last executing test programs: 22.032990974s ago: executing program 3 (id=1710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a0102e8ffffff00000000020000000900010073797a30000000000900030073797a320000000020000000020a03"], 0xa0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004040}, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000ff010200000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200009b4e0000b7030000000000008500000005000000bf0900000000000065090100003f000066000000ffffff80180100002020702500000000002020207b9a00fe000000005e9100000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r7, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r7, 0x80) accept$netrom(r7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) read(r6, &(0x7f00000003c0)=""/123, 0x7b) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x53, 0x3, 0x58, @empty, @mcast2={0xff, 0x5}, 0x8, 0x8000, 0xe3e1, 0xd04}}) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket(0x2b, 0x80801, 0x1) 21.085103809s ago: executing program 3 (id=1718): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000cee00)={{0x0, 0x305, 0xfffffffffffffffc, 0x401, 0x6, 0x7fffffff, 0x9, 0x3ff, 0x1, 0x1000, 0x3, 0x7, 0x0, 0x8, 0x1}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000f02c0)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 20.94780864s ago: executing program 1 (id=1721): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket(0x10, 0x3, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x1, 0x71bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0xe0f}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1f, 0x0, 0x0, {0x5}}, [], {0x14, 0x3e9}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) bind$alg(r2, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000317c41200000000", @ANYRES32, @ANYBLOB="a70e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000200e6ff0300000000000000000000000000000000000000ca6b9a692d004e8a88f632c9febd76f5062a5f40df3458fea2f033af961695685e0743a23bf62fde86412671357c0750465f9059e102e39a74e33d43a4db28f9727783"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000980)={0xffffffffffffffff, &(0x7f0000000880)='.\x00', 0x4042c0, &(0x7f00000008c0)={@align=0x1, {0x7, 0x2, 0x5, 0x2}}, 0x6, &(0x7f0000000900), &(0x7f0000000940)}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x501, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x14, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x65}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='syzkaller\x00', 0x3, 0xe4, &(0x7f0000000700)=""/228, 0x41100, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000a80)=[r5, 0xffffffffffffffff], &(0x7f0000000ac0)=[{0x1, 0x2, 0x7, 0xb}, {0x1, 0x3, 0xa, 0xb}], 0x10, 0x217}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYRES64=r4, @ANYRESOCT=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 20.886810973s ago: executing program 1 (id=1723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0x8b8, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x884, 0x2, [@TCA_MATCHALL_ACT={0x880, 0x2, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x7, 0x100, 0x2, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x3, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x7, 0x6, 0x10007a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10003, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x9, 0xfffffffd, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x18, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0xac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xb, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x0, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x107e, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0x4, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x3, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xfffeffff, 0x2, 0xffff, 0xa6, 0x3, 0x10000, 0x1000, 0x4, 0x0, 0x3, 0x0, 0x2, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94b, 0x9, 0x8, 0x6, 0x100, 0x2, 0xffff, 0x4, 0x2, 0x3ff, 0x2, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ffb, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffff37, 0x3, 0x9, 0xc, 0xff, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x40, 0x4, 0x0, 0x5, 0x4, 0x1, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x9, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x1, 0x8, 0x50, 0xf, 0xf, 0xe, 0x6, 0x0, 0x81, 0xfff80000, 0x0, 0x1, 0x6, 0x3, 0x7ef8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x0, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x4000fff, 0x8, 0x7, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x400003, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0xc000, 0xffffff97, 0x2, 0x40, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0xfff, 0xe, 0x3, 0x9, 0xa, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0xb}, {0x6, 0x2, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x49}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x8b8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 20.835379663s ago: executing program 1 (id=1724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a0102e8ffffff00000000020000000900010073797a30000000000900030073797a320000000020000000020a03"], 0xa0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004040}, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000ff010200000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200009b4e0000b7030000000000008500000005000000bf0900000000000065090100003f000066000000ffffff80180100002020702500000000002020207b9a00fe000000005e9100000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r7, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r7, 0x80) accept$netrom(r7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) read(r6, &(0x7f00000003c0)=""/123, 0x7b) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x53, 0x3, 0x58, @empty, @mcast2={0xff, 0x5}, 0x8, 0x8000, 0xe3e1, 0xd04}}) r9 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) r10 = socket(0x2b, 0x80801, 0x1) ioctl$sock_qrtr_TIOCOUTQ(r10, 0x8905, &(0x7f0000000000)) 20.488659514s ago: executing program 0 (id=1727): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 20.451037311s ago: executing program 0 (id=1728): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r2, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) 20.25808814s ago: executing program 0 (id=1730): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x6, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 20.185126611s ago: executing program 0 (id=1731): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0x3, 0x2, 0xfffffeff, 0x1, 0x6, 0x8, 0x1}}, {0x6, 0x2, [0x4]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0x7, 0x6, @multicast}, 0x14) 20.137499805s ago: executing program 3 (id=1732): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x44, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r3, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 20.027820093s ago: executing program 0 (id=1733): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket(0x10, 0x3, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x1, 0x71bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0xe0f}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1f, 0x0, 0x0, {0x5}}, [], {0x14, 0x3e9}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) bind$alg(r2, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000317c41200000000", @ANYRES32, @ANYBLOB="a70e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000200e6ff0300000000000000000000000000000000000000ca6b9a692d004e8a88f632c9febd76f5062a5f40df3458fea2f033af961695685e0743a23bf62fde86412671357c0750465f9059e102e39a74e33d43a4db28f9727783"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000980)={0xffffffffffffffff, &(0x7f0000000880)='.\x00', 0x4042c0, &(0x7f00000008c0)={@align=0x1, {0x7, 0x2, 0x5, 0x2}}, 0x6, &(0x7f0000000900), &(0x7f0000000940)}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x501, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x14, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x65}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='syzkaller\x00', 0x3, 0xe4, &(0x7f0000000700)=""/228, 0x41100, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000a80)=[r5, 0xffffffffffffffff], &(0x7f0000000ac0)=[{0x1, 0x2, 0x7, 0xb}, {0x1, 0x3, 0xa, 0xb}], 0x10, 0x217}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYRES64=r4, @ANYRESOCT=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 20.016986753s ago: executing program 3 (id=1734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a0102e8ffffff00000000020000000900010073797a30000000000900030073797a320000000020000000020a03"], 0xa0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004040}, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000ff010200000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200009b4e0000b7030000000000008500000005000000bf0900000000000065090100003f000066000000ffffff80180100002020702500000000002020207b9a00fe000000005e9100000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @default, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r6, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r6, 0x80) accept$netrom(r6, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) read(0xffffffffffffffff, &(0x7f00000003c0)=""/123, 0x7b) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x53, 0x3, 0x58, @empty, @mcast2={0xff, 0x5}, 0x8, 0x8000, 0xe3e1, 0xd04}}) r8 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) r9 = socket(0x2b, 0x80801, 0x1) ioctl$sock_qrtr_TIOCOUTQ(r9, 0x8905, &(0x7f0000000000)) 19.906819472s ago: executing program 1 (id=1736): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000880) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1553ff41cf1186dd"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 19.863869812s ago: executing program 0 (id=1737): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x7, 0x6}) socket$inet(0x2, 0x3, 0xffffffff) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x453, 0x200, 0x70bd2d, 0x25dfdbfd, "e1ad27695238a95bc49d7a97574def28dfce9a5a7fac5c0cafe0a94b46435ad484245d9f48f9640f5ae0792f8b63b5250675da32c567f9a96b01abc57fedd5deb712e43daa054b0634df72427090fa2091d59067726831b3a7bc8c", [""]}, 0x6c}, 0x1, 0x0, 0x0, 0x41000}, 0x40805) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x8}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3d0b}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xff}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x2c, 0x8, 0x68, @private1, @local, 0x20, 0x1, 0x5, 0x33f}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x58, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x8800) 19.724405799s ago: executing program 2 (id=1739): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8080, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000007500)=[{{&(0x7f00000000c0)=@ethernet={0x0, @local}, 0x0, &(0x7f0000001640)=[{&(0x7f0000000300)=""/107}, {&(0x7f0000000600)=""/4096}, {&(0x7f0000001600)}], 0x0, &(0x7f0000001680)=""/190}, 0x9}, {{0x0, 0x0, &(0x7f0000003b40)=[{&(0x7f0000001740)=""/181}, {&(0x7f0000001800)=""/192}, {&(0x7f00000018c0)=""/144}, {&(0x7f0000001980)=""/26}, {&(0x7f00000019c0)=""/4096}, {&(0x7f00000029c0)=""/158}, {&(0x7f0000002a80)=""/139}, {&(0x7f0000007640)=""/4097}], 0x0, &(0x7f0000003bc0)=""/175}, 0x73a}, {{&(0x7f0000003c80)=@un=@abs, 0x0, &(0x7f0000003e80)=[{&(0x7f0000003d00)=""/64}, {&(0x7f0000003d40)=""/174}, {&(0x7f0000003e00)=""/75}], 0x0, &(0x7f0000003ec0)=""/64}, 0xf}, {{&(0x7f0000003f00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @private}}, 0x0, &(0x7f00000071c0)=[{&(0x7f0000003f80)=""/4096}, {&(0x7f0000004f80)=""/174}, {&(0x7f0000005040)=""/49}, {&(0x7f0000005080)=""/4096}, {&(0x7f0000006080)=""/252}, {&(0x7f0000006180)=""/29}, {&(0x7f00000061c0)=""/4096}], 0x0, &(0x7f0000007240)=""/52}, 0xa96}, {{&(0x7f0000007280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0, &(0x7f00000074c0)=[{&(0x7f0000007300)=""/110}, {&(0x7f0000007380)=""/164}, {&(0x7f0000000380)=""/115}]}, 0x1000}], 0x1, 0x40000000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x8) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 19.639836534s ago: executing program 1 (id=1740): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002940)=@delchain={0x38, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r5, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x10, 0xf}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 19.605503497s ago: executing program 1 (id=1741): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000f7e118a57c3240ce000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) socketpair(0x1e, 0xa, 0xd, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000069114e0000000000850000001a0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, r7, 0x2, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x10000) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r5, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) bind$alg(r3, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) ioctl$sock_TIOCOUTQ(r1, 0x5411, 0x0) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f00000000c0)=0xa40f) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x2c, r9, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x24000080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) connect$inet6(r10, &(0x7f0000000300)={0xa, 0x800, 0xffffffff, @loopback, 0xfffffffd}, 0x1c) 19.545199133s ago: executing program 4 (id=1742): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000080)=0x2) 19.441618868s ago: executing program 4 (id=1743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a0102e8ffffff00000000020000000900010073797a30000000000900030073797a320000000020000000020a03"], 0xa0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004040}, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000ff010200000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200009b4e0000b7030000000000008500000005000000bf0900000000000065090100003f000066000000ffffff80180100002020702500000000002020207b9a00fe000000005e9100000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @default, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r7, 0x80) accept$netrom(r7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) read(r6, &(0x7f00000003c0)=""/123, 0x7b) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x53, 0x3, 0x58, @empty, @mcast2={0xff, 0x5}, 0x8, 0x8000, 0xe3e1, 0xd04}}) r9 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) r10 = socket(0x2b, 0x80801, 0x1) ioctl$sock_qrtr_TIOCOUTQ(r10, 0x8905, &(0x7f0000000000)) 19.13692023s ago: executing program 3 (id=1744): r0 = socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$caif_stream(0x25, 0x1, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a40, 0x0) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='6]2', 0x3}], 0x1}, 0x400c000) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=@setlink={0x20, 0x13, 0x2, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x4ec3, 0x24040}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4810) 18.853850838s ago: executing program 2 (id=1745): socket$isdn(0x22, 0x2, 0x11) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f00000000c0)=0x400000101, 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000040028000480080002400000000008000140000000"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000"], 0x110}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x2, 0xd, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0xb, 0x800, 0x7) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r4], 0x40}}, 0x0) poll(&(0x7f0000000240), 0x0, 0x1000) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)="6f2ddbdeab4dd232496e71dc45dc697cbc3e061f10c17056f7ddf5ca791ed2970ea4c81aabd15140d137f03c486889905cf7f4600eb3df5e3a77f4238a9abbce7bca74d07e004e4c2863997af491d42cdd0c2f563ecd3bad96338a90e02e4fc177dc58067122f35f433c63e05d92f689e872abb0b2ace82dca8ae3d828374886e75c2b9b3dc8f25a8d606382de6bfa508ba517d00847223bedb78997ed35177de8e08c0f6d294745ebfa0a3b8d86bce0381431f4dbab87beca52e5733bc304e40812cb07e519eb5d0fe69176548db8f2f853b4fe0406b2b66b", 0xd9}], 0x1}, 0x4048081) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 18.61446659s ago: executing program 4 (id=1746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a0102e8ffffff00000000020000000900010073797a30000000000900030073797a320000000020000000020a03"], 0xa0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004040}, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000ff010200000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200009b4e0000b7030000000000008500000005000000bf0900000000000065090100003f000066000000ffffff80180100002020702500000000002020207b9a00fe000000005e9100000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r7, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r7, 0x80) accept$netrom(r7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) read(r6, &(0x7f00000003c0)=""/123, 0x7b) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x53, 0x3, 0x58, @empty, @mcast2={0xff, 0x5}, 0x8, 0x8000, 0xe3e1, 0xd04}}) r9 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) r10 = socket(0x2b, 0x80801, 0x1) ioctl$sock_qrtr_TIOCOUTQ(r10, 0x8905, &(0x7f0000000000)) 18.225565503s ago: executing program 3 (id=1747): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket(0x10, 0x3, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x1, 0x71bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0xe0f}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1f, 0x0, 0x0, {0x5}}, [], {0x14, 0x3e9}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) bind$alg(r2, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000317c41200000000", @ANYRES32, @ANYBLOB="a70e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000200e6ff0300000000000000000000000000000000000000ca6b9a692d004e8a88f632c9febd76f5062a5f40df3458fea2f033af961695685e0743a23bf62fde86412671357c0750465f9059e102e39a74e33d43a4db28f9727783"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000980)={0xffffffffffffffff, &(0x7f0000000880)='.\x00', 0x4042c0, &(0x7f00000008c0)={@align=0x1, {0x7, 0x2, 0x5, 0x2}}, 0x6, &(0x7f0000000900), &(0x7f0000000940)}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x501, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x14, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x65}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='syzkaller\x00', 0x3, 0xe4, &(0x7f0000000700)=""/228, 0x41100, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000a80)=[r5, 0xffffffffffffffff], &(0x7f0000000ac0)=[{0x1, 0x2, 0x7, 0xb}, {0x1, 0x3, 0xa, 0xb}], 0x10, 0x217}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYRES64=r4, @ANYRESOCT=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 17.979383302s ago: executing program 2 (id=1748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a0102e8ffffff00000000020000000900010073797a30000000000900030073797a320000000020000000020a03"], 0xa0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004040}, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @default, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r6, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r6, 0x80) accept$netrom(r6, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) read(r5, &(0x7f00000003c0)=""/123, 0x7b) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x53, 0x3, 0x58, @empty, @mcast2={0xff, 0x5}, 0x8, 0x8000, 0xe3e1, 0xd04}}) r7 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) 17.752940822s ago: executing program 4 (id=1749): accept$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x10000000, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a", 0x3f80) 17.521549927s ago: executing program 4 (id=1750): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffefff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002480)=@newtfilter={0x30, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc804}, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "0d767b344a4107111e7e642d07ae014c02021bf9ea748c446391894699ec720ff9827531e9b3340038d7a0916c5984381baee6cd3a24fa9327dfcad6fa7c5135531ac295b264596f6d3e857f152d0b7083fb07acdfabd1324a0014a096078ac9c249f66d2af98841b65c33dc69677149a24390411bda91281cd201379858f2fcca40d86f69ed5fc1d5674c90eccc7818ecfcb9e0418db476b3beb17e7a33795eaaf955a98da4290b20627cd3c3edb40de32380fc7781ce8bc43a77a459d826255142030193a40d8f3b2ce6909a57c5bea695b7699c7a393ef756b8ce29f84499994a1138f4be3eea8583115628cedb67fee1eada59655f2b9d67580e94534bc7"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) 17.494309059s ago: executing program 4 (id=1751): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa}, 0x94) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x30, r8, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x80000000, 0x8, 0x0, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) r9 = socket$alg(0x26, 0x5, 0x0) r10 = accept4$netrom(r0, &(0x7f0000000680)={{}, [@remote, @bcast, @remote, @bcast, @remote, @netrom, @default, @null]}, &(0x7f0000000700)=0x48, 0x0) ioctl$sock_netrom_SIOCADDRT(r10, 0x890b, &(0x7f0000000740)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x6, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7ff, 0x3, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 17.108080462s ago: executing program 2 (id=1752): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0xff40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 16.188287008s ago: executing program 2 (id=1753): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0c0000000100", 0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r4, &(0x7f0000001480)=0x2, 0x12) splice(r1, 0x0, r3, 0x0, 0x1100000000f336, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000040)={0x3, 0x4}, 0x2) sendmsg$inet6(r5, 0x0, 0x8080) unshare(0x2a020400) r7 = socket(0x2, 0x80805, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x9, 0x7, 0x7ff, 0x5493, 0x2, 0x0}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000080)={r8, 0x5, 0x7}, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000000140)={0x0, @can={0x1d, r9}, @vsock={0x28, 0x0, 0x0, @my=0x0}, @vsock, 0x4, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)='netdevsim0\x00', 0x3, 0x2, 0x9}) 15.322101823s ago: executing program 2 (id=1754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r1, 0x5, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$unix(0x1, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r11, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000f0ff0000000800050007"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000200)=ANY=[@ANYBLOB="50000000080211000001"], 0x5a) 4.504361073s ago: executing program 32 (id=1737): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x7, 0x6}) socket$inet(0x2, 0x3, 0xffffffff) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x453, 0x200, 0x70bd2d, 0x25dfdbfd, "e1ad27695238a95bc49d7a97574def28dfce9a5a7fac5c0cafe0a94b46435ad484245d9f48f9640f5ae0792f8b63b5250675da32c567f9a96b01abc57fedd5deb712e43daa054b0634df72427090fa2091d59067726831b3a7bc8c", [""]}, 0x6c}, 0x1, 0x0, 0x0, 0x41000}, 0x40805) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x8}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3d0b}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xff}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x2c, 0x8, 0x68, @private1, @local, 0x20, 0x1, 0x5, 0x33f}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x58, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x8800) 4.473803829s ago: executing program 33 (id=1741): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000f7e118a57c3240ce000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) socketpair(0x1e, 0xa, 0xd, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000069114e0000000000850000001a0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x14, r7, 0x2, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x10000) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="10010000", @ANYRES16=r5, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="f400028061000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004"], 0x110}, 0x1, 0x0, 0x0, 0x4000401}, 0x2404c080) bind$alg(r3, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) ioctl$sock_TIOCOUTQ(r1, 0x5411, 0x0) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f00000000c0)=0xa40f) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x2c, r9, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x24000080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) connect$inet6(r10, &(0x7f0000000300)={0xa, 0x800, 0xffffffff, @loopback, 0xfffffffd}, 0x1c) 2.991961278s ago: executing program 34 (id=1747): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket(0x10, 0x3, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x1, 0x71bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0xe0f}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1f, 0x0, 0x0, {0x5}}, [], {0x14, 0x3e9}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) bind$alg(r2, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000317c41200000000", @ANYRES32, @ANYBLOB="a70e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000200e6ff0300000000000000000000000000000000000000ca6b9a692d004e8a88f632c9febd76f5062a5f40df3458fea2f033af961695685e0743a23bf62fde86412671357c0750465f9059e102e39a74e33d43a4db28f9727783"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000980)={0xffffffffffffffff, &(0x7f0000000880)='.\x00', 0x4042c0, &(0x7f00000008c0)={@align=0x1, {0x7, 0x2, 0x5, 0x2}}, 0x6, &(0x7f0000000900), &(0x7f0000000940)}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x501, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x14, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x65}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='syzkaller\x00', 0x3, 0xe4, &(0x7f0000000700)=""/228, 0x41100, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000a80)=[r5, 0xffffffffffffffff], &(0x7f0000000ac0)=[{0x1, 0x2, 0x7, 0xb}, {0x1, 0x3, 0xa, 0xb}], 0x10, 0x217}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYRES64=r4, @ANYRESOCT=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.001695307s ago: executing program 35 (id=1751): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa}, 0x94) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x30, r8, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x80000000, 0x8, 0x0, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) r9 = socket$alg(0x26, 0x5, 0x0) r10 = accept4$netrom(r0, &(0x7f0000000680)={{}, [@remote, @bcast, @remote, @bcast, @remote, @netrom, @default, @null]}, &(0x7f0000000700)=0x48, 0x0) ioctl$sock_netrom_SIOCADDRT(r10, 0x890b, &(0x7f0000000740)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x6, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7ff, 0x3, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 0s ago: executing program 36 (id=1754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, r1, 0x5, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$unix(0x1, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r11, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000f0ff0000000800050007"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000200)=ANY=[@ANYBLOB="50000000080211000001"], 0x5a) kernel console output (not intermixed with test programs): d0: (slave wlan1): Opening slave failed [ 111.830580][ T7178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.855512][ T7182] netlink: 'syz.2.206': attribute type 11 has an invalid length. [ 111.888621][ T7182] netlink: 'syz.2.206': attribute type 23 has an invalid length. [ 111.896796][ T7182] __nla_validate_parse: 7 callbacks suppressed [ 111.896809][ T7182] netlink: 224 bytes leftover after parsing attributes in process `syz.2.206'. [ 111.968230][ T7187] macsec1: entered promiscuous mode [ 111.977885][ T7187] erspan0: entered promiscuous mode [ 111.988133][ T7187] erspan0: left promiscuous mode [ 112.003788][ T7186] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 112.179890][ T7194] netlink: 352 bytes leftover after parsing attributes in process `syz.0.211'. [ 112.190683][ T7194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.211'. [ 112.201207][ T7196] netlink: 40 bytes leftover after parsing attributes in process `syz.2.210'. [ 113.013917][ T7210] syzkaller0: entered promiscuous mode [ 113.020689][ T7210] syzkaller0: entered allmulticast mode [ 113.150212][ T7217] netlink: zone id is out of range [ 113.155452][ T7217] netlink: zone id is out of range [ 113.172393][ T7217] netlink: zone id is out of range [ 113.183840][ T7217] netlink: zone id is out of range [ 113.194794][ T7217] netlink: zone id is out of range [ 113.211901][ T7217] netlink: zone id is out of range [ 113.223808][ T7217] netlink: zone id is out of range [ 113.229362][ T7217] netlink: zone id is out of range [ 113.248338][ T7217] netlink: zone id is out of range [ 113.551671][ T7230] netlink: 40 bytes leftover after parsing attributes in process `syz.3.217'. [ 114.692768][ T7218] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 114.721632][ T7218] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 114.757759][ T7218] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 114.777332][ T50] block nbd0: Receive control failed (result -32) [ 114.933364][ T7241] netlink: 'syz.4.221': attribute type 13 has an invalid length. [ 114.962650][ T7241] netlink: 'syz.4.221': attribute type 17 has an invalid length. [ 115.014619][ T7245] netlink: 'syz.1.223': attribute type 10 has an invalid length. [ 115.075650][ T7251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.223'. [ 115.125461][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.221'. [ 115.126855][ T7241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.142229][ T7241] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.162293][ T7256] netlink: 'syz.0.224': attribute type 13 has an invalid length. [ 115.162379][ T7245] bond0: (slave wlan1): Opening slave failed [ 115.170089][ T7256] netlink: 'syz.0.224': attribute type 17 has an invalid length. [ 115.331628][ T7255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.362023][ T7256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.370526][ T7256] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.451601][ T7264] netlink: 40 bytes leftover after parsing attributes in process `syz.2.225'. [ 115.888091][ T7274] IPVS: Scheduler module ip_vs_ not found [ 115.914817][ T7279] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 115.942056][ T7278] syzkaller0: entered promiscuous mode [ 115.947926][ T7278] syzkaller0: entered allmulticast mode [ 115.959676][ T7274] 8021q: VLANs not supported on ip6gre0 [ 116.132928][ T7285] netlink: 40 bytes leftover after parsing attributes in process `syz.1.232'. [ 117.961783][ T7331] netlink: 'syz.2.243': attribute type 10 has an invalid length. [ 118.012029][ T7333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.243'. [ 118.047406][ T7331] bond0: (slave wlan1): Opening slave failed [ 118.098988][ T7336] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 118.107076][ T7336] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 118.185465][ T7333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.691348][ T6691] IPVS: starting estimator thread 0... [ 118.806401][ T7364] IPVS: using max 29 ests per chain, 69600 per kthread [ 119.577719][ T7386] netlink: 40 bytes leftover after parsing attributes in process `syz.0.251'. [ 119.628048][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 119.663615][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.252'. [ 120.067185][ T7398] syzkaller0: entered promiscuous mode [ 120.078545][ T7398] syzkaller0: entered allmulticast mode [ 120.338838][ T7401] netlink: 88 bytes leftover after parsing attributes in process `syz.4.256'. [ 120.553624][ T7406] tipc: Enabled bearer , priority 0 [ 120.578451][ T7404] syzkaller0: entered promiscuous mode [ 120.600981][ T7404] syzkaller0: entered allmulticast mode [ 120.737463][ T7402] tipc: Resetting bearer [ 120.818106][ T7402] tipc: Disabling bearer [ 121.037663][ T7418] Bluetooth: MGMT ver 1.23 [ 121.144225][ T7424] tipc: Started in network mode [ 121.150274][ T7424] tipc: Node identity bbbbbb01, cluster identity 4711 [ 121.158087][ T7424] tipc: Enabled bearer , priority 10 [ 122.034091][ T7457] netlink: 40 bytes leftover after parsing attributes in process `syz.2.265'. [ 122.110176][ T7463] netlink: 40 bytes leftover after parsing attributes in process `syz.3.266'. [ 122.279547][ T5900] tipc: Node number set to 3149642497 [ 122.298755][ T7473] netlink: 41 bytes leftover after parsing attributes in process `syz.4.269'. [ 122.316926][ T7473] netlink: 116 bytes leftover after parsing attributes in process `syz.4.269'. [ 122.340025][ T7473] netlink: 41 bytes leftover after parsing attributes in process `syz.4.269'. [ 122.805269][ T7477] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 122.821261][ T7477] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 122.944417][ T7484] erspan0: entered promiscuous mode [ 122.962333][ T7484] macsec1: entered promiscuous mode [ 123.000030][ T7484] erspan0: left promiscuous mode [ 123.055471][ T7492] __nla_validate_parse: 1 callbacks suppressed [ 123.055486][ T7492] netlink: 220 bytes leftover after parsing attributes in process `syz.0.274'. [ 123.072682][ T7492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.274'. [ 123.121827][ T7492] xt_hashlimit: size too large, truncated to 1048576 [ 123.156754][ T7495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.274'. [ 123.875451][ T7515] netlink: 40 bytes leftover after parsing attributes in process `syz.2.280'. [ 124.229800][ T7525] syzkaller0: entered promiscuous mode [ 124.240970][ T7525] syzkaller0: entered allmulticast mode [ 124.397323][ T7530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.417375][ T7530] netlink: 'syz.1.285': attribute type 10 has an invalid length. [ 124.439046][ T7530] bond0: (slave wlan1): Opening slave failed [ 124.446248][ T7532] netlink: 32 bytes leftover after parsing attributes in process `syz.4.286'. [ 124.464575][ T7530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.285'. [ 124.492260][ T7530] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 124.500789][ T7530] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 124.514661][ T7530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.624723][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 124.644621][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.288'. [ 124.798168][ T7545] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 124.820121][ T7545] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 124.867294][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.289'. [ 125.807825][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.299'. [ 126.177212][ T7607] syzkaller0: entered promiscuous mode [ 126.193076][ T7607] syzkaller0: entered allmulticast mode [ 126.298302][ T7612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.310834][ T7612] netlink: 'syz.3.304': attribute type 10 has an invalid length. [ 126.319615][ T7612] bond0: (slave wlan1): Opening slave failed [ 126.329316][ T7612] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 126.337642][ T7612] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 126.345068][ T7610] bridge0: port 3(syz_tun) entered blocking state [ 126.354358][ T7610] bridge0: port 3(syz_tun) entered disabled state [ 126.361280][ T7610] syz_tun: entered allmulticast mode [ 126.370425][ T7610] syz_tun: entered promiscuous mode [ 126.387773][ T7612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.478488][ T7619] "syz.0.305" (7619) uses obsolete ecb(arc4) skcipher [ 126.488120][ T7619] netlink: 'syz.0.305': attribute type 1 has an invalid length. [ 126.874191][ T7633] netlink: 'syz.1.310': attribute type 10 has an invalid length. [ 126.928943][ T7633] team0: Port device dummy0 added [ 127.055052][ T7627] net_ratelimit: 340 callbacks suppressed [ 127.055070][ T7627] IPVS: sh: FWM 3 0x00000003 - no destination available [ 127.161939][ T7640] team0: Port device team_slave_0 removed [ 127.240466][ T7642] batman_adv: batadv0: Adding interface: ipvlan0 [ 127.265742][ T7642] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.329702][ T7642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.342970][ T7642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.353353][ T7642] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active [ 127.364276][ T7646] veth0: entered promiscuous mode [ 127.386844][ T7649] bond0: entered promiscuous mode [ 127.401010][ T7649] bond_slave_0: entered promiscuous mode [ 127.408516][ T7649] bond_slave_1: entered promiscuous mode [ 127.572983][ T7632] bond0: left promiscuous mode [ 127.583530][ T7632] bond_slave_0: left promiscuous mode [ 127.589225][ T7632] bond_slave_1: left promiscuous mode [ 127.595025][ T7632] veth0: left promiscuous mode [ 127.751001][ T7663] syzkaller0: entered promiscuous mode [ 127.757163][ T7663] syzkaller0: entered allmulticast mode [ 128.096593][ T7674] __nla_validate_parse: 6 callbacks suppressed [ 128.096611][ T7674] netlink: 56 bytes leftover after parsing attributes in process `syz.1.319'. [ 128.141964][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 128.245517][ T7684] netlink: 'syz.0.321': attribute type 11 has an invalid length. [ 128.259828][ T7684] netlink: 'syz.0.321': attribute type 23 has an invalid length. [ 128.315572][ T7684] netlink: 224 bytes leftover after parsing attributes in process `syz.0.321'. [ 128.326844][ T5929] IPVS: starting estimator thread 0... [ 128.375566][ T7683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.395133][ T7683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.466919][ T7690] IPVS: using max 31 ests per chain, 74400 per kthread [ 128.543399][ T7701] netlink: 40 bytes leftover after parsing attributes in process `syz.2.326'. [ 128.927690][ T7715] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 128.935463][ T7715] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 129.407174][ T7723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.335'. [ 129.490624][ T7733] netlink: 52 bytes leftover after parsing attributes in process `syz.0.338'. [ 129.687691][ T7742] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 129.724500][ T7742] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 129.796405][ T7747] netlink: zone id is out of range [ 129.807409][ T7747] netlink: zone id is out of range [ 129.820588][ T7747] netlink: zone id is out of range [ 129.838223][ T7747] netlink: zone id is out of range [ 129.854064][ T7747] netlink: zone id is out of range [ 129.865379][ T7747] netlink: zone id is out of range [ 129.880424][ T7747] netlink: zone id is out of range [ 129.891508][ T7747] netlink: zone id is out of range [ 129.898133][ T7750] netlink: 'syz.2.344': attribute type 2 has an invalid length. [ 129.916582][ T7747] netlink: zone id is out of range [ 129.939253][ T7750] : entered promiscuous mode [ 129.949898][ T7723] tipc: New replicast peer: 255.255.255.255 [ 129.957877][ T7723] tipc: Enabled bearer , priority 10 [ 129.968483][ T7751] netlink: 41 bytes leftover after parsing attributes in process `syz.4.345'. [ 129.979673][ T7747] netlink: 'syz.2.344': attribute type 2 has an invalid length. [ 129.987799][ T7751] netlink: 116 bytes leftover after parsing attributes in process `syz.4.345'. [ 130.005898][ T7751] netlink: 41 bytes leftover after parsing attributes in process `syz.4.345'. [ 130.303459][ T7732] delete_channel: no stack [ 130.873755][ T7782] lo speed is unknown, defaulting to 1000 [ 130.902573][ T7782] lo speed is unknown, defaulting to 1000 [ 130.919397][ T7782] lo speed is unknown, defaulting to 1000 [ 131.044089][ T7788] netlink: 41 bytes leftover after parsing attributes in process `syz.3.359'. [ 131.383880][ T7782] infiniband syz0: set active [ 131.390545][ T5929] lo speed is unknown, defaulting to 1000 [ 131.405011][ T7782] infiniband syz0: added lo [ 131.584391][ T7803] lo speed is unknown, defaulting to 1000 [ 131.694469][ T7782] RDS/IB: syz0: added [ 131.714472][ T7782] smc: adding ib device syz0 with port count 1 [ 131.744512][ T7782] smc: ib device syz0 port 1 has no pnetid [ 131.752753][ T5929] lo speed is unknown, defaulting to 1000 [ 132.256741][ T7782] lo speed is unknown, defaulting to 1000 [ 132.406724][ T7827] bridge0: port 3(syz_tun) entered blocking state [ 132.413878][ T7827] bridge0: port 3(syz_tun) entered disabled state [ 132.423389][ T7827] syz_tun: entered allmulticast mode [ 132.431418][ T7827] syz_tun: entered promiscuous mode [ 132.437522][ T7827] bridge0: port 3(syz_tun) entered blocking state [ 132.444099][ T7827] bridge0: port 3(syz_tun) entered forwarding state [ 132.710355][ T7840] C: renamed from team_slave_0 [ 132.723310][ T7840] netlink: 'syz.3.377': attribute type 4 has an invalid length. [ 132.745448][ T7840] net_ratelimit: 354 callbacks suppressed [ 132.745461][ T7840] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 132.804698][ T7840] netlink: 'syz.3.377': attribute type 3 has an invalid length. [ 132.823106][ T7840] netlink: 'syz.3.377': attribute type 3 has an invalid length. [ 132.838673][ T7782] lo speed is unknown, defaulting to 1000 [ 133.152057][ T7847] __nla_validate_parse: 8 callbacks suppressed [ 133.152075][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.380'. [ 133.449280][ T7782] lo speed is unknown, defaulting to 1000 [ 134.000658][ T7782] lo speed is unknown, defaulting to 1000 [ 134.001223][ T7875] tap0: tun_chr_ioctl cmd 1074025677 [ 134.018827][ T7875] tap0: linktype set to 778 [ 134.240745][ T7782] lo speed is unknown, defaulting to 1000 [ 134.295472][ T7883] syzkaller0: entered promiscuous mode [ 134.301172][ T7883] syzkaller0: entered allmulticast mode [ 134.507819][ T7887] veth0_macvtap: entered allmulticast mode [ 134.524098][ T7887] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 134.559928][ T7782] lo speed is unknown, defaulting to 1000 [ 135.901286][ T7916] tap0: tun_chr_ioctl cmd 1074025677 [ 135.915917][ T7916] tap0: linktype set to 778 [ 135.927918][ T7924] syzkaller0: entered promiscuous mode [ 135.941625][ T7924] syzkaller0: entered allmulticast mode [ 136.134001][ T7939] netlink: 20 bytes leftover after parsing attributes in process `syz.1.407'. [ 136.232135][ T7944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.410'. [ 136.265081][ T7935] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 136.424060][ T7934] lo speed is unknown, defaulting to 1000 [ 136.459128][ T7945] syzkaller0: entered promiscuous mode [ 136.481676][ T7945] syzkaller0: entered allmulticast mode [ 136.615193][ T7951] netlink: 'syz.4.411': attribute type 13 has an invalid length. [ 137.120710][ T7959] IPVS: sh: FWM 3 0x00000003 - no destination available [ 137.159964][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 137.211283][ T7962] lo speed is unknown, defaulting to 1000 [ 137.603910][ T7980] tap0: tun_chr_ioctl cmd 1074025677 [ 137.628632][ T7980] tap0: linktype set to 778 [ 138.452734][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.432'. [ 138.486161][ T8021] netlink: 'syz.4.432': attribute type 1 has an invalid length. [ 138.544522][ T8024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.581590][ T8022] netlink: 'syz.0.433': attribute type 10 has an invalid length. [ 138.632049][ T8024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.433'. [ 138.644849][ T8025] bond1: (slave geneve2): making interface the new active one [ 138.653706][ T8025] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 138.670303][ T8022] bond0: (slave wlan1): Opening slave failed [ 138.678729][ T47] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 138.786498][ T47] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 138.811963][ T47] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 138.832039][ T47] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 138.838275][ T8033] IPVS: sh: FWM 3 0x00000003 - no destination available [ 138.870543][ T8022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.950889][ T8032] lo speed is unknown, defaulting to 1000 [ 139.117708][ T8039] tap0: tun_chr_ioctl cmd 1074025677 [ 139.130983][ T8039] tap0: linktype set to 778 [ 139.298570][ T8041] netlink: 'syz.3.439': attribute type 1 has an invalid length. [ 139.388799][ T8041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.422682][ T8050] netlink: 'syz.2.440': attribute type 13 has an invalid length. [ 139.452219][ T8050] netlink: 'syz.2.440': attribute type 17 has an invalid length. [ 139.489740][ T8041] bond1: (slave geneve2): making interface the new active one [ 139.499261][ T8041] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 139.517994][ T8047] vlan3: entered allmulticast mode [ 139.520002][ T8041] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 139.523307][ T8047] bond1: entered allmulticast mode [ 139.534979][ T8041] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 139.543543][ T8047] geneve2: entered allmulticast mode [ 139.584204][ T8043] lo speed is unknown, defaulting to 1000 [ 139.960847][ T8050] bridge0: port 3(syz_tun) entered blocking state [ 139.967516][ T8050] bridge0: port 3(syz_tun) entered forwarding state [ 140.049650][ T8050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.092188][ T8050] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.155509][ T8050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.188242][ T6161] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.210118][ T6161] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.282954][ T6161] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.311989][ T6161] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.415116][ T8068] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 140.528538][ T8066] : entered promiscuous mode [ 140.854511][ T8082] netlink: 40 bytes leftover after parsing attributes in process `syz.1.452'. [ 140.920056][ T8074] tap0: tun_chr_ioctl cmd 1074025677 [ 140.955923][ T8074] tap0: linktype set to 778 [ 142.052747][ T8111] tap0: tun_chr_ioctl cmd 1074025677 [ 142.068793][ T8111] tap0: linktype set to 778 [ 142.288382][ T8118] lo speed is unknown, defaulting to 1000 [ 142.331570][ T8126] IPVS: nq: FWM 3 0x00000003 - no destination available [ 142.361379][ T8128] netlink: 248 bytes leftover after parsing attributes in process `syz.3.470'. [ 142.416564][ T8112] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 142.536422][ T8112] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 142.675301][ T8112] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 142.785120][ T8112] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 142.829884][ T8123] lo speed is unknown, defaulting to 1000 [ 143.012468][ T65] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 143.156494][ T65] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 143.210892][ T6160] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 143.295578][ T6160] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 143.467701][ T8153] lo speed is unknown, defaulting to 1000 [ 144.340566][ T8182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.486'. [ 144.377560][ T8182] netlink: 32 bytes leftover after parsing attributes in process `syz.3.486'. [ 144.418891][ T8182] netlink: 28 bytes leftover after parsing attributes in process `syz.3.486'. [ 144.467987][ T8182] netlink: 32 bytes leftover after parsing attributes in process `syz.3.486'. [ 145.591532][ T8211] xfrm0: entered allmulticast mode [ 145.605261][ T8211] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 146.148763][ T8226] IPVS: sh: FWM 3 0x00000003 - no destination available [ 146.206522][ T8217] lo speed is unknown, defaulting to 1000 [ 146.829942][ T8224] lo speed is unknown, defaulting to 1000 [ 148.959370][ T8249] netlink: 20 bytes leftover after parsing attributes in process `syz.2.498'. [ 149.352574][ T8271] lo speed is unknown, defaulting to 1000 [ 150.246161][ T8281] IPVS: sh: FWM 3 0x00000003 - no destination available [ 150.264453][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 150.416939][ T8280] lo speed is unknown, defaulting to 1000 [ 151.355517][ T8311] lo speed is unknown, defaulting to 1000 [ 152.630237][ T8357] tap0: tun_chr_ioctl cmd 1074025677 [ 152.636641][ T8357] tap0: linktype set to 778 [ 153.415889][ T8387] netlink: 'syz.0.554': attribute type 1 has an invalid length. [ 153.451155][ T8387] netlink: 'syz.0.554': attribute type 1 has an invalid length. [ 153.491202][ T8387] tap0: tun_chr_ioctl cmd 1074025677 [ 153.512792][ T8387] tap0: linktype set to 778 [ 153.778036][ T8401] nbd0: detected capacity change from 0 to 96 [ 153.824254][ T5839] block nbd0: Dead connection, failed to find a fallback [ 153.994148][ T8409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'. [ 154.011629][ T8409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'. [ 154.034866][ T8411] ±ÿÿÿÿa–ïD: renamed from lo [ 154.041847][ T8409] netlink: 58 bytes leftover after parsing attributes in process `syz.0.565'. [ 154.127309][ T8417] netlink: 24 bytes leftover after parsing attributes in process `syz.3.568'. [ 154.176669][ T8409] team0 (unregistering): Port device team_slave_1 removed [ 154.405202][ T8429] netlink: 104 bytes leftover after parsing attributes in process `syz.0.574'. [ 155.282052][ T8473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.594'. [ 155.374607][ T8478] netlink: 52 bytes leftover after parsing attributes in process `syz.4.595'. [ 155.449557][ T8480] netlink: 'syz.2.597': attribute type 1 has an invalid length. [ 155.466438][ T8480] netlink: 'syz.2.597': attribute type 1 has an invalid length. [ 155.518604][ T8480] tap0: tun_chr_ioctl cmd 1074025677 [ 155.524021][ T8480] tap0: linktype set to 778 [ 155.610832][ T8490] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 155.848538][ T8501] netlink: 180 bytes leftover after parsing attributes in process `syz.2.605'. [ 156.011548][ T8509] xt_connbytes: Forcing CT accounting to be enabled [ 156.018516][ T8509] xt_CT: You must specify a L4 protocol and not use inversions on it [ 156.187641][ T8475] delete_channel: no stack [ 156.247765][ T8517] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32) [ 156.650803][ T8541] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 156.865143][ T8551] netlink: 16 bytes leftover after parsing attributes in process `syz.2.625'. [ 157.040386][ T8562] ipvlan2: entered promiscuous mode [ 157.187596][ T8564] lo speed is unknown, defaulting to 1000 [ 157.219746][ T8571] netlink: 20 bytes leftover after parsing attributes in process `syz.2.636'. [ 158.384261][ T8620] netlink: 'syz.1.655': attribute type 1 has an invalid length. [ 158.393607][ T8620] netlink: 'syz.1.655': attribute type 1 has an invalid length. [ 158.412241][ T8620] tap0: tun_chr_ioctl cmd 1074025677 [ 158.422751][ T8620] tap0: linktype set to 778 [ 158.788381][ T8635] netlink: 'syz.2.662': attribute type 4 has an invalid length. [ 158.948748][ T8641] netlink: 'syz.1.664': attribute type 1 has an invalid length. [ 158.956811][ T8641] netlink: 'syz.1.664': attribute type 1 has an invalid length. [ 158.964923][ T8641] netlink: 'syz.1.664': attribute type 1 has an invalid length. [ 158.973581][ T8641] netlink: 'syz.1.664': attribute type 1 has an invalid length. [ 158.985641][ T8641] netlink: 'syz.1.664': attribute type 1 has an invalid length. [ 158.995170][ T8641] netlink: 'syz.1.664': attribute type 1 has an invalid length. [ 159.014780][ T8641] netlink: 'syz.1.664': attribute type 1 has an invalid length. [ 159.048035][ T8641] netlink: 'syz.1.664': attribute type 1 has an invalid length. [ 159.065050][ T8641] netlink: 'syz.1.664': attribute type 1 has an invalid length. [ 159.233146][ T8656] tap0: tun_chr_ioctl cmd 1074025677 [ 159.247513][ T8656] tap0: linktype set to 778 [ 159.291259][ T8639] __nla_validate_parse: 9 callbacks suppressed [ 159.291274][ T8639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.661'. [ 159.401886][ T8665] tipc: Started in network mode [ 159.410630][ T8665] tipc: Node identity fe80000000000000000000000000003, cluster identity 4711 [ 159.420949][ T8665] tipc: Enabling of bearer rejected, failed to enable media [ 159.823645][ T8642] delete_channel: no stack [ 160.068166][ T8680] lo speed is unknown, defaulting to 1000 [ 160.069801][ T8679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.119635][ T8679] bond0: (slave wlan1): Opening slave failed [ 160.129279][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.676'. [ 160.156594][ T8679] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 160.167742][ T8679] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 160.183706][ T8679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.335594][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.680'. [ 160.372449][ T8687] vlan0: entered allmulticast mode [ 160.388975][ T8687] macvtap0: entered allmulticast mode [ 160.564915][ T8693] tap0: tun_chr_ioctl cmd 1074025677 [ 160.578268][ T8693] tap0: linktype set to 778 [ 160.624981][ T8699] netlink: 52 bytes leftover after parsing attributes in process `syz.2.685'. [ 160.763601][ T1328] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.779561][ T1328] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.812311][ T1328] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.836965][ T1328] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.308662][ T8723] lo speed is unknown, defaulting to 1000 [ 161.443856][ T8728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.446928][ T8698] delete_channel: no stack [ 161.467665][ T8728] bond0: (slave wlan1): Opening slave failed [ 161.488861][ T8728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.698'. [ 161.522869][ T8728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.566121][ T8733] vcan0: tx address claim with dest, not broadcast [ 161.662602][ T8735] tap0: tun_chr_ioctl cmd 1074025677 [ 161.668455][ T8735] tap0: linktype set to 778 [ 162.023528][ T8750] netlink: 41 bytes leftover after parsing attributes in process `syz.0.707'. [ 162.037721][ T8750] netlink: 116 bytes leftover after parsing attributes in process `syz.0.707'. [ 162.069830][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.708'. [ 162.196276][ T8758] netlink: 52 bytes leftover after parsing attributes in process `syz.3.710'. [ 162.215189][ T8725] delete_channel: no stack [ 162.412936][ T8766] tipc: Started in network mode [ 162.423492][ T8766] tipc: Node identity 4246, cluster identity 4711 [ 162.441787][ T8766] tipc: Node number set to 16966 [ 162.534608][ T8770] tap0: tun_chr_ioctl cmd 1074025677 [ 162.550815][ T8770] tap0: linktype set to 778 [ 162.689702][ T8775] lo speed is unknown, defaulting to 1000 [ 162.894406][ T8791] block nbd0: reconnected socket [ 162.905579][ T50] block nbd0: Receive control failed (result -104) [ 162.936804][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.725'. [ 163.010077][ T8757] delete_channel: no stack [ 163.199811][ T8803] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 163.357065][ T8807] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 163.518816][ T8811] tap0: tun_chr_ioctl cmd 1074025677 [ 163.528445][ T8811] tap0: linktype set to 778 [ 164.262769][ T8845] team0: No ports can be present during mode change [ 164.599901][ T8866] __nla_validate_parse: 10 callbacks suppressed [ 164.599913][ T8866] netlink: 41 bytes leftover after parsing attributes in process `syz.4.755'. [ 164.617056][ T8866] netlink: 116 bytes leftover after parsing attributes in process `syz.4.755'. [ 164.621671][ T8824] delete_channel: no stack [ 164.626747][ T8866] netlink: 41 bytes leftover after parsing attributes in process `syz.4.755'. [ 164.769389][ T8868] lo speed is unknown, defaulting to 1000 [ 164.977178][ T8876] nbd1: detected capacity change from 0 to 63 [ 164.990968][ T50] block nbd1: Receive control failed (result -104) [ 165.260249][ T8853] delete_channel: no stack [ 165.588362][ T8895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.639614][ T8895] validate_nla: 14 callbacks suppressed [ 165.639630][ T8895] netlink: 'syz.1.767': attribute type 10 has an invalid length. [ 165.682410][ T8895] bond0: (slave wlan1): Opening slave failed [ 165.707283][ T8903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.767'. [ 165.748022][ T8895] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 165.783327][ T8895] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 165.819520][ T8906] netlink: 40 bytes leftover after parsing attributes in process `syz.4.771'. [ 165.835051][ T8895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.138492][ T8924] tap0: tun_chr_ioctl cmd 1074025677 [ 166.143990][ T8924] tap0: linktype set to 778 [ 166.286724][ T8929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.781'. [ 166.396997][ T8934] tap0: tun_chr_ioctl cmd 1074025677 [ 166.402732][ T8934] tap0: linktype set to 776 [ 166.457432][ T8938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.785'. [ 166.707950][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.788'. [ 166.718825][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.788'. [ 166.728665][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.788'. [ 167.579091][ T8981] tipc: Started in network mode [ 167.584098][ T8981] tipc: Node identity 080211000001, cluster identity 4711 [ 167.591759][ T8981] tipc: Enabled bearer , priority 0 [ 167.599549][ T8981] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 167.606997][ T8981] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 168.258410][ T9008] tipc: Enabling of bearer rejected, already enabled [ 168.641810][ T9026] tipc: Enabled bearer , priority 0 [ 168.649410][ T9026] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 168.657288][ T9026] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 168.727542][ T5927] tipc: Node number set to 134418688 [ 168.831189][ T9037] tipc: Enabling of bearer rejected, already enabled [ 169.007238][ T9043] netlink: 'syz.1.825': attribute type 1 has an invalid length. [ 169.025833][ T9043] netlink: 'syz.1.825': attribute type 2 has an invalid length. [ 169.136846][ T9049] team0 (unregistering): Port device team_slave_0 removed [ 169.147159][ T9049] team0 (unregistering): Port device team_slave_1 removed [ 169.364697][ T9063] tipc: Enabled bearer , priority 0 [ 169.854643][ T9088] __nla_validate_parse: 8 callbacks suppressed [ 169.854661][ T9088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.844'. [ 169.912889][ T9088] macvlan2: entered allmulticast mode [ 169.935011][ T9088] hsr0: entered allmulticast mode [ 169.952859][ T9088] hsr_slave_0: entered allmulticast mode [ 169.972413][ T9088] hsr_slave_1: entered allmulticast mode [ 170.212129][ T9102] tipc: Enabling of bearer rejected, already enabled [ 170.422282][ T9110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.462623][ T9110] netlink: 'syz.3.853': attribute type 10 has an invalid length. [ 170.478238][ T9110] bond0: (slave wlan1): Opening slave failed [ 170.494896][ T5927] tipc: Node number set to 4269801520 [ 170.502429][ T9110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.853'. [ 170.528306][ T9110] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 170.535438][ T9110] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 170.551598][ T9110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.650116][ T9122] xt_hashlimit: size too large, truncated to 1048576 [ 171.073947][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.862'. [ 171.208058][ T9141] tipc: Enabling of bearer rejected, already enabled [ 171.579174][ T9155] netlink: 'syz.3.870': attribute type 12 has an invalid length. [ 171.629338][ T9155] netlink: 'syz.3.870': attribute type 29 has an invalid length. [ 171.638643][ T9155] netlink: 148 bytes leftover after parsing attributes in process `syz.3.870'. [ 171.650684][ T9155] netlink: 'syz.3.870': attribute type 1 has an invalid length. [ 171.660532][ T9155] netlink: 47 bytes leftover after parsing attributes in process `syz.3.870'. [ 171.661888][ T9161] nbd: socks must be embedded in a SOCK_ITEM attr [ 171.806997][ T9167] netlink: 'syz.3.873': attribute type 8 has an invalid length. [ 171.816604][ T9167] sch_fq: defrate 0 ignored. [ 171.828534][ T9166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.848611][ T9165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.874354][ T9166] netlink: 'syz.2.874': attribute type 10 has an invalid length. [ 171.888770][ T9165] netlink: 'syz.1.875': attribute type 10 has an invalid length. [ 171.907927][ T9165] bond0: (slave wlan1): Opening slave failed [ 171.915129][ T9166] bond0: (slave wlan1): Opening slave failed [ 171.922815][ T9165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.875'. [ 171.926867][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.874'. [ 171.934744][ T9169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.954207][ T9165] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 171.961773][ T9165] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 171.975486][ T9169] netlink: 'syz.3.877': attribute type 10 has an invalid length. [ 171.986709][ T9166] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 171.994399][ T9166] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 172.006231][ T9165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.016895][ T9166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.026348][ T9169] bond0: (slave wlan1): Opening slave failed [ 172.049984][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.877'. [ 172.054511][ T9175] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 172.077386][ T9169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.155685][ T9180] netlink: 'syz.0.880': attribute type 3 has an invalid length. [ 172.163394][ T9180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.880'. [ 172.483319][ T9188] netlink: 40 bytes leftover after parsing attributes in process `syz.4.883'. [ 172.776717][ T30] audit: type=1107 audit(1776482253.749:12): pid=9200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 173.637070][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.647021][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.655926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.664169][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.869007][ T9248] tipc: Enabling of bearer rejected, already enabled [ 173.880968][ T9248] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 173.897723][ T9248] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 174.563103][ T9278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.593412][ T9278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.609391][ T9278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.618484][ T9282] tipc: Enabling of bearer rejected, already enabled [ 174.626334][ T9278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.628330][ T9282] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 174.635022][ T9278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.652633][ T9278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.665403][ T9282] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 175.657833][ T9288] delete_channel: no stack [ 175.793566][ T9335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.242316][ T9363] __nla_validate_parse: 9 callbacks suppressed [ 176.242334][ T9363] netlink: 52 bytes leftover after parsing attributes in process `syz.1.956'. [ 177.057782][ T9362] delete_channel: no stack [ 177.150863][ T9398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.971'. [ 177.860315][ T9432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.988'. [ 177.882063][ T9432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.988'. [ 177.913971][ T9432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.988'. [ 177.937627][ T9432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.988'. [ 177.962343][ T9434] netlink: 'syz.0.989': attribute type 1 has an invalid length. [ 177.970442][ T9434] netlink: 'syz.0.989': attribute type 2 has an invalid length. [ 178.129090][ T9443] syzkaller1: entered promiscuous mode [ 178.145435][ T9443] syzkaller1: entered allmulticast mode [ 178.337116][ T9459] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 179.114230][ T9499] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1019'. [ 179.278381][ T9504] lo speed is unknown, defaulting to 1000 [ 179.318027][ T9505] net_ratelimit: 54 callbacks suppressed [ 179.318043][ T9505] IPVS: nq: FWM 3 0x00000003 - no destination available [ 180.110807][ T9520] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1026'. [ 180.273144][ T9535] macvlan2: entered promiscuous mode [ 180.388913][ T9541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.398221][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.413956][ T9541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.425912][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.437729][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.446783][ T9541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.456153][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.465480][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.474129][ T9541] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.715394][ T9555] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1039'. [ 181.477111][ T9592] lo speed is unknown, defaulting to 1000 [ 181.546141][ T9554] delete_channel: no stack [ 181.668806][ T9603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1054'. [ 181.821333][ T9611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1056'. [ 182.267607][ T9632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1058'. [ 182.934790][ T9649] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1064'. [ 183.137583][ T9651] netlink: 'syz.3.1065': attribute type 4 has an invalid length. [ 183.166253][ T9651] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1065'. [ 183.390591][ T9671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1071'. [ 183.390714][ T9672] xt_hashlimit: size too large, truncated to 1048576 [ 183.467224][ T9671] team0 (unregistering): Port device C removed [ 183.489634][ T9671] team0 (unregistering): Port device team_slave_1 removed [ 183.571728][ T9679] dummy0: Caught tx_queue_len zero misconfig [ 183.607682][ T9679] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1073'. [ 183.677519][ T9683] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 183.720731][ T9648] delete_channel: no stack [ 184.529552][ T9716] syzkaller1: entered promiscuous mode [ 184.548757][ T9716] syzkaller1: entered allmulticast mode [ 184.559302][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1084'. [ 184.618728][ T9725] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1086'. [ 184.640018][ T9721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.653655][ T9721] netlink: 'syz.0.1085': attribute type 10 has an invalid length. [ 184.691312][ T9721] bond0: (slave wlan1): Opening slave failed [ 184.709534][ T9730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1085'. [ 184.768897][ T9721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.854801][ T9737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.881494][ T9737] netlink: 'syz.2.1090': attribute type 10 has an invalid length. [ 184.911993][ T9737] bond0: (slave wlan1): Opening slave failed [ 184.934179][ T9737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.127463][ T9752] tipc: Enabling of bearer rejected, already enabled [ 185.598655][ T9732] delete_channel: no stack [ 185.714419][ T9777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.733843][ T9777] netlink: 'syz.4.1108': attribute type 10 has an invalid length. [ 185.751633][ T9777] bond0: (slave wlan1): Opening slave failed [ 185.782765][ T9779] tipc: Enabling of bearer rejected, already enabled [ 185.793969][ T9777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.845454][ T9785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.859751][ T9785] netlink: 'syz.3.1110': attribute type 10 has an invalid length. [ 185.868347][ T9785] bond0: (slave wlan1): Opening slave failed [ 185.877747][ T9785] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 185.884968][ T9785] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 185.897731][ T9785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.071922][ T9791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.084756][ T9791] netlink: 'syz.0.1113': attribute type 10 has an invalid length. [ 186.093349][ T9791] bond0: (slave wlan1): Opening slave failed [ 186.104284][ T9791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.631720][ T9806] tipc: Enabling of bearer rejected, already enabled [ 186.805159][ T9818] __nla_validate_parse: 6 callbacks suppressed [ 186.805176][ T9818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1123'. [ 186.999601][ T9823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1124'. [ 187.021483][ T9806] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 187.029540][ T9806] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 187.127967][ T9827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.141106][ T9827] netlink: 'syz.2.1125': attribute type 10 has an invalid length. [ 187.150507][ T9827] bond0: (slave wlan1): Opening slave failed [ 187.159726][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1125'. [ 187.171276][ T9827] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 187.180020][ T9827] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 187.191219][ T9827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.759834][ T9836] net_ratelimit: 17 callbacks suppressed [ 187.759851][ T9836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.777000][ T9836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.785458][ T9836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.798016][ T9836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.806734][ T9836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.817790][ T9835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.162734][ T9843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.183650][ T9845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.196701][ T9845] netlink: 'syz.1.1132': attribute type 10 has an invalid length. [ 188.205175][ T9845] bond0: (slave wlan1): Opening slave failed [ 188.213371][ T9845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1132'. [ 188.235945][ T9845] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 188.252162][ T9845] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 188.265474][ T9845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.497198][ T9859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.505522][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.647739][ T9861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1137'. [ 188.833631][ T9865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.851604][ T9865] netlink: 'syz.0.1138': attribute type 10 has an invalid length. [ 188.860074][ T9865] bond0: (slave wlan1): Opening slave failed [ 188.867176][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1138'. [ 188.880125][ T9865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.280340][ T9871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1140'. [ 189.848267][ T9897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.865525][ T9897] netlink: 'syz.4.1149': attribute type 10 has an invalid length. [ 189.913180][ T9897] bond0: (slave wlan1): Opening slave failed [ 189.938305][ T9897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1149'. [ 190.006495][ T9897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.111260][ T9908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1155'. [ 190.127849][ T9910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1156'. [ 190.180091][ T9913] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 191.181033][ T9952] "syz.1.1173" (9952) uses obsolete ecb(arc4) skcipher [ 191.236293][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.252615][ T9956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.267171][ T9956] netlink: 'syz.1.1175': attribute type 10 has an invalid length. [ 191.275643][ T9956] bond0: (slave wlan1): Opening slave failed [ 191.294369][ T9956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.702686][ T9974] xt_hashlimit: size too large, truncated to 1048576 [ 192.072348][ T9990] __nla_validate_parse: 7 callbacks suppressed [ 192.072365][ T9990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1191'. [ 192.540315][T10009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.556458][T10009] netlink: 'syz.4.1198': attribute type 10 has an invalid length. [ 192.579252][T10009] bond0: (slave wlan1): Opening slave failed [ 192.587375][T10009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1198'. [ 192.602218][T10009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.736601][T10014] tls_set_device_offload: netdev not found [ 192.864315][T10023] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1202'. [ 192.886281][T10023] net_ratelimit: 7 callbacks suppressed [ 192.886296][T10023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.945076][T10023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.020126][T10023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.049325][T10023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.075635][T10023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.160757][T10017] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.457605][T10048] tipc: Enabling of bearer rejected, already enabled [ 193.485029][ T2142] block nbd0: Possible stuck request ffff888027250000: control (read@0,4096B). Runtime 30 seconds [ 193.500532][T10048] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 193.508417][T10048] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 193.531045][T10052] IPv6: sit1: Disabled Multicast RS [ 193.612327][T10057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1217'. [ 193.747685][T10064] xt_hashlimit: size too large, truncated to 1048576 [ 193.937135][T10078] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1222'. [ 193.948724][T10078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.968955][T10078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.013686][T10078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.024899][T10078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.082089][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1224'. [ 194.584638][T10102] tap0: tun_chr_ioctl cmd 1074025677 [ 194.596431][T10102] tap0: linktype set to 778 [ 194.902586][T10110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1233'. [ 194.963887][T10110] team0 (unregistering): Port device team_slave_0 removed [ 194.991697][T10110] team0 (unregistering): Port device team_slave_1 removed [ 195.026685][T10110] team0 (unregistering): Port device dummy0 removed [ 195.228075][T10120] netlink: 'syz.3.1237': attribute type 1 has an invalid length. [ 195.317542][T10120] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.397413][ T5158] block nbd1: Possible stuck request ffff88802728e000: control (read@0,1024B). Runtime 30 seconds [ 195.408217][ T5158] block nbd1: Possible stuck request ffff88802728e1c0: control (read@1024,1024B). Runtime 30 seconds [ 195.419243][ T5158] block nbd1: Possible stuck request ffff88802728e380: control (read@2048,1024B). Runtime 30 seconds [ 195.433158][ T5158] block nbd1: Possible stuck request ffff88802728e540: control (read@3072,1024B). Runtime 30 seconds [ 195.689513][T10142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1244'. [ 195.726410][T10139] netlink: 'syz.2.1243': attribute type 5 has an invalid length. [ 195.919649][T10148] lo speed is unknown, defaulting to 1000 [ 196.220062][T10165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1249'. [ 196.702682][T10181] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1256'. [ 197.136640][T10199] scsi_nl_rcv_msg: discarding partial skb [ 197.212874][T10207] __nla_validate_parse: 2 callbacks suppressed [ 197.212890][T10207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1266'. [ 197.517773][T10180] delete_channel: no stack [ 197.644844][T10218] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1270'. [ 197.655054][T10218] netlink: 'syz.3.1270': attribute type 1 has an invalid length. [ 197.670934][T10219] "syz.2.1271" (10219) uses obsolete ecb(arc4) skcipher [ 197.675216][T10218] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1270'. [ 197.815171][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1274'. [ 197.840753][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1274'. [ 198.231634][ T30] audit: type=1107 audit(1776482279.209:13): pid=10245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 198.336726][T10250] ±ÿÿÿÿa–ïD: Caught tx_queue_len zero misconfig [ 198.358212][T10250] netlink: 'syz.4.1284': attribute type 1 has an invalid length. [ 198.370149][T10250] netlink: 352 bytes leftover after parsing attributes in process `syz.4.1284'. [ 198.381874][T10250] netlink: 'syz.4.1284': attribute type 1 has an invalid length. [ 198.390641][T10250] netlink: 352 bytes leftover after parsing attributes in process `syz.4.1284'. [ 198.560464][T10260] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1286'. [ 198.588323][T10262] net_ratelimit: 1027 callbacks suppressed [ 198.588339][T10262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.602568][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.699594][T10266] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1289'. [ 199.752491][T10298] tipc: Enabled bearer , priority 0 [ 199.811988][T10298] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 199.828452][T10298] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 199.884479][T10298] tipc: Resetting bearer [ 199.899959][T10299] lo speed is unknown, defaulting to 1000 [ 200.092491][ T30] audit: type=1107 audit(1776482281.069:14): pid=10305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 200.092544][T10308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1306'. [ 200.275578][T10316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.324990][T10316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.330343][T10321] tipc: Enabling of bearer rejected, already enabled [ 200.344056][T10321] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 200.351882][T10321] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 200.371335][T10316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.393668][T10316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.473776][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.517372][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.548154][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.577296][T10328] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.004490][ T30] audit: type=1107 audit(1776482281.979:15): pid=10343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 201.128677][T10350] tipc: Enabling of bearer rejected, already enabled [ 201.512056][T10369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.555506][T10369] netlink: 'syz.4.1329': attribute type 10 has an invalid length. [ 201.575240][T10369] bond0: (slave wlan1): Opening slave failed [ 201.601732][T10369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.622204][T10371] netlink: 'syz.0.1330': attribute type 29 has an invalid length. [ 201.641499][T10371] netlink: 'syz.0.1330': attribute type 29 has an invalid length. [ 201.658659][T10371] netlink: 'syz.0.1330': attribute type 32 has an invalid length. [ 202.261556][ T30] audit: type=1107 audit(1776482283.239:16): pid=10375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 202.633352][T10388] tipc: Enabling of bearer rejected, already enabled [ 202.642497][T10388] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 202.650494][T10388] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 202.692376][T10389] __nla_validate_parse: 5 callbacks suppressed [ 202.692391][T10389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1337'. [ 202.938582][T10399] lo speed is unknown, defaulting to 1000 [ 203.064566][ T30] audit: type=1107 audit(1776482284.039:17): pid=10409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 203.856460][T10429] tipc: Enabled bearer , priority 0 [ 203.864578][T10429] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 203.872493][T10429] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 203.885521][T10429] tipc: Resetting bearer [ 204.304477][ T30] audit: type=1107 audit(1776482285.279:18): pid=10443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 204.568709][T10452] IPVS: Scheduler module ip_vs_sip not found [ 205.264443][T10476] syzkaller1: entered promiscuous mode [ 205.270443][T10476] syzkaller1: entered allmulticast mode [ 205.335543][ T30] audit: type=1107 audit(1776482286.309:19): pid=10479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 205.540758][T10491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1373'. [ 205.899501][T10505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1379'. [ 206.017406][ T30] audit: type=1107 audit(1776482286.999:20): pid=10514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 206.793064][ T30] audit: type=1107 audit(1776482287.769:21): pid=10541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 206.902313][T10548] tap0: tun_chr_ioctl cmd 1074025677 [ 206.915368][T10548] tap0: linktype set to 778 [ 206.941618][T10550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1398'. [ 206.974640][T10554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1399'. [ 207.104876][T10560] syzkaller1: entered promiscuous mode [ 207.116837][T10560] syzkaller1: entered allmulticast mode [ 207.425516][T10576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1407'. [ 207.663016][T10583] tap0: tun_chr_ioctl cmd 1074025677 [ 207.668826][T10583] tap0: linktype set to 778 [ 207.770465][T10588] netlink: 'syz.1.1412': attribute type 4 has an invalid length. [ 207.822461][T10588] netlink: 'syz.1.1412': attribute type 4 has an invalid length. [ 207.870394][T10592] net_ratelimit: 127 callbacks suppressed [ 207.870411][T10592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.884610][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.318125][T10612] tap0: tun_chr_ioctl cmd 1074025677 [ 208.323514][T10612] tap0: linktype set to 778 [ 208.394398][T10614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1423'. [ 208.487898][T10616] mac80211_hwsim hwsim12 wlan1: Caught tx_queue_len zero misconfig [ 208.648488][T10627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1427'. [ 208.673714][T10627] team0 (unregistering): Port device team_slave_0 removed [ 208.682125][T10627] team0 (unregistering): Port device team_slave_1 removed [ 208.690720][T10627] team0 (unregistering): Port device dummy0 removed [ 209.130475][T10636] lo speed is unknown, defaulting to 1000 [ 209.475827][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.540759][T10653] syzkaller1: entered promiscuous mode [ 209.558831][T10653] syzkaller1: entered allmulticast mode [ 209.587779][T10656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1439'. [ 209.749206][T10663] netlink: 'syz.1.1441': attribute type 8 has an invalid length. [ 209.757346][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1441'. [ 209.772686][T10663] veth1_to_team: entered promiscuous mode [ 209.780015][T10663] gretap0: entered promiscuous mode [ 209.787381][T10663] batadv_slave_0: entered promiscuous mode [ 209.793476][T10663] batadv_slave_0: left promiscuous mode [ 209.801137][T10663] veth1_to_team: left promiscuous mode [ 209.818266][T10663] gretap0: left promiscuous mode [ 210.163536][T10670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1445'. [ 210.271767][T10678] netlink: 41 bytes leftover after parsing attributes in process `syz.4.1444'. [ 210.315985][T10678] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1444'. [ 210.653804][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1451'. [ 211.247446][T10710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.255910][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.332887][T10712] syzkaller1: entered promiscuous mode [ 211.360650][T10712] syzkaller1: entered allmulticast mode [ 211.404833][T10714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1458'. [ 211.529219][T10718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.543618][T10718] netlink: 'syz.3.1460': attribute type 10 has an invalid length. [ 211.553618][T10718] bond0: (slave wlan1): Opening slave failed [ 211.562099][T10718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1460'. [ 211.574627][T10718] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 211.582277][T10718] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 211.593778][T10718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.052357][T10745] syzkaller1: entered promiscuous mode [ 212.065424][T10745] syzkaller1: entered allmulticast mode [ 212.461369][T10754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.470123][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.533298][T10764] lo speed is unknown, defaulting to 1000 [ 212.866633][T10776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.879484][T10776] netlink: 'syz.4.1480': attribute type 10 has an invalid length. [ 212.898280][T10776] bond0: (slave wlan1): Opening slave failed [ 212.918046][T10776] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode [ 212.925417][T10776] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode [ 212.939335][T10776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.532405][T10802] __nla_validate_parse: 8 callbacks suppressed [ 213.532422][T10802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1487'. [ 213.557849][T10795] syzkaller1: entered promiscuous mode [ 213.559474][T10803] netlink: 'syz.2.1488': attribute type 1 has an invalid length. [ 213.565540][T10795] syzkaller1: entered allmulticast mode [ 213.593590][T10805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1487'. [ 213.621176][T10807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1489'. [ 213.694898][T10803] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.781955][T10808] bond1: (slave dummy0): making interface the new active one [ 213.791476][T10808] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 213.822692][T10810] bond1 (unregistering): (slave dummy0): Releasing active interface [ 213.843173][T10810] bond1 (unregistering): Released all slaves [ 213.921798][T10816] netlink: 'syz.3.1491': attribute type 4 has an invalid length. [ 214.247115][T10830] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 214.428401][T10838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.466403][T10838] netlink: 'syz.3.1499': attribute type 10 has an invalid length. [ 214.495644][T10838] bond0: (slave wlan1): Opening slave failed [ 214.517825][T10841] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1499'. [ 214.544684][T10837] netlink: 'syz.0.1500': attribute type 29 has an invalid length. [ 214.570112][T10844] netlink: 'syz.0.1500': attribute type 29 has an invalid length. [ 214.584781][T10840] lo speed is unknown, defaulting to 1000 [ 214.600096][T10838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.616648][T10843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1501'. [ 214.945014][T10855] netlink: 41 bytes leftover after parsing attributes in process `syz.2.1503'. [ 214.963204][T10855] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1503'. [ 215.027277][T10850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.036007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.371211][T10869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1510'. [ 215.442670][T10871] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1511'. [ 215.992983][T10891] netlink: 41 bytes leftover after parsing attributes in process `syz.1.1517'. [ 216.108708][T10897] tap0: tun_chr_ioctl cmd 1074025677 [ 216.114203][T10897] tap0: linktype set to 778 [ 216.213615][T10899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.229112][T10899] netlink: 'syz.1.1520': attribute type 10 has an invalid length. [ 216.237542][T10899] bond0: (slave wlan1): Opening slave failed [ 216.247155][T10899] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 216.254308][T10899] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 216.265593][T10899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.500677][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.509401][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.518329][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.530432][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.539281][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.559928][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.583432][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.593065][T10911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.821007][T10923] tap0: tun_chr_ioctl cmd 1074025677 [ 216.832313][T10923] tap0: linktype set to 778 [ 217.000665][T10929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.015118][T10929] netlink: 'syz.1.1533': attribute type 10 has an invalid length. [ 217.024117][T10929] bond0: (slave wlan1): Opening slave failed [ 217.041415][T10929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.181490][T10940] xt_hashlimit: size too large, truncated to 1048576 [ 217.561800][T10952] netlink: 'syz.2.1543': attribute type 4 has an invalid length. [ 217.571208][T10954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.586373][T10954] netlink: 'syz.4.1542': attribute type 10 has an invalid length. [ 217.600232][T10954] bond0: (slave wlan1): Opening slave failed [ 217.644273][T10954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.715465][T10959] tipc: Enabling of bearer rejected, already enabled [ 217.749855][T10959] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 218.167906][T10980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.209918][T10980] netlink: 'syz.2.1554': attribute type 10 has an invalid length. [ 218.235353][T10980] bond0: (slave wlan1): Opening slave failed [ 218.255189][T10980] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 218.272248][T10980] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 218.290115][T10986] tipc: Enabling of bearer rejected, already enabled [ 218.299308][T10986] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 218.306907][T10986] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 218.318257][T10980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.342864][T10986] sch_tbf: peakrate 12 is lower than or equals to rate 1405225631169965890 ! [ 218.426503][T10990] syzkaller1: entered promiscuous mode [ 218.432217][T10990] syzkaller1: entered allmulticast mode [ 219.767554][T11036] netlink: 'syz.3.1577': attribute type 10 has an invalid length. [ 219.776793][T11036] bond0: (slave wlan1): Opening slave failed [ 219.784067][T11036] __nla_validate_parse: 11 callbacks suppressed [ 219.784079][T11036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1577'. [ 219.806669][T11035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.452393][T11054] syzkaller1: entered promiscuous mode [ 220.468392][T11054] syzkaller1: entered allmulticast mode [ 220.839274][T11067] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1588'. [ 220.893120][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1589'. [ 220.930138][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1590'. [ 220.939531][T11069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.946809][T11069] IPv6: NLM_F_CREATE should be set when creating new route [ 220.960938][T11069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.968240][T11069] IPv6: NLM_F_CREATE should be set when creating new route [ 221.065811][T11074] bridge0: port 4(syz_tun) entered blocking state [ 221.073048][T11074] bridge0: port 4(syz_tun) entered disabled state [ 221.082802][T11074] syz_tun: entered allmulticast mode [ 221.090179][T11074] syz_tun: entered promiscuous mode [ 221.105476][T11074] bridge0: port 4(syz_tun) entered blocking state [ 221.112677][T11074] bridge0: port 4(syz_tun) entered forwarding state [ 221.198206][T11077] net_ratelimit: 11 callbacks suppressed [ 221.198224][T11077] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 221.244632][T11081] netlink: 'syz.0.1594': attribute type 10 has an invalid length. [ 221.260022][T11081] bond0: (slave wlan1): Opening slave failed [ 221.271771][T11081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1594'. [ 221.285107][T11081] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 221.297539][T11081] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 221.327371][T11080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.444147][T11087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1597'. [ 221.686103][T11097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1601'. [ 221.977130][T11104] netlink: 'syz.2.1604': attribute type 10 has an invalid length. [ 221.986112][T11104] bond0: (slave wlan1): Opening slave failed [ 221.994039][T11104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1604'. [ 222.012213][T11103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.252873][T11118] netlink: 41 bytes leftover after parsing attributes in process `syz.0.1608'. [ 222.262542][T11118] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1608'. [ 222.592300][T11130] batadv_slave_0: entered promiscuous mode [ 222.662249][T11131] netlink: 'syz.4.1613': attribute type 10 has an invalid length. [ 222.688687][T11131] bond0: (slave wlan1): Opening slave failed [ 222.707185][T11131] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode [ 222.725207][T11131] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode [ 222.765393][T11129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.912496][T11147] netlink: 'syz.3.1619': attribute type 29 has an invalid length. [ 222.930758][T11147] netlink: 'syz.3.1619': attribute type 29 has an invalid length. [ 222.951817][T11147] netlink: 'syz.3.1619': attribute type 29 has an invalid length. [ 222.974449][T11147] netlink: 'syz.3.1619': attribute type 29 has an invalid length. [ 222.991572][T11147] netlink: 'syz.3.1619': attribute type 29 has an invalid length. [ 223.556397][ T2142] block nbd0: Possible stuck request ffff888027250000: control (read@0,4096B). Runtime 60 seconds [ 223.567088][T11166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.583146][T11166] validate_nla: 19 callbacks suppressed [ 223.583161][T11166] netlink: 'syz.1.1625': attribute type 10 has an invalid length. [ 223.615938][T11166] bond0: (slave wlan1): Opening slave failed [ 223.647326][T11166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.367046][T11190] syzkaller1: entered promiscuous mode [ 224.377070][T11190] syzkaller1: entered allmulticast mode [ 224.423370][T11188] lo speed is unknown, defaulting to 1000 [ 224.899636][T11198] lo speed is unknown, defaulting to 1000 [ 224.927746][T11210] __nla_validate_parse: 6 callbacks suppressed [ 224.927763][T11210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1639'. [ 225.314764][T11224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.334431][T11224] netlink: 'syz.0.1642': attribute type 10 has an invalid length. [ 225.367717][T11224] bond0: (slave wlan1): Opening slave failed [ 225.387563][T11224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1642'. [ 225.484824][ T5158] block nbd1: Possible stuck request ffff88802728e000: control (read@0,1024B). Runtime 60 seconds [ 225.495624][ T5158] block nbd1: Possible stuck request ffff88802728e1c0: control (read@1024,1024B). Runtime 60 seconds [ 225.507832][ T5158] block nbd1: Possible stuck request ffff88802728e380: control (read@2048,1024B). Runtime 60 seconds [ 225.519318][ T5158] block nbd1: Possible stuck request ffff88802728e540: control (read@3072,1024B). Runtime 60 seconds [ 225.561986][T11224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.053824][T11232] syzkaller1: entered promiscuous mode [ 226.065110][T11232] syzkaller1: entered allmulticast mode [ 227.120636][T11269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1657'. [ 227.364445][T11278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1661'. [ 227.379946][T11280] netlink: 'syz.0.1662': attribute type 3 has an invalid length. [ 227.498069][T11283] syzkaller1: entered promiscuous mode [ 227.503601][T11283] syzkaller1: entered allmulticast mode [ 227.648703][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1667'. [ 227.752007][T11293] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1668'. [ 227.753203][T11296] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1669'. [ 227.773557][T11296] netem: incorrect gi model size [ 227.779925][T11296] netem: change failed [ 227.797791][T11293] syzkaller1: entered promiscuous mode [ 227.803371][T11293] syzkaller1: entered allmulticast mode [ 227.926785][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1672'. [ 228.184635][T11317] tipc: Enabling of bearer rejected, already enabled [ 228.194261][T11317] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 228.202209][T11317] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 228.964821][T11343] tipc: Enabling of bearer rejected, already enabled [ 228.984910][T11343] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 229.003716][T11343] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 229.950750][T11368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1696'. [ 229.977236][T11364] lo speed is unknown, defaulting to 1000 [ 231.467311][T11394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1705'. [ 231.874174][T11407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1710'. [ 232.867404][T11436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1720'. [ 232.935789][ T30] audit: type=1107 audit(1776482313.909:22): pid=11437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 233.026469][T11444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1724'. [ 233.275478][T11449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1725'. [ 233.624803][T11463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.657434][T11463] netlink: 'syz.4.1729': attribute type 10 has an invalid length. [ 233.677499][T11463] bond0: (slave wlan1): Opening slave failed [ 233.705586][T11463] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode [ 233.731866][T11463] mac80211_hwsim hwsim12 syzkaller0: left allmulticast mode [ 233.748002][T11469] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 233.755488][T11469] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 233.764315][T11470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1732'. [ 233.765361][T11463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.886042][T11473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1734'. [ 233.926391][ T30] audit: type=1107 audit(1776482314.899:23): pid=11474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 234.390476][T11502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1743'. [ 235.020315][T11510] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1745'. [ 235.248680][T11513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1746'. [ 235.603995][ T30] audit: type=1107 audit(1776482316.579:24): pid=11516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 235.850321][T11509] delete_channel: no stack [ 235.894065][T11521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1748'. [ 238.705107][T11548] netlink: 'syz.2.1754': attribute type 10 has an invalid length. [ 238.713614][T11548] bond0: (slave wlan1): Opening slave failed [ 241.545666][ T5193] udevd[5193]: worker [5839] /devices/virtual/block/nbd0 is taking a long time [ 241.554760][ T5193] udevd[5193]: worker [8649] /devices/virtual/block/nbd1 is taking a long time [ 249.471585][ T5820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 249.481437][ T5820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 249.491413][ T5820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 249.499785][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 249.510593][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 249.515869][ T5827] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 249.531681][ T5827] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 249.534941][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 249.539650][ T5827] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 249.547768][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 249.557389][ T5827] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 249.562429][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 249.567977][ T5827] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 249.578155][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 249.590207][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 249.658671][T11552] lo speed is unknown, defaulting to 1000 [ 249.775355][T11554] lo speed is unknown, defaulting to 1000 [ 249.949039][T11552] chnl_net:caif_netlink_parms(): no params data found [ 250.061182][T11552] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.068442][T11552] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.075677][T11552] bridge_slave_0: entered allmulticast mode [ 250.082678][T11552] bridge_slave_0: entered promiscuous mode [ 250.090613][T11552] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.097850][T11552] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.104949][T11552] bridge_slave_1: entered allmulticast mode [ 250.112065][T11552] bridge_slave_1: entered promiscuous mode [ 250.142086][T11552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.155662][T11552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.203046][T11552] team0: Port device team_slave_0 added [ 250.216415][T11552] team0: Port device team_slave_1 added [ 250.255510][T11552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.262638][T11552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.289169][T11552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.304638][T11552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.311806][T11552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.338021][T11552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.350226][T11554] chnl_net:caif_netlink_parms(): no params data found [ 250.420332][T11552] hsr_slave_0: entered promiscuous mode [ 250.426771][T11552] hsr_slave_1: entered promiscuous mode [ 250.432744][T11552] debugfs: 'hsr0' already exists in 'hsr' [ 250.439019][T11552] Cannot create hsr debugfs directory [ 250.477277][T11554] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.484472][T11554] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.491777][T11554] bridge_slave_0: entered allmulticast mode [ 250.498865][T11554] bridge_slave_0: entered promiscuous mode [ 250.511668][T11554] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.519508][T11554] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.526940][T11554] bridge_slave_1: entered allmulticast mode [ 250.533786][T11554] bridge_slave_1: entered promiscuous mode [ 250.580544][T11554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.596834][T11554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.640360][T11554] team0: Port device team_slave_0 added [ 250.655304][T11554] team0: Port device team_slave_1 added [ 250.694749][T11554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.701976][T11554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.728179][T11554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.744019][T11554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.752969][T11554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.779529][T11554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.846700][T11554] hsr_slave_0: entered promiscuous mode [ 250.857110][T11554] hsr_slave_1: entered promiscuous mode [ 250.863428][T11554] debugfs: 'hsr0' already exists in 'hsr' [ 250.869881][T11554] Cannot create hsr debugfs directory [ 250.981930][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 250.995401][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 251.005003][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 251.013331][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 251.021868][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 251.089047][T11571] lo speed is unknown, defaulting to 1000 [ 251.326846][T11571] chnl_net:caif_netlink_parms(): no params data found [ 251.388181][T11571] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.395344][T11571] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.402838][T11571] bridge_slave_0: entered allmulticast mode [ 251.409910][T11571] bridge_slave_0: entered promiscuous mode [ 251.417831][T11571] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.425293][T11571] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.432726][T11571] bridge_slave_1: entered allmulticast mode [ 251.439615][T11571] bridge_slave_1: entered promiscuous mode [ 251.465276][T11571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.476757][T11571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.504382][T11571] team0: Port device team_slave_0 added [ 251.511969][T11571] team0: Port device team_slave_1 added [ 251.534723][T11571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.541793][T11571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.568317][T11571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.579949][T11571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.587031][T11571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.613167][T11571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.636400][ T5830] Bluetooth: hci6: command tx timeout [ 251.636726][ T50] Bluetooth: hci5: command tx timeout [ 251.665437][T11571] hsr_slave_0: entered promiscuous mode [ 251.671669][T11571] hsr_slave_1: entered promiscuous mode [ 251.677911][T11571] debugfs: 'hsr0' already exists in 'hsr' [ 251.683644][T11571] Cannot create hsr debugfs directory [ 251.920404][ T5830] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 251.928889][ T5830] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 251.936857][ T5830] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 251.944747][ T5830] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 251.952933][ T5830] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 251.992663][T11580] lo speed is unknown, defaulting to 1000 [ 252.181610][T11580] chnl_net:caif_netlink_parms(): no params data found [ 252.241432][T11580] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.248625][T11580] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.256134][T11580] bridge_slave_0: entered allmulticast mode [ 252.262999][T11580] bridge_slave_0: entered promiscuous mode [ 252.270698][T11580] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.279073][T11580] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.286555][T11580] bridge_slave_1: entered allmulticast mode [ 252.293388][T11580] bridge_slave_1: entered promiscuous mode [ 252.318073][T11580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.329568][T11580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.356715][T11580] team0: Port device team_slave_0 added [ 252.364119][T11580] team0: Port device team_slave_1 added [ 252.385383][T11580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.392540][T11580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.418572][T11580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.430787][T11580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.438072][T11580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.464357][T11580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.501521][T11580] hsr_slave_0: entered promiscuous mode [ 252.507776][T11580] hsr_slave_1: entered promiscuous mode [ 252.513730][T11580] debugfs: 'hsr0' already exists in 'hsr' [ 252.520300][T11580] Cannot create hsr debugfs directory [ 253.075867][ T50] Bluetooth: hci7: command tx timeout [ 253.636311][ T2142] block nbd0: Possible stuck request ffff888027250000: control (read@0,4096B). Runtime 90 seconds [ 253.715951][ T50] Bluetooth: hci5: command tx timeout [ 253.716999][ T5830] Bluetooth: hci6: command tx timeout [ 253.924345][ T50] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 253.932437][ T50] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 253.940261][ T50] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 253.949919][ T50] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 253.960873][ T50] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 253.999780][T11589] lo speed is unknown, defaulting to 1000 [ 254.035972][ T5830] Bluetooth: hci8: command tx timeout [ 254.192783][T11589] chnl_net:caif_netlink_parms(): no params data found [ 254.253305][T11589] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.260599][T11589] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.268071][T11589] bridge_slave_0: entered allmulticast mode [ 254.274935][T11589] bridge_slave_0: entered promiscuous mode [ 254.282655][T11589] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.289914][T11589] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.297155][T11589] bridge_slave_1: entered allmulticast mode [ 254.304016][T11589] bridge_slave_1: entered promiscuous mode [ 254.328947][T11589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.340504][T11589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.368603][T11589] team0: Port device team_slave_0 added [ 254.376126][T11589] team0: Port device team_slave_1 added [ 254.398595][T11589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.405523][T11589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.432171][T11589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.444542][T11589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.451591][T11589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.477883][T11589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.513844][T11589] hsr_slave_0: entered promiscuous mode [ 254.520099][T11589] hsr_slave_1: entered promiscuous mode [ 254.526320][T11589] debugfs: 'hsr0' already exists in 'hsr' [ 254.532079][T11589] Cannot create hsr debugfs directory [ 255.155999][ T5830] Bluetooth: hci7: command tx timeout [ 255.558059][ T5158] block nbd1: Possible stuck request ffff88802728e000: control (read@0,1024B). Runtime 90 seconds [ 255.568850][ T5158] block nbd1: Possible stuck request ffff88802728e1c0: control (read@1024,1024B). Runtime 90 seconds [ 255.580066][ T5158] block nbd1: Possible stuck request ffff88802728e380: control (read@2048,1024B). Runtime 90 seconds [ 255.591810][ T5158] block nbd1: Possible stuck request ffff88802728e540: control (read@3072,1024B). Runtime 90 seconds [ 255.795861][ T5830] Bluetooth: hci6: command tx timeout [ 255.795936][ T50] Bluetooth: hci5: command tx timeout [ 256.036103][ T50] Bluetooth: hci9: command tx timeout [ 256.115860][ T50] Bluetooth: hci8: command tx timeout [ 257.235873][ T50] Bluetooth: hci7: command tx timeout [ 257.876006][ T50] Bluetooth: hci5: command tx timeout [ 257.876456][ T5830] Bluetooth: hci6: command tx timeout [ 258.115984][ T5830] Bluetooth: hci9: command tx timeout [ 258.195924][ T5830] Bluetooth: hci8: command tx timeout [ 259.315862][ T5830] Bluetooth: hci7: command tx timeout [ 260.196138][ T5830] Bluetooth: hci9: command tx timeout [ 260.275886][ T5830] Bluetooth: hci8: command tx timeout [ 262.275871][ T5830] Bluetooth: hci9: command tx timeout [ 283.719787][ T2142] block nbd0: Possible stuck request ffff888027250000: control (read@0,4096B). Runtime 120 seconds [ 285.637548][ T5158] block nbd1: Possible stuck request ffff88802728e000: control (read@0,1024B). Runtime 120 seconds [ 285.648478][ T5158] block nbd1: Possible stuck request ffff88802728e1c0: control (read@1024,1024B). Runtime 120 seconds [ 285.659511][ T5158] block nbd1: Possible stuck request ffff88802728e380: control (read@2048,1024B). Runtime 120 seconds [ 285.670533][ T5158] block nbd1: Possible stuck request ffff88802728e540: control (read@3072,1024B). Runtime 120 seconds [ 309.523261][ T50] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 309.534939][ T50] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 309.543953][ T50] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 309.554952][ T50] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 309.562719][ T50] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 309.562860][ T5827] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 309.580228][ T50] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 309.588613][ T50] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 309.603225][ T50] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 309.611268][ T50] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 309.651065][T11603] lo speed is unknown, defaulting to 1000 [ 309.762123][T11605] lo speed is unknown, defaulting to 1000 [ 309.921447][T11603] chnl_net:caif_netlink_parms(): no params data found [ 310.042159][T11603] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.049585][T11603] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.056838][T11603] bridge_slave_0: entered allmulticast mode [ 310.063678][T11603] bridge_slave_0: entered promiscuous mode [ 310.074964][T11603] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.082138][T11603] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.089465][T11603] bridge_slave_1: entered allmulticast mode [ 310.096567][T11603] bridge_slave_1: entered promiscuous mode [ 310.124719][T11603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.139095][T11603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.184413][T11603] team0: Port device team_slave_0 added [ 310.199251][T11603] team0: Port device team_slave_1 added [ 310.241448][T11603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.248758][T11603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.275005][T11603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.287731][T11603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.294693][T11603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.320870][T11603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.344623][T11605] chnl_net:caif_netlink_parms(): no params data found [ 310.401848][T11603] hsr_slave_0: entered promiscuous mode [ 310.408217][T11603] hsr_slave_1: entered promiscuous mode [ 310.414217][T11603] debugfs: 'hsr0' already exists in 'hsr' [ 310.420031][T11603] Cannot create hsr debugfs directory [ 310.484599][T11605] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.492014][T11605] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.499307][T11605] bridge_slave_0: entered allmulticast mode [ 310.506335][T11605] bridge_slave_0: entered promiscuous mode [ 310.519596][T11605] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.526834][T11605] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.533965][T11605] bridge_slave_1: entered allmulticast mode [ 310.541172][T11605] bridge_slave_1: entered promiscuous mode [ 310.581499][T11605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.598227][T11605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.648204][T11605] team0: Port device team_slave_0 added [ 310.662083][T11605] team0: Port device team_slave_1 added [ 310.710560][T11605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.717618][T11605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.743737][T11605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.755678][T11605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.763172][T11605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.789270][T11605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.833978][T11605] hsr_slave_0: entered promiscuous mode [ 310.840580][T11605] hsr_slave_1: entered promiscuous mode [ 310.850688][T11605] debugfs: 'hsr0' already exists in 'hsr' [ 310.856588][T11605] Cannot create hsr debugfs directory [ 311.055304][ T50] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 311.064704][ T50] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 311.084206][ T50] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 311.093913][ T50] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 311.102295][ T50] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 311.168886][T11620] lo speed is unknown, defaulting to 1000 [ 311.436658][T11620] chnl_net:caif_netlink_parms(): no params data found [ 311.535458][T11620] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.542749][T11620] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.550290][T11620] bridge_slave_0: entered allmulticast mode [ 311.558182][T11620] bridge_slave_0: entered promiscuous mode [ 311.566214][T11620] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.573339][T11620] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.580896][T11620] bridge_slave_1: entered allmulticast mode [ 311.588226][T11620] bridge_slave_1: entered promiscuous mode [ 311.614729][T11620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.628806][T11620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.637163][ T5820] Bluetooth: hci10: command tx timeout [ 311.639688][ T50] Bluetooth: hci11: command tx timeout [ 311.665258][T11620] team0: Port device team_slave_0 added [ 311.674964][T11620] team0: Port device team_slave_1 added [ 311.697831][T11620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.704789][T11620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.731298][T11620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.744259][T11620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.751256][T11620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.777315][T11620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.818120][T11620] hsr_slave_0: entered promiscuous mode [ 311.824342][T11620] hsr_slave_1: entered promiscuous mode [ 311.830665][T11620] debugfs: 'hsr0' already exists in 'hsr' [ 311.836554][T11620] Cannot create hsr debugfs directory [ 312.021029][ T5820] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 312.030227][ T5820] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 312.042408][ T5820] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 312.051786][ T5820] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 312.060270][ T5820] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 312.103875][T11629] lo speed is unknown, defaulting to 1000 [ 312.372725][T11629] chnl_net:caif_netlink_parms(): no params data found [ 312.437317][T11629] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.444515][T11629] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.451923][T11629] bridge_slave_0: entered allmulticast mode [ 312.459406][T11629] bridge_slave_0: entered promiscuous mode [ 312.467246][T11629] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.474374][T11629] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.481927][T11629] bridge_slave_1: entered allmulticast mode [ 312.488917][T11629] bridge_slave_1: entered promiscuous mode [ 312.513787][T11629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.526510][T11629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.552416][T11629] team0: Port device team_slave_0 added [ 312.559870][T11629] team0: Port device team_slave_1 added [ 312.581407][T11629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.588580][T11629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.616658][T11629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.628521][T11629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.635445][T11629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.661817][T11629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.700550][T11629] hsr_slave_0: entered promiscuous mode [ 312.706928][T11629] hsr_slave_1: entered promiscuous mode [ 312.712921][T11629] debugfs: 'hsr0' already exists in 'hsr' [ 312.718770][T11629] Cannot create hsr debugfs directory [ 313.156149][ T50] Bluetooth: hci12: command tx timeout [ 313.716053][ T5820] Bluetooth: hci11: command tx timeout [ 313.718064][ T50] Bluetooth: hci10: command tx timeout [ 313.806343][ T2142] block nbd0: Possible stuck request ffff888027250000: control (read@0,4096B). Runtime 150 seconds [ 313.984193][ T5820] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 313.992460][ T5820] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 314.000803][ T5820] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 314.009384][ T5820] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 314.017656][ T5820] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 314.052176][T11638] lo speed is unknown, defaulting to 1000 [ 314.115945][ T50] Bluetooth: hci13: command tx timeout [ 314.245309][T11638] chnl_net:caif_netlink_parms(): no params data found [ 314.310203][T11638] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.317477][T11638] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.324647][T11638] bridge_slave_0: entered allmulticast mode [ 314.331933][T11638] bridge_slave_0: entered promiscuous mode [ 314.339695][T11638] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.347051][T11638] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.354172][T11638] bridge_slave_1: entered allmulticast mode [ 314.361809][T11638] bridge_slave_1: entered promiscuous mode [ 314.387372][T11638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.398865][T11638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.425327][T11638] team0: Port device team_slave_0 added [ 314.432704][T11638] team0: Port device team_slave_1 added [ 314.457719][T11638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.464642][T11638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.490824][T11638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.503238][T11638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.510204][T11638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.536333][T11638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.572371][T11638] hsr_slave_0: entered promiscuous mode [ 314.578666][T11638] hsr_slave_1: entered promiscuous mode [ 314.584667][T11638] debugfs: 'hsr0' already exists in 'hsr' [ 314.590655][T11638] Cannot create hsr debugfs directory [ 315.235896][ T50] Bluetooth: hci12: command tx timeout [ 315.718138][ T5158] block nbd1: Possible stuck request ffff88802728e000: control (read@0,1024B). Runtime 150 seconds [ 315.728983][ T5158] block nbd1: Possible stuck request ffff88802728e1c0: control (read@1024,1024B). Runtime 150 seconds [ 315.740033][ T5158] block nbd1: Possible stuck request ffff88802728e380: control (read@2048,1024B). Runtime 150 seconds [ 315.751075][ T5158] block nbd1: Possible stuck request ffff88802728e540: control (read@3072,1024B). Runtime 150 seconds [ 315.796224][ T5820] Bluetooth: hci11: command tx timeout [ 315.802840][ T50] Bluetooth: hci10: command tx timeout [ 316.115890][ T50] Bluetooth: hci14: command tx timeout [ 316.195837][ T50] Bluetooth: hci13: command tx timeout [ 317.315856][ T50] Bluetooth: hci12: command tx timeout [ 317.875831][ T50] Bluetooth: hci11: command tx timeout [ 317.881374][ T5820] Bluetooth: hci10: command tx timeout [ 318.195893][ T5820] Bluetooth: hci14: command tx timeout [ 318.275922][ T5820] Bluetooth: hci13: command tx timeout [ 319.395928][ T5820] Bluetooth: hci12: command tx timeout [ 320.275834][ T5820] Bluetooth: hci14: command tx timeout [ 320.356001][ T5820] Bluetooth: hci13: command tx timeout [ 322.355842][ T5820] Bluetooth: hci14: command tx timeout [ 335.910878][ T5193] udevd[5193]: worker [5839] /devices/virtual/block/nbd0 timeout; kill it [ 335.919630][ T5193] udevd[5193]: seq 14318 '/devices/virtual/block/nbd0' killed [ 343.877432][ T2142] block nbd0: Possible stuck request ffff888027250000: control (read@0,4096B). Runtime 180 seconds [ 345.796438][ T5158] block nbd1: Possible stuck request ffff88802728e000: control (read@0,1024B). Runtime 180 seconds [ 345.807208][ T5158] block nbd1: Possible stuck request ffff88802728e1c0: control (read@1024,1024B). Runtime 180 seconds [ 345.818220][ T5158] block nbd1: Possible stuck request ffff88802728e380: control (read@2048,1024B). Runtime 180 seconds [ 345.829325][ T5158] block nbd1: Possible stuck request ffff88802728e540: control (read@3072,1024B). Runtime 180 seconds [ 347.939799][ T5193] udevd[5193]: worker [8649] /devices/virtual/block/nbd1 timeout; kill it [ 347.948491][ T5193] udevd[5193]: seq 14855 '/devices/virtual/block/nbd1' killed [ 369.591281][ T50] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 369.602036][ T50] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 369.616239][ T50] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 369.628375][ T50] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 369.629193][ T5830] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 369.636751][ T50] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 369.649027][ T5830] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 369.662101][ T5830] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 369.670517][ T5830] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 369.679229][ T5830] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 369.703784][T11652] lo speed is unknown, defaulting to 1000 [ 369.834030][T11654] lo speed is unknown, defaulting to 1000 [ 370.011318][T11652] chnl_net:caif_netlink_parms(): no params data found [ 370.133193][T11652] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.140503][T11652] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.147814][T11652] bridge_slave_0: entered allmulticast mode [ 370.154792][T11652] bridge_slave_0: entered promiscuous mode [ 370.163299][T11652] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.170810][T11652] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.178286][T11652] bridge_slave_1: entered allmulticast mode [ 370.185220][T11652] bridge_slave_1: entered promiscuous mode [ 370.216224][T11652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.233525][T11652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.279655][T11652] team0: Port device team_slave_0 added [ 370.292111][T11652] team0: Port device team_slave_1 added [ 370.330210][T11652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.337234][T11652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.363437][T11652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.380869][T11652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.388465][T11652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.415095][T11652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.426762][T11654] chnl_net:caif_netlink_parms(): no params data found [ 370.498712][T11652] hsr_slave_0: entered promiscuous mode [ 370.504977][T11652] hsr_slave_1: entered promiscuous mode [ 370.511359][T11652] debugfs: 'hsr0' already exists in 'hsr' [ 370.517499][T11652] Cannot create hsr debugfs directory [ 370.554810][T11654] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.562153][T11654] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.569721][T11654] bridge_slave_0: entered allmulticast mode [ 370.576976][T11654] bridge_slave_0: entered promiscuous mode [ 370.589763][T11654] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.597212][T11654] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.604374][T11654] bridge_slave_1: entered allmulticast mode [ 370.612162][T11654] bridge_slave_1: entered promiscuous mode [ 370.660483][T11654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.677552][T11654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.723361][T11654] team0: Port device team_slave_0 added [ 370.740692][T11654] team0: Port device team_slave_1 added [ 370.779814][T11654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.787024][T11654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.813046][T11654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.830574][T11654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.838341][T11654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.864771][T11654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.931121][T11654] hsr_slave_0: entered promiscuous mode [ 370.938359][T11654] hsr_slave_1: entered promiscuous mode [ 370.944392][T11654] debugfs: 'hsr0' already exists in 'hsr' [ 370.950284][T11654] Cannot create hsr debugfs directory [ 371.124941][ T5827] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 371.139037][ T5827] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 371.147680][ T5827] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 371.156739][ T5827] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 371.167787][ T5827] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 371.218629][T11670] lo speed is unknown, defaulting to 1000 [ 371.523555][T11670] chnl_net:caif_netlink_parms(): no params data found [ 371.629091][T11670] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.636635][T11670] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.643959][T11670] bridge_slave_0: entered allmulticast mode [ 371.651138][T11670] bridge_slave_0: entered promiscuous mode [ 371.665143][T11670] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.672427][T11670] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.679978][T11670] bridge_slave_1: entered allmulticast mode [ 371.687184][T11670] bridge_slave_1: entered promiscuous mode [ 371.715997][ T5827] Bluetooth: hci16: command tx timeout [ 371.716206][ T5830] Bluetooth: hci15: command tx timeout [ 371.740068][T11670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.751937][T11670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.779262][T11670] team0: Port device team_slave_0 added [ 371.786904][T11670] team0: Port device team_slave_1 added [ 371.809531][T11670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.816650][T11670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.842630][T11670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.855121][T11670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.862550][T11670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.888570][T11670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.926479][T11670] hsr_slave_0: entered promiscuous mode [ 371.932788][T11670] hsr_slave_1: entered promiscuous mode [ 371.939130][T11670] debugfs: 'hsr0' already exists in 'hsr' [ 371.944843][T11670] Cannot create hsr debugfs directory [ 372.121590][ T5827] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 372.129397][ T5827] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 372.138319][ T5827] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 372.155423][ T5827] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 372.163526][ T5827] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 372.221688][T11679] lo speed is unknown, defaulting to 1000 [ 372.496090][T11679] chnl_net:caif_netlink_parms(): no params data found [ 372.559580][T11679] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.566835][T11679] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.573963][T11679] bridge_slave_0: entered allmulticast mode [ 372.581162][T11679] bridge_slave_0: entered promiscuous mode [ 372.589383][T11679] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.597167][T11679] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.604357][T11679] bridge_slave_1: entered allmulticast mode [ 372.611470][T11679] bridge_slave_1: entered promiscuous mode [ 372.636601][T11679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.648420][T11679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.674753][T11679] team0: Port device team_slave_0 added [ 372.682905][T11679] team0: Port device team_slave_1 added [ 372.704756][T11679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.711807][T11679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.738308][T11679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.750466][T11679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.757579][T11679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.783848][T11679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.821778][T11679] hsr_slave_0: entered promiscuous mode [ 372.828155][T11679] hsr_slave_1: entered promiscuous mode [ 372.834293][T11679] debugfs: 'hsr0' already exists in 'hsr' [ 372.840501][T11679] Cannot create hsr debugfs directory [ 373.236290][ T5830] Bluetooth: hci17: command tx timeout [ 373.795971][T11687] Bluetooth: hci16: command tx timeout [ 373.797434][T11688] Bluetooth: hci15: command tx timeout [ 373.957544][ T2142] block nbd0: Possible stuck request ffff888027250000: control (read@0,4096B). Runtime 210 seconds [ 374.050134][T11687] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 374.058402][T11687] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 374.066591][T11687] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 374.074553][T11687] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 374.082827][T11687] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 374.120449][T11690] lo speed is unknown, defaulting to 1000 [ 374.276096][T11688] Bluetooth: hci18: command tx timeout [ 374.331353][T11690] chnl_net:caif_netlink_parms(): no params data found [ 374.392677][T11690] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.399981][T11690] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.407256][T11690] bridge_slave_0: entered allmulticast mode [ 374.414223][T11690] bridge_slave_0: entered promiscuous mode [ 374.421883][T11690] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.429067][T11690] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.436685][T11690] bridge_slave_1: entered allmulticast mode [ 374.443578][T11690] bridge_slave_1: entered promiscuous mode [ 374.469819][T11690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.481391][T11690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.508166][T11690] team0: Port device team_slave_0 added [ 374.515876][T11690] team0: Port device team_slave_1 added [ 374.537944][T11690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.544875][T11690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.571063][T11690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.583753][T11690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.590852][T11690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.617388][T11690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.658656][T11690] hsr_slave_0: entered promiscuous mode [ 374.664913][T11690] hsr_slave_1: entered promiscuous mode [ 374.671216][T11690] debugfs: 'hsr0' already exists in 'hsr' [ 374.677094][T11690] Cannot create hsr debugfs directory [ 375.316298][T11688] Bluetooth: hci17: command tx timeout [ 375.403152][T11687] Bluetooth: hci8: command 0x0406 tx timeout [ 375.403639][T11688] Bluetooth: hci6: command 0x0406 tx timeout [ 375.418473][T11687] Bluetooth: hci5: command 0x0406 tx timeout [ 375.420251][T11688] Bluetooth: hci7: command 0x0406 tx timeout [ 375.875874][ T5827] Bluetooth: hci16: command tx timeout [ 375.882508][ T5158] block nbd1: Possible stuck request ffff88802728e000: control (read@0,1024B). Runtime 210 seconds [ 375.886055][ T5827] Bluetooth: hci15: command tx timeout [ 375.895782][ T5158] block nbd1: Possible stuck request ffff88802728e1c0: control (read@1024,1024B). Runtime 210 seconds [ 375.909752][ T5158] block nbd1: Possible stuck request ffff88802728e380: control (read@2048,1024B). Runtime 210 seconds [ 375.920777][ T5158] block nbd1: Possible stuck request ffff88802728e540: control (read@3072,1024B). Runtime 210 seconds [ 376.115966][ T5827] Bluetooth: hci19: command tx timeout [ 376.356329][ T5827] Bluetooth: hci18: command tx timeout [ 377.395966][ T5827] Bluetooth: hci17: command tx timeout [ 377.965934][ T5827] Bluetooth: hci15: command tx timeout [ 377.965948][ T5830] Bluetooth: hci16: command tx timeout [ 378.196040][ T5830] Bluetooth: hci19: command tx timeout [ 378.441382][ T5830] Bluetooth: hci18: command tx timeout [ 379.476270][ T5830] Bluetooth: hci17: command tx timeout [ 380.275850][ T5830] Bluetooth: hci19: command tx timeout [ 380.515919][ T5830] Bluetooth: hci18: command tx timeout [ 380.521513][ T5830] Bluetooth: hci9: command 0x0406 tx timeout [ 382.355992][ T5827] Bluetooth: hci19: command tx timeout [ 390.596013][ T31] INFO: task syz.0.1737:11484 blocked for more than 143 seconds. [ 390.603792][ T31] Not tainted syzkaller #0 [ 390.608876][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.617632][ T31] task:syz.0.1737 state:D stack:26328 pid:11484 tgid:11483 ppid:5819 task_flags:0x480140 flags:0x00080002 [ 390.629775][ T31] Call Trace: [ 390.633100][ T31] [ 390.636262][ T31] __schedule+0x17b4/0x5680 [ 390.640896][ T31] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 390.646022][ T31] ? schedule+0x90/0x360 [ 390.650430][ T31] schedule+0x164/0x360 [ 390.654996][ T31] blk_mq_freeze_queue_wait+0x101/0x180 [ 390.660714][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 390.667165][ T31] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 390.684378][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 390.712823][ T31] queue_limits_commit_update_frozen+0x55/0xd0 [ 390.730971][ T31] nbd_set_size+0x454/0x680 [ 390.735545][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 390.741684][ T31] ? nla_memcpy+0x5b/0xc0 [ 390.746301][ T31] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 390.751646][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 390.757758][ T31] ? rcu_is_watching+0x15/0xb0 [ 390.762562][ T31] ? trace_kmalloc+0x2a/0xf0 [ 390.767389][ T31] ? __nla_parse+0x40/0x60 [ 390.771840][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 390.778329][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 390.784703][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 390.790340][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 390.796515][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 390.801454][ T31] genl_rcv_msg+0x61c/0x7a0 [ 390.806085][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.811133][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 390.816906][ T31] netlink_rcv_skb+0x232/0x4b0 [ 390.821679][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.826880][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 390.832200][ T31] ? down_read+0x270/0x2e0 [ 390.837295][ T31] ? genl_rcv+0xd/0x40 [ 390.841410][ T31] genl_rcv+0x28/0x40 [ 390.845390][ T31] netlink_unicast+0x75c/0x8e0 [ 390.850828][ T31] netlink_sendmsg+0x813/0xb40 [ 390.855635][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.861220][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 390.866221][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.871507][ T31] ____sys_sendmsg+0x972/0x9f0 [ 390.876439][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.881791][ T31] ? import_iovec+0x73/0xa0 [ 390.886405][ T31] ___sys_sendmsg+0x2a5/0x360 [ 390.891110][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 390.896169][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.901419][ T31] ? futex_wake+0x4ac/0x580 [ 390.906032][ T31] ? __fget_files+0x2a/0x420 [ 390.910637][ T31] ? __fget_files+0x3a0/0x420 [ 390.915302][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 390.920490][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.926037][ T31] ? rcu_is_watching+0x15/0xb0 [ 390.930810][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.937016][ T31] do_syscall_64+0x15f/0xf80 [ 390.941637][ T31] ? trace_irq_disable+0x3b/0x140 [ 390.946703][ T31] ? clear_bhb_loop+0x40/0x90 [ 390.951384][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.957364][ T31] RIP: 0033:0x7fd73df9c819 [ 390.961802][ T31] RSP: 002b:00007fd73eeca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.970434][ T31] RAX: ffffffffffffffda RBX: 00007fd73e215fa0 RCX: 00007fd73df9c819 [ 390.978478][ T31] RDX: 0000000000008800 RSI: 00002000000007c0 RDI: 0000000000000005 [ 390.986508][ T31] RBP: 00007fd73e032c91 R08: 0000000000000000 R09: 0000000000000000 [ 390.994514][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.002816][ T31] R13: 00007fd73e216038 R14: 00007fd73e215fa0 R15: 00007ffc3c3af5d8 [ 391.011250][ T31] [ 391.014339][ T31] INFO: task syz.1.1741:11494 blocked for more than 143 seconds. [ 391.022782][ T31] Not tainted syzkaller #0 [ 391.027744][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.036479][ T31] task:syz.1.1741 state:D stack:26912 pid:11494 tgid:11493 ppid:5824 task_flags:0x400140 flags:0x00080002 [ 391.048502][ T31] Call Trace: [ 391.051800][ T31] [ 391.054717][ T31] __schedule+0x17b4/0x5680 [ 391.059432][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 391.064413][ T31] ? __pfx___schedule+0x10/0x10 [ 391.069686][ T31] ? schedule+0x90/0x360 [ 391.073944][ T31] schedule+0x164/0x360 [ 391.078464][ T31] schedule_preempt_disabled+0x13/0x30 [ 391.083969][ T31] __mutex_lock+0x7f5/0x1550 [ 391.089052][ T31] ? __mutex_lock+0x606/0x1550 [ 391.093839][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 391.098602][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 391.103655][ T31] ? radix_tree_lookup+0x240/0x290 [ 391.108845][ T31] genl_rcv_msg+0x10b/0x7a0 [ 391.113375][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.118508][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 391.123920][ T31] netlink_rcv_skb+0x232/0x4b0 [ 391.128758][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.133792][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 391.139195][ T31] ? down_read+0x270/0x2e0 [ 391.143632][ T31] ? genl_rcv+0xd/0x40 [ 391.147803][ T31] genl_rcv+0x28/0x40 [ 391.151789][ T31] netlink_unicast+0x75c/0x8e0 [ 391.156868][ T31] netlink_sendmsg+0x813/0xb40 [ 391.161673][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.167021][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 391.171974][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 391.177663][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.182980][ T31] __sys_sendto+0x672/0x710 [ 391.187555][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 391.192610][ T31] ? exc_page_fault+0x6a/0xc0 [ 391.197519][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 391.202858][ T31] __x64_sys_sendto+0xde/0x100 [ 391.207909][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.213991][ T31] do_syscall_64+0x15f/0xf80 [ 391.218646][ T31] ? trace_irq_disable+0x3b/0x140 [ 391.223674][ T31] ? clear_bhb_loop+0x40/0x90 [ 391.228462][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.234378][ T31] RIP: 0033:0x7f54c855d04e [ 391.239393][ T31] RSP: 002b:00007f54c9423e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 391.248087][ T31] RAX: ffffffffffffffda RBX: 00007f54c94256c0 RCX: 00007f54c855d04e [ 391.256156][ T31] RDX: 0000000000000020 RSI: 00007f54c9424000 RDI: 0000000000000007 [ 391.264137][ T31] RBP: 0000000000000000 R08: 00007f54c9423f04 R09: 000000000000000c [ 391.272206][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 391.280278][ T31] R13: 00007f54c9423f58 R14: 00007f54c9424000 R15: 0000000000000000 [ 391.288383][ T31] [ 391.291420][ T31] INFO: task syz.1.1741:11495 blocked for more than 144 seconds. [ 391.301067][ T31] Not tainted syzkaller #0 [ 391.306210][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.314893][ T31] task:syz.1.1741 state:D stack:26784 pid:11495 tgid:11493 ppid:5824 task_flags:0x400140 flags:0x00080002 [ 391.327184][ T31] Call Trace: [ 391.330490][ T31] [ 391.333431][ T31] __schedule+0x17b4/0x5680 [ 391.338406][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 391.343419][ T31] ? __pfx___schedule+0x10/0x10 [ 391.348354][ T31] ? schedule+0x90/0x360 [ 391.352603][ T31] schedule+0x164/0x360 [ 391.356800][ T31] schedule_preempt_disabled+0x13/0x30 [ 391.362285][ T31] __mutex_lock+0x7f5/0x1550 [ 391.366999][ T31] ? kernel_text_address+0xa5/0xe0 [ 391.372126][ T31] ? __mutex_lock+0x606/0x1550 [ 391.377009][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 391.381697][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 391.386795][ T31] ? stack_trace_save+0xa9/0x100 [ 391.391744][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 391.396912][ T31] ? radix_tree_lookup+0x240/0x290 [ 391.402052][ T31] genl_rcv_msg+0x10b/0x7a0 [ 391.406587][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.411624][ T31] netlink_rcv_skb+0x232/0x4b0 [ 391.416639][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.421702][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 391.427169][ T31] ? down_read+0x270/0x2e0 [ 391.431625][ T31] ? genl_rcv+0xd/0x40 [ 391.435685][ T31] genl_rcv+0x28/0x40 [ 391.439831][ T31] netlink_unicast+0x75c/0x8e0 [ 391.444594][ T31] netlink_sendmsg+0x813/0xb40 [ 391.449503][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.454821][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 391.459900][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 391.465217][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.470735][ T31] __sys_sendto+0x672/0x710 [ 391.475279][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 391.480483][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.486637][ T31] __x64_sys_sendto+0xde/0x100 [ 391.491436][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.497589][ T31] do_syscall_64+0x15f/0xf80 [ 391.502198][ T31] ? trace_irq_disable+0x3b/0x140 [ 391.507405][ T31] ? clear_bhb_loop+0x40/0x90 [ 391.512117][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.518080][ T31] RIP: 0033:0x7f54c855d04e [ 391.522544][ T31] RSP: 002b:00007f54c9402e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 391.531222][ T31] RAX: ffffffffffffffda RBX: 00007f54c94046c0 RCX: 00007f54c855d04e [ 391.539305][ T31] RDX: 0000000000000024 RSI: 00007f54c9403000 RDI: 0000000000000004 [ 391.547368][ T31] RBP: 0000000000000000 R08: 00007f54c9402f04 R09: 000000000000000c [ 391.555356][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 391.563702][ T31] R13: 00007f54c9402f58 R14: 00007f54c9403000 R15: 0000000000000000 [ 391.571959][ T31] [ 391.575020][ T31] INFO: task syz.1.1741:11500 blocked for more than 144 seconds. [ 391.582843][ T31] Not tainted syzkaller #0 [ 391.587828][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.596605][ T31] task:syz.1.1741 state:D stack:27936 pid:11500 tgid:11493 ppid:5824 task_flags:0x400040 flags:0x00080002 [ 391.608602][ T31] Call Trace: [ 391.611874][ T31] [ 391.614790][ T31] __schedule+0x17b4/0x5680 [ 391.619512][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 391.624535][ T31] ? __pfx___schedule+0x10/0x10 [ 391.629482][ T31] ? schedule+0x90/0x360 [ 391.633739][ T31] schedule+0x164/0x360 [ 391.640178][ T31] schedule_preempt_disabled+0x13/0x30 [ 391.645648][ T31] __mutex_lock+0x7f5/0x1550 [ 391.650320][ T31] ? __mutex_lock+0x606/0x1550 [ 391.655108][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 391.659863][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 391.664936][ T31] ? radix_tree_lookup+0x240/0x290 [ 391.670093][ T31] genl_rcv_msg+0x10b/0x7a0 [ 391.674607][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.679681][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 391.685067][ T31] netlink_rcv_skb+0x232/0x4b0 [ 391.689899][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.694942][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 391.700312][ T31] ? down_read+0x270/0x2e0 [ 391.704741][ T31] ? genl_rcv+0xd/0x40 [ 391.708854][ T31] genl_rcv+0x28/0x40 [ 391.712840][ T31] netlink_unicast+0x75c/0x8e0 [ 391.718020][ T31] netlink_sendmsg+0x813/0xb40 [ 391.722852][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.728229][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 391.733179][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 391.738527][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.743822][ T31] __sys_sendto+0x672/0x710 [ 391.748586][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 391.753682][ T31] ? exc_page_fault+0x6a/0xc0 [ 391.758645][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 391.763977][ T31] __x64_sys_sendto+0xde/0x100 [ 391.768811][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.774889][ T31] do_syscall_64+0x15f/0xf80 [ 391.779508][ T31] ? trace_irq_disable+0x3b/0x140 [ 391.784539][ T31] ? clear_bhb_loop+0x40/0x90 [ 391.789259][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.795153][ T31] RIP: 0033:0x7f54c855d04e [ 391.799927][ T31] RSP: 002b:00007f54c93e1e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 391.808409][ T31] RAX: ffffffffffffffda RBX: 00007f54c93e36c0 RCX: 00007f54c855d04e [ 391.816418][ T31] RDX: 0000000000000020 RSI: 00007f54c93e2000 RDI: 0000000000000006 [ 391.824391][ T31] RBP: 0000000000000000 R08: 00007f54c93e1f04 R09: 000000000000000c [ 391.832414][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 391.840420][ T31] R13: 00007f54c93e1f58 R14: 00007f54c93e2000 R15: 0000000000000000 [ 391.848519][ T31] [ 391.851566][ T31] INFO: task syz.3.1747:11517 blocked for more than 144 seconds. [ 391.859507][ T31] Not tainted syzkaller #0 [ 391.864455][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.873545][ T31] task:syz.3.1747 state:D stack:27448 pid:11517 tgid:11516 ppid:5829 task_flags:0x400140 flags:0x00080002 [ 391.885733][ T31] Call Trace: [ 391.889033][ T31] [ 391.891952][ T31] __schedule+0x17b4/0x5680 [ 391.896546][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 391.901504][ T31] ? __pfx___schedule+0x10/0x10 [ 391.906412][ T31] ? schedule+0x90/0x360 [ 391.910661][ T31] schedule+0x164/0x360 [ 391.914801][ T31] schedule_preempt_disabled+0x13/0x30 [ 391.920306][ T31] __mutex_lock+0x7f5/0x1550 [ 391.924906][ T31] ? __mutex_lock+0x606/0x1550 [ 391.929723][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 391.934413][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 391.939505][ T31] ? radix_tree_lookup+0x240/0x290 [ 391.944623][ T31] genl_rcv_msg+0x10b/0x7a0 [ 391.949181][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.954213][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 391.959668][ T31] netlink_rcv_skb+0x232/0x4b0 [ 391.964443][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.969651][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 391.975018][ T31] ? down_read+0x270/0x2e0 [ 391.979543][ T31] ? genl_rcv+0xd/0x40 [ 391.983623][ T31] genl_rcv+0x28/0x40 [ 391.987642][ T31] netlink_unicast+0x75c/0x8e0 [ 391.992427][ T31] netlink_sendmsg+0x813/0xb40 [ 391.997276][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.002570][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 392.007557][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 392.012852][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.018173][ T31] __sys_sendto+0x672/0x710 [ 392.022682][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 392.027769][ T31] ? exc_page_fault+0x6a/0xc0 [ 392.032449][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 392.037790][ T31] __x64_sys_sendto+0xde/0x100 [ 392.042564][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.048669][ T31] do_syscall_64+0x15f/0xf80 [ 392.053265][ T31] ? trace_irq_disable+0x3b/0x140 [ 392.058349][ T31] ? clear_bhb_loop+0x40/0x90 [ 392.063034][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.068957][ T31] RIP: 0033:0x7fdf99b5d04e [ 392.073380][ T31] RSP: 002b:00007fdf9aa7ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 392.082107][ T31] RAX: ffffffffffffffda RBX: 00007fdf9aa7e6c0 RCX: 00007fdf99b5d04e [ 392.090134][ T31] RDX: 0000000000000020 RSI: 00007fdf9aa7d000 RDI: 0000000000000008 [ 392.098210][ T31] RBP: 0000000000000000 R08: 00007fdf9aa7cf04 R09: 000000000000000c [ 392.106227][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 392.114205][ T31] R13: 00007fdf9aa7cf58 R14: 00007fdf9aa7d000 R15: 0000000000000000 [ 392.122383][ T31] [ 392.125430][ T31] INFO: task syz.3.1747:11518 blocked for more than 144 seconds. [ 392.133226][ T31] Not tainted syzkaller #0 [ 392.138212][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 392.146923][ T31] task:syz.3.1747 state:D stack:27816 pid:11518 tgid:11516 ppid:5829 task_flags:0x400140 flags:0x00080002 [ 392.158918][ T31] Call Trace: [ 392.162193][ T31] [ 392.165115][ T31] __schedule+0x17b4/0x5680 [ 392.169666][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 392.174624][ T31] ? __pfx___schedule+0x10/0x10 [ 392.179531][ T31] ? schedule+0x90/0x360 [ 392.183780][ T31] schedule+0x164/0x360 [ 392.188179][ T31] schedule_preempt_disabled+0x13/0x30 [ 392.193645][ T31] __mutex_lock+0x7f5/0x1550 [ 392.198391][ T31] ? kernel_text_address+0xa5/0xe0 [ 392.203526][ T31] ? __mutex_lock+0x606/0x1550 [ 392.208344][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 392.213026][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 392.218097][ T31] ? stack_trace_save+0xa9/0x100 [ 392.223041][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 392.228033][ T31] ? radix_tree_lookup+0x240/0x290 [ 392.233158][ T31] genl_rcv_msg+0x10b/0x7a0 [ 392.237776][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 392.242827][ T31] netlink_rcv_skb+0x232/0x4b0 [ 392.247682][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 392.252739][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 392.258097][ T31] ? down_read+0x270/0x2e0 [ 392.262555][ T31] ? genl_rcv+0xd/0x40 [ 392.266745][ T31] genl_rcv+0x28/0x40 [ 392.270746][ T31] netlink_unicast+0x75c/0x8e0 [ 392.275500][ T31] netlink_sendmsg+0x813/0xb40 [ 392.280645][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.285999][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 392.290934][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 392.296487][ T31] ____sys_sendmsg+0x972/0x9f0 [ 392.301283][ T31] ? __might_fault+0xaf/0x130 [ 392.306036][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.311333][ T31] ? import_iovec+0x73/0xa0 [ 392.315890][ T31] ___sys_sendmsg+0x2a5/0x360 [ 392.320581][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 392.325513][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 392.330777][ T31] ? futex_wait+0x2a2/0x390 [ 392.335302][ T31] ? __fget_files+0x2a/0x420 [ 392.339957][ T31] ? __fget_files+0x3a0/0x420 [ 392.344665][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 392.349659][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 392.355157][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.361571][ T31] do_syscall_64+0x15f/0xf80 [ 392.366257][ T31] ? trace_irq_disable+0x3b/0x140 [ 392.371313][ T31] ? clear_bhb_loop+0x40/0x90 [ 392.376058][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.381960][ T31] RIP: 0033:0x7fdf99b9c819 [ 392.386428][ T31] RSP: 002b:00007fdf9aa5d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.394844][ T31] RAX: ffffffffffffffda RBX: 00007fdf99e16090 RCX: 00007fdf99b9c819 [ 392.402854][ T31] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000a [ 392.411012][ T31] RBP: 00007fdf99c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 392.419052][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.427056][ T31] R13: 00007fdf99e16128 R14: 00007fdf99e16090 R15: 00007fff6e019df8 [ 392.435024][ T31] [ 392.438145][ T31] INFO: task syz.4.1751:11531 blocked for more than 145 seconds. [ 392.445924][ T31] Not tainted syzkaller #0 [ 392.450889][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 392.459615][ T31] task:syz.4.1751 state:D stack:28792 pid:11531 tgid:11530 ppid:5828 task_flags:0x400040 flags:0x00080002 [ 392.471604][ T31] Call Trace: [ 392.474885][ T31] [ 392.477911][ T31] __schedule+0x17b4/0x5680 [ 392.482439][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 392.487474][ T31] ? __pfx___schedule+0x10/0x10 [ 392.492338][ T31] ? schedule+0x90/0x360 [ 392.496626][ T31] schedule+0x164/0x360 [ 392.500788][ T31] schedule_preempt_disabled+0x13/0x30 [ 392.506271][ T31] __mutex_lock+0x7f5/0x1550 [ 392.510865][ T31] ? kernel_text_address+0xa5/0xe0 [ 392.516289][ T31] ? __mutex_lock+0x606/0x1550 [ 392.521083][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 392.525823][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 392.530853][ T31] ? stack_trace_save+0xa9/0x100 [ 392.535874][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 392.540820][ T31] ? radix_tree_lookup+0x240/0x290 [ 392.545995][ T31] genl_rcv_msg+0x10b/0x7a0 [ 392.550510][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 392.555528][ T31] netlink_rcv_skb+0x232/0x4b0 [ 392.560350][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 392.565377][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 392.570733][ T31] ? down_read+0x270/0x2e0 [ 392.575155][ T31] ? genl_rcv+0xd/0x40 [ 392.579270][ T31] genl_rcv+0x28/0x40 [ 392.583253][ T31] netlink_unicast+0x75c/0x8e0 [ 392.588068][ T31] netlink_sendmsg+0x813/0xb40 [ 392.592845][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.598348][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 392.603323][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 392.608699][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.614007][ T31] __sys_sendto+0x672/0x710 [ 392.618608][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 392.623651][ T31] ? exc_page_fault+0x6a/0xc0 [ 392.628617][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 392.633952][ T31] __x64_sys_sendto+0xde/0x100 [ 392.638770][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.644845][ T31] do_syscall_64+0x15f/0xf80 [ 392.649457][ T31] ? trace_irq_disable+0x3b/0x140 [ 392.654485][ T31] ? clear_bhb_loop+0x40/0x90 [ 392.659224][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.665141][ T31] RIP: 0033:0x7f624b35d04e [ 392.669620][ T31] RSP: 002b:00007f624c236e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 392.679975][ T31] RAX: ffffffffffffffda RBX: 00007f624c2386c0 RCX: 00007f624b35d04e [ 392.688016][ T31] RDX: 0000000000000024 RSI: 00007f624c237000 RDI: 0000000000000005 [ 392.696021][ T31] RBP: 0000000000000000 R08: 00007f624c236f04 R09: 000000000000000c [ 392.703988][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 392.712014][ T31] R13: 00007f624c236f58 R14: 00007f624c237000 R15: 0000000000000000 [ 392.720038][ T31] [ 392.723055][ T31] INFO: task syz.4.1751:11532 blocked for more than 145 seconds. [ 392.730841][ T31] Not tainted syzkaller #0 [ 392.736026][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 392.744714][ T31] task:syz.4.1751 state:D stack:26656 pid:11532 tgid:11530 ppid:5828 task_flags:0x400140 flags:0x00080002 [ 392.756753][ T31] Call Trace: [ 392.760046][ T31] [ 392.762965][ T31] __schedule+0x17b4/0x5680 [ 392.767506][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 392.772462][ T31] ? __pfx___schedule+0x10/0x10 [ 392.777451][ T31] ? schedule+0x90/0x360 [ 392.781719][ T31] schedule+0x164/0x360 [ 392.785931][ T31] schedule_preempt_disabled+0x13/0x30 [ 392.791391][ T31] __mutex_lock+0x7f5/0x1550 [ 392.796025][ T31] ? kernel_text_address+0xa5/0xe0 [ 392.801148][ T31] ? __mutex_lock+0x606/0x1550 [ 392.805978][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 392.810669][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 392.815680][ T31] ? stack_trace_save+0xa9/0x100 [ 392.820660][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 392.825609][ T31] ? radix_tree_lookup+0x240/0x290 [ 392.830789][ T31] genl_rcv_msg+0x10b/0x7a0 [ 392.835302][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 392.840576][ T31] netlink_rcv_skb+0x232/0x4b0 [ 392.845356][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 392.850637][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 392.856000][ T31] ? down_read+0x270/0x2e0 [ 392.860427][ T31] ? genl_rcv+0xd/0x40 [ 392.864499][ T31] genl_rcv+0x28/0x40 [ 392.868572][ T31] netlink_unicast+0x75c/0x8e0 [ 392.873367][ T31] netlink_sendmsg+0x813/0xb40 [ 392.878177][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.883476][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 392.888578][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 392.893875][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.899205][ T31] __sys_sendto+0x672/0x710 [ 392.903718][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 392.908879][ T31] ? fd_install+0x94/0x3d0 [ 392.913322][ T31] ? fd_install+0x306/0x3d0 [ 392.917922][ T31] __x64_sys_sendto+0xde/0x100 [ 392.922700][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.928861][ T31] do_syscall_64+0x15f/0xf80 [ 392.933511][ T31] ? trace_irq_disable+0x3b/0x140 [ 392.938579][ T31] ? clear_bhb_loop+0x40/0x90 [ 392.943262][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.949192][ T31] RIP: 0033:0x7f624b35d04e [ 392.953607][ T31] RSP: 002b:00007f624c215e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 392.962264][ T31] RAX: ffffffffffffffda RBX: 00007f624c2176c0 RCX: 00007f624b35d04e [ 392.970329][ T31] RDX: 0000000000000020 RSI: 00007f624c216000 RDI: 000000000000000c [ 392.978365][ T31] RBP: 0000000000000000 R08: 00007f624c215f04 R09: 000000000000000c [ 392.986435][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 392.994409][ T31] R13: 00007f624c215f58 R14: 00007f624c216000 R15: 0000000000000000 [ 393.002469][ T31] [ 393.005509][ T31] INFO: task syz.4.1751:11533 blocked for more than 145 seconds. [ 393.013304][ T31] Not tainted syzkaller #0 [ 393.018257][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.026971][ T31] task:syz.4.1751 state:D stack:26912 pid:11533 tgid:11530 ppid:5828 task_flags:0x400140 flags:0x00080002 [ 393.038967][ T31] Call Trace: [ 393.042239][ T31] [ 393.045160][ T31] __schedule+0x17b4/0x5680 [ 393.049722][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 393.054683][ T31] ? __pfx___schedule+0x10/0x10 [ 393.059615][ T31] ? schedule+0x90/0x360 [ 393.063864][ T31] schedule+0x164/0x360 [ 393.068243][ T31] schedule_preempt_disabled+0x13/0x30 [ 393.073725][ T31] __mutex_lock+0x7f5/0x1550 [ 393.078658][ T31] ? kernel_text_address+0xa5/0xe0 [ 393.083803][ T31] ? __mutex_lock+0x606/0x1550 [ 393.088628][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 393.093310][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 393.098367][ T31] ? stack_trace_save+0xa9/0x100 [ 393.103311][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 393.108346][ T31] ? radix_tree_lookup+0x240/0x290 [ 393.113470][ T31] genl_rcv_msg+0x10b/0x7a0 [ 393.118039][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.123086][ T31] netlink_rcv_skb+0x232/0x4b0 [ 393.127916][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.132946][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.138291][ T31] ? down_read+0x270/0x2e0 [ 393.142712][ T31] ? genl_rcv+0xd/0x40 [ 393.146831][ T31] genl_rcv+0x28/0x40 [ 393.150835][ T31] netlink_unicast+0x75c/0x8e0 [ 393.155588][ T31] netlink_sendmsg+0x813/0xb40 [ 393.160529][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.165933][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 393.170875][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 393.176411][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.181733][ T31] __sys_sendto+0x672/0x710 [ 393.186271][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 393.191319][ T31] ? rcu_is_watching+0x15/0xb0 [ 393.196149][ T31] __x64_sys_sendto+0xde/0x100 [ 393.200922][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.207030][ T31] do_syscall_64+0x15f/0xf80 [ 393.211628][ T31] ? trace_irq_disable+0x3b/0x140 [ 393.216683][ T31] ? clear_bhb_loop+0x40/0x90 [ 393.221369][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.227331][ T31] RIP: 0033:0x7f624b35d04e [ 393.231757][ T31] RSP: 002b:00007f624c1f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 393.240358][ T31] RAX: ffffffffffffffda RBX: 00007f624c1f66c0 RCX: 00007f624b35d04e [ 393.248437][ T31] RDX: 0000000000000024 RSI: 00007f624c1f5000 RDI: 0000000000000009 [ 393.256447][ T31] RBP: 0000000000000000 R08: 00007f624c1f4f04 R09: 000000000000000c [ 393.264429][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 393.272454][ T31] R13: 00007f624c1f4f58 R14: 00007f624c1f5000 R15: 0000000000000000 [ 393.280517][ T31] [ 393.283559][ T31] INFO: task syz.2.1754:11545 blocked for more than 146 seconds. [ 393.291566][ T31] Not tainted syzkaller #0 [ 393.296569][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.305234][ T31] task:syz.2.1754 state:D stack:28640 pid:11545 tgid:11544 ppid:5818 task_flags:0x400040 flags:0x00080002 [ 393.317474][ T31] Call Trace: [ 393.320772][ T31] [ 393.323695][ T31] __schedule+0x17b4/0x5680 [ 393.328259][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 393.333218][ T31] ? __pfx___schedule+0x10/0x10 [ 393.338145][ T31] ? schedule+0x90/0x360 [ 393.342396][ T31] schedule+0x164/0x360 [ 393.346621][ T31] schedule_preempt_disabled+0x13/0x30 [ 393.352087][ T31] __mutex_lock+0x7f5/0x1550 [ 393.356757][ T31] ? kernel_text_address+0xa5/0xe0 [ 393.361883][ T31] ? __mutex_lock+0x606/0x1550 [ 393.366711][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 393.371396][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 393.376561][ T31] ? stack_trace_save+0xa9/0x100 [ 393.381524][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 393.386504][ T31] ? radix_tree_lookup+0x240/0x290 [ 393.391621][ T31] genl_rcv_msg+0x10b/0x7a0 [ 393.396572][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.401633][ T31] netlink_rcv_skb+0x232/0x4b0 [ 393.406463][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.411492][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.416825][ T31] ? down_read+0x270/0x2e0 [ 393.421261][ T31] ? genl_rcv+0xd/0x40 [ 393.425312][ T31] genl_rcv+0x28/0x40 [ 393.429316][ T31] netlink_unicast+0x75c/0x8e0 [ 393.434090][ T31] netlink_sendmsg+0x813/0xb40 [ 393.438911][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.444206][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 393.449174][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 393.454466][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.459822][ T31] __sys_sendto+0x672/0x710 [ 393.464347][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 393.469441][ T31] ? exc_page_fault+0x6a/0xc0 [ 393.474125][ T31] ? do_user_addr_fault+0xc6f/0x1340 [ 393.479652][ T31] __x64_sys_sendto+0xde/0x100 [ 393.484464][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.490626][ T31] do_syscall_64+0x15f/0xf80 [ 393.495242][ T31] ? trace_irq_disable+0x3b/0x140 [ 393.500332][ T31] ? clear_bhb_loop+0x40/0x90 [ 393.505017][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.511161][ T31] RIP: 0033:0x7fd145b5d04e [ 393.515620][ T31] RSP: 002b:00007fd146a0ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 393.524076][ T31] RAX: ffffffffffffffda RBX: 00007fd146a0c6c0 RCX: 00007fd145b5d04e [ 393.532088][ T31] RDX: 0000000000000020 RSI: 00007fd146a0b000 RDI: 0000000000000004 [ 393.540123][ T31] RBP: 0000000000000000 R08: 00007fd146a0af04 R09: 000000000000000c [ 393.548132][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 393.556270][ T31] R13: 00007fd146a0af58 R14: 00007fd146a0b000 R15: 0000000000000000 [ 393.564272][ T31] [ 393.567315][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 393.576366][ T31] INFO: task syz.2.1754:11546 blocked for more than 146 seconds. [ 393.584076][ T31] Not tainted syzkaller #0 [ 393.589085][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.597820][ T31] task:syz.2.1754 state:D stack:28216 pid:11546 tgid:11544 ppid:5818 task_flags:0x400040 flags:0x00080002 [ 393.609796][ T31] Call Trace: [ 393.613106][ T31] [ 393.616345][ T31] __schedule+0x17b4/0x5680 [ 393.620892][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 393.625921][ T31] ? __pfx___schedule+0x10/0x10 [ 393.630792][ T31] ? schedule+0x90/0x360 [ 393.635019][ T31] schedule+0x164/0x360 [ 393.639362][ T31] schedule_preempt_disabled+0x13/0x30 [ 393.644849][ T31] __mutex_lock+0x7f5/0x1550 [ 393.649502][ T31] ? kernel_text_address+0xa5/0xe0 [ 393.654623][ T31] ? __mutex_lock+0x606/0x1550 [ 393.659432][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 393.664112][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 393.669230][ T31] ? stack_trace_save+0xa9/0x100 [ 393.674176][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 393.679160][ T31] ? radix_tree_lookup+0x240/0x290 [ 393.684287][ T31] genl_rcv_msg+0x10b/0x7a0 [ 393.688844][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.693897][ T31] netlink_rcv_skb+0x232/0x4b0 [ 393.698720][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.703756][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.709124][ T31] ? down_read+0x270/0x2e0 [ 393.713549][ T31] ? genl_rcv+0xd/0x40 [ 393.719030][ T31] genl_rcv+0x28/0x40 [ 393.723044][ T31] netlink_unicast+0x75c/0x8e0 [ 393.728051][ T31] netlink_sendmsg+0x813/0xb40 [ 393.732871][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.738232][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 393.743183][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 393.748500][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.753794][ T31] __sys_sendto+0x672/0x710 [ 393.758354][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 393.763399][ T31] ? fd_install+0x94/0x3d0 [ 393.767861][ T31] ? fd_install+0x306/0x3d0 [ 393.772370][ T31] __x64_sys_sendto+0xde/0x100 [ 393.777209][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.783282][ T31] do_syscall_64+0x15f/0xf80 [ 393.787935][ T31] ? trace_irq_disable+0x3b/0x140 [ 393.792967][ T31] ? clear_bhb_loop+0x40/0x90 [ 393.798204][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.804125][ T31] RIP: 0033:0x7fd145b5d04e [ 393.808590][ T31] RSP: 002b:00007fd1469e9e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 393.817055][ T31] RAX: ffffffffffffffda RBX: 00007fd1469eb6c0 RCX: 00007fd145b5d04e [ 393.825013][ T31] RDX: 0000000000000020 RSI: 00007fd1469ea000 RDI: 0000000000000006 [ 393.833079][ T31] RBP: 0000000000000000 R08: 00007fd1469e9f04 R09: 000000000000000c [ 393.841257][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 393.849306][ T31] R13: 00007fd1469e9f58 R14: 00007fd1469ea000 R15: 0000000000000000 [ 393.857369][ T31] [ 393.860391][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 393.869477][ T31] INFO: task syz.2.1754:11547 blocked for more than 146 seconds. [ 393.877357][ T31] Not tainted syzkaller #0 [ 393.882308][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.891061][ T31] task:syz.2.1754 state:D stack:28072 pid:11547 tgid:11544 ppid:5818 task_flags:0x400040 flags:0x00080002 [ 393.903023][ T31] Call Trace: [ 393.906348][ T31] [ 393.909281][ T31] __schedule+0x17b4/0x5680 [ 393.913771][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 393.918770][ T31] ? __pfx___schedule+0x10/0x10 [ 393.923634][ T31] ? schedule+0x90/0x360 [ 393.927922][ T31] schedule+0x164/0x360 [ 393.932084][ T31] schedule_preempt_disabled+0x13/0x30 [ 393.937629][ T31] __mutex_lock+0x7f5/0x1550 [ 393.942228][ T31] ? kernel_text_address+0xa5/0xe0 [ 393.947563][ T31] ? __mutex_lock+0x606/0x1550 [ 393.952373][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 393.957427][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 393.962493][ T31] ? stack_trace_save+0xa9/0x100 [ 393.967520][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 393.972476][ T31] ? radix_tree_lookup+0x240/0x290 [ 393.977679][ T31] genl_rcv_msg+0x10b/0x7a0 [ 393.982192][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.987292][ T31] netlink_rcv_skb+0x232/0x4b0 [ 393.992070][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.997144][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 394.002458][ T31] ? down_read+0x270/0x2e0 [ 394.006959][ T31] ? genl_rcv+0xd/0x40 [ 394.011055][ T31] genl_rcv+0x28/0x40 [ 394.015020][ T31] netlink_unicast+0x75c/0x8e0 [ 394.019822][ T31] netlink_sendmsg+0x813/0xb40 [ 394.024601][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.029970][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 394.034919][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 394.040301][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.045644][ T31] __sys_sendto+0x672/0x710 [ 394.050216][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 394.055265][ T31] ? fd_install+0x94/0x3d0 [ 394.059926][ T31] ? fd_install+0x306/0x3d0 [ 394.064492][ T31] __x64_sys_sendto+0xde/0x100 [ 394.069514][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.075608][ T31] do_syscall_64+0x15f/0xf80 [ 394.080299][ T31] ? trace_irq_disable+0x3b/0x140 [ 394.085343][ T31] ? clear_bhb_loop+0x40/0x90 [ 394.090181][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.096200][ T31] RIP: 0033:0x7fd145b5d04e [ 394.100616][ T31] RSP: 002b:00007fd1469c8e58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 394.109429][ T31] RAX: ffffffffffffffda RBX: 00007fd1469ca6c0 RCX: 00007fd145b5d04e [ 394.117650][ T31] RDX: 0000000000000028 RSI: 00007fd1469c8fe0 RDI: 0000000000000007 [ 394.125676][ T31] RBP: 0000000000000000 R08: 00007fd1469c8ed4 R09: 000000000000000c [ 394.133771][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 394.141935][ T31] R13: 00007fd1469c8f28 R14: 00007fd1469c8fe0 R15: 0000000000000000 [ 394.150336][ T31] [ 394.153370][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 394.162567][ T31] INFO: task syz.2.1754:11548 blocked for more than 146 seconds. [ 394.170398][ T31] Not tainted syzkaller #0 [ 394.175325][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 394.184204][ T31] task:syz.2.1754 state:D stack:23448 pid:11548 tgid:11544 ppid:5818 task_flags:0x400140 flags:0x00080002 [ 394.196281][ T31] Call Trace: [ 394.199559][ T31] [ 394.202474][ T31] __schedule+0x17b4/0x5680 [ 394.207247][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 394.212229][ T31] ? __pfx___schedule+0x10/0x10 [ 394.217175][ T31] ? schedule+0x90/0x360 [ 394.221445][ T31] schedule+0x164/0x360 [ 394.225588][ T31] schedule_preempt_disabled+0x13/0x30 [ 394.231141][ T31] __mutex_lock+0x7f5/0x1550 [ 394.235840][ T31] ? kernel_text_address+0xa5/0xe0 [ 394.241019][ T31] ? __mutex_lock+0x606/0x1550 [ 394.245901][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 394.250605][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 394.255631][ T31] ? stack_trace_save+0xa9/0x100 [ 394.260918][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 394.265955][ T31] ? radix_tree_lookup+0x240/0x290 [ 394.271059][ T31] genl_rcv_msg+0x10b/0x7a0 [ 394.275548][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.280944][ T31] netlink_rcv_skb+0x232/0x4b0 [ 394.285798][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.290823][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 394.296164][ T31] ? down_read+0x270/0x2e0 [ 394.300583][ T31] ? genl_rcv+0xd/0x40 [ 394.304676][ T31] genl_rcv+0x28/0x40 [ 394.308777][ T31] netlink_unicast+0x75c/0x8e0 [ 394.313569][ T31] netlink_sendmsg+0x813/0xb40 [ 394.318431][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.323742][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 394.328745][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 394.334040][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.339372][ T31] __sys_sendto+0x672/0x710 [ 394.343885][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 394.348978][ T31] ? fd_install+0x94/0x3d0 [ 394.353402][ T31] ? fd_install+0x306/0x3d0 [ 394.358156][ T31] __x64_sys_sendto+0xde/0x100 [ 394.362950][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.369087][ T31] do_syscall_64+0x15f/0xf80 [ 394.373685][ T31] ? trace_irq_disable+0x3b/0x140 [ 394.378733][ T31] ? clear_bhb_loop+0x40/0x90 [ 394.383414][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.389568][ T31] RIP: 0033:0x7fd145b5d04e [ 394.394003][ T31] RSP: 002b:00007fd1469a7e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 394.402696][ T31] RAX: ffffffffffffffda RBX: 00007fd1469a96c0 RCX: 00007fd145b5d04e [ 394.410731][ T31] RDX: 0000000000000020 RSI: 00007fd1469a8000 RDI: 000000000000000e [ 394.418808][ T31] RBP: 0000000000000000 R08: 00007fd1469a7f04 R09: 000000000000000c [ 394.426924][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 394.434904][ T31] R13: 00007fd1469a7f58 R14: 00007fd1469a8000 R15: 0000000000000000 [ 394.443320][ T31] [ 394.446799][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 394.455968][ T31] INFO: task syz.2.1754:11549 blocked for more than 147 seconds. [ 394.463680][ T31] Not tainted syzkaller #0 [ 394.468692][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 394.477454][ T31] task:syz.2.1754 state:D stack:28216 pid:11549 tgid:11544 ppid:5818 task_flags:0x400040 flags:0x00080002 [ 394.489490][ T31] Call Trace: [ 394.492813][ T31] [ 394.495983][ T31] __schedule+0x17b4/0x5680 [ 394.500514][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 394.505468][ T31] ? __pfx___schedule+0x10/0x10 [ 394.510400][ T31] ? schedule+0x90/0x360 [ 394.514667][ T31] schedule+0x164/0x360 [ 394.519057][ T31] schedule_preempt_disabled+0x13/0x30 [ 394.524547][ T31] __mutex_lock+0x7f5/0x1550 [ 394.529358][ T31] ? kernel_text_address+0xa5/0xe0 [ 394.534507][ T31] ? __mutex_lock+0x606/0x1550 [ 394.539314][ T31] ? genl_rcv_msg+0x10b/0x7a0 [ 394.544001][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 394.549095][ T31] ? stack_trace_save+0xa9/0x100 [ 394.554044][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 394.559091][ T31] ? radix_tree_lookup+0x240/0x290 [ 394.564224][ T31] genl_rcv_msg+0x10b/0x7a0 [ 394.568837][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.573903][ T31] netlink_rcv_skb+0x232/0x4b0 [ 394.578720][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.583752][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 394.589153][ T31] ? down_read+0x270/0x2e0 [ 394.593578][ T31] ? genl_rcv+0xd/0x40 [ 394.597860][ T31] genl_rcv+0x28/0x40 [ 394.601860][ T31] netlink_unicast+0x75c/0x8e0 [ 394.606935][ T31] netlink_sendmsg+0x813/0xb40 [ 394.611751][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.617101][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 394.622048][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 394.627382][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.632678][ T31] __sys_sendto+0x672/0x710 [ 394.637272][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 394.642340][ T31] ? fd_install+0x94/0x3d0 [ 394.646892][ T31] ? fd_install+0x306/0x3d0 [ 394.651422][ T31] __x64_sys_sendto+0xde/0x100 [ 394.656322][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.662396][ T31] do_syscall_64+0x15f/0xf80 [ 394.667041][ T31] ? trace_irq_disable+0x3b/0x140 [ 394.672072][ T31] ? clear_bhb_loop+0x40/0x90 [ 394.677073][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.682993][ T31] RIP: 0033:0x7fd145b5d04e [ 394.687507][ T31] RSP: 002b:00007fd146986e58 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 394.695993][ T31] RAX: ffffffffffffffda RBX: 00007fd1469886c0 RCX: 00007fd145b5d04e [ 394.703965][ T31] RDX: 0000000000000028 RSI: 00007fd146986fe0 RDI: 0000000000000010 [ 394.712012][ T31] RBP: 0000000000000000 R08: 00007fd146986ed4 R09: 000000000000000c [ 394.720178][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 394.728253][ T31] R13: 00007fd146986f28 R14: 00007fd146986fe0 R15: 0000000000000000 [ 394.736336][ T31] [ 394.739359][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 394.748489][ T31] [ 394.748489][ T31] Showing all locks held in the system: [ 394.758261][ T31] 1 lock held by khungtaskd/31: [ 394.763096][ T31] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 394.773053][ T31] 4 locks held by klogd/5182: [ 394.777780][ T31] #0: ffff8880b863aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 394.787745][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: fs_reclaim_acquire+0x7c/0x100 [ 394.796930][ T31] #2: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 394.805926][ T31] #3: ffff8880b863aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 394.815945][ T31] 2 locks held by getty/5574: [ 394.820619][ T31] #0: ffff888036e790a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 394.830634][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 394.840848][ T31] 1 lock held by udevd/5839: [ 394.845439][ T31] #0: ffff888027174350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 394.854785][ T31] 1 lock held by udevd/8649: [ 394.859398][ T31] #0: ffff888027210350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 394.868685][ T31] 6 locks held by syz.0.1737/11484: [ 394.873883][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 394.882159][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 394.891253][ T31] #2: ffff888027184a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 394.901679][ T31] #3: ffff88802719c7c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680 [ 394.911238][ T31] #4: ffff88802719c190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 394.923543][ T31] #5: ffff88802719c1c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 394.936089][ T31] 2 locks held by syz.1.1741/11494: [ 394.941288][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 394.949520][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 394.958564][ T31] 2 locks held by syz.1.1741/11495: [ 394.963770][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 394.972027][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 394.981050][ T31] 2 locks held by syz.1.1741/11500: [ 394.986290][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 394.994487][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 395.003652][ T31] 2 locks held by syz.3.1747/11517: [ 395.009041][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.017296][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 395.026314][ T31] 2 locks held by syz.3.1747/11518: [ 395.031489][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.039733][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 395.048882][ T31] 2 locks held by syz.4.1751/11531: [ 395.054081][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.062342][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 395.071351][ T31] 2 locks held by syz.4.1751/11532: [ 395.076616][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.084826][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 395.094003][ T31] 2 locks held by syz.4.1751/11533: [ 395.099358][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.107625][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 395.116773][ T31] 2 locks held by syz.2.1754/11545: [ 395.121994][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.130428][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 395.139742][ T31] 2 locks held by syz.2.1754/11546: [ 395.144946][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.153296][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 395.162557][ T31] 2 locks held by syz.2.1754/11547: [ 395.167910][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.176150][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 395.185096][ T31] 2 locks held by syz.2.1754/11548: [ 395.190358][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.198703][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 395.207893][ T31] 2 locks held by syz.2.1754/11549: [ 395.213106][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.221390][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 395.230417][ T31] 2 locks held by syz-executor/11552: [ 395.237084][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.245332][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 395.254381][ T31] 2 locks held by syz-executor/11554: [ 395.259869][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.268182][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 395.277207][ T31] 2 locks held by syz-executor/11571: [ 395.282559][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.290795][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 395.299812][ T31] 2 locks held by syz-executor/11580: [ 395.305158][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.313461][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 395.322642][ T31] 2 locks held by syz-executor/11589: [ 395.328175][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.336423][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 395.345372][ T31] 2 locks held by syz-executor/11603: [ 395.350935][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.359217][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 395.368369][ T31] 2 locks held by syz-executor/11605: [ 395.373770][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.382072][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 395.391186][ T31] 2 locks held by syz-executor/11620: [ 395.397069][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.405293][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 395.414282][ T31] 2 locks held by syz-executor/11629: [ 395.419779][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.428017][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 395.437112][ T31] 2 locks held by syz-executor/11638: [ 395.442472][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.450790][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 395.459958][ T31] 2 locks held by syz-executor/11652: [ 395.465330][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.473781][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 395.483173][ T31] 2 locks held by syz-executor/11654: [ 395.488697][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.496986][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 395.506049][ T31] 2 locks held by syz-executor/11670: [ 395.511437][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.519747][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 395.528922][ T31] 2 locks held by syz-executor/11679: [ 395.534308][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.542516][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 395.551589][ T31] 2 locks held by syz-executor/11690: [ 395.557194][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.565412][ T31] #1: ffffffff8fe3dc00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 395.574576][ T31] [ 395.577084][ T31] ============================================= [ 395.577084][ T31] [ 395.585508][ T31] NMI backtrace for cpu 0 [ 395.585526][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 395.585538][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 395.585544][ T31] Call Trace: [ 395.585549][ T31] [ 395.585553][ T31] dump_stack_lvl+0xe8/0x150 [ 395.585571][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 395.585587][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 395.585602][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 395.585618][ T31] sys_info+0x135/0x170 [ 395.585630][ T31] watchdog+0xfaa/0x1000 [ 395.585643][ T31] ? watchdog+0x209/0x1000 [ 395.585657][ T31] kthread+0x388/0x470 [ 395.585667][ T31] ? __pfx_watchdog+0x10/0x10 [ 395.585676][ T31] ? __pfx_kthread+0x10/0x10 [ 395.585686][ T31] ret_from_fork+0x514/0xb70 [ 395.585722][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 395.585749][ T31] ? __switch_to+0xc79/0x1410 [ 395.585771][ T31] ? __pfx_kthread+0x10/0x10 [ 395.585789][ T31] ret_from_fork_asm+0x1a/0x30 [ 395.585834][ T31] [ 395.689898][ T31] Sending NMI from CPU 0 to CPUs 1: [ 395.695148][ C1] NMI backtrace for cpu 1 [ 395.695163][ C1] CPU: 1 UID: 0 PID: 1328 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 395.695181][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 395.695192][ C1] Workqueue: events_unbound toggle_allocation_gate [ 395.695214][ C1] RIP: 0010:__lock_acquire+0xc4c/0x2cf0 [ 395.695235][ C1] Code: 48 ff cb f7 c1 00 60 00 00 74 c3 e9 90 00 00 00 48 c7 c7 30 b4 82 8e 4c 89 fe e8 cf a0 4a 03 48 8b 54 24 18 eb c3 48 8b 48 18 <48> 39 e9 0f 84 b9 00 00 00 48 8b 40 08 48 85 c0 0f 84 ca fe ff ff [ 395.695249][ C1] RSP: 0018:ffffc9000617f7f8 EFLAGS: 00000046 [ 395.695262][ C1] RAX: ffffffff9445c670 RBX: 0000000000023f7a RCX: b3e41ae5bce5b969 [ 395.695273][ C1] RDX: 000000004463ce00 RSI: 000000007c5bb9f4 RDI: ffff888029818000 [ 395.695284][ C1] RBP: b3e41ae5bce5b969 R08: ffffffff82004da2 R09: ffffffff8e7ebc30 [ 395.695295][ C1] R10: dffffc0000000000 R11: fffffbfff1d53fd4 R12: ffff888029818be0 [ 395.695306][ C1] R13: ffff888029818be0 R14: ffff888029818000 R15: 0000000000000002 [ 395.695321][ C1] FS: 0000000000000000(0000) GS:ffff888125345000(0000) knlGS:0000000000000000 [ 395.695333][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.695344][ C1] CR2: 00007f7d3a2b69d2 CR3: 000000000e74a000 CR4: 00000000003526f0 [ 395.695358][ C1] Call Trace: [ 395.695363][ C1] [ 395.695374][ C1] ? static_key_enable+0x1a/0x20 [ 395.695396][ C1] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 395.695418][ C1] ? static_key_disable+0x12/0x20 [ 395.695434][ C1] lock_acquire+0x106/0x350 [ 395.695452][ C1] ? static_key_disable+0x12/0x20 [ 395.695476][ C1] cpus_read_lock+0x42/0x160 [ 395.695493][ C1] ? static_key_disable+0x12/0x20 [ 395.695510][ C1] static_key_disable+0x12/0x20 [ 395.695527][ C1] toggle_allocation_gate+0x1fe/0x290 [ 395.695542][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 395.695557][ C1] ? process_scheduled_works+0xa70/0x1860 [ 395.695578][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 395.695595][ C1] ? process_scheduled_works+0xa70/0x1860 [ 395.695615][ C1] ? process_scheduled_works+0xa70/0x1860 [ 395.695634][ C1] process_scheduled_works+0xb5d/0x1860 [ 395.695665][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 395.695687][ C1] ? assign_work+0x3d5/0x5e0 [ 395.695706][ C1] worker_thread+0xa53/0xfc0 [ 395.695736][ C1] kthread+0x388/0x470 [ 395.695751][ C1] ? __pfx_worker_thread+0x10/0x10 [ 395.695769][ C1] ? __pfx_kthread+0x10/0x10 [ 395.695784][ C1] ret_from_fork+0x514/0xb70 [ 395.695805][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 395.695824][ C1] ? __switch_to+0xc79/0x1410 [ 395.695842][ C1] ? __pfx_kthread+0x10/0x10 [ 395.695857][ C1] ret_from_fork_asm+0x1a/0x30 [ 395.695884][ C1] [ 395.696272][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 395.696290][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 395.696311][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 395.696322][ T31] Call Trace: [ 395.696330][ T31] [ 395.696338][ T31] vpanic+0x56c/0xa60 [ 395.696364][ T31] ? __pfx___schedule+0x10/0x10 [ 395.696384][ T31] ? __pfx_vpanic+0x10/0x10 [ 395.696415][ T31] panic+0xc5/0xd0 [ 395.696438][ T31] ? __pfx_panic+0x10/0x10 [ 395.696463][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 395.696488][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 395.696517][ T31] watchdog+0xff4/0x1000 [ 395.696541][ T31] ? watchdog+0x209/0x1000 [ 395.696567][ T31] kthread+0x388/0x470 [ 395.696584][ T31] ? __pfx_watchdog+0x10/0x10 [ 395.696601][ T31] ? __pfx_kthread+0x10/0x10 [ 395.696619][ T31] ret_from_fork+0x514/0xb70 [ 395.696645][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 395.696668][ T31] ? __switch_to+0xc79/0x1410 [ 395.696690][ T31] ? __pfx_kthread+0x10/0x10 [ 395.696709][ T31] ret_from_fork_asm+0x1a/0x30 [ 395.696754][ T31] [ 396.073733][ T31] Kernel Offset: disabled [ 396.078042][ T31] Rebooting in 86400 seconds..