11671 blocked for more than 144 seconds. [ 376.578140][ T31] Not tainted syzkaller #0 [ 376.583112][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.592232][ T31] task:syz.3.1453 state:D stack:26952 pid:11671 tgid:11667 ppid:5828 task_flags:0x400040 flags:0x00080002 [ 376.604491][ T31] Call Trace: [ 376.607950][ T31] [ 376.610889][ T31] __schedule+0x1798/0x4cc0 [ 376.615474][ T31] ? __lock_acquire+0xab9/0xd20 [ 376.620385][ T31] ? __lock_acquire+0xab9/0xd20 [ 376.625254][ T31] ? __pfx___schedule+0x10/0x10 [ 376.630450][ T31] ? schedule+0x91/0x360 [ 376.634780][ T31] schedule+0x165/0x360 [ 376.639028][ T31] schedule_preempt_disabled+0x13/0x30 [ 376.644496][ T31] __mutex_lock+0x7e6/0x1350 [ 376.649289][ T31] ? __mutex_lock+0x5bb/0x1350 [ 376.654152][ T31] ? genl_rcv_msg+0x10d/0x790 [ 376.659128][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 376.664167][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 376.669857][ T31] ? radix_tree_lookup+0x240/0x290 [ 376.674988][ T31] genl_rcv_msg+0x10d/0x790 [ 376.679620][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.684660][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 376.689874][ T31] ? __asan_memcpy+0x40/0x70 [ 376.694479][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 376.699931][ T31] netlink_rcv_skb+0x208/0x470 [ 376.704696][ T31] ? __lock_acquire+0xab9/0xd20 [ 376.709658][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.714700][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 376.720302][ T31] ? down_read+0x1ad/0x2e0 [ 376.724766][ T31] genl_rcv+0x28/0x40 [ 376.728857][ T31] netlink_unicast+0x82f/0x9e0 [ 376.733640][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 376.739406][ T31] ? netlink_sendmsg+0x642/0xb30 [ 376.744360][ T31] ? skb_put+0x11b/0x210 [ 376.748821][ T31] netlink_sendmsg+0x805/0xb30 [ 376.753603][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.759065][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 376.764273][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 376.769749][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.775048][ T31] __sock_sendmsg+0x21c/0x270 [ 376.779984][ T31] __sys_sendto+0x3bd/0x520 [ 376.784575][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 376.789706][ T31] ? __lock_acquire+0xab9/0xd20 [ 376.794580][ T31] __x64_sys_sendto+0xde/0x100 [ 376.799428][ T31] do_syscall_64+0xfa/0xfa0 [ 376.803944][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.809245][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.815320][ T31] ? clear_bhb_loop+0x60/0xb0 [ 376.820345][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.826259][ T31] RIP: 0033:0x7f47f4d9155c [ 376.830936][ T31] RSP: 002b:00007f47f5c18ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 376.839466][ T31] RAX: ffffffffffffffda RBX: 00007f47f5c18fc0 RCX: 00007f47f4d9155c [ 376.847548][ T31] RDX: 0000000000000020 RSI: 00007f47f5c19010 RDI: 0000000000000007 [ 376.855521][ T31] RBP: 0000000000000000 R08: 00007f47f5c18f14 R09: 000000000000000c [ 376.863656][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 376.871730][ T31] R13: 00007f47f5c18f68 R14: 00007f47f5c19010 R15: 0000000000000000 [ 376.879959][ T31] [ 376.883018][ T31] INFO: task syz.1.1456:11688 blocked for more than 144 seconds. [ 376.891095][ T31] Not tainted syzkaller #0 [ 376.896036][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.905316][ T31] task:syz.1.1456 state:D stack:25416 pid:11688 tgid:11685 ppid:5824 task_flags:0x400140 flags:0x00080002 [ 376.917551][ T31] Call Trace: [ 376.920852][ T31] [ 376.923780][ T31] __schedule+0x1798/0x4cc0 [ 376.928510][ T31] ? __lock_acquire+0xab9/0xd20 [ 376.933379][ T31] ? __lock_acquire+0xab9/0xd20 [ 376.938554][ T31] ? __pfx___schedule+0x10/0x10 [ 376.943424][ T31] ? schedule+0x91/0x360 [ 376.947852][ T31] schedule+0x165/0x360 [ 376.952019][ T31] schedule_preempt_disabled+0x13/0x30 [ 376.957636][ T31] __mutex_lock+0x7e6/0x1350 [ 376.962236][ T31] ? __mutex_lock+0x5bb/0x1350 [ 376.966989][ T31] ? genl_rcv_msg+0x10d/0x790 [ 376.971994][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 376.977685][ T31] ? stack_trace_save+0x9c/0xe0 [ 376.982565][ T31] ? radix_tree_lookup+0x240/0x290 [ 376.987710][ T31] genl_rcv_msg+0x10d/0x790 [ 376.992226][ T31] ? __lock_acquire+0xab9/0xd20 [ 376.997282][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 377.002323][ T31] netlink_rcv_skb+0x208/0x470 [ 377.007233][ T31] ? __lock_acquire+0xab9/0xd20 [ 377.012092][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 377.017236][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 377.022535][ T31] ? down_read+0x1ad/0x2e0 [ 377.026934][ T31] genl_rcv+0x28/0x40 [ 377.031114][ T31] netlink_unicast+0x82f/0x9e0 [ 377.035930][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 377.041405][ T31] ? netlink_sendmsg+0x642/0xb30 [ 377.046358][ T31] ? skb_put+0x11b/0x210 [ 377.050710][ T31] netlink_sendmsg+0x805/0xb30 [ 377.055494][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.061279][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 377.066241][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 377.071819][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.077182][ T31] __sock_sendmsg+0x21c/0x270 [ 377.081865][ T31] __sys_sendto+0x3bd/0x520 [ 377.086360][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 377.091698][ T31] ? count_memcg_event_mm+0x21/0x260 [ 377.097208][ T31] ? exc_page_fault+0x82/0x100 [ 377.102000][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 377.107688][ T31] __x64_sys_sendto+0xde/0x100 [ 377.112466][ T31] do_syscall_64+0xfa/0xfa0 [ 377.116954][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.122488][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.128636][ T31] ? clear_bhb_loop+0x60/0xb0 [ 377.133305][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.139458][ T31] RIP: 0033:0x7f9310d9155c [ 377.143884][ T31] RSP: 002b:00007f9311c42ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 377.152507][ T31] RAX: ffffffffffffffda RBX: 00007f9311c42fc0 RCX: 00007f9310d9155c [ 377.160591][ T31] RDX: 0000000000000020 RSI: 00007f9311c43010 RDI: 000000000000000b [ 377.168851][ T31] RBP: 0000000000000000 R08: 00007f9311c42f14 R09: 000000000000000c [ 377.176832][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 377.184901][ T31] R13: 00007f9311c42f68 R14: 00007f9311c43010 R15: 0000000000000000 [ 377.193052][ T31] [ 377.196119][ T31] INFO: task syz.4.1461:11702 blocked for more than 145 seconds. [ 377.203955][ T31] Not tainted syzkaller #0 [ 377.209089][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 377.218071][ T31] task:syz.4.1461 state:D stack:27688 pid:11702 tgid:11701 ppid:5838 task_flags:0x400140 flags:0x00080002 [ 377.230103][ T31] Call Trace: [ 377.233386][ T31] [ 377.236306][ T31] __schedule+0x1798/0x4cc0 [ 377.240892][ T31] ? __lock_acquire+0xab9/0xd20 [ 377.246009][ T31] ? __lock_acquire+0xab9/0xd20 [ 377.250917][ T31] ? __pfx___schedule+0x10/0x10 [ 377.255778][ T31] ? schedule+0x91/0x360 [ 377.260078][ T31] schedule+0x165/0x360 [ 377.264240][ T31] schedule_preempt_disabled+0x13/0x30 [ 377.269896][ T31] __mutex_lock+0x7e6/0x1350 [ 377.274497][ T31] ? __mutex_lock+0x5bb/0x1350 [ 377.279325][ T31] ? genl_rcv_msg+0x10d/0x790 [ 377.284016][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 377.289112][ T31] ? stack_trace_save+0x9c/0xe0 [ 377.293981][ T31] ? radix_tree_lookup+0x240/0x290 [ 377.299286][ T31] genl_rcv_msg+0x10d/0x790 [ 377.303806][ T31] ? __lock_acquire+0xab9/0xd20 [ 377.308820][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 377.313892][ T31] netlink_rcv_skb+0x208/0x470 [ 377.318836][ T31] ? __lock_acquire+0xab9/0xd20 [ 377.323706][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 377.329060][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 377.334370][ T31] ? down_read+0x1ad/0x2e0 [ 377.338862][ T31] genl_rcv+0x28/0x40 [ 377.342856][ T31] netlink_unicast+0x82f/0x9e0 [ 377.347819][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 377.353114][ T31] ? netlink_sendmsg+0x642/0xb30 [ 377.358118][ T31] ? skb_put+0x11b/0x210 [ 377.362364][ T31] netlink_sendmsg+0x805/0xb30 [ 377.367258][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.372548][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 377.377968][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 377.383271][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.388671][ T31] __sock_sendmsg+0x21c/0x270 [ 377.393370][ T31] __sys_sendto+0x3bd/0x520 [ 377.398047][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 377.403103][ T31] ? count_memcg_event_mm+0x21/0x260 [ 377.408490][ T31] ? exc_page_fault+0x82/0x100 [ 377.413267][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 377.418633][ T31] __x64_sys_sendto+0xde/0x100 [ 377.423410][ T31] do_syscall_64+0xfa/0xfa0 [ 377.428228][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.433446][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.439802][ T31] ? clear_bhb_loop+0x60/0xb0 [ 377.444498][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.450533][ T31] RIP: 0033:0x7f2a2479155c [ 377.455008][ T31] RSP: 002b:00007f2a255ceec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 377.463596][ T31] RAX: ffffffffffffffda RBX: 00007f2a255cefc0 RCX: 00007f2a2479155c [ 377.471708][ T31] RDX: 0000000000000020 RSI: 00007f2a255cf010 RDI: 0000000000000005 [ 377.479783][ T31] RBP: 0000000000000000 R08: 00007f2a255cef14 R09: 000000000000000c [ 377.487982][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 377.495949][ T31] R13: 00007f2a255cef68 R14: 00007f2a255cf010 R15: 0000000000000000 [ 377.504131][ T31] [ 377.507301][ T31] INFO: task syz.2.1463:11709 blocked for more than 145 seconds. [ 377.515135][ T31] Not tainted syzkaller #0 [ 377.520298][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 377.529050][ T31] task:syz.2.1463 state:D stack:28040 pid:11709 tgid:11708 ppid:5833 task_flags:0x400140 flags:0x00080002 [ 377.541199][ T31] Call Trace: [ 377.544484][ T31] [ 377.547779][ T31] __schedule+0x1798/0x4cc0 [ 377.552313][ T31] ? __lock_acquire+0xab9/0xd20 [ 377.557243][ T31] ? __lock_acquire+0xab9/0xd20 [ 377.562104][ T31] ? __pfx___schedule+0x10/0x10 [ 377.566986][ T31] ? schedule+0x91/0x360 [ 377.571335][ T31] schedule+0x165/0x360 [ 377.575507][ T31] schedule_preempt_disabled+0x13/0x30 [ 377.581079][ T31] __mutex_lock+0x7e6/0x1350 [ 377.585682][ T31] ? __mutex_lock+0x5bb/0x1350 [ 377.590538][ T31] ? genl_rcv_msg+0x10d/0x790 [ 377.595232][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 377.600396][ T31] ? stack_trace_save+0x9c/0xe0 [ 377.605358][ T31] ? radix_tree_lookup+0x240/0x290 [ 377.610557][ T31] genl_rcv_msg+0x10d/0x790 [ 377.615072][ T31] ? __lock_acquire+0xab9/0xd20 [ 377.620097][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 377.625157][ T31] netlink_rcv_skb+0x208/0x470 [ 377.630008][ T31] ? __lock_acquire+0xab9/0xd20 [ 377.634954][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 377.640067][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 377.645371][ T31] ? down_read+0x1ad/0x2e0 [ 377.650028][ T31] genl_rcv+0x28/0x40 [ 377.654037][ T31] netlink_unicast+0x82f/0x9e0 [ 377.659157][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 377.664464][ T31] ? netlink_sendmsg+0x642/0xb30 [ 377.669482][ T31] ? skb_put+0x11b/0x210 [ 377.673734][ T31] netlink_sendmsg+0x805/0xb30 [ 377.678646][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.683943][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 377.688992][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 377.694290][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.699878][ T31] __sock_sendmsg+0x21c/0x270 [ 377.704574][ T31] ____sys_sendmsg+0x505/0x830 [ 377.709499][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.714970][ T31] ? import_iovec+0x74/0xa0 [ 377.719557][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 377.724244][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.729541][ T31] ? __fget_files+0x2a/0x420 [ 377.734144][ T31] ? __fget_files+0x3a0/0x420 [ 377.738912][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 377.743893][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 377.749453][ T31] ? do_syscall_64+0xbe/0xfa0 [ 377.754185][ T31] do_syscall_64+0xfa/0xfa0 [ 377.758855][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.764076][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.770441][ T31] ? clear_bhb_loop+0x60/0xb0 [ 377.775306][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.781527][ T31] RIP: 0033:0x7f2ec858f6c9 [ 377.785946][ T31] RSP: 002b:00007f2ec9470038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.795117][ T31] RAX: ffffffffffffffda RBX: 00007f2ec87e5fa0 RCX: 00007f2ec858f6c9 [ 377.803254][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 377.811489][ T31] RBP: 00007f2ec8611f91 R08: 0000000000000000 R09: 0000000000000000 [ 377.819570][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.827671][ T31] R13: 00007f2ec87e6038 R14: 00007f2ec87e5fa0 R15: 00007ffde3ef1538 [ 377.835676][ T31] [ 377.838978][ T31] [ 377.838978][ T31] Showing all locks held in the system: [ 377.846704][ T31] 1 lock held by khungtaskd/31: [ 377.851898][ T31] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 377.862187][ T31] 2 locks held by getty/5593: [ 377.866869][ T31] #0: ffff888033bb50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 377.876706][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 377.887181][ T31] 3 locks held by kworker/u8:8/6265: [ 377.892556][ T31] #0: ffff8880b893a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 377.902584][ T31] #1: ffff8880b8924048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 377.911539][ T31] #2: ffff8880b8925958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 377.920772][ T31] 1 lock held by udevd/7019: [ 377.925379][ T31] #0: ffff888143b3e358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 377.934752][ T31] 6 locks held by syz.0.1451/11661: [ 377.940224][ T31] #0: ffffffff8f331bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 377.948878][ T31] #1: ffffffff8f3319c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 377.958129][ T31] #2: ffff888024b47270 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x375/0x1a50 [ 377.968833][ T31] #3: ffff888024b34bb8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 377.978526][ T31] #4: ffff888024b34558 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 377.990975][ T31] #5: ffff888024b34590 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 378.003517][ T31] 2 locks held by syz.0.1451/11664: [ 378.009221][ T31] #0: ffffffff8f331bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.018793][ T31] #1: ffffffff8f3319c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 378.027942][ T31] 2 locks held by syz.3.1453/11669: [ 378.033134][ T31] #0: ffffffff8f331bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.041413][ T31] #1: ffffffff8f3319c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 378.050469][ T31] 2 locks held by syz.3.1453/11671: [ 378.055661][ T31] #0: ffffffff8f331bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.064099][ T31] #1: ffffffff8f3319c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 378.073301][ T31] 2 locks held by syz.1.1456/11688: [ 378.078694][ T31] #0: ffffffff8f331bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.086992][ T31] #1: ffffffff8f3319c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 378.096068][ T31] 2 locks held by syz.4.1461/11702: [ 378.101563][ T31] #0: ffffffff8f331bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.109899][ T31] #1: ffffffff8f3319c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 378.118954][ T31] 2 locks held by syz.2.1463/11709: [ 378.124143][ T31] #0: ffffffff8f331bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.132602][ T31] #1: ffffffff8f3319c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 378.141710][ T31] 2 locks held by syz-executor/11714: [ 378.147269][ T31] #0: ffffffff8f331bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.155582][ T31] #1: ffffffff8f3319c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 378.164663][ T31] 2 locks held by syz-executor/11723: [ 378.170256][ T31] #0: ffffffff8f331bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.178853][ T31] #1: ffffffff8f3319c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 378.187997][ T31] 2 locks held by syz-executor/11733: [ 378.193373][ T31] #0: ffffffff8f331bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.201727][ T31] #1: ffffffff8f3319c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 378.210966][ T31] 2 locks held by syz-executor/11735: [ 378.216348][ T31] #0: ffffffff8f331bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.224657][ T31] #1: ffffffff8f3319c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 378.233799][ T31] 2 locks held by syz-executor/11739: [ 378.239315][ T31] #0: ffffffff8f331bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.247580][ T31] #1: ffffffff8f3319c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 378.256537][ T31] 2 locks held by syz-executor/11759: [ 378.262042][ T31] #0: ffffffff8f331bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.270359][ T31] #1: ffffffff8f3319c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 378.279529][ T31] 2 locks held by syz-executor/11768: [ 378.284914][ T31] #0: ffffffff8f331bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.293203][ T31] #1: ffffffff8f3319c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 378.302286][ T31] 2 locks held by syz-executor/11778: [ 378.308205][ T31] #0: ffffffff8f331bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.316415][ T31] #1: ffffffff8f3319c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 378.325646][ T31] 2 locks held by syz-executor/11780: [ 378.331102][ T31] #0: ffffffff8f331bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.339504][ T31] #1: ffffffff8f3319c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 378.348819][ T31] 2 locks held by syz-executor/11792: [ 378.354230][ T31] #0: ffffffff8f331bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.362586][ T31] #1: ffffffff8f3319c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 378.371668][ T31] 2 locks held by syz-executor/11804: [ 378.377181][ T31] #0: ffffffff8f331bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.385407][ T31] #1: ffffffff8f3319c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 378.394509][ T31] 2 locks held by syz-executor/11813: [ 378.400139][ T31] #0: ffffffff8f331bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.408456][ T31] #1: ffffffff8f3319c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 378.417601][ T31] 2 locks held by syz-executor/11823: [ 378.422961][ T31] #0: ffffffff8f331bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.431426][ T31] #1: ffffffff8f3319c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 378.440492][ T31] 2 locks held by syz-executor/11825: [ 378.445854][ T31] #0: ffffffff8f331bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.454407][ T31] #1: ffffffff8f3319c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 378.463568][ T31] 2 locks held by syz-executor/11837: [ 378.469295][ T31] #0: ffffffff8f331bb0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 378.477602][ T31] #1: ffffffff8f3319c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 378.486694][ T31] [ 378.489550][ T31] ============================================= [ 378.489550][ T31] [ 378.498466][ T31] NMI backtrace for cpu 0 [ 378.498488][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 378.498505][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 378.498516][ T31] Call Trace: [ 378.498522][ T31] [ 378.498530][ T31] dump_stack_lvl+0x189/0x250 [ 378.498559][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.498581][ T31] ? __pfx__printk+0x10/0x10 [ 378.498608][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 378.498630][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 378.498651][ T31] ? __pfx__printk+0x10/0x10 [ 378.498671][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 378.498707][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 378.498729][ T31] watchdog+0xf60/0xfa0 [ 378.498752][ T31] ? watchdog+0x1e2/0xfa0 [ 378.498775][ T31] kthread+0x711/0x8a0 [ 378.498801][ T31] ? __pfx_watchdog+0x10/0x10 [ 378.498817][ T31] ? __pfx_kthread+0x10/0x10 [ 378.498840][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 378.498861][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.498883][ T31] ? __pfx_kthread+0x10/0x10 [ 378.498905][ T31] ret_from_fork+0x4bc/0x870 [ 378.498925][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 378.498951][ T31] ? __switch_to_asm+0x39/0x70 [ 378.498964][ T31] ? __switch_to_asm+0x33/0x70 [ 378.498978][ T31] ? __pfx_kthread+0x10/0x10 [ 378.499000][ T31] ret_from_fork_asm+0x1a/0x30 [ 378.499032][ T31] [ 378.499039][ T31] Sending NMI from CPU 0 to CPUs 1: [ 378.645289][ C1] NMI backtrace for cpu 1 [ 378.645306][ C1] CPU: 1 UID: 0 PID: 10970 Comm: kworker/u8:22 Not tainted syzkaller #0 PREEMPT(full) [ 378.645324][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 378.645335][ C1] Workqueue: events_unbound toggle_allocation_gate [ 378.645354][ C1] RIP: 0010:__sanitizer_cov_trace_cmp8+0x31/0x90 [ 378.645378][ C1] Code: 24 65 48 8b 0c 25 08 50 6e 92 65 8b 15 28 47 ae 10 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 7c 16 00 00 00 74 4e <8b> 91 58 16 00 00 83 fa 03 75 43 48 8b 91 60 16 00 00 44 8b 89 5c [ 378.645391][ C1] RSP: 0018:ffffc9001a00f620 EFLAGS: 00000246 [ 378.645404][ C1] RAX: ffffffff8211e365 RBX: ffff88801a063aa8 RCX: ffff88804c8d8000 [ 378.645417][ C1] RDX: 0000000000000000 RSI: 000000001a065067 RDI: 000000001a065067 [ 378.645427][ C1] RBP: ffff88801a064060 R08: 0000000000000003 R09: 0000000000000004 [ 378.645437][ C1] R10: dffffc0000000000 R11: fffff52003401eb4 R12: 1ffff1100340c755 [ 378.645448][ C1] R13: 000000001a065067 R14: dffffc0000000000 R15: 000000001a065067 [ 378.645460][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 378.645472][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 378.645483][ C1] CR2: 000056208eb2f000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 378.645497][ C1] Call Trace: [ 378.645504][ C1] [ 378.645511][ C1] __pte_offset_map_lock+0x165/0x210 [ 378.645535][ C1] ? __kmem_cache_alloc_bulk+0x10b/0x590 [ 378.645556][ C1] __text_poke+0x2e6/0xa10 [ 378.645578][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 378.645597][ C1] ? __kmem_cache_alloc_bulk+0x10b/0x590 [ 378.645615][ C1] ? __pfx___text_poke+0x10/0x10 [ 378.645631][ C1] ? rcu_is_watching+0x15/0xb0 [ 378.645653][ C1] ? trace_contention_end+0x39/0x120 [ 378.645678][ C1] smp_text_poke_batch_finish+0xd0f/0x1130 [ 378.645703][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 378.645725][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 378.645751][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 378.645772][ C1] static_key_enable_cpuslocked+0x128/0x250 [ 378.645794][ C1] static_key_enable+0x1a/0x20 [ 378.645812][ C1] toggle_allocation_gate+0xad/0x240 [ 378.645826][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 378.645841][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 378.645861][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 378.645876][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 378.645892][ C1] process_scheduled_works+0xae1/0x17b0 [ 378.645922][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 378.645946][ C1] worker_thread+0x8a0/0xda0 [ 378.645975][ C1] kthread+0x711/0x8a0 [ 378.645995][ C1] ? __pfx_worker_thread+0x10/0x10 [ 378.646011][ C1] ? __pfx_kthread+0x10/0x10 [ 378.646030][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 378.646049][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.646068][ C1] ? __pfx_kthread+0x10/0x10 [ 378.646087][ C1] ret_from_fork+0x4bc/0x870 [ 378.646103][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 378.646122][ C1] ? __switch_to_asm+0x39/0x70 [ 378.646135][ C1] ? __switch_to_asm+0x33/0x70 [ 378.646147][ C1] ? __pfx_kthread+0x10/0x10 [ 378.646164][ C1] ret_from_fork_asm+0x1a/0x30 [ 378.646186][ C1] [ 378.962944][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.969342][ T1302] ieee802154 phy1 wpan1: encryption failed: -22