last executing test programs: 18.011113852s ago: executing program 1 (id=5330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x1a, 0xf, &(0x7f0000000440)=@ringbuf, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x1c}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000000c0)=0x7, 0x4) r3 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'virt_wifi0\x00', 0x1}) unshare(0x26020480) r5 = gettid() syz_open_procfs$namespace(r5, &(0x7f00000006c0)='ns/time_for_children\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}, [{0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) 17.4013928s ago: executing program 1 (id=5337): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006a000100"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f00000001c0)={0x1d, r7}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x1, '\x00', r7, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) tee(r0, r5, 0xfff, 0x3) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r1, &(0x7f0000000340)='^'}, 0x20) 17.231165457s ago: executing program 3 (id=5340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r3, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r2, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x86b, 0x52}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x815) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 17.075620145s ago: executing program 4 (id=5341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x6}]}, 0x14}], 0x1}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000680)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001040), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000011c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000014c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001480)={&(0x7f0000001200)=ANY=[@ANYBLOB="90000000", @ANYRES16=r6, @ANYBLOB="21002cbd7000000000000000a8000400308008000300", @ANYRES32=r7, @ANYBLOB="0c00060001000000010000000c00060003000000000000005800308024000300d4f41e9cbc646ab02144754abf52b89df54d46228bffbcdd6c380793d3aa6016050002000200000014000400f8a7728ee678c188ec4c07bcb36977ba1400018008000100010000000500020000000000"], 0x90}, 0x1, 0x0, 0x0, 0x804}, 0x10) socket$unix(0x1, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0c990c8c17066bc932a5c23043e4e545baef7b7c4965ad30af33796a9648de0a9a41d8d74aea7445f26d181ea56bec0dd55c95c88fcf605466a840a28ae3370a7ad89a7a0045321b1b44d693586eca64d0c0d60fd28f21f3b41567bce221b38eae14a08f9bd50706d1c3e3bfbb6873c5ebd5677d847e97f4f6f815124daa4cc0ae9efab8d7356", @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf258600000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 17.025353116s ago: executing program 3 (id=5342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000190081154e81f782db4cb904021d0800fd02fe02e8fe50a10a000548258848000c600e41b0000900ac00080325000000040015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008884}, 0x840) 16.912440142s ago: executing program 1 (id=5343): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791000000000000000000010ff0000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x26}, 0x94) 16.909945568s ago: executing program 0 (id=5345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0x1, 0x7fffffff, 0x8}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002400)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0x10, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 16.719893039s ago: executing program 1 (id=5346): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x40, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}]}, 0x40}}, 0x0) r3 = socket(0xa, 0x3, 0x9) getsockopt$nfc_llcp(r3, 0x3a, 0x0, 0x0, 0x2000005d) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0xb, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x808c5}, 0x40000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3103000000000000000004"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) 16.719488753s ago: executing program 2 (id=5347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000070000000400000002", @ANYBLOB="3d344cba17ae30176bf30039d0d86e6bf30b8e17b7b77fe23ef2b334d2af027cc9610191e5e68d92479de095bbcf99b0f60302"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, 0x0, 0x0, 0x1}, 0x20) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000180), &(0x7f0000000280)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbb08004500001c40400000002f9078ac1e00010a010100d70088be000890780000"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x200000bf, &(0x7f0000000300)=ANY=[@ANYBLOB="2340180018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000db090000a1000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x10000004, 0x0, 0x0, 0x41100, 0x6}, 0x94) 16.718314883s ago: executing program 3 (id=5348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf2502000000140001800d7501007564703a73797a3200000000"], 0x28}, 0x1, 0x0, 0x0, 0x40c0}, 0x44010) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x44, r2, 0x8, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x401}, {0x6, 0x11, 0x593}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x48080) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x80}, [@FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000000)={0x3, 'macvtap0\x00', {0x7fffffff}, 0x8}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="53194e748cdc0e3fbd823802317c98d641e56d8951db5efa76a8fd2e7da8d75ed96d9d8b5793642e"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001200230b000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000000000000080012800400"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x537b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x3c}}, 0x0) 16.55446305s ago: executing program 1 (id=5349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000880)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x6406224b722534c8, &(0x7f00000001c0)={@dev, @private, 0x0}, &(0x7f0000000340)=0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800007f00000000000000000100000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xd, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0xffff}, 0x94) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000600)='./file0\x00', 0x0, 0x4010, r0}, 0x18) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x19, 0xe, &(0x7f0000000240)=@raw=[@ldst={0x0, 0x1, 0x1, 0xb, 0xa, 0x10, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @generic={0x3, 0x3, 0x1, 0x9, 0xfffffe93}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xe}], &(0x7f0000000140)='syzkaller\x00', 0xffffffff, 0x52, &(0x7f00000002c0)=""/82, 0x40f00, 0x8, '\x00', r3, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x1, 0x1000, 0x10}, 0x10, 0x0, r4, 0x7, &(0x7f0000000700)=[r5, r6], &(0x7f0000000740)=[{0x4, 0x2, 0x7, 0x3}, {0x0, 0x5, 0x3, 0x7}, {0x4, 0x2, 0xd, 0xb}, {0x1, 0x2, 0xb, 0x6}, {0x5, 0x5, 0x5, 0x9}, {0x3, 0x3, 0x3}, {0x4, 0x1, 0x3, 0x1}], 0x10, 0xb0d7}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, &(0x7f0000000000)={{0x6, @default}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) close(r7) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x102e) 16.519925217s ago: executing program 0 (id=5350): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) syz_emit_ethernet(0x36, &(0x7f0000000040)={@link_local, @local, @val={@void, {0x8100, 0x5, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001280)=""/4094, 0xffe}, {&(0x7f0000002280)=""/4095, 0xfff}, {&(0x7f0000001140)=""/161, 0xa1}], 0x3}, 0x40000020) (async) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001280)=""/4094, 0xffe}, {&(0x7f0000002280)=""/4095, 0xfff}, {&(0x7f0000001140)=""/161, 0xa1}], 0x3}, 0x40000020) close(r0) syz_emit_ethernet(0x1aa, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @gre={{0x8, 0x4, 0x3, 0x3f, 0x19c, 0x68, 0x0, 0x73, 0x2f, 0x0, @local, @local, {[@generic={0x0, 0x6, "ec78b7ed"}, @generic={0x94, 0x3, 'E'}, @noop]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x12, 0x1, [], "f16c2e5155894e0295f3da6d70a6026015d6"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x9, 0x3], "9cbdff8dd36661f437cac1e0f8726371828efebbc893b83b6497664350e55aebe242928ed07cd9e5fa2cd0aafdfff3aedd0200bed9e296a7c0bf4e93cef5be110c9c828e2ba1a72a3c76d8fb54122e53c0e986451a3ff7"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x9, 0x7, 0xff], "09333eabaa0454388c10f34515851fcec3acbd2d288071c6726a5e495a92e2ee69d75d5fc9b96fb40406d3e75c3b7458b1349469d6e24078ce"}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x6, 0x0, 0x1, 0x1, 0x4}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x2, {{0x1, 0x2, 0x8, 0x1, 0x0, 0x0, 0x1, 0x5}, 0x2, {0x0, 0x313, 0x1, 0x1c, 0x1, 0x0, 0x2}}}, {0x8, 0x6558, 0x0, "ba440ff1f4923013697b32bdf73db2ca2de9494ae4890722edfca7d89b32260f6a5f396a137b41c0b0c7f4bacc19645b2cc8475bf6b1130fb7604b41eac0f440b0f0293aa823ebc9fd78aa60d8c063f39d231a85daa41433f24f3af8636c34e6510a8864eb224690eac323641148f6df19090f1b1fc8251ab780b4071c924cc6bdf2f43423a6838aeba62285"}}}}}}, &(0x7f0000000000)={0x1, 0x4, [0x997, 0x70b, 0x76e, 0xb39]}) (async) syz_emit_ethernet(0x1aa, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @gre={{0x8, 0x4, 0x3, 0x3f, 0x19c, 0x68, 0x0, 0x73, 0x2f, 0x0, @local, @local, {[@generic={0x0, 0x6, "ec78b7ed"}, @generic={0x94, 0x3, 'E'}, @noop]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x12, 0x1, [], "f16c2e5155894e0295f3da6d70a6026015d6"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x9, 0x3], "9cbdff8dd36661f437cac1e0f8726371828efebbc893b83b6497664350e55aebe242928ed07cd9e5fa2cd0aafdfff3aedd0200bed9e296a7c0bf4e93cef5be110c9c828e2ba1a72a3c76d8fb54122e53c0e986451a3ff7"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x9, 0x7, 0xff], "09333eabaa0454388c10f34515851fcec3acbd2d288071c6726a5e495a92e2ee69d75d5fc9b96fb40406d3e75c3b7458b1349469d6e24078ce"}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x6, 0x0, 0x1, 0x1, 0x4}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x2, {{0x1, 0x2, 0x8, 0x1, 0x0, 0x0, 0x1, 0x5}, 0x2, {0x0, 0x313, 0x1, 0x1c, 0x1, 0x0, 0x2}}}, {0x8, 0x6558, 0x0, "ba440ff1f4923013697b32bdf73db2ca2de9494ae4890722edfca7d89b32260f6a5f396a137b41c0b0c7f4bacc19645b2cc8475bf6b1130fb7604b41eac0f440b0f0293aa823ebc9fd78aa60d8c063f39d231a85daa41433f24f3af8636c34e6510a8864eb224690eac323641148f6df19090f1b1fc8251ab780b4071c924cc6bdf2f43423a6838aeba62285"}}}}}}, &(0x7f0000000000)={0x1, 0x4, [0x997, 0x70b, 0x76e, 0xb39]}) 16.519653895s ago: executing program 4 (id=5351): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="620ac4ff00000000711009000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000340)='rose0\x00') getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=@ipv6_newaddrlabel={0x48, 0x48, 0x200, 0x70bd25, 0x25dfdbfb, {0xa, 0x0, 0x10, 0x0, r2, 0x1}, [@IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x8000) 16.51805187s ago: executing program 2 (id=5352): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r1, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000080)={'bridge_slave_0\x00', @random="0131be7839ff"}) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000480)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x8, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x8}}}}}}}, 0x42) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) socketpair(0x2b, 0x80000, 0x5, &(0x7f0000000040)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4040) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)={0x1c, 0x1a, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x300}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) sendmsg$rds(r5, &(0x7f0000019d00)={&(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000380)=""/178, 0xb2}, {&(0x7f0000000500)=""/125, 0x7d}], 0x2, &(0x7f0000019b80)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000019580)=""/245, 0xf5}, &(0x7f0000000300), 0xe}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000019680)=""/220, 0xdc}, &(0x7f0000000440), 0x8}}, @rdma_dest={0x18, 0x114, 0x2, {0x8, 0x5}}, @cswp={0x58, 0x114, 0x7, {{0xffff8e1c, 0x5}, &(0x7f0000019780)=0x5, &(0x7f00000197c0)=0x100000000, 0x6, 0xb, 0xb48, 0x80, 0x3, 0x3}}, @rdma_args={0x48, 0x114, 0x1, {{0x6, 0x1ff}, {&(0x7f0000019800)=""/209, 0xd1}, &(0x7f0000019a00)=[{&(0x7f0000019900)=""/198, 0xc6}], 0x1, 0x12, 0x8}}, @rdma_args={0x48, 0x114, 0x1, {{0x8bd, 0x6}, {&(0x7f0000019a40)=""/136, 0x88}, &(0x7f0000019b40)=[{&(0x7f0000019b00)}], 0x1, 0x8, 0x4}}], 0x178, 0x44000}, 0x0) 16.359614214s ago: executing program 3 (id=5353): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @multicast2}]}}]}, 0x3c}}, 0x0) (async) sendto$inet(r1, &(0x7f0000000100)="005ce84512bc6d7896d527f82bfcbddfb934841f6203249e5e76f9b56830c38de59353bb9b1e273ba85670d3103ce7777b2bdf32c610f8b9ece98bb7d294199201a5770f34ce8713d610bd644aa7ba1fa2a33ef97d231eb60af55717156d9a85264cd6e42a8dcbd9b17d9215f4d6436a790cb7512f77006b4615ba8c4e7fb92a2c18da2f69d2d0aa0a264fda2e1c87862b0467a3aa9747a6374286c1710e7ae519973ffdab62799a69abb1d56764ab3d0f08", 0xb2, 0x4081, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) listen(r0, 0x8) r5 = accept4(r0, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0xbc, r6, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x68}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40881}, 0x800) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000300000000000000000000090000000000000000000000010500000008000000010000000000000f440000000000000000000003000000000300000002000000000000000061"], 0x0, 0x5b}, 0x28) 16.358902329s ago: executing program 0 (id=5354): r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000003300)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x1}}, 0x10, &(0x7f0000002280)=[{&(0x7f0000000040)="9012e0cd20f2bd7938004d39c1c22e9db18e46fd62cdf2a941", 0x19}, {&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="9e115a67fc50513769ca11d4ff8dd5a5a822c0a4263b13d443deb220e76bec0607814bf1de285a206c55da85a8caaa74a1d40daed38295574e4103c5f61186db68c13bf72357a76f546870e98e97810dbc40f60fce0056f94702d2b534be3ae1190bdee4699c8f725b779f93a51891a556a42f73f684ebab25a56959962553ef0102d94e8d107b6184924788f26c5ed8127594c2e4c3152139fbd739100f68e169ed2e0fbf47f73976ba06edd70e9442bf2b3e632beaede64103", 0xba}, {&(0x7f0000001140)="73c6", 0x2}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002180)="b6c7bd62b894b328890b6361ddf966f8065baa4cc32c4abfb7e30388bbf66dc0e8e08e0cf15fced7f0595679e8432e3e1c747898e4784caa9125a1388e93823f4b8ef1aecde6716b7cb581de3bbebbe1ea6aaf4ddb4374ac412f75af11c0c202ab928b806f824015792a8863ba6143", 0x6f}, {&(0x7f0000002200)="c421148865747d3b2e1fd498c092ff7130f4bcd9072bd777320e7a35", 0x1c}, {&(0x7f0000002240)="05f6167e53da37bbee34b9", 0xb}], 0x8, &(0x7f0000002300)="2c6ab3c0edfb294c84351a3d875b4607f80b0ef8fa9f9c2abb2388f35de23d40f3db719b3e58e0fbf88b3427f75a6cf1e1439ff319bcbf4fab4c22936bdddb2903fd9044f21767bb0b7abf057e4e57dea5f7e9a08e5f486a808db3be6e48cd48e1ea074f1d1f026a7baabb192cd5b1c3b64a4b0c33f5b62d164bdd7b806700408b251de6e7d0126f133b8b6e33a315ec861fccd6365166c40bb95fafcae14c0d5df19dc0bdadb98f3b002b27828238931a476a96ca99265a51eb20a5eeab3011e396868dc48b907909bc6e373455cdd959e01887a8b81a61f0ad59288dd7a6d645d7c4161698ebb4dd1174890d86b302683a0f69184f53d755d57850fffa0a5a324fe2444a3ee75fb326bcfa5b06c3e23786c6b132604c34e6ffcb27ab0317fe702f7a1663c53113a0cbc83b5af674e5fec34775628d709a438cc2e0f3799af01e66ce2382100f4031b70d34fefb5f8d717872606fda4e5269de482e7cab43848c783e826cd56b8eebeb12db4ec09e7051a88857d23127f8a710257da5955c8658f13d039c822579f5104c39dfb8855ab018d4f23266d5219f6c80ddc13e20e29f83407486a35b8a56bb8388cc677c75df531a4fa2ce254d3edbcb2cd0b1f1ef5ad8a9222b7ec1b065b54dfd9f55a4376d8ee24aba0e4a485c0d44292da115b6b9e8ed09e6768f0abb4727416cbc15c24abe6fa98f63427dd97e4a021c8fc5fe915ae8dd4f89bbcf8dd6b3b30fbadbf4c4e19cbd88bfeb288f28d5cebb1e086f74c20736347376c65f6e638589efa1491b34508e9fc93aaf4fcfea9cd41b8873562eb8034e69b84811769b3d153fbfa6f5147d4d765d48ca2e66708fe2a3898cf725385f5c9926d388841cd08ac2b33b909b703921090026b273df70be8b01924bc244c6afb32c2084db371dd711863ecaf8e457c05bd1d1c518a4b717bae18957415cc6099922e19c5f71fe2c191cc6d98823ced4cf0edc170a79f2d099b05e5fe6a3376fa539a1f7faf4f8028175a839a5e5dd18e1abd7fb4330cd659f952f5c8a75ca1acc7e5e84e87b78cd438e9bd585be235b4d3a9bc41af6f122b9ca72b4e87e2d5649f27d7e05a6cc855422e046fbf1b37776e30dbaad7ca25f40ccbf8a4b6f61481838f5e5fd600a2388f7624f8d49afee4fd56773b897f15c2fc5e720e04b67278a7d18c0c458f723871df1ae6697d053a1410d1d8ac79a371f9af1f5d759c88c5dbcfcf1eb60cb95a685c012bed76bc0a8ce0cd253abc8d4a2c1236b0ab1d4fe531da1f17aaf39663371ff559337a653204d70ac46bb2a967201a5a4991b6767cf9b0388d34ca2b376475301caa2cca158ec8cbfe48eeeaa6f9ea93e180b90a43f5dfac72ae5c8b36f0a0106e73d7669979ee0b11d77998d5e08ce9977a9815f3d5ba1e8477c0f85ebf94648307ca730f0ee1eca04c53db6ee252d1f15fa45c6b6d7915648a2c3599f2ea9c6ce3821fc7c9631594a32767e76437db8ef1e1c31382649c207ab1bf80377394d6d95296f926095032a268eab393eb14a3c9730257e5990af9afa04ad72f110a59089daca690857970ac77487e986ae4b9643e75a0e71cee4d13dd75513145ed39194e18777864b25c7b91cea9e15fa8219f40cdf366e2d7b35d934b776ebdd57bb99509d38026c70dc178454eea6c72e0d9686100c695fe74883d16a5518f7b922e692c5b09aca69f9632f463c023f783a29fe66c72b7411dcb519b15dab2e44af512c9aa566106ea69aa454b40155c34aaeed2996b722bce93a4fab149cd2c77ece69dc310f20ba8dff93ca67745188a5f6864053d18a7e3c02f256d3b4feb643e4cf15d592ef9bd03a735d09fd8d8f6a05a7c7361e8e2c4e4234f8f41e7d229ecd36fedc10228cf3d511bb8d33d3c4c237b0f6eef1e47d7ea2f4d139d514370960f27d60191eaba68c1dbd78e5a5f823bee023bde7865c3dd74cc8aac9cdaa3c49ba5e3e1c2b7c60739d1722d39eaa42f3ddf9c06d6c4885d1dda4e2016588ccc9e25bb59ee2e5132636647c5d0cbda223c0db1b50c330c8d33a0c72df552dc6deea28511986e9afe3bbf004460ece13ea72f081ac8bb6cac5f9d5ccfc15fd4fa5e9a634d4fec8bda489bc73811639f6834f80b746588a1de000d7c5b456e8fbf1020e770764687713d0c1adb9416be2e63638783498f4062fb20a12ba751b2a7197de2cdf916f0c2bac61f47cf217c1d3890e72cf5a198199eee2670b0475cde06f3e6516cfaba4e7d09200c2b8f4cb1f2c74597ef96a09025afcb5d47b04416a68a0e40cbbe843bc59e2f767f429324f27a955f170664d69e6bceb21ac733145ba5dbaee40d08eb455c30c2782bdc8597af38488df33277c6ba18f5c200c3f6b62705a5570966f147d16e3934ca120fcee60b5464d7ddf17d4a8558c029d477ded2ae472e7cef73d5b2393212beb71ad39f99920fd58278639ce056319a063f472ea77cdd1536fe6af98ebc77f2ff25b852015615033a1f15b00a751d9d2d34620888323b634a2a135ef7e8de2647f82010e77d6eeacec487e25daa473635175abe6d2429e91573676ef0d5133af4528d85f0aa1f16d2526dd0a0d23c1a168ee6e2e75833d00b325eda2e3bdcf4f23ba0a05f687d3b8e5f393e42ed28937c334fc5e837a3886699dcdc270065d20fac8aabb716f8af8eb35122c96f61e370e0164fc3c448c40a1c1c6efba78b11679d80cf07b481b8f13c3ac49e28a4a208afe575704a615d2083837f9d46221e343ef6151613fd2ef3863e6b7ecf7cb5602127a4e7ad3f1f309fcd44c8efa85265b27a1aa126acf25a5430605ed60cb67352c0c7715c59c5ecbc49e5ba2a30d5b9340ed3258e31657244d8a919950504cf8d5b63abff746635ad856d85db40e7cf594223bd946537f08dcaea7ced3bba8426aab5328febf9d8fa739836ce873864dc4652d935ef86857500c43ec224f82552fcf0c340869ae11afe2518b245db725b86e2574cd0e5be1b3fdb3573aa6ca4026c9810c5af04bccb5b5409e6f3e6c1dfa6d74921c6e3fb61ca7df7ce522879292a6d79b02df9724989707a9890de00b9710d7cb965d0eda8fa32efabfed7ef6e81771074bf3bf77e455ac0c9a7e1540b773b0d5fe101ed56335ecce5066624eac90465d1c2815ab9246dd1fe021fda529bccf3fea3a3f5defb9bf6d3a6eb66c15855b99533b5dd9fb06122d6f1d94c1af2090fff4f9c3da37662db8c2b04dc7f5b14887c879866ba2636e25e5f27048e7356c800c74267a2f81ab65605155f9e3be06aec1144bbc630041c9fabe2c567b6345732556e724c8763ee68588d77ac0afdcfb64b1684e06e8f70b6b5241deda4fe56d843c0ba06daf8aa264f630fe4540f1492b01b0fd16a37b41399e264d42344058fb07dd944bdb8fe412d390e2c9e140b731adc5752d0bb531af9568b06af2b1788c6f04be01a3a42b6b2b75cf7ac5855a08971033c73287ebca0e113901ee0ef9da04d8b30ac9847f96d1424a3c15f62a0e847abca225a5f32b71612af86801b6e815134bbebfdcd43d182fff0925f814cc2bdb0024df73381f50e88f780600a3b5e24f208645e89c7790a7931807243715c602fc12313b90d9a6f33c294712875ab7b2ea51595065f03bf483c336b03f71007e224f7b0fa6eb87ac7d9a8ed1717de6ba8ec269eea19562f45963f3780b0f8422abc22418e2f4e11b1868f207bf11bbd6b5d99882475bb74b1695140edcb3e897e4f6460d3fb1e0ecc421811a389daa098dabbe724efce2e190f8955c3f18989784cdce47775798215447f6749eb09905168270f7d78032ea97807626b9e23b81b4a1532ec98822502e3e9f3a53696378c4307b89c191954f370283fa68ea25d08e684a67f4bd03ef3cb8b1a812984d3b966482a28b16b303f4d1d00304958039ace2c56965e21e24c70fe0f08e72da056ba352da33259d47d0a7ea0d4b96745934763352831b8dd05f06c8dd2248349c6532ffff8bf73cf49fcc70a42faf706344302f783087eee11d3f93769b79b05e6edc0ee94915a1f3c203f52824addbc0b695d5965dbe2923a479f4f36d04d35f5912f0dddb9241a911c9b17acf389727791948be683acb00324c01941b51da63c665a1ab6d9007dad0832830db4de8666d8eec876c0d29395df33e088295ffbd5ffb0cb5cdff2e13e10323f1d85018e80cff797b632ac210c5e765e3abf6eedbef632bf593c0b821966e30e9655419608e68acbcc360b7e2926b43dbf570c7b91b6af72f7ac74ee5b81df868d9c05ec369a219b351217e646de7824890749a3e3b4f87f0d49158ed9e8c953bf925830ecd9e2a3da44136d748beb5e3e84f6f2763fdfab3e9545dd80d74fdf3eba7c3f03e8bd7f32afc5966ed07ce268d44c3bb21030c04b649b6edea4237a742c755b0824e5047089afd316cc80399dd06fdfc47fc7d710eee66bd3bab9d2c083406d0718a4d80b682867ed258db38d487ea8179d269adaea42e4ec368fd41061cd0fcb242744896f43d84755e549aadc2087629d77c8d1dce01829d516c491807b7ab7f8413efa9af1a467cd30ae3039427cec1a481c1d71b75d9a6d9f64297938dd2d135706aa674ac7d4218886886105ea70b4ddafab9a64248db27c882f38e074b87eab26f8612e8a22dae91971872c67545d99af134840c16e4e40e3c2acbf64edf8e7d5078f6e1862b3ec7e8a45c9e473f4928eccf39916ed9cbb91ecd0e20fd90ae65ef71ec439a90be1d108b39e35a54c12d6309de004e38bd0bd3bc0d7e6f9ee66c72e6d46e7dfdcb33c5191dcdc054d428836ca6e1cdd956d64f30516031727b4e018d9bbfc5c40489c0753cd06c027189d978f277264b42fd0ae845ea2fb1a94b9a349c854c8d57de98bab77a3fd9c12bbe5d38e8ff876b8679478883be0cfe6eda4c47f1a5fb9144da4deb6611bd6f61ee82ea582c102d4eda1c9bbca0e80963e9fba21ca726a76e119471f6543772e1defbad4f7c006a4864b66f77cc35f8d54607e2e0a03b19304a18f34b6746949f7f6eb526c9a651a06ae8315bd274bf55fd1bf694d1fd49c8ba3219a7e5b20b841110311878f45b272d3dbebd2dafeb06ec4c871c24d91da7af8e95c73c6787dddfb6bfd2fbb78927f6d1eafd4cfc6e747f8588426e36ba069c47574bbabe25d741033ec20c0a92062ceb9c2b9a5e7f12cdc5a37d2a8c8e3abe9f9f79c32e6d2e3756eb74cc3ac1f77568382d0ff8da64b4d6d159652e19698a4fab010c33bead02e4eb8a708fc5fe215f1067fc8d290834585a6a54c88b0464804585cabb896f7cc8b2042d5199bd4d0e54bbd89c0bf0187108682a84eb662262071d357351b7118e2af1df1023e9742d646ea996acbb78d33932c4db5504f626bee5a0a4b285f21509647df1a8634851d09ecbeb5a83492f89fca29db134a3ff10001c77f5802c1990d03babf38c604dc0eb781a23762a86bdae5a907dc4ae3d9c65c97a8ae6bf928fcff74ca29f9b3d96e04f271af764f29f62ffaa49214069975f4326965fa803919f275244f731683da52b483c765038e5c5ee4bd17bab8989e46be4866be107561157f645ad08ccc09d0971945c9f249985058b57d183af4b9281d0263d6e93d62091223aec2597ce1a9ff3a03094d75269873bc38a183e2cd0bcd0b5ac75db3a2843aa9edb34b5e076f745098bfd188778c831da5a328adfc1bd4926e4680be82fb36d81f64e684d36cfdebfececae13777e36efbca42ba8a3476ac26a18b0bb39ba2f61cf4c7ea97df29e128cd23a06ae", 0x1000}, 0x40) sendmsg$tipc(r0, &(0x7f0000003580)={&(0x7f0000003340)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x1}}, 0x10, &(0x7f0000003540)=[{&(0x7f0000003380)="fc0171d8d539afc5d9e17a1db4699bc14fd0eea1732f0b117cecb88e89fd27e3c6996619186808504ab40a72c469d3027b947a9f98629c711afe2a4a0f235736cd4e8781505db94973ffb96947b69456ea72b869237beb759ef43c9d94fc05914f73135ef7953d8eb24da36eac978fef45a5c3f7d644564c29d6347ce288d9c5cae134d2995e731a42ef76b46ac72f3be28371185865b4d2e45c7ad32fa4a5657441e1e88c54b28a294fc26ab7efb997aedbbb3a644d5dcdd60b46f96959698d8cc1d0d73983064335111cb493a4307073f6c3731b10014533c54f910374387c0e8f55843e3400facc8390", 0xeb}, {&(0x7f0000003480)="7d672b64ba0e9cb23af8360eee575cf12539deec6ea6c014491acc8e338441eeaacfa674d4ab0a991504c9cf073803540d4d4742e5f706f120b374c53e882d55e882670fc9f016bb06ba85eeb31a72e1e1c983a8ad0b6fd30d90fd7b4cea35883e7aacf7d44430aaee370e213c56ce10311e3da90547391bc78d143932d27ee3231f88b365b2c0f64087b0f3b73acdf0", 0x90}], 0x2, 0x0, 0x0, 0x71}, 0x20000000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000035c0)={r0}) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003640), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000003680)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000003800)={&(0x7f0000003600), 0xc, &(0x7f00000037c0)={&(0x7f00000036c0)={0xcc, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003880), r1) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000003940)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003900)={&(0x7f00000038c0)={0x3c, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2e33, 0x52}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x40}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0xc0084) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000039c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000003ac0)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003a80)={&(0x7f0000003a40)={0x30, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x700, {0x7, 0x401, 0x0, 0xd}}}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000003bc0)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003b80)={&(0x7f0000003b40)={0x1c, r6, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24010}, 0x2000004) recvfrom(r5, &(0x7f0000003c00)=""/146, 0x92, 0x40000000, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000003cc0)={r0}) socket$pptp(0x18, 0x1, 0x2) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000003d40), r5) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000003e40)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003e00)={&(0x7f0000003d80)={0x70, r8, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000050) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000003f40)={&(0x7f0000003e80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003f00)={&(0x7f0000003ec0)={0x1c, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20001010}, 0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r9, &(0x7f0000004080)={&(0x7f0000003f80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004040)={&(0x7f0000003fc0)={0x4c, r8, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000041c0)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004180)={&(0x7f0000004100)={0x50, r4, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x731a, 0x5e}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r10, &(0x7f0000004380)={&(0x7f0000004200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004340)={&(0x7f0000004240)={0xdc, r4, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x77}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xac}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x3}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x3}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xdc}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x81}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x13}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xe4}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x9}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x90}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1e}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xe1b, 0x10}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x9}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x10}]}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x3}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff6b}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x40}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x25}}]}, 0xdc}}, 0x68841) clock_gettime(0x0, &(0x7f0000004480)={0x0, 0x0}) pselect6(0x40, &(0x7f00000043c0)={0xc9b, 0x200, 0x5, 0xe6b, 0x8, 0x8, 0x0, 0x1}, &(0x7f0000004400)={0x8, 0xe, 0xffffffffe96a52b8, 0x3b2, 0xfffffffffffffff8, 0x3, 0x2, 0x9}, &(0x7f0000004440)={0x2, 0xfffffffffffffffd, 0xc, 0x5, 0x2bc6, 0x826, 0x59e, 0x2}, &(0x7f00000044c0)={r11, r12+10000000}, &(0x7f0000004540)={&(0x7f0000004500)={[0x8]}, 0x8}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000004640)={&(0x7f0000004580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004600)={&(0x7f00000045c0)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1f30d13e98c6affc}, 0x40800) 16.24264386s ago: executing program 1 (id=5355): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000ec6216d40000000000ffffffff0a80000000000000000000000800100007000000080017004e204e20"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000400)=0x0) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r1, 0xf5f) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r5, &(0x7f0000000100)=@abs={0x27, 0x0, 0x4e23}, 0x6e) r6 = accept(r1, 0x0, 0x0) close(r2) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_ext={0x1c, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7080000010000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018460000faffffff0000000000000000"], &(0x7f0000000ac0)='GPL\x00', 0x100, 0xb4, &(0x7f0000000b00)=""/180, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000d00)={0x1, 0x5, 0x21e}, 0x10, 0x15213, 0xffffffffffffffff, 0x7, &(0x7f0000000e00)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000e40)=[{0x5, 0x4, 0xd, 0x5}, {0x3, 0x5, 0x7, 0x3}, {0x5, 0x1, 0xe, 0x8}, {0x5, 0x2, 0x5, 0xc}, {0x5, 0x3, 0x3, 0xa}, {0x2, 0x4, 0x5, 0x5}, {0x3, 0x5, 0x2, 0x8}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r7, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) close(0x4) ioctl$BTRFS_IOC_DEFRAG(r7, 0x50009402, 0x0) sendmsg(r0, &(0x7f0000003040)={&(0x7f0000001a00)=@qipcrtr={0x2a, 0xffffffff, 0x1}, 0x80, 0x0}, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r2}, 0x7ffe, 0x2, 0x8000000000002}) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000040)={0x8, 'veth1_to_batadv\x00', {'veth0_to_bond\x00'}}) getsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000000180), &(0x7f00000001c0)=0x4) write$cgroup_type(r6, &(0x7f00000000c0), 0x9) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, 0x0, &(0x7f00000009c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r6, @ANYRESHEX=r6, @ANYRESDEC=r3, @ANYRESHEX=r5, @ANYRES64=r6, @ANYRESOCT=r3, @ANYBLOB="ac93bacfd29361a6863142093a55a425bf04f47fd4c930db053fecb9251a80713fa332077231d591d1987152440b5bc6cc60569d0d48ac1fcfb2338423"], 0x38}, 0x1, 0x0, 0x0, 0x200048d0}, 0xc481) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f00000006c0)={0x1e, 0x1, {0x1, @usage=0xfffffffffffffffb, 0x0, 0x5538, 0x0, 0x5dd0, 0xbaa, 0x4, 0x80, @usage=0x8001, 0x1, 0x1, [0x3, 0x3, 0x2e3, 0x10000, 0x100000001, 0x7]}, {0x656, @struct={0x80000000, 0x1000}, 0x0, 0x3, 0xafb3, 0x2, 0xffffffffffffffff, 0x0, 0x490, @struct={0x6, 0x74}, 0x1, 0x8, [0xff, 0x80, 0x9, 0x5, 0x2, 0x7]}, {0xff, @struct={0x377, 0x400}, 0x0, 0x8, 0x5, 0x10004, 0x6, 0xfff, 0x0, @struct={0x5, 0xfeffffff}, 0x4, 0x3ff, [0x6, 0x7, 0x10, 0x6, 0x7fff, 0x8]}, {0x10001, 0x0, 0x2}}) ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f0000001a80)={r9, "46d277f6a15bb435dadeb63fbce0f67b"}) socket$inet_mptcp(0x2, 0x1, 0x106) 16.242242942s ago: executing program 4 (id=5356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@getchain={0x2c, 0x66, 0x10, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff1, 0xffe0}, {0x8, 0x5}, {0x0, 0x3}}, [{0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@getchain={0x2c, 0x66, 0x10, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff1, 0xffe0}, {0x8, 0x5}, {0x0, 0x3}}, [{0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) (async) 16.220863027s ago: executing program 3 (id=5357): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'cm\x00'}]}, 0x18}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=@newneigh={0x24, 0x1c, 0x1, 0x70bd2e, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x80, 0x0, 0x5}, [@NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048800}, 0x4048800) 16.127512185s ago: executing program 0 (id=5358): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1d0, 0x65, 0x2, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_bpf={{0x8}, {0x190, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0x10}}, @TCA_BPF_ACT={0x184, 0x1, [@m_simple={0x180, 0xf, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x11, 0x3, 'veth0_to_hsr\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x7581, 0x1, 0x6, 0x8}}, @TCA_DEF_DATA={0x11, 0x3, 'veth0_to_hsr\x00'}, @TCA_DEF_DATA={0x7, 0x3, ')^\x00'}]}, {0x101, 0x6, "350b798b023091441a06dd89a77da19bbc5234cf4f3e360bd2bd6daac6a90e672768da88c4ff9514b5b940c2579d464d7679118a5bdc359d0efdab2e2700703a9b7d1f5659677c5cf7fc5c6fb36b4f600965c28dcf4f4636e337e922605424cfda544591630bd6eb61819ddaa3871874ed25f1f62e2f309b35b72f1218a3b5e078365e90a949cf738397adda623f93e05cebec3d5a685266b49d40671cd1ecb7c77d960b0a89c7db331332a0275863ca9345150eceaa1d2ae32ebcc78973c5db566603ad2a6a5656d2b14dbee2376548292fabd5893e7f98cfb384ee9a45296c85a12a111cc0905486e3d5c282f7d6c6450e3de66fdd1ed71df06b8513"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090b000000000000000000000003000600000000000200000000000000000000000000000002000100000000000000fb0200000000030005000000000002000000ac1414aa0000000000000000010008000029"], 0x58}, 0x1, 0x7}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000001800090000000000000000001c140800fe00000100000000140012001100b6acd7b8f7f0a0ae8c5d910c33781b409fcc2409f93c7e1476d5ee3b270441bf521c87c84d"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000001800090000000000000000001c140800fe00000100000000140012001100b6acd7b8f7f0a0ae8c5d910c33781b409fcc2409f93c7e1476d5ee3b270441bf521c87c84d"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000006240)={0x0, 0x0, &(0x7f0000006200)={&(0x7f0000006000)={0x2c, 0x17, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x84) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r3) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020025bd7000fcdbdf25060000000500060001000000ac1e010108000900"/46], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20054804) 16.073294577s ago: executing program 3 (id=5359): getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="b9cd7b9a19cc82da1a37267f3597dccc17dfe73ead77697c927fa426e6e288a05c504fcead2a9ece82340964e9763889111bb728d02df42df10aa89333c3e2fd2db53906ff66c60307e9ef4292513183336f94a30147253f87387bc72868ae8173a9b07af2c9db7413ea7071be52c3cafc69039ac06c4fa98a762359b830f5aa3f602c51e19c89d34b43e7113ae31ebe2f60457d3399fd3be75512c46faa2f1b5fce563b66001c4ea1bfa6830711077b63a499280a9cf9a81cc4c6b71ba96a4e02e15b0a152df7b89a33bd70a0ac3fd2fb7797dd714d7a"], &(0x7f0000000480)='GPL\x00'}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080007000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="c000000000000000000000000000000069869f9b4a0074586c9f0c522844c65014127e4651d085a89043138706e79a415b0b0d126c51c1215cfe34997eddd2b4a8256b525b5c15b219daa9ce4cca864a73d9c49ae2771bb70203ebd653200a0d37a0c028cb33b28c7532f384febe039d54537e6952f92cc821c13f34a5426d1532ddd442827bd8dae047fac4b17d711520cd27e961b3719609ab712940ecf8144bddecefbabf2f18e909822089ac4fcedea2b8ec7e90d0456d07b3770b6700009000000000000000000000000000000072a9590a604c03a1efaa205b95ad3fe1e977c3d1d1408ae17ab1ff9118f13db566222a1e12c010521a70c445d97d0cba145ba79178a6d3bbaf70f226652e625fada31ca89eb8c925dd4508fcd45487d3c7adbd913b169777e4af51b9946246bba4c4738a0c7eddb08f69d74199764d908782652867dcd1da4aae000000000000e0000000000000000000000000000000187ab360a4694eb57bbe6342b5dda581327297f3380b94699ac0c4df81a9904c6b5b40886799172be834dbee1691a0b86881e701b7411036b9d70173dcfe9af0e46c8b97f7a94c1cb39e3ff9ffb5ead3394e9aa03d9a841b579823964df8643ed6ce4a33534bd8f71d23cf382643573c2b096540e8b3015e71ab7ab18d7b0365f8a57e46b31177feadae2f9ba08c35dc719f7dfe28f5aac4213806b82bfc2390dc42727cc56d3bbf03700c77441d5e788d6ef2656c82c6b151c4180dbf2b21d7e7f8e824eb8e2c6ab2000000400000001800000000000000100100000d0000004ecbeb07"], 0x248, 0xe000}, 0x5}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x4e24, 0x1, 'wrr\x00', 0x0, 0x7, 0x2f}, 0x2c) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="b9cd7b9a19cc82da1a37267f3597dccc17dfe73ead77697c927fa426e6e288a05c504fcead2a9ece82340964e9763889111bb728d02df42df10aa89333c3e2fd2db53906ff66c60307e9ef4292513183336f94a30147253f87387bc72868ae8173a9b07af2c9db7413ea7071be52c3cafc69039ac06c4fa98a762359b830f5aa3f602c51e19c89d34b43e7113ae31ebe2f60457d3399fd3be75512c46faa2f1b5fce563b66001c4ea1bfa6830711077b63a499280a9cf9a81cc4c6b71ba96a4e02e15b0a152df7b89a33bd70a0ac3fd2fb7797dd714d7a"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080007000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) sendmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x248, 0xe000}, 0x5}], 0x1, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x4e24, 0x1, 'wrr\x00', 0x0, 0x7, 0x2f}, 0x2c) (async) 16.037526193s ago: executing program 0 (id=5360): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x6011, r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x70bd21, 0x25dfdbfb, {}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) 15.975427819s ago: executing program 2 (id=5361): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x29, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x856}]}}}]}, 0x40}}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r4, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0xa) r9 = socket$rxrpc(0x21, 0x2, 0xa) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r11) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000840)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r11, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r12, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x8014) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)={0x1238, r12, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6aad4308, 0x6d}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x60, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x13, 0x0, @random="9f1428da7dce0dce844c822c5b3e06"}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x10}, {0x8}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0xffff}, {0x8, 0x0, 0x200}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x6}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x9}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1160, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1004, 0x0, "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"}, @NL80211_BAND_5GHZ={0xc9, 0x1, "fcd0bc9349d569ce42e093ec2c4973b7dd1b77054b736a6b92a8962ef8d7d429e035537d7cd722a5c67967ac8d7c33341a09828b23eed86662e1773a316512eef83661f27875d8f4c36a472c50630dfa5e6fdd292b6bde0f434c992c7a3ef8a42d0775e8f57075d1f08a03c71817b8bcd9e927ca28c4c4b82b8b8dc7cb0dd16dfcced127f1897cc43daa97f064e01644ac08f1d13b14f53bd592e973ae9d8214d01b3844ef5c36edf1fb809c120abb5b86dbd7c53e94e65e8c3a8401e97e3651be49b00130"}, @NL80211_BAND_60GHZ={0x8c, 0x2, "d14b947fd27c59eb1f03ad8f7f0f0edd89aeb3e0ff1c85e6b5e5defea836d6616488080b75d6bc07d2887b1a6ec020c9efd483521700ae2a14f5d1b34186f97d91c0b66a06ba16bde3da39e61a091ab6cbf96a8038914c24f66431fe182af9d79f7206e5e5eb2a87d58b83bdd7e853b2b034885ceede18cab66bebae8ee16014357da43c29dee2d8"}]}]}, 0x1238}}, 0x40000) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r9, 0x110, 0x4, &(0x7f0000000080)=0x2, 0x4) connect$rxrpc(r9, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000050000000400000000000001000000004e006f01005f3030004ea1b35b82b6a7af99243a825bd5372285f6242ade485341cb06cce40d43da0343dcbee38fe78f5bb413bacfefeb709af2a01e1688ab03366640b851215a06c245b67d804eff7c1388a985da9ba933aec24f787627f8d9cc4f373b29bc12a1b8fced6fc028afc7bf148d75c04a2d387bab5d7068f250a1072c97d517bb8fa1e57fd879cf1c7d10c49e785acc0f0702d1bd8bb4f7b2d5"], 0x0, 0x2d, 0x0, 0x3}, 0x20) sendmsg$inet(r9, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r8, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) close(r3) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0xc14, 0x400, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 15.913799805s ago: executing program 2 (id=5362): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)=""/249, 0x6a, 0xf9, 0x6}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003700)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x49249249249266f, 0x20044881) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000240)=0x7, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r3, 0x25, 0x15, @void}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x101, 0x81}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYBLOB="0000000006"], 0x24}}, 0x0) r6 = socket(0x22, 0x2, 0x5) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r6, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0x99}, {{&(0x7f00000002c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000200)=""/23, 0x17}, {&(0x7f0000000340)=""/150, 0x96}, {&(0x7f0000001640)=""/156, 0x9c}], 0x3, &(0x7f0000001700)=""/175, 0xaf}, 0xaf}], 0x400000000000312, 0x7ffeede0, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r4, 0x0, 0x0) 15.881244067s ago: executing program 4 (id=5363): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5c, &(0x7f00000000c0)=0x800, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000fe0000850000001b000000b700000000000000850000002a00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000089000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) 15.83149399s ago: executing program 0 (id=5364): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000430001000500000000000000000000000f000100aaaaaaaa223000"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000005c0), 0x10) recvmmsg(r5, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0xc251}], 0x1, 0x10002, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000880)=0xbc, 0x4) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000e740)=ANY=[], 0x6ae8}, 0x1, 0x0, 0x0, 0x1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, r7, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x2c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0xfffffffffffffd7a}]}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xfc, r7, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x400c0}, 0x8850) recvmsg$can_bcm(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x20) 15.750539176s ago: executing program 4 (id=5365): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@remote}, {@loopback}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x197, 0x7, 0x9}}}}]}, 0x44}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x8, 0x5, 0x7}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x4, 0x8}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) 15.685003817s ago: executing program 2 (id=5366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x6}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0xd489, 0x8, 0x10000, 0x9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xdc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28}, 0x48) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 15.535610319s ago: executing program 4 (id=5367): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000006c80), &(0x7f0000006cc0)=0x4) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "0ebfd61996044fb4249989f65f4e7f3ee7"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f00000018c0)={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4c0, 0x2d8, 0x0, 0xffffffff, 0x0, 0x238, 0x428, 0x428, 0xffffffff, 0x428, 0x428, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x238, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x0, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@remote, @ipv4=@broadcast, @port=0x4e22, @icmp_id=0x66}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @gre_key=0x7}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname$packet(r5, 0x0, &(0x7f00000006c0)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r6, 0x1f4d2000) write$tun(r6, &(0x7f0000000000)={@val={0x0, 0xf6}, @void, @eth={@empty, @local, @void, {@can={0xc, {{0x2, 0x1, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "6345afc09b81b5ef"}}}}}, 0x22) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r6) sendmsg$NL80211_CMD_SET_CHANNEL(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r8, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1b}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010100000000fdffffff2b00000008000300", @ANYRES32=r9, @ANYBLOB="0ae534000202020202020000080026408f0f000008006b0001000000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x1c810) close(r6) connect$pptp(r6, &(0x7f0000000540)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x3c}}}, 0x1e) 15.529865s ago: executing program 2 (id=5368): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0xd0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {0x0, 0x4108}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4c000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) 1.188422941s ago: executing program 32 (id=5355): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000ec6216d40000000000ffffffff0a80000000000000000000000800100007000000080017004e204e20"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000400)=0x0) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, r4, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r1, 0xf5f) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r5, &(0x7f0000000100)=@abs={0x27, 0x0, 0x4e23}, 0x6e) r6 = accept(r1, 0x0, 0x0) close(r2) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_ext={0x1c, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="18110000", @ANYRES32, @ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7080000010000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018460000faffffff0000000000000000"], &(0x7f0000000ac0)='GPL\x00', 0x100, 0xb4, &(0x7f0000000b00)=""/180, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000d00)={0x1, 0x5, 0x21e}, 0x10, 0x15213, 0xffffffffffffffff, 0x7, &(0x7f0000000e00)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000e40)=[{0x5, 0x4, 0xd, 0x5}, {0x3, 0x5, 0x7, 0x3}, {0x5, 0x1, 0xe, 0x8}, {0x5, 0x2, 0x5, 0xc}, {0x5, 0x3, 0x3, 0xa}, {0x2, 0x4, 0x5, 0x5}, {0x3, 0x5, 0x2, 0x8}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r7, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) close(0x4) ioctl$BTRFS_IOC_DEFRAG(r7, 0x50009402, 0x0) sendmsg(r0, &(0x7f0000003040)={&(0x7f0000001a00)=@qipcrtr={0x2a, 0xffffffff, 0x1}, 0x80, 0x0}, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r2}, 0x7ffe, 0x2, 0x8000000000002}) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000040)={0x8, 'veth1_to_batadv\x00', {'veth0_to_bond\x00'}}) getsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000000180), &(0x7f00000001c0)=0x4) write$cgroup_type(r6, &(0x7f00000000c0), 0x9) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, 0x0, &(0x7f00000009c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r6, @ANYRESHEX=r6, @ANYRESDEC=r3, @ANYRESHEX=r5, @ANYRES64=r6, @ANYRESOCT=r3, @ANYBLOB="ac93bacfd29361a6863142093a55a425bf04f47fd4c930db053fecb9251a80713fa332077231d591d1987152440b5bc6cc60569d0d48ac1fcfb2338423"], 0x38}, 0x1, 0x0, 0x0, 0x200048d0}, 0xc481) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f00000006c0)={0x1e, 0x1, {0x1, @usage=0xfffffffffffffffb, 0x0, 0x5538, 0x0, 0x5dd0, 0xbaa, 0x4, 0x80, @usage=0x8001, 0x1, 0x1, [0x3, 0x3, 0x2e3, 0x10000, 0x100000001, 0x7]}, {0x656, @struct={0x80000000, 0x1000}, 0x0, 0x3, 0xafb3, 0x2, 0xffffffffffffffff, 0x0, 0x490, @struct={0x6, 0x74}, 0x1, 0x8, [0xff, 0x80, 0x9, 0x5, 0x2, 0x7]}, {0xff, @struct={0x377, 0x400}, 0x0, 0x8, 0x5, 0x10004, 0x6, 0xfff, 0x0, @struct={0x5, 0xfeffffff}, 0x4, 0x3ff, [0x6, 0x7, 0x10, 0x6, 0x7fff, 0x8]}, {0x10001, 0x0, 0x2}}) ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f0000001a80)={r9, "46d277f6a15bb435dadeb63fbce0f67b"}) socket$inet_mptcp(0x2, 0x1, 0x106) 151.08659ms ago: executing program 33 (id=5364): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000430001000500000000000000000000000f000100aaaaaaaa223000"], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000005c0), 0x10) recvmmsg(r5, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0xc251}], 0x1, 0x10002, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000880)=0xbc, 0x4) sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000e740)=ANY=[], 0x6ae8}, 0x1, 0x0, 0x0, 0x1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, r7, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x2c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0xfffffffffffffd7a}]}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xfc, r7, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x400c0}, 0x8850) recvmsg$can_bcm(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x20) 123.75715ms ago: executing program 34 (id=5368): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0xd0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {0x0, 0x4108}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4c000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) 73.824952ms ago: executing program 35 (id=5359): getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="b9cd7b9a19cc82da1a37267f3597dccc17dfe73ead77697c927fa426e6e288a05c504fcead2a9ece82340964e9763889111bb728d02df42df10aa89333c3e2fd2db53906ff66c60307e9ef4292513183336f94a30147253f87387bc72868ae8173a9b07af2c9db7413ea7071be52c3cafc69039ac06c4fa98a762359b830f5aa3f602c51e19c89d34b43e7113ae31ebe2f60457d3399fd3be75512c46faa2f1b5fce563b66001c4ea1bfa6830711077b63a499280a9cf9a81cc4c6b71ba96a4e02e15b0a152df7b89a33bd70a0ac3fd2fb7797dd714d7a"], &(0x7f0000000480)='GPL\x00'}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080007000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x248, 0xe000}, 0x5}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x4e24, 0x1, 'wrr\x00', 0x0, 0x7, 0x2f}, 0x2c) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="b9cd7b9a19cc82da1a37267f3597dccc17dfe73ead77697c927fa426e6e288a05c504fcead2a9ece82340964e9763889111bb728d02df42df10aa89333c3e2fd2db53906ff66c60307e9ef4292513183336f94a30147253f87387bc72868ae8173a9b07af2c9db7413ea7071be52c3cafc69039ac06c4fa98a762359b830f5aa3f602c51e19c89d34b43e7113ae31ebe2f60457d3399fd3be75512c46faa2f1b5fce563b66001c4ea1bfa6830711077b63a499280a9cf9a81cc4c6b71ba96a4e02e15b0a152df7b89a33bd70a0ac3fd2fb7797dd714d7a"], &(0x7f0000000480)='GPL\x00'}, 0x90) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="2da52abd7000fbdbdf2503000000080007000000000008000100000000003400", @ANYRES32=r2], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) (async) write(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x2000000000000021, 0x2, 0x10000000000002) (async) sendmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x248, 0xe000}, 0x5}], 0x1, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x4e24, 0x1, 'wrr\x00', 0x0, 0x7, 0x2f}, 0x2c) (async) 0s ago: executing program 36 (id=5367): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000006c80), &(0x7f0000006cc0)=0x4) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "0ebfd61996044fb4249989f65f4e7f3ee7"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f00000018c0)={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x4c0, 0x2d8, 0x0, 0xffffffff, 0x0, 0x238, 0x428, 0x428, 0xffffffff, 0x428, 0x428, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x238, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x0, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@remote, @ipv4=@broadcast, @port=0x4e22, @icmp_id=0x66}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @gre_key=0x7}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname$packet(r5, 0x0, &(0x7f00000006c0)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r6, 0x1f4d2000) write$tun(r6, &(0x7f0000000000)={@val={0x0, 0xf6}, @void, @eth={@empty, @local, @void, {@can={0xc, {{0x2, 0x1, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "6345afc09b81b5ef"}}}}}, 0x22) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r6) sendmsg$NL80211_CMD_SET_CHANNEL(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r8, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1b}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010100000000fdffffff2b00000008000300", @ANYRES32=r9, @ANYBLOB="0ae534000202020202020000080026408f0f000008006b0001000000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x1c810) close(r6) connect$pptp(r6, &(0x7f0000000540)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x3c}}}, 0x1e) kernel console output (not intermixed with test programs): T20663] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3868'. [ 454.474030][T20687] gtp0: entered promiscuous mode [ 454.479116][T20687] gtp0: entered allmulticast mode [ 454.502493][T20690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 454.742960][T20708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3879'. [ 454.758383][T20710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.888670][T20724] netlink: 1192 bytes leftover after parsing attributes in process `syz.3.3880'. [ 454.891625][T20710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.231254][T20740] netlink: 'syz.1.3884': attribute type 1 has an invalid length. [ 455.980980][T20772] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3893'. [ 456.048612][T20775] team_slave_1: entered allmulticast mode [ 456.543600][T20808] netlink: 'syz.3.3900': attribute type 2 has an invalid length. [ 457.044973][T20829] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20004 [ 457.454868][T16658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.463605][T16658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.472146][T16660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.481921][T16656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.491337][T20270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.614316][T18138] Bluetooth: hci5: command 0x0406 tx timeout [ 457.665059][T20863] __nla_validate_parse: 2 callbacks suppressed [ 457.665082][T20863] netlink: 288 bytes leftover after parsing attributes in process `syz.0.3917'. [ 457.754753][T20869] netlink: 'syz.4.3918': attribute type 1 has an invalid length. [ 457.783375][T20863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3917'. [ 458.097999][T16656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.162346][T20899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3927'. [ 458.390340][T20911] netlink: 'syz.2.3930': attribute type 1 has an invalid length. [ 458.494156][T16660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.557617][T20918] bond3: (slave ip6gretap1): making interface the new active one [ 458.566834][T20918] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 458.592038][T20920] geneve1 speed is unknown, defaulting to 1000 [ 458.610010][T20924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3933'. [ 458.641230][T20927] siw: device registration error -23 [ 458.970580][T20938] syzkaller0: entered promiscuous mode [ 459.003469][T20938] syzkaller0: entered allmulticast mode [ 459.205416][T20947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3937'. [ 459.367199][T20957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3939'. [ 459.471824][T20966] IPVS: length: 242 != 8 [ 459.537380][T16660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.750623][T20983] netlink: 'syz.1.3946': attribute type 21 has an invalid length. [ 459.769444][T20983] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3946'. [ 459.779888][T20969] syzkaller0: entered promiscuous mode [ 459.788058][T20969] syzkaller0: entered allmulticast mode [ 459.796220][T20977] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 459.824581][T20977] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.832795][T20977] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.253946][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.276057][T21006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3952'. [ 460.582173][T16656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.152228][T20269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.617253][T16658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.887865][T20997] dvmrp6: entered allmulticast mode [ 461.935897][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.954273][T20269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.964740][T20270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.080244][T21017] netlink: 'syz.1.3953': attribute type 1 has an invalid length. [ 462.244024][T21026] ipvlan3: entered promiscuous mode [ 462.307493][T21034] erspan0: entered promiscuous mode [ 462.373832][T21034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3957'. [ 462.490080][T21047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3961'. [ 462.737494][T21063] netlink: 'syz.3.3964': attribute type 4 has an invalid length. [ 462.896407][T21068] xt_limit: Overflow, try lower: 271964/0 [ 462.911968][T21068] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 462.941504][T21071] TCP: TCP_TX_DELAY enabled [ 463.018037][T21071] tipc: Enabling of bearer rejected, media not registered [ 463.350280][T21088] __nla_validate_parse: 2 callbacks suppressed [ 463.350301][T21088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3970'. [ 463.417603][T21088] batadv_slave_0: entered promiscuous mode [ 463.621649][T21110] netlink: 'syz.0.3974': attribute type 1 has an invalid length. [ 463.693944][T16660] net_ratelimit: 1 callbacks suppressed [ 463.693966][T16660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.920025][T21086] batadv_slave_0: left promiscuous mode [ 464.519616][T21152] bond5: option miimon: invalid value (18446744073709551585) [ 464.530485][T21152] bond5: option miimon: allowed values 0 - 2147483647 [ 464.555881][T21152] bond5 (unregistering): Released all slaves [ 464.734128][T16660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.916235][T21174] syzkaller0: entered promiscuous mode [ 464.921979][T21174] syzkaller0: entered allmulticast mode [ 464.970542][T21179] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.979539][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.991934][T20269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.129778][T21186] sctp: [Deprecated]: syz.3.3994 (pid 21186) Use of int in max_burst socket option deprecated. [ 465.129778][T21186] Use struct sctp_assoc_value instead [ 465.233031][T21193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3996'. [ 465.440191][T21207] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.449228][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.619974][T21215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4003'. [ 465.644716][T21215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4003'. [ 465.743992][T21212] geneve1 speed is unknown, defaulting to 1000 [ 465.777172][T16660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.916183][T21231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.149852][T21244] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4010'. [ 466.337461][T21255] xt_hashlimit: size too large, truncated to 1048576 [ 466.426270][T20269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.622454][T21271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4017'. [ 467.701852][T21313] mac80211_hwsim hwsim41 ÿ: renamed from wlan1 (while UP) [ 467.875328][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 468.040987][T21333] team0: Device ip6gre1 is of different type [ 468.098090][T21339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4030'. [ 468.899385][T16660] net_ratelimit: 7 callbacks suppressed [ 468.899408][T16660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.935594][T16656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.734273][T20269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.929727][T20269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.974311][T16660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.603718][T21453] netlink: 'syz.1.4053': attribute type 1 has an invalid length. [ 471.699536][T21456] xt_hashlimit: size too large, truncated to 1048576 [ 471.788323][T21453] 8021q: adding VLAN 0 to HW filter on device bond5 [ 472.014138][T16660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.358793][T21495] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4064'. [ 472.388292][T21497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 472.628746][T21514] xt_l2tp: invalid flags combination: 0 [ 472.637598][T21517] netlink: 340 bytes leftover after parsing attributes in process `syz.2.4072'. [ 472.774394][T21500] can: request_module (can-proto-5) failed. [ 472.858432][T21530] netlink: 'syz.1.4073': attribute type 1 has an invalid length. [ 472.950343][T21538] lo: Caught tx_queue_len zero misconfig [ 472.965387][T21534] netlink: 'syz.2.4075': attribute type 1 has an invalid length. [ 473.054023][T16660] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.107035][T21534] netlink: 'syz.2.4075': attribute type 32 has an invalid length. [ 473.128711][T21540] bond4: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 473.140814][T21534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4075'. [ 473.143368][T21544] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4077'. [ 473.177791][T21546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4078'. [ 473.190452][T21534] bond5: option coupled_control: invalid value (52) [ 473.200927][T21534] bond5 (unregistering): Released all slaves [ 473.307146][T21540] veth5: entered promiscuous mode [ 473.328320][T21540] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 473.425755][T21553] IPVS: Unknown mcast interface: vcan0 [ 473.449096][T21518] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 473.472627][T21518] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 473.638416][T21518] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 473.669501][T21518] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 473.774405][T20270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.809761][T21518] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 473.826962][T21518] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 474.020814][T21518] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 474.051179][T21518] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 474.093895][ T9686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.109514][T21585] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4089'. [ 474.124032][T21587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4090'. [ 474.299311][T21518] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 474.322122][T21518] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 474.435660][T21592] netlink: 'syz.1.4091': attribute type 1 has an invalid length. [ 474.546187][T21592] 8021q: adding VLAN 0 to HW filter on device bond6 [ 474.579717][T21592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4091'. [ 474.658101][T21597] vti0: entered promiscuous mode [ 474.799919][T21608] netlink: 'syz.3.4094': attribute type 24 has an invalid length. [ 475.016205][T21624] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20003 [ 475.137790][T16658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.424439][T21651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4103'. [ 475.736242][T21666] tipc: Enabling of bearer rejected, failed to enable media [ 475.976055][T21680] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4109'. [ 476.019268][T20270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.019575][T21683] netlink: 'syz.3.4111': attribute type 33 has an invalid length. [ 476.098702][T21629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.173983][T16658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.241564][T21693] sctp: [Deprecated]: syz.2.4113 (pid 21693) Use of int in max_burst socket option deprecated. [ 476.241564][T21693] Use struct sctp_assoc_value instead [ 476.813857][T20270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.867838][T21730] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 476.898418][T21730] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 476.918340][T21730] gretap2: entered promiscuous mode [ 476.924933][T21730] gretap2: entered allmulticast mode [ 477.100695][T21740] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 477.213918][T16656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.580916][T21768] __nla_validate_parse: 2 callbacks suppressed [ 477.580939][T21768] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.4132'. [ 477.630657][T21768] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.4132'. [ 477.869141][T21784] netlink: 'syz.0.4136': attribute type 6 has an invalid length. [ 477.884644][T21779] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4135'. [ 478.116577][T21800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4140'. [ 478.156680][T21802] xt_SECMARK: invalid mode: 9 [ 478.163965][T21800] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4140'. [ 478.178119][T21805] netlink: zone id is out of range [ 478.183785][T21805] netlink: get zone limit has 4 unknown bytes [ 478.381970][T21821] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4146'. [ 478.744708][T21845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4152'. [ 478.778396][T21846] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4152'. [ 478.789815][T21846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4152'. [ 478.800007][T21846] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.805932][T21845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4152'. [ 478.807218][T21846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.823622][T21846] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.831645][T21846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.912251][T21848] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 479.304960][T21875] sctp: [Deprecated]: syz.0.4160 (pid 21875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 479.304960][T21875] Use struct sctp_sack_info instead [ 479.510146][T21889] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 479.517475][T21889] IPv6: NLM_F_CREATE should be set when creating new route [ 479.524912][T21889] IPv6: NLM_F_CREATE should be set when creating new route [ 479.532262][T21889] IPv6: NLM_F_CREATE should be set when creating new route [ 479.820813][T21903] sctp: [Deprecated]: syz.1.4168 (pid 21903) Use of int in maxseg socket option. [ 479.820813][T21903] Use struct sctp_assoc_value instead [ 480.568749][T21935] Cannot find add_set index 2 as target [ 481.110482][T21967] netlink: 'syz.2.4181': attribute type 1 has an invalid length. [ 481.128615][T21969] netlink: 'syz.1.4182': attribute type 9 has an invalid length. [ 481.164126][T21969] netlink: 'syz.1.4182': attribute type 11 has an invalid length. [ 481.196456][T21969] netlink: 'syz.1.4182': attribute type 12 has an invalid length. [ 481.245552][T21974] netlink: 'syz.2.4184': attribute type 1 has an invalid length. [ 481.261294][T21975] xt_connbytes: Forcing CT accounting to be enabled [ 481.316593][T21975] xt_socket: unknown flags 0x50 [ 481.534034][T21990] lo: entered allmulticast mode [ 481.567033][T21990] lo: left allmulticast mode [ 481.627713][T22000] ip6tnl0: Caught tx_queue_len zero misconfig [ 482.043576][T22025] netlink: 'syz.0.4192': attribute type 1 has an invalid length. [ 482.087198][T22024] netlink: 'syz.2.4193': attribute type 14 has an invalid length. [ 482.195876][T22025] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 482.229587][T22025] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 482.290228][T22025] bond3: (slave xfrm1): making interface the new active one [ 482.315870][T22025] bond3: (slave xfrm1): Enslaving as an active interface with an up link [ 482.371917][T22034] bond3 (unregistering): (slave xfrm1): Releasing backup interface [ 482.396441][T22034] bond3 (unregistering): Released all slaves [ 482.717954][T22063] __nla_validate_parse: 11 callbacks suppressed [ 482.717985][T22063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4201'. [ 482.804855][T22067] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4203'. [ 482.830986][T22067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4203'. [ 482.875607][T22067] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4203'. [ 482.997810][T22085] netlink: 'syz.0.4207': attribute type 1 has an invalid length. [ 483.064494][T22085] netlink: 'syz.0.4207': attribute type 1 has an invalid length. [ 483.136404][T22099] netlink: 'syz.3.4210': attribute type 1 has an invalid length. [ 483.175681][T22099] 8021q: adding VLAN 0 to HW filter on device bond3 [ 483.194465][T22097] bond1: (slave veth0_to_bond): Releasing active interface [ 483.221041][T22097] bond3: (slave veth0_to_bond): making interface the new active one [ 483.245479][T22097] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 483.370666][T22099] bond3: entered promiscuous mode [ 483.397257][T22099] veth0_to_bond: entered promiscuous mode [ 483.417884][T22099] bond3: entered allmulticast mode [ 483.423060][T22099] veth0_to_bond: entered allmulticast mode [ 483.448655][T22114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4212'. [ 483.590224][T22110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4212'. [ 483.684059][T22121] delete_channel: no stack [ 484.141729][T22152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4217'. [ 484.145680][T22147] netlink: 'syz.0.4222': attribute type 1 has an invalid length. [ 484.301772][T22147] bond3: entered promiscuous mode [ 484.308786][T22147] bond3: entered allmulticast mode [ 484.316299][T22147] 8021q: adding VLAN 0 to HW filter on device bond3 [ 484.350014][T22157] macvlan3: entered promiscuous mode [ 484.364860][T22157] macvlan3: entered allmulticast mode [ 484.395024][T22157] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 484.608019][T22182] netlink: 'syz.3.4229': attribute type 2 has an invalid length. [ 484.633390][T22182] netlink: 119 bytes leftover after parsing attributes in process `syz.3.4229'. [ 484.698830][T22190] netlink: 'syz.0.4232': attribute type 26 has an invalid length. [ 484.861672][T22198] pimreg: entered allmulticast mode [ 485.001113][T22211] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4237'. [ 485.031643][T22211] netlink: 216 bytes leftover after parsing attributes in process `syz.0.4237'. [ 485.075248][T22211] netlink: 'syz.0.4237': attribute type 21 has an invalid length. [ 485.142699][T22219] netlink: 'syz.4.4239': attribute type 1 has an invalid length. [ 485.172361][T22211] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 485.174800][T22216] netlink: 'syz.0.4237': attribute type 83 has an invalid length. [ 485.198364][T22211] bond4 (unregistering): Released all slaves [ 485.206420][T22222] xt_ecn: cannot match TCP bits for non-tcp packets [ 485.251471][T22219] bond2: entered promiscuous mode [ 485.258191][T22219] 8021q: adding VLAN 0 to HW filter on device bond2 [ 485.946214][T22258] smc: net device team0 applied user defined pnetid SYZ2 [ 485.946886][T22251] bridge_slave_0: left allmulticast mode [ 485.961798][T22251] bridge_slave_0: left promiscuous mode [ 485.969462][T22251] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.979791][T22263] smc: net device caif0 applied user defined pnetid SYZ2 [ 486.610494][T22315] netlink: 'syz.1.4261': attribute type 21 has an invalid length. [ 487.729717][T22368] __nla_validate_parse: 8 callbacks suppressed [ 487.729737][T22368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4274'. [ 488.044834][T22384] bridge_slave_0: left allmulticast mode [ 488.079559][T22384] bridge_slave_0: left promiscuous mode [ 488.104928][T22384] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.117884][T22387] netlink: 'syz.1.4278': attribute type 8 has an invalid length. [ 488.152046][T22384] bridge_slave_1: left allmulticast mode [ 488.176792][T22393] net_ratelimit: 1 callbacks suppressed [ 488.176812][T22393] openvswitch: netlink: EtherType 0 is less than min 600 [ 488.177408][T22384] bridge_slave_1: left promiscuous mode [ 488.193811][T22393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4279'. [ 488.213497][T22384] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.243676][T22392] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4281'. [ 488.269430][T22384] veth0_to_bond: left allmulticast mode [ 488.283247][T22384] veth0_to_bond: left promiscuous mode [ 488.300135][T22392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4281'. [ 488.309581][T22384] bridge2: port 1(veth0_to_bond) entered disabled state [ 488.378017][T22400] xt_CT: You must specify a L4 protocol and not use inversions on it [ 488.381522][T22384] bond0: (slave bond_slave_0): Releasing backup interface [ 488.452086][T22384] bond0: (slave bond_slave_1): Releasing backup interface [ 488.487851][T22384] team0: Port device team_slave_0 removed [ 488.518839][T22384] team0: Port device team_slave_1 removed [ 488.547205][T22384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.567370][T22384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.596968][T22384] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 488.824311][T22421] netlink: 'syz.3.4286': attribute type 1 has an invalid length. [ 489.012954][T22421] netlink: 'syz.3.4286': attribute type 1 has an invalid length. [ 489.022080][T22435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4289'. [ 489.044925][T22436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4289'. [ 489.192311][T22422] bond4: (slave geneve2): making interface the new active one [ 489.201931][T22422] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 489.234254][T22421] netlink: 'syz.3.4286': attribute type 1 has an invalid length. [ 489.242081][T22440] net veth1_virt_wifi .: renamed from virt_wifi0 [ 489.272662][T13553] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 489.304381][T13553] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 489.338674][T22421] netlink: 'syz.3.4286': attribute type 1 has an invalid length. [ 489.352999][T13553] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 489.390959][T13553] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 489.424626][T22421] netlink: 'syz.3.4286': attribute type 1 has an invalid length. [ 489.433069][T22421] netlink: 'syz.3.4286': attribute type 1 has an invalid length. [ 489.444923][T22452] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4293'. [ 489.497313][T22461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4293'. [ 489.555349][T22452] : entered promiscuous mode [ 489.584632][T22421] netlink: 'syz.3.4286': attribute type 1 has an invalid length. [ 489.614633][T22421] netlink: 'syz.3.4286': attribute type 1 has an invalid length. [ 489.707844][T22465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4294'. [ 489.740042][T22472] netlink: 'syz.1.4296': attribute type 1 has an invalid length. [ 489.776106][T22470] sctp: [Deprecated]: syz.4.4294 (pid 22470) Use of struct sctp_assoc_value in delayed_ack socket option. [ 489.776106][T22470] Use struct sctp_sack_info instead [ 489.786591][T22465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4294'. [ 489.832904][T22472] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 489.870067][T22472] bond7: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 489.884759][T22472] bond7: (slave xfrm1): making interface the new active one [ 489.892830][T22472] bond7: (slave xfrm1): Enslaving as an active interface with an up link [ 489.941322][T13553] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.004370][T13553] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.076897][T13553] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.102155][T13553] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 490.375852][T22514] : renamed from bond_slave_0 (while UP) [ 491.424357][T22571] IPv6: sit2: Disabled Multicast RS [ 491.441355][T22571] sit2: entered allmulticast mode [ 491.792420][T22596] syz_tun: entered promiscuous mode [ 491.883229][T22596] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 491.940321][T22596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.965526][T22596] team0: Port device bond0 added [ 491.980991][ T30] audit: type=1107 audit(1769997617.190:6): pid=22603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 492.434117][T22641] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 492.514875][T22650] batadv_slave_1: entered promiscuous mode [ 492.528946][T22651] x_tables: duplicate underflow at hook 1 [ 492.545079][T22650] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 492.560949][T22646] batadv_slave_1: left promiscuous mode [ 492.780991][T22660] __nla_validate_parse: 14 callbacks suppressed [ 492.781013][T22660] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4334'. [ 493.231100][T22682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4342'. [ 493.261276][T22682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4342'. [ 493.587203][T22694] validate_nla: 3 callbacks suppressed [ 493.587228][T22694] netlink: 'syz.4.4345': attribute type 10 has an invalid length. [ 494.067312][T22735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4353'. [ 494.101977][T22735] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4353'. [ 494.201986][T22745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4353'. [ 494.263900][T22744] netlink: 'syz.0.4352': attribute type 4 has an invalid length. [ 494.412350][T22750] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 494.709992][T22766] netlink: 'syz.4.4360': attribute type 1 has an invalid length. [ 494.865260][T22770] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.4363'. [ 494.897640][T22770] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4363'. [ 495.240361][T22783] netlink: 'syz.4.4368': attribute type 29 has an invalid length. [ 495.289309][T22784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4366'. [ 495.307129][T22783] netlink: 'syz.4.4368': attribute type 29 has an invalid length. [ 495.343934][T22784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4366'. [ 495.352665][T22783] netlink: 'syz.4.4368': attribute type 28 has an invalid length. [ 495.406520][T22783] netlink: 'syz.4.4368': attribute type 3 has an invalid length. [ 495.628694][T22803] xt_hashlimit: size too large, truncated to 1048576 [ 495.944869][T22829] netlink: 'syz.1.4378': attribute type 3 has an invalid length. [ 496.995361][T22883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.220094][T22890] openvswitch: netlink: IPv6 tunnel dst address is zero [ 497.228709][T22891] openvswitch: netlink: IPv6 tunnel dst address is zero [ 497.787622][T22921] netlink: 'syz.0.4398': attribute type 10 has an invalid length. [ 497.815470][T22921] __nla_validate_parse: 9 callbacks suppressed [ 497.815490][T22921] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4398'. [ 497.846613][T22925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4400'. [ 497.857836][T22925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4400'. [ 499.873308][T22921] þÿÿ: entered promiscuous mode [ 499.879265][T22921] bridge0: port 3(þÿÿ) entered blocking state [ 499.889267][T22921] bridge0: port 3(þÿÿ) entered disabled state [ 499.897000][T22921] þÿÿ: entered allmulticast mode [ 499.913947][T22921] bridge0: port 3(þÿÿ) entered blocking state [ 499.920460][T22921] bridge0: port 3(þÿÿ) entered forwarding state [ 500.047531][T22952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4404'. [ 500.065932][T22956] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4405'. [ 500.075352][T22956] openvswitch: netlink: Flow key attr not present in new flow. [ 500.087020][T22956] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4405'. [ 500.126167][T22952] vlan2: entered allmulticast mode [ 500.146394][T22952] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 500.410142][T22980] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4412'. [ 500.617943][T22997] netlink: 'syz.3.4413': attribute type 3 has an invalid length. [ 500.667851][T23000] netlink: 4904 bytes leftover after parsing attributes in process `syz.0.4417'. [ 500.729397][T23002] netlink: 4904 bytes leftover after parsing attributes in process `syz.0.4417'. [ 500.909434][T23015] netlink: 'syz.4.4421': attribute type 2 has an invalid length. [ 500.916451][T23018] sit0: entered promiscuous mode [ 500.948582][T23018] netlink: 'syz.1.4422': attribute type 1 has an invalid length. [ 500.956511][T23019] sctp: [Deprecated]: syz.0.4423 (pid 23019) Use of struct sctp_assoc_value in delayed_ack socket option. [ 500.956511][T23019] Use struct sctp_sack_info instead [ 500.987369][T23018] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4422'. [ 501.182820][T23022] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 501.730678][T23073] netlink: 'syz.1.4433': attribute type 1 has an invalid length. [ 502.016334][T13551] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.045532][T13551] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.085669][T13551] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.123236][T13551] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 502.161087][T23095] : entered promiscuous mode [ 502.294119][T23111] siw: device registration error -23 [ 502.552973][T23125] netlink: 'syz.0.4447': attribute type 5 has an invalid length. [ 502.871892][T23141] syzkaller0: entered promiscuous mode [ 502.885473][T23141] syzkaller0: entered allmulticast mode [ 502.924136][T23138] sctp: [Deprecated]: syz.0.4450 (pid 23138) Use of int in max_burst socket option deprecated. [ 502.924136][T23138] Use struct sctp_assoc_value instead [ 503.113403][T23151] __nla_validate_parse: 13 callbacks suppressed [ 503.113425][T23151] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4453'. [ 503.439630][T23178] team0: Caught tx_queue_len zero misconfig [ 503.747081][T23191] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 503.777238][T23191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4466'. [ 503.868171][T23196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4467'. [ 504.258483][T23228] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4471'. [ 504.303699][T23229] netlink: 'syz.0.4475': attribute type 13 has an invalid length. [ 504.791376][T23237] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 504.802558][T23237] syzkaller0: entered promiscuous mode [ 504.810505][T23237] syzkaller0: entered allmulticast mode [ 504.997311][T23265] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4480'. [ 505.670689][T23289] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4485'. [ 507.067979][T23287] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4485'. [ 507.291500][T23300] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 507.345660][T23311] netlink: 'syz.3.4492': attribute type 4 has an invalid length. [ 507.621652][T23330] nftables ruleset with unbound set [ 507.842181][T23345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4497'. [ 507.986139][T23345] netlink: 'syz.0.4497': attribute type 21 has an invalid length. [ 507.994380][T23345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 508.001614][T23345] IPv6: NLM_F_CREATE should be set when creating new route [ 508.009004][T23345] IPv6: NLM_F_CREATE should be set when creating new route [ 508.016395][T23345] IPv6: NLM_F_CREATE should be set when creating new route [ 508.032295][T23348] xfrm1: entered allmulticast mode [ 508.072851][T23363] netlink: 'syz.2.4500': attribute type 13 has an invalid length. [ 508.126242][T23363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4500'. [ 508.159842][T23371] x_tables: duplicate underflow at hook 1 [ 508.182944][T23363] netlink: 'syz.2.4500': attribute type 13 has an invalid length. [ 508.233960][T23363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4500'. [ 508.240964][T23371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4500'. [ 508.559122][T23391] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4505'. [ 508.681669][T23405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4508'. [ 508.854964][T23415] netlink: 'syz.3.4510': attribute type 1 has an invalid length. [ 508.861850][T23414] netlink: 'syz.1.4511': attribute type 9 has an invalid length. [ 508.974943][T23415] bond5: entered promiscuous mode [ 508.980492][T23415] 8021q: adding VLAN 0 to HW filter on device bond5 [ 509.102535][T23422] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 509.138191][T23425] bond3: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 509.164210][T23433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4515'. [ 509.170754][T23430] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 509.234630][T23418] bond5: (slave bridge4): making interface the new active one [ 509.247499][T23418] bridge4: entered promiscuous mode [ 509.255939][T23418] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 509.280573][T23443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4517'. [ 509.283572][T23426] syzkaller1: entered promiscuous mode [ 509.322742][T23426] syzkaller1: entered allmulticast mode [ 509.399720][T23446] netlink: 'syz.1.4518': attribute type 1 has an invalid length. [ 509.921283][ T30] audit: type=1107 audit(1769997635.130:7): pid=23473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='²6ô rejected, failed to enable media [ 510.987825][T23505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4529'. [ 511.170197][T20267] IPVS: starting estimator thread 0... [ 511.293432][T23556] IPVS: using max 28 ests per chain, 67200 per kthread [ 511.319383][T23569] openvswitch: netlink: Key 12 has unexpected len 4 expected 2 [ 511.598415][T23577] tipc: Started in network mode [ 511.620572][T23577] tipc: Node identity 2400, cluster identity 4711 [ 511.643379][T23577] tipc: Node number set to 9216 [ 511.799514][T23590] netlink: 'syz.2.4550': attribute type 3 has an invalid length. [ 512.330073][T23622] unsupported nla_type 59170 [ 513.051025][T23609] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 513.617950][T23695] tunl0: Caught tx_queue_len zero misconfig [ 513.670347][T23696] netlink: 'syz.4.4576': attribute type 5 has an invalid length. [ 513.777469][T23711] __nla_validate_parse: 6 callbacks suppressed [ 513.777491][T23711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4581'. [ 513.831476][T23694] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 513.862870][T23694] bridge0: port 3(þÿÿ) entered disabled state [ 513.869392][T23694] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.877502][T23694] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.397647][T23726] syzkaller0: entered allmulticast mode [ 514.555960][T23751] tunl0: Caught tx_queue_len zero misconfig [ 537.516579][T24653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4590'. [ 537.770734][T24671] netlink: 'syz.3.4598': attribute type 10 has an invalid length. [ 537.894491][T24677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4599'. [ 537.950908][T24677] netlink: 'syz.4.4599': attribute type 1 has an invalid length. [ 538.065129][T24693] netlink: 'syz.4.4599': attribute type 1 has an invalid length. [ 538.234621][T24702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4604'. [ 538.265940][T24704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.307493][T24702] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4604'. [ 538.492932][T24707] team0: Device ip6gre1 is of different type [ 538.865350][T24741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4616'. [ 538.883680][T24738] openvswitch: netlink: EtherType 50a is less than min 600 [ 538.972792][T24750] bridge0: Caught tx_queue_len zero misconfig [ 539.100904][T24761] netlink: 'syz.2.4620': attribute type 23 has an invalid length. [ 539.623215][T24792] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.781897][T24800] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4628'. [ 539.809958][T24800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4628'. [ 539.962806][T24801] IPv6: NLM_F_CREATE should be specified when creating new route [ 539.981796][T24801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4629'. [ 540.079189][T24812] sctp: [Deprecated]: syz.2.4632 (pid 24812) Use of struct sctp_assoc_value in delayed_ack socket option. [ 540.079189][T24812] Use struct sctp_sack_info instead [ 540.108693][T24815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.135581][T24817] sctp: [Deprecated]: syz.2.4632 (pid 24817) Use of struct sctp_assoc_value in delayed_ack socket option. [ 540.135581][T24817] Use struct sctp_sack_info instead [ 540.160569][T24815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.201901][T24815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.222317][T24815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.237673][T24825] netlink: 'syz.1.4634': attribute type 1 has an invalid length. [ 540.249579][T24815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.258920][T24825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4634'. [ 540.276866][T24815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.294294][T24815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.349258][T24830] veth0: entered promiscuous mode [ 540.489040][T24837] veth0: left promiscuous mode [ 540.544399][T24843] syzkaller1: entered promiscuous mode [ 540.549946][T24843] syzkaller1: entered allmulticast mode [ 540.705018][T24847] netlink: 'syz.4.4640': attribute type 3 has an invalid length. [ 540.862743][T24865] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4644'. [ 541.550590][T24899] netlink: 'syz.4.4656': attribute type 1 has an invalid length. [ 541.584197][T24904] syzkaller0: entered promiscuous mode [ 541.589756][T24904] syzkaller0: entered allmulticast mode [ 541.674337][T24899] bond5: entered promiscuous mode [ 541.680181][T24899] 8021q: adding VLAN 0 to HW filter on device bond5 [ 541.969377][T24917] netlink: 'syz.0.4660': attribute type 1 has an invalid length. [ 542.537280][T24960] netlink: 'syz.4.4673': attribute type 9 has an invalid length. [ 542.584867][T24962] netlink: 'syz.1.4670': attribute type 1 has an invalid length. [ 542.856812][T24977] __nla_validate_parse: 5 callbacks suppressed [ 542.856834][T24977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4677'. [ 542.874803][T24977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4677'. [ 543.236846][T24992] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4680'. [ 543.779227][T25017] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4686'. [ 543.817855][T25017] syzkaller1: entered promiscuous mode [ 543.833252][T25017] syzkaller1: entered allmulticast mode [ 544.256485][T25043] netlink: 'syz.2.4694': attribute type 1 has an invalid length. [ 544.445846][T25043] 8021q: adding VLAN 0 to HW filter on device bond6 [ 544.466957][T25046] net_ratelimit: 27 callbacks suppressed [ 544.466979][T25046] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 544.510458][T25052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4693'. [ 544.556590][T25066] netlink: 'syz.4.4696': attribute type 3 has an invalid length. [ 544.610523][T25061] bond6: (slave gretap1): making interface the new active one [ 544.626929][T25061] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 544.692649][T20261] IPVS: starting estimator thread 0... [ 544.706004][T25071] tunl0: entered promiscuous mode [ 544.731826][T25071] netlink: 'syz.4.4697': attribute type 3 has an invalid length. [ 544.772894][T25071] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4697'. [ 544.812224][T25073] IPVS: using max 27 ests per chain, 64800 per kthread [ 544.975768][T25077] macsec2: entered promiscuous mode [ 545.040522][T25084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4699'. [ 545.363927][T25108] IPVS: length: 4096 != 24 [ 545.396300][T25108] gtp1: entered promiscuous mode [ 545.401308][T25108] gtp1: entered allmulticast mode [ 545.407164][T25106] nft_compat: unsupported protocol 0 [ 545.453866][T25109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4705'. [ 545.637662][T25115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4707'. [ 545.763628][T25131] netlink: 'syz.2.4710': attribute type 20 has an invalid length. [ 545.802688][T25131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4710'. [ 546.124459][T25141] tipc: Enabling of bearer rejected, already enabled [ 546.269542][T25131] netlink: 'syz.2.4710': attribute type 20 has an invalid length. [ 546.357653][T25153] netlink: 'syz.1.4714': attribute type 1 has an invalid length. [ 546.423438][T25161] netlink: 'syz.0.4716': attribute type 1 has an invalid length. [ 546.504855][T25156] 8021q: adding VLAN 0 to HW filter on device bond6 [ 546.509419][T25164] netlink: 'syz.1.4717': attribute type 10 has an invalid length. [ 546.657026][T25164] veth0_vlan: left promiscuous mode [ 546.685296][T25164] veth0_vlan: entered promiscuous mode [ 546.714528][T25164] team0: Device veth0_vlan failed to register rx_handler [ 546.786775][T25185] x_tables: duplicate underflow at hook 1 [ 546.909085][T25172] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 547.040219][T25192] netlink: 'syz.1.4722': attribute type 13 has an invalid length. [ 547.564308][T25217] tunl0: entered promiscuous mode [ 547.569702][T25217] netlink: 'syz.0.4731': attribute type 3 has an invalid length. [ 548.103657][T25243] __nla_validate_parse: 10 callbacks suppressed [ 548.103680][T25243] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4738'. [ 548.347238][T25256] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4743'. [ 548.452101][T25266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4746'. [ 548.547121][T25266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4746'. [ 548.811139][T25286] delete_channel: no stack [ 549.051356][T25298] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4755'. [ 549.094168][T25302] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4757'. [ 549.366873][T25320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4760'. [ 549.423307][T25320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4760'. [ 549.469456][T25320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4760'. [ 549.572317][T25320] bond7: up delay (7) is not a multiple of miimon (1024), value rounded to 0 ms [ 549.907280][T25355] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 550.071074][T25355] veth3: entered promiscuous mode [ 550.090337][T25355] veth3: entered allmulticast mode [ 550.115167][T25366] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 550.129667][T25366] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 550.221506][T25368] syzkaller0: entered promiscuous mode [ 550.243145][T25368] syzkaller0: entered allmulticast mode [ 550.283318][T25370] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4771'. [ 550.606761][T25387] validate_nla: 2 callbacks suppressed [ 550.606785][T25387] netlink: 'syz.1.4775': attribute type 1 has an invalid length. [ 550.620794][T25387] netlink: 'syz.1.4775': attribute type 2 has an invalid length. [ 550.690369][T25392] tipc: MTU too low for tipc bearer [ 550.756205][T25396] block nbd2: NBD_DISCONNECT [ 550.833814][T25398] bond0: entered allmulticast mode [ 550.927686][T25409] netlink: 'syz.3.4781': attribute type 6 has an invalid length. [ 551.492167][T25446] veth1_macvtap: left promiscuous mode [ 551.827645][T25442] netlink: 'syz.2.4788': attribute type 1 has an invalid length. [ 551.837675][T25458] dvmrp0: entered allmulticast mode [ 551.885120][ T30] audit: type=1800 audit(1769997677.100:8): pid=25460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4790" name="memory.events" dev="tmpfs" ino=1480 res=0 errno=0 [ 551.931223][ T30] audit: type=1804 audit(1769997677.100:9): pid=25460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.4790" name="/newroot/288/memory.events" dev="tmpfs" ino=1480 res=1 errno=0 [ 551.969728][T25442] bond7: entered promiscuous mode [ 551.975522][T25442] 8021q: adding VLAN 0 to HW filter on device bond7 [ 552.045436][T25442] bond7: (slave bridge7): making interface the new active one [ 552.056830][T25442] bridge7: entered promiscuous mode [ 552.076828][T25442] bridge7: left promiscuous mode [ 552.255814][T25472] geneve1 speed is unknown, defaulting to 1000 [ 553.274767][T25533] __nla_validate_parse: 6 callbacks suppressed [ 553.274789][T25533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4805'. [ 553.317226][T25533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4805'. [ 553.345416][T25533] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4805'. [ 553.398218][T25533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4805'. [ 553.448458][T25533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4805'. [ 553.475947][T25546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4808'. [ 553.493621][T25533] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4805'. [ 553.508833][T25546] block nbd0: Unsupported socket: should be TCP or UNIX. [ 553.549035][T25549] ip6erspan0: entered promiscuous mode [ 553.555891][T25549] ip6erspan0: entered allmulticast mode [ 553.568493][T25533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4805'. [ 553.620377][T25533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4805'. [ 553.644524][T25533] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4805'. [ 553.833163][T25564] syzkaller0: entered promiscuous mode [ 553.838803][T25564] syzkaller0: entered allmulticast mode [ 553.965236][T25573] netlink: 'syz.1.4814': attribute type 1 has an invalid length. [ 554.166075][T25580] netlink: 'syz.1.4817': attribute type 10 has an invalid length. [ 554.260057][T25580] syz_tun: entered allmulticast mode [ 554.296352][T25580] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 554.364053][ T5489] veth1_macvtap: entered promiscuous mode [ 554.434010][T25602] netlink: 'syz.0.4821': attribute type 4 has an invalid length. [ 554.593308][ T30] audit: type=1800 audit(1769997679.800:10): pid=25603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4823" name="cgroup.controllers" dev="tmpfs" ino=1527 res=0 errno=0 [ 554.598132][T25613] syzkaller0: entered allmulticast mode [ 554.787529][T25612] bond8: option min_links: invalid value (18446744073709551614) [ 554.804925][T25626] IPv6: NLM_F_CREATE should be specified when creating new route [ 554.834516][T25612] bond8: option min_links: allowed values 0 - 2147483647 [ 554.878027][T25612] bond8 (unregistering): Released all slaves [ 555.618855][T25666] macsec1: entered promiscuous mode [ 555.922744][T25682] netlink: 'syz.2.4839': attribute type 21 has an invalid length. [ 556.941291][T25753] netlink: 'syz.4.4855': attribute type 1 has an invalid length. [ 557.318141][T25768] veth1: Caught tx_queue_len zero misconfig [ 558.516272][T25849] __nla_validate_parse: 175 callbacks suppressed [ 558.516293][T25849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4876'. [ 558.542917][T25849] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4876'. [ 558.597412][T25853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4876'. [ 558.649676][T25856] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4876'. [ 560.818194][T25885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4883'. [ 560.820215][T25889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4883'. [ 560.840210][T25890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4884'. [ 560.884283][T25893] netlink: 'syz.3.4881': attribute type 1 has an invalid length. [ 560.898243][T25897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4882'. [ 560.928778][T25897] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4882'. [ 561.196178][T25893] 8021q: adding VLAN 0 to HW filter on device bond8 [ 561.250306][T25905] sctp: [Deprecated]: syz.4.4886 (pid 25905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 561.250306][T25905] Use struct sctp_sack_info instead [ 561.290023][T25899] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 561.330407][T25899] bond8 (unregistering): Released all slaves [ 561.452781][T25900] vlan5: entered promiscuous mode [ 561.473205][T25900] bond8: entered promiscuous mode [ 561.478523][T25900] vlan5: entered allmulticast mode [ 561.487618][T25900] bond8: entered allmulticast mode [ 561.514993][T25918] xt_hashlimit: size too large, truncated to 1048576 [ 561.585482][T25897] veth7: entered promiscuous mode [ 561.590994][T25897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4882'. [ 561.605068][T25901] bond8: (slave bridge5): making interface the new active one [ 561.612993][T25901] bridge5: entered promiscuous mode [ 561.618828][T25901] bridge5: entered allmulticast mode [ 561.626753][T25901] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 561.940820][T25897] veth9: entered promiscuous mode [ 562.050535][T25938] : renamed from bond0 (while UP) [ 562.114837][T25940] netlink: 'syz.2.4894': attribute type 3 has an invalid length. [ 562.144127][T25940] netlink: 'syz.2.4894': attribute type 1 has an invalid length. [ 562.346590][T25954] veth9: entered promiscuous mode [ 562.351684][T25954] veth9: entered allmulticast mode [ 562.736656][T25970] lo: Caught tx_queue_len zero misconfig [ 562.756736][T25970] netlink: 'syz.0.4902': attribute type 14 has an invalid length. [ 563.101763][T26004] netem: unknown loss type 0 [ 563.132935][T26004] netem: change failed [ 563.223686][T26009] nbd0: detected capacity change from 0 to 127 [ 563.266053][T18138] block nbd0: Receive control failed (result -104) [ 563.629478][T26029] 8021q: VLANs not supported on ipvlan1 [ 563.632287][T26033] __nla_validate_parse: 8 callbacks suppressed [ 563.632306][T26033] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4917'. [ 563.652265][T26029] netlink: 'syz.0.4916': attribute type 1 has an invalid length. [ 563.680145][T26034] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4918'. [ 563.878133][T26045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.419849][T26080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4928'. [ 564.639742][T26089] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4932'. [ 564.669929][T26089] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4932'. [ 564.832988][T26102] IPVS: set_ctl: invalid protocol: 640 0.32.0.0:23552 [ 565.292210][T26136] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4940'. [ 565.322285][T26116] bond8: entered promiscuous mode [ 565.327792][T26116] bond8: entered allmulticast mode [ 565.340326][T26116] 8021q: adding VLAN 0 to HW filter on device bond8 [ 565.563492][T26139] syzkaller1: entered promiscuous mode [ 565.569480][T26139] syzkaller1: entered allmulticast mode [ 565.878504][T26161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4948'. [ 565.896962][T26161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4948'. [ 565.920192][T26161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4948'. [ 565.935710][T26161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4948'. [ 565.958421][T26158] syzkaller0: entered promiscuous mode [ 565.969264][T26158] syzkaller0: entered allmulticast mode [ 566.000028][T26158] openvswitch: netlink: Duplicate key (type 32). [ 566.040770][T26161] veth3: entered promiscuous mode [ 566.077545][T26161] netlink: 'syz.4.4948': attribute type 6 has an invalid length. [ 566.093900][T26161] netlink: 'syz.4.4948': attribute type 5 has an invalid length. [ 566.270771][T26188] netlink: 'syz.1.4953': attribute type 13 has an invalid length. [ 566.388447][T26192] netlink: 'syz.4.4954': attribute type 1 has an invalid length. [ 566.578410][T26209] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 566.676061][T26220] syz_tun: entered allmulticast mode [ 566.714579][T26218] syz_tun: left allmulticast mode [ 567.330665][T26260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 567.334705][T26261] xt_TCPMSS: Only works on TCP SYN packets [ 567.519524][T26274] xt_hashlimit: size too large, truncated to 1048576 [ 568.378720][T26317] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 568.854808][T26354] bond0: Caught tx_queue_len zero misconfig [ 569.199184][T26379] __nla_validate_parse: 15 callbacks suppressed [ 569.199207][T26379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4997'. [ 569.376112][T26395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4999'. [ 569.517609][T26395] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4999'. [ 569.532582][T26400] netlink: 'syz.2.5001': attribute type 23 has an invalid length. [ 569.570696][T26400] netlink: 'syz.2.5001': attribute type 27 has an invalid length. [ 569.591896][T26400] netlink: 'syz.2.5001': attribute type 23 has an invalid length. [ 569.642671][T26400] IPv6: NLM_F_CREATE should be specified when creating new route [ 569.716113][T26409] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5004'. [ 569.727250][T26410] syzkaller1: entered promiscuous mode [ 569.776466][T26410] syzkaller1: entered allmulticast mode [ 569.912550][T26429] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5009'. [ 569.996721][T26429] netlink: 'syz.4.5009': attribute type 24 has an invalid length. [ 570.111296][T26440] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 570.125029][T26440] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 570.309542][T26450] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5013'. [ 570.685020][T26464] batadv_slave_0: Caught tx_queue_len zero misconfig [ 570.750185][T26456] nbd1: detected capacity change from 0 to 127 [ 570.761940][T18138] block nbd1: Receive control failed (result -104) [ 570.820186][T26464] netlink: 'syz.0.5017': attribute type 24 has an invalid length. [ 571.250195][T26497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5022'. [ 571.413880][T26500] netlink: 'syz.4.5024': attribute type 1 has an invalid length. [ 571.468988][T26500] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 571.639241][T26515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5026'. [ 572.241840][T26552] netlink: 'syz.3.5036': attribute type 83 has an invalid length. [ 572.241975][T26551] netlink: 'syz.3.5036': attribute type 83 has an invalid length. [ 572.729463][T26576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5040'. [ 572.756987][T26576] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5040'. [ 572.824298][T26584] bond0: Device is already in use. [ 572.922404][T26591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.628635][T26631] netlink: 'syz.0.5055': attribute type 2 has an invalid length. [ 573.636667][T26631] netlink: 'syz.0.5055': attribute type 1 has an invalid length. [ 573.779720][T26631] team0: Port device bond0 removed [ 573.815968][T26631] bond0 (unregistering): (slave 32): Releasing backup interface [ 573.846745][T26631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.880622][T26631] bond0 (unregistering): Released all slaves [ 574.212833][T26667] bond0: option ad_select: unable to set because the bond device is up [ 574.255836][T26670] __nla_validate_parse: 5 callbacks suppressed [ 574.255855][T26670] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5061'. [ 574.457280][T26678] 8021q: adding VLAN 0 to HW filter on device bond9 [ 574.769115][T26698] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20004 [ 575.242234][T26735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5079'. [ 575.248648][T26733] Cannot find add_set index 2 as target [ 575.253131][T26735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5079'. [ 575.292348][T26735] validate_nla: 1 callbacks suppressed [ 575.292430][T26735] netlink: 'syz.3.5079': attribute type 6 has an invalid length. [ 575.518399][T26749] netlink: 'syz.4.5082': attribute type 1 has an invalid length. [ 575.612500][T26750] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5082'. [ 575.647404][T26749] 8021q: adding VLAN 0 to HW filter on device bond7 [ 575.806510][T26752] bond7: (slave veth5): Enslaving as an active interface with a down link [ 576.081330][T26797] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5090'. [ 576.376142][T26811] sch_tbf: burst 0 is lower than device lo mtu (1031) ! [ 576.512002][T26819] block nbd3: Unsupported socket: should be TCP or UNIX. [ 576.578945][T26821] ip6gre0: Master is either lo or non-ether device [ 576.606674][T26819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5097'. [ 576.646350][T26819] netlink: 'syz.4.5097': attribute type 30 has an invalid length. [ 576.653996][T26827] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5098'. [ 576.769345][T26831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5095'. [ 576.810934][T26831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.025826][T26831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.096329][T26843] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5101'. [ 577.131649][T26850] netlink: 'syz.1.5104': attribute type 1 has an invalid length. [ 577.227972][T26845] bond0: option packets_per_slave: invalid value (18446744073709551615) [ 577.236553][T26845] bond0: option packets_per_slave: allowed values 0 - 65535 [ 577.250501][T26845] bond0 (unregistering): Released all slaves [ 577.254394][T26856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5105'. [ 577.286373][T26857] netlink: 'syz.2.5107': attribute type 1 has an invalid length. [ 577.352520][T26862] netlink: 'syz.2.5107': attribute type 64 has an invalid length. [ 577.449356][T26850] veth7: entered promiscuous mode [ 577.466734][T26857] 8021q: adding VLAN 0 to HW filter on device bond10 [ 577.567664][T26857] veth11: entered promiscuous mode [ 577.598806][T26857] bond10: (slave veth11): Enslaving as a backup interface with a down link [ 577.738104][T26878] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 577.992124][T26893] Dead loop on virtual device ip6_vti0, fix it urgently! [ 578.679339][T26938] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 578.730737][T26937] syzkaller1: entered promiscuous mode [ 578.754487][T26937] syzkaller1: entered allmulticast mode [ 579.765653][T26999] __nla_validate_parse: 6 callbacks suppressed [ 579.765675][T26999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5135'. [ 579.871031][T26999] chnl_net:caif_netlink_parms(): no params data found [ 580.204282][T27028] veth0_virt_wifi: default FDB implementation only supports local addresses [ 580.232670][T27028] tipc: Failed to remove unknown binding: 66,0,0/1:3186960578/3186960579 [ 580.254876][T27028] tipc: Failed to remove unknown binding: 66,0,0/1:3186960578/3186960579 [ 580.390216][T27038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5146'. [ 580.469251][T27044] netlink: 'syz.3.5148': attribute type 1 has an invalid length. [ 580.542148][T27052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5149'. [ 580.679788][T27058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5151'. [ 580.732324][T27060] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5152'. [ 580.752049][T27065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.987611][T27080] sctp: [Deprecated]: syz.4.5154 (pid 27080) Use of struct sctp_assoc_value in delayed_ack socket option. [ 580.987611][T27080] Use struct sctp_sack_info instead [ 581.338432][T27092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5157'. [ 581.413018][T27092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5157'. [ 581.466143][T27099] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5159'. [ 581.541271][T27102] netlink: 'syz.2.5160': attribute type 3 has an invalid length. [ 581.817162][T27105] syz_tun: entered allmulticast mode [ 581.834442][T27112] geneve1 speed is unknown, defaulting to 1000 [ 581.994608][T27121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5166'. [ 582.109954][T27127] netlink: 11 bytes leftover after parsing attributes in process `syz.1.5168'. [ 582.290743][T27104] syz_tun: left allmulticast mode [ 582.721976][T27140] hsr_slave_0 (unregistering): left promiscuous mode [ 582.924803][T27167] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 583.226008][T27184] bond11: entered promiscuous mode [ 583.232806][T27184] bond11: entered allmulticast mode [ 583.238729][T27184] 8021q: adding VLAN 0 to HW filter on device bond11 [ 583.759769][T27222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.176331][ T13] bond2 (unregistering): (slave gretap1): Releasing active interface [ 584.407321][ T13] bond1 (unregistering): (slave bridge1): Releasing active interface [ 584.415895][ T13] bridge1 (unregistering): left promiscuous mode [ 584.422295][ T13] bridge1 (unregistering): left allmulticast mode [ 584.732768][ T13] bond0 (unregistering): Released all slaves [ 584.868864][ T13] bond1 (unregistering): Released all slaves [ 584.997439][ T13] bond2 (unregistering): Released all slaves [ 585.124087][ T13] bond3 (unregistering): Released all slaves [ 585.139411][ T13] bond4 (unregistering): Released all slaves [ 585.276908][ T13] bond5 (unregistering): Released all slaves [ 585.405524][ T13] bond6 (unregistering): Released all slaves [ 585.419095][ T13] bond7 (unregistering): Released all slaves [ 585.432290][T27222] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 585.787681][ T13] : left promiscuous mode [ 586.053764][T27276] __nla_validate_parse: 5 callbacks suppressed [ 586.053785][T27276] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5198'. [ 586.069488][ T13] tipc: Disabling bearer [ 586.081450][ T13] tipc: Left network mode [ 586.251520][T27276] bond12 (unregistering): Released all slaves [ 586.387646][T27292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5202'. [ 586.568071][T27296] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5203'. [ 586.633463][T27296] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5203'. [ 586.852888][T27316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.899722][T27324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5209'. [ 586.919927][T27316] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 586.950337][T27324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5209'. [ 587.148884][T27330] netlink: 'syz.1.5210': attribute type 13 has an invalid length. [ 587.277277][T27331] netlink: 'syz.4.5211': attribute type 22 has an invalid length. [ 587.294060][T27331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5211'. [ 587.748063][T27359] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 588.003533][T27379] xt_time: unknown flags 0xf4 [ 588.362728][T27401] netlink: 'syz.1.5226': attribute type 10 has an invalid length. [ 588.438656][T27401] smc: removing net device caif0 with user defined pnetid SYZ2 [ 588.756121][ T13] hsr_slave_0: left promiscuous mode [ 588.829050][T27429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.845641][ T13] veth1_vlan: left allmulticast mode [ 588.856016][T27428] netlink: 808 bytes leftover after parsing attributes in process `syz.1.5231'. [ 588.900061][T27428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5231'. [ 588.961499][T27437] xt_ecn: cannot match TCP bits for non-tcp packets [ 589.399513][ T13] vlan1 (unregistering): left allmulticast mode [ 589.413852][ T13] veth0_vlan (unregistering): left allmulticast mode [ 590.255871][T27458] syzkaller0: entered promiscuous mode [ 590.261604][T27458] syzkaller0: entered allmulticast mode [ 590.716177][T27498] netlink: 'syz.4.5244': attribute type 11 has an invalid length. [ 590.739732][T27498] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.5244'. [ 590.755972][T27500] netlink: 'syz.4.5244': attribute type 11 has an invalid length. [ 591.408255][T27513] __nla_validate_parse: 1 callbacks suppressed [ 591.408271][T27513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5248'. [ 592.723195][T27484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5241'. [ 592.734948][T27484] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5241'. [ 592.970074][T27513] team0: Port device team_slave_0 removed [ 593.249658][T27539] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5256'. [ 593.291235][T27539] gretap0: entered promiscuous mode [ 593.341535][T27539] gretap0: left promiscuous mode [ 593.366713][T27539] erspan0: left promiscuous mode [ 593.382034][T27548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5259'. [ 593.398984][T27539] syz_tun: left promiscuous mode [ 593.423627][T27539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 593.641922][T27561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5261'. [ 593.786701][ T11] block nbd0: Possible stuck request ffff888025720000: control (read@0,1024B). Runtime 30 seconds [ 593.799591][ T11] block nbd0: Possible stuck request ffff888025720200: control (read@1024,1024B). Runtime 30 seconds [ 593.810642][ T11] block nbd0: Possible stuck request ffff888025720400: control (read@2048,1024B). Runtime 30 seconds [ 593.821915][ T11] block nbd0: Possible stuck request ffff888025720600: control (read@3072,1024B). Runtime 30 seconds [ 594.051329][T27583] netlink: 332 bytes leftover after parsing attributes in process `syz.1.5266'. [ 594.069002][T27584] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5265'. [ 594.086990][T27581] netlink: 332 bytes leftover after parsing attributes in process `syz.1.5266'. [ 594.264240][T27598] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5270'. [ 594.327359][T27603] block nbd3: Unsupported socket: should be TCP or UNIX. [ 594.481652][T27607] netlink: 'syz.4.5272': attribute type 13 has an invalid length. [ 594.547585][T27607] veth0_macvtap: left promiscuous mode [ 594.563272][T27607] macvtap0: entered allmulticast mode [ 594.604997][T27607] macvtap0: refused to change device tx_queue_len [ 594.678547][T27622] gretap0: entered promiscuous mode [ 594.709623][T27622] gretap0: left promiscuous mode [ 594.755106][T27623] macvtap1: entered promiscuous mode [ 594.760944][T27623] macvtap1: entered allmulticast mode [ 594.767097][T27623] veth1_vlan: entered allmulticast mode [ 594.856842][T27614] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 595.050173][T27645] netlink: 'syz.2.5278': attribute type 10 has an invalid length. [ 595.582760][T27676] : entered promiscuous mode [ 595.873495][T27694] syzkaller0: entered promiscuous mode [ 595.909616][T27694] syzkaller0: entered allmulticast mode [ 596.132777][T27694] geneve1 speed is unknown, defaulting to 1000 [ 596.211634][T27709] tipc: Started in network mode [ 596.229587][T27709] tipc: Node identity 42745b03ff92, cluster identity 4711 [ 596.237314][T27709] tipc: Enabled bearer , priority 0 [ 596.384759][T27725] gretap0: entered promiscuous mode [ 596.391941][T27725] gretap0: left promiscuous mode [ 596.407608][T27709] tipc: Disabling bearer [ 596.549419][T27735] __nla_validate_parse: 6 callbacks suppressed [ 596.549441][T27735] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5301'. [ 596.655133][T27743] bridge0: port 3(þÿÿ) entered blocking state [ 596.661636][T27743] bridge0: port 3(þÿÿ) entered forwarding state [ 596.668562][T27743] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.675889][T27743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.683459][T27743] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.690768][T27743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.728848][T27743] bridge0: entered promiscuous mode [ 596.734810][T27743] bridge0: entered allmulticast mode [ 597.409966][T27793] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5316'. [ 597.437416][T27793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5316'. [ 597.445487][T27799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5315'. [ 597.497662][T27798] syzkaller0: entered promiscuous mode [ 597.515507][T27798] syzkaller0: entered allmulticast mode [ 597.658429][T27811] lo: Caught tx_queue_len zero misconfig [ 597.924687][T27824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5325'. [ 597.966210][T27824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5325'. [ 598.104083][T27833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5327'. [ 598.145892][T27833] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.271994][T27845] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5333'. [ 598.868378][T27878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5337'. [ 599.202316][T27901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5344'. [ 599.508768][T27921] geneve3: entered promiscuous mode [ 599.541241][T27921] geneve3: entered allmulticast mode [ 599.758527][T27931] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 600.130207][T27962] netlink: 'syz.3.5359': attribute type 3 has an invalid length. [ 600.455748][T27985] netlink: 'syz.2.5366': attribute type 1 has an invalid length. [ 600.678905][T27998] Cannot find add_set index 65532 as target [ 600.815107][ T11] block nbd1: Possible stuck request ffff8880257b0000: control (read@0,1024B). Runtime 30 seconds [ 600.826190][ T11] block nbd1: Possible stuck request ffff8880257b0200: control (read@1024,1024B). Runtime 30 seconds [ 600.838705][ T11] block nbd1: Possible stuck request ffff8880257b0400: control (read@2048,1024B). Runtime 30 seconds [ 600.849791][ T11] block nbd1: Possible stuck request ffff8880257b0600: control (read@3072,1024B). Runtime 30 seconds [ 609.248079][ T36] bond6 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 609.259192][ T36] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 609.636579][ T36] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 609.806073][ T36] bond5 (unregistering): (slave bridge5): Releasing active interface [ 609.876866][ T36] bond8 (unregistering): (slave bridge6): Releasing backup interface [ 610.083608][ T36] bond0 (unregistering): Released all slaves [ 610.093585][ T36] bond1 (unregistering): Released all slaves [ 610.110022][ T36] bond2 (unregistering): Released all slaves [ 610.237511][ T36] bond3 (unregistering): Released all slaves [ 610.363880][ T36] bond4 (unregistering): (slave veth5): Releasing active interface [ 610.372620][ T36] bond4 (unregistering): Released all slaves [ 610.387312][ T36] bond5 (unregistering): Released all slaves [ 610.509082][ T36] bond6 (unregistering): Released all slaves [ 610.631661][ T36] bond7 (unregistering): Released all slaves [ 610.757697][ T36] bond8 (unregistering): Released all slaves [ 610.875066][ T36] bond9 (unregistering): Released all slaves [ 610.999444][ T36] bond10 (unregistering): Released all slaves [ 611.119895][ T36] bond11 (unregistering): Released all slaves [ 611.132400][ T36] bond12 (unregistering): Released all slaves [ 611.317928][ T36] tipc: Disabling bearer [ 611.324338][ T36] tipc: Disabling bearer [ 611.329762][ T36] tipc: Left network mode [ 611.376325][ T36] IPVS: stopping master sync thread 8348 ... [ 611.804723][ T36] hsr_slave_0: left promiscuous mode [ 611.810631][ T36] hsr_slave_1: left promiscuous mode [ 615.002531][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 615.011920][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 615.020299][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 615.028695][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 615.039468][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 615.065161][T18138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 615.072694][T18138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 615.080337][T18138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 615.089882][T18138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 615.098361][T18138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 615.135854][T28006] geneve1 speed is unknown, defaulting to 1000 [ 615.245284][T28006] chnl_net:caif_netlink_parms(): no params data found [ 615.314877][T28006] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.322144][T28006] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.330182][T28006] bridge_slave_0: entered allmulticast mode [ 615.337686][T28006] bridge_slave_0: entered promiscuous mode [ 615.345665][T28006] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.352836][T28006] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.360717][T28006] bridge_slave_1: entered allmulticast mode [ 615.368506][T28006] bridge_slave_1: entered promiscuous mode [ 615.400164][T28006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.411908][T28006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.441144][T28006] team0: Port device team_slave_0 added [ 615.449199][T28006] team0: Port device team_slave_1 added [ 615.476454][T28006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.483482][T28006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.510273][T28006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.523742][T28006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.530979][T28006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.557964][T28006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.597909][T28006] hsr_slave_0: entered promiscuous mode [ 615.604671][T28006] hsr_slave_1: entered promiscuous mode [ 615.610787][T28006] debugfs: 'hsr0' already exists in 'hsr' [ 615.616997][T28006] Cannot create hsr debugfs directory [ 616.183851][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 616.194768][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 616.213746][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 616.224570][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 616.232941][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 616.316198][ T5145] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 616.327348][ T5145] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 616.338826][ T5145] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 616.346407][T28024] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 616.364757][ T5145] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 616.371931][T28024] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 616.372678][T28020] geneve1 speed is unknown, defaulting to 1000 [ 616.387481][T28024] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 616.397100][T28027] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 616.397487][T28024] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 616.408580][T28027] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 616.415115][T28024] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 616.425636][T28027] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 616.436258][T28024] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 616.453264][ T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 616.464349][T28024] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 616.569045][T28023] geneve1 speed is unknown, defaulting to 1000 [ 616.588892][T28022] geneve1 speed is unknown, defaulting to 1000 [ 616.632981][T28028] geneve1 speed is unknown, defaulting to 1000 [ 616.992329][T28020] chnl_net:caif_netlink_parms(): no params data found [ 617.106544][T28023] chnl_net:caif_netlink_parms(): no params data found [ 617.129821][T28028] chnl_net:caif_netlink_parms(): no params data found [ 617.136759][ T5145] Bluetooth: hci3: command tx timeout [ 617.154552][T28022] chnl_net:caif_netlink_parms(): no params data found [ 617.248646][T28020] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.256384][T28020] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.264774][T28020] bridge_slave_0: entered allmulticast mode [ 617.271901][T28020] bridge_slave_0: entered promiscuous mode [ 617.312590][T28020] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.320406][T28020] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.327781][T28020] bridge_slave_1: entered allmulticast mode [ 617.335121][T28020] bridge_slave_1: entered promiscuous mode [ 617.421192][T28023] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.428553][T28023] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.436417][T28023] bridge_slave_0: entered allmulticast mode [ 617.444212][T28023] bridge_slave_0: entered promiscuous mode [ 617.459778][T28020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.490387][T28023] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.498831][T28023] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.506946][T28023] bridge_slave_1: entered allmulticast mode [ 617.515047][T28023] bridge_slave_1: entered promiscuous mode [ 617.524396][T28020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.588226][T28028] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.596557][T28028] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.605446][T28028] bridge_slave_0: entered allmulticast mode [ 617.612529][T28028] bridge_slave_0: entered promiscuous mode [ 617.621288][T28022] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.628585][T28022] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.636185][T28022] bridge_slave_0: entered allmulticast mode [ 617.643474][T28022] bridge_slave_0: entered promiscuous mode [ 617.662818][T28020] team0: Port device team_slave_0 added [ 617.669108][T28028] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.677359][T28028] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.684769][T28028] bridge_slave_1: entered allmulticast mode [ 617.691823][T28028] bridge_slave_1: entered promiscuous mode [ 617.699609][T28022] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.707396][T28022] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.714973][T28022] bridge_slave_1: entered allmulticast mode [ 617.722368][T28022] bridge_slave_1: entered promiscuous mode [ 617.732075][T28023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.746735][T28023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.758804][T28020] team0: Port device team_slave_1 added [ 617.846769][T28022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.873761][T28028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.886645][T28023] team0: Port device team_slave_0 added [ 617.895359][T28022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.915459][T28020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.922519][T28020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.949816][T28020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.965234][T28028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.976515][T28023] team0: Port device team_slave_1 added [ 617.991819][T28020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.999302][T28020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.026368][T28020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.070084][T28022] team0: Port device team_slave_0 added [ 618.078964][T28022] team0: Port device team_slave_1 added [ 618.143303][T28028] team0: Port device team_slave_0 added [ 618.149887][T28023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.157262][T28023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.185445][T28023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.215834][T28020] hsr_slave_0: entered promiscuous mode [ 618.222417][T28020] hsr_slave_1: entered promiscuous mode [ 618.228891][T28020] debugfs: 'hsr0' already exists in 'hsr' [ 618.234783][T28020] Cannot create hsr debugfs directory [ 618.242433][T28028] team0: Port device team_slave_1 added [ 618.249975][T28023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.257330][T28023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.263344][ T5145] Bluetooth: hci6: command tx timeout [ 618.283675][T28023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.294010][T28022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.309508][T28022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.336508][T28022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.386817][T28022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.394069][T28022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.421420][T28022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.448961][T28028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.457298][T28028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.483509][T28028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.494511][ T5145] Bluetooth: hci7: command tx timeout [ 618.503672][ T5145] Bluetooth: hci8: command tx timeout [ 618.533692][T28028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.540846][T28028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.568070][T28028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.584176][ T5145] Bluetooth: hci9: command tx timeout [ 618.617251][T28023] hsr_slave_0: entered promiscuous mode [ 618.624094][T28023] hsr_slave_1: entered promiscuous mode [ 618.630488][T28023] debugfs: 'hsr0' already exists in 'hsr' [ 618.636611][T28023] Cannot create hsr debugfs directory [ 618.730032][T28022] hsr_slave_0: entered promiscuous mode [ 618.737167][T28022] hsr_slave_1: entered promiscuous mode [ 618.744008][T28022] debugfs: 'hsr0' already exists in 'hsr' [ 618.749777][T28022] Cannot create hsr debugfs directory [ 618.796122][T28028] hsr_slave_0: entered promiscuous mode [ 618.803011][T28028] hsr_slave_1: entered promiscuous mode [ 618.810680][T28028] debugfs: 'hsr0' already exists in 'hsr' [ 618.816857][T28028] Cannot create hsr debugfs directory [ 619.213330][ T5145] Bluetooth: hci3: command tx timeout [ 620.333350][ T5145] Bluetooth: hci6: command tx timeout [ 620.583277][ T5145] Bluetooth: hci8: command tx timeout [ 620.590035][T28031] Bluetooth: hci7: command tx timeout [ 620.653783][T28031] Bluetooth: hci9: command tx timeout [ 621.293672][T28031] Bluetooth: hci3: command tx timeout [ 622.413511][T28031] Bluetooth: hci6: command tx timeout [ 622.653378][ T5145] Bluetooth: hci8: command tx timeout [ 622.659428][T28031] Bluetooth: hci7: command tx timeout [ 622.733492][T28031] Bluetooth: hci9: command tx timeout [ 623.374257][T28031] Bluetooth: hci3: command tx timeout [ 623.863258][ T11] block nbd0: Possible stuck request ffff888025720000: control (read@0,1024B). Runtime 60 seconds [ 623.874202][ T11] block nbd0: Possible stuck request ffff888025720200: control (read@1024,1024B). Runtime 60 seconds [ 623.885470][ T11] block nbd0: Possible stuck request ffff888025720400: control (read@2048,1024B). Runtime 60 seconds [ 623.896653][ T11] block nbd0: Possible stuck request ffff888025720600: control (read@3072,1024B). Runtime 60 seconds [ 624.502975][T28031] Bluetooth: hci6: command tx timeout [ 624.733463][ T5145] Bluetooth: hci8: command tx timeout [ 624.736032][T28031] Bluetooth: hci7: command tx timeout [ 624.813719][T28031] Bluetooth: hci9: command tx timeout [ 625.403344][ T5194] udevd[5194]: worker [25967] /devices/virtual/block/nbd0 is taking a long time [ 630.893621][ T11] block nbd1: Possible stuck request ffff8880257b0000: control (read@0,1024B). Runtime 60 seconds [ 630.904614][ T11] block nbd1: Possible stuck request ffff8880257b0200: control (read@1024,1024B). Runtime 60 seconds [ 630.920101][ T11] block nbd1: Possible stuck request ffff8880257b0400: control (read@2048,1024B). Runtime 60 seconds [ 630.931180][ T11] block nbd1: Possible stuck request ffff8880257b0600: control (read@3072,1024B). Runtime 60 seconds [ 631.433332][ T5194] udevd[5194]: worker [26466] /devices/virtual/block/nbd1 is taking a long time [ 634.735714][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 653.935824][ T11] block nbd0: Possible stuck request ffff888025720000: control (read@0,1024B). Runtime 90 seconds [ 653.946675][ T11] block nbd0: Possible stuck request ffff888025720200: control (read@1024,1024B). Runtime 90 seconds [ 653.957766][ T11] block nbd0: Possible stuck request ffff888025720400: control (read@2048,1024B). Runtime 90 seconds [ 653.968881][ T11] block nbd0: Possible stuck request ffff888025720600: control (read@3072,1024B). Runtime 90 seconds [ 655.246127][ T49] bridge_slave_1: left allmulticast mode [ 655.251800][ T49] bridge_slave_1: left promiscuous mode [ 655.258656][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.268915][ T49] bridge_slave_0: left allmulticast mode [ 655.275908][ T49] bridge_slave_0: left promiscuous mode [ 655.281703][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.572518][ T49] bond10 (unregistering): (slave gretap2): Releasing active interface [ 655.618926][ T49] dvmrp6 (unregistering): left allmulticast mode [ 655.915452][ T49] bond2 (unregistering): (slave bridge3): Releasing active interface [ 655.923748][ T49] bridge3 (unregistering): left promiscuous mode [ 655.930265][ T49] bridge3 (unregistering): left allmulticast mode [ 656.186787][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.198940][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.209209][ T49] bond0 (unregistering): Released all slaves [ 656.328948][ T49] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 656.340961][ T49] bond1 (unregistering): Released all slaves [ 656.474919][ T49] bond2 (unregistering): Released all slaves [ 656.487830][ T49] bond3 (unregistering): Released all slaves [ 656.502679][ T49] bond4 (unregistering): Released all slaves [ 656.521482][ T49] bond5 (unregistering): Released all slaves [ 656.536501][ T49] bond6 (unregistering): Released all slaves [ 656.550743][ T49] bond7 (unregistering): Released all slaves [ 656.676685][ T49] bond8 (unregistering): Released all slaves [ 656.690357][ T49] bond9 (unregistering): Released all slaves [ 656.704170][ T49] bond10 (unregistering): Released all slaves [ 656.718223][ T49] bond11 (unregistering): Released all slaves [ 656.732199][T20269] geneve1 speed is unknown, defaulting to 1000 [ 656.738940][T20269] infiniband syz2: ib_query_port failed (-19) [ 656.850303][ T49] tipc: Left network mode [ 657.221245][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.228810][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.249957][ T49] veth1_macvtap: left promiscuous mode [ 657.256324][ T49] veth0_macvtap: left promiscuous mode [ 657.601575][ T49] team0 (unregistering): Port device team_slave_1 removed [ 657.640340][ T49] team0 (unregistering): Port device team_slave_0 removed [ 658.255649][ T49] IPVS: stop unused estimator thread 0... [ 660.974563][ T11] block nbd1: Possible stuck request ffff8880257b0000: control (read@0,1024B). Runtime 90 seconds [ 660.985590][ T11] block nbd1: Possible stuck request ffff8880257b0200: control (read@1024,1024B). Runtime 90 seconds [ 660.996685][ T11] block nbd1: Possible stuck request ffff8880257b0400: control (read@2048,1024B). Runtime 90 seconds [ 661.007769][ T11] block nbd1: Possible stuck request ffff8880257b0600: control (read@3072,1024B). Runtime 90 seconds [ 675.264535][ T5145] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 675.275187][ T5145] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 675.284567][ T5145] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 675.292645][ T5145] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 675.302563][ T5145] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 675.437585][T28057] chnl_net:caif_netlink_parms(): no params data found [ 675.506312][T28057] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.514022][T28057] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.521372][T28057] bridge_slave_0: entered allmulticast mode [ 675.529201][T28057] bridge_slave_0: entered promiscuous mode [ 675.538127][T28057] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.545452][T28057] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.552654][T28057] bridge_slave_1: entered allmulticast mode [ 675.560758][T28057] bridge_slave_1: entered promiscuous mode [ 675.589384][T28057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.601015][T28057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.631691][T28057] team0: Port device team_slave_0 added [ 675.639574][T28057] team0: Port device team_slave_1 added [ 675.663305][T28057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.670344][T28057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.699935][T28057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.712329][T28057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.719916][T28057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.748421][T28057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.793395][T28057] hsr_slave_0: entered promiscuous mode [ 675.799889][T28057] hsr_slave_1: entered promiscuous mode [ 675.806659][T28057] debugfs: 'hsr0' already exists in 'hsr' [ 675.812416][T28057] Cannot create hsr debugfs directory [ 676.391575][T28031] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 676.414785][T28031] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 676.433364][T28031] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 676.442745][T28031] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 676.451597][T28031] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 676.512714][T28031] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 676.525271][T28031] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 676.537280][T28031] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 676.545623][T28031] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 676.559943][T28031] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 676.618608][ T5145] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 676.630105][ T5145] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 676.640295][ T5145] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 676.658427][ T5145] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 676.670383][ T52] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 676.680927][ T52] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 676.693262][T28031] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 676.705617][T28031] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 676.725604][ T52] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 676.734703][ T52] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 677.164124][T28069] chnl_net:caif_netlink_parms(): no params data found [ 677.279130][T28071] chnl_net:caif_netlink_parms(): no params data found [ 677.348673][T28074] chnl_net:caif_netlink_parms(): no params data found [ 677.373236][T28024] Bluetooth: hci10: command tx timeout [ 677.442068][T28073] chnl_net:caif_netlink_parms(): no params data found [ 677.459406][T28069] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.467703][T28069] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.475143][T28069] bridge_slave_0: entered allmulticast mode [ 677.482368][T28069] bridge_slave_0: entered promiscuous mode [ 677.508952][T28069] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.516459][T28069] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.524923][T28069] bridge_slave_1: entered allmulticast mode [ 677.532309][T28069] bridge_slave_1: entered promiscuous mode [ 677.617006][T28074] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.626571][T28074] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.635822][T28074] bridge_slave_0: entered allmulticast mode [ 677.643497][T28074] bridge_slave_0: entered promiscuous mode [ 677.676299][T28074] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.683687][T28074] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.691139][T28074] bridge_slave_1: entered allmulticast mode [ 677.699834][T28074] bridge_slave_1: entered promiscuous mode [ 677.709979][T28069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.719757][T28071] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.727072][T28071] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.734643][T28071] bridge_slave_0: entered allmulticast mode [ 677.741833][T28071] bridge_slave_0: entered promiscuous mode [ 677.771974][T28069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.781911][T28071] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.789283][T28071] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.796653][T28071] bridge_slave_1: entered allmulticast mode [ 677.804338][T28071] bridge_slave_1: entered promiscuous mode [ 677.864847][T28074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.910281][T28074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.935308][T28069] team0: Port device team_slave_0 added [ 677.944641][T28071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.954147][T28073] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.961465][T28073] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.969604][T28073] bridge_slave_0: entered allmulticast mode [ 677.977953][T28073] bridge_slave_0: entered promiscuous mode [ 678.001071][T28069] team0: Port device team_slave_1 added [ 678.018797][T28071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.028972][T28073] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.037653][T28073] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.045183][T28073] bridge_slave_1: entered allmulticast mode [ 678.052309][T28073] bridge_slave_1: entered promiscuous mode [ 678.061780][T28074] team0: Port device team_slave_0 added [ 678.102016][T28074] team0: Port device team_slave_1 added [ 678.108822][T28069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.117525][T28069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.144283][T28069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.192154][T28069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.199638][T28069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.227090][T28069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.246155][T28071] team0: Port device team_slave_0 added [ 678.258206][T28073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.282285][T28071] team0: Port device team_slave_1 added [ 678.290826][T28073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.302475][T28074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.309781][T28074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.337058][T28074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.397301][T28074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.404620][T28074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.431375][T28074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.453713][T28071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.460775][T28071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.488729][T28071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.499952][T28024] Bluetooth: hci11: command tx timeout [ 678.505426][T28071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.512900][T28071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.539753][T28071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.570567][T28073] team0: Port device team_slave_0 added [ 678.573423][T28024] Bluetooth: hci12: command tx timeout [ 678.609644][T28069] hsr_slave_0: entered promiscuous mode [ 678.617497][T28069] hsr_slave_1: entered promiscuous mode [ 678.624138][T28069] debugfs: 'hsr0' already exists in 'hsr' [ 678.629948][T28069] Cannot create hsr debugfs directory [ 678.648933][T28073] team0: Port device team_slave_1 added [ 678.733328][T28024] Bluetooth: hci13: command tx timeout [ 678.740150][T28073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.747420][T28073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.774204][T28073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.786955][T28073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.794018][T28073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.820128][T28073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.830902][T28024] Bluetooth: hci14: command tx timeout [ 678.842539][T28074] hsr_slave_0: entered promiscuous mode [ 678.849977][T28074] hsr_slave_1: entered promiscuous mode [ 678.856970][T28074] debugfs: 'hsr0' already exists in 'hsr' [ 678.863086][T28074] Cannot create hsr debugfs directory [ 678.930206][T28071] hsr_slave_0: entered promiscuous mode [ 678.937280][T28071] hsr_slave_1: entered promiscuous mode [ 678.944177][T28071] debugfs: 'hsr0' already exists in 'hsr' [ 678.949920][T28071] Cannot create hsr debugfs directory [ 678.975203][T28073] hsr_slave_0: entered promiscuous mode [ 678.982072][T28073] hsr_slave_1: entered promiscuous mode [ 678.988607][T28073] debugfs: 'hsr0' already exists in 'hsr' [ 678.994746][T28073] Cannot create hsr debugfs directory [ 679.455144][T28024] Bluetooth: hci10: command tx timeout [ 680.573406][T28024] Bluetooth: hci11: command tx timeout [ 680.653457][T28024] Bluetooth: hci12: command tx timeout [ 680.814777][T28024] Bluetooth: hci13: command tx timeout [ 680.893474][T28024] Bluetooth: hci14: command tx timeout [ 681.533434][T28024] Bluetooth: hci10: command tx timeout [ 682.653370][T28024] Bluetooth: hci11: command tx timeout [ 682.733303][T28024] Bluetooth: hci12: command tx timeout [ 682.903581][T28024] Bluetooth: hci13: command tx timeout [ 682.983665][T28024] Bluetooth: hci14: command tx timeout [ 683.613322][T28024] Bluetooth: hci10: command tx timeout [ 684.014111][ T11] block nbd0: Possible stuck request ffff888025720000: control (read@0,1024B). Runtime 120 seconds [ 684.025035][ T11] block nbd0: Possible stuck request ffff888025720200: control (read@1024,1024B). Runtime 120 seconds [ 684.036255][ T11] block nbd0: Possible stuck request ffff888025720400: control (read@2048,1024B). Runtime 120 seconds [ 684.047597][ T11] block nbd0: Possible stuck request ffff888025720600: control (read@3072,1024B). Runtime 120 seconds [ 684.743394][T28024] Bluetooth: hci11: command tx timeout [ 684.813590][T28024] Bluetooth: hci12: command tx timeout [ 684.983478][T28024] Bluetooth: hci13: command tx timeout [ 685.053854][T28024] Bluetooth: hci14: command tx timeout [ 691.063270][ T11] block nbd1: Possible stuck request ffff8880257b0000: control (read@0,1024B). Runtime 120 seconds [ 691.074600][ T11] block nbd1: Possible stuck request ffff8880257b0200: control (read@1024,1024B). Runtime 120 seconds [ 691.085791][ T11] block nbd1: Possible stuck request ffff8880257b0400: control (read@2048,1024B). Runtime 120 seconds [ 691.097033][ T11] block nbd1: Possible stuck request ffff8880257b0600: control (read@3072,1024B). Runtime 120 seconds [ 714.103880][ T11] block nbd0: Possible stuck request ffff888025720000: control (read@0,1024B). Runtime 150 seconds [ 714.114799][ T11] block nbd0: Possible stuck request ffff888025720200: control (read@1024,1024B). Runtime 150 seconds [ 714.125950][ T11] block nbd0: Possible stuck request ffff888025720400: control (read@2048,1024B). Runtime 150 seconds [ 714.137033][ T11] block nbd0: Possible stuck request ffff888025720600: control (read@3072,1024B). Runtime 150 seconds [ 721.133587][ T11] block nbd1: Possible stuck request ffff8880257b0000: control (read@0,1024B). Runtime 150 seconds [ 721.144524][ T11] block nbd1: Possible stuck request ffff8880257b0200: control (read@1024,1024B). Runtime 150 seconds [ 721.155594][ T11] block nbd1: Possible stuck request ffff8880257b0400: control (read@2048,1024B). Runtime 150 seconds [ 721.166687][ T11] block nbd1: Possible stuck request ffff8880257b0600: control (read@3072,1024B). Runtime 150 seconds [ 735.499981][ T52] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 735.508943][ T52] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 735.518248][ T52] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 735.527651][ T52] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 735.537919][ T52] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 735.677568][T28102] chnl_net:caif_netlink_parms(): no params data found [ 735.748021][T28102] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.755389][T28102] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.762633][T28102] bridge_slave_0: entered allmulticast mode [ 735.770204][T28102] bridge_slave_0: entered promiscuous mode [ 735.778596][T28102] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.786180][T28102] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.793989][T28102] bridge_slave_1: entered allmulticast mode [ 735.801120][T28102] bridge_slave_1: entered promiscuous mode [ 735.831270][T28102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.843946][T28102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.879251][T28102] team0: Port device team_slave_0 added [ 735.887298][T28102] team0: Port device team_slave_1 added [ 735.912643][T28102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.919672][T28102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.945884][T28102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.958429][T28102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.965628][T28102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.991719][T28102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.034275][T28102] hsr_slave_0: entered promiscuous mode [ 736.040790][T28102] hsr_slave_1: entered promiscuous mode [ 736.047471][T28102] debugfs: 'hsr0' already exists in 'hsr' [ 736.053353][T28102] Cannot create hsr debugfs directory [ 736.691411][T28024] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 736.702557][T28024] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 736.712441][T28024] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 736.728385][T28031] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 736.737738][T28024] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 736.742353][T28031] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 736.754463][T28031] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 736.767772][T28024] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 736.792034][T28024] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 736.797013][ T52] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 736.800109][T28024] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 736.808891][ T52] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 736.830540][ T5145] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 736.845665][ T5145] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 736.854154][ T5145] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 736.889310][T28031] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 736.907134][T28031] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 736.923236][T28031] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 736.936051][T28031] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 736.953922][T28031] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 737.365939][T28114] chnl_net:caif_netlink_parms(): no params data found [ 737.436906][T28118] chnl_net:caif_netlink_parms(): no params data found [ 737.508972][T28116] chnl_net:caif_netlink_parms(): no params data found [ 737.614528][T28125] Bluetooth: hci15: command tx timeout [ 737.632736][T28114] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.640088][T28114] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.648007][T28114] bridge_slave_0: entered allmulticast mode [ 737.655444][T28114] bridge_slave_0: entered promiscuous mode [ 737.679927][T28114] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.687499][T28114] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.695302][T28114] bridge_slave_1: entered allmulticast mode [ 737.702417][T28114] bridge_slave_1: entered promiscuous mode [ 737.794746][T28116] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.801897][T28116] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.809635][T28116] bridge_slave_0: entered allmulticast mode [ 737.817692][T28116] bridge_slave_0: entered promiscuous mode [ 737.837863][T28118] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.845151][T28118] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.852454][T28118] bridge_slave_0: entered allmulticast mode [ 737.862013][T28118] bridge_slave_0: entered promiscuous mode [ 737.876598][T28118] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.886202][T28118] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.893793][T28118] bridge_slave_1: entered allmulticast mode [ 737.901012][T28118] bridge_slave_1: entered promiscuous mode [ 737.919682][T28116] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.926974][T28116] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.935236][T28116] bridge_slave_1: entered allmulticast mode [ 737.942520][T28116] bridge_slave_1: entered promiscuous mode [ 737.956441][T28114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.995401][T28114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.014326][T28118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.029123][T28118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.089472][T28116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.134633][T28120] chnl_net:caif_netlink_parms(): no params data found [ 738.149915][T28116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.170945][T28114] team0: Port device team_slave_0 added [ 738.180758][T28114] team0: Port device team_slave_1 added [ 738.191103][T28118] team0: Port device team_slave_0 added [ 738.199684][T28118] team0: Port device team_slave_1 added [ 738.271594][T28116] team0: Port device team_slave_0 added [ 738.279940][T28116] team0: Port device team_slave_1 added [ 738.308424][T28118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.315973][T28118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.342697][T28118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.365324][T28114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.372381][T28114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.399230][T28114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.417478][T28118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.424921][T28118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.451638][T28118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.474616][T28114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.481601][T28114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.508094][T28114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.534095][T28116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.541084][T28116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.570632][T28116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.595717][T28116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.602761][T28116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.629411][T28116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.719141][T28120] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.726692][T28120] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.734777][T28120] bridge_slave_0: entered allmulticast mode [ 738.742180][T28120] bridge_slave_0: entered promiscuous mode [ 738.780618][T28114] hsr_slave_0: entered promiscuous mode [ 738.788587][T28114] hsr_slave_1: entered promiscuous mode [ 738.796207][T28114] debugfs: 'hsr0' already exists in 'hsr' [ 738.801942][T28114] Cannot create hsr debugfs directory [ 738.808138][T28120] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.815491][T28125] Bluetooth: hci16: command tx timeout [ 738.822522][T28120] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.830149][T28120] bridge_slave_1: entered allmulticast mode [ 738.838104][T28120] bridge_slave_1: entered promiscuous mode [ 738.852626][T28116] hsr_slave_0: entered promiscuous mode [ 738.859400][T28116] hsr_slave_1: entered promiscuous mode [ 738.866040][T28116] debugfs: 'hsr0' already exists in 'hsr' [ 738.872153][T28116] Cannot create hsr debugfs directory [ 738.884512][T28118] hsr_slave_0: entered promiscuous mode [ 738.891071][T28118] hsr_slave_1: entered promiscuous mode [ 738.896751][T28125] Bluetooth: hci18: command tx timeout [ 738.904190][T28118] debugfs: 'hsr0' already exists in 'hsr' [ 738.904383][T28125] Bluetooth: hci17: command tx timeout [ 738.910025][T28118] Cannot create hsr debugfs directory [ 738.969980][T28120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.001468][T28120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.053982][T28125] Bluetooth: hci19: command tx timeout [ 739.092178][T28120] team0: Port device team_slave_0 added [ 739.129617][T28120] team0: Port device team_slave_1 added [ 739.225712][T18138] Bluetooth: hci6: command 0x0406 tx timeout [ 739.231823][T18138] Bluetooth: hci8: command 0x0406 tx timeout [ 739.238770][T28125] Bluetooth: hci3: command 0x0406 tx timeout [ 739.245632][T18138] Bluetooth: hci7: command 0x0406 tx timeout [ 739.251726][T28027] Bluetooth: hci9: command 0x0406 tx timeout [ 739.304100][T28120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.311130][T28120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.337874][T28120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.369422][T28120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.376593][T28120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.405905][T28120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.556871][T28120] hsr_slave_0: entered promiscuous mode [ 739.563827][T28120] hsr_slave_1: entered promiscuous mode [ 739.570057][T28120] debugfs: 'hsr0' already exists in 'hsr' [ 739.576397][T28120] Cannot create hsr debugfs directory [ 739.693732][ T5145] Bluetooth: hci15: command tx timeout [ 740.893340][ T5145] Bluetooth: hci16: command tx timeout [ 740.973723][ T5145] Bluetooth: hci17: command tx timeout [ 740.974700][ T52] Bluetooth: hci18: command tx timeout [ 741.133724][ T52] Bluetooth: hci19: command tx timeout [ 741.773454][ T52] Bluetooth: hci15: command tx timeout [ 742.973572][ T52] Bluetooth: hci16: command tx timeout [ 743.053569][ T52] Bluetooth: hci18: command tx timeout [ 743.059321][ T52] Bluetooth: hci17: command tx timeout [ 743.213575][ T52] Bluetooth: hci19: command tx timeout [ 743.763207][ T5194] udevd[5194]: worker [25967] /devices/virtual/block/nbd0 timeout; kill it [ 743.771937][ T5194] udevd[5194]: seq 27131 '/devices/virtual/block/nbd0' killed [ 743.853406][ T52] Bluetooth: hci15: command tx timeout [ 744.176414][ T11] block nbd0: Possible stuck request ffff888025720000: control (read@0,1024B). Runtime 180 seconds [ 744.187453][ T11] block nbd0: Possible stuck request ffff888025720200: control (read@1024,1024B). Runtime 180 seconds [ 744.198491][ T11] block nbd0: Possible stuck request ffff888025720400: control (read@2048,1024B). Runtime 180 seconds [ 744.209624][ T11] block nbd0: Possible stuck request ffff888025720600: control (read@3072,1024B). Runtime 180 seconds [ 745.053540][ T52] Bluetooth: hci16: command tx timeout [ 745.133673][ T52] Bluetooth: hci17: command tx timeout [ 745.133700][ T5145] Bluetooth: hci18: command tx timeout [ 745.293386][ T5145] Bluetooth: hci19: command tx timeout [ 751.224662][ T11] block nbd1: Possible stuck request ffff8880257b0000: control (read@0,1024B). Runtime 180 seconds [ 751.235610][ T11] block nbd1: Possible stuck request ffff8880257b0200: control (read@1024,1024B). Runtime 180 seconds [ 751.246955][ T11] block nbd1: Possible stuck request ffff8880257b0400: control (read@2048,1024B). Runtime 180 seconds [ 751.258794][ T11] block nbd1: Possible stuck request ffff8880257b0600: control (read@3072,1024B). Runtime 180 seconds [ 752.801525][ T5194] udevd[5194]: worker [26466] /devices/virtual/block/nbd1 timeout; kill it [ 752.810837][ T5194] udevd[5194]: seq 27299 '/devices/virtual/block/nbd1' killed [ 756.983895][ T31] INFO: task dhcpcd:5488 blocked for more than 143 seconds. [ 756.991244][ T31] Not tainted syzkaller #0 [ 756.996548][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 757.005459][ T31] task:dhcpcd state:D stack:23288 pid:5488 tgid:5488 ppid:1 task_flags:0x400140 flags:0x00080000 [ 757.018836][ T31] Call Trace: [ 757.022148][ T31] [ 757.025287][ T31] __schedule+0x14ea/0x5050 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 757.029974][ T31] ? __pfx___schedule+0x10/0x10 [ 757.035057][ T31] ? schedule+0x90/0x360 [ 757.039785][ T31] schedule+0x164/0x360 [ 757.044093][ T31] schedule_preempt_disabled+0x13/0x30 [ 757.049591][ T31] __mutex_lock+0x7fe/0x1300 [ 757.054535][ T31] ? __mutex_lock+0x5ac/0x1300 [ 757.059340][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 757.064186][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 757.103097][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 757.108127][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 757.127626][ T31] ? radix_tree_lookup+0x240/0x290 [ 757.132909][ T31] genl_rcv_msg+0x10b/0x7a0 [ 757.144356][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 757.149443][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 757.154567][ T31] netlink_rcv_skb+0x232/0x4b0 [ 757.159360][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 757.164479][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 757.169904][ T31] ? genl_rcv+0x19/0x40 [ 757.174280][ T31] ? down_read+0x272/0x2e0 [ 757.178766][ T31] ? genl_rcv+0xd/0x40 [ 757.182834][ T31] genl_rcv+0x28/0x40 [ 757.186916][ T31] netlink_unicast+0x80f/0x9b0 [ 757.191714][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 757.197084][ T31] ? __alloc_skb+0x193/0x390 [ 757.201702][ T31] ? netlink_sendmsg+0x650/0xb40 [ 757.206822][ T31] ? skb_put+0x11b/0x210 [ 757.211096][ T31] netlink_sendmsg+0x813/0xb40 [ 757.219842][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 757.225377][ T31] ? tomoyo_path_number_perm+0x501/0x630 [ 757.231031][ T31] ? security_file_ioctl+0xc3/0x2a0 [ 757.236333][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 757.241296][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 757.246671][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 757.251986][ T31] ____sys_sendmsg+0xa68/0xad0 [ 757.256947][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 757.262260][ T31] ? import_iovec+0x73/0xa0 [ 757.266870][ T31] ___sys_sendmsg+0x2a5/0x360 [ 757.271574][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 757.276868][ T31] ? __rtnl_unlock+0xc8/0xf0 [ 757.281516][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 757.286556][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 757.292047][ T31] ? __secure_computing+0xe1/0x2a0 [ 757.297338][ T31] do_syscall_64+0xe2/0xf80 [ 757.301860][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.308148][ T31] ? clear_bhb_loop+0x60/0xb0 [ 757.312853][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.318831][ T31] RIP: 0033:0x7ffa894c6407 [ 757.323356][ T31] RSP: 002b:00007fff9f0b6300 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 757.331794][ T31] RAX: ffffffffffffffda RBX: 00007ffa8943c740 RCX: 00007ffa894c6407 [ 757.340053][ T31] RDX: 0000000000000000 RSI: 00007fff9f0b6380 RDI: 000000000000000e [ 757.348173][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 757.356270][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000565420577e10 [ 757.364311][ T31] R13: 000000000000000e R14: 00007fff9f0be8e0 R15: 0000565430d28d10 [ 757.372291][ T31] [ 757.375750][ T31] INFO: task syz.1.5355:27952 blocked for more than 143 seconds. [ 757.383588][ T31] Not tainted syzkaller #0 [ 757.388554][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 757.397330][ T31] task:syz.1.5355 state:D stack:26648 pid:27952 tgid:27948 ppid:16532 task_flags:0x400140 flags:0x00080002 [ 757.409363][ T31] Call Trace: [ 757.412655][ T31] [ 757.415757][ T31] __schedule+0x14ea/0x5050 [ 757.420317][ T31] ? __pfx___schedule+0x10/0x10 [ 757.425373][ T31] ? schedule+0x90/0x360 [ 757.429639][ T31] schedule+0x164/0x360 [ 757.433918][ T31] schedule_preempt_disabled+0x13/0x30 [ 757.439397][ T31] __mutex_lock+0x7fe/0x1300 [ 757.444273][ T31] ? __mutex_lock+0x5ac/0x1300 [ 757.449065][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 757.454439][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 757.459500][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 757.464726][ T31] ? radix_tree_lookup+0x240/0x290 [ 757.469871][ T31] genl_rcv_msg+0x10b/0x7a0 [ 757.474475][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 757.479611][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 757.484663][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 757.490064][ T31] netlink_rcv_skb+0x232/0x4b0 [ 757.495099][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 757.500163][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 757.505593][ T31] ? genl_rcv+0x19/0x40 [ 757.509805][ T31] ? down_read+0x272/0x2e0 [ 757.514404][ T31] ? genl_rcv+0xd/0x40 [ 757.518593][ T31] genl_rcv+0x28/0x40 [ 757.522627][ T31] netlink_unicast+0x80f/0x9b0 [ 757.527602][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 757.532934][ T31] ? __alloc_skb+0x193/0x390 [ 757.539321][ T31] ? netlink_sendmsg+0x650/0xb40 [ 757.544397][ T31] ? skb_put+0x11b/0x210 [ 757.548669][ T31] netlink_sendmsg+0x813/0xb40 [ 757.553621][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 757.559017][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 757.564023][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 757.569413][ T31] __sys_sendto+0x709/0x7a0 [ 757.574113][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 757.579181][ T31] ? exc_page_fault+0x6a/0xc0 [ 757.583950][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 757.589267][ T31] __x64_sys_sendto+0xde/0x100 [ 757.594113][ T31] do_syscall_64+0xe2/0xf80 [ 757.598638][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.604779][ T31] ? trace_irq_disable+0x37/0x100 [ 757.609819][ T31] ? clear_bhb_loop+0x60/0xb0 [ 757.616255][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.622190][ T31] RIP: 0033:0x7fd18435b78e [ 757.626787][ T31] RSP: 002b:00007fd185204e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 757.635326][ T31] RAX: ffffffffffffffda RBX: 00007fd1852066c0 RCX: 00007fd18435b78e [ 757.643437][ T31] RDX: 0000000000000020 RSI: 00007fd185205000 RDI: 0000000000000004 [ 757.651440][ T31] RBP: 0000000000000000 R08: 00007fd185204f04 R09: 000000000000000c [ 757.659768][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 757.667930][ T31] R13: 00007fd185204f58 R14: 00007fd185205000 R15: 0000000000000000 [ 757.675998][ T31] [ 757.679044][ T31] INFO: task syz.3.5359:27962 blocked for more than 144 seconds. [ 757.686962][ T31] Not tainted syzkaller #0 [ 757.691926][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 757.701177][ T31] task:syz.3.5359 state:D stack:25080 pid:27962 tgid:27958 ppid:16921 task_flags:0x480140 flags:0x00080002 [ 757.713275][ T31] Call Trace: [ 757.716600][ T31] [ 757.719544][ T31] __schedule+0x14ea/0x5050 [ 757.724277][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 757.729318][ T31] ? __pfx___schedule+0x10/0x10 [ 757.734387][ T31] ? schedule+0x90/0x360 [ 757.738743][ T31] schedule+0x164/0x360 [ 757.743084][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 757.748669][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 757.754982][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 757.761342][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 757.767561][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 757.774016][ T31] nbd_set_size+0x516/0x6d0 [ 757.778583][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 757.784018][ T31] ? nla_memcpy+0x5b/0xc0 [ 757.788400][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 757.793910][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 757.799681][ T31] ? rcu_is_watching+0x15/0xb0 [ 757.804889][ T31] ? __nla_parse+0x40/0x60 [ 757.809377][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 757.815894][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 757.821560][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 757.827838][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 757.832816][ T31] genl_rcv_msg+0x61c/0x7a0 [ 757.837432][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 757.842480][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 757.848313][ T31] netlink_rcv_skb+0x232/0x4b0 [ 757.853510][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 757.858582][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 757.864064][ T31] ? genl_rcv+0x19/0x40 [ 757.868259][ T31] ? down_read+0x272/0x2e0 [ 757.872706][ T31] ? genl_rcv+0xd/0x40 [ 757.877028][ T31] genl_rcv+0x28/0x40 [ 757.881508][ T31] netlink_unicast+0x80f/0x9b0 [ 757.886583][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 757.891906][ T31] ? __alloc_skb+0x193/0x390 [ 757.896744][ T31] ? netlink_sendmsg+0x650/0xb40 [ 757.901706][ T31] ? skb_put+0x11b/0x210 [ 757.906050][ T31] netlink_sendmsg+0x813/0xb40 [ 757.910853][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 757.916241][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 757.921223][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 757.926712][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 757.932029][ T31] ____sys_sendmsg+0xa68/0xad0 [ 757.937116][ T31] ? __might_fault+0xaf/0x130 [ 757.942371][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 757.948134][ T31] ? import_iovec+0x73/0xa0 [ 757.952698][ T31] ___sys_sendmsg+0x2a5/0x360 [ 757.957532][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 757.962512][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 757.968059][ T31] ? futex_wake+0x4ac/0x580 [ 757.972615][ T31] ? __fget_files+0x2a/0x420 [ 757.977365][ T31] ? __fget_files+0x3a0/0x420 [ 757.982089][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 757.987377][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 757.992892][ T31] ? rcu_is_watching+0x15/0xb0 [ 757.997957][ T31] do_syscall_64+0xe2/0xf80 [ 758.002553][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.008872][ T31] ? trace_irq_disable+0x37/0x100 [ 758.014480][ T31] ? clear_bhb_loop+0x60/0xb0 [ 758.019206][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.025194][ T31] RIP: 0033:0x7f097af9aeb9 [ 758.030063][ T31] RSP: 002b:00007f097bf00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 758.038569][ T31] RAX: ffffffffffffffda RBX: 00007f097b215fa0 RCX: 00007f097af9aeb9 [ 758.046648][ T31] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000004 [ 758.054829][ T31] RBP: 00007f097b008c1f R08: 0000000000000000 R09: 0000000000000000 [ 758.062834][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 758.070990][ T31] R13: 00007f097b216038 R14: 00007f097b215fa0 R15: 00007ffe6016b7c8 [ 758.079140][ T31] [ 758.082193][ T31] INFO: task syz.0.5364:27983 blocked for more than 144 seconds. [ 758.092920][ T31] Not tainted syzkaller #0 [ 758.098036][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 758.107035][ T31] task:syz.0.5364 state:D stack:27840 pid:27983 tgid:27978 ppid:17142 task_flags:0x400040 flags:0x00080002 [ 758.119021][ T31] Call Trace: [ 758.122315][ T31] [ 758.125384][ T31] __schedule+0x14ea/0x5050 [ 758.129932][ T31] ? __pfx___schedule+0x10/0x10 [ 758.135019][ T31] ? schedule+0x90/0x360 [ 758.139299][ T31] schedule+0x164/0x360 [ 758.143569][ T31] schedule_preempt_disabled+0x13/0x30 [ 758.149046][ T31] __mutex_lock+0x7fe/0x1300 [ 758.153750][ T31] ? __mutex_lock+0x5ac/0x1300 [ 758.158547][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 758.163360][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 758.168439][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 758.174071][ T31] ? radix_tree_lookup+0x240/0x290 [ 758.179341][ T31] genl_rcv_msg+0x10b/0x7a0 [ 758.183957][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 758.189025][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 758.194134][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 758.199552][ T31] netlink_rcv_skb+0x232/0x4b0 [ 758.204437][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 758.210035][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 758.215585][ T31] ? genl_rcv+0x19/0x40 [ 758.219767][ T31] ? down_read+0x272/0x2e0 [ 758.224294][ T31] ? genl_rcv+0xd/0x40 [ 758.228388][ T31] genl_rcv+0x28/0x40 [ 758.232456][ T31] netlink_unicast+0x80f/0x9b0 [ 758.237360][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 758.242670][ T31] ? __alloc_skb+0x193/0x390 [ 758.247370][ T31] ? netlink_sendmsg+0x650/0xb40 [ 758.252411][ T31] ? skb_put+0x11b/0x210 [ 758.262560][ T31] netlink_sendmsg+0x813/0xb40 [ 758.269631][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 758.275379][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 758.280329][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 758.285992][ T31] __sys_sendto+0x709/0x7a0 [ 758.290610][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 758.296156][ T31] ? exc_page_fault+0x6a/0xc0 [ 758.300868][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 758.306443][ T31] __x64_sys_sendto+0xde/0x100 [ 758.311326][ T31] do_syscall_64+0xe2/0xf80 [ 758.315899][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.321984][ T31] ? trace_irq_disable+0x37/0x100 [ 758.327373][ T31] ? clear_bhb_loop+0x60/0xb0 [ 758.332167][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.338327][ T31] RIP: 0033:0x7f323af5b78e [ 758.342790][ T31] RSP: 002b:00007f323be46e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 758.351655][ T31] RAX: ffffffffffffffda RBX: 00007f323be486c0 RCX: 00007f323af5b78e [ 758.359737][ T31] RDX: 0000000000000020 RSI: 00007f323be47000 RDI: 000000000000000a [ 758.367765][ T31] RBP: 0000000000000000 R08: 00007f323be46f04 R09: 000000000000000c [ 758.376283][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 758.384445][ T31] R13: 00007f323be46f58 R14: 00007f323be47000 R15: 0000000000000000 [ 758.392453][ T31] [ 758.395726][ T31] INFO: task syz.4.5367:27992 blocked for more than 144 seconds. [ 758.403701][ T31] Not tainted syzkaller #0 [ 758.408667][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 758.417598][ T31] task:syz.4.5367 state:D stack:27840 pid:27992 tgid:27991 ppid:18134 task_flags:0x400040 flags:0x00080002 [ 758.429609][ T31] Call Trace: [ 758.432894][ T31] [ 758.435925][ T31] __schedule+0x14ea/0x5050 [ 758.440469][ T31] ? __pfx___schedule+0x10/0x10 [ 758.445512][ T31] ? schedule+0x90/0x360 [ 758.450042][ T31] schedule+0x164/0x360 [ 758.454313][ T31] schedule_preempt_disabled+0x13/0x30 [ 758.459789][ T31] __mutex_lock+0x7fe/0x1300 [ 758.464478][ T31] ? __mutex_lock+0x5ac/0x1300 [ 758.469284][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 758.474102][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 758.479158][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 758.484369][ T31] ? radix_tree_lookup+0x240/0x290 [ 758.489518][ T31] genl_rcv_msg+0x10b/0x7a0 [ 758.494416][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 758.499468][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 758.504540][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 758.509949][ T31] netlink_rcv_skb+0x232/0x4b0 [ 758.514795][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 758.519851][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 758.525323][ T31] ? genl_rcv+0x19/0x40 [ 758.529596][ T31] ? down_read+0x272/0x2e0 [ 758.534165][ T31] ? genl_rcv+0xd/0x40 [ 758.538272][ T31] genl_rcv+0x28/0x40 [ 758.542245][ T31] netlink_unicast+0x80f/0x9b0 [ 758.547110][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 758.552441][ T31] ? __alloc_skb+0x193/0x390 [ 758.557254][ T31] ? netlink_sendmsg+0x650/0xb40 [ 758.562222][ T31] ? skb_put+0x11b/0x210 [ 758.566649][ T31] netlink_sendmsg+0x813/0xb40 [ 758.571438][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 758.577024][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 758.582007][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 758.587380][ T31] __sys_sendto+0x709/0x7a0 [ 758.591910][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 758.597069][ T31] ? exc_page_fault+0x6a/0xc0 [ 758.601786][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 758.607164][ T31] __x64_sys_sendto+0xde/0x100 [ 758.611966][ T31] do_syscall_64+0xe2/0xf80 [ 758.616633][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.622723][ T31] ? trace_irq_disable+0x37/0x100 [ 758.627894][ T31] ? clear_bhb_loop+0x60/0xb0 [ 758.632700][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.638744][ T31] RIP: 0033:0x7f41a415b78e [ 758.643361][ T31] RSP: 002b:00007f41a50ece88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 758.651818][ T31] RAX: ffffffffffffffda RBX: 00007f41a50ee6c0 RCX: 00007f41a415b78e [ 758.660115][ T31] RDX: 0000000000000020 RSI: 00007f41a50ed000 RDI: 0000000000000005 [ 758.668286][ T31] RBP: 0000000000000000 R08: 00007f41a50ecf04 R09: 000000000000000c [ 758.676372][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 758.684508][ T31] R13: 00007f41a50ecf58 R14: 00007f41a50ed000 R15: 0000000000000000 [ 758.692502][ T31] [ 758.695663][ T31] INFO: task syz.4.5367:27998 blocked for more than 145 seconds. [ 758.703572][ T31] Not tainted syzkaller #0 [ 758.708528][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 758.717276][ T31] task:syz.4.5367 state:D stack:25560 pid:27998 tgid:27991 ppid:18134 task_flags:0x400140 flags:0x00080002 [ 758.729447][ T31] Call Trace: [ 758.732785][ T31] [ 758.736202][ T31] __schedule+0x14ea/0x5050 [ 758.740773][ T31] ? __pfx___schedule+0x10/0x10 [ 758.745736][ T31] ? schedule+0x90/0x360 [ 758.750007][ T31] schedule+0x164/0x360 [ 758.754271][ T31] schedule_preempt_disabled+0x13/0x30 [ 758.759752][ T31] __mutex_lock+0x7fe/0x1300 [ 758.764462][ T31] ? __mutex_lock+0x5ac/0x1300 [ 758.769257][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 758.774180][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 758.779249][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 758.784725][ T31] ? radix_tree_lookup+0x240/0x290 [ 758.789903][ T31] genl_rcv_msg+0x10b/0x7a0 [ 758.794569][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 758.799630][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 758.804678][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 758.810090][ T31] netlink_rcv_skb+0x232/0x4b0 [ 758.815082][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 758.820130][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 758.825527][ T31] ? genl_rcv+0x19/0x40 [ 758.829760][ T31] ? down_read+0x272/0x2e0 [ 758.834323][ T31] ? genl_rcv+0xd/0x40 [ 758.838434][ T31] genl_rcv+0x28/0x40 [ 758.842436][ T31] netlink_unicast+0x80f/0x9b0 [ 758.847709][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 758.855794][ T31] ? __alloc_skb+0x193/0x390 [ 758.860440][ T31] ? netlink_sendmsg+0x650/0xb40 [ 758.866658][ T31] ? skb_put+0x11b/0x210 [ 758.870925][ T31] netlink_sendmsg+0x813/0xb40 [ 758.876642][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 758.881964][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 758.887188][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 758.892510][ T31] __sys_sendto+0x709/0x7a0 [ 758.900317][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 758.905540][ T31] ? fd_install+0x94/0x3d0 [ 758.910002][ T31] ? fd_install+0x306/0x3d0 [ 758.914908][ T31] __x64_sys_sendto+0xde/0x100 [ 758.919754][ T31] do_syscall_64+0xe2/0xf80 [ 758.924417][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.930509][ T31] ? trace_irq_disable+0x37/0x100 [ 758.935893][ T31] ? clear_bhb_loop+0x60/0xb0 [ 758.940598][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.947973][ T31] RIP: 0033:0x7f41a415b78e [ 758.952394][ T31] RSP: 002b:00007f41a50cbe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 758.960863][ T31] RAX: ffffffffffffffda RBX: 00007f41a50cd6c0 RCX: 00007f41a415b78e [ 758.969330][ T31] RDX: 0000000000000020 RSI: 00007f41a50cc000 RDI: 000000000000000e [ 758.978107][ T31] RBP: 0000000000000000 R08: 00007f41a50cbf04 R09: 000000000000000c [ 758.986334][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 758.994466][ T31] R13: 00007f41a50cbf58 R14: 00007f41a50cc000 R15: 0000000000000000 [ 759.002618][ T31] [ 759.006201][ T31] INFO: task syz.2.5368:27994 blocked for more than 145 seconds. [ 759.014150][ T31] Not tainted syzkaller #0 [ 759.019113][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 759.027976][ T31] task:syz.2.5368 state:D stack:27104 pid:27994 tgid:27993 ppid:17554 task_flags:0x400040 flags:0x00080002 [ 759.040119][ T31] Call Trace: [ 759.043501][ T31] [ 759.046461][ T31] __schedule+0x14ea/0x5050 [ 759.050986][ T31] ? __pfx___schedule+0x10/0x10 [ 759.056646][ T31] ? schedule+0x90/0x360 [ 759.060923][ T31] schedule+0x164/0x360 [ 759.065362][ T31] schedule_preempt_disabled+0x13/0x30 [ 759.071020][ T31] __mutex_lock+0x7fe/0x1300 [ 759.076046][ T31] ? __mutex_lock+0x5ac/0x1300 [ 759.080905][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 759.085745][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 759.090814][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 759.096339][ T31] ? radix_tree_lookup+0x240/0x290 [ 759.101480][ T31] genl_rcv_msg+0x10b/0x7a0 [ 759.106047][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 759.111091][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 759.116204][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 759.121608][ T31] netlink_rcv_skb+0x232/0x4b0 [ 759.126644][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 759.131775][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 759.137312][ T31] ? genl_rcv+0x19/0x40 [ 759.141519][ T31] ? down_read+0x272/0x2e0 [ 759.146096][ T31] ? genl_rcv+0xd/0x40 [ 759.150285][ T31] genl_rcv+0x28/0x40 [ 759.154527][ T31] netlink_unicast+0x80f/0x9b0 [ 759.159429][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 759.164834][ T31] ? __alloc_skb+0x193/0x390 [ 759.169463][ T31] ? netlink_sendmsg+0x650/0xb40 [ 759.174521][ T31] ? skb_put+0x11b/0x210 [ 759.178886][ T31] netlink_sendmsg+0x813/0xb40 [ 759.184426][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 759.189873][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 759.194986][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 759.200301][ T31] __sys_sendto+0x709/0x7a0 [ 759.204903][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 759.209961][ T31] ? do_futex+0x395/0x420 [ 759.214803][ T31] ? rcu_is_watching+0x15/0xb0 [ 759.219705][ T31] __x64_sys_sendto+0xde/0x100 [ 759.224568][ T31] do_syscall_64+0xe2/0xf80 [ 759.229190][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.235341][ T31] ? trace_irq_disable+0x37/0x100 [ 759.240395][ T31] ? clear_bhb_loop+0x60/0xb0 [ 759.245512][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.251428][ T31] RIP: 0033:0x7f92c2f5b78e [ 759.255930][ T31] RSP: 002b:00007f92c3f42e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 759.264601][ T31] RAX: ffffffffffffffda RBX: 00007f92c3f446c0 RCX: 00007f92c2f5b78e [ 759.272584][ T31] RDX: 0000000000000020 RSI: 00007f92c3f43000 RDI: 0000000000000005 [ 759.280859][ T31] RBP: 0000000000000000 R08: 00007f92c3f42f04 R09: 000000000000000c [ 759.288942][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 759.297354][ T31] R13: 00007f92c3f42f58 R14: 00007f92c3f43000 R15: 0000000000000000 [ 759.305689][ T31] [ 759.308728][ T31] INFO: task syz.2.5368:27999 blocked for more than 145 seconds. [ 759.316548][ T31] Not tainted syzkaller #0 [ 759.321492][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 759.330324][ T31] task:syz.2.5368 state:D stack:27104 pid:27999 tgid:27993 ppid:17554 task_flags:0x400040 flags:0x00080002 [ 759.342559][ T31] Call Trace: [ 759.346215][ T31] [ 759.349176][ T31] __schedule+0x14ea/0x5050 [ 759.353981][ T31] ? __pfx___schedule+0x10/0x10 [ 759.358839][ T31] ? schedule+0x90/0x360 [ 759.363643][ T31] schedule+0x164/0x360 [ 759.367800][ T31] schedule_preempt_disabled+0x13/0x30 [ 759.373785][ T31] __mutex_lock+0x7fe/0x1300 [ 759.378505][ T31] ? __mutex_lock+0x5ac/0x1300 [ 759.384152][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 759.388863][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 759.394210][ T31] ? __dev_queue_xmit+0x274/0x3850 [ 759.399352][ T31] ? radix_tree_lookup+0x240/0x290 [ 759.404895][ T31] genl_rcv_msg+0x10b/0x7a0 [ 759.409440][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 759.414654][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 759.419621][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 759.425262][ T31] netlink_rcv_skb+0x232/0x4b0 [ 759.430041][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 759.435208][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 759.440513][ T31] ? genl_rcv+0x19/0x40 [ 759.444751][ T31] ? down_read+0x272/0x2e0 [ 759.449193][ T31] ? genl_rcv+0xd/0x40 [ 759.454019][ T31] genl_rcv+0x28/0x40 [ 759.458028][ T31] netlink_unicast+0x80f/0x9b0 [ 759.462800][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 759.468174][ T31] ? __alloc_skb+0x193/0x390 [ 759.472804][ T31] ? netlink_sendmsg+0x650/0xb40 [ 759.478173][ T31] ? skb_put+0x11b/0x210 [ 759.482650][ T31] netlink_sendmsg+0x813/0xb40 [ 759.487986][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 759.493534][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 759.498593][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 759.503961][ T31] __sys_sendto+0x709/0x7a0 [ 759.508665][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 759.514324][ T31] ? exc_page_fault+0x6a/0xc0 [ 759.519201][ T31] ? do_user_addr_fault+0xc7c/0x1360 [ 759.524636][ T31] __x64_sys_sendto+0xde/0x100 [ 759.529515][ T31] do_syscall_64+0xe2/0xf80 [ 759.534456][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.540554][ T31] ? trace_irq_disable+0x37/0x100 [ 759.545792][ T31] ? clear_bhb_loop+0x60/0xb0 [ 759.550601][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.556647][ T31] RIP: 0033:0x7f92c2f5b78e [ 759.561088][ T31] RSP: 002b:00007f92c3f21e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 759.569691][ T31] RAX: ffffffffffffffda RBX: 00007f92c3f236c0 RCX: 00007f92c2f5b78e [ 759.578406][ T31] RDX: 0000000000000020 RSI: 00007f92c3f22000 RDI: 0000000000000005 [ 759.586504][ T31] RBP: 0000000000000000 R08: 00007f92c3f21f04 R09: 000000000000000c [ 759.594631][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 759.602682][ T31] R13: 00007f92c3f21f58 R14: 00007f92c3f22000 R15: 0000000000000000 [ 759.611201][ T31] [ 759.614516][ T31] [ 759.614516][ T31] Showing all locks held in the system: [ 759.622273][ T31] 1 lock held by khungtaskd/31: [ 759.627755][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 759.638122][ T31] 2 locks held by dhcpcd/5488: [ 759.642940][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 759.651209][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 759.660295][ T31] 2 locks held by getty/5585: [ 759.665152][ T31] #0: ffff88803044f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 759.675059][ T31] #1: ffffc9000362b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 759.685248][ T31] 1 lock held by udevd/25967: [ 759.689918][ T31] #0: ffff888142b64358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 759.700097][ T31] 1 lock held by udevd/26466: [ 759.704888][ T31] #0: ffff888142b66358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 759.714399][ T31] 2 locks held by syz.1.5355/27952: [ 759.719627][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 759.728326][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 759.737743][ T31] 6 locks held by syz.3.5359/27962: [ 759.743010][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 759.751251][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 759.760608][ T31] #2: ffff888025667278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 759.771173][ T31] #3: ffff888142b45c88 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2ba/0x6d0 [ 759.781244][ T31] #4: ffff888142b45628 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 759.793892][ T31] #5: ffff888142b45660 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 759.806357][ T31] 2 locks held by syz.0.5364/27983: [ 759.811567][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 759.819947][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 759.829227][ T31] 2 locks held by syz.4.5367/27992: [ 759.834547][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 759.842900][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 759.852486][ T31] 2 locks held by syz.4.5367/27998: [ 759.858563][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 759.867011][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 759.876100][ T31] 2 locks held by syz.2.5368/27994: [ 759.881313][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 759.889797][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 759.899025][ T31] 2 locks held by syz.2.5368/27999: [ 759.904279][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 759.912459][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 759.921723][ T31] 2 locks held by syz-executor/28006: [ 759.927159][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 759.936009][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 759.945330][ T31] 2 locks held by syz-executor/28020: [ 759.950734][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 759.959306][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 759.968484][ T31] 2 locks held by syz-executor/28022: [ 759.974356][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 759.982601][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 759.991653][ T31] 2 locks held by syz-executor/28023: [ 759.997110][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 760.005606][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 760.014831][ T31] 2 locks held by syz-executor/28028: [ 760.020224][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 760.028458][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 760.037624][ T31] 2 locks held by syz-executor/28057: [ 760.043224][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 760.051463][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 760.060499][ T31] 2 locks held by syz-executor/28069: [ 760.066285][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 760.074649][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 760.083842][ T31] 2 locks held by syz-executor/28071: [ 760.089227][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 760.097978][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 760.107004][ T31] 2 locks held by syz-executor/28073: [ 760.112474][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 760.120745][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 760.129931][ T31] 2 locks held by syz-executor/28074: [ 760.135412][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 760.143686][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 760.152649][ T31] 2 locks held by syz-executor/28102: [ 760.158466][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 760.166747][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 760.176197][ T31] 2 locks held by syz-executor/28114: [ 760.181587][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 760.190064][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 760.199260][ T31] 2 locks held by syz-executor/28116: [ 760.204707][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 760.212951][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 760.222139][ T31] 2 locks held by syz-executor/28118: [ 760.228043][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 760.236613][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 760.245808][ T31] 2 locks held by syz-executor/28120: [ 760.251211][ T31] #0: ffffffff8fa1a130 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 760.259881][ T31] #1: ffffffff8fa19f48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 760.268960][ T31] [ 760.271301][ T31] ============================================= [ 760.271301][ T31] [ 760.280003][ T31] NMI backtrace for cpu 1 [ 760.280021][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 760.280041][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 760.280052][ T31] Call Trace: [ 760.280060][ T31] [ 760.280068][ T31] dump_stack_lvl+0xe8/0x150 [ 760.280096][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 760.280121][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 760.280149][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 760.280177][ T31] sys_info+0x135/0x170 [ 760.280196][ T31] watchdog+0xf90/0xfe0 [ 760.280221][ T31] ? watchdog+0x209/0xfe0 [ 760.280248][ T31] kthread+0x726/0x8b0 [ 760.280273][ T31] ? __pfx_watchdog+0x10/0x10 [ 760.280293][ T31] ? __pfx_kthread+0x10/0x10 [ 760.280318][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 760.280345][ T31] ? __pfx_kthread+0x10/0x10 [ 760.280365][ T31] ret_from_fork+0x51b/0xa40 [ 760.280397][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 760.280424][ T31] ? __switch_to+0xc82/0x1410 [ 760.280455][ T31] ? __pfx_kthread+0x10/0x10 [ 760.280478][ T31] ret_from_fork_asm+0x1a/0x30 [ 760.280522][ T31] [ 760.280530][ T31] Sending NMI from CPU 1 to CPUs 0: [ 760.402247][ C0] NMI backtrace for cpu 0 [ 760.402266][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 760.402283][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 760.402292][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 760.402316][ C0] Code: a8 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 67 12 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 760.402329][ C0] RSP: 0018:ffffffff8e207dc0 EFLAGS: 00000242 [ 760.402345][ C0] RAX: 00000000002c9db5 RBX: ffffffff8199570d RCX: 0000000080000001 [ 760.402357][ C0] RDX: 0000000000000001 RSI: ffffffff8dcc9137 RDI: ffffffff8c073980 [ 760.402368][ C0] RBP: ffffffff8e207eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 760.402379][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fef1a70 [ 760.402390][ C0] R13: 1ffffffff1c52a78 R14: 0000000000000000 R15: 0000000000000000 [ 760.402401][ C0] FS: 0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 760.402414][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 760.402425][ C0] CR2: 00007ffd31e77cd0 CR3: 000000000e346000 CR4: 00000000003526f0 [ 760.402442][ C0] Call Trace: [ 760.402449][ C0] [ 760.402455][ C0] default_idle+0x9/0x20 [ 760.402473][ C0] default_idle_call+0x72/0xb0 [ 760.402492][ C0] do_idle+0x1bd/0x500 [ 760.402505][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 760.402523][ C0] ? __pfx_do_idle+0x10/0x10 [ 760.402542][ C0] cpu_startup_entry+0x43/0x60 [ 760.402556][ C0] rest_init+0x2de/0x300 [ 760.402576][ C0] start_kernel+0x380/0x3d0 [ 760.402597][ C0] x86_64_start_reservations+0x24/0x30 [ 760.402615][ C0] x86_64_start_kernel+0x143/0x1c0 [ 760.402630][ C0] common_startup_64+0x13e/0x147 [ 760.402657][ C0] [ 760.403316][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 760.403332][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 760.403352][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 760.403363][ T31] Call Trace: [ 760.403385][ T31] [ 760.403394][ T31] vpanic+0x1e0/0x670 [ 760.403421][ T31] panic+0xc5/0xd0 [ 760.403442][ T31] ? __pfx_panic+0x10/0x10 [ 760.403464][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 760.403503][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 760.403531][ T31] watchdog+0xfda/0xfe0 [ 760.403555][ T31] ? watchdog+0x209/0xfe0 [ 760.403581][ T31] kthread+0x726/0x8b0 [ 760.403604][ T31] ? __pfx_watchdog+0x10/0x10 [ 760.403622][ T31] ? __pfx_kthread+0x10/0x10 [ 760.403645][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 760.403670][ T31] ? __pfx_kthread+0x10/0x10 [ 760.403690][ T31] ret_from_fork+0x51b/0xa40 [ 760.403719][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 760.403742][ T31] ? __switch_to+0xc82/0x1410 [ 760.403769][ T31] ? __pfx_kthread+0x10/0x10 [ 760.403797][ T31] ret_from_fork_asm+0x1a/0x30 [ 760.403834][ T31] [ 760.697185][ T31] Kernel Offset: disabled [ 760.701506][ T31] Rebooting in 86400 seconds..