last executing test programs: 20.838239994s ago: executing program 2 (id=2696): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="070000230000007900a9190d34a08a884495826a2947"], 0x48) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @empty}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x9}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f0000000100)={0x1, {{0xa, 0x4e21, 0x401, @local, 0x3}}, {{0xa, 0x4e23, 0xfffffffa, @loopback, 0x7}}}, 0x108) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000000040)={0x2, @multicast2, 0x4e21, 0x4, 'sh\x00', 0x1, 0x7, 0x37}, 0x2c) 20.651498776s ago: executing program 2 (id=2700): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x14}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x48}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x81, @private1, 0x8}}}, &(0x7f0000000040)=0x84) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x891e, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$sock(r5, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="02", 0x1}], 0x1}}], 0x1, 0x8005) r6 = accept(r5, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) close(0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000980)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{r9}, &(0x7f00000012c0), &(0x7f0000001300)=r7}, 0x20) sendmsg$inet_sctp(r6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x1) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r1, 0xfffffffd}, 0x8) 20.577053293s ago: executing program 2 (id=2702): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r8) r9 = socket$unix(0x1, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x6, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x103, 0x7, 0x2, 0x5, 0xfffffff9, 0x40000006}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "183c"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@gettaction={0x198, 0x32, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_gd=@TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x33c1}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x10000}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd9}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) r13 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r13, 0x0, 0x48b, &(0x7f00000003c0)={0x2, 'ip6_vti0\x00', 0x1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r14, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)=0x8) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r14, 0x0) 17.983581101s ago: executing program 2 (id=2721): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x26, 0x0, @val=@perf_event}, 0x18) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000014000000b7030000000000008500000083000000bf09000000000000550701000000000095000000000000008510051c575c5b334e501501", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000085100000fcffffff0da2040010000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x60, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x3, 0x6, 0xc}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000240)=[{0x3, 0x3, 0x7}, {0x0, 0x3, 0x2, 0x4}, {0x2, 0x4, 0x5, 0x3}, {0x4, 0x4, 0xa, 0x1}], 0x10, 0x2}, 0x94) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000007c0)={0xffffffffffffffff}, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000800)={r4, r5, 0x4, r6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=0x0, @ANYRESHEX=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000884) r7 = socket$netlink(0x10, 0x3, 0xe) r8 = socket(0x10, 0x803, 0x4) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r10 = accept$alg(r9, 0x0, 0x0) sendmsg$alg(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20040091}, 0x8000) accept4(r10, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYRES8=r1, @ANYRES64=r1, @ANYBLOB="240012800b00010062726964676500"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r11) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000d7501017f7e92e5a433f7c8024873110bc154caac85bb85257045502f9e7452b39d06956713d3c2bf29f0891c42f1043a88d", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r13, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r14 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r14, 0x107, 0xc, 0x0, &(0x7f0000000380)) socket(0x1, 0x803, 0x0) 17.981947554s ago: executing program 3 (id=2723): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b26900007b8af8ff00000000bfa2000000000000070200006effffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4008000, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x34, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) 17.870736047s ago: executing program 0 (id=2725): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f00000005c0)=0x8, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) unshare(0x600) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x4c, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfe73}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x40) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @dev, @initdev}, &(0x7f00000001c0)=0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x3, '\x00', r6, 0xffffffffffffffff, 0x4, 0x2, 0x3}, 0x50) write$tun(r5, 0x0, 0x340a) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000280)) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) unshare(0x10000000) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg$inet(r0, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @empty}}}], 0x20}}], 0x1, 0x10814) 17.819767367s ago: executing program 1 (id=2726): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x102, 0x4, 0x3f1, 0x1f8, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@remote, @remote, 0x0, 0x0, 0xfd, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@multicast, @remote, @multicast1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_virt_wifi\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="0000e900", @multicast2, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x441) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x2}) 17.805057655s ago: executing program 1 (id=2727): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0xdd, 0xa}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000ce5924eb62d6d644f8e163740dcf690007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f00000002c0)="23000000010006", 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020207025000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r3, 0x0, 0x14, 0xbc, &(0x7f0000000040)="7b866df8e99240d2672c1391591e33c8b295d312", &(0x7f0000000180)=""/188, 0x81, 0x0, 0xe4, 0x7f, &(0x7f00000004c0)="5a1c4e2d2758ee0afe7046887622d9bac4a80306c9b49e03f29c03fe2338f84ddd5587197f354b39485fc1f15172bf280296612e88500cd7338b8c61bf39442cc4cc7c80837eea134ae92afe866561aea02376a96c5f0d03a360360b726839d26ae2ea1fac083e1c159fdc38f6afead73c78d7c8f5e796cbb5ce5fea781bbcd5ddf2608102a7ad4a1469d0aa36eb0f32d3e4e94a3ede4b9a5186fbea5342b89b79be9d23bbba3f4cd786a42a19b2a1a779559d23e7e5d70bd52c10067c3b7527459d360fe94ad3dac26fc160b4b518ae308cd97b50a5377ce597852a1dc745d9e5c61d60", &(0x7f0000000300)="23192cea3e05db55a83eebc966390ae1866909bdc743d141e6ccbe2dedf245b2b7074b5d8ff192a57dae62685df349b11f80c36d1708f07207cb21b0ae6d63ec81d22e47f714ef80ffbc6c6a6b590c4e9828cb72874326a3e86de13c8346d0650a356687896777ca5c07d6459c307fa91125447fd76bde6258c9f20f4057f1", 0x7}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r2}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 17.771581794s ago: executing program 2 (id=2728): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000004000"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="38000000010007", 0x7) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000008000000000000095000000002b190017163b5b1300cb87f183b310d21d6d7a7e55e7cc990f6e712f452668775bd83a2063eebfb28acac360ea56557e98c00f1a5cce782a9cc01d125fa55bba77510e8833df6f927842bdc08f777856e4de2a67d8f0e70bdd3ed1ce8f00001c2345c71c04c492c7090001fba66194c4799d2e1dd08df818cd03956564bf2252bc4e1d4606f194b8d52f998f2668f0ac13accec93fac1bce87cda3c9d3934141ab49e3634c630ae5c7d518858f527f5f1d229c219560e022a423815200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000680)={{0x3, @null}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000400)={0x0, @local, @multicast2}, &(0x7f0000000440)=0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) splice(r8, &(0x7f0000000000)=0x2, r2, &(0x7f0000000180)=0x1a569c0b, 0x800, 0xc) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x6) clock_gettime(0x0, &(0x7f0000000200)) ppoll(&(0x7f0000000240)=[{r5, 0x2040}, {r3, 0xc200}, {r4, 0x580}, {r8, 0x4}, {r6, 0x222a}], 0x5, &(0x7f0000000280)={0x77359400}, &(0x7f0000000480)={[0x80000001]}, 0x8) socket$inet_sctp(0x2, 0x5, 0x84) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r2, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) 17.771041311s ago: executing program 3 (id=2729): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x10}}], 0x10, 0x40008c1}, 0x84) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0xfffffffd, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x100}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) close(0x3) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2081}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xfffffffe}]}}}]}, 0x38}}, 0x28000000) 17.658390866s ago: executing program 1 (id=2731): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x4}}, 0x10) socket$kcm(0x29, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x22000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x402, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x100}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x4}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x48195) socketpair(0x2a, 0x80000, 0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000027c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) socket$isdn(0x22, 0x3, 0x25) 17.632557801s ago: executing program 3 (id=2732): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000070000000000000000800027350000007500000095"], 0x0, 0xbb5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x40000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 17.538033376s ago: executing program 1 (id=2733): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r1, 0x711, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$qrtr(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000700)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0x0, 0x1, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x10000000}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}, 0x1, 0x500}, 0x0) socket$kcm(0x29, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x7, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100090a000000027fffffff0000000200100000e96f60c73956f5000000e9000000000000030024000000000002000000ac1414000000000000000000030006"], 0x50}}, 0x4) 17.428655223s ago: executing program 3 (id=2734): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='xen_mc_extend_args\x00', r0}, 0x18) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0xa, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r1, 0x3a2, 0x2, 0xff}) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x0) 17.424094953s ago: executing program 0 (id=2735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xe4, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x24c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x20}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x110, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0x0, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x378}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @broadcast}, 0x10) (async) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @local}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1a}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x2e, '\x00', r4}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0081007061796c6f6164000d000280050004400000005608000340000000b9080001400000000a08000240000000040900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) 17.344053431s ago: executing program 1 (id=2736): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002200000000000000000080071107b00000000009500"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000500010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 17.342502653s ago: executing program 0 (id=2737): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x96) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1700010000000500070000000000080009000000000008000a000000000004b403969baee199"], 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf251500000008000300", @ANYRES32=r5, @ANYBLOB="20002b800800010000000000140003"], 0x3c}, 0x1, 0x0, 0x0, 0x2400089c}, 0x4000080) r6 = socket(0x10, 0x80003, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r10, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r9, 0x0, &(0x7f00000000c0)) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0xfffffffffffffde7, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) socket(0x40000000015, 0x805, 0x0) recvmmsg(r1, &(0x7f00000036c0), 0x0, 0x40002062, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x3c}}, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f00000019c0)=0x1ff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0xffffff1f) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x74}, 0x94) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x1405, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x804) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 17.243608063s ago: executing program 3 (id=2739): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) (async) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x360, 0x228, 0x25a, 0x360, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xfe}, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0x208, 0x250, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@rt={{0x138}, {0x5, [0x7fffffff, 0x3], 0x742e, 0x4, 0x6, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @local, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x11}, @local, @private0, @local, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2], 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r3, r4}) 17.221089173s ago: executing program 1 (id=2740): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bind$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000800)={0x0, 0xec, "c3ed78b56320d82cca52ee0bf3fe8932dffd9a892f9270be6d5db1cdc726d4df9cbd4c6f561176f253e56ec70fd37ccc2b86d4ea760bfa190efb3b0142998ebdbe62e6db72406ba8eeee25bec9a3c6a0030ed6bf68e02304f4941c71a4c0f7ccbfc97bd14386dd541c88ad45b0af2e53f952c0151205d3ce0e5c4afffb91f2ed1a1462f39174e68f76ca363d555f27ca12012ccf8ecb624823a9cdd3f94d7b23beeacad8e5aae1af8ffba89bc485de222fa724201e07f3ec81dcce823b772d3d2873e0717d984bb12dc3037d064fd89f3af72f6140877fd852f21613eacb28456043e3eba2ae9086d471c3d4"}, &(0x7f0000000900)=0xf4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a40), 0xffffffffffffffff) socket(0x29, 0x6, 0x6) (async) r3 = socket(0x29, 0x6, 0x6) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000000)={@remote, @remote, 0x1, "321f2449345bd1ef33d9a09c82f54488f85b33cb2278052e86f1cbd1f66aece8", 0x51, 0x7, 0x6, 0x8}, 0x3c) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x24000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x6}], 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffa}, 0x50) 17.022514666s ago: executing program 0 (id=2742): getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x9}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x80000001, 0xcec6, 0x8, 0x704f, 0xc, 0xa15, 0x2, {r0, @in6={{0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}, 0xfffeffff, 0x1, 0x4, 0x4, 0x4}}, &(0x7f00000002c0)=0xb0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1d1841, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x68, 0x30, 0x1, 0x0, 0xfffffffc, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0xfffffffffffffd00, 0x2, {{0x3edc, 0x0, 0x4, 0x2, 0xa2}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x2004e081) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000000301010300000000000000000a0000020c00198008000200280a0000100002800c0002"], 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x4c880) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newtclass={0x24, 0x28, 0x804, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x10, 0x9}, {0xe, 0x2}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x45084) syz_init_net_socket$ax25(0x3, 0x5, 0xf0) bind$ax25(r1, &(0x7f0000000080)={{0x3, @default}, [@default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48) pipe(&(0x7f00000045c0)) r7 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r7, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x8000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r9, 0x5452, &(0x7f0000000000)=0xf4e) writev(r9, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.893072897s ago: executing program 3 (id=2744): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="45100000008ffff5d5d31211549aebfb23e5768213297a238716fa6e00000000000a000037cd602177043458e3d930e113c518cc7bce54675b0d370624bc66d929ac9841"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000080)="29000300010003", 0x7) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r2, 0x2f, 0x0, @void}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r6, &(0x7f00000000c0), 0x9) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r7) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r4, 0x0, 0x0}, 0x10) r8 = socket$xdp(0x2c, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x61, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="99742dbd7000fbdbdf251500000014000180100001006574683a6970766c031f616e"], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) 16.831759538s ago: executing program 2 (id=2745): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x3a) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x1, @bcast, @bpq0, 0x7, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 16.570024154s ago: executing program 4 (id=2749): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x4, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x1, 0x8, 0xe, 0x4, {{0x21, 0x4, 0x3, 0x5, 0x84, 0x64, 0x0, 0x9a, 0x29, 0x0, @multicast1, @rand_addr=0x64010100, {[@timestamp={0x44, 0x10, 0x61, 0x0, 0x1, [0x4, 0x8, 0x10]}, @lsrr={0x83, 0x13, 0xd1, [@multicast1, @empty, @multicast1, @multicast1]}, @timestamp_addr={0x44, 0x44, 0xb3, 0x1, 0x1, [{@multicast1, 0x5}, {@broadcast, 0xe029}, {@loopback, 0x7ff}, {@broadcast, 0x5}, {@empty, 0x7}, {@private=0xa010100, 0xff}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x3}, {@local, 0xc}]}, @noop, @noop, @ssrr={0x89, 0x7, 0x55, [@dev={0xac, 0x14, 0x14, 0x21}]}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@type_tag={0x1, 0x0, 0x0, 0x12, 0x2}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x2e, 0x0, 0x51, 0x30, 0x61]}}, &(0x7f0000000400)=""/244, 0x37, 0xf4, 0x0, 0x1}, 0x28) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfff, '\x00', 0x0, r1, 0x1, 0x2, 0x3}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r6}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) close(r8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x0, 0xb, 0xb, 0x100, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x897f, 0xd9, &(0x7f0000000280)=""/217, 0x40f00, 0x16, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000540)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x1, 0x2, 0x40}, 0x10, 0x7956, r1, 0x4, &(0x7f0000000740)=[r0, r0, r4, r0, r5, r0, r0, r8], &(0x7f0000000780)=[{0x0, 0x3, 0x10, 0x8}, {0x1, 0x1, 0x7, 0x1}, {0x3, 0x4, 0x7, 0x3}, {0x0, 0x5, 0x9}], 0x10, 0xd6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x4, 0x4}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x1, 0x8, 0xe, 0x4, {{0x21, 0x4, 0x3, 0x5, 0x84, 0x64, 0x0, 0x9a, 0x29, 0x0, @multicast1, @rand_addr=0x64010100, {[@timestamp={0x44, 0x10, 0x61, 0x0, 0x1, [0x4, 0x8, 0x10]}, @lsrr={0x83, 0x13, 0xd1, [@multicast1, @empty, @multicast1, @multicast1]}, @timestamp_addr={0x44, 0x44, 0xb3, 0x1, 0x1, [{@multicast1, 0x5}, {@broadcast, 0xe029}, {@loopback, 0x7ff}, {@broadcast, 0x5}, {@empty, 0x7}, {@private=0xa010100, 0xff}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x3}, {@local, 0xc}]}, @noop, @noop, @ssrr={0x89, 0x7, 0x55, [@dev={0xac, 0x14, 0x14, 0x21}]}]}}}}}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@type_tag={0x1, 0x0, 0x0, 0x12, 0x2}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x2e, 0x0, 0x51, 0x30, 0x61]}}, &(0x7f0000000400)=""/244, 0x37, 0xf4, 0x0, 0x1}, 0x28) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfff, '\x00', 0x0, r1, 0x1, 0x2, 0x3}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r6}, 0x10) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) (async) close(r8) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x0, 0xb, 0xb, 0x100, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x897f, 0xd9, &(0x7f0000000280)=""/217, 0x40f00, 0x16, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000540)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x1, 0x2, 0x40}, 0x10, 0x7956, r1, 0x4, &(0x7f0000000740)=[r0, r0, r4, r0, r5, r0, r0, r8], &(0x7f0000000780)=[{0x0, 0x3, 0x10, 0x8}, {0x1, 0x1, 0x7, 0x1}, {0x3, 0x4, 0x7, 0x3}, {0x0, 0x5, 0x9}], 0x10, 0xd6}, 0x94) (async) 16.541386862s ago: executing program 4 (id=2750): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000001000850000004f0000001801000020b9040000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800003e8d030000ff030000850000009b0000009500000000000000fddf530374028d3b3b368709a1cc039238ae5c4cddc9d072673cfee53a55"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000600)={0x0, @dev, @local}, &(0x7f0000000640)=0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x12c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfc, 0x2, {{0xfffffffe, 0x2, 0x40, 0x7, 0xe9, 0xcc39}, [@TCA_NETEM_LOSS={0xb0}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x8, 0x1000}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x55, 0xae}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x100020}, @TCA_NETEM_CORR={0x0, 0x1, {0x9, 0x3, 0x401}}]}}}]}, 0x12c}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r5, &(0x7f0000000040)={0x11, 0x1, r6, 0x1, 0x9}, 0x14) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @broadcast}, 0xfeb1) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r6, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r11, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="400000b29e29d1582b61c60026", @ANYRES32=r11, @ANYRES32=0x0], 0x50) r14 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r14, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0xc, r15, 0x3}, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0xb0, 0xbc, 0xe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x20, 0x700, 0x7116f62d, 0x3}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000001300)=ANY=[@ANYBLOB="fc060000", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fcdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="b80002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400f407000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000100000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000c00000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004001000000008000100", @ANYRES32=0x0, @ANYBLOB="4402028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000c00000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff0100003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000200000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff07000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000009008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="780002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000008000100", @ANYRES32=r6, @ANYBLOB="080202803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=r15, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="64000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000034000400060006302c1500000104050081000000fcff07ff090000003522b008010100002e0008097b02000002000c0707000000"], 0x6fc}, 0x1, 0x0, 0x0, 0x80}, 0x4800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0xf, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x49}, @map_val={0x18, 0x5, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0xffffff80}, @ringbuf_query, @alu={0x4, 0x0, 0x5, 0x8, 0xa, 0x10, 0x1}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xfffffffffffffffe}, @ldst={0x2, 0x1, 0x6, 0x3, 0x8, 0xc, 0x10}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0xfffffffffffffffe, 0x40f00, 0x2, '\x00', r4, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x8, 0x4, 0x7fffffff}, 0x10, 0x87d0, r0, 0x0, 0x0, 0x0, 0x10, 0x10000001}, 0x94) syz_emit_ethernet(0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="aaa8aaaaaaaa000b0000000081003a0086dd600000000038060000ff0200000000000000bf66304e6a3d89638f64000000000000013b00000000000000c2040000000800004e2440010000000000000000000000000000003c8f90d1e82b67b10c1e82067149610a155756fdfa96ed1c9edf98856da621a18b3df7af67b2c4a562f32c5a360355c5d26ec5ba466b5e60", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a00200009078000000fe06e2d4c3d9080a00000003ffffffff000000"], 0x0) 16.238179537s ago: executing program 4 (id=2751): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001580)) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000200)) listen(r1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x6f, 0x6, @local}, 0x14) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='tlb_flush\x00', r7}, 0x10) accept(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f000000b8c0)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r8, &(0x7f0000000000)="8388935c", 0x0}, 0x20) 16.12673866s ago: executing program 0 (id=2752): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) unshare(0x68040200) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000030000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000017c0)=@bpf_ext={0x1c, 0x12, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000000740)=""/4096, 0x40f00, 0x68, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3ac9, 0xffffffffffffffff, 0x1, &(0x7f0000001740)=[0xffffffffffffffff, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff, r4], &(0x7f0000001780)=[{0x1, 0x4, 0x2, 0x2}], 0x10, 0x7a}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x78, &(0x7f00000006c0)={@broadcast, @remote, @void, {@generic={0x8100, "cd27f5805cf48b3410d6b7257a80f3aac6fcdb6c9f78e6c3e2a1278959e6ce4b3e5fc4662e8d4fe72a49e7568cbad5a3b0b6843c849b092d00a0faf1b89f94dd982ef7982d2c6ae7c16df84756e9d650cec6f1600d126257c0241fc01618c017bca0e634a3f0ee8fc9cd"}}}, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) mmap(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x3000004, 0x40010, r7, 0x3f38e000) socket$nl_sock_diag(0x10, 0x3, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000170000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000680)='tlb_flush\x00', r9, 0x0, 0x6b8}, 0x18) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) connect$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r10, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 16.092436338s ago: executing program 4 (id=2753): recvmsg$unix(0xffffffffffffffff, &(0x7f00000038c0)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0, 0x48}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x40010163) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 16.045027004s ago: executing program 4 (id=2754): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000008c0000000000024900"/26], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 15.97154545s ago: executing program 4 (id=2755): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000003000000e0000002000000000000000000000000fe8000000000000000000000000000aa00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000180000000000000c5b21222ed216d26000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x50, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xe}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xc}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c00148008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1000009, 0x11, r3, 0xd371f000) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000007, 0x12, r0, 0x12574000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x800, @mcast2, 0xfffffff7}, 0x1c) sendto$inet6(r4, &(0x7f0000000500)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 15.301184856s ago: executing program 0 (id=2756): syz_emit_ethernet(0x1e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@can={0xc, {{0x4, 0x0, 0x1}, 0x8, 0x2, 0x0, 0x0, "e97cd711b716cd53"}}}}, &(0x7f00000000c0)={0x0, 0x1, [0x8ac, 0xc02, 0x99c, 0xcf8]}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}}}}]}, 0x4c}}, 0x4008080) sendto$packet(r1, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000000200000000000000b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11e8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c7042c04962000092a05019ac07a602061c96baebc989f1f34a214e672640323a587d2a1fcf07000000eca0a7b66c60c527bae4b500", 0x2, 0x3}}, @common=@inet=@socket2={{0x28}, 0x1}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x4, 0x12}]}, 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) listen(r5, 0x6) r8 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x38, 0x1403, 0x10, 0x70bd25, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'caif0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8002}, 0x814) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0xff, @local, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4e23, 0xe183, @local, 0x6a30}, 0x1c) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000350001000000000000000000020100800c0001"], 0x114}], 0x1}, 0x0) 2.121338075s ago: executing program 32 (id=2740): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bind$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000800)={0x0, 0xec, "c3ed78b56320d82cca52ee0bf3fe8932dffd9a892f9270be6d5db1cdc726d4df9cbd4c6f561176f253e56ec70fd37ccc2b86d4ea760bfa190efb3b0142998ebdbe62e6db72406ba8eeee25bec9a3c6a0030ed6bf68e02304f4941c71a4c0f7ccbfc97bd14386dd541c88ad45b0af2e53f952c0151205d3ce0e5c4afffb91f2ed1a1462f39174e68f76ca363d555f27ca12012ccf8ecb624823a9cdd3f94d7b23beeacad8e5aae1af8ffba89bc485de222fa724201e07f3ec81dcce823b772d3d2873e0717d984bb12dc3037d064fd89f3af72f6140877fd852f21613eacb28456043e3eba2ae9086d471c3d4"}, &(0x7f0000000900)=0xf4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a40), 0xffffffffffffffff) socket(0x29, 0x6, 0x6) (async) r3 = socket(0x29, 0x6, 0x6) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000000)={@remote, @remote, 0x1, "321f2449345bd1ef33d9a09c82f54488f85b33cb2278052e86f1cbd1f66aece8", 0x51, 0x7, 0x6, 0x8}, 0x3c) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x24000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x6}], 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffa}, 0x50) 1.104845318s ago: executing program 33 (id=2745): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x3a) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x1, @bcast, @bpq0, 0x7, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.071792896s ago: executing program 34 (id=2744): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="45100000008ffff5d5d31211549aebfb23e5768213297a238716fa6e00000000000a000037cd602177043458e3d930e113c518cc7bce54675b0d370624bc66d929ac9841"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000080)="29000300010003", 0x7) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r2, 0x2f, 0x0, @void}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r6, &(0x7f00000000c0), 0x9) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r7) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r4, 0x0, 0x0}, 0x10) r8 = socket$xdp(0x2c, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x61, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="99742dbd7000fbdbdf251500000014000180100001006574683a6970766c031f616e"], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) 37.329615ms ago: executing program 35 (id=2756): syz_emit_ethernet(0x1e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @void, {@can={0xc, {{0x4, 0x0, 0x1}, 0x8, 0x2, 0x0, 0x0, "e97cd711b716cd53"}}}}, &(0x7f00000000c0)={0x0, 0x1, [0x8ac, 0xc02, 0x99c, 0xcf8]}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}}}}]}, 0x4c}}, 0x4008080) sendto$packet(r1, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000000200000000000000b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11e8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c7042c04962000092a05019ac07a602061c96baebc989f1f34a214e672640323a587d2a1fcf07000000eca0a7b66c60c527bae4b500", 0x2, 0x3}}, @common=@inet=@socket2={{0x28}, 0x1}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x4, 0x12}]}, 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) listen(r5, 0x6) r8 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x38, 0x1403, 0x10, 0x70bd25, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'caif0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8002}, 0x814) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0xff, @local, 0x5}, 0x1c) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4e23, 0xe183, @local, 0x6a30}, 0x1c) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000350001000000000000000000020100800c0001"], 0x114}], 0x1}, 0x0) 0s ago: executing program 36 (id=2755): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001000000000003000000e0000002000000000000000000000000fe8000000000000000000000000000aa00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000180000000000000c5b21222ed216d26000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x50, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xe}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xc}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c00148008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x1000009, 0x11, r3, 0xd371f000) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000007, 0x12, r0, 0x12574000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x800, @mcast2, 0xfffffff7}, 0x1c) sendto$inet6(r4, &(0x7f0000000500)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) kernel console output (not intermixed with test programs): alid length. [ 253.752412][T12494] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1575'. [ 253.955778][T12487] batadv0: entered allmulticast mode [ 253.985542][T12487] bond0: (slave batadv0): Releasing backup interface [ 254.010220][T12487] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 254.028740][T12494] netlink: 'syz.1.1575': attribute type 4 has an invalid length. [ 254.036688][T12494] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1575'. [ 254.190770][T12498] syzkaller1: entered promiscuous mode [ 254.196474][T12498] syzkaller1: entered allmulticast mode [ 254.563875][T12512] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 254.832121][T12524] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1581'. [ 255.166009][T12539] netlink: 67 bytes leftover after parsing attributes in process `syz.3.1587'. [ 255.200652][T12542] netlink: 67 bytes leftover after parsing attributes in process `syz.3.1587'. [ 255.277872][T12518] netlink: 'syz.1.1580': attribute type 1 has an invalid length. [ 255.296808][T12518] netlink: 'syz.1.1580': attribute type 4 has an invalid length. [ 255.345073][T12549] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 255.537065][T12564] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 255.562553][T12564] pimreg: left allmulticast mode [ 255.674679][T12564] tipc: Enabling of bearer rejected, failed to enable media [ 255.751150][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.835326][T12572] IPVS: Scheduler module ip_vs_sip not found [ 255.958267][T12572] IPVS: length: 141 != 8 [ 256.010291][T12582] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 256.213879][T12601] erspan0: entered allmulticast mode [ 256.790012][T12622] __nla_validate_parse: 7 callbacks suppressed [ 256.790030][T12622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1610'. [ 256.902343][T12622] 8021q: adding VLAN 0 to HW filter on device bond5 [ 256.916224][T12631] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1612'. [ 256.949129][T12627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.959539][T12627] bond5: (slave bond0): Enslaving as an active interface with an up link [ 257.104366][T12629] bond5 (unregistering): (slave bond0): Releasing backup interface [ 257.122462][T12629] bond5 (unregistering): Released all slaves [ 257.153958][T12637] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1613'. [ 257.166064][T12637] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1613'. [ 257.179116][T12637] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1613'. [ 257.283968][T12650] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1615'. [ 257.370547][T12654] x_tables: unsorted underflow at hook 3 [ 257.542033][T12659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1620'. [ 257.600266][T12669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1618'. [ 257.621822][T12669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1618'. [ 257.783133][T12682] validate_nla: 1 callbacks suppressed [ 257.783151][T12682] netlink: 'syz.3.1624': attribute type 16 has an invalid length. [ 258.016103][T12691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1627'. [ 258.073860][T12691] gretap0: entered promiscuous mode [ 258.096755][T12691] gretap0: left promiscuous mode [ 258.131548][T12687] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 258.775967][T12730] x_tables: duplicate underflow at hook 2 [ 259.005466][T12739] tipc: Enabled bearer , priority 0 [ 259.016050][T12739] syzkaller0: entered promiscuous mode [ 259.036423][T12739] syzkaller0: entered allmulticast mode [ 259.104096][T12738] tipc: Resetting bearer [ 259.125079][T12738] tipc: Disabling bearer [ 259.747127][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 259.796683][T12784] pim6reg1: entered promiscuous mode [ 259.803069][T12784] pim6reg1: entered allmulticast mode [ 260.040987][T12806] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 260.246204][T12816] siw: device registration error -23 [ 260.565265][ T977] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 260.594535][ T977] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 260.608478][ T5964] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 260.837147][ T5829] Bluetooth: hci4: link tx timeout [ 260.842374][ T5829] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 261.147332][ T5964] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 261.233953][T12856] syzkaller0: entered promiscuous mode [ 261.269920][ T5964] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 261.365937][T12856] syzkaller0: entered allmulticast mode [ 261.697596][ T25] block nbd0: Possible stuck request ffff888024f0e000: control (read@0,1024B). Runtime 150 seconds [ 261.728207][ T25] block nbd0: Possible stuck request ffff888024f0e1c0: control (read@1024,1024B). Runtime 150 seconds [ 261.739392][ T25] block nbd0: Possible stuck request ffff888024f0e380: control (read@2048,1024B). Runtime 150 seconds [ 261.750954][ T25] block nbd0: Possible stuck request ffff888024f0e540: control (read@3072,1024B). Runtime 150 seconds [ 261.815745][T12869] __nla_validate_parse: 9 callbacks suppressed [ 261.815762][T12869] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1678'. [ 261.833809][T12869] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 261.873122][T12871] netlink: 'syz.2.1677': attribute type 39 has an invalid length. [ 262.007288][T12871] hsr_slave_1 (unregistering): left promiscuous mode [ 262.172762][T12886] dummy0: entered promiscuous mode [ 262.523919][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1687'. [ 262.603928][T12915] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1688'. [ 262.742283][T12922] wg1 speed is unknown, defaulting to 1000 [ 262.754487][T12922] wg1 speed is unknown, defaulting to 1000 [ 262.770310][T12922] wg1 speed is unknown, defaulting to 1000 [ 262.839986][T12922] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 262.873046][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 262.962489][T12922] wg1 speed is unknown, defaulting to 1000 [ 262.974277][T12922] wg1 speed is unknown, defaulting to 1000 [ 263.022113][T12940] batadv_slave_1: entered promiscuous mode [ 263.046381][T12922] wg1 speed is unknown, defaulting to 1000 [ 263.060529][T12939] batadv_slave_1: left promiscuous mode [ 263.090993][T12922] wg1 speed is unknown, defaulting to 1000 [ 263.102525][T12945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.126339][T12922] wg1 speed is unknown, defaulting to 1000 [ 263.175428][T12950] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1695'. [ 263.201546][T12950] netlink: 'syz.0.1695': attribute type 2 has an invalid length. [ 263.219450][T12950] netlink: 'syz.0.1695': attribute type 1 has an invalid length. [ 263.252011][T12950] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1695'. [ 263.274850][T12950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1695'. [ 263.287411][T12950] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1695'. [ 263.410632][T12961] wg1 speed is unknown, defaulting to 1000 [ 263.427718][T11571] block nbd3: Possible stuck request ffff88802540e000: control (read@0,1024B). Runtime 150 seconds [ 263.438860][T11571] block nbd3: Possible stuck request ffff88802540e1c0: control (read@1024,1024B). Runtime 150 seconds [ 263.453655][T11571] block nbd3: Possible stuck request ffff88802540e380: control (read@2048,1024B). Runtime 150 seconds [ 263.464829][T11571] block nbd3: Possible stuck request ffff88802540e540: control (read@3072,1024B). Runtime 150 seconds [ 263.531632][T12970] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1700'. [ 263.600372][T12974] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1703'. [ 263.864928][T12984] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1704'. [ 264.467174][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 264.599869][T13022] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 264.737181][T13044] netlink: 'syz.2.1719': attribute type 13 has an invalid length. [ 264.745215][T13044] netlink: 'syz.2.1719': attribute type 17 has an invalid length. [ 264.765798][T13044] erspan0: left allmulticast mode [ 264.792100][T13044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.801551][T13044] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.814142][T13044] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.930250][T13044] wg1 speed is unknown, defaulting to 1000 [ 265.258713][T12885] dummy0: left promiscuous mode [ 265.315744][T13061] ip6tnl2: entered allmulticast mode [ 265.391510][T13071] x_tables: duplicate underflow at hook 1 [ 265.411182][T13072] x_tables: duplicate underflow at hook 1 [ 265.551653][T13062] wg1 speed is unknown, defaulting to 1000 [ 265.685703][T13081] veth0_to_bridge: entered promiscuous mode [ 266.099002][T13098] wg1 speed is unknown, defaulting to 1000 [ 266.838544][T13134] __nla_validate_parse: 4 callbacks suppressed [ 266.838562][T13134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1739'. [ 266.860744][T13136] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1740'. [ 266.875853][T13132] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1737'. [ 266.876128][T13134] Cannot find add_set index 0 as target [ 266.893531][T13137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1739'. [ 266.894425][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1740'. [ 266.939127][T13136] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1740'. [ 267.155200][T13149] vlan3: entered promiscuous mode [ 267.161080][T13149] batadv0: entered promiscuous mode [ 267.683846][T13192] tipc: Enabled bearer , priority 0 [ 267.720066][T13192] syzkaller0: entered promiscuous mode [ 267.729599][T13192] syzkaller0: entered allmulticast mode [ 267.771925][T13192] tipc: Resetting bearer [ 267.785423][T13191] tipc: Resetting bearer [ 267.880906][T13191] tipc: Disabling bearer [ 267.905236][T13215] veth1_to_bond: entered allmulticast mode [ 267.914196][T13215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1763'. [ 267.921813][T13218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1761'. [ 267.946224][T13217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1761'. [ 268.032704][T13215] veth1_to_bond (unregistering): left allmulticast mode [ 268.050640][T13217] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 268.051868][T13218] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 268.157975][T13222] wg1 speed is unknown, defaulting to 1000 [ 268.335761][T13238] netlink: 'syz.0.1769': attribute type 1 has an invalid length. [ 268.726609][T13256] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1771'. [ 269.906501][T13284] bond4: option arp_all_targets: invalid value (3) [ 269.979534][T13284] bond4 (unregistering): Released all slaves [ 270.341871][T13305] netlink: 'syz.2.1782': attribute type 12 has an invalid length. [ 270.350465][T13305] netlink: 'syz.2.1782': attribute type 13 has an invalid length. [ 271.053603][T13325] netlink: 'syz.2.1791': attribute type 4 has an invalid length. [ 271.105136][T13326] netlink: 'syz.2.1791': attribute type 4 has an invalid length. [ 271.317204][T13334] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 271.439857][T13338] wg1 speed is unknown, defaulting to 1000 [ 271.476832][ T30] audit: type=1107 audit(1762696470.178:10): pid=13339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 271.980360][T13369] tap0: tun_chr_ioctl cmd 1074025677 [ 271.985885][T13369] tap0: linktype set to 780 [ 272.109975][T13375] __nla_validate_parse: 9 callbacks suppressed [ 272.109992][T13375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1806'. [ 272.149976][T13376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1805'. [ 272.254001][T13380] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1806'. [ 272.387981][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 272.630483][T13344] wg1 speed is unknown, defaulting to 1000 [ 272.695382][T13393] wg1 speed is unknown, defaulting to 1000 [ 272.772930][T13402] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 272.840594][T13402] bond4 (unregistering): Released all slaves [ 273.154040][T13407] wg1 speed is unknown, defaulting to 1000 [ 273.577811][T13425] netlink: 'syz.3.1818': attribute type 11 has an invalid length. [ 273.616222][T13425] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1818'. [ 274.139112][T13446] x_tables: duplicate underflow at hook 3 [ 274.613784][T13457] tipc: Enabled bearer , priority 0 [ 274.627994][T13457] tipc: Resetting bearer [ 274.636225][T13454] tipc: Resetting bearer [ 274.681008][T13454] tipc: Disabling bearer [ 275.006268][T13472] bridge6: entered promiscuous mode [ 275.016393][T13477] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1835'. [ 275.025902][T13472] bridge6: entered allmulticast mode [ 275.060997][T13472] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1834'. [ 275.070724][T13472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1834'. [ 275.080623][T13472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'. [ 275.409755][T13498] wg1: entered promiscuous mode [ 275.414753][T13498] wg1: entered allmulticast mode [ 275.463791][T13500] netlink: 'syz.0.1842': attribute type 1 has an invalid length. [ 275.863174][T13511] tipc: Enabled bearer , priority 0 [ 275.881533][T13511] syzkaller0: entered promiscuous mode [ 275.896132][T13511] syzkaller0: entered allmulticast mode [ 275.929849][T13511] tipc: Resetting bearer [ 275.942943][T13513] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1847'. [ 276.130869][T13510] tipc: Resetting bearer [ 276.165078][T13510] tipc: Disabling bearer [ 276.368093][T13531] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1851'. [ 276.385730][T13529] ip6t_srh: unknown srh invflags BA61 [ 276.921738][T13559] wg1 speed is unknown, defaulting to 1000 [ 276.941006][T13559] wg1 speed is unknown, defaulting to 1000 [ 276.960171][T13559] wg1 speed is unknown, defaulting to 1000 [ 277.000594][T13559] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 277.098353][T13559] wg1 speed is unknown, defaulting to 1000 [ 277.146646][T13559] wg1 speed is unknown, defaulting to 1000 [ 277.169392][T13559] wg1 speed is unknown, defaulting to 1000 [ 277.188376][T13559] wg1 speed is unknown, defaulting to 1000 [ 277.225526][T13569] __nla_validate_parse: 1 callbacks suppressed [ 277.225552][T13569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1863'. [ 277.252514][T13559] wg1 speed is unknown, defaulting to 1000 [ 277.346411][T13574] wg1 speed is unknown, defaulting to 1000 [ 277.368288][T13574] wg1 speed is unknown, defaulting to 1000 [ 278.037497][T13603] syzkaller0: entered promiscuous mode [ 278.057653][T13603] syzkaller0: entered allmulticast mode [ 278.300797][T13613] netlink: 'syz.4.1875': attribute type 16 has an invalid length. [ 278.325756][T13613] netlink: 'syz.4.1875': attribute type 1 has an invalid length. [ 278.366378][T13613] netlink: 'syz.4.1875': attribute type 2 has an invalid length. [ 278.407659][T13613] netlink: 'syz.4.1875': attribute type 16 has an invalid length. [ 278.440113][T13613] netlink: 'syz.4.1875': attribute type 1 has an invalid length. [ 278.470094][T13613] netlink: 'syz.4.1875': attribute type 2 has an invalid length. [ 278.495539][T13620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1876'. [ 278.677299][T13620] 8021q: VLANs not supported on ip6gre0 [ 278.693353][T13622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1877'. [ 278.852860][T13628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1877'. [ 279.132582][T13630] tipc: Enabled bearer , priority 10 [ 279.302289][T13648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1884'. [ 279.320848][T13650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1886'. [ 279.365696][T13660] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 279.916541][T13680] netlink: 'syz.1.1894': attribute type 1 has an invalid length. [ 279.970339][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1896'. [ 279.977743][T13680] 8021q: adding VLAN 0 to HW filter on device bond4 [ 279.995732][T13677] wg1 speed is unknown, defaulting to 1000 [ 280.039586][T13677] wg1 speed is unknown, defaulting to 1000 [ 280.068770][T13686] netlink: 'syz.4.1892': attribute type 1 has an invalid length. [ 280.076534][T13686] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1892'. [ 280.248245][ T6048] tipc: Node number set to 1542493130 [ 280.285550][T13704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1901'. [ 280.399441][T13704] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1901'. [ 280.660388][T13714] netlink: 'syz.0.1904': attribute type 1 has an invalid length. [ 281.057884][T13738] wg1 speed is unknown, defaulting to 1000 [ 281.152860][T13738] wg1 speed is unknown, defaulting to 1000 [ 281.253655][T13750] bond5: entered promiscuous mode [ 281.259460][T13750] bond5: entered allmulticast mode [ 281.437147][ T5829] Bluetooth: hci0: command tx timeout [ 281.469932][T13754] wg1 speed is unknown, defaulting to 1000 [ 281.500778][T13754] wg1 speed is unknown, defaulting to 1000 [ 281.735234][T13727] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 282.032268][T13762] IPVS: set_ctl: invalid protocol: 0 10.1.0.255:20001 [ 282.075273][T13762] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 282.119654][T13755] wg1 speed is unknown, defaulting to 1000 [ 282.167994][T13755] wg1 speed is unknown, defaulting to 1000 [ 282.389370][T13788] netlink: 'syz.1.1920': attribute type 1 has an invalid length. [ 282.492573][T13792] __nla_validate_parse: 8 callbacks suppressed [ 282.492590][T13792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1920'. [ 282.531309][T13788] 8021q: adding VLAN 0 to HW filter on device bond5 [ 282.562411][T13790] 8021q: adding VLAN 0 to HW filter on device bond5 [ 282.570393][T13790] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 282.582124][T13790] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 282.733926][T13792] vlan0: entered allmulticast mode [ 282.739598][T13792] team0: entered allmulticast mode [ 282.902235][T13812] delete_channel: no stack [ 283.586733][T13849] bond5 (unregistering): Released all slaves [ 283.728460][T13862] wg1 speed is unknown, defaulting to 1000 [ 283.748982][T13862] wg1 speed is unknown, defaulting to 1000 [ 283.759913][T13870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1941'. [ 283.777727][T13861] wg1 speed is unknown, defaulting to 1000 [ 283.795716][T13861] wg1 speed is unknown, defaulting to 1000 [ 283.823005][T13870] netlink: 'syz.0.1941': attribute type 1 has an invalid length. [ 284.075955][T13876] syzkaller0: entered promiscuous mode [ 284.082579][T13876] syzkaller0: entered allmulticast mode [ 284.374760][T13900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1949'. [ 285.515701][T13885] netlink: 432 bytes leftover after parsing attributes in process `syz.0.1947'. [ 285.591200][T13890] batadv1: entered promiscuous mode [ 285.600598][T13890] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 286.047496][T13930] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1957'. [ 286.131616][T13941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1958'. [ 286.357270][T13949] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 286.382614][T13946] dvmrp0: entered allmulticast mode [ 286.394353][T13946] nbd: couldn't find device at index 536870912 [ 286.601445][T13957] tipc: New replicast peer: 255.255.255.255 [ 286.612591][T13957] tipc: Enabled bearer , priority 10 [ 286.705493][T13959] netlink: 'syz.0.1965': attribute type 4 has an invalid length. [ 286.713813][T13959] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1965'. [ 286.859469][T13966] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 286.878527][T13967] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1966'. [ 286.905701][T13967] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1966'. [ 286.955930][T13961] wg1 speed is unknown, defaulting to 1000 [ 286.992072][T13967] dummy0: entered promiscuous mode [ 287.031098][T13967] dummy0: left promiscuous mode [ 287.051423][T13961] wg1 speed is unknown, defaulting to 1000 [ 287.067672][T13974] netlink: 'syz.0.1971': attribute type 16 has an invalid length. [ 287.075575][T13974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1971'. [ 287.522271][T13999] netlink: 'syz.0.1976': attribute type 13 has an invalid length. [ 287.541208][T13999] netlink: 'syz.0.1976': attribute type 17 has an invalid length. [ 287.645831][T13999] erspan0: entered promiscuous mode [ 287.655540][T14012] __nla_validate_parse: 2 callbacks suppressed [ 287.655568][T14012] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1976'. [ 287.679972][T13999] erspan0: left allmulticast mode [ 287.743440][T13999] dummy0: left promiscuous mode [ 287.748759][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 287.760205][T13999] dummy0: left allmulticast mode [ 287.770713][T14015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.784047][T13999] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 287.892909][T13999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.923033][T14006] wg1 speed is unknown, defaulting to 1000 [ 287.965037][T14020] bond5: option lacp_active: invalid value (8) [ 287.973503][T14020] bond5 (unregistering): Released all slaves [ 288.028936][T14006] wg1 speed is unknown, defaulting to 1000 [ 288.029927][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1983'. [ 288.103882][T14024] netlink: 'syz.4.1983': attribute type 2 has an invalid length. [ 288.236292][T14024] wg1 speed is unknown, defaulting to 1000 [ 288.328108][T14024] wg1 speed is unknown, defaulting to 1000 [ 288.347759][T14036] FAULT_INJECTION: forcing a failure. [ 288.347759][T14036] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 288.399420][T14036] CPU: 1 UID: 0 PID: 14036 Comm: syz.1.1986 Not tainted syzkaller #0 PREEMPT(full) [ 288.399445][T14036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 288.399456][T14036] Call Trace: [ 288.399462][T14036] [ 288.399471][T14036] dump_stack_lvl+0x189/0x250 [ 288.399499][T14036] ? __pfx____ratelimit+0x10/0x10 [ 288.399522][T14036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.399543][T14036] ? __pfx__printk+0x10/0x10 [ 288.399561][T14036] ? __might_fault+0xb0/0x130 [ 288.399601][T14036] should_fail_ex+0x414/0x560 [ 288.399631][T14036] _copy_from_iter+0x1de/0x1790 [ 288.399654][T14036] ? check_path+0x21/0x40 [ 288.399672][T14036] ? check_noncircular+0xe0/0x160 [ 288.399700][T14036] ? __pfx__copy_from_iter+0x10/0x10 [ 288.399716][T14036] ? validate_chain+0x897/0x2140 [ 288.399751][T14036] tun_get_user+0x219/0x3e90 [ 288.399792][T14036] ? aa_file_perm+0x44d/0x1550 [ 288.399809][T14036] ? __pfx_tun_get_user+0x10/0x10 [ 288.399828][T14036] ? _parse_integer_limit+0x1ae/0x1f0 [ 288.399855][T14036] ? __lock_acquire+0xab9/0xd20 [ 288.399878][T14036] ? ref_tracker_alloc+0x318/0x460 [ 288.399894][T14036] ? __lock_acquire+0xab9/0xd20 [ 288.399913][T14036] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 288.399935][T14036] ? tun_get+0x1c/0x2f0 [ 288.399961][T14036] ? tun_get+0x1c/0x2f0 [ 288.399977][T14036] ? tun_get+0x1c/0x2f0 [ 288.400000][T14036] tun_chr_write_iter+0x113/0x200 [ 288.400022][T14036] vfs_write+0x5c9/0xb30 [ 288.400049][T14036] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 288.400072][T14036] ? __pfx_vfs_write+0x10/0x10 [ 288.400105][T14036] ? __fget_files+0x2a/0x420 [ 288.400130][T14036] ksys_write+0x145/0x250 [ 288.400155][T14036] ? __pfx_ksys_write+0x10/0x10 [ 288.400181][T14036] ? do_syscall_64+0xbe/0xfa0 [ 288.400208][T14036] do_syscall_64+0xfa/0xfa0 [ 288.400230][T14036] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.400256][T14036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.400273][T14036] ? clear_bhb_loop+0x60/0xb0 [ 288.400294][T14036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.400311][T14036] RIP: 0033:0x7f14cb38f6c9 [ 288.400327][T14036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.400342][T14036] RSP: 002b:00007f14cc1cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 288.400362][T14036] RAX: ffffffffffffffda RBX: 00007f14cb5e5fa0 RCX: 00007f14cb38f6c9 [ 288.400375][T14036] RDX: 0000000000000072 RSI: 0000200000000100 RDI: 0000000000000003 [ 288.400385][T14036] RBP: 00007f14cc1cd090 R08: 0000000000000000 R09: 0000000000000000 [ 288.400393][T14036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.400404][T14036] R13: 00007f14cb5e6038 R14: 00007f14cb5e5fa0 R15: 00007ffcacd99f38 [ 288.400433][T14036] [ 288.727063][T14037] wg1 speed is unknown, defaulting to 1000 [ 288.736634][T14037] wg1 speed is unknown, defaulting to 1000 [ 288.806862][T14044] tipc: New replicast peer: 255.255.255.255 [ 288.816263][T14044] tipc: Enabled bearer , priority 10 [ 288.825673][T14044] netlink: 'syz.1.1988': attribute type 11 has an invalid length. [ 288.835883][T14044] netlink: 'syz.1.1988': attribute type 11 has an invalid length. [ 288.847206][T14044] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1988'. [ 289.019481][T14050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1989'. [ 289.444265][T14065] wg1 speed is unknown, defaulting to 1000 [ 289.469184][T14065] wg1 speed is unknown, defaulting to 1000 [ 289.590453][T14073] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1994'. [ 289.695214][T14073] x_tables: duplicate underflow at hook 4 [ 289.927216][ T5964] tipc: Node number set to 3411877328 [ 289.938926][T14074] wg1 speed is unknown, defaulting to 1000 [ 289.947493][T14074] wg1 speed is unknown, defaulting to 1000 [ 289.970018][T14078] wg1 speed is unknown, defaulting to 1000 [ 290.000180][T14086] wg1 speed is unknown, defaulting to 1000 [ 290.009846][T14078] wg1 speed is unknown, defaulting to 1000 [ 290.125212][T14086] wg1 speed is unknown, defaulting to 1000 [ 290.805488][T14128] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2008'. [ 290.815690][T14128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2008'. [ 290.825199][T14128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2008'. [ 290.846463][T14128] netlink: 'syz.2.2008': attribute type 13 has an invalid length. [ 290.854644][T14128] netlink: 'syz.2.2008': attribute type 17 has an invalid length. [ 290.930633][T14123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2006'. [ 290.947392][T14123] netlink: 34 bytes leftover after parsing attributes in process `syz.4.2006'. [ 290.998420][T14128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 291.056180][T14124] wg1 speed is unknown, defaulting to 1000 [ 291.076856][T14124] wg1 speed is unknown, defaulting to 1000 [ 291.471644][T14148] netlink: 'syz.0.2014': attribute type 1 has an invalid length. [ 291.559481][T14148] 8021q: adding VLAN 0 to HW filter on device bond5 [ 291.668005][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 291.679968][T14153] bond5: (slave ip6gretap3): making interface the new active one [ 291.710814][T14153] bond5: (slave ip6gretap3): Enslaving as an active interface with an up link [ 291.763615][T14153] netlink: 'syz.0.2014': attribute type 5 has an invalid length. [ 291.787624][T14148] veth11: entered promiscuous mode [ 291.804432][T14148] bond5: (slave veth11): Enslaving as an active interface with a down link [ 291.841415][T14159] erspan0: entered allmulticast mode [ 291.884008][T14146] wg1 speed is unknown, defaulting to 1000 [ 291.906361][T14146] wg1 speed is unknown, defaulting to 1000 [ 292.145290][T14184] bond0: (slave sit0): Error: Device type is different from other slaves [ 292.228614][ T25] block nbd0: Possible stuck request ffff888024f0e000: control (read@0,1024B). Runtime 180 seconds [ 292.239819][ T25] block nbd0: Possible stuck request ffff888024f0e1c0: control (read@1024,1024B). Runtime 180 seconds [ 292.252597][ T25] block nbd0: Possible stuck request ffff888024f0e380: control (read@2048,1024B). Runtime 180 seconds [ 292.263845][ T25] block nbd0: Possible stuck request ffff888024f0e540: control (read@3072,1024B). Runtime 180 seconds [ 292.691560][T14195] wg1 speed is unknown, defaulting to 1000 [ 292.694256][T14203] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 292.737238][T14195] wg1 speed is unknown, defaulting to 1000 [ 293.004877][T14199] __nla_validate_parse: 1 callbacks suppressed [ 293.004897][T14199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2027'. [ 293.298873][T14229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2036'. [ 293.372349][T14236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2036'. [ 293.509455][T11571] block nbd3: Possible stuck request ffff88802540e000: control (read@0,1024B). Runtime 180 seconds [ 293.520483][T11571] block nbd3: Possible stuck request ffff88802540e1c0: control (read@1024,1024B). Runtime 180 seconds [ 293.531908][T11571] block nbd3: Possible stuck request ffff88802540e380: control (read@2048,1024B). Runtime 180 seconds [ 293.543353][T11571] block nbd3: Possible stuck request ffff88802540e540: control (read@3072,1024B). Runtime 180 seconds [ 293.872714][T14255] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 293.887139][T14255] bond6 (unregistering): Released all slaves [ 293.914914][T14265] veth0: entered promiscuous mode [ 293.930931][T14256] veth0: left promiscuous mode [ 293.991574][T14267] netlink: 'syz.3.2047': attribute type 6 has an invalid length. [ 294.171201][T14273] macsec1: entered promiscuous mode [ 294.176456][T14273] macsec1: entered allmulticast mode [ 294.582840][T14292] tipc: Enabled bearer , priority 10 [ 295.105284][T14319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2061'. [ 295.138007][T14319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2061'. [ 295.148356][T14319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2061'. [ 295.165394][T14319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2061'. [ 295.182310][T14319] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2061'. [ 295.189166][T14325] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2062'. [ 295.436252][T14331] wg1 speed is unknown, defaulting to 1000 [ 295.498150][T14335] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2066'. [ 295.517764][T14331] wg1 speed is unknown, defaulting to 1000 [ 295.653557][T14357] netlink: 'syz.2.2072': attribute type 83 has an invalid length. [ 295.699738][ T6048] tipc: Node number set to 3825414293 [ 295.724287][T14357] ieee802154 phy1 wpan1: encryption failed: -90 [ 296.189596][T14376] wg1 speed is unknown, defaulting to 1000 [ 296.219632][T14376] wg1 speed is unknown, defaulting to 1000 [ 296.307485][T14370] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 296.369693][T14384] veth15: entered promiscuous mode [ 296.391327][T14377] wg1 speed is unknown, defaulting to 1000 [ 296.482686][T14374] syzkaller0: entered promiscuous mode [ 296.492498][T14374] syzkaller0: entered allmulticast mode [ 296.506824][T14377] wg1 speed is unknown, defaulting to 1000 [ 296.729500][T14390] bond9: option ad_select: invalid value (254) [ 296.773793][T14390] bond9 (unregistering): Released all slaves [ 296.865152][T14383] wg1 speed is unknown, defaulting to 1000 [ 296.877133][T14383] wg1 speed is unknown, defaulting to 1000 [ 297.003165][T14404] netlink: 'syz.3.2081': attribute type 1 has an invalid length. [ 297.029278][T14401] netlink: 'syz.3.2081': attribute type 1 has an invalid length. [ 297.038671][T14401] netlink: 'syz.3.2081': attribute type 3 has an invalid length. [ 297.046715][T14401] netlink: 'syz.3.2081': attribute type 3 has an invalid length. [ 297.544236][T14428] netlink: 'syz.2.2086': attribute type 1 has an invalid length. [ 298.054036][T14459] tipc: Enabling of bearer rejected, already enabled [ 298.091904][T14458] __nla_validate_parse: 8 callbacks suppressed [ 298.091917][T14458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2098'. [ 298.248974][T14475] bridge0: port 1(veth1_virt_wifi) entered blocking state [ 298.257032][T14475] bridge0: port 1(veth1_virt_wifi) entered disabled state [ 298.265052][T14475] veth1_virt_wifi: entered allmulticast mode [ 298.276281][T14475] veth1_virt_wifi: entered promiscuous mode [ 298.885746][T14499] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 298.919333][T14500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2107'. [ 298.941254][T14500] netlink: 'syz.2.2107': attribute type 21 has an invalid length. [ 298.983645][T14500] tap0: tun_chr_ioctl cmd 35111 [ 299.128081][T14521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2115'. [ 299.161475][T14522] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 299.229431][T14521] macvtap1: entered promiscuous mode [ 299.253426][T14521] macvtap1: entered allmulticast mode [ 299.290353][T14521] batadv0: entered allmulticast mode [ 299.306491][T14521] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 299.344099][T14525] batadv0: left allmulticast mode [ 299.345899][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2117'. [ 299.358494][T14530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2117'. [ 299.367466][T14530] netlink: 'syz.1.2117': attribute type 12 has an invalid length. [ 299.387422][T14530] netlink: 'syz.1.2117': attribute type 14 has an invalid length. [ 299.604572][T14547] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2122'. [ 299.775978][T14559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2126'. [ 299.868821][T14567] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2129'. [ 299.892923][T14570] tipc: Enabled bearer , priority 0 [ 299.908549][T14571] tipc: Enabling of bearer rejected, already enabled [ 299.946276][T14570] tipc: Resetting bearer [ 299.955901][T14566] tipc: Disabling bearer [ 303.154267][T14594] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2136'. [ 303.305401][T14607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2138'. [ 303.324446][T14602] wg1 speed is unknown, defaulting to 1000 [ 303.479908][T14611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2138'. [ 303.497717][T14602] wg1 speed is unknown, defaulting to 1000 [ 303.613127][T14626] netlink: 4348 bytes leftover after parsing attributes in process `syz.3.2142'. [ 303.623258][T14617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2140'. [ 303.672686][T14626] netlink: 4348 bytes leftover after parsing attributes in process `syz.3.2142'. [ 303.775418][T14630] ipvlan0: entered promiscuous mode [ 303.793128][T14630] ipvlan0: entered allmulticast mode [ 303.814312][T14630] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 303.871659][T14640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2146'. [ 303.913264][T14640] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 304.225565][T14653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2150'. [ 304.449791][T14671] netlink: 'syz.0.2155': attribute type 1 has an invalid length. [ 304.574584][T14677] tipc: Can't bind to reserved service type 0 [ 304.605375][T14671] syzkaller0: left promiscuous mode [ 304.619997][T14671] syzkaller0: left allmulticast mode [ 304.704230][T14682] IPv6: NLM_F_CREATE should be specified when creating new route [ 304.892938][T14696] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2161'. [ 305.117704][T14710] netlink: 236 bytes leftover after parsing attributes in process `syz.4.2166'. [ 305.167213][T12247] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 305.213275][T14715] syzkaller0: entered promiscuous mode [ 305.219497][T14715] syzkaller0: entered allmulticast mode [ 305.384462][T14723] netlink: 'syz.3.2171': attribute type 5 has an invalid length. [ 305.447290][T12247] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 305.842440][T14744] wg1 speed is unknown, defaulting to 1000 [ 305.864648][T14744] wg1 speed is unknown, defaulting to 1000 [ 305.875080][T14747] wg1 speed is unknown, defaulting to 1000 [ 305.897259][T14747] wg1 speed is unknown, defaulting to 1000 [ 305.923823][T14750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.270440][T14767] wg1 speed is unknown, defaulting to 1000 [ 306.329916][T14767] wg1 speed is unknown, defaulting to 1000 [ 306.652287][T14786] veth13: entered promiscuous mode [ 307.093617][T14824] netlink: 'syz.2.2194': attribute type 2 has an invalid length. [ 307.115616][T14824] netlink: 'syz.2.2194': attribute type 1 has an invalid length. [ 307.129383][T14815] syzkaller1: entered allmulticast mode [ 307.492412][T14836] tipc: Enabled bearer , priority 0 [ 307.500618][T14836] syzkaller0: entered promiscuous mode [ 307.506119][T14836] syzkaller0: entered allmulticast mode [ 307.637489][T12247] wg1 speed is unknown, defaulting to 1000 [ 307.663025][T14835] tipc: Resetting bearer [ 307.705673][T14835] tipc: Disabling bearer [ 307.820791][T14869] netlink: 'syz.2.2207': attribute type 11 has an invalid length. [ 307.828860][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 307.835458][T14869] netlink: 'syz.2.2207': attribute type 11 has an invalid length. [ 308.237300][T14891] __nla_validate_parse: 12 callbacks suppressed [ 308.237313][T14891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2213'. [ 308.252687][T14891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2213'. [ 308.700624][T14899] syzkaller1: entered promiscuous mode [ 308.706489][T14899] syzkaller1: entered allmulticast mode [ 308.728312][T14899] gtp0: entered promiscuous mode [ 308.738745][T14899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2216'. [ 308.951199][T14903] sctp: [Deprecated]: syz.4.2218 (pid 14903) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.951199][T14903] Use struct sctp_sack_info instead [ 309.391718][T14930] siw: device registration error -23 [ 309.435183][T14934] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2228'. [ 309.446513][T14934] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 309.511596][T14936] netlink: 'syz.2.2229': attribute type 6 has an invalid length. [ 309.660683][T14941] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2231'. [ 310.190460][T14961] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2238'. [ 310.322822][T14969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2240'. [ 310.428758][T14966] wg1 speed is unknown, defaulting to 1000 [ 310.454698][T14966] wg1 speed is unknown, defaulting to 1000 [ 310.565611][T14988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2245'. [ 310.697734][T14994] netlink: 'syz.1.2246': attribute type 1 has an invalid length. [ 310.746391][T14994] bond6: entered promiscuous mode [ 310.752265][T14994] bond6: entered allmulticast mode [ 310.757954][T14994] 8021q: adding VLAN 0 to HW filter on device bond6 [ 310.774904][T14984] wg1 speed is unknown, defaulting to 1000 [ 310.887580][T14997] 8021q: adding VLAN 0 to HW filter on device bond7 [ 310.908640][T14997] bond7: entered promiscuous mode [ 310.913862][T14997] bond7: entered allmulticast mode [ 310.947641][T14997] bond6: (slave bond7): Enslaving as a backup interface with a down link [ 310.956143][T14984] wg1 speed is unknown, defaulting to 1000 [ 311.116279][T15001] netlink: 'syz.1.2247': attribute type 2 has an invalid length. [ 311.597466][T15020] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2252'. [ 311.598780][ T30] audit: type=1107 audit(1762696510.318:11): pid=15018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='7ÓšUFXÉŽŠzTš'xâ”hÒê4—dÅœ}=-ÕTÔFçëàï3' [ 311.638339][T15019] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2252'. [ 311.709298][T15015] wg1 speed is unknown, defaulting to 1000 [ 311.997459][T15015] wg1 speed is unknown, defaulting to 1000 [ 312.831964][T15042] wg1 speed is unknown, defaulting to 1000 [ 312.859002][T15042] wg1 speed is unknown, defaulting to 1000 [ 313.456839][T15061] netlink: 'syz.0.2261': attribute type 1 has an invalid length. [ 313.530343][T15061] bond6: entered promiscuous mode [ 313.538148][T15061] bond6: entered allmulticast mode [ 313.543707][T15061] 8021q: adding VLAN 0 to HW filter on device bond6 [ 313.591191][T15063] tipc: Enabling of bearer rejected, already enabled [ 313.640730][T15065] macvlan2: entered promiscuous mode [ 313.669067][T15065] macvlan2: entered allmulticast mode [ 313.685126][T15065] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 313.754737][T15072] tipc: Invalid UDP bearer configuration [ 313.754789][T15072] tipc: Enabling of bearer rejected, failed to enable media [ 313.993411][T15080] netlink: 'syz.0.2266': attribute type 1 has an invalid length. [ 314.046054][T15084] __nla_validate_parse: 1 callbacks suppressed [ 314.046071][T15084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2266'. [ 314.131622][T15084] bond7 (unregistering): Released all slaves [ 314.535332][T15098] netlink: 'syz.1.2270': attribute type 24 has an invalid length. [ 314.563026][T15099] netlink: 'syz.1.2270': attribute type 24 has an invalid length. [ 314.579037][T15103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2271'. [ 315.240233][T15131] netlink: 'syz.4.2276': attribute type 11 has an invalid length. [ 315.462526][T15131] veth0_macvtap: left promiscuous mode [ 315.800071][T15148] netlink: 'syz.2.2280': attribute type 1 has an invalid length. [ 315.852901][T15148] bond6: entered promiscuous mode [ 315.859053][T15148] 8021q: adding VLAN 0 to HW filter on device bond6 [ 315.877406][T15148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2280'. [ 315.905928][T15148] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2280'. [ 315.922518][T15156] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2283'. [ 315.954455][T15148] netlink: 'syz.2.2280': attribute type 13 has an invalid length. [ 315.969757][T15148] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.977444][T15148] IPv6: NLM_F_CREATE should be set when creating new route [ 315.984669][T15148] IPv6: NLM_F_CREATE should be set when creating new route [ 316.006767][T15148] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 316.071696][T15156] wg1 speed is unknown, defaulting to 1000 [ 316.095981][T15167] wg1 speed is unknown, defaulting to 1000 [ 316.104612][T15156] wg1 speed is unknown, defaulting to 1000 [ 316.122966][T15167] wg1 speed is unknown, defaulting to 1000 [ 316.134720][T15163] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2284'. [ 316.293116][T15175] netlink: 'syz.1.2288': attribute type 10 has an invalid length. [ 316.325289][T15175] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2288'. [ 316.485512][T15187] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2291'. [ 316.608021][T15187] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2291'. [ 316.727074][T15189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2291'. [ 316.776748][T15197] syzkaller1: entered promiscuous mode [ 316.783923][T15197] syzkaller1: entered allmulticast mode [ 316.928527][T15215] netlink: 'syz.3.2296': attribute type 3 has an invalid length. [ 316.945462][T15168] netlink: 'syz.2.2285': attribute type 6 has an invalid length. [ 317.192774][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.238633][T15231] wg1 speed is unknown, defaulting to 1000 [ 317.256546][T15231] wg1 speed is unknown, defaulting to 1000 [ 317.832169][T15255] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.848740][T15255] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.984083][T15255] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.012179][T15255] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.030599][T15278] netlink: 'syz.3.2315': attribute type 8 has an invalid length. [ 318.039151][T15278] sch_fq: defrate 0 ignored. [ 318.112974][T15255] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.137415][T15255] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.259860][T15293] xt_bpf: check failed: parse error [ 318.336604][T15255] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.347300][T15255] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.548714][ T3481] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.577015][ T3481] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.608194][ T3481] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.623628][ T3481] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.661895][ T3481] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.678969][ T3481] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.718739][ T1172] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 318.727441][ T1172] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.784631][T15318] wg1 speed is unknown, defaulting to 1000 [ 318.800948][T15318] wg1 speed is unknown, defaulting to 1000 [ 318.895781][T15320] pim6reg1: entered promiscuous mode [ 318.907115][T15320] pim6reg1: entered allmulticast mode [ 319.080237][T15330] netlink: 'syz.3.2328': attribute type 32 has an invalid length. [ 319.338101][T15339] bond0: Caught tx_queue_len zero misconfig [ 319.398037][T15339] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 319.425765][T15342] __nla_validate_parse: 6 callbacks suppressed [ 319.425783][T15342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2332'. [ 319.542569][T15347] tipc: Enabled bearer , priority 0 [ 319.552098][T15347] syzkaller0: entered promiscuous mode [ 319.558327][T15347] syzkaller0: entered allmulticast mode [ 319.579466][T15346] tipc: Resetting bearer [ 319.622054][T15346] tipc: Disabling bearer [ 319.747203][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 319.999443][T15381] netlink: 276 bytes leftover after parsing attributes in process `syz.2.2345'. [ 321.070183][T15408] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2356'. [ 321.153483][T15415] dvmrp1: entered allmulticast mode [ 321.232605][T15419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2357'. [ 321.276005][T15425] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2359'. [ 321.291831][T15419] bond0: (slave dummy0): Releasing backup interface [ 321.321529][T15429] veth0: entered promiscuous mode [ 321.327282][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2359'. [ 321.362335][T15425] veth0 (unregistering): left promiscuous mode [ 321.639883][T15446] netlink: 'syz.2.2366': attribute type 1 has an invalid length. [ 321.669442][T15446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 321.695279][T15448] wg1 speed is unknown, defaulting to 1000 [ 321.722099][T15449] wg1 speed is unknown, defaulting to 1000 [ 321.722099][T15448] wg1 speed is unknown, defaulting to 1000 [ 321.755503][T15449] wg1 speed is unknown, defaulting to 1000 [ 321.827916][T15455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2366'. [ 322.014481][T15453] veth1_macvtap: left promiscuous mode [ 322.023326][T15453] macsec0: entered allmulticast mode [ 322.064147][T15462] ipt_REJECT: ECHOREPLY no longer supported. [ 322.075314][T15460] veth1_macvtap: entered promiscuous mode [ 322.091914][T15460] veth1_macvtap: entered allmulticast mode [ 322.115324][T15448] netlink: 'syz.4.2365': attribute type 6 has an invalid length. [ 322.123666][T15460] macsec0: left allmulticast mode [ 322.128932][T15460] veth1_macvtap: left allmulticast mode [ 322.238183][T15470] netlink: 'syz.1.2371': attribute type 1 has an invalid length. [ 322.246788][T15470] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2371'. [ 322.313230][ T25] block nbd0: Possible stuck request ffff888024f0e000: control (read@0,1024B). Runtime 210 seconds [ 322.325482][ T25] block nbd0: Possible stuck request ffff888024f0e1c0: control (read@1024,1024B). Runtime 210 seconds [ 322.327577][T15479] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2371'. [ 322.337290][ T25] block nbd0: Possible stuck request ffff888024f0e380: control (read@2048,1024B). Runtime 210 seconds [ 322.360767][ T25] block nbd0: Possible stuck request ffff888024f0e540: control (read@3072,1024B). Runtime 210 seconds [ 322.489564][T15486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2375'. [ 322.624857][T12247] wg1 speed is unknown, defaulting to 1000 [ 322.644402][T12247] syz0: Port: 1 Link DOWN [ 323.102929][T15525] bridge35: entered allmulticast mode [ 323.157529][T15530] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 323.587758][T11571] block nbd3: Possible stuck request ffff88802540e000: control (read@0,1024B). Runtime 210 seconds [ 323.598745][T11571] block nbd3: Possible stuck request ffff88802540e1c0: control (read@1024,1024B). Runtime 210 seconds [ 323.610998][T11571] block nbd3: Possible stuck request ffff88802540e380: control (read@2048,1024B). Runtime 210 seconds [ 323.622564][T11571] block nbd3: Possible stuck request ffff88802540e540: control (read@3072,1024B). Runtime 210 seconds [ 323.749668][T15553] wg1 speed is unknown, defaulting to 1000 [ 323.814636][T15553] wg1 speed is unknown, defaulting to 1000 [ 323.958074][T15575] SET target dimension over the limit! [ 324.049799][T15580] wg1 speed is unknown, defaulting to 1000 [ 324.057583][T15580] wg1 speed is unknown, defaulting to 1000 [ 324.185797][T15583] 8021q: adding VLAN 0 to HW filter on device bond7 [ 324.434687][T15576] wg1 speed is unknown, defaulting to 1000 [ 324.446606][T15576] wg1 speed is unknown, defaulting to 1000 [ 324.525181][ T30] audit: type=1800 audit(1762696523.248:12): pid=15599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2400" name="memory.events" dev="tmpfs" ino=2505 res=0 errno=0 [ 324.560107][T15602] __nla_validate_parse: 7 callbacks suppressed [ 324.560136][T15602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2401'. [ 324.622244][T15602] bond7: option broadcast_neighbor: invalid value (5) [ 324.631389][T15602] bond7 (unregistering): Released all slaves [ 324.782948][ T5964] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 324.798866][T15599] wg1 speed is unknown, defaulting to 1000 [ 324.808410][T15599] wg1 speed is unknown, defaulting to 1000 [ 324.977408][ T5964] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 325.245309][T15623] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.259921][T15623] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 325.441359][T15636] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2408'. [ 325.443469][T15635] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2409'. [ 325.619620][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 325.676128][T15634] wg1 speed is unknown, defaulting to 1000 [ 325.682407][T15635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2409'. [ 325.796670][T15634] wg1 speed is unknown, defaulting to 1000 [ 325.864192][T15644] xt_HMARK: spi-set and port-set can't be combined [ 326.070147][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 326.070332][T15652] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2413'. [ 326.510397][T15664] can: request_module (can-proto-0) failed. [ 326.550599][ T5964] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 326.620190][T15677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2417'. [ 326.672881][T15680] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.770156][T15679] wg1 speed is unknown, defaulting to 1000 [ 326.808741][T15679] wg1 speed is unknown, defaulting to 1000 [ 326.889847][T15690] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2423'. [ 326.899433][T15690] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2423'. [ 326.929460][T15683] wg1 speed is unknown, defaulting to 1000 [ 326.944403][T15683] wg1 speed is unknown, defaulting to 1000 [ 327.011849][T15690] wg1 speed is unknown, defaulting to 1000 [ 327.050247][T15688] wg1 speed is unknown, defaulting to 1000 [ 327.080007][T15690] wg1 speed is unknown, defaulting to 1000 [ 327.092936][T15688] wg1 speed is unknown, defaulting to 1000 [ 327.235082][T15695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2425'. [ 327.672591][T15717] wg1 speed is unknown, defaulting to 1000 [ 327.699934][T15717] wg1 speed is unknown, defaulting to 1000 [ 327.763764][T15737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2431'. [ 327.792666][T15734] bond8 (unregistering): Released all slaves [ 327.895697][T15739] syzkaller0: entered promiscuous mode [ 327.911552][T15739] syzkaller0: entered allmulticast mode [ 328.037784][T15739] netem: change failed [ 328.613231][T15791] netlink: 'syz.3.2449': attribute type 5 has an invalid length. [ 329.218285][T15826] wg1 speed is unknown, defaulting to 1000 [ 329.229541][T15826] wg1 speed is unknown, defaulting to 1000 [ 329.372559][T15838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.743294][T15841] netlink: 'syz.4.2459': attribute type 6 has an invalid length. [ 330.054450][T15847] netlink: 'syz.1.2464': attribute type 10 has an invalid length. [ 330.074420][T15847] dummy0: entered allmulticast mode [ 330.083923][T15847] team0: Port device dummy0 added [ 330.117328][T15847] netlink: 'syz.1.2464': attribute type 10 has an invalid length. [ 330.241862][T15847] dummy0: left allmulticast mode [ 330.251383][T15857] __nla_validate_parse: 9 callbacks suppressed [ 330.251402][T15857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2466'. [ 330.278463][T15858] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2467'. [ 330.308572][T15847] team0: Port device dummy0 removed [ 330.816512][T15878] sctp: [Deprecated]: syz.2.2471 (pid 15878) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.816512][T15878] Use struct sctp_sack_info instead [ 330.857513][T15880] sctp: [Deprecated]: syz.2.2471 (pid 15880) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.857513][T15880] Use struct sctp_sack_info instead [ 331.085020][T15895] wg1 speed is unknown, defaulting to 1000 [ 331.105016][T15895] wg1 speed is unknown, defaulting to 1000 [ 331.702936][T15929] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 331.724278][T15929] bond8 (unregistering): Released all slaves [ 332.171710][T15950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2490'. [ 332.195595][T15950] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2490'. [ 332.691962][T15977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2497'. [ 333.263895][T15998] netlink: 'syz.2.2502': attribute type 1 has an invalid length. [ 333.271958][T15998] nbd: error processing sock list [ 333.410700][T16006] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2503'. [ 333.417328][T15995] syzkaller0: entered promiscuous mode [ 333.428720][T15995] syzkaller0: entered allmulticast mode [ 333.592583][T16014] wg1 speed is unknown, defaulting to 1000 [ 333.599401][T16013] tipc: Enabled bearer , priority 0 [ 333.606376][T16009] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16) [ 333.639840][T16014] wg1 speed is unknown, defaulting to 1000 [ 333.708905][T16018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2507'. [ 333.720154][T16018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2507'. [ 333.740868][T16018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2507'. [ 333.766310][T16018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2507'. [ 333.917066][T16027] netlink: 'syz.0.2508': attribute type 12 has an invalid length. [ 333.927593][T16027] netlink: 'syz.0.2508': attribute type 4 has an invalid length. [ 334.064809][T15993] tipc: Resetting bearer [ 334.108738][T15993] tipc: Disabling bearer [ 334.230047][T16037] xt_l2tp: missing protocol rule (udp|l2tpip) [ 334.268685][T16041] netlink: 'syz.3.2514': attribute type 1 has an invalid length. [ 334.374326][T16040] wg1 speed is unknown, defaulting to 1000 [ 334.411488][T16040] wg1 speed is unknown, defaulting to 1000 [ 334.532794][T16046] wg1 speed is unknown, defaulting to 1000 [ 334.541412][T16046] wg1 speed is unknown, defaulting to 1000 [ 334.815442][T16069] bond0: Error: Cannot enslave bond to itself. [ 334.873391][T16070] openvswitch: netlink: Key type 58 is out of range max 32 [ 334.905231][T16070] wg1 speed is unknown, defaulting to 1000 [ 334.918853][T16070] wg1 speed is unknown, defaulting to 1000 [ 334.941922][T16073] netlink: 'syz.4.2518': attribute type 1 has an invalid length. [ 335.347643][T16079] wg1 speed is unknown, defaulting to 1000 [ 335.385632][T16090] netlink: 'syz.0.2524': attribute type 13 has an invalid length. [ 335.393805][T16090] netlink: 'syz.0.2524': attribute type 17 has an invalid length. [ 335.514593][T16079] wg1 speed is unknown, defaulting to 1000 [ 335.523873][T16090] erspan0: left allmulticast mode [ 335.569080][T16090] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 335.709609][T16092] wg1 speed is unknown, defaulting to 1000 [ 335.724348][T16092] wg1 speed is unknown, defaulting to 1000 [ 335.725245][T16100] wg1 speed is unknown, defaulting to 1000 [ 335.806417][T16100] wg1 speed is unknown, defaulting to 1000 [ 335.943331][T16107] netlink: 'syz.1.2528': attribute type 1 has an invalid length. [ 336.378892][T16122] __nla_validate_parse: 3 callbacks suppressed [ 336.378910][T16122] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2531'. [ 336.494847][T16121] wg1 speed is unknown, defaulting to 1000 [ 336.520629][T16121] wg1 speed is unknown, defaulting to 1000 [ 337.317659][T16151] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2537'. [ 337.618996][T16167] xt_HMARK: proto mask must be zero with L3 mode [ 338.892572][T16162] veth11: entered promiscuous mode [ 338.934509][T16170] tipc: Enabled bearer , priority 0 [ 339.022517][T16171] syzkaller0: entered promiscuous mode [ 339.028314][T16171] syzkaller0: entered allmulticast mode [ 339.036183][T16171] tipc: Resetting bearer [ 339.111662][ T977] tipc: Resetting bearer [ 339.119932][T16163] tipc: Resetting bearer [ 340.419839][T16163] tipc: Disabling bearer [ 340.636675][T16208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2549'. [ 340.670352][T16211] ip6gretap3: entered promiscuous mode [ 340.864524][T16229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2553'. [ 340.874147][T16228] x_tables: duplicate underflow at hook 4 [ 340.888226][T16228] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2554'. [ 340.906991][T16229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2553'. [ 340.927005][T16229] netlink: 'syz.3.2553': attribute type 6 has an invalid length. [ 341.130286][T16243] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.149376][T16243] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.194642][T16247] syzkaller0: entered promiscuous mode [ 341.214565][T16247] syzkaller0: entered allmulticast mode [ 341.257484][T16243] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.276738][T16243] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.340578][T16243] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.361914][T16243] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.362692][T16262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2563'. [ 341.395228][T16262] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 341.466580][T16265] netlink: 'syz.2.2563': attribute type 10 has an invalid length. [ 342.844557][T16243] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 342.854536][T16243] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.868245][T16265] veth0_virt_wifi: entered allmulticast mode [ 342.876562][T16265] team0: Port device veth0_virt_wifi added [ 342.962018][T16277] xt_l2tp: wrong L2TP version: 1 [ 343.036364][ T76] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.048560][ T76] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.066764][T16287] veth1: entered allmulticast mode [ 343.098133][ T76] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.107309][ T76] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.133768][ T76] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.155531][ T76] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.203887][ T36] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 343.222527][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.313950][T16300] tipc: Enabled bearer , priority 0 [ 343.333006][T16299] tipc: Disabling bearer [ 343.525412][T16314] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 343.539747][T16316] tipc: Enabled bearer , priority 0 [ 343.547734][T16316] syzkaller0: entered promiscuous mode [ 343.575041][T16316] syzkaller0: entered allmulticast mode [ 343.600784][T16312] tipc: Resetting bearer [ 343.643074][T16318] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2577'. [ 343.654078][T16312] tipc: Disabling bearer [ 343.711901][T16321] wg1 speed is unknown, defaulting to 1000 [ 343.732994][T16321] wg1 speed is unknown, defaulting to 1000 [ 343.887358][T16334] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2579'. [ 343.903023][T16333] syzkaller1: entered promiscuous mode [ 343.915335][T16333] syzkaller1: entered allmulticast mode [ 344.308114][T16352] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2585'. [ 344.400526][T16355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2587'. [ 344.545570][T16363] x_tables: duplicate underflow at hook 1 [ 344.626721][T16365] syzkaller1: entered promiscuous mode [ 344.645628][T16365] syzkaller1: entered allmulticast mode [ 344.708129][T16371] netlink: 'syz.4.2589': attribute type 13 has an invalid length. [ 344.716798][T16371] netlink: 'syz.4.2589': attribute type 17 has an invalid length. [ 344.898697][T16371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.000657][T16371] 8021q: adding VLAN 0 to HW filter on device ` [ 345.016236][T16371] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 345.096534][T16381] wg1 speed is unknown, defaulting to 1000 [ 345.132683][T16381] wg1 speed is unknown, defaulting to 1000 [ 345.143164][T16380] wg1 speed is unknown, defaulting to 1000 [ 345.193043][T16372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.212854][T16380] wg1 speed is unknown, defaulting to 1000 [ 345.823080][T16406] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2599'. [ 346.136231][T16426] vxcan1: entered allmulticast mode [ 346.576016][T16460] tipc: Enabled bearer , priority 0 [ 346.583950][T16460] syzkaller0: entered promiscuous mode [ 346.589666][T16460] syzkaller0: entered allmulticast mode [ 346.655662][T16461] wg1 speed is unknown, defaulting to 1000 [ 346.657562][T16460] tipc: Resetting bearer [ 346.669641][T16461] wg1 speed is unknown, defaulting to 1000 [ 346.753998][T16460] tipc: Resetting bearer [ 346.801712][T16460] tipc: Disabling bearer [ 346.973712][T16461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2613'. [ 347.049112][T16485] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2618'. [ 347.099002][T16490] netlink: 'syz.4.2618': attribute type 32 has an invalid length. [ 347.113855][T16490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2618'. [ 347.216794][T16490] bond7: option coupled_control: invalid value (12) [ 347.225879][T16490] bond7 (unregistering): Released all slaves [ 347.442643][T16498] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2622'. [ 347.453904][T16498] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2622'. [ 347.467385][T16498] 0ªX¹¦À: renamed from caif0 [ 347.527091][T16498] 0ªX¹¦À: entered allmulticast mode [ 347.532450][T16498] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 347.783696][T16517] vlan0: entered promiscuous mode [ 347.789006][T16517] bond0: entered promiscuous mode [ 347.829870][T16522] openvswitch: netlink: Missing key (keys=40, expected=80) [ 347.923984][T16530] netlink: 'syz.4.2630': attribute type 6 has an invalid length. [ 348.889093][T16565] __nla_validate_parse: 2 callbacks suppressed [ 348.889112][T16565] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2637'. [ 348.927664][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.947753][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.955982][ T36] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.996712][ T36] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.020427][T16569] netlink: 648 bytes leftover after parsing attributes in process `syz.1.2638'. [ 349.037884][T16569] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2638'. [ 349.050145][T16571] netlink: 'syz.2.2639': attribute type 8 has an invalid length. [ 349.229117][T16584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2641'. [ 349.274453][T16584] 8021q: adding VLAN 0 to HW filter on device bond7 [ 349.293723][T16581] wg1 speed is unknown, defaulting to 1000 [ 349.294050][T16589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2644'. [ 349.317663][T16581] wg1 speed is unknown, defaulting to 1000 [ 349.374783][T16589] 8021q: adding VLAN 0 to HW filter on device bond8 [ 349.405094][T16591] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.417178][T16591] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.546051][T16591] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.567388][T16591] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.612950][T16604] netlink: 32448 bytes leftover after parsing attributes in process `syz.1.2647'. [ 349.625199][T16611] netlink: 'syz.2.2649': attribute type 83 has an invalid length. [ 349.681369][T16591] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.696235][T16591] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.768399][T16591] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.782628][T16591] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.954802][ T1172] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.964834][ T1172] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.985547][T16632] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2654'. [ 349.985781][ T1172] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.004006][ T1172] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.034245][ T1172] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.042769][ T1172] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.063241][ T1172] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 350.072116][ T1172] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.167727][T16645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2658'. [ 350.274698][T16645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 350.358383][T16655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2659'. [ 350.446040][T16654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2660'. [ 350.470955][T16662] netlink: 'syz.4.2661': attribute type 1 has an invalid length. [ 350.493058][T16654] Cannot find del_set index 1 as target [ 350.758308][T16675] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 351.222068][T16694] block nbd1: Unsupported socket: should be TCP or UNIX. [ 351.387001][T16710] netlink: 'syz.0.2676': attribute type 1 has an invalid length. [ 351.424499][T16712] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 351.446504][T16712] team0: No ports can be present during mode change [ 351.458187][T16715] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 351.826516][T16733] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 351.850371][T16733] batman_adv: batadv0: Adding interface: gretap1 [ 351.859249][T16733] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.889506][T16733] batman_adv: batadv0: Interface activated: gretap1 [ 352.318930][T16767] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 352.351884][T16767] IPVS: set_ctl: invalid protocol: 2 224.0.0.2:20001 [ 352.387814][ T25] block nbd0: Possible stuck request ffff888024f0e000: control (read@0,1024B). Runtime 240 seconds [ 352.398913][ T25] block nbd0: Possible stuck request ffff888024f0e1c0: control (read@1024,1024B). Runtime 240 seconds [ 352.410316][ T25] block nbd0: Possible stuck request ffff888024f0e380: control (read@2048,1024B). Runtime 240 seconds [ 352.421458][ T25] block nbd0: Possible stuck request ffff888024f0e540: control (read@3072,1024B). Runtime 240 seconds [ 352.487274][T16772] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 352.650933][T16783] tipc: Enabled bearer , priority 0 [ 352.839592][T16783] syzkaller0: entered promiscuous mode [ 352.845175][T16783] syzkaller0: entered allmulticast mode [ 352.890789][T16801] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 353.113025][T16827] ieee802154 phy1 wpan1: encryption failed: -22 [ 353.667834][T11571] block nbd3: Possible stuck request ffff88802540e000: control (read@0,1024B). Runtime 240 seconds [ 353.678829][T11571] block nbd3: Possible stuck request ffff88802540e1c0: control (read@1024,1024B). Runtime 240 seconds [ 353.690236][T11571] block nbd3: Possible stuck request ffff88802540e380: control (read@2048,1024B). Runtime 240 seconds [ 353.701755][T11571] block nbd3: Possible stuck request ffff88802540e540: control (read@3072,1024B). Runtime 240 seconds [ 354.093856][T16839] __nla_validate_parse: 12 callbacks suppressed [ 354.093873][T16839] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2716'. [ 354.804601][T16799] tipc: Resetting bearer [ 354.825957][T16842] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 354.836107][T16831] kthread_run failed with err -4 [ 354.855079][T16782] tipc: Resetting bearer [ 354.918939][T16782] tipc: Disabling bearer [ 354.951835][T16848] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2717'. [ 355.118154][T16857] netlink: 'syz.2.2721': attribute type 1 has an invalid length. [ 355.188776][T16864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2724'. [ 355.208644][T16860] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2723'. [ 355.317205][T16869] netlink: 'syz.4.2724': attribute type 1 has an invalid length. [ 355.387964][T16879] macsec3: entered promiscuous mode [ 355.393241][T16879] macsec3: entered allmulticast mode [ 355.396593][T16877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2725'. [ 355.444094][T16877] netlink: 'syz.0.2725': attribute type 1 has an invalid length. [ 355.486659][T16877] 8021q: adding VLAN 0 to HW filter on device bond7 [ 355.561834][T16892] netlink: 'syz.4.2730': attribute type 10 has an invalid length. [ 355.584803][T16887] bond7: (slave geneve2): making interface the new active one [ 355.596193][T16887] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 355.649835][T16892] dummy0: entered promiscuous mode [ 355.675081][T16896] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2735'. [ 355.679355][T16892] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 355.688213][T16896] netlink: 'syz.0.2735': attribute type 1 has an invalid length. [ 355.966109][T16921] xt_CT: You must specify a L4 protocol and not use inversions on it [ 355.992900][T16920] bridge36: entered promiscuous mode [ 356.083816][T16924] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2742'. [ 356.096418][T16924] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2742'. [ 356.145999][T16924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2742'. [ 356.200920][T16926] wg1 speed is unknown, defaulting to 1000 [ 356.222426][T16926] wg1 speed is unknown, defaulting to 1000 [ 356.656838][T16957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2750'. [ 356.705519][T16957] vlan2: left promiscuous mode [ 356.710844][T16957] bridge_slave_0: left promiscuous mode [ 356.716680][T16957] bridge0: port 3(vlan2) entered disabled state [ 356.789563][T16962] vxcan1: entered allmulticast mode [ 356.945459][T16966] wg1 speed is unknown, defaulting to 1000 [ 356.954680][T16966] wg1 speed is unknown, defaulting to 1000 [ 357.142428][T16976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.903288][T16979] netlink: 'syz.0.2756': attribute type 1 has an invalid length. [ 371.123861][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 371.132310][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 371.140405][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 371.148516][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 371.156129][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 371.187496][T16981] wg1 speed is unknown, defaulting to 1000 [ 371.194204][T16981] wg1 speed is unknown, defaulting to 1000 [ 371.302177][T16981] chnl_net:caif_netlink_parms(): no params data found [ 371.367956][T16981] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.375129][T16981] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.382462][T16981] bridge_slave_0: entered allmulticast mode [ 371.389860][T16981] bridge_slave_0: entered promiscuous mode [ 371.397888][T16981] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.405010][T16981] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.412299][T16981] bridge_slave_1: entered allmulticast mode [ 371.419335][T16981] bridge_slave_1: entered promiscuous mode [ 371.449457][T16981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.461032][T16981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.491662][T16981] team0: Port device team_slave_0 added [ 371.499485][T16981] team0: Port device team_slave_1 added [ 371.528126][T16981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.535100][T16981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.561402][T16981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.573482][T16981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.580895][T16981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.607128][T16981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.646791][T16981] hsr_slave_0: entered promiscuous mode [ 371.653156][T16981] hsr_slave_1: entered promiscuous mode [ 371.659459][T16981] debugfs: 'hsr0' already exists in 'hsr' [ 371.665181][T16981] Cannot create hsr debugfs directory [ 372.298885][ T5836] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 372.309455][ T5836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 372.321118][ T5836] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 372.330951][ T5836] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 372.339777][ T5827] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 372.340886][ T5836] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 372.349403][ T5827] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 372.362511][ T5827] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 372.370805][ T5827] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 372.378575][ T5827] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 372.396548][T16991] wg1 speed is unknown, defaulting to 1000 [ 372.404301][T16991] wg1 speed is unknown, defaulting to 1000 [ 372.443601][T16993] wg1 speed is unknown, defaulting to 1000 [ 372.455482][T16993] wg1 speed is unknown, defaulting to 1000 [ 372.649903][T16991] chnl_net:caif_netlink_parms(): no params data found [ 372.712802][T16993] chnl_net:caif_netlink_parms(): no params data found [ 372.774584][T16991] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.781922][T16991] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.789433][T16991] bridge_slave_0: entered allmulticast mode [ 372.796535][T16991] bridge_slave_0: entered promiscuous mode [ 372.813309][T16991] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.820540][T16991] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.828033][T16991] bridge_slave_1: entered allmulticast mode [ 372.835029][T16991] bridge_slave_1: entered promiscuous mode [ 372.895791][T16993] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.903106][T16993] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.910611][T16993] bridge_slave_0: entered allmulticast mode [ 372.917858][T16993] bridge_slave_0: entered promiscuous mode [ 372.928433][T16991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.940895][T16991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.950860][T16993] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.958220][T16993] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.965401][T16993] bridge_slave_1: entered allmulticast mode [ 372.972546][T16993] bridge_slave_1: entered promiscuous mode [ 373.034906][T16993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.052644][T16991] team0: Port device team_slave_0 added [ 373.063154][T16991] team0: Port device team_slave_1 added [ 373.072204][T16993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.187557][ T5837] Bluetooth: hci5: command tx timeout [ 373.234870][T16993] team0: Port device team_slave_0 added [ 373.249051][T16991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.256023][T16991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.317112][T16991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.340143][T16993] team0: Port device team_slave_1 added [ 373.390370][ T5827] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 373.409254][ T5827] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 373.419742][T16991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.426714][T16991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.453145][T16991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.463901][ T5827] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 373.482169][T16993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.489423][T16993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.528535][T16993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.528649][ T5827] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 373.542266][T16993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.553468][T16993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.579782][T16993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.580110][ T5827] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 373.611005][ T5829] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 373.622801][ T5829] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 373.639080][ T5829] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 373.653620][ T5829] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 373.662809][ T5829] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 373.709302][T16993] hsr_slave_0: entered promiscuous mode [ 373.715722][T16993] hsr_slave_1: entered promiscuous mode [ 373.722206][T16993] debugfs: 'hsr0' already exists in 'hsr' [ 373.728009][T16993] Cannot create hsr debugfs directory [ 373.739177][T16991] hsr_slave_0: entered promiscuous mode [ 373.745530][T16991] hsr_slave_1: entered promiscuous mode [ 373.752667][T16991] debugfs: 'hsr0' already exists in 'hsr' [ 373.758921][T16991] Cannot create hsr debugfs directory [ 373.877799][T17011] wg1 speed is unknown, defaulting to 1000 [ 373.888470][T17011] wg1 speed is unknown, defaulting to 1000 [ 373.895709][T17009] wg1 speed is unknown, defaulting to 1000 [ 373.923891][T17009] wg1 speed is unknown, defaulting to 1000 [ 374.324661][T17011] chnl_net:caif_netlink_parms(): no params data found [ 374.385510][T17009] chnl_net:caif_netlink_parms(): no params data found [ 374.392497][ T5829] Bluetooth: hci6: command tx timeout [ 374.467788][ T5829] Bluetooth: hci7: command tx timeout [ 374.495321][T17011] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.502899][T17011] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.510365][T17011] bridge_slave_0: entered allmulticast mode [ 374.517497][T17011] bridge_slave_0: entered promiscuous mode [ 374.530556][T17011] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.538441][T17011] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.545623][T17011] bridge_slave_1: entered allmulticast mode [ 374.553430][T17011] bridge_slave_1: entered promiscuous mode [ 374.605130][T17009] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.612499][T17009] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.620127][T17009] bridge_slave_0: entered allmulticast mode [ 374.627319][T17009] bridge_slave_0: entered promiscuous mode [ 374.639487][T17011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.649603][T17009] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.656771][T17009] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.664162][T17009] bridge_slave_1: entered allmulticast mode [ 374.671419][T17009] bridge_slave_1: entered promiscuous mode [ 374.680897][T17011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.738660][T17009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.751352][T17009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.762709][T17011] team0: Port device team_slave_0 added [ 374.782380][T17011] team0: Port device team_slave_1 added [ 374.827453][T17009] team0: Port device team_slave_0 added [ 374.833859][T17011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.840952][T17011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.868285][T17011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.881782][T17009] team0: Port device team_slave_1 added [ 374.901451][T17011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.908673][T17011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.934741][T17011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.963655][T17009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.970774][T17009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.997310][T17009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.010708][T17009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.017686][T17009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.044174][T17009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.091045][T17011] hsr_slave_0: entered promiscuous mode [ 375.097671][T17011] hsr_slave_1: entered promiscuous mode [ 375.103794][T17011] debugfs: 'hsr0' already exists in 'hsr' [ 375.110481][T17011] Cannot create hsr debugfs directory [ 375.159413][T17009] hsr_slave_0: entered promiscuous mode [ 375.166083][T17009] hsr_slave_1: entered promiscuous mode [ 375.172612][T17009] debugfs: 'hsr0' already exists in 'hsr' [ 375.178525][T17009] Cannot create hsr debugfs directory [ 375.267168][ T5829] Bluetooth: hci5: command tx timeout [ 375.667539][ T5829] Bluetooth: hci8: command tx timeout [ 375.747311][ T5829] Bluetooth: hci9: command tx timeout [ 376.467180][ T5829] Bluetooth: hci6: command tx timeout [ 376.547223][ T5829] Bluetooth: hci7: command tx timeout [ 377.347060][ T5829] Bluetooth: hci5: command tx timeout [ 377.747203][ T5829] Bluetooth: hci8: command tx timeout [ 377.827917][ T5829] Bluetooth: hci9: command tx timeout [ 378.547225][ T5829] Bluetooth: hci6: command tx timeout [ 378.630423][ T5829] Bluetooth: hci7: command tx timeout [ 378.630475][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.427281][ T5829] Bluetooth: hci5: command tx timeout [ 379.827194][ T5829] Bluetooth: hci8: command tx timeout [ 379.907346][ T5829] Bluetooth: hci9: command tx timeout [ 380.627152][ T5829] Bluetooth: hci6: command tx timeout [ 380.707172][ T5829] Bluetooth: hci7: command tx timeout [ 381.907138][ T5829] Bluetooth: hci8: command tx timeout [ 381.987127][ T5829] Bluetooth: hci9: command tx timeout [ 382.467404][ T25] block nbd0: Possible stuck request ffff888024f0e000: control (read@0,1024B). Runtime 270 seconds [ 382.478350][ T25] block nbd0: Possible stuck request ffff888024f0e1c0: control (read@1024,1024B). Runtime 270 seconds [ 382.489693][ T25] block nbd0: Possible stuck request ffff888024f0e380: control (read@2048,1024B). Runtime 270 seconds [ 382.501623][ T25] block nbd0: Possible stuck request ffff888024f0e540: control (read@3072,1024B). Runtime 270 seconds [ 383.748142][T11571] block nbd3: Possible stuck request ffff88802540e000: control (read@0,1024B). Runtime 270 seconds [ 383.759002][T11571] block nbd3: Possible stuck request ffff88802540e1c0: control (read@1024,1024B). Runtime 270 seconds [ 383.770032][T11571] block nbd3: Possible stuck request ffff88802540e380: control (read@2048,1024B). Runtime 270 seconds [ 383.781091][T11571] block nbd3: Possible stuck request ffff88802540e540: control (read@3072,1024B). Runtime 270 seconds [ 412.549078][ T25] block nbd0: Possible stuck request ffff888024f0e000: control (read@0,1024B). Runtime 300 seconds [ 412.560162][ T25] block nbd0: Possible stuck request ffff888024f0e1c0: control (read@1024,1024B). Runtime 300 seconds [ 412.571190][ T25] block nbd0: Possible stuck request ffff888024f0e380: control (read@2048,1024B). Runtime 300 seconds [ 412.582255][ T25] block nbd0: Possible stuck request ffff888024f0e540: control (read@3072,1024B). Runtime 300 seconds [ 413.827424][T11571] block nbd3: Possible stuck request ffff88802540e000: control (read@0,1024B). Runtime 300 seconds [ 413.838258][T11571] block nbd3: Possible stuck request ffff88802540e1c0: control (read@1024,1024B). Runtime 300 seconds [ 413.849301][T11571] block nbd3: Possible stuck request ffff88802540e380: control (read@2048,1024B). Runtime 300 seconds [ 413.860363][T11571] block nbd3: Possible stuck request ffff88802540e540: control (read@3072,1024B). Runtime 300 seconds [ 431.709361][ T5827] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 431.718768][ T5827] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 431.726934][ T5827] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 431.735109][ T5827] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 431.743960][ T5827] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 431.774181][T17026] wg1 speed is unknown, defaulting to 1000 [ 431.781138][T17026] wg1 speed is unknown, defaulting to 1000 [ 431.899879][T17026] chnl_net:caif_netlink_parms(): no params data found [ 431.970987][T17026] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.978190][T17026] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.985398][T17026] bridge_slave_0: entered allmulticast mode [ 431.992873][T17026] bridge_slave_0: entered promiscuous mode [ 432.001012][T17026] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.008338][T17026] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.015609][T17026] bridge_slave_1: entered allmulticast mode [ 432.023043][T17026] bridge_slave_1: entered promiscuous mode [ 432.053185][T17026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.064875][T17026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.096085][T17026] team0: Port device team_slave_0 added [ 432.104132][T17026] team0: Port device team_slave_1 added [ 432.130901][T17026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.137921][T17026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.164679][T17026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.176609][T17026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.183620][T17026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.209524][T17026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.252414][T17026] hsr_slave_0: entered promiscuous mode [ 432.258850][T17026] hsr_slave_1: entered promiscuous mode [ 432.264999][T17026] debugfs: 'hsr0' already exists in 'hsr' [ 432.270816][T17026] Cannot create hsr debugfs directory [ 432.909584][ T5827] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 432.921136][ T5827] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 432.928938][ T5837] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 432.929261][ T5827] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 432.939345][ T5837] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 432.944782][ T5827] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 432.952777][ T5837] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 432.961310][ T5827] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 432.965782][ T5837] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 432.984564][ T5837] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 433.009915][T17036] wg1 speed is unknown, defaulting to 1000 [ 433.018477][T17036] wg1 speed is unknown, defaulting to 1000 [ 433.039993][T17038] wg1 speed is unknown, defaulting to 1000 [ 433.056243][T17038] wg1 speed is unknown, defaulting to 1000 [ 433.263976][T17036] chnl_net:caif_netlink_parms(): no params data found [ 433.323155][T17038] chnl_net:caif_netlink_parms(): no params data found [ 433.400302][T17036] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.408098][T17036] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.415303][T17036] bridge_slave_0: entered allmulticast mode [ 433.422890][T17036] bridge_slave_0: entered promiscuous mode [ 433.440336][T17036] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.447682][T17036] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.454952][T17036] bridge_slave_1: entered allmulticast mode [ 433.462166][T17036] bridge_slave_1: entered promiscuous mode [ 433.515882][T17038] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.523573][T17038] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.531478][T17038] bridge_slave_0: entered allmulticast mode [ 433.538560][T17038] bridge_slave_0: entered promiscuous mode [ 433.548727][T17036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.558595][T17038] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.565717][T17038] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.573528][T17038] bridge_slave_1: entered allmulticast mode [ 433.581025][T17038] bridge_slave_1: entered promiscuous mode [ 433.590635][T17036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.649646][T17036] team0: Port device team_slave_0 added [ 433.658692][T17038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.671070][T17036] team0: Port device team_slave_1 added [ 433.679153][T17038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.739247][T17036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.746218][T17036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.772573][T17036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.785813][T17038] team0: Port device team_slave_0 added [ 433.792559][T17036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.799729][T17036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.825975][T17036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.837077][ T5836] Bluetooth: hci10: command tx timeout [ 433.847433][T17038] team0: Port device team_slave_1 added [ 433.876569][T17038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.883791][T17038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.910031][T17038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.941621][T17038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.948971][T17038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.975120][T17038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.008849][T17036] hsr_slave_0: entered promiscuous mode [ 434.015246][T17036] hsr_slave_1: entered promiscuous mode [ 434.021664][T17036] debugfs: 'hsr0' already exists in 'hsr' [ 434.027555][T17036] Cannot create hsr debugfs directory [ 434.171000][T17038] hsr_slave_0: entered promiscuous mode [ 434.187608][T17038] hsr_slave_1: entered promiscuous mode [ 434.194166][T17038] debugfs: 'hsr0' already exists in 'hsr' [ 434.207061][T17038] Cannot create hsr debugfs directory [ 434.488646][ T5837] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 434.498701][ T5837] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 434.507487][ T5837] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 434.515596][ T5837] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 434.523543][ T5837] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 434.543353][ T5836] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 434.553784][ T5836] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 434.562739][ T5836] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 434.571965][ T5836] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 434.574190][T17054] wg1 speed is unknown, defaulting to 1000 [ 434.579940][ T5836] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 434.588873][T17054] wg1 speed is unknown, defaulting to 1000 [ 434.739875][T17056] wg1 speed is unknown, defaulting to 1000 [ 434.746679][T17056] wg1 speed is unknown, defaulting to 1000 [ 435.002934][T17054] chnl_net:caif_netlink_parms(): no params data found [ 435.027059][ T5827] Bluetooth: hci11: command tx timeout [ 435.033339][ T5827] Bluetooth: hci12: command tx timeout [ 435.073618][T17056] chnl_net:caif_netlink_parms(): no params data found [ 435.178822][T17054] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.186071][T17054] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.195239][T17054] bridge_slave_0: entered allmulticast mode [ 435.205035][T17054] bridge_slave_0: entered promiscuous mode [ 435.246551][T17054] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.254668][T17054] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.261984][T17054] bridge_slave_1: entered allmulticast mode [ 435.269764][T17054] bridge_slave_1: entered promiscuous mode [ 435.284627][T17056] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.291877][T17056] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.299536][T17056] bridge_slave_0: entered allmulticast mode [ 435.306740][T17056] bridge_slave_0: entered promiscuous mode [ 435.329437][T17056] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.336681][T17056] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.344197][T17056] bridge_slave_1: entered allmulticast mode [ 435.352845][T17056] bridge_slave_1: entered promiscuous mode [ 435.393175][T17054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.418988][T17054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.447596][T17056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.473717][T17056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.496322][T17054] team0: Port device team_slave_0 added [ 435.528291][T17054] team0: Port device team_slave_1 added [ 435.543990][T17056] team0: Port device team_slave_0 added [ 435.582859][T17056] team0: Port device team_slave_1 added [ 435.612338][T17054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.619587][T17054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.645867][T17054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.673598][T17056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.680752][T17056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.707293][T17056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.720301][T17054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.727372][T17054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.753598][T17054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.772578][T17056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.779770][T17056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.805876][T17056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.898791][T17054] hsr_slave_0: entered promiscuous mode [ 435.905273][T17054] hsr_slave_1: entered promiscuous mode [ 435.911197][ T5827] Bluetooth: hci10: command tx timeout [ 435.918313][T17054] debugfs: 'hsr0' already exists in 'hsr' [ 435.924057][T17054] Cannot create hsr debugfs directory [ 435.949530][T17056] hsr_slave_0: entered promiscuous mode [ 435.956019][T17056] hsr_slave_1: entered promiscuous mode [ 435.962603][T17056] debugfs: 'hsr0' already exists in 'hsr' [ 435.968565][T17056] Cannot create hsr debugfs directory [ 436.547122][ T5827] Bluetooth: hci13: command tx timeout [ 436.627245][ T5827] Bluetooth: hci14: command tx timeout [ 437.107320][ T5827] Bluetooth: hci12: command tx timeout [ 437.107327][ T5836] Bluetooth: hci11: command tx timeout [ 437.987114][ T5827] Bluetooth: hci10: command tx timeout [ 438.627038][ T5827] Bluetooth: hci13: command tx timeout [ 438.707152][ T5827] Bluetooth: hci14: command tx timeout [ 439.187174][ T5827] Bluetooth: hci12: command tx timeout [ 439.187190][ T5836] Bluetooth: hci11: command tx timeout [ 440.070702][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.072141][ T5836] Bluetooth: hci10: command tx timeout [ 440.707173][ T5836] Bluetooth: hci13: command tx timeout [ 440.787102][ T5836] Bluetooth: hci14: command tx timeout [ 441.267306][ T5836] Bluetooth: hci12: command tx timeout [ 441.269842][ T5827] Bluetooth: hci11: command tx timeout [ 442.628544][ T25] block nbd0: Possible stuck request ffff888024f0e000: control (read@0,1024B). Runtime 330 seconds [ 442.639405][ T25] block nbd0: Possible stuck request ffff888024f0e1c0: control (read@1024,1024B). Runtime 330 seconds [ 442.650630][ T25] block nbd0: Possible stuck request ffff888024f0e380: control (read@2048,1024B). Runtime 330 seconds [ 442.661814][ T25] block nbd0: Possible stuck request ffff888024f0e540: control (read@3072,1024B). Runtime 330 seconds [ 442.787068][ T5827] Bluetooth: hci13: command tx timeout [ 442.867131][ T5827] Bluetooth: hci14: command tx timeout [ 443.907499][T11571] block nbd3: Possible stuck request ffff88802540e000: control (read@0,1024B). Runtime 330 seconds [ 443.918499][T11571] block nbd3: Possible stuck request ffff88802540e1c0: control (read@1024,1024B). Runtime 330 seconds [ 443.929611][T11571] block nbd3: Possible stuck request ffff88802540e380: control (read@2048,1024B). Runtime 330 seconds [ 443.940787][T11571] block nbd3: Possible stuck request ffff88802540e540: control (read@3072,1024B). Runtime 330 seconds [ 472.708648][ T25] block nbd0: Possible stuck request ffff888024f0e000: control (read@0,1024B). Runtime 360 seconds [ 472.719463][ T25] block nbd0: Possible stuck request ffff888024f0e1c0: control (read@1024,1024B). Runtime 360 seconds [ 472.730438][ T25] block nbd0: Possible stuck request ffff888024f0e380: control (read@2048,1024B). Runtime 360 seconds [ 472.741707][ T25] block nbd0: Possible stuck request ffff888024f0e540: control (read@3072,1024B). Runtime 360 seconds [ 473.987216][T11571] block nbd3: Possible stuck request ffff88802540e000: control (read@0,1024B). Runtime 360 seconds [ 473.998984][T11571] block nbd3: Possible stuck request ffff88802540e1c0: control (read@1024,1024B). Runtime 360 seconds [ 474.010085][T11571] block nbd3: Possible stuck request ffff88802540e380: control (read@2048,1024B). Runtime 360 seconds [ 474.021208][T11571] block nbd3: Possible stuck request ffff88802540e540: control (read@3072,1024B). Runtime 360 seconds [ 492.278907][ T5837] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 492.288467][ T5837] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 492.296592][ T5837] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 492.305733][ T5837] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 492.315326][ T5837] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 492.344038][T17071] wg1 speed is unknown, defaulting to 1000 [ 492.351089][T17071] wg1 speed is unknown, defaulting to 1000 [ 492.467321][T17071] chnl_net:caif_netlink_parms(): no params data found [ 492.537031][T17071] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.544225][T17071] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.552851][T17071] bridge_slave_0: entered allmulticast mode [ 492.560545][T17071] bridge_slave_0: entered promiscuous mode [ 492.568866][T17071] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.576060][T17071] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.583809][T17071] bridge_slave_1: entered allmulticast mode [ 492.591077][T17071] bridge_slave_1: entered promiscuous mode [ 492.621297][T17071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.634184][T17071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.666352][T17071] team0: Port device team_slave_0 added [ 492.674575][T17071] team0: Port device team_slave_1 added [ 492.701505][T17071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.709173][T17071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.735532][T17071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.747662][T17071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.754685][T17071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.780896][T17071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.822536][T17071] hsr_slave_0: entered promiscuous mode [ 492.829540][T17071] hsr_slave_1: entered promiscuous mode [ 492.835670][T17071] debugfs: 'hsr0' already exists in 'hsr' [ 492.841444][T17071] Cannot create hsr debugfs directory [ 493.347197][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 493.467975][ T5827] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 493.478077][ T5827] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 493.486279][ T5827] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 493.495820][ T5827] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 493.503738][ T5829] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 493.503919][ T5827] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 493.514384][ T5829] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 493.528308][ T5836] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 493.537730][ T5836] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 493.546302][ T5836] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 493.560683][T17081] wg1 speed is unknown, defaulting to 1000 [ 493.568654][T17081] wg1 speed is unknown, defaulting to 1000 [ 493.614418][T17083] wg1 speed is unknown, defaulting to 1000 [ 493.626776][T17083] wg1 speed is unknown, defaulting to 1000 [ 493.819584][T17081] chnl_net:caif_netlink_parms(): no params data found [ 493.882994][T17083] chnl_net:caif_netlink_parms(): no params data found [ 493.959950][T17081] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.967422][T17081] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.974658][T17081] bridge_slave_0: entered allmulticast mode [ 493.981920][T17081] bridge_slave_0: entered promiscuous mode [ 493.995264][T17081] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.002683][T17081] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.010059][T17081] bridge_slave_1: entered allmulticast mode [ 494.017533][T17081] bridge_slave_1: entered promiscuous mode [ 494.080898][T17081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.090513][T17083] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.097850][T17083] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.105089][T17083] bridge_slave_0: entered allmulticast mode [ 494.112331][T17083] bridge_slave_0: entered promiscuous mode [ 494.123513][T17081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.133022][T17083] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.140547][T17083] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.148374][T17083] bridge_slave_1: entered allmulticast mode [ 494.155508][T17083] bridge_slave_1: entered promiscuous mode [ 494.207851][T17081] team0: Port device team_slave_0 added [ 494.218019][T17083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.229935][T17081] team0: Port device team_slave_1 added [ 494.240455][T17083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.296349][T17081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.303943][T17081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.330996][T17081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.345110][T17083] team0: Port device team_slave_0 added [ 494.351944][T17081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.359148][T17081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.385584][T17081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.397194][ T5836] Bluetooth: hci15: command tx timeout [ 494.406507][T17083] team0: Port device team_slave_1 added [ 494.451046][T17083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.458286][T17083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.484852][T17083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.518109][T17083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.525060][T17083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.551414][T17083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.568752][T17081] hsr_slave_0: entered promiscuous mode [ 494.575215][T17081] hsr_slave_1: entered promiscuous mode [ 494.581678][T17081] debugfs: 'hsr0' already exists in 'hsr' [ 494.587672][T17081] Cannot create hsr debugfs directory [ 494.767475][T17083] hsr_slave_0: entered promiscuous mode [ 494.774512][T17083] hsr_slave_1: entered promiscuous mode [ 494.788090][T17083] debugfs: 'hsr0' already exists in 'hsr' [ 494.793855][T17083] Cannot create hsr debugfs directory [ 494.999535][ T5837] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 495.010319][ T5837] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 495.018789][ T5837] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 495.027167][ T5837] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 495.035021][ T5837] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 495.114340][ T5837] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 495.125370][ T5837] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 495.134865][ T5837] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 495.143766][ T5837] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 495.151960][ T5837] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 495.210598][T17099] wg1 speed is unknown, defaulting to 1000 [ 495.236234][T17099] wg1 speed is unknown, defaulting to 1000 [ 495.237632][T17101] wg1 speed is unknown, defaulting to 1000 [ 495.250219][T17101] wg1 speed is unknown, defaulting to 1000 [ 495.538289][T17099] chnl_net:caif_netlink_parms(): no params data found [ 495.587153][ T5837] Bluetooth: hci17: command tx timeout [ 495.602137][ T5837] Bluetooth: hci16: command tx timeout [ 495.630872][T17101] chnl_net:caif_netlink_parms(): no params data found [ 495.716041][T17099] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.723502][T17099] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.731365][T17099] bridge_slave_0: entered allmulticast mode [ 495.739314][T17099] bridge_slave_0: entered promiscuous mode [ 495.757723][T17099] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.764900][T17099] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.772659][T17099] bridge_slave_1: entered allmulticast mode [ 495.779917][T17099] bridge_slave_1: entered promiscuous mode [ 495.850994][T17099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.860758][T17101] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.868567][T17101] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.875825][T17101] bridge_slave_0: entered allmulticast mode [ 495.883189][T17101] bridge_slave_0: entered promiscuous mode [ 495.891482][T17101] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.899033][T17101] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.906334][T17101] bridge_slave_1: entered allmulticast mode [ 495.914365][T17101] bridge_slave_1: entered promiscuous mode [ 495.924360][T17099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.010483][T17101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.034258][T17099] team0: Port device team_slave_0 added [ 496.042867][T17101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.071003][T17099] team0: Port device team_slave_1 added [ 496.115303][T17101] team0: Port device team_slave_0 added [ 496.124515][T17101] team0: Port device team_slave_1 added [ 496.165574][T17099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.173154][T17099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.199190][T17099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.211825][T17099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.218840][T17099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.244927][T17099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.281797][T17101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.288822][T17101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.316604][T17101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.329692][T17101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.336641][T17101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.362848][T17101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.423817][T17099] hsr_slave_0: entered promiscuous mode [ 496.430519][T17099] hsr_slave_1: entered promiscuous mode [ 496.437575][T17099] debugfs: 'hsr0' already exists in 'hsr' [ 496.443310][T17099] Cannot create hsr debugfs directory [ 496.467685][ T52] Bluetooth: hci15: command tx timeout [ 496.509884][T17101] hsr_slave_0: entered promiscuous mode [ 496.516326][T17101] hsr_slave_1: entered promiscuous mode [ 496.522562][T17101] debugfs: 'hsr0' already exists in 'hsr' [ 496.528450][T17101] Cannot create hsr debugfs directory [ 497.107176][ T52] Bluetooth: hci18: command tx timeout [ 497.187753][ T52] Bluetooth: hci19: command tx timeout [ 497.677233][ T52] Bluetooth: hci16: command tx timeout [ 497.679333][ T5832] Bluetooth: hci17: command tx timeout [ 498.467230][ T5832] Bluetooth: hci7: command 0x0406 tx timeout [ 498.471799][ T52] Bluetooth: hci8: command 0x0406 tx timeout [ 498.473619][ T5830] Bluetooth: hci6: command 0x0406 tx timeout [ 498.480131][ T52] Bluetooth: hci9: command 0x0406 tx timeout [ 498.547277][ T5827] Bluetooth: hci15: command tx timeout [ 499.187233][ T5827] Bluetooth: hci18: command tx timeout [ 499.267175][ T5827] Bluetooth: hci19: command tx timeout [ 499.747226][ T5827] Bluetooth: hci17: command tx timeout [ 499.747236][ T5829] Bluetooth: hci16: command tx timeout [ 500.627267][ T5829] Bluetooth: hci15: command tx timeout [ 501.267132][ T5829] Bluetooth: hci18: command tx timeout [ 501.347088][ T5829] Bluetooth: hci19: command tx timeout [ 501.513771][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.827126][ T5829] Bluetooth: hci16: command tx timeout [ 501.827191][ T5827] Bluetooth: hci17: command tx timeout [ 502.790156][ T25] block nbd0: Possible stuck request ffff888024f0e000: control (read@0,1024B). Runtime 390 seconds [ 502.801073][ T25] block nbd0: Possible stuck request ffff888024f0e1c0: control (read@1024,1024B). Runtime 390 seconds [ 502.812130][ T25] block nbd0: Possible stuck request ffff888024f0e380: control (read@2048,1024B). Runtime 390 seconds [ 502.823180][ T25] block nbd0: Possible stuck request ffff888024f0e540: control (read@3072,1024B). Runtime 390 seconds [ 503.347173][ T5827] Bluetooth: hci18: command tx timeout [ 503.427154][ T5827] Bluetooth: hci19: command tx timeout [ 504.069031][T11571] block nbd3: Possible stuck request ffff88802540e000: control (read@0,1024B). Runtime 390 seconds [ 504.079799][T11571] block nbd3: Possible stuck request ffff88802540e1c0: control (read@1024,1024B). Runtime 390 seconds [ 504.090942][T11571] block nbd3: Possible stuck request ffff88802540e380: control (read@2048,1024B). Runtime 390 seconds [ 504.102075][T11571] block nbd3: Possible stuck request ffff88802540e540: control (read@3072,1024B). Runtime 390 seconds [ 516.227487][ T31] INFO: task syz.1.2740:16915 blocked for more than 143 seconds. [ 516.235276][ T31] Not tainted syzkaller #0 [ 516.240361][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 516.249220][ T31] task:syz.1.2740 state:D stack:26024 pid:16915 tgid:16914 ppid:5821 task_flags:0x480140 flags:0x00080002 [ 516.261327][ T31] Call Trace: [ 516.264628][ T31] [ 516.267704][ T31] __schedule+0x1798/0x4cc0 [ 516.272237][ T31] ? __lock_acquire+0xab9/0xd20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 516.277158][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.282139][ T31] ? __pfx___schedule+0x10/0x10 [ 516.287090][ T31] ? schedule+0x91/0x360 [ 516.291672][ T31] schedule+0x165/0x360 [ 516.295853][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 516.301413][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 516.308972][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 516.315073][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 516.321059][ T31] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 516.327383][ T31] nbd_set_size+0x47e/0x6a0 [ 516.332243][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 516.337406][ T31] ? nla_memcpy+0x5b/0xc0 [ 516.341767][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 516.346728][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 516.376743][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 516.383172][ T31] ? bpf_lsm_capable+0x9/0x20 [ 516.388147][ T31] ? security_capable+0x7e/0x2e0 [ 516.393109][ T31] ? radix_tree_lookup+0x240/0x290 [ 516.398281][ T31] nbd_genl_reconfigure+0x414/0x1a50 [ 516.403867][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 516.409614][ T31] ? rcu_is_watching+0x15/0xb0 [ 516.414370][ T31] ? __nla_parse+0x40/0x60 [ 516.418872][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 516.425191][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 516.430777][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 516.436906][ T31] genl_rcv_msg+0x60e/0x790 [ 516.441420][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.446426][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 516.452179][ T31] netlink_rcv_skb+0x208/0x470 [ 516.457046][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.461920][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.468111][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 516.473419][ T31] ? down_read+0x1ad/0x2e0 [ 516.477888][ T31] genl_rcv+0x28/0x40 [ 516.481871][ T31] netlink_unicast+0x82f/0x9e0 [ 516.486622][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 516.491984][ T31] ? netlink_sendmsg+0x642/0xb30 [ 516.497025][ T31] netlink_sendmsg+0x805/0xb30 [ 516.501820][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.507215][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.512085][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 516.517115][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 516.522433][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.527829][ T31] __sock_sendmsg+0x21c/0x270 [ 516.532501][ T31] ____sys_sendmsg+0x505/0x830 [ 516.537286][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 516.542561][ T31] ? import_iovec+0x74/0xa0 [ 516.547908][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 516.552613][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.558144][ T31] ? __fget_files+0x2a/0x420 [ 516.562732][ T31] ? __fget_files+0x3a0/0x420 [ 516.567500][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 516.572529][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 516.578031][ T31] ? do_syscall_64+0xbe/0xfa0 [ 516.582716][ T31] do_syscall_64+0xfa/0xfa0 [ 516.587253][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.592465][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.598543][ T31] ? clear_bhb_loop+0x60/0xb0 [ 516.603206][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.609123][ T31] RIP: 0033:0x7f14cb38f6c9 [ 516.613627][ T31] RSP: 002b:00007f14cc1cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.622081][ T31] RAX: ffffffffffffffda RBX: 00007f14cb5e5fa0 RCX: 00007f14cb38f6c9 [ 516.630140][ T31] RDX: 0000000024000000 RSI: 0000200000000b40 RDI: 0000000000000007 [ 516.638285][ T31] RBP: 00007f14cb411f91 R08: 0000000000000000 R09: 0000000000000000 [ 516.646263][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.654312][ T31] R13: 00007f14cb5e6038 R14: 00007f14cb5e5fa0 R15: 00007ffcacd99f38 [ 516.662339][ T31] [ 516.665364][ T31] INFO: task syz.3.2744:16928 blocked for more than 143 seconds. [ 516.673308][ T31] Not tainted syzkaller #0 [ 516.678302][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 516.687023][ T31] task:syz.3.2744 state:D stack:26088 pid:16928 tgid:16927 ppid:5828 task_flags:0x400140 flags:0x00080002 [ 516.699254][ T31] Call Trace: [ 516.702529][ T31] [ 516.705449][ T31] __schedule+0x1798/0x4cc0 [ 516.710008][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.714851][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.719700][ T31] ? __pfx___schedule+0x10/0x10 [ 516.724546][ T31] ? schedule+0x91/0x360 [ 516.728822][ T31] schedule+0x165/0x360 [ 516.732961][ T31] schedule_preempt_disabled+0x13/0x30 [ 516.738427][ T31] __mutex_lock+0x7e6/0x1350 [ 516.742998][ T31] ? __mutex_lock+0x5bb/0x1350 [ 516.747759][ T31] ? genl_rcv_msg+0x10d/0x790 [ 516.752419][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 516.757587][ T31] ? stack_trace_save+0x9c/0xe0 [ 516.762451][ T31] ? radix_tree_lookup+0x240/0x290 [ 516.767610][ T31] genl_rcv_msg+0x10d/0x790 [ 516.772120][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.776979][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.782015][ T31] netlink_rcv_skb+0x208/0x470 [ 516.786762][ T31] ? __lock_acquire+0xab9/0xd20 [ 516.791731][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.796760][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 516.802094][ T31] ? down_read+0x1ad/0x2e0 [ 516.806584][ T31] genl_rcv+0x28/0x40 [ 516.810596][ T31] netlink_unicast+0x82f/0x9e0 [ 516.815354][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 516.820662][ T31] ? netlink_sendmsg+0x642/0xb30 [ 516.825582][ T31] ? skb_put+0x11b/0x210 [ 516.829843][ T31] netlink_sendmsg+0x805/0xb30 [ 516.834595][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.839907][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 516.844828][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 516.850122][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.855388][ T31] __sock_sendmsg+0x21c/0x270 [ 516.860082][ T31] __sys_sendto+0x3bd/0x520 [ 516.864571][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 516.870162][ T31] ? rcu_is_watching+0x15/0xb0 [ 516.874942][ T31] __x64_sys_sendto+0xde/0x100 [ 516.879831][ T31] do_syscall_64+0xfa/0xfa0 [ 516.884344][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.889596][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.895672][ T31] ? clear_bhb_loop+0x60/0xb0 [ 516.900363][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.906264][ T31] RIP: 0033:0x7f4ebf19155c [ 516.910699][ T31] RSP: 002b:00007f4ec00eeec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 516.919139][ T31] RAX: ffffffffffffffda RBX: 00007f4ec00eefc0 RCX: 00007f4ebf19155c [ 516.927147][ T31] RDX: 0000000000000024 RSI: 00007f4ec00ef010 RDI: 0000000000000007 [ 516.935100][ T31] RBP: 0000000000000000 R08: 00007f4ec00eef14 R09: 000000000000000c [ 516.943091][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 516.951189][ T31] R13: 00007f4ec00eef68 R14: 00007f4ec00ef010 R15: 0000000000000000 [ 516.959298][ T31] [ 516.962329][ T31] INFO: task syz.3.2744:16933 blocked for more than 144 seconds. [ 516.970170][ T31] Not tainted syzkaller #0 [ 516.975110][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 516.983898][ T31] task:syz.3.2744 state:D stack:24808 pid:16933 tgid:16927 ppid:5828 task_flags:0x400140 flags:0x00080002 [ 516.995940][ T31] Call Trace: [ 516.999270][ T31] [ 517.002204][ T31] __schedule+0x1798/0x4cc0 [ 517.006700][ T31] ? __lock_acquire+0xab9/0xd20 [ 517.011578][ T31] ? __lock_acquire+0xab9/0xd20 [ 517.016416][ T31] ? __pfx___schedule+0x10/0x10 [ 517.021338][ T31] ? schedule+0x91/0x360 [ 517.025591][ T31] schedule+0x165/0x360 [ 517.029984][ T31] schedule_preempt_disabled+0x13/0x30 [ 517.035454][ T31] __mutex_lock+0x7e6/0x1350 [ 517.040077][ T31] ? __mutex_lock+0x5bb/0x1350 [ 517.044828][ T31] ? genl_rcv_msg+0x10d/0x790 [ 517.049519][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 517.054555][ T31] ? stack_trace_save+0x9c/0xe0 [ 517.059430][ T31] ? radix_tree_lookup+0x240/0x290 [ 517.064557][ T31] genl_rcv_msg+0x10d/0x790 [ 517.069093][ T31] ? __lock_acquire+0xab9/0xd20 [ 517.073926][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 517.078972][ T31] netlink_rcv_skb+0x208/0x470 [ 517.083748][ T31] ? __lock_acquire+0xab9/0xd20 [ 517.088671][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 517.093688][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 517.099013][ T31] ? down_read+0x1ad/0x2e0 [ 517.103426][ T31] genl_rcv+0x28/0x40 [ 517.109395][ T31] netlink_unicast+0x82f/0x9e0 [ 517.114190][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 517.119601][ T31] ? netlink_sendmsg+0x642/0xb30 [ 517.124525][ T31] ? skb_put+0x11b/0x210 [ 517.129199][ T31] netlink_sendmsg+0x805/0xb30 [ 517.133994][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.139362][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 517.144308][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 517.149765][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.155058][ T31] __sock_sendmsg+0x21c/0x270 [ 517.159772][ T31] __sys_sendto+0x3bd/0x520 [ 517.164268][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 517.169420][ T31] ? rcu_is_watching+0x15/0xb0 [ 517.174169][ T31] __x64_sys_sendto+0xde/0x100 [ 517.178953][ T31] do_syscall_64+0xfa/0xfa0 [ 517.183456][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.188800][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.194865][ T31] ? clear_bhb_loop+0x60/0xb0 [ 517.199821][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.205723][ T31] RIP: 0033:0x7f4ebf19155c [ 517.210300][ T31] RSP: 002b:00007f4ec00cdec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 517.218963][ T31] RAX: ffffffffffffffda RBX: 00007f4ec00cdfc0 RCX: 00007f4ebf19155c [ 517.227078][ T31] RDX: 0000000000000020 RSI: 00007f4ec00ce010 RDI: 000000000000000b [ 517.235050][ T31] RBP: 0000000000000000 R08: 00007f4ec00cdf14 R09: 000000000000000c [ 517.243155][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 517.251292][ T31] R13: 00007f4ec00cdf68 R14: 00007f4ec00ce010 R15: 0000000000000000 [ 517.259436][ T31] [ 517.262467][ T31] INFO: task syz.2.2745:16932 blocked for more than 144 seconds. [ 517.271709][ T31] Not tainted syzkaller #0 [ 517.276637][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 517.285353][ T31] task:syz.2.2745 state:D stack:26088 pid:16932 tgid:16931 ppid:5838 task_flags:0x400140 flags:0x00080002 [ 517.297293][ T31] Call Trace: [ 517.300558][ T31] [ 517.303471][ T31] __schedule+0x1798/0x4cc0 [ 517.308025][ T31] ? __lock_acquire+0xab9/0xd20 [ 517.312866][ T31] ? __lock_acquire+0xab9/0xd20 [ 517.317852][ T31] ? __pfx___schedule+0x10/0x10 [ 517.322738][ T31] ? schedule+0x91/0x360 [ 517.327223][ T31] schedule+0x165/0x360 [ 517.331387][ T31] schedule_preempt_disabled+0x13/0x30 [ 517.336868][ T31] __mutex_lock+0x7e6/0x1350 [ 517.341457][ T31] ? __mutex_lock+0x5bb/0x1350 [ 517.346202][ T31] ? genl_rcv_msg+0x10d/0x790 [ 517.351286][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 517.356340][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 517.361760][ T31] ? radix_tree_lookup+0x240/0x290 [ 517.366913][ T31] genl_rcv_msg+0x10d/0x790 [ 517.371424][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 517.376449][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 517.381556][ T31] ? __asan_memcpy+0x40/0x70 [ 517.386169][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 517.391570][ T31] netlink_rcv_skb+0x208/0x470 [ 517.396321][ T31] ? __lock_acquire+0xab9/0xd20 [ 517.401210][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 517.406219][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 517.411529][ T31] ? down_read+0x1ad/0x2e0 [ 517.415933][ T31] genl_rcv+0x28/0x40 [ 517.419953][ T31] netlink_unicast+0x82f/0x9e0 [ 517.424723][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 517.430257][ T31] ? netlink_sendmsg+0x642/0xb30 [ 517.435193][ T31] ? skb_put+0x11b/0x210 [ 517.439453][ T31] netlink_sendmsg+0x805/0xb30 [ 517.444218][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.449532][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 517.454484][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 517.459809][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.465105][ T31] __sock_sendmsg+0x21c/0x270 [ 517.469828][ T31] __sys_sendto+0x3bd/0x520 [ 517.474350][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 517.479436][ T31] ? rcu_is_watching+0x15/0xb0 [ 517.484193][ T31] __x64_sys_sendto+0xde/0x100 [ 517.489044][ T31] do_syscall_64+0xfa/0xfa0 [ 517.493557][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.498802][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.504869][ T31] ? clear_bhb_loop+0x60/0xb0 [ 517.510469][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.516386][ T31] RIP: 0033:0x7f70f9f9155c [ 517.520847][ T31] RSP: 002b:00007f70faeebec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 517.529303][ T31] RAX: ffffffffffffffda RBX: 00007f70faeebfc0 RCX: 00007f70f9f9155c [ 517.537363][ T31] RDX: 0000000000000020 RSI: 00007f70faeec010 RDI: 0000000000000006 [ 517.545323][ T31] RBP: 0000000000000000 R08: 00007f70faeebf14 R09: 000000000000000c [ 517.553354][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 517.561363][ T31] R13: 00007f70faeebf68 R14: 00007f70faeec010 R15: 0000000000000000 [ 517.569387][ T31] [ 517.572408][ T31] INFO: task syz.2.2745:16935 blocked for more than 144 seconds. [ 517.580152][ T31] Not tainted syzkaller #0 [ 517.585069][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 517.594014][ T31] task:syz.2.2745 state:D stack:28328 pid:16935 tgid:16931 ppid:5838 task_flags:0x400040 flags:0x00080002 [ 517.605951][ T31] Call Trace: [ 517.609281][ T31] [ 517.612213][ T31] __schedule+0x1798/0x4cc0 [ 517.616711][ T31] ? __lock_acquire+0xab9/0xd20 [ 517.621580][ T31] ? __lock_acquire+0xab9/0xd20 [ 517.626409][ T31] ? __pfx___schedule+0x10/0x10 [ 517.631297][ T31] ? schedule+0x91/0x360 [ 517.635528][ T31] schedule+0x165/0x360 [ 517.639724][ T31] schedule_preempt_disabled+0x13/0x30 [ 517.645169][ T31] __mutex_lock+0x7e6/0x1350 [ 517.649845][ T31] ? __mutex_lock+0x5bb/0x1350 [ 517.654618][ T31] ? genl_rcv_msg+0x10d/0x790 [ 517.659335][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 517.664354][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 517.669859][ T31] ? radix_tree_lookup+0x240/0x290 [ 517.674982][ T31] genl_rcv_msg+0x10d/0x790 [ 517.679517][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 517.684527][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 517.689564][ T31] ? __asan_memcpy+0x40/0x70 [ 517.694140][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 517.699540][ T31] netlink_rcv_skb+0x208/0x470 [ 517.704388][ T31] ? __lock_acquire+0xab9/0xd20 [ 517.709478][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 517.714514][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 517.719828][ T31] ? down_read+0x1ad/0x2e0 [ 517.724230][ T31] genl_rcv+0x28/0x40 [ 517.728225][ T31] netlink_unicast+0x82f/0x9e0 [ 517.732984][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 517.738304][ T31] ? netlink_sendmsg+0x642/0xb30 [ 517.743222][ T31] ? skb_put+0x11b/0x210 [ 517.747517][ T31] netlink_sendmsg+0x805/0xb30 [ 517.752287][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.757693][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 517.762630][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 517.767935][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.773229][ T31] __sock_sendmsg+0x21c/0x270 [ 517.777970][ T31] __sys_sendto+0x3bd/0x520 [ 517.782474][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 517.787515][ T31] ? __lock_acquire+0xab9/0xd20 [ 517.792399][ T31] ? fd_install+0x97/0x540 [ 517.796865][ T31] ? fd_install+0x30d/0x540 [ 517.801374][ T31] __x64_sys_sendto+0xde/0x100 [ 517.806119][ T31] do_syscall_64+0xfa/0xfa0 [ 517.810648][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.815831][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.821916][ T31] ? clear_bhb_loop+0x60/0xb0 [ 517.826583][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.832523][ T31] RIP: 0033:0x7f70f9f9155c [ 517.836967][ T31] RSP: 002b:00007f70faecaec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 517.845377][ T31] RAX: ffffffffffffffda RBX: 00007f70faecafc0 RCX: 00007f70f9f9155c [ 517.853372][ T31] RDX: 0000000000000020 RSI: 00007f70faecb010 RDI: 0000000000000009 [ 517.861368][ T31] RBP: 0000000000000000 R08: 00007f70faecaf14 R09: 000000000000000c [ 517.869423][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 517.877415][ T31] R13: 00007f70faecaf68 R14: 00007f70faecb010 R15: 0000000000000000 [ 517.885380][ T31] [ 517.888435][ T31] INFO: task syz.4.2755:16975 blocked for more than 145 seconds. [ 517.896151][ T31] Not tainted syzkaller #0 [ 517.901122][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 517.909978][ T31] task:syz.4.2755 state:D stack:28328 pid:16975 tgid:16974 ppid:5833 task_flags:0x400040 flags:0x00080002 [ 517.921961][ T31] Call Trace: [ 517.925249][ T31] [ 517.928266][ T31] __schedule+0x1798/0x4cc0 [ 517.932777][ T31] ? __lock_acquire+0xab9/0xd20 [ 517.937651][ T31] ? __lock_acquire+0xab9/0xd20 [ 517.942487][ T31] ? __pfx___schedule+0x10/0x10 [ 517.947369][ T31] ? schedule+0x91/0x360 [ 517.951597][ T31] schedule+0x165/0x360 [ 517.955734][ T31] schedule_preempt_disabled+0x13/0x30 [ 517.961313][ T31] __mutex_lock+0x7e6/0x1350 [ 517.965908][ T31] ? __mutex_lock+0x5bb/0x1350 [ 517.970708][ T31] ? genl_rcv_msg+0x10d/0x790 [ 517.975418][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 517.980569][ T31] ? __pfx___dev_queue_xmit+0x10/0x10 [ 517.985936][ T31] ? radix_tree_lookup+0x240/0x290 [ 517.991138][ T31] genl_rcv_msg+0x10d/0x790 [ 517.995638][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 518.000694][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 518.005705][ T31] ? __asan_memcpy+0x40/0x70 [ 518.010306][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 518.015677][ T31] netlink_rcv_skb+0x208/0x470 [ 518.020465][ T31] ? __lock_acquire+0xab9/0xd20 [ 518.025300][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 518.030342][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 518.035623][ T31] ? down_read+0x1ad/0x2e0 [ 518.040108][ T31] genl_rcv+0x28/0x40 [ 518.044092][ T31] netlink_unicast+0x82f/0x9e0 [ 518.048903][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 518.054194][ T31] ? netlink_sendmsg+0x642/0xb30 [ 518.059146][ T31] ? skb_put+0x11b/0x210 [ 518.063376][ T31] netlink_sendmsg+0x805/0xb30 [ 518.068296][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.073587][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 518.078533][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 518.083800][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.089172][ T31] __sock_sendmsg+0x21c/0x270 [ 518.093839][ T31] __sys_sendto+0x3bd/0x520 [ 518.098364][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 518.103372][ T31] ? count_memcg_event_mm+0x21/0x260 [ 518.108692][ T31] ? exc_page_fault+0x82/0x100 [ 518.113441][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 518.118745][ T31] __x64_sys_sendto+0xde/0x100 [ 518.123498][ T31] do_syscall_64+0xfa/0xfa0 [ 518.128017][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.133203][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.139285][ T31] ? clear_bhb_loop+0x60/0xb0 [ 518.143972][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.150802][ T31] RIP: 0033:0x7f8c0239155c [ 518.155241][ T31] RSP: 002b:00007f8c032e3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 518.163802][ T31] RAX: ffffffffffffffda RBX: 00007f8c032e3fc0 RCX: 00007f8c0239155c [ 518.171941][ T31] RDX: 0000000000000020 RSI: 00007f8c032e4010 RDI: 0000000000000003 [ 518.179980][ T31] RBP: 0000000000000000 R08: 00007f8c032e3f14 R09: 000000000000000c [ 518.187970][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 518.195951][ T31] R13: 00007f8c032e3f68 R14: 00007f8c032e4010 R15: 0000000000000000 [ 518.204013][ T31] [ 518.207111][ T31] INFO: task syz.0.2756:16978 blocked for more than 145 seconds. [ 518.214821][ T31] Not tainted syzkaller #0 [ 518.219898][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 518.228876][ T31] task:syz.0.2756 state:D stack:22664 pid:16978 tgid:16977 ppid:5822 task_flags:0x400140 flags:0x00080002 [ 518.240841][ T31] Call Trace: [ 518.244113][ T31] [ 518.247094][ T31] __schedule+0x1798/0x4cc0 [ 518.251612][ T31] ? __lock_acquire+0xab9/0xd20 [ 518.256448][ T31] ? __lock_acquire+0xab9/0xd20 [ 518.261317][ T31] ? __pfx___schedule+0x10/0x10 [ 518.266160][ T31] ? schedule+0x91/0x360 [ 518.270413][ T31] schedule+0x165/0x360 [ 518.274561][ T31] schedule_preempt_disabled+0x13/0x30 [ 518.280029][ T31] __mutex_lock+0x7e6/0x1350 [ 518.284604][ T31] ? __mutex_lock+0x5bb/0x1350 [ 518.289425][ T31] ? genl_rcv_msg+0x10d/0x790 [ 518.294122][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 518.299190][ T31] ? stack_trace_save+0x9c/0xe0 [ 518.304030][ T31] ? radix_tree_lookup+0x240/0x290 [ 518.309228][ T31] genl_rcv_msg+0x10d/0x790 [ 518.313726][ T31] ? __lock_acquire+0xab9/0xd20 [ 518.318659][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 518.323717][ T31] netlink_rcv_skb+0x208/0x470 [ 518.328523][ T31] ? __lock_acquire+0xab9/0xd20 [ 518.333383][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 518.338470][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 518.343767][ T31] ? down_read+0x1ad/0x2e0 [ 518.348222][ T31] genl_rcv+0x28/0x40 [ 518.352196][ T31] netlink_unicast+0x82f/0x9e0 [ 518.357011][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 518.362300][ T31] ? netlink_sendmsg+0x642/0xb30 [ 518.367261][ T31] ? skb_put+0x11b/0x210 [ 518.371490][ T31] netlink_sendmsg+0x805/0xb30 [ 518.376243][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.381554][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 518.386482][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 518.391799][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.397094][ T31] __sock_sendmsg+0x21c/0x270 [ 518.401758][ T31] ____sys_sendmsg+0x505/0x830 [ 518.406502][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 518.411811][ T31] ? import_iovec+0x74/0xa0 [ 518.416316][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 518.421044][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 518.426266][ T31] ? __fget_files+0x2a/0x420 [ 518.430986][ T31] ? __fget_files+0x3a0/0x420 [ 518.435662][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 518.440619][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 518.446072][ T31] ? do_syscall_64+0xbe/0xfa0 [ 518.450794][ T31] do_syscall_64+0xfa/0xfa0 [ 518.455395][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.461522][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 518.467736][ T31] ? clear_bhb_loop+0x60/0xb0 [ 518.472426][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.478375][ T31] RIP: 0033:0x7fa8a638f6c9 [ 518.482799][ T31] RSP: 002b:00007fa8a7165038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.491253][ T31] RAX: ffffffffffffffda RBX: 00007fa8a65e5fa0 RCX: 00007fa8a638f6c9 [ 518.499252][ T31] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000a [ 518.507268][ T31] RBP: 00007fa8a6411f91 R08: 0000000000000000 R09: 0000000000000000 [ 518.515228][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.523230][ T31] R13: 00007fa8a65e6038 R14: 00007fa8a65e5fa0 R15: 00007ffd9492ed88 [ 518.531233][ T31] [ 518.534249][ T31] INFO: task syz-executor:16981 blocked for more than 145 seconds. [ 518.542239][ T31] Not tainted syzkaller #0 [ 518.548064][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 518.556767][ T31] task:syz-executor state:D stack:22344 pid:16981 tgid:16981 ppid:1 task_flags:0x400140 flags:0x00080002 [ 518.568772][ T31] Call Trace: [ 518.572043][ T31] [ 518.574956][ T31] __schedule+0x1798/0x4cc0 [ 518.579494][ T31] ? __lock_acquire+0xab9/0xd20 [ 518.584334][ T31] ? __lock_acquire+0xab9/0xd20 [ 518.589220][ T31] ? __pfx___schedule+0x10/0x10 [ 518.594088][ T31] ? schedule+0x91/0x360 [ 518.598367][ T31] schedule+0x165/0x360 [ 518.602512][ T31] schedule_preempt_disabled+0x13/0x30 [ 518.608020][ T31] __mutex_lock+0x7e6/0x1350 [ 518.612713][ T31] ? __mutex_lock+0x5bb/0x1350 [ 518.617496][ T31] ? genl_rcv_msg+0x10d/0x790 [ 518.622180][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 518.627669][ T31] ? stack_trace_save+0x9c/0xe0 [ 518.632549][ T31] ? radix_tree_lookup+0x240/0x290 [ 518.637692][ T31] genl_rcv_msg+0x10d/0x790 [ 518.642185][ T31] ? __lock_acquire+0xab9/0xd20 [ 518.647166][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 518.652206][ T31] netlink_rcv_skb+0x208/0x470 [ 518.657107][ T31] ? __lock_acquire+0xab9/0xd20 [ 518.661953][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 518.667030][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 518.672331][ T31] ? down_read+0x1ad/0x2e0 [ 518.676731][ T31] genl_rcv+0x28/0x40 [ 518.680736][ T31] netlink_unicast+0x82f/0x9e0 [ 518.685493][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 518.690805][ T31] ? netlink_sendmsg+0x642/0xb30 [ 518.695745][ T31] ? skb_put+0x11b/0x210 [ 518.700000][ T31] netlink_sendmsg+0x805/0xb30 [ 518.704752][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.710128][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 518.715079][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 518.720437][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.725718][ T31] __sock_sendmsg+0x21c/0x270 [ 518.730461][ T31] __sys_sendto+0x3bd/0x520 [ 518.734966][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 518.740004][ T31] ? __lock_acquire+0xab9/0xd20 [ 518.744851][ T31] ? fd_install+0x97/0x540 [ 518.749286][ T31] ? fd_install+0x30d/0x540 [ 518.753781][ T31] __x64_sys_sendto+0xde/0x100 [ 518.758646][ T31] do_syscall_64+0xfa/0xfa0 [ 518.763138][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 518.768378][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.774429][ T31] ? clear_bhb_loop+0x60/0xb0 [ 518.779116][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.784993][ T31] RIP: 0033:0x7fe599b9155c [ 518.789576][ T31] RSP: 002b:00007ffcfd4893b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 518.798033][ T31] RAX: ffffffffffffffda RBX: 00007fe59a914620 RCX: 00007fe599b9155c [ 518.805991][ T31] RDX: 0000000000000020 RSI: 00007fe59a914670 RDI: 0000000000000005 [ 518.813988][ T31] RBP: 0000000000000000 R08: 00007ffcfd489404 R09: 000000000000000c [ 518.821996][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 518.829985][ T31] R13: 00007ffcfd489458 R14: 00007fe59a914670 R15: 0000000000000000 [ 518.838017][ T31] [ 518.841101][ T31] [ 518.841101][ T31] Showing all locks held in the system: [ 518.848895][ T31] 1 lock held by khungtaskd/31: [ 518.853743][ T31] #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 518.863627][ T31] 2 locks held by getty/5585: [ 518.868504][ T31] #0: ffff8880338ad0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 518.878330][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 518.888432][ T31] 1 lock held by udevd/5826: [ 518.892999][ T31] #0: ffff8881433bb358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 518.902254][ T31] 1 lock held by udevd/5842: [ 518.906855][ T31] #0: ffff888024ec7358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 518.916117][ T31] 6 locks held by syz.1.2740/16915: [ 518.921336][ T31] #0: ffffffff8f331bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 518.929549][ T31] #1: ffffffff8f331a08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 518.938524][ T31] #2: ffff888024e16a70 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x375/0x1a50 [ 518.948985][ T31] #3: ffff888024d23818 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 518.958462][ T31] #4: ffff888024d231b8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 518.970602][ T31] #5: ffff888024d231f0 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 518.983044][ T31] 2 locks held by syz.3.2744/16928: [ 518.988260][ T31] #0: ffffffff8f331bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 518.996448][ T31] #1: ffffffff8f331a08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 519.005435][ T31] 2 locks held by syz.3.2744/16933: [ 519.010660][ T31] #0: ffffffff8f331bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.018911][ T31] #1: ffffffff8f331a08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 519.027994][ T31] 2 locks held by syz.2.2745/16932: [ 519.033184][ T31] #0: ffffffff8f331bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.041403][ T31] #1: ffffffff8f331a08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 519.050414][ T31] 2 locks held by syz.2.2745/16935: [ 519.055596][ T31] #0: ffffffff8f331bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.063814][ T31] #1: ffffffff8f331a08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 519.072796][ T31] 2 locks held by syz.4.2755/16975: [ 519.078016][ T31] #0: ffffffff8f331bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.086179][ T31] #1: ffffffff8f331a08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 519.095233][ T31] 2 locks held by syz.0.2756/16978: [ 519.100451][ T31] #0: ffffffff8f331bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.108775][ T31] #1: ffffffff8f331a08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 519.117822][ T31] 2 locks held by syz-executor/16981: [ 519.123197][ T31] #0: ffffffff8f331bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.131487][ T31] #1: ffffffff8f331a08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 519.140466][ T31] 2 locks held by syz-executor/16991: [ 519.145818][ T31] #0: ffffffff8f331bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.154050][ T31] #1: ffffffff8f331a08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 519.163036][ T31] 2 locks held by syz-executor/16993: [ 519.168414][ T31] #0: ffffffff8f331bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.176572][ T31] #1: ffffffff8f331a08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 519.185551][ T31] 2 locks held by syz-executor/17009: [ 519.194040][ T31] #0: ffffffff8f331bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.202316][ T31] #1: ffffffff8f331a08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 519.211303][ T31] 2 locks held by syz-executor/17011: [ 519.216651][ T31] #0: ffffffff8f331bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.224853][ T31] #1: ffffffff8f331a08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 519.233888][ T31] 2 locks held by syz-executor/17026: [ 519.239311][ T31] #0: ffffffff8f331bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.247560][ T31] #1: ffffffff8f331a08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 519.256507][ T31] 2 locks held by syz-executor/17036: [ 519.261938][ T31] #0: ffffffff8f331bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.270194][ T31] #1: ffffffff8f331a08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 519.279223][ T31] 2 locks held by syz-executor/17038: [ 519.284616][ T31] #0: ffffffff8f331bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.292851][ T31] #1: ffffffff8f331a08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 519.301867][ T31] 2 locks held by syz-executor/17054: [ 519.307350][ T31] #0: ffffffff8f331bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.315519][ T31] #1: ffffffff8f331a08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 519.324520][ T31] 2 locks held by syz-executor/17056: [ 519.329923][ T31] #0: ffffffff8f331bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.338139][ T31] #1: ffffffff8f331a08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 519.347345][ T31] 2 locks held by syz-executor/17071: [ 519.352728][ T31] #0: ffffffff8f331bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.361022][ T31] #1: ffffffff8f331a08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 519.370050][ T31] 2 locks held by syz-executor/17081: [ 519.375419][ T31] #0: ffffffff8f331bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.383658][ T31] #1: ffffffff8f331a08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 519.392667][ T31] 2 locks held by syz-executor/17083: [ 519.398073][ T31] #0: ffffffff8f331bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.406239][ T31] #1: ffffffff8f331a08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 519.415227][ T31] 2 locks held by syz-executor/17099: [ 519.420687][ T31] #0: ffffffff8f331bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.428915][ T31] #1: ffffffff8f331a08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 519.437928][ T31] 2 locks held by syz-executor/17101: [ 519.443280][ T31] #0: ffffffff8f331bf0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 519.451479][ T31] #1: ffffffff8f331a08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 519.460488][ T31] [ 519.462817][ T31] ============================================= [ 519.462817][ T31] [ 519.471280][ T31] NMI backtrace for cpu 1 [ 519.471295][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 519.471305][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 519.471311][ T31] Call Trace: [ 519.471316][ T31] [ 519.471321][ T31] dump_stack_lvl+0x189/0x250 [ 519.471340][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.471352][ T31] ? __pfx__printk+0x10/0x10 [ 519.471369][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 519.471383][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 519.471395][ T31] ? __pfx__printk+0x10/0x10 [ 519.471407][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 519.471422][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 519.471435][ T31] watchdog+0xf60/0xfa0 [ 519.471447][ T31] ? watchdog+0x1e2/0xfa0 [ 519.471459][ T31] kthread+0x711/0x8a0 [ 519.471474][ T31] ? __pfx_watchdog+0x10/0x10 [ 519.471483][ T31] ? __pfx_kthread+0x10/0x10 [ 519.471495][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 519.471508][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.471521][ T31] ? __pfx_kthread+0x10/0x10 [ 519.471533][ T31] ret_from_fork+0x4bc/0x870 [ 519.471544][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 519.471557][ T31] ? __switch_to_asm+0x39/0x70 [ 519.471565][ T31] ? __switch_to_asm+0x33/0x70 [ 519.471572][ T31] ? __pfx_kthread+0x10/0x10 [ 519.471584][ T31] ret_from_fork_asm+0x1a/0x30 [ 519.471601][ T31] [ 519.471605][ T31] Sending NMI from CPU 1 to CPUs 0: [ 519.616898][ C0] NMI backtrace for cpu 0 [ 519.616914][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 519.616932][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 519.616942][ C0] RIP: 0010:try_to_wake_up+0x2aa/0x12b0 [ 519.616966][ C0] Code: 4c 89 ff e8 38 f7 94 00 eb 20 f3 90 43 0f b6 04 26 84 c0 74 15 44 89 f9 80 e1 07 80 c1 03 38 c1 7c 08 4c 89 ff e8 16 f7 94 00 <41> 83 3f 00 75 da 4c 8d 75 64 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 [ 519.616979][ C0] RSP: 0018:ffffc90000007a40 EFLAGS: 00000046 [ 519.616994][ C0] RAX: 0000000000000000 RBX: 1ffff1100f65b3d5 RCX: 00a54f9a27966200 [ 519.617006][ C0] RDX: 0000000000000000 RSI: ffffffff8bbf0740 RDI: ffffffff8bbf0700 [ 519.617017][ C0] RBP: ffff88807b2d9e40 R08: ffffffff8f7ce677 R09: 1ffffffff1ef9cce [ 519.617028][ C0] R10: dffffc0000000000 R11: fffffbfff1ef9ccf R12: dffffc0000000000 [ 519.617062][ C0] R13: 1ffff1100f65b3cb R14: 1ffff1100f65b3ce R15: ffff88807b2d9e74 [ 519.617073][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 519.617086][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 519.617096][ C0] CR2: 000056541cda7000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 519.617110][ C0] Call Trace: [ 519.617117][ C0] [ 519.617128][ C0] kick_pool+0x47d/0x640 [ 519.617145][ C0] ? insert_work+0x273/0x330 [ 519.617161][ C0] __queue_work+0xcdf/0xfb0 [ 519.617179][ C0] ? __queue_work+0x102/0xfb0 [ 519.617197][ C0] call_timer_fn+0x17e/0x5f0 [ 519.617212][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 519.617228][ C0] ? call_timer_fn+0xbe/0x5f0 [ 519.617242][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 519.617261][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 519.617281][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 519.617299][ C0] __run_timer_base+0x646/0x860 [ 519.617327][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 519.617345][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 519.617373][ C0] run_timer_softirq+0xb7/0x180 [ 519.617393][ C0] handle_softirqs+0x286/0x870 [ 519.617411][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 519.617429][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 519.617447][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 519.617468][ C0] __irq_exit_rcu+0xca/0x1f0 [ 519.617483][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 519.617504][ C0] irq_exit_rcu+0x9/0x30 [ 519.617517][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 519.617537][ C0] [ 519.617542][ C0] [ 519.617548][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 519.617564][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 519.617584][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 81 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 519.617597][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 519.617608][ C0] RAX: 00a54f9a27966200 RBX: ffffffff81967bf7 RCX: 00a54f9a27966200 [ 519.617620][ C0] RDX: 0000000000000001 RSI: ffffffff8d70ed12 RDI: ffffffff8bbf0760 [ 519.617631][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 519.617642][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ce670 [ 519.617654][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 519.617665][ C0] ? do_idle+0x1e7/0x510 [ 519.617686][ C0] default_idle+0x13/0x20 [ 519.617700][ C0] default_idle_call+0x73/0xb0 [ 519.617715][ C0] do_idle+0x1e7/0x510 [ 519.617733][ C0] ? __pfx_do_idle+0x10/0x10 [ 519.617756][ C0] cpu_startup_entry+0x44/0x60 [ 519.617771][ C0] rest_init+0x2de/0x300 [ 519.617787][ C0] start_kernel+0x3ae/0x410 [ 519.617805][ C0] x86_64_start_reservations+0x24/0x30 [ 519.617824][ C0] x86_64_start_kernel+0x143/0x1c0 [ 519.617844][ C0] common_startup_64+0x13e/0x147 [ 519.617872][ C0]