last executing test programs: 17.30120667s ago: executing program 0 (id=6885): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) close(r1) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @random="e15e1cfb536c"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) (async) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x2, 0xe}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x24004880) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x2, 0xe}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008001}, 0x24004880) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 16.89057388s ago: executing program 0 (id=6894): syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "008c04", 0x18, 0x0, 0x0, @rand_addr=' \x01\x00', @remote, {[@hopopts={0x0, 0x1, '\x00', [@ra={0x5, 0x2, 0x7f}, @pad1, @padn]}]}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"/444], 0x1bc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r3, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffffc, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="d700000001000000bfa30000000000000703000030feffff720af0fff8ffffff71a4f0ff000000002d040000000000003d400300000000006504000001ed000079110000000000006c440000000000007a0ab0fe000000007b13000000000000c500f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e6b3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7a29aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e17fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4314f244a94aa8e98b0b263f0083bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc06000000000000008fe26e37037f27f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e05000000d03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c4378c9b71dff64075b74a6520adb187b40d2cccbcb08c0634ee74658d3e23bf2871ed2aa2a05e319374511c8b0bf1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b0613bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f3b22589f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b24464e0ff504b87c90697ec2a82bbfd1c31713190d3e6e502c434909d6ba06cd0361a0fd90552272f24519ea9938413947edd3a0a7aa780c1dcdddf13b46ca94f37c89664c9cc1857d64ca371fa1b6131"], &(0x7f0000000940)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe2, 0x0, 0xffffffffffffffff, 0x50}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) r5 = accept(r2, &(0x7f0000001140)=@ax25={{0x3, @netrom}, [@netrom, @rose, @netrom, @rose, @remote, @null, @bcast]}, &(0x7f00000011c0)=0x80) getsockopt$CAN_RAW_JOIN_FILTERS(r5, 0x65, 0x6, &(0x7f0000001200), &(0x7f0000001240)=0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x7d}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) recvmmsg(r6, &(0x7f0000000d00)=[{{&(0x7f0000000980)=@alg, 0x80, &(0x7f0000000c00)=[{&(0x7f00000001c0)=""/26, 0x1a}, {&(0x7f0000000a00)=""/156, 0x9c}, {&(0x7f0000000ac0)=""/196, 0xc4}, {&(0x7f0000000bc0)=""/43, 0x2b}], 0x4, &(0x7f0000000c40)=""/132, 0x84}, 0x4}], 0x1, 0x1, &(0x7f0000000d40)={0x0, 0x3938700}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000ac141400000000000000000000000000ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00150000000000010400000c000800080008000000e0"], 0xd8}, 0x1, 0x0, 0x0, 0x44400}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xffed}, {0x4, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8021}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000e00)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000010c0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001080)={&(0x7f0000000e40)={0x214, r10, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x28}}}}, [@NL80211_ATTR_CQM={0x70, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x2, 0x6, 0x5, 0x2]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x9, 0x1ff, 0x6ff, 0xfeb8, 0x9, 0x4, 0x9]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x1010, 0x313, 0x1ff, 0x0, 0x5, 0x7, 0x148d]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xf}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xee0}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x46}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x63f}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x9, 0xffffffff, 0x7ff, 0x0, 0x800]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4c}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10001}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x2, 0xe61, 0x9, 0xfffff001, 0x5]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x80000202}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xda}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3a}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x69a}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x58}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}]}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x140}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x7ff, 0x0, 0x3, 0x3, 0x10000]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x10001}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x57}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xead8c98}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3e}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x31077389}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x0, 0x5, 0x6, 0xa4, 0x3]}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x20000004}, 0x24004001) r11 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_FLUSHABLE(r11, 0x112, 0x8, &(0x7f0000000d80)=0x5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc01000010000000180000000000000000000000000000009500"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94) 16.861288864s ago: executing program 1 (id=6895): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x7, 0x2, 0x1000, 0x1056, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1, 0x1}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r4, 0xff09, 0x110c2300fe) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x2, '\x00', r2, r4, 0x3, 0x4, 0x3}, 0x50) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000000000850000181100"/23, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) 16.806967823s ago: executing program 3 (id=6896): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x4008}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040800}, 0x4001) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) socket(0x1e, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'ip6gre0\x00', @ifru_data=&(0x7f0000000500)="1a4cf331728a2ab98f4b19a5a033e412b2a11fbbb6a3a9c9e6bea5f37dbca046"}) ioctl$sock_netdev_private(r3, 0x89f1, &(0x7f0000000000)) 16.609803721s ago: executing program 1 (id=6898): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r0 = socket(0x2000000015, 0x80005, 0x0) (rerun: 32) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xffffffff}, 0x1c) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) (async, rerun: 64) socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) (async) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4623, 0x3, @private2, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001980)="2cfea3ae8d68af0fdb311890eb8b687921ae0bb62db49f4e9256d3d855a052226015d5c66588323cc1f371cf09eea14b30fb26a38aed338b120fadc0c2f2fc69a5929fda028938c3631dd700000000", 0x4f}, {&(0x7f0000001a00)="79f075ef35f766b765e816a470ccec8af4fb13a0d8ca9a19591dadfdc1e57eca170306467ef4aac6ad2b8a86bcc35657e5df2be848d6a3c32586752ecdbe4f43dcdf1c3aed9f315972978a30d87a72af4ee591c6b94c779c7fde79c14e9d55ddb0cc298b8bf99b4876558642b40006ffd8d2f8888a78cb69f146bb75ab94b854a6e4787e369a56544bb4197ae9b653f4592f9b40491eb11c2ea5a15d0b1777ddcb7377747909cc93847876c2651de428c60130a9afeb5a27bac18a5e398b8a293bbf0e3c23802ea940d8cc0fa1e09ca58a75e4eff5062a779db8ce98e71fab70e77540e2a51a3b13a47357541d55dd45d0fbab6b5e1f5386f851dbb3f6751684578015e3025e3a6aaa9d448fd2a7cce614f68d63f520bdca97466f8ee0b2253f8baf295de381cbd53042546f27fb326b6b1ea7e6cfeb54361789195b6f223c0137c08c19bfa7dd70ebd705b459767f2a7a5b34589706988022c777ee0fb0c836cdfeb9e94a1e22112442198dcb3199a0665df14080c0c6a91b964bd4d17ea5b8324d14e32191838fd59cef79d2b5ad0769ba260a006814670630eae72ea25f3ce061fd021c7d777287a1133556341e1e8c775f60fc060228e8b813972b11dc7493371da17ecc14e4f2b96693a74e83065a71732374a5fa1c5cec29cb82bbae294f037d2085b4165b4b737c729b17b192ad98efe4eec7458ab4877cea6fd434da9eed574082b363ce4a168edc878aa6f6b1ee1366ae61f25d82739a948a876cb9fd0869a8a79bd495d5c2bf9b577e1ecdde20d8da414635f15bc5db0b8c25913f698897ad5bc0382024e1fc98a26fae555f9ab97d6ac00540a1de42039879367027f91a0400000000000000396be8bbfc3bbd31e09e92b3e5387b2ed13fdb7349fbb0a36da36f352a8773d4a61d079727d58a975d365dbac555a8154acabc37fd4b46994245ed0846c078c87517071dd1ec2e468fc8d6caee0f067f8cf7a5d273fc3d4489eb88009e715e0d99dae012e3746b0a16290844df4ee300210853e33c5a0056eba1aa3f5170a8a142456c71011ea8331860cfd2c7777a181dcfa62e296f790b665868d1111e38fff2add5f1180265ee88e9329ebdf605d8183bc016311fedad22a2d2e22007c34b66a32c68095f877e4e989da2fe0d727b8d343f9ec93ec59619bde76070040039325faa7b6e853a834319badf8ba61c32d74c99e4c4d9b61bcf606d1f40ab4b7c87926a2103573befa754408a0ec85644d8c74c9ae03cc66d5b3e81137fba68be834167d6a5b567cf4a54725a89619efded028c29d4290d4a2377f5059735407f1bff2333b727c5a1ce9bddf4a1c6e340406327b7e507b92d007913f4ecff3348991ac2d66b14629a35ca6c48c6478cf5596eab5eb79ca6b81ff94b9ac76f2380ef9ab55a4df6800b5753b51145815b8fd0e4a5a951631bab4f96d7415a698bb06f52eec5bba1cfd9086d5b91b9c931d02b038a49845020076c54fd1791775c987f67bfc770a3921022c79cee3e0d308ece215155b80cdca70302aff8ed7289e516a5e5d14b612daa84e1027114f880eba9079385195bdd7a05f67d892aa135f9ba62f38f96b2ec1cc93152caa2b445e0060eff241e0cc1e4974228d660d088f19c57e51a790115a1aea173736f4595734ba8d2a6402d4c152a0b8c927e6a5d37a05db0e1886fe38ab5e47d36a6767844189436945ab042b5ec39ecdbb29f2f1cac281e24f3a33999cb932cf92c682d0488748d0cd21cb7cf3da4ff97d03a1c33126006d334413304ef7cb410ef6f856e4aacd1b3a59490c351455cfbd2be4ad0a6d701769580aaab742561c65060e818a7152461c1f9e558c5906dfa0218d7cbaa0b156dbef05a36307598dd6575777ea0d24bfc2271fa7db2cd06ed5fe7ae72d43b935374603ff508d2d57670678ba7b5bdd40f40c56d9403edb213904df773987ef8ac887f4a656438953a7f2f794e357b7824ae84600ebe9b1373d265ffac8432760883a68b0f7d34e527e3d34b1525dbf5af593f972e5e9501e378707fc7d3f523412c7ab08f2ee5eb17399b9d3584394275ba3e8ab2ea2204bde1f1f2ffd783b539ec95a0e9092dc4faa408e308e4f8c3fe60ba1094d84da7acb39526b045ef4a33c13aeb0224b0fe88f86e380a359e8adafd418c577ce4814b4630efa06d6edf89db6a355e5f2e39fdc2b5fe8a33cd8fe77e4eadaa24881a4ec583a981336aec907523931a2231d934418e0d30395669cc0965a87a307c0f604c89f66718562d99f2a37d51d167df4c6fba767e5779e4e5b6900c8f8cdf142fe0fb17faf9a38290b0109e75015e7e6cdcc11e237622c87dfca886b6b9624f27b1dcc7f9b6f443e9c7409583d65b8a518002f4ceced6882e15604e8f122c2dd3996db862bb0bac4111870f600716dcf85b28ce677b3d9d09f5b686ab6e15b96e95589777c8d927a75b53e33deca67127d2f90dd7a7d446ad7a382c310324cb2cf9805fc9123cff755bbf354bc017f24909725918968a600e4f160db0437df356a6d968e680124ae0cc413cf91a28c2be750834a30339391d2022974c09eb9cf1d2aab351f2828bb8e8793e518147b6f38831f6c177bfac2df3d1bf22c9a96e5ec22091402a9d0e3d6a98f7e48dffd0d1f74114ea09d22d8367ce962e63b10aba8b1d5558f07a66603b80b5eea66490c914bf101d054489966863066e598084b48dc92e8c90866d57dfb72b513fb59d295a68cc01f0655ac2be4750dc49e9392e75c8096229fc8f555656076eb9", 0x7b4}], 0x2, 0x0, 0x0, 0x2c}, 0x14000) 16.590459578s ago: executing program 2 (id=6899): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) (async) 16.531994956s ago: executing program 3 (id=6900): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff03"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x80000) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.low\x00', 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000080)={0x0, 0x1, 0x61c}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000002020101000000000000000002000000240002800c000280040001ff00000000140001800800010000000000080002"], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x6}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x3}]]}}}]}, 0x40}}, 0x0) sendmsg$nl_netfilter(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8020400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x11, 0x4, 0x301, 0x70bd2b, 0x25dfdbfc, {0x2, 0x0, 0x2}, [@nested={0x4, 0x3}, @nested={0x26, 0x96, 0x0, 0x1, [@generic="2b28d98350ea7a7fec9aec897309b189db1ba32e7525", @nested={0x4, 0x39}, @typed={0x4, 0xdb}, @nested={0x4, 0x101}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x20004000) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x11}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x168, 0x9, 0x140, 0xb, 0x368, 0x250, 0x250, 0x368, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0x0, 0xffffffff], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xf8, 0x140, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x8, 0x8727aef2dab6f0c4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@private0, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, [0xffffffff, 0xffffff00], @ipv4=@multicast2, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f00000004c0)=ANY=[@ANYBLOB="0012020300000000fc0100000000000000000000000000012001000000000000000000000000000000000000000000000000000000000000fc000000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000001ff010000000000000000000000000001fc01000000000000000000000000f601fe80000000000000000000000000003f"], 0x98) 16.529209765s ago: executing program 0 (id=6901): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32) r2 = accept4(r1, 0x0, 0x0, 0x80800) (rerun: 32) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) (async, rerun: 32) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async, rerun: 32) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, {0xa, 0x4e24, 0x2, @empty, 0x3}, 0x0, {[0x0, 0x5, 0x1, 0x5, 0x10000, 0x7, 0x10001, 0x5]}}, 0x5c) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0xa4, 0x10, 0x603, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x84, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x74, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}]}, 0xa4}}, 0x0) (rerun: 32) 16.358294603s ago: executing program 2 (id=6904): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000001880)=""/4096, 0x1000, 0x0, &(0x7f0000000080)=""/135, 0x87}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%ps \x00'}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000000000)=0x80000001, 0x4) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) (async) r4 = accept4(r2, 0x0, 0x0, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000e000000000000240012800b0001006d616373656300001400028005000c0001"], 0x44}}, 0x0) (async) sendto$packet(r4, &(0x7f0000000b80)="ac811a9659ed69cb3521fb8185e7a7e8e63a95fe948a11989267469bad1e8364daa79cdd5bd29b2b46dc1fde0477e88d2dc63f9a72d6dd1701e926007b65a68661fda1062b0383c54b952c655dac6b57b1fc85260d920738b3e303fe720390f5b56237f9d0d38b71ef23582333c442f54fa4a9c926b038c314bc301918266101abf7bba9ca1020c39f8eb97f0fa098727671c81bd3a06063d628fa470f73d615e0814688e3b47915d601e75e273434135288540ccccf8247e530851c545050b74b8935c6bec63f6c69259cc6ae830eafa613ab151c8d3110a6efc564d72d1d2fce650e1b029301dc2db505c4125e746e21e6e2a4deff21dbb0e47a936f61425b27a6076df20998a1e7dcd8b492f2ffda72158cca17a71b41e84f55aca59a21eac288ef319b5b534c1bf2eaf22b78c00e1036781f5f38c5c0a76cf6b790e28dd3bcdcd10ae6700f5053028c8cca71630b434eb430b0afcc34432d15675b7f0c219bc2d597e1694370040defd02f9f2ac0600ef34bd0ba9710fdd3d43dbc24b746", 0x180, 0x8001, 0x0, 0x0) (async) r6 = socket(0x2, 0x3, 0x6) bind$inet(r6, &(0x7f0000000080)={0x2, 0xfffa, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) (async) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) (async) sendto$inet(r6, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r6, &(0x7f00000023c0)="8ce2ad", 0x3, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) (async) recvmsg(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f00000022c0)=""/144, 0x90}], 0x2}, 0x40) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0xc, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000300)=""/52, 0x2c, 0x34, 0x0, 0x3}, 0x28) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETNOCSUM(r8, 0xc0189436, 0x1ffffffe) (async) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x6}, @TCA_PIE_LIMIT={0x8, 0x2, 0x8000}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x48}}, 0x800) (async) r11 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000400)="dca5efd0c275ca9a4c0d", 0xa) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="03000000050000000100000000000000000000000000000000000000a13285c18417bcda7ff80b63f0cba51b519e601f19baa4a46c55307520e31f923e07aee08e930cf61b2718cbd7241d0bbc7954a9c41e83ae665c658d95cb324267134051c402fdb8fd9352e8dc62332ee0a2fd2e2e0e7c9e"], 0x50) 16.341112328s ago: executing program 1 (id=6905): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x400, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}}, 0x20}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'virt_wifi0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) (async) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='macvtap0\x00') 16.303256029s ago: executing program 2 (id=6906): r0 = socket(0x40000000015, 0xa, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e60, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}]}}, 0x0, 0x2e, 0x0, 0x1, 0x9}, 0x20) 16.217968928s ago: executing program 0 (id=6907): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x17, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040)=0xfffffffe, 0x43) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) close(r1) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendto$packet(r6, &(0x7f0000000000)="9a18ed7627169f509fe0a5d41ca61e8b0dfd15ddf2805d4f71e8", 0x1a, 0x8000, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @mcast2, 0x3f}, 0x1c) 16.199591649s ago: executing program 2 (id=6908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400000010000100000000000000000001e2000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800c000100626974776973650014000280080001400000001408000340000000010900010073797a3000000000140000001100010000000000000000000700000a"], 0xc4}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400000010000100000000000000000001e2000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800c000100626974776973650014000280080001400000001408000340000000010900010073797a3000000000140000001100010000000000000000000700000a"], 0xc4}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x84, 0x3, 0x7, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xf52}]}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x40}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x40, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@generic="8b26ee52"]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x40, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@generic="8b26ee52"]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r2) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000940)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14) (async) sendmmsg$inet6(r5, &(0x7f0000000940)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14) shutdown(r5, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0xa0, r8, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x33, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x3, 0xe8, 0x24, 0x401}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x31, 0x91, "d68317263e8c60a66fdb8136d7df53a7ae64f453e61714f1921729b06b1ea480c9e8f4f19453b459c620834f98"}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}]]}, 0xa0}, 0x1, 0x0, 0x0, 0x2400c004}, 0x20000014) (async) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0xa0, r8, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x33, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @val={0x3, 0x1}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x3, 0xe8, 0x24, 0x401}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x31, 0x91, "d68317263e8c60a66fdb8136d7df53a7ae64f453e61714f1921729b06b1ea480c9e8f4f19453b459c620834f98"}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}]]}, 0xa0}, 0x1, 0x0, 0x0, 0x2400c004}, 0x20000014) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r6, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, [0xfffc, 0x4, 0x9, 0x93c5, 0x3, 0x8a, 0x7, 0x5]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x2, 0x4, 0x6, 0xfff, 0x759]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4d000}, 0x4040) getsockopt$bt_hci(r5, 0x84, 0x6c, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf250400000006000a0001000000080001006b9838"], 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) (async) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf250400000006000a0001000000080001006b9838"], 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x400000, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000007}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x4, {0x2, 0x1}}}}]}]}, 0x70}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x400000, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000007}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x4, {0x2, 0x1}}}}]}]}, 0x70}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), r3) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x204}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r12, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x894) setsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x1}, 0x8) setsockopt$inet_int(r11, 0x0, 0x13, &(0x7f0000000040)=0x80000000, 0x4) (async) setsockopt$inet_int(r11, 0x0, 0x13, &(0x7f0000000040)=0x80000000, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 16.173779097s ago: executing program 3 (id=6909): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x3, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x2, 0x0, 0x0, {[@fastopen={0x22, 0x6, "269042f6"}]}}}}}}}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000002c0)={r2, 0x2, 0x4, 0x3}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x8000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10) close(0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r5, &(0x7f00000021c0), 0x0}, 0x20) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000006000000020000002c0084802800018008000100666962001c0002800800024000000001080001400000000008000340000000110900010073797a3000000000090002"], 0x80}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}}, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) 16.048151297s ago: executing program 1 (id=6910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="18bc27bb32664ff21b70bd52ca98e1c18e3bda38c7c3e9305e13f596c34af7ddcf0658d15a5419585d345a1abc390b7d27035cc6d479ddac60df68ba1b25dc2e74495ff0aab29643c9af9da0cd2f3acae2827507c7c911a7003e8bdba4", 0x5d}], 0x1) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x1410, 0x100, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000011) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x8000, 0x10}, &(0x7f0000000200)=0xc) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x309) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r5 = socket(0x2c, 0x3, 0xfff) (async) r6 = accept(r1, &(0x7f00000003c0)=@llc, &(0x7f0000000440)=0x80) (async, rerun: 64) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) (rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r7, 0x58, &(0x7f0000000500)}, 0x10) (async) connect$inet6(r5, &(0x7f00000005c0)={0xa, 0x4e23, 0x789, @loopback, 0x9}, 0x1c) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x2, 0x15, 0x6, 0x9, 0x7, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_x_sec_ctx={0x5, 0x18, 0x9, 0x0, 0x1c, "17f21dcbd4c7bfecd245345e294771bf846bb1824d3e8755857222b2"}]}, 0x38}}, 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={&(0x7f00000006c0)="f021f97dc3590fae9c437adab0ef41467424f2afffc794752ea57444497f8462b96a6382944fe919c60967df884b619641d7e4d11cf8622193043eefc6387c77ca31", &(0x7f0000000740)=""/209, &(0x7f0000000840)="bc7bd653d74cb14705c81b41324b0e87fe69d56f2fde6200d4eb005b558ff1ce507e6442d8e86c5ef56ea976dc22672ddd81d44004b4dc9064c4f5451cf1e69a8cb9b6555d8f717cb5d4a7ba8b61de19ea82964aaf21fa84a5a644251d62cd645dddd94e9bf592454a07", &(0x7f00000008c0)="e7135cfa8d1cea952babf67b6176eb14686899786ed5f8c126760184b3df4ee31b105ed1620b8203ccf68dd40aa01e66a8aa909412bb900b1dea9b9ac7fbd22c93c385b75cebed16d6e9362d5f45f6b6a50291f069e2c6", 0x80000001, r7, 0x4}, 0x38) (async) recvmsg$can_raw(r5, &(0x7f0000000bc0)={&(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/152, 0x98}, {&(0x7f0000000ac0)=""/38, 0x26}], 0x2, &(0x7f0000000b40)=""/78, 0x4e}, 0x40000002) (async, rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000c00)=0x0) (rerun: 32) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000d00)={@nfc={0x27, r10, 0xffffffffffffffff, 0x3}, {&(0x7f0000000c40)=""/126, 0x7e}, &(0x7f0000000cc0), 0x10}, 0xa0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPSET_CMD_TYPE(r9, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x70, 0xd, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x880}, 0x4000) (async) accept(r5, &(0x7f0000000f00)=@tipc=@name, &(0x7f0000000f80)=0x80) (async) close(r9) (async) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000fc0)=0x1000) (async) r11 = openat$cgroup_ro(r7, &(0x7f0000001100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={0xffffffffffffffff, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000001200)=[0x0, 0x0], &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x56, &(0x7f0000001280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000012c0), &(0x7f0000001300), 0x8, 0x88, 0x8, 0x8, &(0x7f0000001340)}}, 0x10) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001500)=@generic={&(0x7f00000014c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x13, 0x7, &(0x7f0000001000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x81}]}, &(0x7f0000001040)='GPL\x00', 0x1, 0x6a, &(0x7f0000001080)=""/106, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x35, r11, 0x8, &(0x7f0000001140)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001180)={0x3, 0xa, 0x3, 0x1400000}, 0x10, r12, 0xffffffffffffffff, 0x1, &(0x7f0000001540)=[r13, r7], &(0x7f0000001580)=[{0x4, 0x5, 0x8, 0x4}], 0x10, 0x800}, 0x94) 15.963738345s ago: executing program 4 (id=6911): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x37, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800) 15.931439919s ago: executing program 1 (id=6912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) r5 = socket(0x11, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) close(r5) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)={0x10, 0x453, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x800) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x2) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 15.873144701s ago: executing program 3 (id=6913): socket(0x400000000010, 0x3, 0x0) (async) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xff, 0x6, 0x5, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xff, 0x6, 0x5, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x1e0, 0x90, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x148, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x3dc4, 0x4) sendmmsg$inet(r3, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvfrom(r3, 0x0, 0x0, 0x2101, 0x0, 0x0) 15.870504413s ago: executing program 2 (id=6914): setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @private=0xa010102, 0x0, 0x0, 'lblc\x00', 0x2d, 0xff, 0x26}, 0x2c) 15.863350193s ago: executing program 0 (id=6915): getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000080)) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f00000000c0)=0x3, 0x4) (async) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000100)={0x87, @dev={0xac, 0x14, 0x14, 0x3d}, 0x4e24, 0x0, 'wlc\x00', 0xc, 0x1, 0x14}, 0x2c) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x101, 0x20, 0x0, 0x100, 0x10001}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={r3, 0x2, 0xffffffff, 0x800}, &(0x7f0000000200)=0x10) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000240)={{0x21, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x0, 'dh\x00', 0x2, 0x2, 0x1d}, {@loopback, 0x4e21, 0x8d2c755353a10caf, 0x1, 0x7, 0xa6}}, 0x44) (async) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000002c0)="c5795585555fdcf313fc885f42804a4d3e6246aecb07de402e919564af94178648d07ad518b648c3b775a26a0a1bab14ae9fc7f3136bddb987951c89d73ba5eee53b7ae3aa2b28c1ebd1dc87ebad3c13812579a64f31e50cc9ae4f72d07a8626912b2f0e8345", 0x66}, {&(0x7f0000000340)="17c71cf8b524ac74919b8dbef802905a3f641d5a596caf4f89c16b148ab22fc639ebd786aeb0f2f0c1", 0x29}, {&(0x7f0000000380)="5fe36a0ea19a5df73abb159260dc26ba9bc0cf8632baa1f44e6770baac8bfe205fda14101501fd31970b55ebd0dc2763421426f550d41958c9aabafdc555651697221d5fd462eaff83963c4ca0632981e5f0a21f7867fdf540ad64e2f03c1554757dd2c9752ab82e5fbd5f9cf4bc13775c12c3987b23d02bf414db205cee15f6c4872f2a32c1df4b0c95c47e5029048855a94ed33486e27d8be4ea78064b9aa6a12e6dcd6eb55feae632b6cc9247d9ee984cba4d8a87a08652d3bd3f28cab5e3562bb474bbbac9a649b29138b837e3d70f5e3c9c56", 0xd5}, {&(0x7f0000000480)="baf69a1c36638652a04e7aa37ea5cf7af3280a36f2ff9834b11e133d78b9d5f43eaa5f94240b627f53445eeede4e8f03bab1015ce46f983f9943b011c291cbe69b0204f5153e7e9eaf90e86106ea64fec11c4fd1e2dc13ac2b0b02899c826347a5f9f2ff5d59e158e19a12f094f49faac65258315f0dc903f0a04af27c8660db65843c983c940831419ed679471db13a420aef7274319e9246dc7a3f129d906fe83c747135f956e11f803e5a69b93fbe78d935b7098446bd7544d14958f2440106366e261f3f", 0xc6}, {&(0x7f0000000580)="ed764f7f98ced7f09d2cffb88ea97e6c60ddc9feabc63c2795", 0x19}, {&(0x7f00000005c0)="fd942f8e4d29bc45dd538b5fb9993795ae1f15c04a3eb0fc1bfd4af097f1f47f6602eab5508ccd32baa333de403e6a960b7c3c9b", 0x34}], 0x6, &(0x7f0000000680)=[{0x18, 0x11, 0x101, "116aa6"}, {0xc8, 0x0, 0x3ff, "8ea8142f30ca66393c40cd3327d68abfc925a50d5e603562456dc1942f2424c2c35822ba002823e319236e90e06d709b0bafbc6541eeb9ddbcb355487cc1c86e6c0b10614cdc6c7a4d5ab843193948e229e65baeeb8cd97d9a977a179c74634ea4f211250934e912ffa1b2c49cfe7351fd6d5aec8f400fce287b3e28454d5d5d98f546758e2e8212086932d7fb0c6f9bdddf92a4a5ac43f2c79742830e8a48c17b48bb0defb77c8e0f8554801d3ccee31efb3f2952"}, {0x1010, 0x11, 0x4, "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"}], 0x10f0}, 0x400c404) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000017c0)={'batadv_slave_0\x00'}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000001800)=""/184, &(0x7f00000018c0)=0xb8) (async) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x44, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xf8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000001a40)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e23, @remote}, 0x2d6, 0x0, 0x0, 0x0, 0x44f, 0x0, 0x6, 0x8, 0x2}) (async) r7 = socket(0x1d, 0x1, 0x4) sendmsg$kcm(r7, &(0x7f0000001c00)={&(0x7f0000001ac0)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001b40)="e5b504133c1e86f2986366149c836e22fa05d9506028a0bb47c8473806c8f47a25bc2ff85e3dd07eb695b4ac2ed8d656b9a03a2d9400dfcefd595c22cde0e694de659f14e4e5f13b1841a2f7948142a49ca52c07623dc2bd84d8ed819960a447203c5b7a67f3b0dcd72f36be355c1905139cab7ff8fffd50f493", 0x7a}], 0x1}, 0x20040815) sendmmsg$inet(r0, &(0x7f0000002900)=[{{&(0x7f0000001c40)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001c80)="48707eebfe79c0efc8af8a5daf1173010c62151fa8bd56d42a010346d51079", 0x1f}, {&(0x7f0000001cc0)="c8448b21353589eef3d79ac104ed5959fd33d46ae58637387db1267ac4f142d4fcd768de47e9847c0e420f03d0f4175111012e2642c24ab050b70a87df9543050569aaa04dbf26949913e0c98ff97d3d470d67ef2145bf5633154658905f9c91b8877f507e88edc9d72ba35b77c4f0dc5c", 0x71}, {&(0x7f0000001d40)="464fba67e0812072365215b410e97e2dd4941c94781d76dcc547d67eb1", 0x1d}, {&(0x7f0000001d80)="260d0a91c89669435e32583257d7c65557904cdc96a1547351eaed72a6bd5bbfa8e3fa7aa82f6fbb8271c4eb30450b82594d9ae2df31001058af547311d390750aefd257f3a1c267576875b093812c60ec37899db774bc0277b39c28330995dd3a1789c194acd57938f122907766ed31d0cbad7108d885d04e16753ea6ae20035fcad6d23e785ec5cf0291b9760b9d704cf5a9dda1385b3b90335cf2ce3c89a05c8a3a556bcdcce13f45581b391d9c4d", 0xb0}, {&(0x7f0000001e40)="f0d0b2927762c52bd5c0c3189f09d0651c622858abc3c9702852660216e9fa8686f9af2340022ef52f1d098a12462ccd4635897b0c157a25e123191fd84af9b9c920adfb05273a6552d297db17913aa9b917e63f71e19f9836a7512e34796e45115abc118eff8e2bb76f27557dea0c3d7ab46cf70d138c178272858c59190406c75b8fc44d212285a8d0228124c4fb452f6322d59cb584b7b7b0d491154ef7716bb898e8e3a3b3e2dca4435e039023f5bffad079d09f22329527305989715683afc85da0b80b81286aef0311d826edc790d869229da6e823fb6c3a15af327e58905b12a2e063002cd40630f0d17340358d7ac28c455ad9a3da", 0xf9}], 0x5, &(0x7f0000001fc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffc00}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x60}}, {{&(0x7f0000002040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000002400)=[{&(0x7f0000002080)="f4fde95c981d236e5c27d0e79d213303381f2ae7314402f20786e8d1fbcba9dc88448d4c012dcb37e35140619b94a909802a35db9b6b406abc7d3829d6b7cf42ccf8b0ce6a5fdcdf440e41507938c47827a115a2ee9b1fe3", 0x58}, {&(0x7f0000002100)="d406d8d514a557c86ed20468736186a3d2a8d36be7497b01fb9f37d696914e5055b8e190be4cdafe9be48c02682b9e84b8225889390121db4715fce53ab36b99b594dcff8c604e44cbba8d95d85282f0016d6bd02cdf37182329cf6d59affb856a26c0d0a6c1d9797a4cfb5b34cefdb01f9f05d64c311d79", 0x78}, {&(0x7f0000002180)="b1bf563391dc08fddeec0136c503f8f701d6e472abf06119e5ce728893173104dd1fd52814aabed07a88d5bc761122bb0fdda23b4f4418ab65fed053c3b85e2ad79979fa981ddc46ffd43b935abb1a8e37d12e9026445c362014a95526cd915a4905557f9f1ee094847abc12a297a1c641012ed51d42f93bd4326a24a37398db882f4546252b4b00bfbd284ae117d0e4cb3dedc801be00d41f0b9e2164dde9f8e68c8c815fedcb629d8c94458029350589a92d6d65e190629aa8a58c4bdf3a7cc3a9ba5ad3fd27676ae4f612b0dbd541b3556109e883c2d1", 0xd8}, {&(0x7f0000002280)="575c5857d20f075ededc090674332bbba3853a45af773d7b311f4a666bef34c897762ffe03b30c086012fe1710708fe41a001dad2cb45502b43721fffebcd8bc7b0765262b8d29073dfc1c46e5c8ad2c13409f995a6fcd22e7013a98866052f1f7591df946b67c17b7eb82c3713bc110733426b98bfeddca69cc0c5d12d47997c8d9b594bd69149ee3dab66896fcd32e8896091a39c884e82f73c2275f91bb207f1ee768d8ba5b4c1322f2d5b993c92f54813c90bc49e457162ec24c7e03f7dd5331135cd3d6d2c3d59afd89aab0a8502b6d650bb530c9decde3fa82756c1db7ca201b947670452666963c9960a466a1555ab53f175b07b7fb", 0xf9}, {&(0x7f0000002380)="ece091850cb59e77f525f244d9deef5c97e5fd0bc1c52f5cbf45718e01b184dd725b7da6bd9e25711b46098ccb86d82bf72a3b0ec732", 0x36}, {&(0x7f00000023c0)}], 0x6, &(0x7f0000002480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11}}], 0x30}}, {{&(0x7f00000024c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000002880)=[{&(0x7f0000002500)="c2f3bb04dfacf73f6a871611a8e545366a6e06b31ec8a85227fb692c222c6b71a518557a8579c8d68a879abd6dde8a6d7dfe6b4a54115b46d4093bfed6b05ccbd1ad96944d87", 0x46}, {&(0x7f0000002580)="cf4e656e5bc19fc70ef7589eacfdda3192a2e86778979141a277b55c979c583b9d3bb7641cf20de0666755c2dfef340b094c533f8b370e4ca293a4", 0x3b}, {&(0x7f00000025c0)="1af734a9be59fe77f8febf54ba85497decc38e07f028305962c1e2d6779f1a44a88f786e920f8a45c9f391c747a14edd26f54df6a908db67248582423212bb4698dec37ca3831e6f9fae28424bd2f2edef7de77bfef0c227e6d42afac47476f2ac173bc5a0cfc759a76dd680aa25387d8b3f9cc1844185619b3757cde8c872a9202b9c54b3847484599d9403c362be880145debb42cc4b6b7f7b19e6442e4fe8f3b893ea9df5baa29a6fa8cb6183e58cc6ee9af729a288dfa71baab3c04d08487c45d3c514bb52b8c2f2fd3abf9c8b84651a2097fc91819b6138227dc47b85ae3873b8f3f5d95ed1b58a", 0xea}, {&(0x7f00000026c0)="cd13821e1bacd9fcc7d75018c76b6445202cabfb911ddec6ea0865eda30a0ba843e83da0838e307dece29480123788d8a3b5bc40132320c311a84f40ca999d31c4b23d367e480c37c1640c8159afdaab9eb87ca0737451ee865b0d7b80585815f5e8564322897324f4af8bd4aa63580c29a0d5e771f35398b5bae3437b4a9b40ebda0c2f4677e02c4224220fe68432876221e3cac22b7c520a4d3aff132c7cbf2da250987cc38151bf463ab3b55dda7451646f0ddfb83a38e889ea90f0975fefd1fad6c11eb0bd26abbdedfc567014aa0c11fec11d8ee56ada62e9f5c1ae101b80e972137a455fe23bbc987ab5ae011a6b93ca", 0xf3}, {&(0x7f00000027c0)="3140e2d6b705cf3fd59c8d23d7d533dce5162145cf77cde002dd6d95ea0ca5b66a47db5245ce1732b5b9577b728005cd1b", 0x31}, {&(0x7f0000002800)="d4369a399f582f8dbc796fd1f39ed8ae825b8f0a8f2685a08feed2b60b873ba93990e3424ef9c9600a79d4b9007054b371ece7c1059c8b8eec87a9bfc79079be6a5a1d13fd5d78", 0x47}], 0x6}}], 0x3, 0x20000041) connect$inet(r7, &(0x7f00000029c0)={0x2, 0x4e20, @broadcast}, 0x10) (async) r8 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$ARPT_SO_GET_ENTRIES(r8, 0x0, 0x61, &(0x7f0000002a00)={'filter\x00', 0x3f, "47d917b8d5842e7271c082565e8f7b733a2e5bf867056f2ee6e8dbf8a8ad673e53edf45ab62bfb1070bfbbeb5cd366c3a7edfce4518ced05645ad3d61b39e2"}, &(0x7f0000002a80)=0x63) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000002ac0)={r6, 0x30000, 0x1, 0x4}) write$cgroup_subtree(r10, &(0x7f0000002b00)={[{0x2d, 'rlimit'}]}, 0x8) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r9, 0x4040942c, &(0x7f0000002b40)={0x0, 0x6, [0xffff, 0x2, 0x7f, 0x101, 0xffffffffffffff7f, 0x9]}) ioctl$BTRFS_IOC_TREE_SEARCH(r10, 0xd0009411, &(0x7f0000002b80)={{0x0, 0x9ea, 0xfffffffffffffffb, 0x8000000000000000, 0xd3, 0xc, 0x4, 0x7fffffff, 0x2c, 0xd412, 0x3ff, 0x1, 0x8, 0x9, 0x2}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000003b80)={{r11, 0x4, 0x8000000000000001, 0x1, 0xffffffffffffffff, 0x5, 0x77f7, 0x0, 0x401, 0x401, 0x6190, 0x1, 0x9, 0xe39, 0xad}, 0x8, [0x0]}) 15.782087025s ago: executing program 4 (id=6916): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r2, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xe5}]}, 0x38}, 0x1, 0x0, 0x0, 0xbf386f593c35463f}, 0x800) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x16}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x3c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x24}, 0x94) 15.692911133s ago: executing program 2 (id=6917): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x6}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000004}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x5, 0x10000, 0x8}) write$nci(r2, &(0x7f0000000280)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x25, @a_listen={0x81, 0x0, 0x0, 0x80, 0x6, 0x5, 0x9, "", 0xb, 0x6, 0x2, 0x5, 0x1000, "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"}}, 0x100f) setsockopt$MRT_TABLE(r2, 0x0, 0xcf, &(0x7f00000012c0), 0x4) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001300)={0x0, 0x0, 0x9, 0x0, '\x00', [{0x401, 0x5, 0x7fffffff, 0x7c1, 0x4, 0x8}, {0x7fffffff, 0xff, 0x4, 0x8, 0x8, 0x4}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001700)={@cgroup=r2, 0x36, 0x1, 0x6, &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000001780), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x68, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x10000000) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) mkdirat$cgroup(r3, &(0x7f0000001900)='syz1\x00', 0x1ff) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001980), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x60, r7, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}]}, 0x60}, 0x1, 0x0, 0x0, 0x50}, 0x20008800) setsockopt$inet_buf(r6, 0x0, 0x2b, &(0x7f0000001ac0)="3f3ca76d0ea0ae706c113260eb50308c4f4b67645ce156e1176ce3cfa52926b7945f78bcb3624001b0dffb4c57e131b126df2106395fa6cb4bc27f46ea1c809d84c08ff0dc989b29702c9c245ad2355efb645a021b1fedd6871711685797594269c5684bf3e80d11e3670de273c1999b97851631998561d564ee3099b49a32074048c2a3addb666bec0bdfabf18069c5cec88c1ea3514d77d9a3f08a24674b415f18dd8d17b0f85588700e28d3eff1d081e5c5023c0cc7594011eb513875baef037be190b2256c2a7f5792dbf5a934d4adc74afe0a96d296bbbd21bf1caf035e8c93154612c5bd6e6f39", 0xea) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000001c00), r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x14, r8, 0x100, 0x6, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001d40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000001e40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x74, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xb}]}, 0x74}, 0x1, 0x0, 0x0, 0x2c008844}, 0x80) r10 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r10, 0x8982, &(0x7f0000001e80)={0x6, 'veth0_virt_wifi\x00', {0x8}, 0x7f}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000001f80)={&(0x7f0000001ec0), 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x24, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x24}}, 0x95) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002000), r0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x20, r11, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}}, 0x80) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000002100)=0xffffffffffffffff, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000021c0)={'ip_vti0\x00', &(0x7f0000002140)={'ip_vti0\x00', 0x0, 0x20, 0x7, 0xe, 0x10000, {{0xa, 0x4, 0x2, 0x16, 0x28, 0x65, 0x0, 0xc, 0x2f, 0x0, @rand_addr=0x64010102, @private=0xa010101, {[@noop, @timestamp={0x44, 0x10, 0x9b, 0x0, 0x7, [0x0, 0x2, 0x1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000002280)={'syztnl1\x00', &(0x7f0000002200)={'ip6_vti0\x00', r12, 0x2f, 0x8, 0x22, 0x3b, 0x48, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x10, 0x3, 0x101}}) 15.685707771s ago: executing program 3 (id=6918): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90120600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000300)={r8, 0xffff, 0x2, 0x401, 0x0, 0x236c, 0x1000, 0x5, {r8, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0x3, 0x9, 0x3, 0xffd7f8d, 0x80}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000540)={r8, @in6={{0xa, 0x4e21, 0x9, @local}}, 0x0, 0x3, 0x6, 0x3, 0x800}, &(0x7f0000000380)=0x98) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0075ad4c4000"/20, @ANYRES32=r5, @ANYBLOB="00009600"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20008000) r10 = socket$inet(0x2, 0x3, 0xa) setsockopt$sock_int(r10, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r10, 0x0) recvmmsg(r10, &(0x7f00000066c0), 0x0, 0x40000062, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) getpid() bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r9], 0x4c}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="060043076003008cb89e08f086dd", 0x0, 0x6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000780)=ANY=[], 0xa4}}, 0x20044000) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) 15.655234198s ago: executing program 0 (id=6919): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xfffffffffffffeff, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, 0x0, 0x4800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fcdbdf250900000008000300", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x4040080}, 0x20048040) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x80800) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 15.54447472s ago: executing program 4 (id=6920): r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x7, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x4, 0x6071, 0x0, 0xe6, {[@nop]}}}}}}}, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x2d, 0x0, &(0x7f00000017c0)) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@deltfilter={0x2c, 0x2d, 0x1, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x10}, {0x0, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8890) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)={0x2, 'syzkaller0\x00', {0x47c}, 0x9}) 15.403884742s ago: executing program 4 (id=6921): r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000000)="80", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000100)=0x6422, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[], 0x18}}, 0x4020) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) shutdown(0xffffffffffffffff, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom$phonet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@nat={'nat\x00', 0x1b, 0x5, 0x3a8, 0xd0, 0x0, 0xffffffff, 0x268, 0x268, 0x310, 0x310, 0xffffffff, 0x310, 0x310, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x3}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @local, @multicast2, @icmp_id=0x68, @port=0x4e20}}}}, {{@ip={@multicast2, @rand_addr=0x64010102, 0xffffff00, 0xffffffff, 'rose0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x5c}, 0x0, 0xb8, 0xf0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x2}}, @common=@socket0={{0x20}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x7, @loopback, @broadcast, @gre_key=0x4, @gre_key=0x42ad}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, 0xffffff00, 0xff000000, 'veth0_to_hsr\x00', 'vlan0\x00', {}, {0xff}, 0x29, 0x1, 0x68}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @multicast2, @broadcast, @port=0x4e21, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @dev={0xac, 0x14, 0x14, 0xb}, @empty, @port=0x4e22, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) 15.397030239s ago: executing program 3 (id=6922): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101f02, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x101, 0x0, 0x200}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond0\x00'}) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000440)=0x1, 0x4) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0xfffffffe) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001c0035742bbd7000fedbdf2502000000", @ANYRES32=r6, @ANYBLOB="1e002606080001"], 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000004) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r9, r10, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r11, r12}, 0x5) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001c0035742bbd7000fedbdf2502000000", @ANYRES32=r6, @ANYBLOB='!'], 0x24}, 0x1, 0x0, 0x0, 0x8803}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000004c0)={'wg2\x00'}) r14 = socket(0x400000000010, 0x3, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NFC_CMD_DISABLE_SE(r17, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400002}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r18, 0x200, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40040) 15.305358068s ago: executing program 1 (id=6923): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000400)=@ethtool_cmd={0x1e, 0x80000001, 0x2, 0x4e, 0x3, 0x0, 0x9, 0x8, 0x6, 0x4, 0x9, 0x0, 0x5, 0xb, 0x6, 0xc988, [0xd4, 0x6]}}) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000006a]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000000), 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x235, 0x2881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}]}]}, 0x30}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, 0x1, 0x9, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFCTH_TUPLE={0x58, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfffffff9}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}]}, 0xb4}}, 0xc247eb082692c15d) 15.29634319s ago: executing program 4 (id=6924): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001400), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001480)={0xffffffffffffffff, r0, 0x0, 0x7, &(0x7f0000001440)='\x00\x00\x00\x00\x00\x00\x00'}, 0x30) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000080), 0x9) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYRESHEX=r3, @ANYRES32=r3, @ANYRES16], 0x4c}}, 0x1) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000013c0)={&(0x7f0000000140)="42869f0e57cb54c5a6ae3516c340db6189b928f948d37ed9c3074ae389014c4676a0b738bbcfd7b9627a257275c08fa013d186eedc9f90fdf0202470affb660ca6321643b0abddb5837e74dbb75d7dec6290b0d230f06c482d90b29da9453008c927ce06518d37400527f811648b11bd92780c948c6745d6488cd80a8f69e900f752debac97ef3f6061bbc25", &(0x7f0000000200)=""/4096, &(0x7f0000001200)="b556fe7348319225749d7ae0f1f121ede81a14df8747cbbfb65128866654d02d19745979b46ed9aa427f8470bcdab45b4cbd810d9858e9f55d6adba4a31d79e14214c79e7eba99799efedc3dd157c85513807be2217c671ec9ba3dc088a213f3671705de8e387c1004fe766fce23c7262661b5eb88a14f4f467530eee5ba06c52b1b1f1190434afda755a5af5d37abc5cf2d87c670bf5df3566cc2671e561bbc2f0b01819cb4859d797bb604b371b4eb1594b746759701eabaae5db4a8c3b3ebfc2d2e779dbe01579aca7c373d4ca1da33a1e0dcc718883f885926f96f80efaf7ed76a9a88b483ef81154d1f54c802276b80d136f3ae", &(0x7f0000001300)="a3bd1b46ce5050de01c8231590606a3929ee2f71242f70facc463fa3de7a7b397f2a70d67ca2ad07ab2d78bc1ab5eff3d37a26fb6e16dbc531884ea7bf1337908b9d9ca30882662dabfd743c218e5c3e6dec4b7ce1f3c6394e2db2b7c47f21def23fc7fea20b10a25c200320e9d48d71caac633ddac1536c95f080cbd35b25bd29644a9bf916d9c4709a728829b2a6313245518776204da5323bfbbdac74b3927983fd0286614a84631ceb32", 0x1, r4, 0x4}, 0x38) 15.241962203s ago: executing program 4 (id=6925): r0 = socket(0x15, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) socket(0x15, 0x2, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) 208.371972ms ago: executing program 32 (id=6919): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x68, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x52895}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xfffffffffffffeff, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, {0xa, 0x4, @remote}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, 0x0, 0x4800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fcdbdf250900000008000300", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x4040080}, 0x20048040) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x80800) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 159.58356ms ago: executing program 33 (id=6923): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000400)=@ethtool_cmd={0x1e, 0x80000001, 0x2, 0x4e, 0x3, 0x0, 0x9, 0x8, 0x6, 0x4, 0x9, 0x0, 0x5, 0xb, 0x6, 0xc988, [0xd4, 0x6]}}) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x64, 0x0, 0x0, 0xc84cf8fe4733a687, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1=0xe000006a]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000000), 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x235, 0x2881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MTU={0x8, 0x4, 0x5}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}]}]}, 0x30}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, 0x1, 0x9, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFCTH_TUPLE={0x58, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfffffff9}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}]}, 0xb4}}, 0xc247eb082692c15d) 147.189286ms ago: executing program 34 (id=6917): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x6}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000004}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x5, 0x10000, 0x8}) write$nci(r2, &(0x7f0000000280)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x25, @a_listen={0x81, 0x0, 0x0, 0x80, 0x6, 0x5, 0x9, "", 0xb, 0x6, 0x2, 0x5, 0x1000, "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"}}, 0x100f) setsockopt$MRT_TABLE(r2, 0x0, 0xcf, &(0x7f00000012c0), 0x4) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000001300)={0x0, 0x0, 0x9, 0x0, '\x00', [{0x401, 0x5, 0x7fffffff, 0x7c1, 0x4, 0x8}, {0x7fffffff, 0xff, 0x4, 0x8, 0x8, 0x4}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001700)={@cgroup=r2, 0x36, 0x1, 0x6, &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000001780), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000017c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x68, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x10000000) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) mkdirat$cgroup(r3, &(0x7f0000001900)='syz1\x00', 0x1ff) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001980), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x60, r7, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}]}, 0x60}, 0x1, 0x0, 0x0, 0x50}, 0x20008800) setsockopt$inet_buf(r6, 0x0, 0x2b, &(0x7f0000001ac0)="3f3ca76d0ea0ae706c113260eb50308c4f4b67645ce156e1176ce3cfa52926b7945f78bcb3624001b0dffb4c57e131b126df2106395fa6cb4bc27f46ea1c809d84c08ff0dc989b29702c9c245ad2355efb645a021b1fedd6871711685797594269c5684bf3e80d11e3670de273c1999b97851631998561d564ee3099b49a32074048c2a3addb666bec0bdfabf18069c5cec88c1ea3514d77d9a3f08a24674b415f18dd8d17b0f85588700e28d3eff1d081e5c5023c0cc7594011eb513875baef037be190b2256c2a7f5792dbf5a934d4adc74afe0a96d296bbbd21bf1caf035e8c93154612c5bd6e6f39", 0xea) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000001c00), r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x14, r8, 0x100, 0x6, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001d40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000001e40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x74, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xb}]}, 0x74}, 0x1, 0x0, 0x0, 0x2c008844}, 0x80) r10 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r10, 0x8982, &(0x7f0000001e80)={0x6, 'veth0_virt_wifi\x00', {0x8}, 0x7f}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000001f80)={&(0x7f0000001ec0), 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x24, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x24}}, 0x95) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002000), r0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x20, r11, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}}, 0x80) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000002100)=0xffffffffffffffff, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000021c0)={'ip_vti0\x00', &(0x7f0000002140)={'ip_vti0\x00', 0x0, 0x20, 0x7, 0xe, 0x10000, {{0xa, 0x4, 0x2, 0x16, 0x28, 0x65, 0x0, 0xc, 0x2f, 0x0, @rand_addr=0x64010102, @private=0xa010101, {[@noop, @timestamp={0x44, 0x10, 0x9b, 0x0, 0x7, [0x0, 0x2, 0x1]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000002280)={'syztnl1\x00', &(0x7f0000002200)={'ip6_vti0\x00', r12, 0x2f, 0x8, 0x22, 0x3b, 0x48, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x10, 0x3, 0x101}}) 75.410702ms ago: executing program 35 (id=6922): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101f02, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x101, 0x0, 0x200}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond0\x00'}) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000440)=0x1, 0x4) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0xfffffffe) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001c0035742bbd7000fedbdf2502000000", @ANYRES32=r6, @ANYBLOB="1e002606080001"], 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000004) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r9, r10, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r11, r12}, 0x5) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001c0035742bbd7000fedbdf2502000000", @ANYRES32=r6, @ANYBLOB='!'], 0x24}, 0x1, 0x0, 0x0, 0x8803}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000004c0)={'wg2\x00'}) r14 = socket(0x400000000010, 0x3, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NFC_CMD_DISABLE_SE(r17, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400002}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r18, 0x200, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40040) 0s ago: executing program 36 (id=6925): r0 = socket(0x15, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) socket(0x15, 0x2, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) kernel console output (not intermixed with test programs): 1] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 570.381363][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 570.389403][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 570.535124][T27411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5922'. [ 570.644520][T27411] bridge0: entered promiscuous mode [ 570.655409][T27411] macsec2: entered promiscuous mode [ 570.686189][T27411] macsec2: entered allmulticast mode [ 570.699828][T27411] bridge0: entered allmulticast mode [ 570.709879][T27421] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 570.934494][T27436] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5927'. [ 571.011416][T27439] veth0_to_bridge: entered promiscuous mode [ 571.145653][T27438] veth0_to_bridge: left promiscuous mode [ 571.170113][T27401] chnl_net:caif_netlink_parms(): no params data found [ 571.489958][T27401] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.519061][T27401] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.526476][T27401] bridge_slave_0: entered allmulticast mode [ 571.567162][T27401] bridge_slave_0: entered promiscuous mode [ 571.588941][T27401] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.596185][T27401] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.610092][T27401] bridge_slave_1: entered allmulticast mode [ 571.623353][T27401] bridge_slave_1: entered promiscuous mode [ 571.729674][T27401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.751445][T27401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.836003][T27401] team0: Port device team_slave_0 added [ 571.858472][T27491] netlink: 'syz.3.5939': attribute type 11 has an invalid length. [ 571.869667][T27401] team0: Port device team_slave_1 added [ 571.962658][T27401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.980390][T27401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.011232][T27401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.040627][T27501] bond0: (slave rose0): Error: Device can not be enslaved while up [ 572.051911][T27401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.065997][T27401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.097987][T27401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.109539][T27500] netlink: 'syz.4.5943': attribute type 33 has an invalid length. [ 572.279335][T27508] team_slave_0: entered promiscuous mode [ 572.285093][T27508] team_slave_1: entered promiscuous mode [ 572.293021][T27508] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 572.303662][T27508] team0: Device macvtap1 is already an upper device of the team interface [ 572.329615][T27508] team_slave_0: left promiscuous mode [ 572.335165][T27508] team_slave_1: left promiscuous mode [ 572.373552][T27401] hsr_slave_0: entered promiscuous mode [ 572.380766][T27401] hsr_slave_1: entered promiscuous mode [ 572.388041][T27401] debugfs: 'hsr0' already exists in 'hsr' [ 572.413708][T27401] Cannot create hsr debugfs directory [ 572.426858][ T5844] Bluetooth: hci5: command tx timeout [ 572.577350][T27523] bond0: entered promiscuous mode [ 572.582515][T27523] bond0: entered allmulticast mode [ 572.592741][T27523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.602146][T27522] tipc: Enabled bearer , priority 0 [ 572.668267][T27531] syzkaller0: entered promiscuous mode [ 572.673906][T27531] syzkaller0: entered allmulticast mode [ 572.680162][T27531] tipc: Resetting bearer [ 572.839979][T27521] tipc: Resetting bearer [ 573.038592][T27557] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5960'. [ 574.380022][T27521] tipc: Disabling bearer [ 574.508038][ T5844] Bluetooth: hci5: command tx timeout [ 574.572574][T27564] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5962'. [ 574.634571][T27570] netlink: 'syz.4.5962': attribute type 1 has an invalid length. [ 574.642999][T27570] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5962'. [ 574.653132][T27570] netlink: 'syz.4.5962': attribute type 1 has an invalid length. [ 574.676458][T27401] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.705509][T27401] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.851083][T27401] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.874972][T27401] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.932438][T27582] º: renamed from veth1_vlan [ 575.031311][T27401] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.042898][T27401] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.128220][T27401] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.138837][T27401] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.679581][T27610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5975'. [ 575.849793][T27401] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 575.958775][T27622] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5980'. [ 575.985420][T27622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.995330][T27401] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 576.011215][T27626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5981'. [ 576.032102][T27401] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 576.044532][T27626] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5981'. [ 576.080349][T27401] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 576.191602][T27641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5983'. [ 576.272255][T27646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5986'. [ 576.385743][T27401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.459507][T27401] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.502291][T14012] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.509616][T14012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.523928][T14012] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.531168][T14012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.590964][ T5844] Bluetooth: hci5: command tx timeout [ 576.710710][T27674] atomic_op ffff8880760a8198 conn xmit_atomic 0000000000000000 [ 576.780353][T27677] netlink: 'syz.0.5994': attribute type 21 has an invalid length. [ 576.798668][T27677] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5994'. [ 576.980759][T27688] dvmrp6: entered allmulticast mode [ 577.000473][T27687] dvmrp6: left allmulticast mode [ 577.075775][T27401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.084376][T27692] netlink: 'syz.2.5999': attribute type 1 has an invalid length. [ 577.105706][T27692] netlink: 'syz.2.5999': attribute type 1 has an invalid length. [ 577.114231][T27692] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5999'. [ 577.163564][T27401] veth0_vlan: entered promiscuous mode [ 577.177846][T27401] veth1_vlan: entered promiscuous mode [ 577.227817][T27401] veth0_macvtap: entered promiscuous mode [ 577.246416][T27401] veth1_macvtap: entered promiscuous mode [ 577.286393][T27401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.300913][T27401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.333838][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.343777][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.360454][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.369670][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.422155][T27704] tipc: Enabled bearer , priority 0 [ 577.434801][T27704] syzkaller0: entered promiscuous mode [ 577.442344][T27704] syzkaller0: entered allmulticast mode [ 577.456158][T27704] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 577.482604][T27704] tipc: Resetting bearer [ 577.497833][ T6013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.506026][T27703] tipc: Resetting bearer [ 577.512765][ T6013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.530999][T27703] tipc: Disabling bearer [ 577.589956][T14016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.606676][T14016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.862102][T27732] syzkaller0: entered promiscuous mode [ 577.870887][T27732] syzkaller0: entered allmulticast mode [ 577.974335][T27736] syzkaller0: entered promiscuous mode [ 577.980057][T27736] syzkaller0: entered allmulticast mode [ 578.138645][T27745] ipt_REJECT: TCP_RESET invalid for non-tcp [ 578.220512][T27742] sctp: [Deprecated]: syz.0.6015 (pid 27742) Use of struct sctp_assoc_value in delayed_ack socket option. [ 578.220512][T27742] Use struct sctp_sack_info instead [ 578.568130][T27760] veth0: entered promiscuous mode [ 578.583634][T27760] veth0: left promiscuous mode [ 578.590023][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 578.605420][T27760] openvswitch: netlink: Multiple metadata blocks provided [ 578.607185][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 578.625627][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 578.636569][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 578.644414][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 578.666974][ T5841] Bluetooth: hci5: command tx timeout [ 578.720995][T27761] syzkaller0: entered promiscuous mode [ 578.726504][T27761] syzkaller0: entered allmulticast mode [ 578.751420][T27770] batadv1: entered allmulticast mode [ 580.474103][T27787] __nla_validate_parse: 5 callbacks suppressed [ 580.474131][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6028'. [ 580.495361][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6028'. [ 580.505972][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6028'. [ 580.539417][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6028'. [ 580.549605][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6028'. [ 580.569834][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6028'. [ 580.581805][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6028'. [ 580.629308][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6028'. [ 580.649074][T13988] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.662130][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6028'. [ 580.674757][ T5841] Bluetooth: hci4: command tx timeout [ 580.684399][T13988] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.696089][T27787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6028'. [ 580.706501][T13988] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 580.748934][ T5841] Bluetooth: hci5: command tx timeout [ 580.950361][T13988] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.972993][T13988] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.000708][T13988] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 581.159293][T13988] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.176555][T13988] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.188281][T13988] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 581.332696][ T10] IPVS: starting estimator thread 0... [ 581.343805][T27848] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 581.353678][T27846] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 581.448969][T27849] IPVS: using max 32 ests per chain, 76800 per kthread [ 581.462389][T13988] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.475359][T13988] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.487468][T13988] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 581.719860][T27866] syzkaller1: entered promiscuous mode [ 581.727238][T27866] syzkaller1: entered allmulticast mode [ 581.749245][T14016] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.834098][ T768] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.887993][T27880] tipc: Enabling of bearer rejected, failed to enable media [ 581.897666][T27762] chnl_net:caif_netlink_parms(): no params data found [ 581.913822][T14016] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.944678][T14016] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 581.957402][T27882] netlink: 'syz.1.6053': attribute type 1 has an invalid length. [ 581.977238][T27882] netlink: 'syz.1.6053': attribute type 3 has an invalid length. [ 581.987358][T27882] NCSI netlink: No device for ifindex 813332851 [ 582.674046][T13988] bond7 (unregistering): (slave gretap1): Releasing active interface [ 582.723828][T13988] bond5 (unregistering): (slave geneve2): Releasing active interface [ 582.748098][ T5841] Bluetooth: hci4: command tx timeout [ 582.791618][T13988] bridge0 (unregistering): left allmulticast mode [ 582.957299][T13988] team0: Port device bridge4 removed [ 583.131701][T13988] bond1 (unregistering): (slave bond2): Releasing backup interface [ 583.139775][T13988] bond2 (unregistering): left promiscuous mode [ 583.147446][T13988] bond1 (unregistering): Released all slaves [ 583.239656][T13988] bond2 (unregistering): Released all slaves [ 583.336238][T13988] bond3 (unregistering): Released all slaves [ 583.349446][T13988] bond4 (unregistering): Released all slaves [ 583.361312][T13988] bond5 (unregistering): Released all slaves [ 583.389440][T14016] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 583.475751][T13988] bond6 (unregistering): Released all slaves [ 583.487736][T13988] bond7 (unregistering): Released all slaves [ 583.499982][T13988] bond8 (unregistering): Released all slaves [ 583.599499][T13988] bond0 (unregistering): Released all slaves [ 583.618886][T27886] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 583.779072][T13988] tipc: Disabling bearer [ 583.818194][T13988] tipc: Left network mode [ 583.863199][T27762] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.874749][T27762] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.884624][T27762] bridge_slave_0: entered allmulticast mode [ 583.892656][T27762] bridge_slave_0: entered promiscuous mode [ 583.901705][T27905] netlink: 'syz.1.6057': attribute type 11 has an invalid length. [ 583.944280][T27762] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.955127][T27762] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.963105][T27762] bridge_slave_1: entered allmulticast mode [ 583.972102][T27762] bridge_slave_1: entered promiscuous mode [ 584.133285][T27923] netlink: 'syz.3.6062': attribute type 9 has an invalid length. [ 584.308146][T27762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.402516][T27762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.430304][T27931] netlink: 'syz.1.6064': attribute type 5 has an invalid length. [ 584.828195][ T5841] Bluetooth: hci4: command tx timeout [ 584.865606][T27762] team0: Port device team_slave_0 added [ 585.005322][T27762] team0: Port device team_slave_1 added [ 585.232466][T13988] hsr_slave_0: left promiscuous mode [ 585.304524][T13988] veth1_macvtap: left promiscuous mode [ 585.334749][T13988] veth1_vlan: left promiscuous mode [ 585.626069][T13988] pimreg3 (unregistering): left allmulticast mode [ 586.395268][T13988] team0 (unregistering): Port device dummy0 removed [ 586.509975][T27762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.534981][T27762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.592403][T27762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.648859][T27762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.655827][T27762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.737011][T27762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.790867][T28047] __nla_validate_parse: 33 callbacks suppressed [ 586.790887][T28047] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6088'. [ 586.813969][T28047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6088'. [ 586.893735][T28053] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6090'. [ 586.908440][ T5841] Bluetooth: hci4: command tx timeout [ 586.930585][T28054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6090'. [ 586.955991][T27762] hsr_slave_0: entered promiscuous mode [ 586.963776][T27762] hsr_slave_1: entered promiscuous mode [ 586.971400][T27762] debugfs: 'hsr0' already exists in 'hsr' [ 586.977750][T27762] Cannot create hsr debugfs directory [ 587.002788][T28054] bond1 (unregistering): Released all slaves [ 587.052089][T28053] bond1 (unregistering): Released all slaves [ 587.073251][T28059] netlink: 'syz.3.6091': attribute type 7 has an invalid length. [ 587.093335][T28063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6092'. [ 587.115583][T13988] IPVS: stop unused estimator thread 0... [ 587.410949][T16870] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.445290][T28081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6094'. [ 587.465744][T16870] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.488544][T16870] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.557953][T16870] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.569528][T28084] netlink: 'syz.3.6095': attribute type 29 has an invalid length. [ 587.661115][T28092] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 587.681327][T28092] bond1 (unregistering): Released all slaves [ 588.052058][T27762] netdevsim netdevsim2 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.059538][T28110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6101'. [ 588.078538][T28107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6099'. [ 588.111672][T28112] veth1_to_bond: entered allmulticast mode [ 588.230975][T28107] bond0: (slave bond_slave_1): Releasing backup interface [ 588.337502][T28107] veth1_to_bond (unregistering): left allmulticast mode [ 588.407896][T27762] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.609842][T27762] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.804940][T27762] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.134531][T27762] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 589.187518][T27762] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 589.241422][T27762] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 589.259119][T27762] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 589.303293][T28170] netlink: 'syz.3.6112': attribute type 1 has an invalid length. [ 589.427694][T28170] 8021q: adding VLAN 0 to HW filter on device bond6 [ 589.562783][T28178] bond6: (slave geneve3): making interface the new active one [ 589.611075][T28178] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 589.651511][T28179] pimreg: entered allmulticast mode [ 589.675686][T13985] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 589.700512][T13985] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 589.730649][T13985] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 589.759958][T13985] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 589.863056][T28195] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6115'. [ 590.022238][T27762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.101786][T27762] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.139148][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.146341][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.157237][T28202] block nbd2: server does not support multiple connections per device. [ 590.169164][T28202] block nbd2: shutting down sockets [ 590.272058][ T6013] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.279270][ T6013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.622780][T28229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6122'. [ 590.960038][T28251] netlink: 'syz.4.6126': attribute type 10 has an invalid length. [ 591.024208][T28251] dummy0: entered promiscuous mode [ 591.048269][T28251] bridge0: port 3(dummy0) entered blocking state [ 591.068729][T28251] bridge0: port 3(dummy0) entered disabled state [ 591.075324][T28251] dummy0: entered allmulticast mode [ 591.095528][T28251] bridge0: port 3(dummy0) entered blocking state [ 591.102059][T28251] bridge0: port 3(dummy0) entered forwarding state [ 591.156182][T28266] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR [ 591.342470][T27762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.451631][T28277] netlink: 'syz.4.6132': attribute type 1 has an invalid length. [ 591.605637][T28277] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 591.612250][T28277] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 591.719608][ T5841] Bluetooth: hci4: command tx timeout [ 591.738628][T27762] veth0_vlan: entered promiscuous mode [ 591.803191][T28289] __nla_validate_parse: 4 callbacks suppressed [ 591.803208][T28289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6135'. [ 591.858959][T27762] veth1_vlan: entered promiscuous mode [ 591.968884][T27762] veth0_macvtap: entered promiscuous mode [ 592.021550][T28300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6137'. [ 592.028936][T27762] veth1_macvtap: entered promiscuous mode [ 592.046277][T28300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6137'. [ 592.172619][T27762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.234772][T27762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.303780][T14030] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.368285][T14030] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.395971][T14030] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.397564][T28320] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6141'. [ 592.437788][T14030] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.545340][T28325] xt_hashlimit: size too large, truncated to 1048576 [ 592.625341][T28325] netlink: 'syz.0.6143': attribute type 13 has an invalid length. [ 592.714986][T13985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.762798][T13985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.858874][ T768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.871813][ T768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.202036][T28353] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6018'. [ 593.286451][T28353] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6018'. [ 593.638593][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 593.651461][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 593.699897][T28374] netlink: 'syz.3.6150': attribute type 21 has an invalid length. [ 593.700695][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 593.742951][T28374] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6150'. [ 593.755580][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 593.796531][T28374] netlink: 'syz.3.6150': attribute type 3 has an invalid length. [ 593.826571][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 594.364589][T28383] openvswitch: netlink: EtherType 50a is less than min 600 [ 594.758642][T14032] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.783701][T14032] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.821283][T14012] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.897134][ T768] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.923241][T28371] chnl_net:caif_netlink_parms(): no params data found [ 595.169040][T28127] Set syz1 is full, maxelem 65536 reached [ 595.371488][T14022] batadv1: left allmulticast mode [ 595.377344][T14022] batadv1: left promiscuous mode [ 595.390721][T14022] bridge0: port 3(batadv1) entered disabled state [ 595.467825][T28421] netlink: 'syz.2.6161': attribute type 11 has an invalid length. [ 595.559260][T28429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6160'. [ 595.584532][T14022] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 595.609413][T28432] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 595.653034][T28434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6161'. [ 596.037355][ T5844] Bluetooth: hci2: command tx timeout [ 596.088285][T14022] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 596.096419][T14022] bridge4 (unregistering): left promiscuous mode [ 596.189755][T14022] bond8 (unregistering): (slave bridge6): Releasing backup interface [ 596.198188][T14022] bridge6 (unregistering): left promiscuous mode [ 596.281224][T14022] bond0 (unregistering): Released all slaves [ 596.293961][T14022] bond1 (unregistering): Released all slaves [ 596.396362][T14022] bond2 (unregistering): Released all slaves [ 596.490902][T14022] bond3 (unregistering): Released all slaves [ 596.502721][T14022] bond4 (unregistering): Released all slaves [ 596.600728][T14022] bond5 (unregistering): Released all slaves [ 596.695257][T14022] bond6 (unregistering): Released all slaves [ 596.707114][T14022] bond7 (unregistering): Released all slaves [ 596.803848][T14022] bond8 (unregistering): Released all slaves [ 596.945281][T14022] tipc: Left network mode [ 597.133617][T28371] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.140945][T28371] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.148952][T28371] bridge_slave_0: entered allmulticast mode [ 597.157261][T28371] bridge_slave_0: entered promiscuous mode [ 597.189808][T28371] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.200923][T28371] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.211153][T28371] bridge_slave_1: entered allmulticast mode [ 597.220439][T28371] bridge_slave_1: entered promiscuous mode [ 597.237533][T28449] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6163'. [ 597.246947][T28449] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6163'. [ 597.256311][T28453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6165'. [ 597.308568][T28459] netlink: 'syz.2.6166': attribute type 1 has an invalid length. [ 597.327042][T28459] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6166'. [ 597.366686][T28459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6166'. [ 597.481531][T28371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.566383][T28475] 8021q: adding VLAN 0 to HW filter on device bond7 [ 597.581228][T28371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.683929][T28486] netlink: 'syz.2.6172': attribute type 1 has an invalid length. [ 597.788837][T28371] team0: Port device team_slave_0 added [ 597.940189][T28371] team0: Port device team_slave_1 added [ 598.050626][T28506] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6178'. [ 598.113036][ T5844] Bluetooth: hci2: command tx timeout [ 598.163585][T28516] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 598.293354][T14022] hsr_slave_0: left promiscuous mode [ 598.317047][T14022] hsr_slave_1: left promiscuous mode [ 599.133923][T28371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.141118][T28371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.169404][T28371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.184238][T28371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.191287][T28371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 599.219231][T28371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.383167][T28548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6184'. [ 599.404295][T28371] hsr_slave_0: entered promiscuous mode [ 599.413898][T28552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6186'. [ 599.424172][T28553] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6185'. [ 599.433349][T28552] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6186'. [ 599.438287][T28371] hsr_slave_1: entered promiscuous mode [ 599.458695][T28371] debugfs: 'hsr0' already exists in 'hsr' [ 599.472832][T28371] Cannot create hsr debugfs directory [ 599.825912][T28580] macsec1: entered promiscuous mode [ 600.053703][T14022] IPVS: stop unused estimator thread 0... [ 600.131951][T28371] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.145423][T28598] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 600.187329][ T5844] Bluetooth: hci2: command tx timeout [ 600.362859][T28371] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.530769][T28371] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 600.614552][T28612] bond2: option mode: invalid value (133) [ 600.659279][T28612] bond2 (unregistering): Released all slaves [ 600.813436][T28371] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.123436][T28647] syzkaller0: entered promiscuous mode [ 601.129223][T28647] syzkaller0: entered allmulticast mode [ 601.169232][T28371] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 601.266405][T28371] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 601.337734][T28371] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 601.400564][T28371] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 601.729130][T28701] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.869057][T28371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.952143][T28371] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.009012][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.016164][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.061634][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.068860][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.123794][T28720] netlink: 'syz.1.6228': attribute type 1 has an invalid length. [ 602.159295][T28371] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 602.269425][ T5844] Bluetooth: hci2: command tx timeout [ 602.354574][ T9] IPVS: starting estimator thread 0... [ 602.435573][T28748] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 602.457382][T28742] IPVS: using max 35 ests per chain, 84000 per kthread [ 602.531401][T28371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.545851][T28761] __nla_validate_parse: 14 callbacks suppressed [ 602.545869][T28761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6234'. [ 602.593357][T28371] veth0_vlan: entered promiscuous mode [ 602.593919][T28761] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6234'. [ 602.614256][T28371] veth1_vlan: entered promiscuous mode [ 602.682530][T28371] veth0_macvtap: entered promiscuous mode [ 602.719031][T28371] veth1_macvtap: entered promiscuous mode [ 602.756121][T28761] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 602.793963][T28371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.824615][T28371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.855179][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.875165][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.899783][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.970467][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.000812][T28731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6229'. [ 603.196195][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.223590][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.263362][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.271101][T28787] netlink: 'syz.2.6237': attribute type 1 has an invalid length. [ 603.273485][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.303905][T28787] netlink: 280 bytes leftover after parsing attributes in process `syz.2.6237'. [ 603.436131][T28794] netlink: 'syz.3.6238': attribute type 1 has an invalid length. [ 603.444603][T28794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 603.454956][T28794] netlink: 'syz.3.6238': attribute type 1 has an invalid length. [ 603.684442][T28808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6243'. [ 603.863654][T28810] bond2 (unregistering): Released all slaves [ 604.002458][T28808] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 604.004157][T28820] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 604.053160][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 604.079051][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 604.091612][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 604.107542][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 604.115144][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 604.444878][T28855] netlink: 'syz.1.6251': attribute type 23 has an invalid length. [ 604.511764][T28859] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6250'. [ 604.564343][T28853] netlink: 'syz.1.6251': attribute type 23 has an invalid length. [ 604.595448][T28868] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6252'. [ 604.643205][T28861] only policy match revision 0 supported [ 604.643245][T28861] unable to load match [ 604.887029][T28876] netlink: 'syz.4.6254': attribute type 1 has an invalid length. [ 604.905172][T28876] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6254'. [ 604.926963][T28881] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6256'. [ 604.956830][T28837] chnl_net:caif_netlink_parms(): no params data found [ 605.334726][T28901] pimreg: entered allmulticast mode [ 605.544758][T28837] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.552735][T28837] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.560460][T28837] bridge_slave_0: entered allmulticast mode [ 605.570047][T28837] bridge_slave_0: entered promiscuous mode [ 605.579051][T28837] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.586260][T28837] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.607462][T28837] bridge_slave_1: entered allmulticast mode [ 605.615218][T28837] bridge_slave_1: entered promiscuous mode [ 605.660625][T28930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6266'. [ 605.701266][T28837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.729771][T28837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.741832][T28926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.824664][T28939] netlink: 'syz.1.6269': attribute type 11 has an invalid length. [ 605.906048][T28926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.109726][T28837] team0: Port device team_slave_0 added [ 606.127624][T28837] team0: Port device team_slave_1 added [ 606.172025][T28958] netlink: 'syz.1.6275': attribute type 29 has an invalid length. [ 606.186992][ T5844] Bluetooth: hci3: command tx timeout [ 606.272839][T28837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.302428][T28837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.399285][T28837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.473632][T28966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.608281][T28966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.650136][T28837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.657406][T28837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.696181][T28837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.831953][T28837] hsr_slave_0: entered promiscuous mode [ 606.848743][T28837] hsr_slave_1: entered promiscuous mode [ 606.855253][T28837] debugfs: 'hsr0' already exists in 'hsr' [ 606.867502][T28837] Cannot create hsr debugfs directory [ 606.919535][T28999] netlink: 'syz.2.6283': attribute type 29 has an invalid length. [ 607.175580][T28837] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.188303][T28837] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 607.276397][T29018] netlink: 'syz.1.6289': attribute type 1 has an invalid length. [ 607.277419][T28837] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.315799][T28837] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 607.397444][T28837] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.408263][T28837] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 607.492858][T28837] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.517728][T28837] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 607.550237][T29026] netlink: 'syz.0.6291': attribute type 1 has an invalid length. [ 607.741104][T29037] __nla_validate_parse: 5 callbacks suppressed [ 607.741121][T29037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6293'. [ 607.763250][T28837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 607.783113][T28837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 607.815004][T28837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 607.833464][T28837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 608.014062][T29051] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 608.028362][T29051] bond1 (unregistering): Released all slaves [ 608.080832][T29056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6299'. [ 608.091805][T29056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6299'. [ 608.109263][T29056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6299'. [ 608.268917][ T5844] Bluetooth: hci3: command tx timeout [ 608.351026][T28837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.409727][T29072] netlink: 412 bytes leftover after parsing attributes in process `syz.0.6304'. [ 608.412049][T28837] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.442002][T13979] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.449246][T13979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.464522][T13988] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.471680][T13988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.564778][T29086] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6307'. [ 608.649151][T29086] bond2 (unregistering): Released all slaves [ 608.676564][T29085] syzkaller0: entered promiscuous mode [ 608.683001][T29094] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6309'. [ 608.703677][T29094] validate_nla: 1 callbacks suppressed [ 608.703696][T29094] netlink: 'syz.1.6309': attribute type 1 has an invalid length. [ 608.756394][T29094] : renamed from hsr0 (while UP) [ 608.895261][T29105] netlink: 'syz.0.6312': attribute type 1 has an invalid length. [ 608.909916][T29105] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6312'. [ 609.032241][T29115] netlink: 'syz.0.6316': attribute type 4 has an invalid length. [ 609.111160][T28837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.183367][T28837] veth0_vlan: entered promiscuous mode [ 609.202792][T28837] veth1_vlan: entered promiscuous mode [ 609.259482][T28837] veth0_macvtap: entered promiscuous mode [ 609.273952][T28837] veth1_macvtap: entered promiscuous mode [ 609.284694][T29126] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6319'. [ 609.295911][T28837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.342892][T28837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.380178][ T6013] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.403130][ T6013] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.417182][ T6013] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.426209][ T6013] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.450950][T29134] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 609.457468][T29134] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 609.650104][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.677496][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.773322][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.810420][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.008364][T29158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6241'. [ 610.103570][ T3645] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.117840][ T3645] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.126581][ T3645] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.149492][T29161] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.157629][T29161] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.197401][ T3645] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.356952][ T5844] Bluetooth: hci3: command tx timeout [ 611.730907][T29219] pim6reg1: entered promiscuous mode [ 611.745638][T29219] pim6reg1: entered allmulticast mode [ 612.009169][T29241] team0: Port device team_slave_0 removed [ 612.010243][T29250] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 612.271373][T29270] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 612.294201][T29270] bond2 (unregistering): Released all slaves [ 612.432422][ T5844] Bluetooth: hci3: command tx timeout [ 612.491604][T29291] netlink: 'syz.4.6360': attribute type 4 has an invalid length. [ 612.755544][T29307] netlink: 'syz.4.6368': attribute type 2 has an invalid length. [ 612.859218][T29318] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 612.862382][T29316] Bluetooth: MGMT ver 1.23 [ 613.012883][T29331] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 613.026996][T29328] netlink: 'syz.0.6373': attribute type 11 has an invalid length. [ 613.030653][T29331] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 613.039198][T29333] __nla_validate_parse: 8 callbacks suppressed [ 613.039216][T29333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6375'. [ 613.062416][T29328] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6373'. [ 613.085084][T29335] netlink: 404 bytes leftover after parsing attributes in process `syz.1.6372'. [ 613.332531][T29350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6382'. [ 613.372569][T29350] netlink: 332 bytes leftover after parsing attributes in process `syz.0.6382'. [ 613.504512][T29359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6386'. [ 613.714173][T29369] ip_vti0: entered promiscuous mode [ 613.736260][T29369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6389'. [ 613.859758][T29382] netlink: 'syz.3.6393': attribute type 1 has an invalid length. [ 613.919003][T29383] bond1 (unregistering): Released all slaves [ 613.937737][T29386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6395'. [ 613.976881][T29395] netlink: 'syz.0.6395': attribute type 25 has an invalid length. [ 613.986079][T29394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.072283][T29403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6398'. [ 614.085276][T29399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6394'. [ 614.281280][T29412] Cannot find add_set index 0 as target [ 614.404888][T29405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 614.418584][T29405] bond0 (unregistering): Released all slaves [ 614.437239][T29410] IPVS: Error connecting to the multicast addr [ 614.446587][T29419] netlink: 'syz.3.6404': attribute type 3 has an invalid length. [ 614.575904][T29426] IPVS: set_ctl: invalid protocol: 22 10.1.1.2:20000 [ 614.630405][T29429] team0: Cannot enslave team device to itself [ 614.639865][T29429] netlink: 'syz.2.6407': attribute type 12 has an invalid length. [ 614.739212][T29436] sctp: [Deprecated]: syz.3.6409 (pid 29436) Use of struct sctp_assoc_value in delayed_ack socket option. [ 614.739212][T29436] Use struct sctp_sack_info instead [ 614.801866][T29434] netlink: 'syz.0.6408': attribute type 10 has an invalid length. [ 614.815644][T29434] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.828843][T29434] bridge_slave_1: left allmulticast mode [ 614.834524][T29434] bridge_slave_1: left promiscuous mode [ 614.841106][T29434] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.878597][T29434] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 615.072532][T29451] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 615.080557][T29451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.326901][T29473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 615.436053][T29475] bond0: entered promiscuous mode [ 615.445998][T29475] bond_slave_0: entered promiscuous mode [ 615.452124][T29475] bond_slave_1: entered promiscuous mode [ 615.624946][T29486] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 615.660391][T29486] bond2: (slave lo): Enslaving as a backup interface with an up link [ 615.674875][T29499] netlink: zone id is out of range [ 615.680575][T29499] netlink: zone id is out of range [ 615.685874][T29499] netlink: zone id is out of range [ 615.691719][T29499] netlink: zone id is out of range [ 615.706975][T29499] netlink: zone id is out of range [ 615.720703][T29499] netlink: zone id is out of range [ 615.737501][T29499] netlink: zone id is out of range [ 616.196200][ T30] audit: type=1107 audit(1767852721.014:10): pid=29528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='g`9}¬¸ Qõ›ˆ8}S"NNmškÜ*ª7,‹O)SÊâÓCYãzoààg­¯“oq‚{}¸ý}KÄMÍ[ºu§Ì' [ 616.267272][ T30] audit: type=1107 audit(1767852721.014:11): pid=29528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='g`9}¬¸ Qõ›ˆ8}S"NNmškÜ*ª7,‹O)SÊâÓCYãzoààg­¯“oq‚{}¸ý}KÄMÍ[ºu§Ì' [ 616.286802][ T30] audit: type=1107 audit(1767852721.014:12): pid=29528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='g`9}¬¸ Qõ›ˆ8}S"NNmškÜ*ª7,‹O)SÊâÓCYãzoààg­¯“oq‚{}¸ý}KÄMÍ[ºu§Ì' [ 616.305891][ T30] audit: type=1107 audit(1767852721.014:13): pid=29528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='g`9}¬¸ Qõ›ˆ8}S"NNmškÜ*ª7,‹O)SÊâÓCYãzoààg­¯“oq‚{}¸ý}KÄMÍ[ºu§Ì' [ 616.325421][ T30] audit: type=1107 audit(1767852721.014:14): pid=29528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='g`9}¬¸ Qõ›ˆ8}S"NNmškÜ*ª7,‹O)SÊâÓCYãzoààg­¯“oq‚{}¸ý}KÄMÍ[ºu§Ì' [ 616.361179][ T30] audit: type=1107 audit(1767852721.014:15): pid=29528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='g`9}¬¸ Qõ›ˆ8}S"NNmškÜ*ª7,‹O)SÊâÓCYãzoààg­¯“oq‚{}¸ý}KÄMÍ[ºu§Ì' [ 616.385785][ T30] audit: type=1107 audit(1767852721.014:16): pid=29528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='g`9}¬¸ Qõ›ˆ8}S"NNmškÜ*ª7,‹O)SÊâÓCYãzoààg­¯“oq‚{}¸ý}KÄMÍ[ºu§Ì' [ 616.463176][T29543] xt_CT: You must specify a L4 protocol and not use inversions on it [ 616.490344][T29543] netlink: 'syz.1.6443': attribute type 8 has an invalid length. [ 616.556783][ T30] audit: type=1107 audit(1767852721.014:17): pid=29528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='g`9}¬¸ Qõ›ˆ8}S"NNmškÜ*ª7,‹O)SÊâÓCYãzoààg­¯“oq‚{}¸ý}KÄMÍ[ºu§Ì' [ 616.591522][T29551] netlink: 'syz.0.6445': attribute type 1 has an invalid length. [ 616.608573][ T30] audit: type=1107 audit(1767852721.014:18): pid=29528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='g`9}¬¸ Qõ›ˆ8}S"NNmškÜ*ª7,‹O)SÊâÓCYãzoààg­¯“oq‚{}¸ý}KÄMÍ[ºu§Ì' [ 616.655189][ T30] audit: type=1107 audit(1767852721.014:19): pid=29528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='g`9}¬¸ Qõ›ˆ8}S"NNmškÜ*ª7,‹O)SÊâÓCYãzoààg­¯“oq‚{}¸ý}KÄMÍ[ºu§Ì' [ 616.666339][T29557] tipc: Failed to remove unknown binding: 66,0,0/0:4238053391/4238053392 [ 616.700400][T29557] tipc: Failed to remove unknown binding: 66,0,0/0:4238053391/4238053392 [ 616.718787][T29551] 8021q: adding VLAN 0 to HW filter on device bond1 [ 617.255573][T29508] udevd[29508]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 617.692757][T29615] netlink: 'syz.3.6467': attribute type 15 has an invalid length. [ 617.737450][T29616] syzkaller1: entered promiscuous mode [ 617.745691][T29616] syzkaller1: entered allmulticast mode [ 617.753824][T29619] netlink: 'syz.2.6469': attribute type 1 has an invalid length. [ 617.820276][T29623] netlink: 'syz.1.6466': attribute type 6 has an invalid length. [ 618.349824][T29661] __nla_validate_parse: 15 callbacks suppressed [ 618.349845][T29661] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6481'. [ 618.388365][T29661] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6481'. [ 618.791522][T29693] syzkaller0: entered promiscuous mode [ 618.808073][T29693] syzkaller0: entered allmulticast mode [ 618.834420][T29695] sctp: [Deprecated]: syz.1.6490 (pid 29695) Use of int in max_burst socket option. [ 618.834420][T29695] Use struct sctp_assoc_value instead [ 619.062762][T29708] : renamed from hsr0 (while UP) [ 619.160104][T29719] macvlan0: entered promiscuous mode [ 619.367601][T29731] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6500'. [ 620.560001][T29747] dvmrp6: entered allmulticast mode [ 620.977951][T29773] nbd2: detected capacity change from 0 to 127 [ 620.985997][T29773] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6516'. [ 621.002070][T29773] block nbd0: reconnected socket [ 621.015333][T29773] nbd: socks must be embedded in a SOCK_ITEM attr [ 621.029208][T29777] net_ratelimit: 52 callbacks suppressed [ 621.029226][T29777] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 621.036210][T29773] block nbd3: Unsupported socket: should be TCP or UNIX. [ 621.090893][T29774] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6516'. [ 621.091291][T29773] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6516'. [ 621.138585][T29788] bond0: entered promiscuous mode [ 621.143902][T29788] bond_slave_0: entered promiscuous mode [ 621.159155][T29788] bond_slave_1: entered promiscuous mode [ 621.165938][T29788] bridge_slave_1: entered promiscuous mode [ 621.232334][ T5841] block nbd0: Receive control failed (result -32) [ 621.241435][ T5844] block nbd2: Receive control failed (result -104) [ 621.242318][T29793] netlink: 4128 bytes leftover after parsing attributes in process `syz.3.6521'. [ 621.345533][T29797] syzkaller0: entered promiscuous mode [ 621.351893][T29797] syzkaller0: entered allmulticast mode [ 621.395385][T29801] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6526'. [ 621.402896][T29805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6525'. [ 621.486439][T29805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6525'. [ 621.497920][T29808] syzkaller0: entered promiscuous mode [ 621.503418][T29808] syzkaller0: entered allmulticast mode [ 621.631356][T29805] bond1: option xmit_hash_policy: invalid value (64) [ 621.662218][T29805] bond1 (unregistering): Released all slaves [ 622.195153][T29848] sock: sock_set_timeout: `syz.2.6542' (pid 29848) tries to set negative timeout [ 622.205019][T29848] validate_nla: 1 callbacks suppressed [ 622.205036][T29848] netlink: 'syz.2.6542': attribute type 1 has an invalid length. [ 622.834933][T29857] bond2: entered promiscuous mode [ 622.840375][T29857] 8021q: adding VLAN 0 to HW filter on device bond2 [ 622.905935][T29857] bond2: (slave xfrm1): refused to change device type [ 622.930846][T29872] netlink: 'syz.0.6543': attribute type 6 has an invalid length. [ 623.532287][T29905] __nla_validate_parse: 3 callbacks suppressed [ 623.532307][T29905] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6557'. [ 623.586768][T29905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6557'. [ 623.599684][T29908] Cannot find set identified by id 0 to match [ 623.672596][T29905] syzkaller1: entered promiscuous mode [ 623.678552][T29905] syzkaller1: entered allmulticast mode [ 623.875220][T29923] netlink: 'syz.4.6563': attribute type 1 has an invalid length. [ 623.891091][T29923] netlink: 'syz.4.6563': attribute type 3 has an invalid length. [ 623.915531][T29923] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6563'. [ 623.984033][T29923] bridge0: port 3(dummy0) entered disabled state [ 623.990535][T29923] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.998233][T29923] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.024630][T29923] dummy0: left allmulticast mode [ 624.032474][T29923] bridge0: port 3(dummy0) entered disabled state [ 624.062122][T29923] bridge_slave_0: left allmulticast mode [ 624.068074][T29923] bridge_slave_0: left promiscuous mode [ 624.073765][T29923] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.087554][T29923] bridge_slave_1: left allmulticast mode [ 624.093201][T29923] bridge_slave_1: left promiscuous mode [ 624.102756][T29923] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.123452][T29923] team0: Port device team_slave_1 removed [ 624.153596][T29923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.176009][T29937] SET target dimension over the limit! [ 624.198802][T29923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.223187][T29923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.235990][T29923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.330197][T29923] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 625.178336][T29976] SET target dimension over the limit! [ 625.558715][T24204] hid_parser_main: 372 callbacks suppressed [ 625.558738][T24204] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x1 [ 625.581461][T24204] hid-generic 0005:0C49:1012.0002: ignoring exceeding usage max [ 625.591312][T24204] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x4 [ 625.610167][T24204] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x5 [ 625.682138][T24204] hid-generic 0005:0C49:1012.0002: reserved main item tag 0xd [ 625.698328][T24204] hid-generic 0005:0C49:1012.0002: item fetching failed at offset 31/106 [ 625.744356][T24204] hid-generic 0005:0C49:1012.0002: probe with driver hid-generic failed with error -22 [ 625.964319][T30001] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.998053][T30001] team0: Cannot enslave team device to itself [ 626.077478][T30001] !: renamed from dummy0 [ 626.698997][T30027] netlink: 401 bytes leftover after parsing attributes in process `syz.4.6594'. [ 626.853106][T30032] netlink: 'syz.4.6596': attribute type 1 has an invalid length. [ 626.890327][T30036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6598'. [ 626.926247][T30032] bond0: (slave erspan0): making interface the new active one [ 626.936090][T30032] bond0: (slave erspan0): Enslaving as an active interface with an up link [ 627.080192][T30046] wlan0 speed is unknown, defaulting to 1000 [ 627.099244][T30046] wlan0 speed is unknown, defaulting to 1000 [ 627.132636][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057f43400: rx timeout, send abort [ 627.141111][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078046000: rx timeout, send abort [ 627.150078][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057f43400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 627.164451][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888078046000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 627.193250][T30046] wlan0 speed is unknown, defaulting to 1000 [ 627.215446][T30046] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 627.281442][T30046] wlan0 speed is unknown, defaulting to 1000 [ 627.289633][T30046] wlan0 speed is unknown, defaulting to 1000 [ 627.297477][T30046] wlan0 speed is unknown, defaulting to 1000 [ 627.300508][T30059] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.6603'. [ 627.305274][T30046] wlan0 speed is unknown, defaulting to 1000 [ 627.320983][T30046] wlan0 speed is unknown, defaulting to 1000 [ 627.330102][T30046] wlan0 speed is unknown, defaulting to 1000 [ 627.339562][T30046] wlan0 speed is unknown, defaulting to 1000 [ 627.350406][T30046] wlan0 speed is unknown, defaulting to 1000 [ 627.359761][T30046] wlan0 speed is unknown, defaulting to 1000 [ 627.422790][T30059] netlink: 'syz.2.6603': attribute type 29 has an invalid length. [ 627.437396][T30059] netlink: 'syz.2.6603': attribute type 29 has an invalid length. [ 627.617518][T30075] netlink: 'syz.2.6608': attribute type 3 has an invalid length. [ 627.771660][T30086] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6608'. [ 627.787297][T30086] ksmbd: Unknown IPC event: 3, ignore. [ 627.883830][T30092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6613'. [ 627.925967][T30069] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6604'. [ 628.071751][T30102] sctp: [Deprecated]: syz.4.6616 (pid 30102) Use of int in max_burst socket option. [ 628.071751][T30102] Use struct sctp_assoc_value instead [ 628.477390][T30121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6620'. [ 628.759414][T30139] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6626'. [ 628.958077][T30146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6623'. [ 629.077428][T30156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6629'. [ 629.097160][T30156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6629'. [ 629.276006][T30146] hsr_slave_1 (unregistering): left promiscuous mode [ 629.278830][T30160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6630'. [ 629.554789][T30174] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6634'. [ 629.598938][T30176] openvswitch: netlink: Key 9 has unexpected len 2 expected 4 [ 629.637390][T30176] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6635'. [ 629.674215][T30176] netlink: 'syz.1.6635': attribute type 29 has an invalid length. [ 629.704751][T30178] openvswitch: netlink: IP tunnel dst address not specified [ 629.756726][T30176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6635'. [ 629.786766][ T5841] Bluetooth: hci3: command tx timeout [ 629.889311][T30182] netlink: 'syz.4.6638': attribute type 2 has an invalid length. [ 629.906231][T30182] 9: entered promiscuous mode [ 630.024369][T30192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6640'. [ 630.036486][T30192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6640'. [ 630.065390][T30192] netlink: 'syz.1.6640': attribute type 1 has an invalid length. [ 630.074533][T30192] netlink: 'syz.1.6640': attribute type 1 has an invalid length. [ 630.558311][T30216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.567349][T30216] bond_slave_0: left promiscuous mode [ 630.579044][T30216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.588765][T30216] bond_slave_1: left promiscuous mode [ 630.600595][T30216] bond0 (unregistering): Released all slaves [ 630.603227][T30223] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 630.613910][T30223] IPv6: NLM_F_CREATE should be set when creating new route [ 631.654817][T30238] Bluetooth: MGMT ver 1.23 [ 632.127175][T30280] openvswitch: netlink: Message has -2 unknown bytes. [ 632.157591][T30276] openvswitch: netlink: Flow actions attr not present in new flow. [ 632.207419][T30280] !€ÿ: renamed from bond_slave_0 (while UP) [ 632.262051][T30286] netlink: 'syz.3.6672': attribute type 8 has an invalid length. [ 632.444405][T30305] syzkaller0: entered promiscuous mode [ 632.450354][T30305] syzkaller0: entered allmulticast mode [ 632.465790][T30307] netlink: 'syz.4.6679': attribute type 12 has an invalid length. [ 632.741545][T30321] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 632.768735][T30321] bond3 (unregistering): Released all slaves [ 632.857136][T30328] erspan0: entered promiscuous mode [ 632.872327][T30328] gretap0: entered promiscuous mode [ 632.893822][T30328] debugfs: 'hsr1' already exists in 'hsr' [ 632.912037][T30328] Cannot create hsr debugfs directory [ 633.396170][T30366] netlink: 'syz.1.6698': attribute type 13 has an invalid length. [ 633.670906][T30366] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.678744][T30366] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.707243][ T5841] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 633.713763][ T5844] Bluetooth: hci2: command 0x0401 tx timeout [ 633.815062][T30366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.961131][T30388] __nla_validate_parse: 13 callbacks suppressed [ 633.961144][T30388] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6703'. [ 633.995244][T30379] tipc: Enabling of bearer rejected, failed to enable media [ 634.012941][T14012] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.039412][T13985] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.051451][T13985] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.057069][T30388] netlink: 'syz.2.6703': attribute type 1 has an invalid length. [ 634.071218][T13985] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.082944][ T9] wlan0 speed is unknown, defaulting to 1000 [ 634.090134][ T9] syz0: Port: 1 Link DOWN [ 634.261460][T30399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6708'. [ 634.301347][T30399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6708'. [ 634.360010][T30413] tipc: Enabling of bearer rejected, failed to enable media [ 634.399772][T30419] netlink: 'syz.4.6713': attribute type 3 has an invalid length. [ 634.426419][T30419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6713'. [ 634.543569][T30424] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6716'. [ 634.563791][T30424] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6716'. [ 634.610003][T30424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6716'. [ 634.628178][T30434] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6717'. [ 634.668855][T30434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6717'. [ 634.702636][T30434] xfrm1: entered promiscuous mode [ 634.737500][T30435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6717'. [ 634.754352][T30440] netlink: 'syz.3.6720': attribute type 9 has an invalid length. [ 634.768532][T30434] xfrm1: entered allmulticast mode [ 635.106503][T30469] pim6reg: entered allmulticast mode [ 635.207347][T30472] netlink: 'syz.0.6729': attribute type 12 has an invalid length. [ 635.423816][T30485] wlan0 speed is unknown, defaulting to 1000 [ 635.589574][T30490] macsec1: entered promiscuous mode [ 635.753686][T30503] syzkaller0: entered promiscuous mode [ 635.760563][T30503] syzkaller0: entered allmulticast mode [ 636.007350][T30511] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 636.821616][T30547] netlink: 'syz.0.6750': attribute type 83 has an invalid length. [ 636.960205][T30555] syzkaller1: entered promiscuous mode [ 636.966003][T30555] syzkaller1: entered allmulticast mode [ 637.655431][T30594] SET target dimension over the limit! [ 637.656211][T30598] lo speed is unknown, defaulting to 1000 [ 637.677188][T30598] lo speed is unknown, defaulting to 1000 [ 637.683834][T30598] lo speed is unknown, defaulting to 1000 [ 637.704832][T30598] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 637.799606][T30601] IPv6: sit1: Disabled Multicast RS [ 637.858245][T30606] erspan0: entered promiscuous mode [ 637.865255][T30598] lo speed is unknown, defaulting to 1000 [ 637.876168][T30598] lo speed is unknown, defaulting to 1000 [ 637.897954][T30598] lo speed is unknown, defaulting to 1000 [ 637.919399][T30598] lo speed is unknown, defaulting to 1000 [ 637.963789][T30598] lo speed is unknown, defaulting to 1000 [ 637.979062][T30598] lo speed is unknown, defaulting to 1000 [ 637.996519][T30598] lo speed is unknown, defaulting to 1000 [ 638.009030][T30598] lo speed is unknown, defaulting to 1000 [ 638.039856][T30598] lo speed is unknown, defaulting to 1000 [ 638.164452][T30639] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 638.303912][T30646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 638.666091][T30670] netlink: 'syz.1.6790': attribute type 10 has an invalid length. [ 638.684616][T30670] : A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 638.813968][T30687] netlink: 'syz.1.6795': attribute type 6 has an invalid length. [ 639.236398][T30712] netem: change failed [ 639.543348][T30743] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 639.694227][T30754] syzkaller0: entered promiscuous mode [ 639.699897][T30754] syzkaller0: entered allmulticast mode [ 639.913874][T30767] __nla_validate_parse: 14 callbacks suppressed [ 639.913893][T30767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6818'. [ 640.070513][T30776] netlink: 'syz.1.6821': attribute type 2 has an invalid length. [ 640.415588][T30793] netlink: 184 bytes leftover after parsing attributes in process `syz.4.6824'. [ 642.614790][T30817] netlink: 'syz.1.6833': attribute type 8 has an invalid length. [ 642.625883][T30813] syzkaller0: entered promiscuous mode [ 642.631693][T30813] syzkaller0: entered allmulticast mode [ 642.668623][T30821] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 642.781476][T30830] netlink: 'syz.3.6837': attribute type 1 has an invalid length. [ 642.913181][T30836] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 643.034957][T30843] sctp: [Deprecated]: syz.2.6840 (pid 30843) Use of struct sctp_assoc_value in delayed_ack socket option. [ 643.034957][T30843] Use struct sctp_sack_info instead [ 643.112562][T30852] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 643.172356][T30853] netlink: 'syz.3.6839': attribute type 10 has an invalid length. [ 643.286223][T30853] bridge_slave_1: left allmulticast mode [ 643.303866][T30853] bridge_slave_1: left promiscuous mode [ 643.310707][T30853] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.365697][T30865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6849'. [ 643.387778][T30861] pim6reg1: entered promiscuous mode [ 643.393542][T30861] pim6reg1: entered allmulticast mode [ 643.396265][T30872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6850'. [ 643.449666][T30874] netlink: 'syz.2.6851': attribute type 1 has an invalid length. [ 643.591741][T30874] 8021q: adding VLAN 0 to HW filter on device bond1 [ 643.630282][T30878] bond1: entered allmulticast mode [ 643.671177][T30882] bond1: (slave ip6gretap1): making interface the new active one [ 643.679952][T30882] ip6gretap1: entered allmulticast mode [ 643.686950][T30882] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 643.721767][T30888] syzkaller0: entered promiscuous mode [ 643.758442][T30888] syzkaller0: entered allmulticast mode [ 643.806117][T30894] tipc: Started in network mode [ 643.826899][T30894] tipc: Node identity ceae654f622a, cluster identity 4711 [ 643.834314][T30894] tipc: Enabled bearer , priority 0 [ 643.860211][T30888] netlink: 596 bytes leftover after parsing attributes in process `syz.4.6854'. [ 643.871146][T30884] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6853'. [ 643.871591][T30888] openvswitch: netlink: Flow key attr not present in new flow. [ 643.922690][T30889] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 643.955030][T30889] bond5 (unregistering): Released all slaves [ 643.976373][T30885] tipc: Resetting bearer [ 644.028653][T30885] tipc: Disabling bearer [ 644.108973][T30912] syzkaller1: entered promiscuous mode [ 644.127012][T30912] syzkaller1: entered allmulticast mode [ 644.233047][T30919] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20001 [ 644.322669][T30929] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 644.322860][T30928] IPVS: stopping master sync thread 30929 ... [ 644.934712][T30958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6872'. [ 645.180586][T30823] udevd[30823]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 645.328566][T30984] syz_tun: entered allmulticast mode [ 645.422512][T30988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6880'. [ 645.425750][T30989] netlink: 'syz.0.6882': attribute type 3 has an invalid length. [ 645.436805][T30988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6880'. [ 645.584350][T30997] tipc: Started in network mode [ 645.591783][T30997] tipc: Node identity 7ae38c2966c3, cluster identity 4711 [ 645.599612][T30997] tipc: Enabled bearer , priority 0 [ 645.651054][T30999] syzkaller0: entered allmulticast mode [ 645.713731][T31012] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 645.785165][T30997] tipc: Resetting bearer [ 645.822115][T30997] tipc: Disabling bearer [ 645.836274][T31018] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6891'. [ 645.837177][T31019] syzkaller1: entered promiscuous mode [ 645.851667][T31019] syzkaller1: entered allmulticast mode [ 645.879114][T31014] netlink: 'syz.1.6889': attribute type 12 has an invalid length. [ 645.889569][T31015] syzkaller0: entered allmulticast mode [ 646.017632][T31032] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6894'. [ 646.123783][T31039] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.6894'. [ 646.340382][T31053] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6899'. [ 646.352427][T31053] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 646.362666][T31053] 0ªî{X¹¦: entered allmulticast mode [ 646.368781][T31053] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 646.418766][T31064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6900'. [ 646.454269][T31064] xt_addrtype: ipv6 does not support BROADCAST matching [ 646.564949][T31071] netlink: 'syz.4.6903': attribute type 1 has an invalid length. [ 646.585949][T31077] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 646.636996][T31077] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 646.666259][T31085] netlink: 'syz.0.6907': attribute type 10 has an invalid length. [ 646.668360][T31077] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 646.678518][T31071] 8021q: adding VLAN 0 to HW filter on device bond3 [ 646.692160][T31077] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 646.701136][T31077] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 646.710083][T31077] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 646.718992][T31077] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 646.728738][T31077] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 646.738675][T31077] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 646.748643][T31077] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 646.778869][T31086] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6907'. [ 646.805944][T31091] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.6909'. [ 646.816912][T31091] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 646.861741][T31090] netlink: 'syz.2.6908': attribute type 10 has an invalid length. [ 646.872284][T31089] netlink: 'syz.2.6908': attribute type 10 has an invalid length. [ 647.053868][T31112] IPVS: set_ctl: invalid protocol: 135 172.20.20.61:20004 [ 647.098607][T31106] syzkaller0: entered promiscuous mode [ 647.104213][T31114] IPVS: set_ctl: invalid protocol: 33 172.30.0.1:20001 [ 647.116766][T31106] syzkaller0: entered allmulticast mode [ 647.501371][T31141] bond0: Error: Cannot enslave bond to itself. [ 647.528829][T31144] netlink: 'syz.4.6921': attribute type 4 has an invalid length. [ 647.539908][T31144] x_tables: duplicate underflow at hook 1 [ 650.005145][T13988] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 650.030950][T13988] team0: Port device ip6gre2 removed [ 650.048555][T13988] bond0 (unregistering): (slave ip6gretap2): Releasing backup interface [ 650.058356][T13988] ip6gretap2 (unregistering): left promiscuous mode [ 650.064952][T13988] ip6gretap2 (unregistering): left allmulticast mode [ 650.209920][T13988] dvmrp6 (unregistering): left allmulticast mode [ 650.643991][T13988] bond0 (unregistering): left promiscuous mode [ 650.650823][T13988] bond0 (unregistering): Released all slaves [ 650.753026][T13988] bond1 (unregistering): Released all slaves [ 650.853209][T13988] bond2 (unregistering): (slave veth3): Releasing active interface [ 650.862360][T13988] bond2 (unregistering): Released all slaves [ 650.874429][T13988] bond3 (unregistering): Released all slaves [ 650.971899][T13988] bond4 (unregistering): Released all slaves [ 650.984200][T13988] bond5 (unregistering): (slave bond6): Releasing backup interface [ 650.993215][T13988] bond5 (unregistering): Released all slaves [ 651.094354][T13988] bond6 (unregistering): Released all slaves [ 651.194608][T13988] bond7 (unregistering): Released all slaves [ 651.206390][T13988] bond8 (unregistering): Released all slaves [ 651.232065][ T11] block nbd2: Possible stuck request ffff8880247b0000: control (read@0,1024B). Runtime 30 seconds [ 651.265827][ T11] block nbd2: Possible stuck request ffff8880247b0200: control (read@1024,1024B). Runtime 30 seconds [ 651.276960][ T11] block nbd2: Possible stuck request ffff8880247b0400: control (read@2048,1024B). Runtime 30 seconds [ 651.287921][ T11] block nbd2: Possible stuck request ffff8880247b0600: control (read@3072,1024B). Runtime 30 seconds [ 651.342906][T13988] bond9 (unregistering): (slave veth11): Releasing active interface [ 651.353520][T13988] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 651.363926][T13988] bond9 (unregistering): Released all slaves [ 651.459715][T13988] bond10 (unregistering): Released all slaves [ 651.472401][T13988] bond11 (unregistering): Released all slaves [ 651.568906][T13988] bond12 (unregistering): Released all slaves [ 651.697908][T13988] 9: left promiscuous mode [ 651.757866][T13988] tipc: Disabling bearer [ 651.771559][T13988] tipc: Left network mode [ 652.000883][T13988] batadv0: left promiscuous mode [ 652.011246][T13988] hsr_slave_0: left promiscuous mode [ 652.123276][T13988] pim6reg (unregistering): left allmulticast mode [ 652.713665][T13988] vcan0 (unregistering): left allmulticast mode [ 652.995361][T13988] IPVS: stop unused estimator thread 0... [ 662.942646][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 662.952939][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 662.961987][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 662.970620][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 662.979026][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 663.049160][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 663.060534][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 663.068854][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 663.073164][T31168] wlan0 speed is unknown, defaulting to 1000 [ 663.087753][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 663.095399][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 663.119422][T31168] lo speed is unknown, defaulting to 1000 [ 663.137693][ T5838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 663.146949][ T5838] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 663.159159][ T5838] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 663.167894][ T5838] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 663.175386][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 663.185542][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 663.192593][ T5151] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 663.201887][ T5151] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 663.202060][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 663.221370][ T5838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 663.250227][ T5838] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 663.269308][ T5838] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 663.278997][ T5838] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 663.284548][T31170] wlan0 speed is unknown, defaulting to 1000 [ 663.295485][ T5838] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 663.305970][ T5838] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 663.336118][T31173] wlan0 speed is unknown, defaulting to 1000 [ 663.342098][T31170] lo speed is unknown, defaulting to 1000 [ 663.380124][T31173] lo speed is unknown, defaulting to 1000 [ 663.426825][T31172] wlan0 speed is unknown, defaulting to 1000 [ 663.448840][T31172] lo speed is unknown, defaulting to 1000 [ 663.477636][T31178] wlan0 speed is unknown, defaulting to 1000 [ 663.496381][T31178] lo speed is unknown, defaulting to 1000 [ 663.785573][T31168] chnl_net:caif_netlink_parms(): no params data found [ 663.841116][T31170] chnl_net:caif_netlink_parms(): no params data found [ 663.960171][T31173] chnl_net:caif_netlink_parms(): no params data found [ 664.050157][T31168] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.057431][T31168] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.064666][T31168] bridge_slave_0: entered allmulticast mode [ 664.071896][T31168] bridge_slave_0: entered promiscuous mode [ 664.103340][T31172] chnl_net:caif_netlink_parms(): no params data found [ 664.114002][T31168] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.121537][T31168] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.128934][T31168] bridge_slave_1: entered allmulticast mode [ 664.135910][T31168] bridge_slave_1: entered promiscuous mode [ 664.257493][T31170] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.264655][T31170] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.272784][T31170] bridge_slave_0: entered allmulticast mode [ 664.279877][T31170] bridge_slave_0: entered promiscuous mode [ 664.299214][T31168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.318685][T31170] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.325855][T31170] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.333168][T31170] bridge_slave_1: entered allmulticast mode [ 664.340303][T31170] bridge_slave_1: entered promiscuous mode [ 664.354176][T31168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.374285][T31178] chnl_net:caif_netlink_parms(): no params data found [ 664.454147][T31173] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.461670][T31173] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.468987][T31173] bridge_slave_0: entered allmulticast mode [ 664.476456][T31173] bridge_slave_0: entered promiscuous mode [ 664.496262][T31170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.517245][T31168] team0: Port device team_slave_0 added [ 664.523111][T31173] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.530595][T31173] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.537992][T31173] bridge_slave_1: entered allmulticast mode [ 664.544942][T31173] bridge_slave_1: entered promiscuous mode [ 664.564528][T31170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.585581][T31168] team0: Port device team_slave_1 added [ 664.616279][T31172] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.623582][T31172] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.631291][T31172] bridge_slave_0: entered allmulticast mode [ 664.638309][T31172] bridge_slave_0: entered promiscuous mode [ 664.682558][T31172] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.690009][T31172] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.697472][T31172] bridge_slave_1: entered allmulticast mode [ 664.704421][T31172] bridge_slave_1: entered promiscuous mode [ 664.726639][T31173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.749909][T31170] team0: Port device team_slave_0 added [ 664.768563][T31168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.775514][T31168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.801600][T31168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.814805][T31173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.838542][T31170] team0: Port device team_slave_1 added [ 664.871149][T31168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.878760][T31168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.905080][T31168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.934844][T31178] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.942837][T31178] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.951200][T31178] bridge_slave_0: entered allmulticast mode [ 664.959952][T31178] bridge_slave_0: entered promiscuous mode [ 664.970201][T31172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.005930][T31178] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.013471][T31178] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.020922][T31178] bridge_slave_1: entered allmulticast mode [ 665.028237][T31178] bridge_slave_1: entered promiscuous mode [ 665.037422][T31172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.067257][ T5838] Bluetooth: hci1: command tx timeout [ 665.076424][T31173] team0: Port device team_slave_0 added [ 665.083162][T31170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.090273][T31170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.116362][T31170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.140973][T31172] team0: Port device team_slave_0 added [ 665.146954][ T5838] Bluetooth: hci6: command tx timeout [ 665.149775][T31172] team0: Port device team_slave_1 added [ 665.160765][T31173] team0: Port device team_slave_1 added [ 665.168706][T31170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.175654][T31170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.201896][T31170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.263519][T31178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.308530][ T5838] Bluetooth: hci7: command tx timeout [ 665.309459][ T5151] Bluetooth: hci8: command tx timeout [ 665.323822][T31178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.339038][T31168] hsr_slave_0: entered promiscuous mode [ 665.345311][T31168] hsr_slave_1: entered promiscuous mode [ 665.352295][T31172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.359739][T31172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.386412][T31172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.398792][T31173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.405744][T31173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.431814][ T5151] Bluetooth: hci9: command tx timeout [ 665.438636][T31173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.451229][T31173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.458226][T31173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.485178][T31173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.512173][T31172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.519377][T31172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.545417][T31172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.608058][T31170] hsr_slave_0: entered promiscuous mode [ 665.614614][T31170] hsr_slave_1: entered promiscuous mode [ 665.621155][T31170] debugfs: 'hsr0' already exists in 'hsr' [ 665.628417][T31170] Cannot create hsr debugfs directory [ 665.645678][T31178] team0: Port device team_slave_0 added [ 665.661604][T31178] team0: Port device team_slave_1 added [ 665.764685][T31173] hsr_slave_0: entered promiscuous mode [ 665.771497][T31173] hsr_slave_1: entered promiscuous mode [ 665.779207][T31173] debugfs: 'hsr0' already exists in 'hsr' [ 665.784933][T31173] Cannot create hsr debugfs directory [ 665.795800][T31172] hsr_slave_0: entered promiscuous mode [ 665.802830][T31172] hsr_slave_1: entered promiscuous mode [ 665.809274][T31172] debugfs: 'hsr0' already exists in 'hsr' [ 665.814996][T31172] Cannot create hsr debugfs directory [ 665.831362][T31178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.838958][T31178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.866267][T31178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.905676][T31178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.912838][T31178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.939080][T31178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.126286][T31178] hsr_slave_0: entered promiscuous mode [ 666.133011][T31178] hsr_slave_1: entered promiscuous mode [ 666.139237][T31178] debugfs: 'hsr0' already exists in 'hsr' [ 666.144959][T31178] Cannot create hsr debugfs directory [ 667.156890][ T5151] Bluetooth: hci1: command tx timeout [ 667.238480][ T5151] Bluetooth: hci6: command tx timeout [ 667.386826][ T5151] Bluetooth: hci8: command tx timeout [ 667.396979][ T5151] Bluetooth: hci7: command tx timeout [ 667.466817][ T5151] Bluetooth: hci9: command tx timeout [ 669.228014][ T5151] Bluetooth: hci1: command tx timeout [ 669.306861][ T5151] Bluetooth: hci6: command tx timeout [ 669.466757][ T5151] Bluetooth: hci7: command tx timeout [ 669.467015][ T5838] Bluetooth: hci8: command tx timeout [ 669.547155][ T5838] Bluetooth: hci9: command tx timeout [ 671.307467][ T5838] Bluetooth: hci1: command tx timeout [ 671.386850][ T5838] Bluetooth: hci6: command tx timeout [ 671.547016][ T5838] Bluetooth: hci8: command tx timeout [ 671.547044][ T5151] Bluetooth: hci7: command tx timeout [ 671.626780][ T5151] Bluetooth: hci9: command tx timeout [ 681.307296][ T11] block nbd2: Possible stuck request ffff8880247b0000: control (read@0,1024B). Runtime 60 seconds [ 681.318389][ T11] block nbd2: Possible stuck request ffff8880247b0200: control (read@1024,1024B). Runtime 60 seconds [ 681.329500][ T11] block nbd2: Possible stuck request ffff8880247b0400: control (read@2048,1024B). Runtime 60 seconds [ 681.340536][ T11] block nbd2: Possible stuck request ffff8880247b0600: control (read@3072,1024B). Runtime 60 seconds [ 681.656772][ T5201] udevd[5201]: worker [29781] /devices/virtual/block/nbd2 is taking a long time [ 682.756808][ T5151] Bluetooth: hci0: command 0x0406 tx timeout [ 703.226820][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 711.388111][ T11] block nbd2: Possible stuck request ffff8880247b0000: control (read@0,1024B). Runtime 90 seconds [ 711.403465][ T11] block nbd2: Possible stuck request ffff8880247b0200: control (read@1024,1024B). Runtime 90 seconds [ 711.415585][ T11] block nbd2: Possible stuck request ffff8880247b0400: control (read@2048,1024B). Runtime 90 seconds [ 711.426634][ T11] block nbd2: Possible stuck request ffff8880247b0600: control (read@3072,1024B). Runtime 90 seconds [ 713.466848][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 718.586886][ T5151] Bluetooth: hci2: command 0x0401 tx timeout [ 723.192242][ T5151] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 723.202453][ T5151] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 723.218533][ T5151] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 723.228383][ T5151] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 723.236148][ T5151] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 723.297455][ T5838] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 723.297591][ T5844] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 723.320522][ T5844] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 723.331736][T31176] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 723.344255][T31176] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 723.345437][T31224] wlan0 speed is unknown, defaulting to 1000 [ 723.352548][T31176] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 723.363041][T31224] lo speed is unknown, defaulting to 1000 [ 723.367590][T31176] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 723.377750][ T5844] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 723.381313][T31232] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 723.386091][T31176] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 723.397432][T31179] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 723.400436][T31176] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 723.408777][T31232] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 723.423629][T31179] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 723.441321][T31232] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 723.559440][ T5841] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 723.569543][ T5841] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 723.578027][ T5841] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 723.585986][ T5841] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 723.593794][ T5841] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 723.605395][T31230] wlan0 speed is unknown, defaulting to 1000 [ 723.622744][T31227] wlan0 speed is unknown, defaulting to 1000 [ 723.622744][T31230] lo speed is unknown, defaulting to 1000 [ 723.624629][T31226] wlan0 speed is unknown, defaulting to 1000 [ 723.659742][T31227] lo speed is unknown, defaulting to 1000 [ 723.694580][T31226] lo speed is unknown, defaulting to 1000 [ 723.709648][T31234] wlan0 speed is unknown, defaulting to 1000 [ 723.756347][T31234] lo speed is unknown, defaulting to 1000 [ 723.907452][T31224] chnl_net:caif_netlink_parms(): no params data found [ 724.112413][T31224] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.120621][T31224] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.128576][T31224] bridge_slave_0: entered allmulticast mode [ 724.135739][T31224] bridge_slave_0: entered promiscuous mode [ 724.165022][T31224] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.172362][T31224] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.180205][T31224] bridge_slave_1: entered allmulticast mode [ 724.198038][T31224] bridge_slave_1: entered promiscuous mode [ 724.218422][T31226] chnl_net:caif_netlink_parms(): no params data found [ 724.290849][T31224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.300372][T31230] chnl_net:caif_netlink_parms(): no params data found [ 724.344685][T31224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.480908][T31224] team0: Port device team_slave_0 added [ 724.487870][T31227] chnl_net:caif_netlink_parms(): no params data found [ 724.512012][T31224] team0: Port device team_slave_1 added [ 724.550939][T31234] chnl_net:caif_netlink_parms(): no params data found [ 724.633684][T31226] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.641747][T31226] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.649254][T31226] bridge_slave_0: entered allmulticast mode [ 724.656292][T31226] bridge_slave_0: entered promiscuous mode [ 724.674681][T31224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.681882][T31224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.708150][T31224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.734461][T31226] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.741692][T31226] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.750109][T31226] bridge_slave_1: entered allmulticast mode [ 724.757302][T31226] bridge_slave_1: entered promiscuous mode [ 724.775668][T31224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.783056][T31224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.809518][T31224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.827725][T31230] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.834852][T31230] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.843008][T31230] bridge_slave_0: entered allmulticast mode [ 724.850128][T31230] bridge_slave_0: entered promiscuous mode [ 724.889151][T31230] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.896348][T31230] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.903778][T31230] bridge_slave_1: entered allmulticast mode [ 724.911485][T31230] bridge_slave_1: entered promiscuous mode [ 724.960840][T31226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.998694][T31226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.029496][T31227] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.036892][T31227] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.044162][T31227] bridge_slave_0: entered allmulticast mode [ 725.051799][T31227] bridge_slave_0: entered promiscuous mode [ 725.061602][T31230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.104613][T31227] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.112082][T31227] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.119676][T31227] bridge_slave_1: entered allmulticast mode [ 725.126945][T31227] bridge_slave_1: entered promiscuous mode [ 725.136226][T31230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.157897][T31234] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.165035][T31234] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.173878][T31234] bridge_slave_0: entered allmulticast mode [ 725.180986][T31234] bridge_slave_0: entered promiscuous mode [ 725.193113][T31224] hsr_slave_0: entered promiscuous mode [ 725.199558][T31224] hsr_slave_1: entered promiscuous mode [ 725.205672][T31224] debugfs: 'hsr0' already exists in 'hsr' [ 725.211503][T31224] Cannot create hsr debugfs directory [ 725.241186][T31226] team0: Port device team_slave_0 added [ 725.247723][T31234] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.256743][T31234] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.264034][T31234] bridge_slave_1: entered allmulticast mode [ 725.274535][T31234] bridge_slave_1: entered promiscuous mode [ 725.305107][T31226] team0: Port device team_slave_1 added [ 725.310794][ T5151] Bluetooth: hci10: command tx timeout [ 725.331245][T31227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.342823][T31230] team0: Port device team_slave_0 added [ 725.387052][T31227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.398791][T31230] team0: Port device team_slave_1 added [ 725.417181][T31234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 725.454447][T31226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.461507][T31226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.490403][ T5841] Bluetooth: hci11: command tx timeout [ 725.497645][T31232] Bluetooth: hci13: command tx timeout [ 725.497654][ T5151] Bluetooth: hci12: command tx timeout [ 725.499098][T31226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.522573][T31234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.564893][T31226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.572100][T31226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.599454][T31226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.627189][T31232] Bluetooth: hci14: command tx timeout [ 725.630659][T31227] team0: Port device team_slave_0 added [ 725.639279][T31230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.646210][T31230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.672935][T31230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.709654][T31227] team0: Port device team_slave_1 added [ 725.716066][T31230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.723164][T31230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.749448][T31230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.763252][T31234] team0: Port device team_slave_0 added [ 725.795749][T31234] team0: Port device team_slave_1 added [ 725.846403][T31227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.854039][T31227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.880568][T31227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.931459][T31227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.938515][T31227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.965553][T31227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.980198][T31226] hsr_slave_0: entered promiscuous mode [ 725.987411][T31226] hsr_slave_1: entered promiscuous mode [ 725.995131][T31226] debugfs: 'hsr0' already exists in 'hsr' [ 726.000973][T31226] Cannot create hsr debugfs directory [ 726.018147][T31234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 726.025115][T31234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.052934][T31234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 726.098479][T31230] hsr_slave_0: entered promiscuous mode [ 726.104848][T31230] hsr_slave_1: entered promiscuous mode [ 726.113691][T31230] debugfs: 'hsr0' already exists in 'hsr' [ 726.119552][T31230] Cannot create hsr debugfs directory [ 726.126116][T31234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 726.133491][T31234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 726.160344][T31234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 726.281420][T31227] hsr_slave_0: entered promiscuous mode [ 726.287915][T31227] hsr_slave_1: entered promiscuous mode [ 726.293956][T31227] debugfs: 'hsr0' already exists in 'hsr' [ 726.300477][T31227] Cannot create hsr debugfs directory [ 726.384687][T31234] hsr_slave_0: entered promiscuous mode [ 726.391420][T31234] hsr_slave_1: entered promiscuous mode [ 726.397560][T31234] debugfs: 'hsr0' already exists in 'hsr' [ 726.403713][T31234] Cannot create hsr debugfs directory [ 727.387607][T31232] Bluetooth: hci10: command tx timeout [ 727.546728][T31232] Bluetooth: hci13: command tx timeout [ 727.546784][ T5151] Bluetooth: hci12: command tx timeout [ 727.552599][ T5841] Bluetooth: hci11: command tx timeout [ 727.708447][ T5841] Bluetooth: hci14: command tx timeout [ 729.466791][ T5841] Bluetooth: hci10: command tx timeout [ 729.626850][ T5841] Bluetooth: hci11: command tx timeout [ 729.626871][ T5151] Bluetooth: hci12: command tx timeout [ 729.626883][T31232] Bluetooth: hci13: command tx timeout [ 729.787027][T31232] Bluetooth: hci14: command tx timeout [ 731.546978][T31232] Bluetooth: hci10: command tx timeout [ 731.707022][ T5151] Bluetooth: hci12: command tx timeout [ 731.707602][T31232] Bluetooth: hci13: command tx timeout [ 731.712563][ T5841] Bluetooth: hci11: command tx timeout [ 731.871913][ T5841] Bluetooth: hci14: command tx timeout [ 741.468468][ T11] block nbd2: Possible stuck request ffff8880247b0000: control (read@0,1024B). Runtime 120 seconds [ 741.479354][ T11] block nbd2: Possible stuck request ffff8880247b0200: control (read@1024,1024B). Runtime 120 seconds [ 741.490372][ T11] block nbd2: Possible stuck request ffff8880247b0400: control (read@2048,1024B). Runtime 120 seconds [ 741.501463][ T11] block nbd2: Possible stuck request ffff8880247b0600: control (read@3072,1024B). Runtime 120 seconds [ 771.556856][ T11] block nbd2: Possible stuck request ffff8880247b0000: control (read@0,1024B). Runtime 150 seconds [ 771.567775][ T11] block nbd2: Possible stuck request ffff8880247b0200: control (read@1024,1024B). Runtime 150 seconds [ 771.578885][ T11] block nbd2: Possible stuck request ffff8880247b0400: control (read@2048,1024B). Runtime 150 seconds [ 771.590265][ T11] block nbd2: Possible stuck request ffff8880247b0600: control (read@3072,1024B). Runtime 150 seconds [ 774.919636][T31232] Bluetooth: hci3: command 0x0406 tx timeout [ 783.393949][ T5151] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 783.409624][ T5151] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 783.427131][ T5151] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 783.437305][ T5151] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 783.447166][ T5151] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 783.511928][T31278] wlan0 speed is unknown, defaulting to 1000 [ 783.525827][T31278] lo speed is unknown, defaulting to 1000 [ 783.535581][ T5151] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 783.549152][ T5151] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 783.557474][ T5151] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 783.566002][ T5151] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 783.573975][ T5151] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 783.663137][ T5151] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 783.673544][ T5151] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 783.681811][ T5151] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 783.691479][ T5151] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 783.699345][ T5151] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 783.705293][T31179] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 783.729928][T31179] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 783.739620][T31179] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 783.748843][T31179] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 783.754029][T31281] wlan0 speed is unknown, defaulting to 1000 [ 783.769434][ T5841] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 783.786071][ T5151] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 783.805306][ T5151] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 783.813630][ T5151] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 783.828641][ T5151] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 783.837589][ T5151] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 783.877962][T31281] lo speed is unknown, defaulting to 1000 [ 783.914508][T31283] wlan0 speed is unknown, defaulting to 1000 [ 783.925830][T31283] lo speed is unknown, defaulting to 1000 [ 783.937797][T31285] wlan0 speed is unknown, defaulting to 1000 [ 783.968645][T31285] lo speed is unknown, defaulting to 1000 [ 784.024181][T31278] chnl_net:caif_netlink_parms(): no params data found [ 784.054918][T31287] wlan0 speed is unknown, defaulting to 1000 [ 784.106695][T31287] lo speed is unknown, defaulting to 1000 [ 784.221446][T31278] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.228848][T31278] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.236184][T31278] bridge_slave_0: entered allmulticast mode [ 784.243333][T31278] bridge_slave_0: entered promiscuous mode [ 784.262563][T31278] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.270342][T31278] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.277700][T31278] bridge_slave_1: entered allmulticast mode [ 784.284718][T31278] bridge_slave_1: entered promiscuous mode [ 784.354935][T31278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.392632][T31278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.495575][T31278] team0: Port device team_slave_0 added [ 784.553765][T31278] team0: Port device team_slave_1 added [ 784.608139][T31285] chnl_net:caif_netlink_parms(): no params data found [ 784.646801][T31278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.653773][T31278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.683391][T31278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.695834][T31281] chnl_net:caif_netlink_parms(): no params data found [ 784.721609][T31278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.728729][T31278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.754975][T31278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.821855][T31283] chnl_net:caif_netlink_parms(): no params data found [ 784.923996][T31285] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.931586][T31285] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.939167][T31285] bridge_slave_0: entered allmulticast mode [ 784.947289][T31285] bridge_slave_0: entered promiscuous mode [ 784.996457][T31285] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.004080][T31285] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.011549][T31285] bridge_slave_1: entered allmulticast mode [ 785.018713][T31285] bridge_slave_1: entered promiscuous mode [ 785.030294][T31278] hsr_slave_0: entered promiscuous mode [ 785.036835][T31278] hsr_slave_1: entered promiscuous mode [ 785.043009][T31278] debugfs: 'hsr0' already exists in 'hsr' [ 785.048959][T31278] Cannot create hsr debugfs directory [ 785.098711][T31287] chnl_net:caif_netlink_parms(): no params data found [ 785.123868][T31285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.146787][T31179] Bluetooth: hci1: command 0x0406 tx timeout [ 785.178644][T31285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.189148][T31281] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.196304][T31281] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.203641][T31281] bridge_slave_0: entered allmulticast mode [ 785.210819][T31281] bridge_slave_0: entered promiscuous mode [ 785.264618][T31281] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.271893][T31281] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.280340][T31281] bridge_slave_1: entered allmulticast mode [ 785.287760][T31281] bridge_slave_1: entered promiscuous mode [ 785.329486][T31285] team0: Port device team_slave_0 added [ 785.344819][T31283] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.352379][T31283] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.359998][T31283] bridge_slave_0: entered allmulticast mode [ 785.367403][T31283] bridge_slave_0: entered promiscuous mode [ 785.391181][T31285] team0: Port device team_slave_1 added [ 785.409502][T31283] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.417056][T31283] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.424338][T31283] bridge_slave_1: entered allmulticast mode [ 785.431597][T31283] bridge_slave_1: entered promiscuous mode [ 785.462476][T31281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.507955][T31281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.547620][T31232] Bluetooth: hci15: command tx timeout [ 785.554647][T31285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.561811][T31285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.588696][T31285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.613861][T31283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.627697][T31232] Bluetooth: hci16: command tx timeout [ 785.649614][T31285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.656893][T31285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.683202][T31285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.710054][T31283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.719466][T31287] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.726977][T31287] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.734239][T31287] bridge_slave_0: entered allmulticast mode [ 785.741770][T31287] bridge_slave_0: entered promiscuous mode [ 785.762550][T31281] team0: Port device team_slave_0 added [ 785.779575][T31287] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.786963][T31232] Bluetooth: hci17: command tx timeout [ 785.795743][T31287] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.803593][T31287] bridge_slave_1: entered allmulticast mode [ 785.811937][T31287] bridge_slave_1: entered promiscuous mode [ 785.839569][T31281] team0: Port device team_slave_1 added [ 785.877143][T31232] Bluetooth: hci18: command tx timeout [ 785.888514][T31283] team0: Port device team_slave_0 added [ 785.935646][T31283] team0: Port device team_slave_1 added [ 785.944340][T31287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.956798][T31232] Bluetooth: hci19: command tx timeout [ 785.976990][T31281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.984011][T31281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.010680][T31281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.037347][T31287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 786.051185][T31285] hsr_slave_0: entered promiscuous mode [ 786.057940][T31285] hsr_slave_1: entered promiscuous mode [ 786.064254][T31285] debugfs: 'hsr0' already exists in 'hsr' [ 786.070117][T31285] Cannot create hsr debugfs directory [ 786.091031][T31281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.099611][T31281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.126367][T31281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.193671][T31283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.201881][T31283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.228006][T31283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.240601][T31283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.247818][T31283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.274683][T31283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.325972][T31287] team0: Port device team_slave_0 added [ 786.335029][T31287] team0: Port device team_slave_1 added [ 786.440615][T31281] hsr_slave_0: entered promiscuous mode [ 786.447695][T31281] hsr_slave_1: entered promiscuous mode [ 786.453790][T31281] debugfs: 'hsr0' already exists in 'hsr' [ 786.459908][T31281] Cannot create hsr debugfs directory [ 786.466337][T31287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.473893][T31287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.499998][T31287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.547556][T31287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.554513][T31287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.581402][T31287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.599453][T31283] hsr_slave_0: entered promiscuous mode [ 786.605906][T31283] hsr_slave_1: entered promiscuous mode [ 786.612694][T31283] debugfs: 'hsr0' already exists in 'hsr' [ 786.618661][T31283] Cannot create hsr debugfs directory [ 786.746404][T31287] hsr_slave_0: entered promiscuous mode [ 786.753297][T31287] hsr_slave_1: entered promiscuous mode [ 786.760105][T31287] debugfs: 'hsr0' already exists in 'hsr' [ 786.765831][T31287] Cannot create hsr debugfs directory [ 787.627599][T31232] Bluetooth: hci15: command tx timeout [ 787.716747][T31232] Bluetooth: hci16: command tx timeout [ 787.868293][T31232] Bluetooth: hci17: command tx timeout [ 787.946815][T31232] Bluetooth: hci18: command tx timeout [ 788.027251][T31232] Bluetooth: hci19: command tx timeout [ 789.706860][ T5151] Bluetooth: hci15: command tx timeout [ 789.786762][ T5151] Bluetooth: hci16: command tx timeout [ 789.947176][ T5151] Bluetooth: hci17: command tx timeout [ 790.027035][ T5151] Bluetooth: hci18: command tx timeout [ 790.106939][ T5151] Bluetooth: hci19: command tx timeout [ 790.267076][ T5151] Bluetooth: hci9: command 0x0406 tx timeout [ 790.268443][T31176] Bluetooth: hci8: command 0x0406 tx timeout [ 790.276006][ T5151] Bluetooth: hci7: command 0x0406 tx timeout [ 790.282032][T31176] Bluetooth: hci6: command 0x0406 tx timeout [ 791.787569][ T5838] Bluetooth: hci15: command tx timeout [ 791.867018][ T5838] Bluetooth: hci16: command tx timeout [ 792.026893][ T5838] Bluetooth: hci17: command tx timeout [ 792.106847][ T5838] Bluetooth: hci18: command tx timeout [ 792.187091][ T5838] Bluetooth: hci19: command tx timeout [ 801.629601][ T11] block nbd2: Possible stuck request ffff8880247b0000: control (read@0,1024B). Runtime 180 seconds [ 801.640490][ T11] block nbd2: Possible stuck request ffff8880247b0200: control (read@1024,1024B). Runtime 180 seconds [ 801.651488][ T11] block nbd2: Possible stuck request ffff8880247b0400: control (read@2048,1024B). Runtime 180 seconds [ 801.663197][ T11] block nbd2: Possible stuck request ffff8880247b0600: control (read@3072,1024B). Runtime 180 seconds [ 802.326883][ T5201] udevd[5201]: worker [29781] /devices/virtual/block/nbd2 timeout; kill it [ 802.335587][ T5201] udevd[5201]: seq 31098 '/devices/virtual/block/nbd2' killed [ 809.947055][ T31] INFO: task syz.2.6917:31124 blocked for more than 143 seconds. [ 809.955295][ T31] Not tainted syzkaller #0 [ 809.961589][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 809.970314][ T31] task:syz.2.6917 state:D stack:26040 pid:31124 tgid:31122 ppid:27762 task_flags:0x480140 flags:0x00080002 [ 809.982663][ T31] Call Trace: [ 809.985937][ T31] [ 809.989000][ T31] __schedule+0x149b/0x4fd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 809.993522][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 809.998506][ T31] ? __pfx___schedule+0x10/0x10 [ 810.003370][ T31] ? schedule+0x91/0x360 [ 810.007738][ T31] schedule+0x165/0x360 [ 810.012875][ T31] blk_mq_freeze_queue_wait+0xf1/0x170 [ 810.018453][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 810.024529][ T31] ? queue_limits_commit_update_frozen+0x56/0xd0 [ 810.060165][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 810.066300][ T31] queue_limits_commit_update_frozen+0x56/0xd0 [ 810.086934][ T31] nbd_set_size+0x47e/0x6a0 [ 810.091500][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 810.096718][ T31] ? nla_memcpy+0x5b/0xc0 [ 810.101080][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 810.106043][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 810.111799][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 810.118942][ T31] ? bpf_lsm_capable+0x9/0x20 [ 810.123631][ T31] ? security_capable+0x7e/0x2e0 [ 810.128606][ T31] ? radix_tree_lookup+0x240/0x290 [ 810.133741][ T31] nbd_genl_reconfigure+0x414/0x1a50 [ 810.139243][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 810.145053][ T31] ? rcu_is_watching+0x15/0xb0 [ 810.149832][ T31] ? __nla_parse+0x40/0x60 [ 810.154254][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 810.162518][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 810.168170][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 810.174243][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 810.179310][ T31] genl_rcv_msg+0x60e/0x790 [ 810.183809][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 810.189259][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 810.195004][ T31] netlink_rcv_skb+0x208/0x470 [ 810.199862][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 810.204888][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 810.210210][ T31] ? genl_rcv+0x19/0x40 [ 810.214366][ T31] ? down_read+0x274/0x2e0 [ 810.218804][ T31] ? genl_rcv+0xd/0x40 [ 810.222876][ T31] genl_rcv+0x28/0x40 [ 810.227029][ T31] netlink_unicast+0x82f/0x9e0 [ 810.231806][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 810.237126][ T31] ? __alloc_skb+0x198/0x3a0 [ 810.241700][ T31] ? netlink_sendmsg+0x642/0xb30 [ 810.246665][ T31] netlink_sendmsg+0x805/0xb30 [ 810.251425][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.256761][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 810.261703][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 810.267715][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.272998][ T31] __sock_sendmsg+0x21c/0x270 [ 810.277741][ T31] ____sys_sendmsg+0x505/0x820 [ 810.282516][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 810.287844][ T31] ? import_iovec+0x74/0xa0 [ 810.292342][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 810.297104][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 810.302319][ T31] ? futex_wake+0x4b2/0x560 [ 810.306891][ T31] ? __fget_files+0x2a/0x420 [ 810.311486][ T31] ? __fget_files+0x3a0/0x420 [ 810.316150][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 810.321135][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 810.326633][ T31] ? rcu_is_watching+0x15/0xb0 [ 810.331409][ T31] do_syscall_64+0xec/0xf80 [ 810.335894][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.341991][ T31] ? trace_irq_disable+0x37/0x100 [ 810.347127][ T31] ? clear_bhb_loop+0x60/0xb0 [ 810.351810][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.357838][ T31] RIP: 0033:0x7fc12b58f749 [ 810.362315][ T31] RSP: 002b:00007fc12c3a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 810.371154][ T31] RAX: ffffffffffffffda RBX: 00007fc12b7e5fa0 RCX: 00007fc12b58f749 [ 810.379202][ T31] RDX: 0000000010000000 RSI: 00002000000018c0 RDI: 0000000000000004 [ 810.387228][ T31] RBP: 00007fc12b613f91 R08: 0000000000000000 R09: 0000000000000000 [ 810.395378][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.403518][ T31] R13: 00007fc12b7e6038 R14: 00007fc12b7e5fa0 R15: 00007ffe4250f048 [ 810.411555][ T31] [ 810.414575][ T31] INFO: task syz.2.6917:31131 blocked for more than 143 seconds. [ 810.422386][ T31] Not tainted syzkaller #0 [ 810.427600][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 810.436608][ T31] task:syz.2.6917 state:D stack:28728 pid:31131 tgid:31122 ppid:27762 task_flags:0x400140 flags:0x00080002 [ 810.448580][ T31] Call Trace: [ 810.451842][ T31] [ 810.454759][ T31] __schedule+0x149b/0x4fd0 [ 810.459390][ T31] ? __pfx___schedule+0x10/0x10 [ 810.464237][ T31] ? schedule+0x91/0x360 [ 810.469075][ T31] schedule+0x165/0x360 [ 810.473263][ T31] schedule_preempt_disabled+0x13/0x30 [ 810.478827][ T31] __mutex_lock+0x7e6/0x1350 [ 810.483425][ T31] ? __mutex_lock+0x5bb/0x1350 [ 810.488258][ T31] ? genl_rcv_msg+0x10d/0x790 [ 810.492938][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 810.497997][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 810.502915][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 810.508330][ T31] ? radix_tree_lookup+0x240/0x290 [ 810.513429][ T31] genl_rcv_msg+0x10d/0x790 [ 810.518002][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 810.523033][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 810.528040][ T31] netlink_rcv_skb+0x208/0x470 [ 810.532822][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 810.537907][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 810.543175][ T31] ? genl_rcv+0x19/0x40 [ 810.547385][ T31] ? down_read+0x274/0x2e0 [ 810.551807][ T31] ? genl_rcv+0xd/0x40 [ 810.555896][ T31] genl_rcv+0x28/0x40 [ 810.560012][ T31] netlink_unicast+0x82f/0x9e0 [ 810.564788][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 810.570121][ T31] ? __alloc_skb+0x198/0x3a0 [ 810.575108][ T31] ? netlink_sendmsg+0x642/0xb30 [ 810.580107][ T31] ? skb_put+0x11b/0x210 [ 810.584345][ T31] netlink_sendmsg+0x805/0xb30 [ 810.589294][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.594600][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 810.599635][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 810.604930][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.610256][ T31] __sock_sendmsg+0x21c/0x270 [ 810.614927][ T31] __sys_sendto+0x3bd/0x520 [ 810.619468][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 810.624491][ T31] ? exc_page_fault+0x71/0xd0 [ 810.629200][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 810.634471][ T31] __x64_sys_sendto+0xde/0x100 [ 810.639272][ T31] do_syscall_64+0xec/0xf80 [ 810.643764][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.649899][ T31] ? trace_irq_disable+0x37/0x100 [ 810.654933][ T31] ? clear_bhb_loop+0x60/0xb0 [ 810.659644][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.665532][ T31] RIP: 0033:0x7fc12b5915dc [ 810.670231][ T31] RSP: 002b:00007fc12c385ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 810.679060][ T31] RAX: ffffffffffffffda RBX: 00007fc12c385fc0 RCX: 00007fc12b5915dc [ 810.687101][ T31] RDX: 0000000000000024 RSI: 00007fc12c386010 RDI: 0000000000000004 [ 810.695077][ T31] RBP: 0000000000000000 R08: 00007fc12c385f14 R09: 000000000000000c [ 810.703092][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 810.711266][ T31] R13: 00007fc12c385f68 R14: 00007fc12c386010 R15: 0000000000000000 [ 810.719278][ T31] [ 810.722297][ T31] INFO: task syz.2.6917:31136 blocked for more than 144 seconds. [ 810.730066][ T31] Not tainted syzkaller #0 [ 810.735018][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 810.743783][ T31] task:syz.2.6917 state:D stack:28560 pid:31136 tgid:31122 ppid:27762 task_flags:0x400040 flags:0x00080002 [ 810.755864][ T31] Call Trace: [ 810.759194][ T31] [ 810.762117][ T31] __schedule+0x149b/0x4fd0 [ 810.766691][ T31] ? __pfx___schedule+0x10/0x10 [ 810.771562][ T31] ? schedule+0x91/0x360 [ 810.776398][ T31] schedule+0x165/0x360 [ 810.780672][ T31] schedule_preempt_disabled+0x13/0x30 [ 810.786117][ T31] __mutex_lock+0x7e6/0x1350 [ 810.790785][ T31] ? __mutex_lock+0x5bb/0x1350 [ 810.795595][ T31] ? genl_rcv_msg+0x10d/0x790 [ 810.800324][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 810.805334][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 810.810328][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 810.815710][ T31] ? radix_tree_lookup+0x240/0x290 [ 810.820875][ T31] genl_rcv_msg+0x10d/0x790 [ 810.825374][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 810.830553][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 810.835505][ T31] netlink_rcv_skb+0x208/0x470 [ 810.840329][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 810.845339][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 810.850653][ T31] ? genl_rcv+0x19/0x40 [ 810.854809][ T31] ? down_read+0x274/0x2e0 [ 810.859256][ T31] ? genl_rcv+0xd/0x40 [ 810.863313][ T31] genl_rcv+0x28/0x40 [ 810.867333][ T31] netlink_unicast+0x82f/0x9e0 [ 810.872107][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 810.877437][ T31] ? __alloc_skb+0x198/0x3a0 [ 810.882370][ T31] ? netlink_sendmsg+0x642/0xb30 [ 810.887351][ T31] ? skb_put+0x11b/0x210 [ 810.891582][ T31] netlink_sendmsg+0x805/0xb30 [ 810.896333][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.901678][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 810.910169][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 810.915461][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.920789][ T31] __sock_sendmsg+0x21c/0x270 [ 810.925554][ T31] __sys_sendto+0x3bd/0x520 [ 810.930155][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 810.935197][ T31] ? exc_page_fault+0x71/0xd0 [ 810.939904][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 810.945178][ T31] __x64_sys_sendto+0xde/0x100 [ 810.949973][ T31] do_syscall_64+0xec/0xf80 [ 810.954518][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.960680][ T31] ? trace_irq_disable+0x37/0x100 [ 810.965723][ T31] ? clear_bhb_loop+0x60/0xb0 [ 810.970438][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.976318][ T31] RIP: 0033:0x7fc12b5915dc [ 810.981421][ T31] RSP: 002b:00007fc12c364ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 810.990443][ T31] RAX: ffffffffffffffda RBX: 00007fc12c364fc0 RCX: 00007fc12b5915dc [ 810.998557][ T31] RDX: 000000000000001c RSI: 00007fc12c365010 RDI: 0000000000000004 [ 811.006596][ T31] RBP: 0000000000000000 R08: 00007fc12c364f14 R09: 000000000000000c [ 811.014705][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 811.022728][ T31] R13: 00007fc12c364f68 R14: 00007fc12c365010 R15: 0000000000000000 [ 811.031094][ T31] [ 811.034116][ T31] INFO: task syz.2.6917:31139 blocked for more than 144 seconds. [ 811.045595][ T31] Not tainted syzkaller #0 [ 811.050585][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 811.059440][ T31] task:syz.2.6917 state:D stack:28272 pid:31139 tgid:31122 ppid:27762 task_flags:0x400140 flags:0x00080002 [ 811.071907][ T31] Call Trace: [ 811.075196][ T31] [ 811.078205][ T31] __schedule+0x149b/0x4fd0 [ 811.086659][ T31] ? __pfx___schedule+0x10/0x10 [ 811.091549][ T31] ? schedule+0x91/0x360 [ 811.095783][ T31] schedule+0x165/0x360 [ 811.100177][ T31] schedule_preempt_disabled+0x13/0x30 [ 811.105622][ T31] __mutex_lock+0x7e6/0x1350 [ 811.110264][ T31] ? __mutex_lock+0x5bb/0x1350 [ 811.115028][ T31] ? genl_rcv_msg+0x10d/0x790 [ 811.119742][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 811.124770][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 811.129743][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 811.135111][ T31] ? radix_tree_lookup+0x240/0x290 [ 811.140260][ T31] genl_rcv_msg+0x10d/0x790 [ 811.144763][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 811.149812][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 811.154741][ T31] netlink_rcv_skb+0x208/0x470 [ 811.159549][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 811.164557][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 811.169875][ T31] ? genl_rcv+0x19/0x40 [ 811.174039][ T31] ? down_read+0x274/0x2e0 [ 811.178498][ T31] ? genl_rcv+0xd/0x40 [ 811.182646][ T31] genl_rcv+0x28/0x40 [ 811.187359][ T31] netlink_unicast+0x82f/0x9e0 [ 811.192153][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 811.197488][ T31] ? __alloc_skb+0x198/0x3a0 [ 811.202068][ T31] ? netlink_sendmsg+0x642/0xb30 [ 811.207055][ T31] ? skb_put+0x11b/0x210 [ 811.211303][ T31] netlink_sendmsg+0x805/0xb30 [ 811.216056][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 811.221394][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 811.226325][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 811.232192][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 811.237736][ T31] __sock_sendmsg+0x21c/0x270 [ 811.242430][ T31] __sys_sendto+0x3bd/0x520 [ 811.246968][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 811.252000][ T31] ? exc_page_fault+0x71/0xd0 [ 811.256776][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 811.262067][ T31] __x64_sys_sendto+0xde/0x100 [ 811.266868][ T31] do_syscall_64+0xec/0xf80 [ 811.271354][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.277454][ T31] ? trace_irq_disable+0x37/0x100 [ 811.282624][ T31] ? clear_bhb_loop+0x60/0xb0 [ 811.288001][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.293912][ T31] RIP: 0033:0x7fc12b5915dc [ 811.298378][ T31] RSP: 002b:00007fc12c343ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 811.306843][ T31] RAX: ffffffffffffffda RBX: 00007fc12c343fc0 RCX: 00007fc12b5915dc [ 811.314825][ T31] RDX: 0000000000000024 RSI: 00007fc12c344010 RDI: 0000000000000004 [ 811.322909][ T31] RBP: 0000000000000000 R08: 00007fc12c343f14 R09: 000000000000000c [ 811.330947][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 811.338952][ T31] R13: 00007fc12c343f68 R14: 00007fc12c344010 R15: 0000000000000000 [ 811.346963][ T31] [ 811.349991][ T31] INFO: task syz.0.6919:31135 blocked for more than 144 seconds. [ 811.359139][ T31] Not tainted syzkaller #0 [ 811.364068][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 811.372799][ T31] task:syz.0.6919 state:D stack:28120 pid:31135 tgid:31129 ppid:28371 task_flags:0x400140 flags:0x00080002 [ 811.384838][ T31] Call Trace: [ 811.388207][ T31] [ 811.391752][ T31] __schedule+0x149b/0x4fd0 [ 811.396295][ T31] ? __pfx___schedule+0x10/0x10 [ 811.401255][ T31] ? schedule+0x91/0x360 [ 811.405515][ T31] schedule+0x165/0x360 [ 811.409686][ T31] schedule_preempt_disabled+0x13/0x30 [ 811.415601][ T31] __mutex_lock+0x7e6/0x1350 [ 811.420259][ T31] ? __mutex_lock+0x5bb/0x1350 [ 811.425011][ T31] ? genl_rcv_msg+0x10d/0x790 [ 811.429705][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 811.434745][ T31] ? radix_tree_lookup+0x240/0x290 [ 811.439922][ T31] genl_rcv_msg+0x10d/0x790 [ 811.444454][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 811.449559][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 811.454486][ T31] ? __asan_memcpy+0x40/0x70 [ 811.459100][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 811.464459][ T31] netlink_rcv_skb+0x208/0x470 [ 811.469338][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 811.474352][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 811.479702][ T31] ? genl_rcv+0x19/0x40 [ 811.483880][ T31] ? down_read+0x274/0x2e0 [ 811.488322][ T31] ? genl_rcv+0xd/0x40 [ 811.492988][ T31] genl_rcv+0x28/0x40 [ 811.497050][ T31] netlink_unicast+0x82f/0x9e0 [ 811.501807][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 811.507114][ T31] ? __alloc_skb+0x198/0x3a0 [ 811.511685][ T31] ? netlink_sendmsg+0x642/0xb30 [ 811.516668][ T31] ? skb_put+0x11b/0x210 [ 811.520899][ T31] netlink_sendmsg+0x805/0xb30 [ 811.525647][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 811.530960][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 811.535882][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 811.541196][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 811.546465][ T31] __sock_sendmsg+0x21c/0x270 [ 811.551181][ T31] __sys_sendto+0x3bd/0x520 [ 811.555671][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 811.560745][ T31] ? exc_page_fault+0x71/0xd0 [ 811.565415][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 811.570744][ T31] __x64_sys_sendto+0xde/0x100 [ 811.575518][ T31] do_syscall_64+0xec/0xf80 [ 811.580052][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.586098][ T31] ? trace_irq_disable+0x37/0x100 [ 811.591174][ T31] ? clear_bhb_loop+0x60/0xb0 [ 811.596462][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.602948][ T31] RIP: 0033:0x7f8802f915dc [ 811.607398][ T31] RSP: 002b:00007f8803df8ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 811.615814][ T31] RAX: ffffffffffffffda RBX: 00007f8803df8fc0 RCX: 00007f8802f915dc [ 811.623845][ T31] RDX: 0000000000000020 RSI: 00007f8803df9010 RDI: 0000000000000007 [ 811.631857][ T31] RBP: 0000000000000000 R08: 00007f8803df8f14 R09: 000000000000000c [ 811.639864][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 811.647985][ T31] R13: 00007f8803df8f68 R14: 00007f8803df9010 R15: 0000000000000000 [ 811.656039][ T31] [ 811.659123][ T31] INFO: task syz.0.6919:31138 blocked for more than 145 seconds. [ 811.667000][ T31] Not tainted syzkaller #0 [ 811.671934][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 811.680645][ T31] task:syz.0.6919 state:D stack:26904 pid:31138 tgid:31129 ppid:28371 task_flags:0x400040 flags:0x00080002 [ 811.692592][ T31] Call Trace: [ 811.695852][ T31] [ 811.699278][ T31] __schedule+0x149b/0x4fd0 [ 811.703807][ T31] ? __pfx___schedule+0x10/0x10 [ 811.708879][ T31] ? schedule+0x91/0x360 [ 811.713154][ T31] schedule+0x165/0x360 [ 811.717416][ T31] schedule_preempt_disabled+0x13/0x30 [ 811.722901][ T31] __mutex_lock+0x7e6/0x1350 [ 811.727545][ T31] ? __mutex_lock+0x5bb/0x1350 [ 811.732300][ T31] ? genl_rcv_msg+0x10d/0x790 [ 811.737010][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 811.742027][ T31] ? radix_tree_lookup+0x240/0x290 [ 811.747167][ T31] genl_rcv_msg+0x10d/0x790 [ 811.751655][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 811.756713][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 811.761642][ T31] ? __asan_memcpy+0x40/0x70 [ 811.766209][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 811.771606][ T31] netlink_rcv_skb+0x208/0x470 [ 811.776360][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 811.781419][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 811.786766][ T31] ? genl_rcv+0x19/0x40 [ 811.790942][ T31] ? down_read+0x274/0x2e0 [ 811.795344][ T31] ? genl_rcv+0xd/0x40 [ 811.800088][ T31] genl_rcv+0x28/0x40 [ 811.804092][ T31] netlink_unicast+0x82f/0x9e0 [ 811.808895][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 811.814183][ T31] ? __alloc_skb+0x198/0x3a0 [ 811.818850][ T31] ? netlink_sendmsg+0x642/0xb30 [ 811.823794][ T31] ? skb_put+0x11b/0x210 [ 811.828099][ T31] netlink_sendmsg+0x805/0xb30 [ 811.832864][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 811.838245][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 811.843201][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 811.848550][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 811.853836][ T31] __sock_sendmsg+0x21c/0x270 [ 811.858546][ T31] ____sys_sendmsg+0x505/0x820 [ 811.863296][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 811.868967][ T31] ? import_iovec+0x74/0xa0 [ 811.873491][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 811.878235][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 811.883447][ T31] ? futex_wait+0x285/0x360 [ 811.888005][ T31] ? __fget_files+0x2a/0x420 [ 811.892591][ T31] ? __fget_files+0x3a0/0x420 [ 811.897303][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 811.902808][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 811.908363][ T31] do_syscall_64+0xec/0xf80 [ 811.912856][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.918982][ T31] ? trace_irq_disable+0x37/0x100 [ 811.923990][ T31] ? clear_bhb_loop+0x60/0xb0 [ 811.928688][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.934572][ T31] RIP: 0033:0x7f8802f8f749 [ 811.939071][ T31] RSP: 002b:00007f8803dd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 811.950195][ T31] RAX: ffffffffffffffda RBX: 00007f88031e6180 RCX: 00007f8802f8f749 [ 811.958211][ T31] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000009 [ 811.966170][ T31] RBP: 00007f8803013f91 R08: 0000000000000000 R09: 0000000000000000 [ 811.974221][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 811.982256][ T31] R13: 00007f88031e6218 R14: 00007f88031e6180 R15: 00007fff90df58c8 [ 811.990274][ T31] [ 811.993299][ T31] INFO: task syz.3.6922:31141 blocked for more than 145 seconds. [ 812.001773][ T31] Not tainted syzkaller #0 [ 812.007083][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 812.015765][ T31] task:syz.3.6922 state:D stack:27720 pid:31141 tgid:31140 ppid:28837 task_flags:0x400140 flags:0x00080002 [ 812.028046][ T31] Call Trace: [ 812.031326][ T31] [ 812.034250][ T31] __schedule+0x149b/0x4fd0 [ 812.038883][ T31] ? __pfx___schedule+0x10/0x10 [ 812.043768][ T31] ? schedule+0x91/0x360 [ 812.048192][ T31] schedule+0x165/0x360 [ 812.052373][ T31] schedule_preempt_disabled+0x13/0x30 [ 812.057844][ T31] __mutex_lock+0x7e6/0x1350 [ 812.062718][ T31] ? __mutex_lock+0x5bb/0x1350 [ 812.067546][ T31] ? genl_rcv_msg+0x10d/0x790 [ 812.072229][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 812.077389][ T31] ? radix_tree_lookup+0x240/0x290 [ 812.082494][ T31] genl_rcv_msg+0x10d/0x790 [ 812.087029][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 812.092037][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 812.097002][ T31] ? __asan_memcpy+0x40/0x70 [ 812.101594][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 812.107742][ T31] netlink_rcv_skb+0x208/0x470 [ 812.112539][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 812.117606][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 812.122900][ T31] ? genl_rcv+0x19/0x40 [ 812.127162][ T31] ? down_read+0x274/0x2e0 [ 812.131584][ T31] ? genl_rcv+0xd/0x40 [ 812.135641][ T31] genl_rcv+0x28/0x40 [ 812.139672][ T31] netlink_unicast+0x82f/0x9e0 [ 812.144428][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 812.149760][ T31] ? __alloc_skb+0x198/0x3a0 [ 812.154334][ T31] ? netlink_sendmsg+0x642/0xb30 [ 812.159306][ T31] ? skb_put+0x11b/0x210 [ 812.163538][ T31] netlink_sendmsg+0x805/0xb30 [ 812.168346][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.173617][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 812.178564][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 812.183917][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.189233][ T31] __sock_sendmsg+0x21c/0x270 [ 812.193900][ T31] __sys_sendto+0x3bd/0x520 [ 812.198459][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 812.203500][ T31] ? exc_page_fault+0x71/0xd0 [ 812.208225][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 812.213885][ T31] __x64_sys_sendto+0xde/0x100 [ 812.218696][ T31] do_syscall_64+0xec/0xf80 [ 812.223183][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.229279][ T31] ? trace_irq_disable+0x37/0x100 [ 812.234291][ T31] ? clear_bhb_loop+0x60/0xb0 [ 812.238991][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.244865][ T31] RIP: 0033:0x7fd323f915dc [ 812.249355][ T31] RSP: 002b:00007fd324d49ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 812.257835][ T31] RAX: ffffffffffffffda RBX: 00007fd324d49fc0 RCX: 00007fd323f915dc [ 812.265812][ T31] RDX: 0000000000000020 RSI: 00007fd324d4a010 RDI: 0000000000000006 [ 812.275558][ T31] RBP: 0000000000000000 R08: 00007fd324d49f14 R09: 000000000000000c [ 812.283587][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 812.291593][ T31] R13: 00007fd324d49f68 R14: 00007fd324d4a010 R15: 0000000000000000 [ 812.299607][ T31] [ 812.302718][ T31] INFO: task syz.3.6922:31159 blocked for more than 145 seconds. [ 812.310477][ T31] Not tainted syzkaller #0 [ 812.315821][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 812.324529][ T31] task:syz.3.6922 state:D stack:26936 pid:31159 tgid:31140 ppid:28837 task_flags:0x400140 flags:0x00080002 [ 812.336475][ T31] Call Trace: [ 812.339804][ T31] [ 812.342725][ T31] __schedule+0x149b/0x4fd0 [ 812.347291][ T31] ? __pfx___schedule+0x10/0x10 [ 812.352141][ T31] ? schedule+0x91/0x360 [ 812.356366][ T31] schedule+0x165/0x360 [ 812.360549][ T31] schedule_preempt_disabled+0x13/0x30 [ 812.365995][ T31] __mutex_lock+0x7e6/0x1350 [ 812.370611][ T31] ? __mutex_lock+0x5bb/0x1350 [ 812.375363][ T31] ? genl_rcv_msg+0x10d/0x790 [ 812.380086][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 812.385136][ T31] ? radix_tree_lookup+0x240/0x290 [ 812.390335][ T31] genl_rcv_msg+0x10d/0x790 [ 812.394843][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 812.399993][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 812.404919][ T31] ? __asan_memcpy+0x40/0x70 [ 812.409536][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 812.415493][ T31] netlink_rcv_skb+0x208/0x470 [ 812.420325][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 812.425333][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 812.430656][ T31] ? genl_rcv+0x19/0x40 [ 812.434812][ T31] ? down_read+0x274/0x2e0 [ 812.439328][ T31] ? genl_rcv+0xd/0x40 [ 812.443419][ T31] genl_rcv+0x28/0x40 [ 812.447448][ T31] netlink_unicast+0x82f/0x9e0 [ 812.452208][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 812.457512][ T31] ? __alloc_skb+0x198/0x3a0 [ 812.462097][ T31] ? netlink_sendmsg+0x642/0xb30 [ 812.467117][ T31] ? skb_put+0x11b/0x210 [ 812.471363][ T31] netlink_sendmsg+0x805/0xb30 [ 812.476118][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.481441][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 812.486366][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 812.491679][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.497000][ T31] __sock_sendmsg+0x21c/0x270 [ 812.501687][ T31] __sys_sendto+0x3bd/0x520 [ 812.506172][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 812.511323][ T31] ? fd_install+0x95/0x3d0 [ 812.515827][ T31] ? fd_install+0x307/0x3d0 [ 812.521875][ T31] __x64_sys_sendto+0xde/0x100 [ 812.526743][ T31] do_syscall_64+0xec/0xf80 [ 812.531248][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.537403][ T31] ? trace_irq_disable+0x37/0x100 [ 812.542410][ T31] ? clear_bhb_loop+0x60/0xb0 [ 812.547116][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.552992][ T31] RIP: 0033:0x7fd323f915dc [ 812.557424][ T31] RSP: 002b:00007fd321db0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 812.565813][ T31] RAX: ffffffffffffffda RBX: 00007fd321db0fc0 RCX: 00007fd323f915dc [ 812.573816][ T31] RDX: 000000000000001c RSI: 00007fd321db1010 RDI: 0000000000000010 [ 812.581821][ T31] RBP: 0000000000000000 R08: 00007fd321db0f14 R09: 000000000000000c [ 812.589834][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000010 [ 812.597823][ T31] R13: 00007fd321db0f68 R14: 00007fd321db1010 R15: 0000000000000000 [ 812.605809][ T31] [ 812.608881][ T31] INFO: task syz.1.6923:31146 blocked for more than 146 seconds. [ 812.616861][ T31] Not tainted syzkaller #0 [ 812.622142][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 812.630856][ T31] task:syz.1.6923 state:D stack:28352 pid:31146 tgid:31145 ppid:27401 task_flags:0x400040 flags:0x00080002 [ 812.642918][ T31] Call Trace: [ 812.646181][ T31] [ 812.649430][ T31] __schedule+0x149b/0x4fd0 [ 812.653989][ T31] ? __pfx___schedule+0x10/0x10 [ 812.659092][ T31] ? schedule+0x91/0x360 [ 812.663362][ T31] schedule+0x165/0x360 [ 812.668125][ T31] schedule_preempt_disabled+0x13/0x30 [ 812.673594][ T31] __mutex_lock+0x7e6/0x1350 [ 812.678231][ T31] ? __mutex_lock+0x5bb/0x1350 [ 812.682991][ T31] ? genl_rcv_msg+0x10d/0x790 [ 812.688249][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 812.693285][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 812.698279][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 812.703642][ T31] ? radix_tree_lookup+0x240/0x290 [ 812.708810][ T31] genl_rcv_msg+0x10d/0x790 [ 812.713319][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 812.718396][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 812.724719][ T31] netlink_rcv_skb+0x208/0x470 [ 812.729575][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 812.734598][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 812.739986][ T31] ? genl_rcv+0x19/0x40 [ 812.744155][ T31] ? down_read+0x274/0x2e0 [ 812.748726][ T31] ? genl_rcv+0xd/0x40 [ 812.752798][ T31] genl_rcv+0x28/0x40 [ 812.756878][ T31] netlink_unicast+0x82f/0x9e0 [ 812.761662][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 812.767039][ T31] ? __alloc_skb+0x198/0x3a0 [ 812.771779][ T31] ? netlink_sendmsg+0x642/0xb30 [ 812.776855][ T31] ? skb_put+0x11b/0x210 [ 812.781105][ T31] netlink_sendmsg+0x805/0xb30 [ 812.785871][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.791234][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 812.796170][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 812.801753][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.807099][ T31] __sock_sendmsg+0x21c/0x270 [ 812.811787][ T31] __sys_sendto+0x3bd/0x520 [ 812.816275][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 812.821337][ T31] ? exc_page_fault+0x71/0xd0 [ 812.826388][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 812.831721][ T31] __x64_sys_sendto+0xde/0x100 [ 812.836482][ T31] do_syscall_64+0xec/0xf80 [ 812.841040][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.847189][ T31] ? trace_irq_disable+0x37/0x100 [ 812.852237][ T31] ? clear_bhb_loop+0x60/0xb0 [ 812.856950][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.862827][ T31] RIP: 0033:0x7f25367915dc [ 812.867283][ T31] RSP: 002b:00007f2537564ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 812.875685][ T31] RAX: ffffffffffffffda RBX: 00007f2537564fc0 RCX: 00007f25367915dc [ 812.883692][ T31] RDX: 0000000000000020 RSI: 00007f2537565010 RDI: 0000000000000004 [ 812.891677][ T31] RBP: 0000000000000000 R08: 00007f2537564f14 R09: 000000000000000c [ 812.899743][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 812.907900][ T31] R13: 00007f2537564f68 R14: 00007f2537565010 R15: 0000000000000000 [ 812.915877][ T31] [ 812.919003][ T31] INFO: task syz.4.6925:31158 blocked for more than 146 seconds. [ 812.927526][ T31] Not tainted syzkaller #0 [ 812.932476][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 812.941188][ T31] task:syz.4.6925 state:D stack:28664 pid:31158 tgid:31157 ppid:26954 task_flags:0x400040 flags:0x00080002 [ 812.953135][ T31] Call Trace: [ 812.956404][ T31] [ 812.959403][ T31] __schedule+0x149b/0x4fd0 [ 812.963935][ T31] ? __pfx___schedule+0x10/0x10 [ 812.968889][ T31] ? schedule+0x91/0x360 [ 812.973163][ T31] schedule+0x165/0x360 [ 812.977364][ T31] schedule_preempt_disabled+0x13/0x30 [ 812.982812][ T31] __mutex_lock+0x7e6/0x1350 [ 812.990311][ T31] ? __mutex_lock+0x5bb/0x1350 [ 812.995082][ T31] ? genl_rcv_msg+0x10d/0x790 [ 812.999824][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 813.004840][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 813.009825][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 813.015185][ T31] ? radix_tree_lookup+0x240/0x290 [ 813.020388][ T31] genl_rcv_msg+0x10d/0x790 [ 813.024882][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 813.030463][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 813.035404][ T31] netlink_rcv_skb+0x208/0x470 [ 813.040259][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 813.045297][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 813.050694][ T31] ? genl_rcv+0x19/0x40 [ 813.055015][ T31] ? down_read+0x274/0x2e0 [ 813.059633][ T31] ? genl_rcv+0xd/0x40 [ 813.063927][ T31] genl_rcv+0x28/0x40 [ 813.068262][ T31] netlink_unicast+0x82f/0x9e0 [ 813.073071][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 813.078428][ T31] ? __alloc_skb+0x198/0x3a0 [ 813.083031][ T31] ? netlink_sendmsg+0x642/0xb30 [ 813.088049][ T31] ? skb_put+0x11b/0x210 [ 813.092409][ T31] netlink_sendmsg+0x805/0xb30 [ 813.097325][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 813.102626][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 813.107635][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 813.112918][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 813.118245][ T31] __sock_sendmsg+0x21c/0x270 [ 813.122915][ T31] __sys_sendto+0x3bd/0x520 [ 813.127451][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 813.132978][ T31] ? exc_page_fault+0x71/0xd0 [ 813.137712][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 813.143074][ T31] __x64_sys_sendto+0xde/0x100 [ 813.148366][ T31] do_syscall_64+0xec/0xf80 [ 813.152890][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.159019][ T31] ? trace_irq_disable+0x37/0x100 [ 813.164053][ T31] ? clear_bhb_loop+0x60/0xb0 [ 813.168844][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.174745][ T31] RIP: 0033:0x7f94843915dc [ 813.179243][ T31] RSP: 002b:00007f94825f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 813.187724][ T31] RAX: ffffffffffffffda RBX: 00007f94825f4fc0 RCX: 00007f94843915dc [ 813.195795][ T31] RDX: 0000000000000020 RSI: 00007f94825f5010 RDI: 0000000000000003 [ 813.203805][ T31] RBP: 0000000000000000 R08: 00007f94825f4f14 R09: 000000000000000c [ 813.211803][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 813.219795][ T31] R13: 00007f94825f4f68 R14: 00007f94825f5010 R15: 0000000000000000 [ 813.228016][ T31] [ 813.231033][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 813.240432][ T31] INFO: task syz.4.6925:31162 blocked for more than 146 seconds. [ 813.248266][ T31] Not tainted syzkaller #0 [ 813.253185][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 813.261862][ T31] task:syz.4.6925 state:D stack:27912 pid:31162 tgid:31157 ppid:26954 task_flags:0x400040 flags:0x00080002 [ 813.273817][ T31] Call Trace: [ 813.277123][ T31] [ 813.280041][ T31] __schedule+0x149b/0x4fd0 [ 813.284547][ T31] ? __pfx___schedule+0x10/0x10 [ 813.289445][ T31] ? schedule+0x91/0x360 [ 813.293678][ T31] schedule+0x165/0x360 [ 813.297850][ T31] schedule_preempt_disabled+0x13/0x30 [ 813.303287][ T31] __mutex_lock+0x7e6/0x1350 [ 813.308556][ T31] ? __mutex_lock+0x5bb/0x1350 [ 813.313347][ T31] ? genl_rcv_msg+0x10d/0x790 [ 813.318083][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 813.323115][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 813.328093][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 813.333451][ T31] ? radix_tree_lookup+0x240/0x290 [ 813.338948][ T31] genl_rcv_msg+0x10d/0x790 [ 813.343443][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 813.348495][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 813.353662][ T31] netlink_rcv_skb+0x208/0x470 [ 813.358478][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 813.363493][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 813.368819][ T31] ? genl_rcv+0x19/0x40 [ 813.372975][ T31] ? down_read+0x274/0x2e0 [ 813.377496][ T31] ? genl_rcv+0xd/0x40 [ 813.381594][ T31] genl_rcv+0x28/0x40 [ 813.385576][ T31] netlink_unicast+0x82f/0x9e0 [ 813.390388][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 813.395672][ T31] ? __alloc_skb+0x198/0x3a0 [ 813.400303][ T31] ? netlink_sendmsg+0x642/0xb30 [ 813.405230][ T31] ? skb_put+0x11b/0x210 [ 813.409513][ T31] netlink_sendmsg+0x805/0xb30 [ 813.414272][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 813.419586][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 813.424511][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 813.429849][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 813.435154][ T31] __sock_sendmsg+0x21c/0x270 [ 813.440532][ T31] __sys_sendto+0x3bd/0x520 [ 813.445063][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 813.450143][ T31] ? fd_install+0x95/0x3d0 [ 813.454545][ T31] ? fd_install+0x307/0x3d0 [ 813.459068][ T31] __x64_sys_sendto+0xde/0x100 [ 813.463818][ T31] do_syscall_64+0xec/0xf80 [ 813.468369][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.474426][ T31] ? trace_irq_disable+0x37/0x100 [ 813.479598][ T31] ? clear_bhb_loop+0x60/0xb0 [ 813.484283][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.490216][ T31] RIP: 0033:0x7f94843915dc [ 813.494612][ T31] RSP: 002b:00007f94825b2ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 813.503077][ T31] RAX: ffffffffffffffda RBX: 00007f94825b2fc0 RCX: 00007f94843915dc [ 813.511094][ T31] RDX: 0000000000000020 RSI: 00007f94825b3010 RDI: 0000000000000004 [ 813.519197][ T31] RBP: 0000000000000000 R08: 00007f94825b2f14 R09: 000000000000000c [ 813.527197][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 813.535451][ T31] R13: 00007f94825b2f68 R14: 00007f94825b3010 R15: 0000000000000000 [ 813.543850][ T31] [ 813.547748][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 813.556951][ T31] INFO: task syz-executor:31168 blocked for more than 146 seconds. [ 813.564855][ T31] Not tainted syzkaller #0 [ 813.569863][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 813.578691][ T31] task:syz-executor state:D stack:22392 pid:31168 tgid:31168 ppid:1 task_flags:0x400140 flags:0x00080002 [ 813.590881][ T31] Call Trace: [ 813.594166][ T31] [ 813.597141][ T31] __schedule+0x149b/0x4fd0 [ 813.601669][ T31] ? __pfx___schedule+0x10/0x10 [ 813.606608][ T31] ? schedule+0x91/0x360 [ 813.610864][ T31] schedule+0x165/0x360 [ 813.615016][ T31] schedule_preempt_disabled+0x13/0x30 [ 813.620537][ T31] __mutex_lock+0x7e6/0x1350 [ 813.625121][ T31] ? __mutex_lock+0x5bb/0x1350 [ 813.629970][ T31] ? genl_rcv_msg+0x10d/0x790 [ 813.634641][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 813.639693][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 813.644995][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 813.650499][ T31] ? radix_tree_lookup+0x240/0x290 [ 813.655602][ T31] genl_rcv_msg+0x10d/0x790 [ 813.660132][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 813.665137][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 813.670189][ T31] netlink_rcv_skb+0x208/0x470 [ 813.674945][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 813.680032][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 813.685308][ T31] ? genl_rcv+0x19/0x40 [ 813.689520][ T31] ? down_read+0x274/0x2e0 [ 813.693920][ T31] ? genl_rcv+0xd/0x40 [ 813.698023][ T31] genl_rcv+0x28/0x40 [ 813.701993][ T31] netlink_unicast+0x82f/0x9e0 [ 813.706988][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 813.712280][ T31] ? __alloc_skb+0x198/0x3a0 [ 813.716947][ T31] ? netlink_sendmsg+0x642/0xb30 [ 813.721886][ T31] ? skb_put+0x11b/0x210 [ 813.726116][ T31] netlink_sendmsg+0x805/0xb30 [ 813.730943][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 813.736235][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 813.741216][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 813.747163][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 813.752478][ T31] __sock_sendmsg+0x21c/0x270 [ 813.757194][ T31] __sys_sendto+0x3bd/0x520 [ 813.761953][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 813.767041][ T31] ? fd_install+0x95/0x3d0 [ 813.771452][ T31] ? fd_install+0x307/0x3d0 [ 813.775949][ T31] __x64_sys_sendto+0xde/0x100 [ 813.780975][ T31] do_syscall_64+0xec/0xf80 [ 813.785473][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.792341][ T31] ? clear_bhb_loop+0x60/0xb0 [ 813.797107][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.803004][ T31] RIP: 0033:0x7fb57a9915dc [ 813.807508][ T31] RSP: 002b:00007ffc309aa530 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 813.815916][ T31] RAX: ffffffffffffffda RBX: 00007fb57b714620 RCX: 00007fb57a9915dc [ 813.823948][ T31] RDX: 0000000000000020 RSI: 00007fb57b714670 RDI: 0000000000000005 [ 813.831966][ T31] RBP: 0000000000000000 R08: 00007ffc309aa584 R09: 000000000000000c [ 813.839975][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 813.848580][ T31] R13: 00007ffc309aa5d8 R14: 00007fb57b714670 R15: 0000000000000000 [ 813.856699][ T31] [ 813.859731][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 813.868956][ T31] INFO: task syz-executor:31170 blocked for more than 147 seconds. [ 813.877019][ T31] Not tainted syzkaller #0 [ 813.881962][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 813.890683][ T31] task:syz-executor state:D stack:22392 pid:31170 tgid:31170 ppid:1 task_flags:0x400140 flags:0x00080002 [ 813.902621][ T31] Call Trace: [ 813.905886][ T31] [ 813.908853][ T31] __schedule+0x149b/0x4fd0 [ 813.913364][ T31] ? __pfx___schedule+0x10/0x10 [ 813.918281][ T31] ? schedule+0x91/0x360 [ 813.922517][ T31] schedule+0x165/0x360 [ 813.926708][ T31] schedule_preempt_disabled+0x13/0x30 [ 813.932149][ T31] __mutex_lock+0x7e6/0x1350 [ 813.936783][ T31] ? __mutex_lock+0x5bb/0x1350 [ 813.941535][ T31] ? genl_rcv_msg+0x10d/0x790 [ 813.946192][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 813.951951][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 813.956970][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 813.962364][ T31] ? radix_tree_lookup+0x240/0x290 [ 813.967550][ T31] genl_rcv_msg+0x10d/0x790 [ 813.972061][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 813.977122][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 813.982052][ T31] netlink_rcv_skb+0x208/0x470 [ 813.986962][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 813.991988][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 813.997330][ T31] ? genl_rcv+0x19/0x40 [ 814.001506][ T31] ? down_read+0x274/0x2e0 [ 814.005904][ T31] ? genl_rcv+0xd/0x40 [ 814.010030][ T31] genl_rcv+0x28/0x40 [ 814.014001][ T31] netlink_unicast+0x82f/0x9e0 [ 814.018792][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 814.024059][ T31] ? __alloc_skb+0x198/0x3a0 [ 814.031343][ T31] ? netlink_sendmsg+0x642/0xb30 [ 814.036273][ T31] ? skb_put+0x11b/0x210 [ 814.040580][ T31] netlink_sendmsg+0x805/0xb30 [ 814.045402][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 814.050734][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 814.056036][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 814.061503][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 814.066827][ T31] __sock_sendmsg+0x21c/0x270 [ 814.071495][ T31] __sys_sendto+0x3bd/0x520 [ 814.075981][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 814.081087][ T31] ? fd_install+0x95/0x3d0 [ 814.085491][ T31] ? fd_install+0x307/0x3d0 [ 814.090040][ T31] __x64_sys_sendto+0xde/0x100 [ 814.094796][ T31] do_syscall_64+0xec/0xf80 [ 814.099354][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.105415][ T31] ? trace_irq_disable+0x37/0x100 [ 814.110778][ T31] ? clear_bhb_loop+0x60/0xb0 [ 814.115562][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.121600][ T31] RIP: 0033:0x7f6696d915dc [ 814.126034][ T31] RSP: 002b:00007ffcfdec6bd0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 814.134560][ T31] RAX: ffffffffffffffda RBX: 00007f6697b14620 RCX: 00007f6696d915dc [ 814.142632][ T31] RDX: 0000000000000020 RSI: 00007f6697b14670 RDI: 0000000000000005 [ 814.150681][ T31] RBP: 0000000000000000 R08: 00007ffcfdec6c24 R09: 000000000000000c [ 814.159065][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 814.167093][ T31] R13: 00007ffcfdec6c78 R14: 00007f6697b14670 R15: 0000000000000000 [ 814.175088][ T31] [ 814.178135][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 814.187272][ T31] INFO: task syz-executor:31173 blocked for more than 147 seconds. [ 814.195160][ T31] Not tainted syzkaller #0 [ 814.200149][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 814.208862][ T31] task:syz-executor state:D stack:22392 pid:31173 tgid:31173 ppid:1 task_flags:0x400140 flags:0x00080002 [ 814.220805][ T31] Call Trace: [ 814.224069][ T31] [ 814.227035][ T31] __schedule+0x149b/0x4fd0 [ 814.231559][ T31] ? __pfx___schedule+0x10/0x10 [ 814.236400][ T31] ? schedule+0x91/0x360 [ 814.240685][ T31] schedule+0x165/0x360 [ 814.244836][ T31] schedule_preempt_disabled+0x13/0x30 [ 814.250369][ T31] __mutex_lock+0x7e6/0x1350 [ 814.254966][ T31] ? __mutex_lock+0x5bb/0x1350 [ 814.260160][ T31] ? genl_rcv_msg+0x10d/0x790 [ 814.264832][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 814.269907][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 814.274832][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 814.280278][ T31] ? radix_tree_lookup+0x240/0x290 [ 814.285413][ T31] genl_rcv_msg+0x10d/0x790 [ 814.289958][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 814.294969][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 814.299951][ T31] netlink_rcv_skb+0x208/0x470 [ 814.304789][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 814.309841][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 814.315111][ T31] ? genl_rcv+0x19/0x40 [ 814.319300][ T31] ? down_read+0x274/0x2e0 [ 814.323702][ T31] ? genl_rcv+0xd/0x40 [ 814.327812][ T31] genl_rcv+0x28/0x40 [ 814.331876][ T31] netlink_unicast+0x82f/0x9e0 [ 814.336705][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 814.341976][ T31] ? __alloc_skb+0x198/0x3a0 [ 814.347114][ T31] ? netlink_sendmsg+0x642/0xb30 [ 814.352073][ T31] ? skb_put+0x11b/0x210 [ 814.356324][ T31] netlink_sendmsg+0x805/0xb30 [ 814.362777][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 814.368146][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 814.373079][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 814.378429][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 814.383725][ T31] __sock_sendmsg+0x21c/0x270 [ 814.388437][ T31] __sys_sendto+0x3bd/0x520 [ 814.392929][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 814.398047][ T31] ? fd_install+0x95/0x3d0 [ 814.402618][ T31] ? fd_install+0x307/0x3d0 [ 814.407147][ T31] __x64_sys_sendto+0xde/0x100 [ 814.411897][ T31] do_syscall_64+0xec/0xf80 [ 814.416381][ T31] ? rcu_is_watching+0x15/0xb0 [ 814.421177][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.427496][ T31] ? clear_bhb_loop+0x60/0xb0 [ 814.432164][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.438102][ T31] RIP: 0033:0x7fee08b915dc [ 814.442519][ T31] RSP: 002b:00007ffc0a4fe520 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 814.451069][ T31] RAX: ffffffffffffffda RBX: 00007fee09914620 RCX: 00007fee08b915dc [ 814.459064][ T31] RDX: 0000000000000020 RSI: 00007fee09914670 RDI: 0000000000000005 [ 814.467688][ T31] RBP: 0000000000000000 R08: 00007ffc0a4fe574 R09: 000000000000000c [ 814.475679][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 814.483709][ T31] R13: 00007ffc0a4fe5c8 R14: 00007fee09914670 R15: 0000000000000000 [ 814.491728][ T31] [ 814.494733][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 814.503840][ T31] [ 814.503840][ T31] Showing all locks held in the system: [ 814.511715][ T31] 1 lock held by khungtaskd/31: [ 814.516615][ T31] #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 814.526892][ T31] 2 locks held by getty/5594: [ 814.531581][ T31] #0: ffff88814dfcb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 814.541463][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 814.551723][ T31] 1 lock held by udevd/29781: [ 814.556379][ T31] #0: ffff8880246d1358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 814.566246][ T31] 6 locks held by syz.2.6917/31124: [ 814.571512][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 814.579735][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 814.588765][ T31] #2: ffff8880246cda78 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x375/0x1a50 [ 814.599334][ T31] #3: ffff88814232e610 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 814.608973][ T31] #4: ffff88814232dfb0 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x56/0xd0 [ 814.621125][ T31] #5: ffff88814232dfe8 (&q->q_usage_counter(queue)#35){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x56/0xd0 [ 814.633447][ T31] 2 locks held by syz.2.6917/31131: [ 814.638753][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 814.646992][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 814.656003][ T31] 2 locks held by syz.2.6917/31136: [ 814.661249][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 814.670194][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 814.679274][ T31] 2 locks held by syz.2.6917/31139: [ 814.684482][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 814.692713][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 814.701710][ T31] 2 locks held by syz.0.6919/31135: [ 814.706944][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 814.715161][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 814.724166][ T31] 2 locks held by syz.0.6919/31138: [ 814.729382][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 814.737609][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 814.746710][ T31] 2 locks held by syz.3.6922/31141: [ 814.751904][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 814.760320][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 814.769903][ T31] 2 locks held by syz.3.6922/31159: [ 814.775182][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 814.783446][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 814.792453][ T31] 2 locks held by syz.1.6923/31146: [ 814.797695][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 814.806074][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 814.815115][ T31] 2 locks held by syz.4.6925/31158: [ 814.820363][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 814.828792][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 814.837934][ T31] 2 locks held by syz.4.6925/31162: [ 814.843115][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 814.851342][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 814.860322][ T31] 2 locks held by syz-executor/31168: [ 814.865681][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 814.874320][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 814.883344][ T31] 2 locks held by syz-executor/31170: [ 814.888755][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 814.896957][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 814.905898][ T31] 2 locks held by syz-executor/31172: [ 814.911429][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 814.919673][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 814.928712][ T31] 2 locks held by syz-executor/31173: [ 814.934083][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 814.942366][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 814.951360][ T31] 2 locks held by syz-executor/31178: [ 814.956751][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 814.964915][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 814.974569][ T31] 2 locks held by syz-executor/31224: [ 814.979991][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 814.988305][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 814.997395][ T31] 2 locks held by syz-executor/31226: [ 815.002765][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 815.010993][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 815.019976][ T31] 2 locks held by syz-executor/31227: [ 815.025326][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 815.033562][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 815.042588][ T31] 2 locks held by syz-executor/31230: [ 815.048034][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 815.056428][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 815.065687][ T31] 2 locks held by syz-executor/31234: [ 815.076686][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 815.086597][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 815.095613][ T31] 2 locks held by syz-executor/31278: [ 815.101310][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 815.109577][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 815.118588][ T31] 2 locks held by syz-executor/31281: [ 815.123948][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 815.132200][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 815.141207][ T31] 2 locks held by syz-executor/31283: [ 815.146986][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 815.155213][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 815.164252][ T31] 2 locks held by syz-executor/31285: [ 815.169761][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 815.178078][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 815.187496][ T31] 2 locks held by syz-executor/31287: [ 815.192856][ T31] #0: ffffffff8f3799f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 815.201077][ T31] #1: ffffffff8f379808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 815.210186][ T31] [ 815.212595][ T31] ============================================= [ 815.212595][ T31] [ 815.221181][ T31] NMI backtrace for cpu 0 [ 815.221197][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 815.221210][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 815.221216][ T31] Call Trace: [ 815.221222][ T31] [ 815.221228][ T31] dump_stack_lvl+0xe8/0x150 [ 815.221247][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 815.221262][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 815.221280][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 815.221311][ T31] sys_info+0x135/0x170 [ 815.221323][ T31] watchdog+0xf95/0xfe0 [ 815.221340][ T31] ? watchdog+0x20a/0xfe0 [ 815.221357][ T31] kthread+0x711/0x8a0 [ 815.221372][ T31] ? __pfx_watchdog+0x10/0x10 [ 815.221386][ T31] ? __pfx_kthread+0x10/0x10 [ 815.221400][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 815.221416][ T31] ? __pfx_kthread+0x10/0x10 [ 815.221429][ T31] ret_from_fork+0x510/0xa50 [ 815.221440][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 815.221449][ T31] ? __switch_to+0xc9e/0x1480 [ 815.221465][ T31] ? __pfx_kthread+0x10/0x10 [ 815.221479][ T31] ret_from_fork_asm+0x1a/0x30 [ 815.221500][ T31] [ 815.221504][ T31] Sending NMI from CPU 0 to CPUs 1: [ 815.341136][ C1] NMI backtrace for cpu 1 [ 815.341153][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 815.341173][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 815.341184][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 815.341206][ C1] Code: 13 e3 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 c1 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 815.341222][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 000002c2 [ 815.341238][ C1] RAX: 0000000000382921 RBX: ffffffff819713ee RCX: 0000000080000001 [ 815.341251][ C1] RDX: 0000000000000001 RSI: ffffffff8d792037 RDI: ffffffff8bc083e0 [ 815.341264][ C1] RBP: ffffc90000197f10 R08: ffff8880b87336db R09: 1ffff110170e66db [ 815.341277][ C1] R10: dffffc0000000000 R11: ffffed10170e66dc R12: ffffffff8f822270 [ 815.341290][ C1] R13: 1ffff110038d6b70 R14: 0000000000000001 R15: 0000000000000001 [ 815.341302][ C1] FS: 0000000000000000(0000) GS:ffff888125f21000(0000) knlGS:0000000000000000 [ 815.341317][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 815.341329][ C1] CR2: 000055ac5ec66000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 815.341345][ C1] Call Trace: [ 815.341352][ C1] [ 815.341359][ C1] default_idle+0x13/0x20 [ 815.341378][ C1] default_idle_call+0x73/0xb0 [ 815.341399][ C1] do_idle+0x1be/0x4d0 [ 815.341418][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 815.341437][ C1] ? __pfx_do_idle+0x10/0x10 [ 815.341460][ C1] cpu_startup_entry+0x44/0x60 [ 815.341478][ C1] start_secondary+0x101/0x110 [ 815.341503][ C1] common_startup_64+0x13e/0x147 [ 815.341539][ C1] [ 815.508380][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 815.515220][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 815.524400][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 815.534441][ T31] Call Trace: [ 815.537706][ T31] [ 815.540623][ T31] vpanic+0x1e0/0x670 [ 815.544599][ T31] panic+0xb9/0xc0 [ 815.548312][ T31] ? __pfx_panic+0x10/0x10 [ 815.552710][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 815.558062][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 815.564204][ T31] watchdog+0xfdf/0xfe0 [ 815.568356][ T31] ? watchdog+0x20a/0xfe0 [ 815.572694][ T31] kthread+0x711/0x8a0 [ 815.576761][ T31] ? __pfx_watchdog+0x10/0x10 [ 815.581444][ T31] ? __pfx_kthread+0x10/0x10 [ 815.586033][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 815.591229][ T31] ? __pfx_kthread+0x10/0x10 [ 815.595822][ T31] ret_from_fork+0x510/0xa50 [ 815.600404][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 815.605508][ T31] ? __switch_to+0xc9e/0x1480 [ 815.610183][ T31] ? __pfx_kthread+0x10/0x10 [ 815.614766][ T31] ret_from_fork_asm+0x1a/0x30 [ 815.619540][ T31] [ 815.622893][ T31] Kernel Offset: disabled [ 815.627205][ T31] Rebooting in 86400 seconds..