last executing test programs: 20.955713438s ago: executing program 0 (id=3671): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@ifindex, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='rdma.current\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) readv(r3, &(0x7f0000000740)=[{&(0x7f0000000280)=""/155, 0x9b}], 0x1) sendfile(r4, r3, 0x0, 0xf03a0005) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000340)) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0x5}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000240), &(0x7f00000002c0)=r2}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x50) 17.879156789s ago: executing program 0 (id=3703): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000940), 0x10) close(0x3) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r9 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f0000000100)=r8, 0x4) openat$cgroup_ro(r8, &(0x7f0000000240)='blkio.bfq.idle_time\x00', 0x0, 0x0) r10 = openat$cgroup_ro(r7, &(0x7f0000000140)='memory.numa_stat\x00', 0x275a, 0x0) read$alg(r10, &(0x7f0000000040)=""/136, 0x88) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 17.58380301s ago: executing program 2 (id=3707): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, 0x0) shutdown(r0, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x7fffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req={0x6, 0x40, 0x2, 0x6}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) unshare(0x26020480) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa802, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af9cc9e5ef6bda9df2c3af36effff9af2551ce935b0f327cb3f011a2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7511d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10738d3c9f7a98eccb26f7e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe977076ce7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d1a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc084075ad10727522934a87a4ddcdb112754ca5bdec0ead14b6c0f19a4b126bbe0c2b8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcb1a47a87baf63e4edf11c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c158ae8f44bfbfa7c2730302b66a99f66705b71e6205e7cbf36435e1eabb9a63fcd604d5cc27e1317ad94cf438d7187a2fe4e06fa6cbf84ef1efa82cb2c4af6bd1370616cdbe2b98fd89b79824ba089df1f81e6fcef073059f5f1d6a221d791839d7826ed1759c2153532c393fd1bd7be2e7f5abf2f0800000000ea46c07adee10d0f2bc85cf37182256e4fd8f56942726efc07180eaa5421d697665c8bacd39cdb392e6153af80bc1a69e3bfab032e78c9a96eab13be845a0d44ef2a4ab414ac2e4802a3b5d3aa2a4a4fc259206d97d0cc1602d6b45ff414c53fc9f5f68438f0423e168a97923ca0464b40b2f797841fb2bb2e5ad9feff37220ab7c34f4c382c247e7735adb55c209f7c0f8880733dbd3f5a095cc6a2"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x44}, 0x10) r5 = socket(0x22, 0x6, 0x9) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0xfffe) preadv(r7, &(0x7f0000000100), 0x0, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000ff0100000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000b000000095"], &(0x7f0000000080)='GPL\x00', 0x7ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4000090}, 0x4008810) socket$inet6(0xa, 0x2, 0x0) 17.466044691s ago: executing program 2 (id=3710): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x4}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, r3, 0xda409aa40cc3acf1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044081}, 0x20008000) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000200)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x4c0, @empty=0xe0000001, {[@generic={0x83, 0x0, "1d09d3000470"}, @lsrr={0x83, 0x0, 0x90, [@rand_addr=0x64010102, @local]}, @timestamp_prespec={0x44, 0x0, 0xe1, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x12}, 0x5}, {@multicast1}, {@remote, 0x3ff}, {@loopback, 0x4}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x5}, {@local, 0x1}, {@loopback, 0x1}, {@remote, 0x3800000}]}, @ssrr={0x89, 0x0, 0xb, [@empty, @multicast2, @remote, @private=0xa010102]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r10 = socket$kcm(0x10, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}]}]}, 0x2c}}, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' @\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000004"], 0x24}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$kcm(r10, &(0x7f00000001c0)={0x0, 0x43, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x0) 17.358500058s ago: executing program 0 (id=3711): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x2, r2, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3}, 0x1c) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_ext={0x1c, 0x16, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffc}, @generic={0x2, 0x1, 0x0, 0x3, 0x81}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x563a, 0x28, &(0x7f0000000140)=""/40, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x4, 0x3, 0x0, 0x8000c11d}, 0x10, 0x1fa1d, 0xffffffffffffffff, 0x1, &(0x7f00000001c0)=[0xffffffffffffffff], &(0x7f0000000200)=[{0x1, 0x1, 0xb, 0xa}], 0x10, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000300)={0x0, r4}, 0x10) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000040)=0xffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0b80000007068d1d0b8f000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x80000, 0x0, 0x0, 0x0, 0x41}, 0x94) 17.358102786s ago: executing program 4 (id=3712): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) close(0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="620ac4096bd3609b2982a428ebff0080000071101900000000009500000000000000a2433665d2b6c2173de2feb689ae", @ANYRES16, @ANYRES64], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x37}, 0x94) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYBLOB="76d4699351160d14226b53dabc906cdf596e14ba04ab46da9fbdacaefa62c83ee951652304615b55acdd3edbe63e5db16a2a11d5321b300dc357066ae5eb5f5a35f5e0e8980b6a09a4", @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a00000000000800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000a000000000004000b801c000b8008000900", @ANYRESDEC], 0x184}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) write$tun(0xffffffffffffffff, 0x0, 0x3e) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) getsockopt(r4, 0x1, 0x8, &(0x7f0000000140)=""/180, &(0x7f0000000080)=0xb4) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="08002600760900000500180138000000080027"], 0x3c}, 0x1, 0x0, 0x0, 0x48010}, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={@loopback, @remote, @ipv4={'\x00', '\xff\xff', @empty}, 0x9, 0xefff, 0x2, 0x100, 0x2000040, 0x85000040}) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) r9 = accept4(r8, 0x0, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="1fe1bc7f", 0x4) sendmmsg$unix(r9, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) (async) recvmsg(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000102) (async) setsockopt(r7, 0x84, 0x7f, 0x0, 0x0) (async) syz_emit_ethernet(0x5e9, &(0x7f0000001780)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000805b33a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa800090780000000090c8a1a190c999b1f046a5f8502e73670cb7f4ab8035ca5ba53c4253cc4da3a75b04f4b82f3a1689ee3df70953d7085fdec7f497f5cc2d62a193023253aac15e73dbd3281353568d55068daae5fac37a26b04243257dcf4dc0fbd797d756a071225dfd6cd3dc31ad8c7c0c92bbfc03794c373498d3d89d05bb6386f13aa31d109ac4810e4502e74aae68aafa112cd1e90befbd59485a3396a44ff5387f60c329e0a740e62fb7bb9d695e12d9948a6e240b80ccc2ec5f2a69358b65cfa87a4bbd80e9b803b9816992fbc6c812c65fc10082b7468954573bedffa93ffd656148cf54a7ac3ef550a2be49f3b590db70c5286751c254d6fd14c3f699d1ff2c86b9f631078a31134ea0ad64f61a87a7a6506c79db494d7ef8eecf24e9ea143c259b6ec138e37d965d5577c23d225636d30385bbd04e5b57ebcbdf1984bd45eaf6a5659c22cc323c48dbf5fb3b77ccc125b38b8eb0cd11aaac4e77334f103895d82b4c3aecbd22186cf61b1d88da424bc3ddec9c49c0606e5aa1f6121052873fb08cbf344f6352d24150a865ea12da53ef04eb518f224c035c49a48ba2926b366e4530d60d27cdb4a850f9adba7f1e26b4fa6c941ced501439ef20e06c405dd0b384bec002dd591f8df1504d5634c96d4c67597fdd66a3576a97348d9610af83519fbf13bfb40ad39235068617582b387bce8d281d508b4a0b100cf629d157e8b777847a02a242a90906e6a084588b9d7461e6fb93532615ce6ea71e9d0d3fb13bb56982788d5786272d156e96996f23330eed4f84d7c120bf74441f35a137e313dd9e1a2a2a23504918e06d9a4f320522fe0d6df149364c032d3f14250b0db7e8ba445430515edb445e3fbdd8486067083f38042e973d58e3c79b575fdba68fee6b38f09001ef9b84e38f330a1aa65e48106a8629e7591fffa4f23c681c6584144d77c624b8369f5ae99faa194c7766fae96be118514d4b83f511f484515774c6261dc99189c12d46e67b9cecfefc5ad32cd0f5f59ab032bc93adb4d4476f6c8a5c011e00ebaca53eb4469c389122db553aabaed119fd640729d9557c50d78cfca4af346803804306a9796b090265e256dc820546c58fa2d3723c7205540006e831e1cfb3960ca77f606a6de6afd49e733c3720c801e1afc2142dbfad94ffd06c036395fcc2cd12c37ebd37d4c57ca8a83c45f0dd7f0020650c0e793e997bb9be183014f7225d84edb092362fadb3b30755331f9e7dd056c9148329a8ed848603770170e7ab2e9aae5b8ad97ab61179927427093feb59da6664fd14f14f059d04adac8d525c23a1fbf59f2eb334de8a38a0dc28943662e2eed21cefbb52e24f914723579e3b6ab9419f1399cec79d1a51b2c2668af2f71bcf3cf98cef743eace692612059486cf28365f897c6ae9a5e7176ad91404def08efe340e92ea3c790218511b9d69fcda5b500d694d59a768c8639b3e1e46839cb22b918b9322689e6ac66d21866159c84e2a0e41d9324c092a6cfc14c6e42b1bf3657ed763fb3ee007e9633253e3250f7d5d2d574e4c89b4517d9cc7a9ff92b80e5870dd822d075e6082cae341f2db748921f2909264bad93d1ca36f01aa414c3681e382bf294cf2f436e5fee6871d8acadf504f784de821ac21811b894f0c78548a9cced0ef27bc07ab29a2556318e5133623ca3f346d197632455279b111a9ed789a927cf3b09c53ac1ebc7457cf50c79f211a7402d8ff5371bbaeb8fca4b52efdc944e81ddf7737475568c8589a353687a8d7cff5e7003a696d286bc51198b07b2676c9675a161b42c33aface83cd24976ec4af28e8e5a35a60ac1798d672a0b23ea519bc6f55be62c0e3db3a432cb54e3e75ea0adc375e4a8c1a645370a921e93d2a1b040d894d9153c4ba86f60b2aae3fd2c2b86502691a0728860e9e12210d237dc9dbe1d1795ef65c81f4e2e948466ca14829b3c7ee86e0e0510a232fd0d22c1fc7c62bdb2e7d2d11f22fc74c85974c6b88c5c02b6df180cd22ba092a1ae8ea4c60cb29e2faec1e97ebbf886c34815bb906ccb"], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRESHEX=r3, @ANYBLOB="0000000000000000000000000000002467a049d0fb1a00d05d0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 17.357292242s ago: executing program 3 (id=3713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003b40)=ANY=[@ANYBLOB="200000006a00dd8700000000000000c0de4b450000000000080009"], 0x20}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000000104010100000000000000020000000000000040ffffffff05000100010000000a0002000000020002000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)="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", 0xfa}], 0x1, 0x0, 0x0, 0x800300}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800cb00011400022bbd7000fbdbdf250800010000000000080001000100000008000100000000000800010001000000080001009eae536008000100020000170800010002000000"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) (async) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) (async) bind$llc(0xffffffffffffffff, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r5], 0xc8}, 0x1, 0x0, 0x0, 0x640480c5}, 0x0) (async) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xa3) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) unshare(0x62040200) write$tun(0xffffffffffffffff, 0x0, 0x3e) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) sendmmsg(r6, &(0x7f0000000640)=[{{&(0x7f00000004c0)=@isdn={0x22, 0x6, 0x4, 0xbe, 0x9}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)="d8dbc614e0a5926d7118b7383c36a02bbd87cfbe0cc425342f4ea9d337cc8618a7fc7dfa01abb062893dd4c34a938f50d5eff85f0b4f932888b9fdc5befae285f8d1f512963959395cdf30a1b2e9b47240224c85e7297513bf0b250ca9f875efc7bfccc7a7bf429fc508b230f9715e4d4f79034ec577427e20446a", 0x7b}], 0x1, &(0x7f0000004dc0)=ANY=[@ANYBLOB="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"], 0x1210}}], 0x1, 0x1c) 17.284792699s ago: executing program 2 (id=3714): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_FLAGS_EXT={0x8, 0xf, 0xc3203837f3f65e8b}]}, 0x24}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x56, &(0x7f0000000880)={@local, @random="a22ccb570461", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @remote}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0xb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private=0x1, @local, {[@cipso={0x86, 0x17, 0x0, [{0x2, 0xe, "b1057df37f610d5e00000000"}, {0x0, 0x3, "96"}]}]}}}}}}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11, {0x1}, {}, {0x6, 0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 17.277647116s ago: executing program 3 (id=3715): r0 = socket(0x400000000010, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x340440f1) setsockopt$sock_attach_bpf(r2, 0x1, 0x12, &(0x7f00000007c0), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00010002"], 0x8) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socket$kcm(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r6}) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xfffffffffffffc21, &(0x7f0000000400)=[{&(0x7f0000000000)="ed4f86659b20acb3005dbffb470c28b206b1dfcd8740059f5db52d9c889abe4bbf1733521a823c", 0x101d0}], 0x1000000000000338}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r5, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002680)=""/70, 0x46}], 0x1}}], 0x2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'veth1_to_hsr\x00', &(0x7f0000000600)=@ethtool_flash={0x33, 0x8, './file0\x00'}}) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f0000000280)={r9, r9, 0x1, 0x2, &(0x7f00000001c0)="0090", 0x48, 0x1, 0x7, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) 17.202733121s ago: executing program 4 (id=3716): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x5, &(0x7f00000002c0)=@framed={{}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x7}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x1c, 0x2d, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0x800}, @nested={0x5, 0x11, 0x0, 0x1, [@generic='/']}]}, 0x1c}], 0x1}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000100)={0x2, 0x8, '\x00', 0x0, &(0x7f00000000c0)=[0x0]}) 17.201003833s ago: executing program 0 (id=3717): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x129a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000500)) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x800}, @val={0x1, 0x3, 0x1, 0x3, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e23, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x13}, {"2244070000bc0be4bdf9da24708a4ec90000932b52c828de6f79d82439"}}}}}, 0x53) 16.983829206s ago: executing program 1 (id=3718): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffff}, {0x6, 0xf}, {0xe, 0xd}}}, 0x62}}, 0x0) (async) recvmmsg(r3, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)=""/1, 0x1}, {&(0x7f00000001c0)=""/64, 0x40}], 0x2}, 0x8}], 0x1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x12) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0xb0, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000d5) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (async) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x1cd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000e00)="61506eb07117164bdb4ee7ac0a137512738cac7ddf83039c6483d715bcafc5c4f7feff3c5f7c8d0773bb7447d33297aaf2f9e2b9dc15752fdb623d0008f673f7a04836a22be782e61cc35bdea0abd69a4726afa107f95b8922be17921a894c90310251c043c6ffce40aa34acd2ddccc0255708feca96f2563c7318556f4ef40d02bb5cb1f9", 0x85}, {&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a486374b780581aac75a2f848f285c99133f0435497bf6ae25625c64f82ecc0a7bb7bf4", 0x41}, {&(0x7f0000000ec0)="a8186e5cfec4641228a40aab3ba2a51eed6fbde9765fe6098a38dc6c671d34865814d34de5c5bde9e1fab0b2343a4100b8a80fb475ee925b2d0b539b083243652294fa61494ea3dbcff6ee86a24641267027dd88dac0026eb672e1faa4b7", 0x5e}], 0x3}}], 0x2, 0x480e0) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef0000000000000008000100e0e0000108000300", @ANYRES32=r6], 0x34}, 0x1, 0x0, 0x0, 0x20004814}, 0x400c810) 16.917838399s ago: executing program 1 (id=3719): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x73, &(0x7f0000000280)='/proc/net\x00\x00t4/c+\x0fG\xf9\xe1K\fX\a0\x04\x00\x00\x82D\x80\xa2EZ\xad}\\-\xd1\x96R\x91\xd7x\xb5\xfb\xc4N\xc7\xb3+\xb3qW\xa9\x83\x9b\x84\xbc\xe9\xc6$\x9b/\xda\x9d=P\xd1Xzk\xb5\x95\x18\xd7\xa8\xcc\x99v\x84hQ\xf1fZ\n\xb6\x02\xd5\xf1\xb4b\xa6\aM+\xc1\xe8\"\x0f\x89\xba\xb3\x06:a\xd335^x\xaf\x14\x82'}, 0x30) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES64=r2, @ANYRESDEC=r0, @ANYRES8=r3], 0x158}, 0x1, 0xba01}, 0x44) 16.891500758s ago: executing program 4 (id=3720): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) unshare(0x22020600) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000340)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0800450000300000000000679078000000ff21009078120002282500000900000000000000e0000002e00000005f25f1296bee82cb13aded995ed016bf725cfce5feb53464b6de4c91f3feba794867684b06ca759d1281dc49b7cc48f1"], 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010028bd7000f6dbdf250900020073797a31001800000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x810) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000018100000", @ANYRES32=r6, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}}, 0x400c4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r7, r11}, 0xc) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xd}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r12}, 0x10) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r7, r11}, 0xc) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r14}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0xc004}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000021401002abd700001dcdf2508000100000000000500540041"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast2}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001000)={0x50, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x50}}, 0x40c0800) 16.82386944s ago: executing program 2 (id=3721): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000025c0)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="ceda5661f0bf5e5405a1e890ede008eeaf0606f6f40aeb43fabb18abef30177a732ae6a10bb24fad88b300b4fade8f47e3f8288e361f38298938a5f5b1867a6c6a969754da13", 0x46}, {&(0x7f00000000c0)="ebe3a0e90073060000000080e3", 0xd}], 0x2, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x43}], 0x18, 0x40805}], 0x1, 0x40811) (async) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 32) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/91, 0x5b}], 0x1}, 0x10101) (rerun: 32) 16.789662659s ago: executing program 2 (id=3722): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[], 0x0, 0x2008000, 0xfffffffffffffff3, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='f2fs_write_end\x00', r2}, 0x18) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c8568660", 0x10}], 0x1}, 0x0) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x4}, 0x4) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000080)=0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0xa, &(0x7f0000005ac0)=0x2, 0x4) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 16.773356446s ago: executing program 1 (id=3723): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x40, 0x8000, 0xa4, 0x6, {{0x23, 0x4, 0x3, 0x8, 0x8c, 0x65, 0x0, 0x2, 0x29, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0x3c, 0x8e, 0x3, 0x6, [{@broadcast, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffe1b}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x5}, {@private=0xa010100, 0x1}, {@local, 0x7}, {@loopback, 0x8}]}, @cipso={0x86, 0xb, 0x3, [{0x5, 0x5, "06d74f"}]}, @ssrr={0x89, 0x17, 0x9e, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @ssrr={0x89, 0xf, 0x5f, [@loopback, @dev={0xac, 0x14, 0x14, 0x2a}, @dev={0xac, 0x14, 0x14, 0x3f}]}, @generic={0x7, 0xa, "60c041dcdb828761"}]}}}}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x6, [@typedef={0x9, 0x0, 0x0, 0x8, 0x3}, @enum={0x6, 0x1, 0x0, 0x6, 0x4, [{0xe, 0x1}]}, @fwd={0x8}, @float={0xe, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x30, 0x0, 0x2e, 0xd]}}, &(0x7f0000000480)=""/147, 0x56, 0x93, 0x1, 0x3, 0x10000}, 0x28) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=@bloom_filter={0x1e, 0x1000, 0xa6, 0xf200, 0x4003, r0, 0x8, '\x00', r1, r2, 0x3, 0x5, 0x1, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000000000020000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000700b5020000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r4, 0x8, 0x1, &(0x7f0000000600)="5311effecb6ba7d874f34572f33b9ea201e31105e633d7a00fbaaadf5b13cd7571cd4230d56960df3f72be3530ccd247eb9c0daeaa5d0bde1c6bf69ac48883359338646ae3b3c5c9e70d9a7605dce3aa6296ed89298d449b696018bd74a083b920fccca8dc1097862b", 0x69) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xa) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r9 = socket(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x24, 0x29, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {}, {0x9, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x40, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0xff, 0x0, 0x0, 0x1}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x3}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xfffffff8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x20000040) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 16.559671255s ago: executing program 2 (id=3724): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2001}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe88000000000000000000000000010100000000000000000000ffffac1414260000000000000000000000003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000010000000232000000ac1414bb00eaffffff0000000000000000000000000000000000000000000000fffffeffffffffff0400000000000000040000000000000040000000000000000000000000000000000000000000000061f4ffffffffffff0300000000000000000000000000000000000100000000000000000002000000000000002dbd70000000000002000500000000000000000048000200"], 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='mm_page_free_batched\x00', r0, 0x0, 0x2}, 0x18) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000300)=@hci, 0x80, &(0x7f0000000780)=[{&(0x7f0000000640)=""/178, 0xb2}, {&(0x7f0000000700)=""/111, 0x6f}], 0x2}, 0x40001e20) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000000)={0x4, 0x8, "182b71", 0x5, 0xff}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0xc8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r5, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r5, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.558984132s ago: executing program 4 (id=3725): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pimreg1\x00', 0x8000}) 16.502993198s ago: executing program 4 (id=3726): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000100)=0x41) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000010000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) r1 = socket(0x10, 0x80002, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000040)={'raw\x00'}, &(0x7f0000000140)=0x24) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan1\x00'}) clock_gettime(0x7, &(0x7f00000005c0)) 16.270761779s ago: executing program 3 (id=3727): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0xf}, {0xe, 0xfff3}, {0x9, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x4}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000068022817389c09633d3ef6a143d0e3f504433bec4b3cd4c9abb8a8819765b094b96891a1f9064325b3830e5c1368db3b8ac008cd0136e0e97be06366e7d09c8952962f9bd94170a79493badd9383690a8741e0a5510fd87c0979c3988a58ee5af91856a46fd8e546042e6857f1009654e8e8b0e9c8ba89e5ddbb507bf3ae8d3aa38e78c6c21bbfd3be67d4483bfd", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x48) r2 = openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r6 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sys_enter\x00', r7, 0x0, 0x6}, 0x18) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv(r8, &(0x7f0000000680)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @broadcast}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, 0x0) sendmsg$nl_route(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000001e000126bd7000fedbdf250700000000", @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4040840}, 0x20000800) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r6], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff00000000d609080000000000c39af0ff01000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000054080000020000008500000007000000b700000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0xf}, {0xe, 0xfff3}, {0x9, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x4}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000068022817389c09633d3ef6a143d0e3f504433bec4b3cd4c9abb8a8819765b094b96891a1f9064325b3830e5c1368db3b8ac008cd0136e0e97be06366e7d09c8952962f9bd94170a79493badd9383690a8741e0a5510fd87c0979c3988a58ee5af91856a46fd8e546042e6857f1009654e8e8b0e9c8ba89e5ddbb507bf3ae8d3aa38e78c6c21bbfd3be67d4483bfd", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x48) (async) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sys_enter\x00', r7, 0x0, 0x6}, 0x18) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) readv(r8, &(0x7f0000000680)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @broadcast}) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000001e000126bd7000fedbdf250700000000", @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4040840}, 0x20000800) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r6], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff00000000d609080000000000c39af0ff01000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf9800000000000054080000020000008500000007000000b700000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) (async) 16.20220907s ago: executing program 0 (id=3728): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x437, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2281, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x40}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e22, 0xbf9f, @private0, 0x2}}, [0x8, 0xab, 0x3, 0x3d, 0x7, 0x0, 0xc5, 0x3, 0x9, 0x1a00000000000, 0xc, 0x9fd5, 0x5, 0xff, 0x5]}, &(0x7f0000000180)=0x100) 16.075673986s ago: executing program 0 (id=3729): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000120001"], 0x83}], 0x1}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x301, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xffffff80}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000740)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4}]}}}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) sendmsg$netlink(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x54}}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0xfffffffffffffcab) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000001cc0)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0f9c4d6bfa8c2a0c2e1abf3f3ee6a0b3", 0x10}], 0x1, 0x0, 0x0, 0x20008000}], 0x1, 0x2000c085) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x54, r8, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) 15.91605079s ago: executing program 3 (id=3730): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x6f62}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$netlink(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x6, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000140009052abd7000fddbdf25021f0000", @ANYRES32=r4, @ANYBLOB="080006000000000000000400ffffffff"], 0x28}, 0x1, 0x0, 0x0, 0x24048881}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="322bf2d90a000000"], 0x8) r5 = socket(0x1e, 0x4, 0x0) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x20) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000540), 0x4) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x77, 0xfffffffffffffe2b, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x4000800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r6 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@gettfilter={0x24, 0x2e, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0xa}, {0xc}, {0xb, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x54, 0x2c, 0xd27, 0xffffffff, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x1, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x4}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x24000084) socket$netlink(0x10, 0x3, 0x0) 15.843363667s ago: executing program 1 (id=3731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000071187c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001}, 0x94) 15.771867114s ago: executing program 4 (id=3732): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) socketpair(0x23, 0x2, 0x5, &(0x7f0000000040)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) writev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)="5e4681597af33f3318cc22695caf39f1e233a86363694f30a7c4b56f55b676fc7f95d01c888b3a0090c80ac07e552d2a459fbc1dd8cb1f2021a9a53fbf6581d50b7fa5d55acc419c154e80e8625db8aa6d800e2b7c6d371d65c100915652da76a08c5b960cd84e9373488e6f1279bd7bbb14dd35adb38161450a1131352aebe9e597ad61952be9fa7b179c662d80855c78a85d561f", 0x95}], 0x1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x300, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000) sendmsg$netlink(r1, &(0x7f0000006f40)={0x0, 0x0, &(0x7f0000006e80)=[{&(0x7f0000000180)={0x10}, 0x10}, {&(0x7f0000000380)={0x10, 0x3eb}, 0x10}], 0x2}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x49920d862a92063f, 0xc, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x4c81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xfffffffffffffffc}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x48010) socket$nl_sock_diag(0x10, 0x3, 0x4) 15.74371195s ago: executing program 1 (id=3733): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) writev(r0, &(0x7f0000001800)=[{&(0x7f0000000400)="f6f9394b193a52687b8318a4a3ef7c46d72c594ebad6f954864f6ad3f16a90ba479f8ddd34fe56cb2b7c7af97c8aff7d3b611693ce73d1b3aa1ae65696ce2bd57e5d618ca59179b1a772f42a8c3de07f218ed584f5b4c0fbb1d296f89f0e1b1932f9e1779280f95583173e97abfa0fda706fe609260395847be91a563810729121c4c406e474aa26a6ce71782bb24aa7581608a541a5d40091ff769574cdc1cf2f513e470a00d77d51ca543836a5d9b7b2721fdd2c81b63fa603f6989b361b857e316b8a731d594b1eb5bcd3a9623cb9a8e109ce3d7234fe8f66eaf600c2e4785e2867c2647af4b2b1b40f6a3ab50558c3e7c0", 0xf3}, {&(0x7f0000000500)="fea83278b05a1fc8f3b163e98e7c80750277a959daac9855164f197532bfbfb9e11ea11752a120166c14f5d2b0a2318df43b27edf1f9d723c62bf8688bbf478222bc11915f37157c55c9a23a2b8f6a", 0x4f}, {&(0x7f0000000580)="3668d3378fd28fd43e75e38614aa8a6a654b1272dbd390b9ef04de5fc50dcdb97d0118fbc958b237e8de33f6be792ad57bcb2130645b9b9c3493fdd5cb9a1ef40e772a13ff160bac183aa955d268252b41fc937a277f11907a6a010a4bcdfadfb65287ed573845d7d03c3044692735a0dcdea76c3bbf629bbd1c5bdcca45fcba1609044b94dee07b29a3257c684ff8acf566387871651df381749d", 0x9b}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="5f6f07c11ea93108cbcd4a09b70a0eb499e2709dbf54d93ecbb42a6bdd5d927d08884989710495e7afd5a834a3d2dccc562a2fde430faa1581d45ceed7709ae67f4466bb12daeda4e84ac608264412068ba7ee794de4b87f0e2e50ce4403a8ab18fdc44ea0572d2439fa0b53bc3a01694654952430a123b6474c9d5fbee6ca36fb2e3bc4d256f7174b38e231035dbdf703278960abfa0404795f2f728430f6782bbf9e07386303d2017ee93f2ba1d9b0b564f4c1dc7634fd0972f865825e81c805c311cb448c63c8d27a456d37315bc54ef199eb", 0xd4}, {&(0x7f0000001740)="038109ee38975f6e6be2f5db1b823a27445928cdbf7fc29643251afd9278bcdc35f35a7f848a61bb4de7204db4a32a99d59d197400d727cdb3abe0655b318717af5a5a4d548798229c1901a36c3c2fb1e6a39a45b70180c2df23b54d7135f9e9f17caa8a445d31598833736a8de81251c98603db8eca948e180e01d7a2994a00e54458b77e8af11ffe863c72ca3963ba188af3e669b090608b90f414b2be7240b2c3f1ed71d92f67c8f7eb90023a6e8fff2f3841017f86c0d44b062b3356", 0xbe}], 0x6) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000001940)={[{0x2d, 'pids'}, {0x2b, 'perf_event'}, {0x2d, 'memory'}, {0x2b, 'cpuset'}, {0x2b, 'rlimit'}, {0x2b, 'hugetlb'}, {0x2b, 'net_prio'}]}, 0x3d) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xc}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x90}}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000002c0)={0x3, 0x293e, 0x3, 0x3, 0x5, 0x0, [{0xe398, 0x9, 0xf, '\x00', 0x2100}, {0x9, 0x2, 0x6, '\x00', 0x800}, {0xeb2, 0x9, 0xce, '\x00', 0x2100}, {0x400, 0x1, 0x8f80, '\x00', 0x1805}, {0x1000, 0x8, 0x3, '\x00', 0x1202}]}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRES8=r3], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000280)='\x00', 0x1) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000080)=0x1d06037, 0x4) (async) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000b80), r5) sendmsg$NLBL_CIPSOV4_C_LIST(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000bc0)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000c0) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000001900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000001880)={0x58, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x74}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9a6c}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0x1d, 0x8, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x48800}, 0x40) 15.64908344s ago: executing program 3 (id=3734): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x5c}, {0x6}]}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000007600000000000000000000000000000000000000fc75525a9158bfa61614ad2d5f01735d688e3c317690ad38f84af1152264d02342219b7d1609d674b922658b2433cb7dffe6dec3c1254ef2646edea19c6cf174e45b5682538d152802fa85d7fd98c0671655df547960975d1e80a6e2288665d94418bb1844eab5cb2fa60913193dee16febac8a3e193ed1b3ab0568758a903"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) socket(0x10, 0x0, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000b40)=0x3, 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x20000023, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0xf0b, 0x70ad2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x7, 0x10}, {0x3, 0xd}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) 15.563853023s ago: executing program 1 (id=3735): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x26}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) 15.560258147s ago: executing program 3 (id=3736): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x58, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "96557917d5d82cebae9347436de1ace2fe62c079"}}, @TIPC_NLA_NODE_ID={0x4}]}]}, 0x58}}, 0x4004) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/27, 0x1b}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', r2, 0x4, 0xff, 0xaa, 0x0, 0x1, @private0, @remote, 0x8000, 0x40e0, 0xfffffff9, 0x4}}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4001) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f00000001c0)='./file0\x00'}, 0x18) 1.165606068s ago: executing program 32 (id=3724): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2001}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38010000100013070000000000000000fe88000000000000000000000000010100000000000000000000ffffac1414260000000000000000000000003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000010000000232000000ac1414bb00eaffffff0000000000000000000000000000000000000000000000fffffeffffffffff0400000000000000040000000000000040000000000000000000000000000000000000000000000061f4ffffffffffff0300000000000000000000000000000000000100000000000000000002000000000000002dbd70000000000002000500000000000000000048000200"], 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='mm_page_free_batched\x00', r0, 0x0, 0x2}, 0x18) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000300)=@hci, 0x80, &(0x7f0000000780)=[{&(0x7f0000000640)=""/178, 0xb2}, {&(0x7f0000000700)=""/111, 0x6f}], 0x2}, 0x40001e20) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000000)={0x4, 0x8, "182b71", 0x5, 0xff}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0xc8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r5, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r5, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 143.503304ms ago: executing program 33 (id=3729): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000120001"], 0x83}], 0x1}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x301, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xffffff80}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000740)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4}]}}}}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) sendmsg$netlink(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="140100001f0001030000000000000000010100800c00000000000000000000009a8aa489160a1150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae65db1086cda40e00aec58754734be31d750351dc076eb47d94a19c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee92bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d97bcb951f47d312df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d08000000ac0f0dcbb391deb969c3de7dab2594978654113e0011e6665ab66e0add6f3fea89a1f0f0a3713d38b4f10226d611946021a573d8d9e8c3379471672d68a7eaa384a38a2fa8010cd4b87f580c8e0ccf5919b3de236f5bae439440b6152f9600ef08bc97372c6a6b3cb9c59a34b699c7c5a2382dbe14fe3dc7aef1c149ab88d837be0bbee0adf44f5611fedb3a"], 0x114}], 0x1}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="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"], 0x54}}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0xfffffffffffffcab) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000001cc0)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0f9c4d6bfa8c2a0c2e1abf3f3ee6a0b3", 0x10}], 0x1, 0x0, 0x0, 0x20008000}], 0x1, 0x2000c085) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x54, r8, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) 117.374151ms ago: executing program 34 (id=3735): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x26}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) 54.57308ms ago: executing program 35 (id=3736): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x58, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "96557917d5d82cebae9347436de1ace2fe62c079"}}, @TIPC_NLA_NODE_ID={0x4}]}]}, 0x58}}, 0x4004) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/27, 0x1b}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', r2, 0x4, 0xff, 0xaa, 0x0, 0x1, @private0, @remote, 0x8000, 0x40e0, 0xfffffff9, 0x4}}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4001) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f00000001c0)='./file0\x00'}, 0x18) 0s ago: executing program 36 (id=3732): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) socketpair(0x23, 0x2, 0x5, &(0x7f0000000040)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) writev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)="5e4681597af33f3318cc22695caf39f1e233a86363694f30a7c4b56f55b676fc7f95d01c888b3a0090c80ac07e552d2a459fbc1dd8cb1f2021a9a53fbf6581d50b7fa5d55acc419c154e80e8625db8aa6d800e2b7c6d371d65c100915652da76a08c5b960cd84e9373488e6f1279bd7bbb14dd35adb38161450a1131352aebe9e597ad61952be9fa7b179c662d80855c78a85d561f", 0x95}], 0x1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x300, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000) sendmsg$netlink(r1, &(0x7f0000006f40)={0x0, 0x0, &(0x7f0000006e80)=[{&(0x7f0000000180)={0x10}, 0x10}, {&(0x7f0000000380)={0x10, 0x3eb}, 0x10}], 0x2}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x49920d862a92063f, 0xc, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x4c81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xfffffffffffffffc}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x48010) socket$nl_sock_diag(0x10, 0x3, 0x4) kernel console output (not intermixed with test programs): [ 519.175908][T17054] RIP: 0033:0x7efcb718eec9 [ 519.175926][T17054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.175944][T17054] RSP: 002b:00007efcb810a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 519.175965][T17054] RAX: ffffffffffffffda RBX: 00007efcb73e5fa0 RCX: 00007efcb718eec9 [ 519.175980][T17054] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 519.175992][T17054] RBP: 00007efcb7211f91 R08: 0000000000000004 R09: 0000000000000000 [ 519.176003][T17054] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 519.176016][T17054] R13: 00007efcb73e6038 R14: 00007efcb73e5fa0 R15: 00007ffdca295ab8 [ 519.176050][T17054] [ 519.176058][T17054] Mem-Info: [ 519.457889][T17054] active_anon:4577 inactive_anon:0 isolated_anon:0 [ 519.457889][T17054] active_file:3214 inactive_file:40027 isolated_file:0 [ 519.457889][T17054] unevictable:768 dirty:160 writeback:0 [ 519.457889][T17054] slab_reclaimable:12866 slab_unreclaimable:171310 [ 519.457889][T17054] mapped:31320 shmem:1355 pagetables:1078 [ 519.457889][T17054] sec_pagetables:0 bounce:0 [ 519.457889][T17054] kernel_misc_reclaimable:0 [ 519.457889][T17054] free:1244935 free_pcp:18845 free_cma:0 [ 519.506350][T17062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2964'. [ 519.517110][T17054] Node 0 active_anon:18308kB inactive_anon:0kB active_file:12856kB inactive_file:159912kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125280kB dirty:636kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12576kB pagetables:4188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 519.588976][T17054] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 519.604983][T17059] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2964'. [ 519.628941][T17054] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 519.678018][T17064] xfrm0: entered promiscuous mode [ 519.687107][T17054] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 519.690848][T17064] xfrm0: entered allmulticast mode [ 519.694654][T17054] Node 0 DMA32 free:1061724kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18264kB inactive_anon:0kB active_file:12856kB inactive_file:158100kB unevictable:1536kB writepending:632kB present:3129332kB managed:2559852kB mlocked:0kB bounce:0kB free_pcp:67208kB local_pcp:43312kB free_cma:0kB [ 519.732745][T17054] lowmem_reserve[]: 0 0 1 1 1 [ 519.737550][T17054] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1812kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 519.767442][T17054] lowmem_reserve[]: 0 0 0 0 0 [ 519.774292][T17054] Node 1 Normal free:3902128kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8768kB local_pcp:6432kB free_cma:0kB [ 519.824787][T17054] lowmem_reserve[]: 0 0 0 0 0 [ 519.829741][T17054] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 519.843940][T17054] Node 0 DMA32: 492*4kB (UME) 600*8kB (UME) 193*16kB (UME) 1010*32kB (UME) 462*64kB (UME) 108*128kB (UME) 84*256kB (UM) 153*512kB (UME) 98*1024kB (UM) 11*2048kB (UM) 184*4096kB (UM) = 1061952kB [ 519.863921][T17054] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 519.877230][T17054] Node 1 Normal: 178*4kB (UME) 59*8kB (UME) 37*16kB (UME) 198*32kB (UME) 66*64kB (UME) 9*128kB (UME) 4*256kB (UME) 3*512kB (UM) 1*1024kB (M) 1*2048kB (E) 948*4096kB (M) = 3902128kB [ 519.896171][T17054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 519.906144][T17054] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 519.916637][T17054] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 519.926781][T17054] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 519.944847][T17054] 44598 total pagecache pages [ 519.950070][T17054] 6 pages in swap cache [ 519.955854][T17054] Free swap = 124972kB [ 519.960148][T17054] Total swap = 124996kB [ 519.964632][T17054] 2097051 pages RAM [ 519.968481][T17054] 0 pages HighMem/MovableOnly [ 519.968815][T17065] vxcan1 speed is unknown, defaulting to 1000 [ 519.973961][T17054] 424998 pages reserved [ 519.983627][T17054] 0 pages cma reserved [ 520.032309][ T5869] Bluetooth: hci4: command tx timeout [ 520.611105][T16973] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 520.625551][T16973] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 520.639784][T17067] vxcan1 speed is unknown, defaulting to 1000 [ 520.640223][T16973] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 520.676257][T17065] wg1 speed is unknown, defaulting to 1000 [ 520.676750][T16973] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 520.762102][T17080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2968'. [ 520.927446][T17071] vxcan1 speed is unknown, defaulting to 1000 [ 520.956342][T16973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.982858][T16973] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.042580][ T6984] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.049910][ T6984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.064828][ T6984] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.072260][ T6984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.246093][T17067] wg1 speed is unknown, defaulting to 1000 [ 521.315719][T17071] wg1 speed is unknown, defaulting to 1000 [ 521.517641][T17095] netlink: 'syz.0.2971': attribute type 1 has an invalid length. [ 521.526189][T17095] netlink: 'syz.0.2971': attribute type 2 has an invalid length. [ 521.769404][T16973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.933538][T16973] veth0_vlan: entered promiscuous mode [ 522.001550][T16973] veth1_vlan: entered promiscuous mode [ 522.113852][ T5869] Bluetooth: hci4: command tx timeout [ 522.116432][T16973] veth0_macvtap: entered promiscuous mode [ 522.177750][T16973] veth1_macvtap: entered promiscuous mode [ 522.215413][T16973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.237860][T16973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.295388][ T6994] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.353404][ T6994] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.364625][ T6994] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.380081][ T6994] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.561413][ T6988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.575910][ T6988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.729513][T17126] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2979'. [ 522.749082][ T6984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.771228][ T6984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.544059][T17143] syzkaller1: entered promiscuous mode [ 523.549651][T17143] syzkaller1: entered allmulticast mode [ 524.030017][T16974] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 524.042513][T16974] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 524.051374][T16974] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 524.059457][T16974] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 524.067463][T16974] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 524.215104][T17163] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2987'. [ 524.258863][T17164] vxcan1 speed is unknown, defaulting to 1000 [ 524.673678][T17184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2995'. [ 524.734665][T17164] wg1 speed is unknown, defaulting to 1000 [ 524.773565][T17186] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2994'. [ 525.115252][T17192] vxcan1 speed is unknown, defaulting to 1000 [ 525.116227][ T6988] tipc: Resetting bearer [ 525.658574][ T6988] tipc: Disabling bearer [ 525.785105][ T6988] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 525.795017][ T6988] bond0 (unregistering): Released all slaves [ 525.810016][ T6988] bond1 (unregistering): Released all slaves [ 525.973092][ T6988] team0: Port device bond2 removed [ 525.979455][ T6988] bond2 (unregistering): Released all slaves [ 525.993106][ T6988] bond3 (unregistering): Released all slaves [ 526.123418][ T5869] Bluetooth: hci1: command tx timeout [ 526.155710][ T6988] bond4 (unregistering): Released all slaves [ 526.317085][ T6988] bond5 (unregistering): (slave wireguard0): Releasing backup interface [ 526.325981][ T6988] wireguard0: left promiscuous mode [ 526.334228][ T6988] bond5 (unregistering): Released all slaves [ 526.530732][ T6988] bond6 (unregistering): Released all slaves [ 526.543551][ T6988] bond7 (unregistering): Released all slaves [ 526.570842][T17192] wg1 speed is unknown, defaulting to 1000 [ 526.791312][ T6988] tipc: Disabling bearer [ 526.809224][ T6988] tipc: Disabling bearer [ 526.818423][ T6988] tipc: Left network mode [ 526.843181][T17219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3004'. [ 526.936285][T17219] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3004'. [ 526.939736][T17222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3005'. [ 527.046292][T17164] chnl_net:caif_netlink_parms(): no params data found [ 527.214657][T17226] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 527.223435][T17227] syzkaller1: entered promiscuous mode [ 527.230508][T17227] syzkaller1: entered allmulticast mode [ 527.300928][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3008'. [ 527.413402][T17243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3009'. [ 527.455571][T17246] netlink: 'syz.4.3010': attribute type 13 has an invalid length. [ 527.464100][T17246] netlink: 'syz.4.3010': attribute type 17 has an invalid length. [ 527.474259][T17246] netlink: 'syz.4.3010': attribute type 27 has an invalid length. [ 527.514069][T17243] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3009'. [ 527.549502][T17164] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.557318][T17164] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.576096][T17164] bridge_slave_0: entered allmulticast mode [ 527.584647][T17164] bridge_slave_0: entered promiscuous mode [ 527.613273][T17164] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.621761][T17164] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.629633][T17164] bridge_slave_1: entered allmulticast mode [ 527.653046][T17164] bridge_slave_1: entered promiscuous mode [ 527.826205][T17246] vxcan1 speed is unknown, defaulting to 1000 [ 527.826251][T17262] veth0: entered promiscuous mode [ 527.858679][T17164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.916309][T17164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.016886][T17262] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3014'. [ 528.111456][ T6988] hsr_slave_0: left promiscuous mode [ 528.118153][ T6988] hsr_slave_1: left promiscuous mode [ 528.168601][ T6988] vlan0: left promiscuous mode [ 528.200813][ T5869] Bluetooth: hci1: command tx timeout [ 528.246203][T17281] netlink: 'syz.0.3017': attribute type 4 has an invalid length. [ 528.420314][ T6988] pim6reg (unregistering): left allmulticast mode [ 529.033190][T17268] tap0: tun_chr_ioctl cmd 1074025677 [ 529.038626][T17268] tap0: linktype set to 0 [ 529.060281][T17164] team0: Port device team_slave_0 added [ 529.066665][T17246] wg1 speed is unknown, defaulting to 1000 [ 529.076281][T17164] team0: Port device team_slave_1 added [ 529.084175][T17261] veth0: left promiscuous mode [ 529.141068][T17278] siw: device registration error -23 [ 529.245628][T17164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.266424][T17164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.301747][T17164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.350086][T17164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.358086][T17164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.385480][T17164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.608626][T17164] hsr_slave_0: entered promiscuous mode [ 529.667367][T17164] hsr_slave_1: entered promiscuous mode [ 529.909885][ T6988] IPVS: stop unused estimator thread 0... [ 530.270445][ T5869] Bluetooth: hci1: command tx timeout [ 530.526052][T17314] __nla_validate_parse: 1 callbacks suppressed [ 530.526073][T17314] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3028'. [ 530.610026][T17315] netlink: 'syz.0.3028': attribute type 1 has an invalid length. [ 530.620116][T17323] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3030'. [ 530.621061][T17314] netlink: 'syz.0.3028': attribute type 1 has an invalid length. [ 530.793286][T17328] netlink: 'syz.3.3032': attribute type 1 has an invalid length. [ 531.014939][T17334] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 531.026142][T17334] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 531.507234][T17164] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 531.514396][T17362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3043'. [ 531.538004][T17164] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 531.596715][T17164] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 531.645767][T17164] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 531.953758][T17391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3048'. [ 531.979722][T17164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.989593][T17389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3048'. [ 532.001769][T17391] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3048'. [ 532.024642][T17395] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3048'. [ 532.044761][T17164] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.066881][ T6988] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.074164][ T6988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.153515][ T6988] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.160857][ T6988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.226709][T17405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3051'. [ 532.350674][ T5869] Bluetooth: hci1: command tx timeout [ 532.461107][T17407] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3053'. [ 532.510527][T17407] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3053'. [ 532.738254][T17164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.816628][T17164] veth0_vlan: entered promiscuous mode [ 532.832516][T17164] veth1_vlan: entered promiscuous mode [ 532.876384][T17433] vxcan1 speed is unknown, defaulting to 1000 [ 532.888476][T17164] veth0_macvtap: entered promiscuous mode [ 532.902929][T17164] veth1_macvtap: entered promiscuous mode [ 532.935548][T17164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.956426][T17164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.996390][ T6988] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.021971][ T1055] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.042663][ T1055] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.068010][ T1055] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.414647][ T6988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.434942][ T6988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.502257][T17434] netlink: 'syz.3.3060': attribute type 17 has an invalid length. [ 533.542597][T17434] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 533.659283][T17433] wg1 speed is unknown, defaulting to 1000 [ 533.770673][ T6981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.779434][ T6981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.790159][T17443] vxcan1 speed is unknown, defaulting to 1000 [ 534.159471][T17461] bond0: entered promiscuous mode [ 534.166552][T17461] bond_slave_0: entered promiscuous mode [ 534.174721][T17461] bond_slave_1: entered promiscuous mode [ 534.187021][T17443] wg1 speed is unknown, defaulting to 1000 [ 535.062603][T16974] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 535.073346][T16974] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 535.081630][T16974] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 535.091487][T16974] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 535.099387][T16974] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 535.418231][T17475] vxcan1 speed is unknown, defaulting to 1000 [ 535.704574][ T6988] bridge_slave_0: left allmulticast mode [ 535.710308][ T6988] bridge_slave_0: left promiscuous mode [ 535.728066][ T6988] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.848302][T17483] __nla_validate_parse: 4 callbacks suppressed [ 535.848322][T17483] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3074'. [ 535.917550][T17489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3075'. [ 535.971639][T17490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3076'. [ 536.098971][T17493] netlink: 'syz.2.3075': attribute type 4 has an invalid length. [ 536.638777][ T6988] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 537.240891][T16974] Bluetooth: hci3: command tx timeout [ 537.448682][ T6988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.458226][ T6988] bond_slave_0: left promiscuous mode [ 537.466078][ T6988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.475815][ T6988] bond_slave_1: left promiscuous mode [ 537.483668][ T6988] bond0 (unregistering): (slave 0!): Releasing backup interface [ 537.494986][ T6988] !: left promiscuous mode [ 537.505050][ T6988] bond0 (unregistering): Released all slaves [ 537.701429][ T6988] bond1 (unregistering): Released all slaves [ 537.897799][ T6988] bond2 (unregistering): Released all slaves [ 538.103666][ T6988] bond3 (unregistering): Released all slaves [ 538.278117][ T6988] bond4 (unregistering): Released all slaves [ 538.298189][ T6988] bond5 (unregistering): Released all slaves [ 538.471524][ T6988] bond6 (unregistering): Released all slaves [ 538.600926][ T6988] bond7 (unregistering): Released all slaves [ 538.626940][T17490] vlan2: entered promiscuous mode [ 538.632566][T17490] team0: entered promiscuous mode [ 538.637723][T17490] team_slave_0: entered promiscuous mode [ 538.644728][T17490] team_slave_1: entered promiscuous mode [ 538.728497][T17475] wg1 speed is unknown, defaulting to 1000 [ 538.786571][ T6988] tipc: Disabling bearer [ 538.799536][ T6988] tipc: Left network mode [ 538.823629][T17483] vxcan1 speed is unknown, defaulting to 1000 [ 539.128520][T17503] geneve2: entered promiscuous mode [ 539.251257][T17503] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3079'. [ 539.313847][T16974] Bluetooth: hci3: command tx timeout [ 539.462907][T17483] wg1 speed is unknown, defaulting to 1000 [ 539.486240][T17505] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3079'. [ 539.532249][T17516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3083'. [ 539.548219][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3083'. [ 539.582231][T17519] vxcan1: tx drop: invalid da for name 0x0002000000000000 [ 539.643430][T17475] chnl_net:caif_netlink_parms(): no params data found [ 539.959744][T17475] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.994110][T17475] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.006934][T17475] bridge_slave_0: entered allmulticast mode [ 540.044274][T17475] bridge_slave_0: entered promiscuous mode [ 540.077647][T17528] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3086'. [ 540.167923][T17531] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 540.234610][T17475] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.255768][T17475] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.276904][T17475] bridge_slave_1: entered allmulticast mode [ 540.296040][T17475] bridge_slave_1: entered promiscuous mode [ 540.381898][ T6988] hsr_slave_0: left promiscuous mode [ 540.395509][ T6988] hsr_slave_1: left promiscuous mode [ 540.435349][T17538] netlink: 'syz.3.3088': attribute type 1 has an invalid length. [ 540.453862][ T6988] pim6reg (unregistering): left allmulticast mode [ 540.486613][T17539] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3088'. [ 540.809853][ T6988] team0 (unregistering): Port device team_slave_1 removed [ 540.867889][ T6988] team0 (unregistering): Port device team_slave_0 removed [ 541.265542][T17530] vxcan1 speed is unknown, defaulting to 1000 [ 541.313705][T17538] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 541.333203][T17475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.369468][T17475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.391935][T16974] Bluetooth: hci3: command tx timeout [ 541.458098][T17475] team0: Port device team_slave_0 added [ 541.487418][T17475] team0: Port device team_slave_1 added [ 541.586404][T17475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.606808][T17475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.675803][T17475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.716290][T17475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.735462][T17475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.765500][T17475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.805099][T17530] wg1 speed is unknown, defaulting to 1000 [ 541.818857][T17548] vxcan1 speed is unknown, defaulting to 1000 [ 541.828804][ T6988] IPVS: stop unused estimator thread 0... [ 541.864492][T17475] hsr_slave_0: entered promiscuous mode [ 541.876103][T17475] hsr_slave_1: entered promiscuous mode [ 541.891261][T17475] debugfs: 'hsr0' already exists in 'hsr' [ 541.898006][T17475] Cannot create hsr debugfs directory [ 541.938257][T17558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3092'. [ 542.244577][T17548] wg1 speed is unknown, defaulting to 1000 [ 542.282825][T17567] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3095'. [ 542.333670][T17564] netlink: 34 bytes leftover after parsing attributes in process `syz.2.3096'. [ 542.489417][T17567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3095'. [ 543.056551][T17475] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 543.068070][T17475] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 543.097201][T17475] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 543.137693][T17475] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 543.242914][T17600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3104'. [ 543.302710][T17600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3104'. [ 543.347347][T17600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3104'. [ 543.471070][T16974] Bluetooth: hci3: command tx timeout [ 543.599630][T17475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.720930][T17475] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.743702][ T6984] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.752162][ T6984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.785994][ T1055] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.793363][ T1055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.035096][T17638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3110'. [ 544.042626][T17637] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3111'. [ 544.067597][T17637] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3111'. [ 544.268998][T17648] 8021q: adding VLAN 0 to HW filter on device bond1 [ 544.375861][T17475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.468695][T17656] netlink: 'syz.1.3115': attribute type 29 has an invalid length. [ 544.538517][T17475] veth0_vlan: entered promiscuous mode [ 544.589287][T17475] veth1_vlan: entered promiscuous mode [ 544.796387][T17661] netlink: 'syz.4.3116': attribute type 1 has an invalid length. [ 544.863892][T17663] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 544.948355][T17665] bridge0: entered promiscuous mode [ 544.955235][T17475] veth0_macvtap: entered promiscuous mode [ 545.101958][T17664] bridge0: left promiscuous mode [ 545.119251][T17475] veth1_macvtap: entered promiscuous mode [ 545.182590][T17475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.214733][T17670] netlink: 'syz.3.3118': attribute type 1 has an invalid length. [ 545.218318][T17475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.277120][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.305873][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.343615][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.383840][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.577801][ T6988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.620665][ T6988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.729371][ T6988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.743501][ T6988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.883525][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 546.894714][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 546.905548][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 546.916684][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 546.925683][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 547.036068][T17724] tipc: Enabling of bearer rejected, failed to enable media [ 547.110075][T17717] vxcan1 speed is unknown, defaulting to 1000 [ 547.166573][ T6000] IPVS: starting estimator thread 0... [ 547.193723][T17715] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 547.271093][T17732] IPVS: using max 27 ests per chain, 64800 per kthread [ 547.400207][T17745] __nla_validate_parse: 7 callbacks suppressed [ 547.400227][T17745] netlink: 3388 bytes leftover after parsing attributes in process `syz.4.3139'. [ 547.521830][T17748] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3140'. [ 547.538561][T17752] syzkaller0: entered promiscuous mode [ 547.545510][T17749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3140'. [ 547.550765][ T981] page_pool_release_retry() stalled pool shutdown: id 78, 1 inflight 121 sec [ 547.564725][T17752] syzkaller0: entered allmulticast mode [ 547.721650][T17722] vxcan1 speed is unknown, defaulting to 1000 [ 547.733470][T17717] wg1 speed is unknown, defaulting to 1000 [ 547.819558][T17752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3141'. [ 548.213255][T17766] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 548.233472][T17766] macsec1: entered promiscuous mode [ 548.249938][T17766] macsec1: entered allmulticast mode [ 548.256180][T17766] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode [ 548.332225][T17722] wg1 speed is unknown, defaulting to 1000 [ 548.338149][T17727] vxcan1 speed is unknown, defaulting to 1000 [ 548.419909][T17717] chnl_net:caif_netlink_parms(): no params data found [ 548.480664][T17779] netlink: 'syz.0.3147': attribute type 3 has an invalid length. [ 548.488712][T17779] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3147'. [ 548.530580][T17779] netlink: 'syz.0.3147': attribute type 3 has an invalid length. [ 548.538435][T17779] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3147'. [ 548.612548][T17781] ip6gre2: entered allmulticast mode [ 548.704401][T17783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3148'. [ 548.821671][T17783] netlink: 'syz.2.3148': attribute type 10 has an invalid length. [ 548.850939][T17783] mac80211_hwsim hwsim40 wlan1: entered promiscuous mode [ 548.859169][T17783] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 548.888648][T17727] wg1 speed is unknown, defaulting to 1000 [ 548.916851][T17717] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.924469][T17717] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.932735][T17717] bridge_slave_0: entered allmulticast mode [ 548.962336][T17717] bridge_slave_0: entered promiscuous mode [ 548.983391][T17717] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.998086][T17717] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.001917][ T5869] Bluetooth: hci2: command tx timeout [ 549.013113][T17717] bridge_slave_1: entered allmulticast mode [ 549.044784][T17717] bridge_slave_1: entered promiscuous mode [ 549.168578][T17717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.191186][T17717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.254863][T17717] team0: Port device team_slave_0 added [ 549.285702][T17717] team0: Port device team_slave_1 added [ 549.535952][T17717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.556271][T17717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.572828][T17802] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3152'. [ 549.585974][T17717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.605957][T17717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.613106][T17717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.641568][T17717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.641851][ T10] IPVS: starting estimator thread 0... [ 549.672216][T17802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3152'. [ 549.691277][T17807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3153'. [ 549.767312][T17807] bridge_slave_1: left allmulticast mode [ 549.775312][T17807] bridge_slave_1: left promiscuous mode [ 549.780636][T17806] IPVS: using max 27 ests per chain, 64800 per kthread [ 549.781623][T17807] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.799328][T17807] bridge_slave_0: left allmulticast mode [ 549.805288][T17807] bridge_slave_0: left promiscuous mode [ 549.812604][T17807] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.901773][T17805] bond_slave_0: mtu less than device minimum [ 549.974425][T17816] Bluetooth: MGMT ver 1.23 [ 549.984854][T17717] hsr_slave_0: entered promiscuous mode [ 550.003577][T17717] hsr_slave_1: entered promiscuous mode [ 550.010645][T17717] debugfs: 'hsr0' already exists in 'hsr' [ 550.017816][T17717] Cannot create hsr debugfs directory [ 551.000279][T17717] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 551.039506][T17717] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 551.062557][T17717] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 551.071367][ T5869] Bluetooth: hci2: command tx timeout [ 551.099808][T17717] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 551.525801][T17849] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.533742][T17849] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.702964][T17849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.723348][T17849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.923751][T17860] dvmrp0: entered allmulticast mode [ 551.929436][ T6988] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.981253][ T6988] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.004537][ T6988] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.024313][ T6988] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.034644][T17863] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 552.159320][T17717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.210617][T17717] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.233818][T17870] xfrm1: entered promiscuous mode [ 552.239017][T17870] xfrm1: entered allmulticast mode [ 552.282606][ T6981] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.289883][ T6981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.347835][ T6984] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.355150][ T6984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.395114][T17874] netlink: 'syz.0.3172': attribute type 1 has an invalid length. [ 552.425030][T17877] bridge0: entered promiscuous mode [ 552.440919][T17877] bridge0: entered allmulticast mode [ 552.701652][T17891] __nla_validate_parse: 161 callbacks suppressed [ 552.701671][T17891] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3177'. [ 553.091167][T17908] vxcan1 speed is unknown, defaulting to 1000 [ 553.154240][ T5869] Bluetooth: hci2: command tx timeout [ 553.269348][T17717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.499714][T17717] veth0_vlan: entered promiscuous mode [ 553.559772][T17717] veth1_vlan: entered promiscuous mode [ 553.616154][T17908] wg1 speed is unknown, defaulting to 1000 [ 553.627923][T17920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3185'. [ 553.644098][T17920] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3185'. [ 553.752317][T17717] veth0_macvtap: entered promiscuous mode [ 553.801155][T17717] veth1_macvtap: entered promiscuous mode [ 553.818483][T17929] netlink: 'syz.2.3189': attribute type 1 has an invalid length. [ 553.847634][T17929] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3189'. [ 553.958413][T17931] vlan3: entered allmulticast mode [ 554.049109][T17924] vxcan1 speed is unknown, defaulting to 1000 [ 554.089336][T17717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.143194][T17717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.243406][ T6981] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.272327][ T1055] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.413191][ T1055] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.422903][ T6984] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.531162][T17945] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3192'. [ 554.601734][T17945] netlink: 308 bytes leftover after parsing attributes in process `syz.4.3192'. [ 554.602012][T17950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3193'. [ 554.634333][ T1055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.650496][ T1055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.709855][ T6981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.719596][ T6981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.754178][T17924] wg1 speed is unknown, defaulting to 1000 [ 555.233047][ T5869] Bluetooth: hci2: command tx timeout [ 555.970245][T17978] syzkaller1: entered promiscuous mode [ 556.011064][T16974] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 556.027690][T16974] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 556.033678][T17978] syzkaller1: entered allmulticast mode [ 556.040885][T16974] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 556.055305][T16974] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 556.063890][T16974] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 556.333771][T17985] syzkaller1: entered promiscuous mode [ 556.339316][T17985] syzkaller1: entered allmulticast mode [ 556.393454][T17987] veth1_to_hsr: entered promiscuous mode [ 556.399450][T17987] macvtap1: entered promiscuous mode [ 556.410620][T17987] macvtap1: entered allmulticast mode [ 556.416163][T17987] veth1_to_hsr: entered allmulticast mode [ 556.473310][T17984] macvtap2: entered promiscuous mode [ 556.478960][T17984] macvtap2: entered allmulticast mode [ 556.579229][T17980] vxcan1 speed is unknown, defaulting to 1000 [ 556.661055][T17995] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3205'. [ 556.691596][T17995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3205'. [ 556.928729][ T6981] tipc: Resetting bearer [ 557.310947][ T5869] Bluetooth: hci2: command tx timeout [ 558.120761][ T5869] Bluetooth: hci0: command tx timeout [ 558.151862][ T6981] tipc: Disabling bearer [ 558.406126][ T6981] bond0 (unregistering): Released all slaves [ 558.419130][ T6981] bond2 (unregistering): Released all slaves [ 558.517758][ T6981] bond3 (unregistering): Released all slaves [ 558.530109][ T6981] bond4 (unregistering): Released all slaves [ 558.629358][ T6981] bond5 (unregistering): Released all slaves [ 558.736452][ T6981] bond6 (unregistering): Released all slaves [ 558.841066][ T6981] bond1 (unregistering): Released all slaves [ 558.857243][T17980] wg1 speed is unknown, defaulting to 1000 [ 558.946433][T18009] vxcan1 speed is unknown, defaulting to 1000 [ 559.054057][ T6981] tipc: Left network mode [ 559.144811][ T6981] IPVS: stopping backup sync thread 9398 ... [ 559.203073][T18036] tipc: Started in network mode [ 559.207975][T18036] tipc: Node identity 4, cluster identity 4711 [ 559.264144][T18036] tipc: Node number set to 4 [ 559.384977][T18043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3212'. [ 559.446053][T18046] rdma_op ffff8881433259f0 conn xmit_rdma 0000000000000000 [ 559.725895][T18009] wg1 speed is unknown, defaulting to 1000 [ 559.725928][T18034] vxcan1 speed is unknown, defaulting to 1000 [ 560.011274][T17980] chnl_net:caif_netlink_parms(): no params data found [ 560.071318][T18038] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 560.191125][ T5869] Bluetooth: hci0: command tx timeout [ 560.265642][T18034] wg1 speed is unknown, defaulting to 1000 [ 560.349066][T18071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3220'. [ 560.506611][T18069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3219'. [ 560.584634][ T30] audit: type=1800 audit(1759365898.155:5): pid=18076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3219" name="blkio.bfq.time_recursive" dev="tmpfs" ino=54 res=0 errno=0 [ 560.642999][T18075] netlink: 'syz.3.3219': attribute type 12 has an invalid length. [ 560.754171][ T6981] hsr_slave_0: left promiscuous mode [ 560.803105][ T6981] pimreg3 (unregistering): left allmulticast mode [ 561.666769][T17980] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.674183][T17980] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.690387][T17980] bridge_slave_0: entered allmulticast mode [ 561.713573][T17980] bridge_slave_0: entered promiscuous mode [ 561.735413][T18078] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 561.787205][T17980] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.835330][T17980] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.858878][T17980] bridge_slave_1: entered allmulticast mode [ 561.870666][T18086] netlink: 'syz.0.3223': attribute type 1 has an invalid length. [ 561.879023][T18086] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3223'. [ 561.893138][T17980] bridge_slave_1: entered promiscuous mode [ 561.933805][T18088] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3223'. [ 562.029831][T18087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3222'. [ 562.126142][T18088] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3223'. [ 562.271557][ T5869] Bluetooth: hci0: command 0x040f tx timeout [ 562.289153][T17980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.388686][T18084] wg1 speed is unknown, defaulting to 1000 [ 562.401745][T17980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.824305][T17980] team0: Port device team_slave_0 added [ 562.850559][T17980] team0: Port device team_slave_1 added [ 562.907287][T18099] tipc: Started in network mode [ 562.917596][T18099] tipc: Node identity 668984585721, cluster identity 4711 [ 562.928788][T18099] tipc: Enabled bearer , priority 0 [ 563.067383][T18101] veth2: entered promiscuous mode [ 563.082225][T18101] veth2: entered allmulticast mode [ 563.149558][T18097] syzkaller0: entered promiscuous mode [ 563.171472][T18097] syzkaller0: entered allmulticast mode [ 563.189969][T18098] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 563.378749][T18104] tipc: Resetting bearer [ 563.410091][T18104] tipc: Disabling bearer [ 563.422192][T17980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.429342][T17980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.455948][T17980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.499833][T17980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.508109][T17980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.535009][T17980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.623435][T18112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3230'. [ 563.649440][T18114] netlink: 'syz.0.3231': attribute type 1 has an invalid length. [ 563.705466][T17980] hsr_slave_0: entered promiscuous mode [ 563.712618][T17980] hsr_slave_1: entered promiscuous mode [ 563.722094][T17980] debugfs: 'hsr0' already exists in 'hsr' [ 563.729504][T17980] Cannot create hsr debugfs directory [ 563.980128][T18125] veth3: entered promiscuous mode [ 563.989835][T18134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3237'. [ 564.024694][T18134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3237'. [ 564.067072][ T6981] IPVS: stop unused estimator thread 0... [ 564.350785][ T5869] Bluetooth: hci0: command 0x040f tx timeout [ 564.698948][T18160] tipc: Started in network mode [ 564.704647][T18160] tipc: Node identity 4, cluster identity 4711 [ 564.718198][T18160] tipc: Node number set to 4 [ 564.727940][T18165] __nla_validate_parse: 1 callbacks suppressed [ 564.727957][T18165] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3242'. [ 564.751771][T18159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3242'. [ 564.769885][T18168] tc_dump_action: action bad kind [ 564.898698][T18171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3245'. [ 565.176928][T18175] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 565.376846][T18187] tipc: Enabling of bearer rejected, failed to enable media [ 565.463380][T17980] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 565.486072][T17980] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 565.499107][T18196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3252'. [ 565.533440][T17980] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 565.578709][T17980] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 565.877639][T17980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.909349][T18213] wg1 speed is unknown, defaulting to 1000 [ 565.969084][T18218] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3257'. [ 565.997649][T17980] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.066208][ T6994] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.073497][ T6994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.146832][ T6981] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.154110][ T6981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.222698][T18226] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3258'. [ 566.432419][ T5869] Bluetooth: hci0: command 0x040f tx timeout [ 566.816365][T18257] netlink: 'syz.2.3265': attribute type 13 has an invalid length. [ 566.841141][T18257] netlink: 'syz.2.3265': attribute type 17 has an invalid length. [ 567.052269][T18257] bond0: left promiscuous mode [ 567.057124][T18257] bond_slave_0: left promiscuous mode [ 567.064287][T18257] bond_slave_1: left promiscuous mode [ 567.070227][T18257] mac80211_hwsim hwsim40 wlan1: left promiscuous mode [ 567.086702][T18257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.100655][T18257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 567.175951][T17980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.213936][T18228] wg1 speed is unknown, defaulting to 1000 [ 567.877213][T18277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 567.884566][T18277] IPv6: NLM_F_CREATE should be set when creating new route [ 567.892914][T18277] IPv6: NLM_F_CREATE should be set when creating new route [ 567.905634][T18262] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 567.918190][T18262] syzkaller1: linktype set to 6 [ 568.112690][ T6988] wlan1: Trigger new scan to find an IBSS to join [ 568.165871][T18293] wg1 speed is unknown, defaulting to 1000 [ 568.269668][T18301] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3274'. [ 568.288541][T18302] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan0, syncid = 0, id = 0 [ 568.299043][T18303] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3273'. [ 568.442465][T18306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3275'. [ 568.595480][T17980] veth0_vlan: entered promiscuous mode [ 568.643180][T17980] veth1_vlan: entered promiscuous mode [ 568.733633][T18318] wg1 speed is unknown, defaulting to 1000 [ 568.771621][T18320] veth1_macvtap: left promiscuous mode [ 568.777181][T18320] macsec0: entered allmulticast mode [ 568.821001][T18323] veth1_macvtap: entered promiscuous mode [ 568.826816][T18323] veth1_macvtap: entered allmulticast mode [ 568.833103][T18323] macsec0: left allmulticast mode [ 568.838310][T18323] veth1_macvtap: left allmulticast mode [ 568.948727][T18320] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3278'. [ 568.991496][T18321] wg1 speed is unknown, defaulting to 1000 [ 569.006291][T17980] veth0_macvtap: entered promiscuous mode [ 569.054935][T17980] veth1_macvtap: entered promiscuous mode [ 569.192747][T17980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.217969][T17980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.296979][ T6990] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.386728][ T6990] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.403799][ T6990] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.450916][ T6990] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.920594][ T6981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.934789][ T6981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.032146][T18356] wg1 speed is unknown, defaulting to 1000 [ 570.173333][ T6988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.199997][ T6988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.209777][T18374] __nla_validate_parse: 1 callbacks suppressed [ 570.209797][T18374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3290'. [ 570.223101][T18372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3289'. [ 570.527668][T18394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3294'. [ 570.608075][T18394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3294'. [ 570.615931][T18397] wg1 speed is unknown, defaulting to 1000 [ 571.239372][T18420] tipc: Enabling of bearer rejected, failed to enable media [ 571.512393][T18425] wg1 speed is unknown, defaulting to 1000 [ 571.878648][T18443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3302'. [ 572.020207][T18449] wg1 speed is unknown, defaulting to 1000 [ 572.087047][T18456] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3305'. [ 572.351207][T16974] Bluetooth: hci0: command 0x040f tx timeout [ 572.487672][T18463] tipc: Enabling of bearer rejected, failed to enable media [ 572.557302][T18476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3309'. [ 572.711719][T18489] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3311'. [ 572.744492][T18489] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3311'. [ 572.794030][T18489] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3311'. [ 572.967942][T18494] wg1 speed is unknown, defaulting to 1000 [ 573.066165][T18491] scsi_nl_rcv_msg: discarding partial skb [ 573.144068][T18510] netlink: 'syz.3.3317': attribute type 10 has an invalid length. [ 573.241710][T18515] pim6reg: entered allmulticast mode [ 573.270512][T18515] netlink: 'syz.1.3319': attribute type 1 has an invalid length. [ 573.307751][T18515] pim6reg: left allmulticast mode [ 573.412050][T18526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.427116][T18526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.454413][T18526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.468013][T18526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.089517][T18565] netlink: 'syz.1.3333': attribute type 6 has an invalid length. [ 574.103709][T18565] netlink: 'syz.1.3333': attribute type 7 has an invalid length. [ 574.112630][T18565] netlink: 'syz.1.3333': attribute type 8 has an invalid length. [ 574.128727][T18565] netlink: 'syz.1.3333': attribute type 15 has an invalid length. [ 574.334057][ T10] IPVS: starting estimator thread 0... [ 574.385800][T18589] netlink: 'syz.0.3340': attribute type 4 has an invalid length. [ 574.405892][T18589] netlink: 'syz.0.3340': attribute type 21 has an invalid length. [ 574.443540][T18587] IPVS: using max 26 ests per chain, 62400 per kthread [ 574.477517][T18589] netlink: 'syz.0.3340': attribute type 1 has an invalid length. [ 574.629488][T18586] wg1 speed is unknown, defaulting to 1000 [ 575.276691][T18620] __nla_validate_parse: 160 callbacks suppressed [ 575.276709][T18620] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3347'. [ 575.318275][T18632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3351'. [ 575.328322][T18632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3351'. [ 575.551215][T18644] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3355'. [ 575.730980][T18653] syz.3.3357: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 575.751791][T18653] CPU: 0 UID: 0 PID: 18653 Comm: syz.3.3357 Not tainted syzkaller #0 PREEMPT(full) [ 575.751821][T18653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 575.751835][T18653] Call Trace: [ 575.751843][T18653] [ 575.751853][T18653] dump_stack_lvl+0x189/0x250 [ 575.751885][T18653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.751908][T18653] ? __pfx__printk+0x10/0x10 [ 575.751959][T18653] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 575.751980][T18653] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 575.752004][T18653] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 575.752030][T18653] warn_alloc+0x214/0x310 [ 575.752065][T18653] ? __pfx_warn_alloc+0x10/0x10 [ 575.752105][T18653] ? __get_vm_area_node+0x28f/0x300 [ 575.752132][T18653] ? xskq_create+0xbf/0x170 [ 575.752156][T18653] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 575.752205][T18653] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 575.752234][T18653] ? __kasan_kmalloc+0x93/0xb0 [ 575.752261][T18653] vmalloc_user_noprof+0xad/0xf0 [ 575.752288][T18653] ? xskq_create+0xbf/0x170 [ 575.752306][T18653] xskq_create+0xbf/0x170 [ 575.752329][T18653] xsk_init_queue+0xb0/0x110 [ 575.752352][T18653] xsk_setsockopt+0x57b/0x8d0 [ 575.752384][T18653] ? __pfx_xsk_setsockopt+0x10/0x10 [ 575.752409][T18653] ? __pfx_aa_sk_perm+0x10/0x10 [ 575.752436][T18653] ? __fget_files+0x2a/0x420 [ 575.752458][T18653] ? aa_sock_opt_perm+0xff/0x1b0 [ 575.752476][T18653] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 575.752492][T18653] ? __pfx_xsk_setsockopt+0x10/0x10 [ 575.752518][T18653] do_sock_setsockopt+0x17c/0x1b0 [ 575.752543][T18653] __x64_sys_setsockopt+0x13f/0x1b0 [ 575.752571][T18653] do_syscall_64+0xfa/0x3b0 [ 575.752590][T18653] ? lockdep_hardirqs_on+0x9c/0x150 [ 575.752608][T18653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.752624][T18653] ? clear_bhb_loop+0x60/0xb0 [ 575.752644][T18653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.752660][T18653] RIP: 0033:0x7f903238eec9 [ 575.752677][T18653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.752692][T18653] RSP: 002b:00007f90331b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 575.752710][T18653] RAX: ffffffffffffffda RBX: 00007f90325e6180 RCX: 00007f903238eec9 [ 575.752723][T18653] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000006 [ 575.752732][T18653] RBP: 00007f9032411f91 R08: 0000000000000004 R09: 0000000000000000 [ 575.752742][T18653] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 575.752753][T18653] R13: 00007f90325e6218 R14: 00007f90325e6180 R15: 00007fff308b5328 [ 575.752780][T18653] [ 575.752794][T18653] Mem-Info: [ 576.022203][T18653] active_anon:4981 inactive_anon:0 isolated_anon:0 [ 576.022203][T18653] active_file:3344 inactive_file:40058 isolated_file:0 [ 576.022203][T18653] unevictable:1018 dirty:187 writeback:0 [ 576.022203][T18653] slab_reclaimable:12554 slab_unreclaimable:144604 [ 576.022203][T18653] mapped:31326 shmem:1630 pagetables:1155 [ 576.022203][T18653] sec_pagetables:0 bounce:0 [ 576.022203][T18653] kernel_misc_reclaimable:0 [ 576.022203][T18653] free:1278914 free_pcp:12786 free_cma:0 [ 576.068425][T18653] Node 0 active_anon:19924kB inactive_anon:0kB active_file:13376kB inactive_file:160036kB unevictable:2536kB isolated(anon):0kB isolated(file):0kB mapped:125304kB dirty:744kB writeback:0kB shmem:4984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13204kB pagetables:4496kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 576.150468][T18653] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 576.218188][T18653] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 576.265721][T18653] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 576.273966][T18653] Node 0 DMA32 free:1196876kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19640kB inactive_anon:0kB active_file:13376kB inactive_file:158232kB unevictable:1720kB writepending:752kB present:3129332kB managed:2559852kB mlocked:184kB bounce:0kB free_pcp:44444kB local_pcp:18360kB free_cma:0kB [ 576.307327][T18653] lowmem_reserve[]: 0 0 1 1 1 [ 576.314351][T18653] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1812kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 576.367027][T18675] sctp: [Deprecated]: syz.0.3360 (pid 18675) Use of int in maxseg socket option. [ 576.367027][T18675] Use struct sctp_assoc_value instead [ 576.397226][T18653] lowmem_reserve[]: 0 0 0 0 0 [ 576.402633][T18653] Node 1 Normal free:3903280kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:7824kB local_pcp:6192kB free_cma:0kB [ 576.442039][T18653] lowmem_reserve[]: 0 0 0 0 0 [ 576.446940][T18653] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 576.462943][T18653] Node 0 DMA32: 1*4kB (E) 1*8kB (M) 68*16kB (UME) 344*32kB (UME) 92*64kB (UME) 118*128kB (UME) 220*256kB (UME) 201*512kB (UM) 117*1024kB (UM) 10*2048kB (UM) 211*4096kB (UM) = 1196876kB [ 576.483366][T18653] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 576.496711][T18653] Node 1 Normal: 178*4kB (UME) 59*8kB (UME) 37*16kB (UME) 212*32kB (UME) 71*64kB (UME) 12*128kB (UME) 4*256kB (UME) 3*512kB (UM) 1*1024kB (M) 1*2048kB (E) 948*4096kB (M) = 3903280kB [ 576.517323][T18653] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 576.527618][T18653] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 576.538473][T18653] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 576.548260][T18653] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 576.560064][T18653] 44775 total pagecache pages [ 576.565019][T18653] 1 pages in swap cache [ 576.569808][T18653] Free swap = 124992kB [ 576.575890][T18653] Total swap = 124996kB [ 576.580207][T18653] 2097051 pages RAM [ 576.584434][T18653] 0 pages HighMem/MovableOnly [ 576.589253][T18653] 424998 pages reserved [ 576.594729][T18653] 0 pages cma reserved [ 576.706919][T18683] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 576.759884][ T5869] Bluetooth: hci0: command 0x040f tx timeout [ 576.818364][T18688] bridge_slave_0: default FDB implementation only supports local addresses [ 576.844525][T18691] bridge_slave_0: default FDB implementation only supports local addresses [ 576.957176][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079c4e800: rx timeout, send abort [ 577.085212][T18702] tipc: Enabling of bearer rejected, failed to enable media [ 577.122619][T18701] tipc: Started in network mode [ 577.127581][T18701] tipc: Node identity fa1cd5076afe, cluster identity 4711 [ 577.144785][T18701] tipc: Enabled bearer , priority 0 [ 577.194006][T18701] Bluetooth: MGMT ver 1.23 [ 577.418466][T18700] tipc: Disabling bearer [ 577.456500][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079c4e400: rx timeout, send abort [ 577.466564][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079c4e800: abort rx timeout. Force session deactivation [ 577.500415][T18730] netlink: 'syz.2.3376': attribute type 1 has an invalid length. [ 577.508464][T18730] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3376'. [ 577.706328][T18736] wg1 speed is unknown, defaulting to 1000 [ 577.893008][T18753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3381'. [ 577.964851][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079c4e400: abort rx timeout. Force session deactivation [ 577.969055][T18754] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3382'. [ 578.160928][T18769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3385'. [ 578.240287][T18776] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 578.253928][T18778] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 578.346655][T18769] bridge_slave_1: left allmulticast mode [ 578.376206][T18769] bridge_slave_1: left promiscuous mode [ 578.391018][T18769] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.423387][T18769] bridge_slave_0: left allmulticast mode [ 578.439428][T18769] bridge_slave_0: left promiscuous mode [ 578.452301][T18769] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.513840][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 578.560391][T18793] netlink: 'syz.4.3389': attribute type 3 has an invalid length. [ 578.574873][T18793] netlink: 'syz.4.3389': attribute type 1 has an invalid length. [ 578.583153][T18793] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3389'. [ 578.593489][T18793] NCSI netlink: No device for ifindex 0 [ 578.790916][T18800] tipc: Started in network mode [ 578.800551][T18800] tipc: Node identity 523497607085, cluster identity 4711 [ 578.842887][T18800] tipc: Enabled bearer , priority 0 [ 578.867905][T18801] syzkaller0: entered promiscuous mode [ 578.881564][T18801] syzkaller0: entered allmulticast mode [ 578.924103][T18803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3394'. [ 578.964085][T18800] tipc: Resetting bearer [ 579.026197][T18798] tipc: Resetting bearer [ 579.122205][T18813] netlink: 'syz.0.3395': attribute type 10 has an invalid length. [ 579.131286][T18798] tipc: Disabling bearer [ 579.194320][T18813] team0: Device ipvlan1 failed to register rx_handler [ 579.294562][T18815] wg1 speed is unknown, defaulting to 1000 [ 579.951995][T18851] dvmrp8: entered allmulticast mode [ 580.556013][T18883] syzkaller0: entered promiscuous mode [ 580.610708][T18883] syzkaller0: entered allmulticast mode [ 580.674320][T18896] netlink: 'syz.1.3412': attribute type 1 has an invalid length. [ 580.901185][T18862] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 581.051336][T18920] __nla_validate_parse: 2 callbacks suppressed [ 581.051358][T18920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3415'. [ 581.186165][T18926] netlink: 620 bytes leftover after parsing attributes in process `syz.0.3416'. [ 582.128248][ T5869] Bluetooth: hci0: command 0x040f tx timeout [ 583.451090][T18934] sch_tbf: peakrate 4294967041 is lower than or equals to rate 9281879958510602641 ! [ 583.745952][T18966] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3422'. [ 584.130704][T18986] netlink: 'syz.0.3432': attribute type 14 has an invalid length. [ 584.229717][T18991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3433'. [ 584.243962][T18988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3431'. [ 584.388948][T18991] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3433'. [ 584.398302][T18995] syzkaller0: entered promiscuous mode [ 584.398329][T18995] syzkaller0: entered allmulticast mode [ 584.445422][T18995] wg1 speed is unknown, defaulting to 1000 [ 584.463836][T18998] netlink: 'syz.4.3435': attribute type 1 has an invalid length. [ 584.537372][T18998] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3435'. [ 584.976395][T19011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3436'. [ 585.167067][T19016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3440'. [ 587.014056][T19009] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 587.262188][T19031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3445'. [ 587.283465][T19029] netlink: 'syz.4.3442': attribute type 10 has an invalid length. [ 587.320771][T19032] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3446'. [ 587.384913][T19029] batman_adv: batadv0: Adding interface: netdevsim0 [ 587.404679][T19029] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.439273][T19029] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 587.709018][T19052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3449'. [ 587.918417][ T6992] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.928329][ T6992] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.959937][ T6992] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 587.988387][ T6992] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 588.475195][T19058] wg1 speed is unknown, defaulting to 1000 [ 588.529275][T19084] bridge0: entered allmulticast mode [ 588.945471][T19104] IPVS: set_ctl: invalid protocol: 98 172.30.0.2:20001 [ 588.958559][T19109] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3464'. [ 589.079700][T19112] ip6gretap0: entered promiscuous mode [ 589.110536][T19112] macsec1: entered allmulticast mode [ 589.115974][T19112] ip6gretap0: entered allmulticast mode [ 589.167411][T19112] ip6gretap0: left allmulticast mode [ 589.173141][T19112] ip6gretap0: left promiscuous mode [ 589.211236][T19117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3465'. [ 589.222163][T19116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3466'. [ 589.269206][T19119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.416145][T19121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3468'. [ 589.517548][T19125] geneve2: entered promiscuous mode [ 589.592989][T19129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3471'. [ 589.616079][T19129] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3471'. [ 590.258373][T19164] netlink: 'syz.1.3479': attribute type 7 has an invalid length. [ 590.266835][T19164] netlink: 'syz.1.3479': attribute type 3 has an invalid length. [ 590.283794][T19164] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3479'. [ 591.418556][T19194] netlink: 'syz.4.3487': attribute type 29 has an invalid length. [ 591.753065][T19225] netlink: 'syz.1.3496': attribute type 13 has an invalid length. [ 591.764372][T19225] netlink: 'syz.1.3496': attribute type 17 has an invalid length. [ 592.046134][T19225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.056667][T19225] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.082986][T19225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 592.191483][T19232] wg1 speed is unknown, defaulting to 1000 [ 592.268004][T19252] tipc: Enabled bearer , priority 0 [ 592.321720][T19252] tipc: Disabling bearer [ 592.502393][T19261] __nla_validate_parse: 1 callbacks suppressed [ 592.502412][T19261] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3504'. [ 592.580144][T19269] syzkaller1: entered promiscuous mode [ 592.585896][T19269] syzkaller1: entered allmulticast mode [ 592.625855][T19269] macvtap1: entered allmulticast mode [ 592.632840][T19269] veth0_macvtap: entered allmulticast mode [ 593.451815][T19276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3509'. [ 593.581233][T19291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3512'. [ 593.717808][T19298] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3512'. [ 594.135430][T19310] wg1 speed is unknown, defaulting to 1000 [ 594.198858][T19318] netlink: 'syz.4.3521': attribute type 29 has an invalid length. [ 594.239426][T19318] netlink: 'syz.4.3521': attribute type 29 has an invalid length. [ 594.271902][T19318] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3521'. [ 594.325263][T19322] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3522'. [ 594.729225][T19346] wg1 speed is unknown, defaulting to 1000 [ 594.951390][T19358] netlink: 'syz.3.3534': attribute type 3 has an invalid length. [ 594.965424][T19358] netlink: 'syz.3.3534': attribute type 3 has an invalid length. [ 595.082173][T19371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3538'. [ 595.092506][T19371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3538'. [ 595.301490][T19378] sctp: [Deprecated]: syz.0.3541 (pid 19378) Use of struct sctp_assoc_value in delayed_ack socket option. [ 595.301490][T19378] Use struct sctp_sack_info instead [ 595.491372][T19394] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3547'. [ 595.516459][T19396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3548'. [ 595.533731][T19394] netlink: 'syz.3.3547': attribute type 8 has an invalid length. [ 596.503372][T19438] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 596.524501][T19449] team0: No ports can be present during mode change [ 596.755151][T19468] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20000 [ 597.434384][T19501] wg1 speed is unknown, defaulting to 1000 [ 597.606052][T19515] nbd: nbd3 already in use [ 597.639376][T19515] nbd: must specify an index to disconnect [ 597.795846][T19530] __nla_validate_parse: 26 callbacks suppressed [ 597.795866][T19530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3583'. [ 597.827433][T19532] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3585'. [ 597.950185][T19523] wg1 speed is unknown, defaulting to 1000 [ 598.422986][T19521] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 598.495463][T19561] xt_l2tp: missing protocol rule (udp|l2tpip) [ 598.562381][T19566] bond1: entered promiscuous mode [ 598.568937][T19566] bond1: entered allmulticast mode [ 598.575659][T19566] 8021q: adding VLAN 0 to HW filter on device bond1 [ 598.583935][T19560] wg1 speed is unknown, defaulting to 1000 [ 599.275270][T19581] netlink: 'syz.1.3596': attribute type 1 has an invalid length. [ 599.292318][T19581] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3596'. [ 599.785843][T19585] wg1 speed is unknown, defaulting to 1000 [ 599.792327][ T5869] Bluetooth: hci4: command 0x0401 tx timeout [ 600.556944][T19619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3602'. [ 600.808879][T19628] macsec1: entered promiscuous mode [ 600.851731][T19628] mac80211_hwsim hwsim37 wlan1: entered promiscuous mode [ 600.937440][T19628] mac80211_hwsim hwsim37 wlan1: left promiscuous mode [ 601.021499][T19622] wg1 speed is unknown, defaulting to 1000 [ 601.026769][T19643] IPv6: sit1: Disabled Multicast RS [ 601.041882][T19644] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3612'. [ 601.063194][T19648] sock: sock_timestamping_bind_phc: sock not bind to device [ 601.099932][T19647] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.127542][T19647] batadv_slave_0: entered promiscuous mode [ 601.281223][T19658] wg1 speed is unknown, defaulting to 1000 [ 601.769674][T19676] syzkaller1: entered promiscuous mode [ 601.775471][T19676] syzkaller1: entered allmulticast mode [ 601.836818][T19683] 8021q: VLANs not supported on wg2 [ 601.858398][T19676] wg1 speed is unknown, defaulting to 1000 [ 602.179374][T19695] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3625'. [ 602.193038][T19695] netem: unknown loss type 4 [ 602.209016][T19695] netem: change failed [ 602.332567][T19703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3627'. [ 602.513957][T19706] netlink: 'syz.0.3628': attribute type 1 has an invalid length. [ 602.532540][T19708] wg1 speed is unknown, defaulting to 1000 [ 602.533479][T19706] netlink: 'syz.0.3628': attribute type 11 has an invalid length. [ 602.587514][T19706] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3628'. [ 603.145272][T19737] tun0: tun_chr_ioctl cmd 1074812117 [ 603.431447][T19744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3639'. [ 603.524429][T19749] tipc: Enabled bearer , priority 0 [ 603.533010][T19749] syzkaller0: entered promiscuous mode [ 603.538576][T19749] syzkaller0: entered allmulticast mode [ 603.621125][T19750] wg1 speed is unknown, defaulting to 1000 [ 603.636851][T19754] netlink: 'syz.0.3643': attribute type 11 has an invalid length. [ 603.661369][T19754] netlink: 'syz.0.3643': attribute type 11 has an invalid length. [ 603.693133][T19754] netlink: 'syz.0.3643': attribute type 11 has an invalid length. [ 603.713406][T19754] netlink: 'syz.0.3643': attribute type 11 has an invalid length. [ 603.751371][T19754] netlink: 'syz.0.3643': attribute type 11 has an invalid length. [ 603.784772][T19754] netlink: 'syz.0.3643': attribute type 11 has an invalid length. [ 603.822655][T19754] netlink: 'syz.0.3643': attribute type 11 has an invalid length. [ 603.861024][T19754] netlink: 'syz.0.3643': attribute type 11 has an invalid length. [ 603.902048][T19748] tipc: Resetting bearer [ 603.916683][T19754] netlink: 'syz.0.3643': attribute type 11 has an invalid length. [ 603.955971][T19754] netlink: 'syz.0.3643': attribute type 11 has an invalid length. [ 604.006711][T19748] tipc: Disabling bearer [ 604.333605][T19774] veth3: entered promiscuous mode [ 604.855985][T19777] wg1 speed is unknown, defaulting to 1000 [ 605.268202][T19815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3656'. [ 605.284163][T19813] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3655'. [ 605.363457][T19813] block nbd0: reconnected socket [ 605.368492][T19813] nbd: socks must be embedded in a SOCK_ITEM attr [ 605.399946][T19821] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3657'. [ 605.490036][T19813] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3655'. [ 605.554034][T19821] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3657'. [ 605.582264][ T5869] block nbd0: Receive control failed (result -32) [ 605.867637][T19827] ip6erspan0: entered allmulticast mode [ 607.121816][T19836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3661'. [ 607.128311][T19837] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3661'. [ 607.198247][ T13] bond7 (unregistering): (slave bridge8): Releasing active interface [ 607.443736][ T13] bond1 (unregistering): Released all slaves [ 607.462408][ T13] bond2 (unregistering): Released all slaves [ 607.479792][ T13] bond3 (unregistering): Released all slaves [ 607.656717][ T13] bond0 (unregistering): Released all slaves [ 607.797122][ T13] bond4 (unregistering): Released all slaves [ 607.898912][ T13] bond5 (unregistering): Released all slaves [ 608.031337][ T981] page_pool_release_retry() stalled pool shutdown: id 78, 1 inflight 182 sec [ 608.043018][ T13] bond6 (unregistering): Released all slaves [ 608.056137][ T13] bond7 (unregistering): Released all slaves [ 608.204373][ T13] bond8 (unregistering): Released all slaves [ 608.219610][ T13] bond9 (unregistering): Released all slaves [ 608.276654][T19834] wg1 speed is unknown, defaulting to 1000 [ 608.280969][T19840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3662'. [ 608.422786][ T13] tipc: Left network mode [ 608.424546][T19844] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3664'. [ 608.504084][ T13] IPVS: stopping backup sync thread 12424 ... [ 608.816343][T19868] netlink: 'syz.2.3669': attribute type 1 has an invalid length. [ 608.825343][T19868] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3669'. [ 609.147049][T19882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3672'. [ 609.449484][T19898] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 2, id = 0 [ 610.358600][ T13] pim6reg (unregistering): left allmulticast mode [ 610.387252][T19934] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3687'. [ 610.879234][T19950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3690'. [ 610.944474][T19951] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3690'. [ 611.595869][T19965] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 611.677754][T19971] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 611.713545][T19974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3697'. [ 611.725380][T19971] bond1 (unregistering): Released all slaves [ 611.755575][T19974] netlink: 'syz.3.3697': attribute type 2 has an invalid length. [ 611.767712][T19974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3697'. [ 611.801999][ T13] IPVS: stop unused estimator thread 0... [ 612.194372][T19997] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3704'. [ 612.410250][T20005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3706'. [ 612.419580][T20002] vlan2: entered allmulticast mode [ 612.422572][T20005] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 612.437897][T20002] bridge_slave_0: entered allmulticast mode [ 612.535739][T20009] bridge1: entered promiscuous mode [ 612.624676][T20013] netlink: 'syz.2.3710': attribute type 1 has an invalid length. [ 612.641439][T20016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3713'. [ 612.814518][T20031] syzkaller1: entered promiscuous mode [ 612.823930][T20031] syzkaller1: entered allmulticast mode [ 612.893063][T20036] Bluetooth: MGMT ver 1.23 [ 613.017507][ T981] hid-generic 0005:0007:0008.0001: unknown main item tag 0x0 [ 613.039051][ T981] hid-generic 0005:0007:0008.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 613.148459][T20046] lo speed is unknown, defaulting to 1000 [ 613.160163][T20046] lo speed is unknown, defaulting to 1000 [ 613.174136][T20046] lo speed is unknown, defaulting to 1000 [ 613.256651][T20046] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 613.296797][T20046] lo speed is unknown, defaulting to 1000 [ 613.304417][T20046] lo speed is unknown, defaulting to 1000 [ 613.312639][T20046] lo speed is unknown, defaulting to 1000 [ 613.319704][T20046] lo speed is unknown, defaulting to 1000 [ 613.331979][T20046] lo speed is unknown, defaulting to 1000 [ 613.341549][T20046] lo speed is unknown, defaulting to 1000 [ 613.438001][T20064] nbd: nbd2 already in use [ 613.446918][T20064] block nbd2: NBD_DISCONNECT [ 613.454212][T20064] block nbd2: Send disconnect failed -107 [ 613.461497][T20064] block nbd2: Disconnected due to user request. [ 613.467968][T20064] block nbd2: shutting down sockets [ 613.832304][T20074] __nla_validate_parse: 6 callbacks suppressed [ 613.832322][T20074] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3727'. [ 613.868316][T20074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3727'. [ 613.894212][T20074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3727'. [ 613.915838][T20074] netlink: 'syz.3.3727': attribute type 12 has an invalid length. [ 613.944703][T20074] netlink: 'syz.3.3727': attribute type 11 has an invalid length. [ 613.986323][T20084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3729'. [ 614.258647][T20069] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 614.360698][T20103] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 614.492311][T20112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3736'. [ 614.507642][T20112] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.562543][T20112] bridge_slave_1 (unregistering): left allmulticast mode [ 614.569785][T20112] bridge_slave_1 (unregistering): left promiscuous mode [ 614.577618][T20112] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.631725][ T5869] Bluetooth: hci4: command 0x0401 tx timeout [ 628.988101][T16974] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 628.996996][T16974] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 629.005129][T16974] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 629.015168][T16974] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 629.023262][T16974] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 629.055123][T20116] lo speed is unknown, defaulting to 1000 [ 629.170426][T20116] chnl_net:caif_netlink_parms(): no params data found [ 629.238006][T20116] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.245489][T20116] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.253038][T20116] bridge_slave_0: entered allmulticast mode [ 629.260017][T20116] bridge_slave_0: entered promiscuous mode [ 629.268315][T20116] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.275799][T20116] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.283255][T20116] bridge_slave_1: entered allmulticast mode [ 629.290963][T20116] bridge_slave_1: entered promiscuous mode [ 629.319661][T20116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.331884][T20116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.362855][T20116] team0: Port device team_slave_0 added [ 629.370525][T20116] team0: Port device team_slave_1 added [ 629.397089][T20116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.404742][T20116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.432071][T20116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.445025][T20116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.452292][T20116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.478800][T20116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.519411][T20116] hsr_slave_0: entered promiscuous mode [ 629.525942][T20116] hsr_slave_1: entered promiscuous mode [ 629.532522][T20116] debugfs: 'hsr0' already exists in 'hsr' [ 629.538254][T20116] Cannot create hsr debugfs directory [ 630.364778][T16974] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 630.374860][T16974] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 630.390650][T16974] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 630.401358][T16974] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 630.409070][T16974] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 630.522833][T20128] lo speed is unknown, defaulting to 1000 [ 630.529148][ T5869] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 630.551067][ T5869] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 630.559263][ T5869] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 630.568867][ T5869] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 630.576744][ T5869] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 630.627913][ T5869] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 630.653776][ T5862] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 630.664076][ T5862] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 630.673311][T20136] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 630.684255][T20136] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 630.685836][T20130] lo speed is unknown, defaulting to 1000 [ 630.692525][T20136] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 630.720609][T20136] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 630.730780][T20136] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 630.738891][T20136] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 630.747535][T20136] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 630.803086][T20132] lo speed is unknown, defaulting to 1000 [ 630.931756][T20133] lo speed is unknown, defaulting to 1000 [ 631.016741][T20130] chnl_net:caif_netlink_parms(): no params data found [ 631.070528][T20136] Bluetooth: hci5: command tx timeout [ 631.122148][T20128] chnl_net:caif_netlink_parms(): no params data found [ 631.201999][T20130] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.209165][T20130] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.216622][T20130] bridge_slave_0: entered allmulticast mode [ 631.223704][T20130] bridge_slave_0: entered promiscuous mode [ 631.248933][T20130] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.256467][T20130] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.263974][T20130] bridge_slave_1: entered allmulticast mode [ 631.271906][T20130] bridge_slave_1: entered promiscuous mode [ 631.388711][T20130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.424871][T20128] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.432460][T20128] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.439633][T20128] bridge_slave_0: entered allmulticast mode [ 631.446931][T20128] bridge_slave_0: entered promiscuous mode [ 631.457543][T20130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.514136][T20128] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.521944][T20128] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.529473][T20128] bridge_slave_1: entered allmulticast mode [ 631.539640][T20128] bridge_slave_1: entered promiscuous mode [ 631.602649][T20130] team0: Port device team_slave_0 added [ 631.619303][T20128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.633852][T20130] team0: Port device team_slave_1 added [ 631.640185][T20132] chnl_net:caif_netlink_parms(): no params data found [ 631.661355][T20128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.729294][T20133] chnl_net:caif_netlink_parms(): no params data found [ 631.768443][T20128] team0: Port device team_slave_0 added [ 631.793588][T20130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.801206][T20130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.827660][T20130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.845653][T20128] team0: Port device team_slave_1 added [ 631.865863][T20130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.872979][T20130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.899410][T20130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.972592][T20128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.979605][T20128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.006881][T20128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.020141][T20128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.027763][T20128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.055866][T20128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.143953][T20130] hsr_slave_0: entered promiscuous mode [ 632.150756][T20130] hsr_slave_1: entered promiscuous mode [ 632.156908][T20130] debugfs: 'hsr0' already exists in 'hsr' [ 632.163025][T20130] Cannot create hsr debugfs directory [ 632.168779][T20133] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.176316][T20133] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.183802][T20133] bridge_slave_0: entered allmulticast mode [ 632.192302][T20133] bridge_slave_0: entered promiscuous mode [ 632.199310][T20132] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.206564][T20132] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.213955][T20132] bridge_slave_0: entered allmulticast mode [ 632.222215][T20132] bridge_slave_0: entered promiscuous mode [ 632.230170][T20132] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.238091][T20132] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.245669][T20132] bridge_slave_1: entered allmulticast mode [ 632.253459][T20132] bridge_slave_1: entered promiscuous mode [ 632.262084][T20133] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.269211][T20133] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.277113][T20133] bridge_slave_1: entered allmulticast mode [ 632.287144][T20133] bridge_slave_1: entered promiscuous mode [ 632.375139][T20132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.403285][T20128] hsr_slave_0: entered promiscuous mode [ 632.409954][T20128] hsr_slave_1: entered promiscuous mode [ 632.416464][T20128] debugfs: 'hsr0' already exists in 'hsr' [ 632.422248][T20128] Cannot create hsr debugfs directory [ 632.437762][T20132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.449653][T20133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.463854][T20133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.511895][T20136] Bluetooth: hci6: command tx timeout [ 632.556042][T20132] team0: Port device team_slave_0 added [ 632.588302][T20132] team0: Port device team_slave_1 added [ 632.594757][T20136] Bluetooth: hci7: command tx timeout [ 632.609535][T20133] team0: Port device team_slave_0 added [ 632.648135][T20133] team0: Port device team_slave_1 added [ 632.666914][T20132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.674864][T20132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.701399][T20132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.739978][T20132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.747134][T20132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.774500][T20136] Bluetooth: hci8: command tx timeout [ 632.780137][T20132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.828974][T20133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.836753][T20133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.837726][T20136] Bluetooth: hci9: command tx timeout [ 632.864192][T20133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.883401][T20133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.891202][T20133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.917992][T20133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.056479][T20132] hsr_slave_0: entered promiscuous mode [ 633.063280][T20132] hsr_slave_1: entered promiscuous mode [ 633.069737][T20132] debugfs: 'hsr0' already exists in 'hsr' [ 633.075879][T20132] Cannot create hsr debugfs directory [ 633.093610][T20133] hsr_slave_0: entered promiscuous mode [ 633.100115][T20133] hsr_slave_1: entered promiscuous mode [ 633.106862][T20133] debugfs: 'hsr0' already exists in 'hsr' [ 633.112785][T20133] Cannot create hsr debugfs directory [ 633.150907][T20136] Bluetooth: hci5: command tx timeout [ 634.590601][T20136] Bluetooth: hci6: command tx timeout [ 634.670758][T20136] Bluetooth: hci7: command tx timeout [ 634.831475][ T5869] Bluetooth: hci8: command tx timeout [ 634.911207][ T5869] Bluetooth: hci9: command tx timeout [ 635.231026][ T5869] Bluetooth: hci5: command tx timeout [ 636.671322][ T5869] Bluetooth: hci6: command tx timeout [ 636.751101][T16974] Bluetooth: hci7: command tx timeout [ 636.911206][T16974] Bluetooth: hci8: command tx timeout [ 636.914800][ T5869] Bluetooth: hci4: command 0x0401 tx timeout [ 636.990695][ T5869] Bluetooth: hci9: command tx timeout [ 637.311249][ T5869] Bluetooth: hci5: command tx timeout [ 638.750964][ T5869] Bluetooth: hci6: command tx timeout [ 638.831258][ T5869] Bluetooth: hci7: command tx timeout [ 638.991042][ T5869] Bluetooth: hci8: command tx timeout [ 639.071249][ T5869] Bluetooth: hci9: command tx timeout [ 652.272155][T16974] Bluetooth: hci1: command 0x0406 tx timeout [ 667.630984][T16974] Bluetooth: hci3: command 0x0406 tx timeout [ 668.351217][ T6000] page_pool_release_retry() stalled pool shutdown: id 78, 1 inflight 242 sec [ 677.871149][T16974] Bluetooth: hci2: command 0x0406 tx timeout [ 689.617311][T16974] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 689.626317][T16974] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 689.636135][T16974] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 689.644273][T16974] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 689.653115][T16974] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 689.682612][T20166] lo speed is unknown, defaulting to 1000 [ 689.804468][T20166] chnl_net:caif_netlink_parms(): no params data found [ 689.882585][T20166] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.892201][T20166] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.899490][T20166] bridge_slave_0: entered allmulticast mode [ 689.913568][T20166] bridge_slave_0: entered promiscuous mode [ 689.923287][T20166] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.930711][T20166] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.937964][T20166] bridge_slave_1: entered allmulticast mode [ 689.947126][T20166] bridge_slave_1: entered promiscuous mode [ 689.999768][T20166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.014955][T20166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.072636][T20166] team0: Port device team_slave_0 added [ 690.082515][T20166] team0: Port device team_slave_1 added [ 690.128958][T20166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.137588][T20166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.164524][T20166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.178112][T20166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.185396][T20166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.212113][T20166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.232902][T16974] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 690.244016][T16974] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 690.253078][T16974] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 690.263278][T16974] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 690.272732][T16974] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 690.294695][T20166] hsr_slave_0: entered promiscuous mode [ 690.302733][T20166] hsr_slave_1: entered promiscuous mode [ 690.309087][T20166] debugfs: 'hsr0' already exists in 'hsr' [ 690.315529][T20166] Cannot create hsr debugfs directory [ 690.369825][T20175] lo speed is unknown, defaulting to 1000 [ 690.604281][T20175] chnl_net:caif_netlink_parms(): no params data found [ 690.683551][T20175] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.692486][T20175] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.699859][T20175] bridge_slave_0: entered allmulticast mode [ 690.707160][T20175] bridge_slave_0: entered promiscuous mode [ 690.724094][T20175] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.732296][T20175] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.741666][T20175] bridge_slave_1: entered allmulticast mode [ 690.749143][T20175] bridge_slave_1: entered promiscuous mode [ 690.787596][T20175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.801586][T20175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.865988][T20175] team0: Port device team_slave_0 added [ 690.875566][T20175] team0: Port device team_slave_1 added [ 691.023955][T20175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.040999][T20175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.100840][T20175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.123875][T20175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.140894][T20175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.170876][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 691.211546][T20175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.376503][T16974] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 691.387607][T16974] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 691.392346][T20175] hsr_slave_0: entered promiscuous mode [ 691.397063][T16974] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 691.409117][T16974] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 691.412519][T20175] hsr_slave_1: entered promiscuous mode [ 691.417705][T16974] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 691.433191][T20175] debugfs: 'hsr0' already exists in 'hsr' [ 691.438959][T20175] Cannot create hsr debugfs directory [ 691.588117][T20186] lo speed is unknown, defaulting to 1000 [ 691.628629][T16974] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 691.639988][T16974] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 691.649358][T16974] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 691.662807][T16974] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 691.671706][T16974] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 691.709797][ T5869] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 691.711147][T20136] Bluetooth: hci10: command tx timeout [ 691.723608][T20136] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 691.733851][T20136] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 691.743370][T20136] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 691.751391][T20136] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 691.821089][T20188] lo speed is unknown, defaulting to 1000 [ 691.857591][T20190] lo speed is unknown, defaulting to 1000 [ 692.059649][T20186] chnl_net:caif_netlink_parms(): no params data found [ 692.304005][T20188] chnl_net:caif_netlink_parms(): no params data found [ 692.351039][T16974] Bluetooth: hci11: command tx timeout [ 692.415481][T20186] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.422905][T20186] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.430155][T20186] bridge_slave_0: entered allmulticast mode [ 692.439316][T20186] bridge_slave_0: entered promiscuous mode [ 692.446865][T20190] chnl_net:caif_netlink_parms(): no params data found [ 692.469176][T20186] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.476788][T20186] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.484385][T20186] bridge_slave_1: entered allmulticast mode [ 692.492455][T20186] bridge_slave_1: entered promiscuous mode [ 692.595251][T20186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.610231][T20188] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.618207][T20188] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.626566][T20188] bridge_slave_0: entered allmulticast mode [ 692.635421][T20188] bridge_slave_0: entered promiscuous mode [ 692.646508][T20186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.662472][T20188] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.669681][T20188] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.677908][T20188] bridge_slave_1: entered allmulticast mode [ 692.686003][T20188] bridge_slave_1: entered promiscuous mode [ 692.764182][T20186] team0: Port device team_slave_0 added [ 692.774600][T20188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.799647][T20186] team0: Port device team_slave_1 added [ 692.808984][T20188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.835924][T20190] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.843462][T20190] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.851709][T20190] bridge_slave_0: entered allmulticast mode [ 692.858864][T20190] bridge_slave_0: entered promiscuous mode [ 692.892133][T20190] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.899351][T20190] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.906991][T20190] bridge_slave_1: entered allmulticast mode [ 692.915437][T20190] bridge_slave_1: entered promiscuous mode [ 692.936764][T20188] team0: Port device team_slave_0 added [ 692.945824][T20188] team0: Port device team_slave_1 added [ 692.971635][T20186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.978598][T20186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.005363][T20186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.040903][T20186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.047905][T20186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.078014][T20186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.104488][T20190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 693.117566][T20190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.135879][T20188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.143505][T20188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.171264][T20188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.209624][T20188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.216948][T20188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.244034][T20188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.271521][T20190] team0: Port device team_slave_0 added [ 693.299882][T20190] team0: Port device team_slave_1 added [ 693.313193][T20186] hsr_slave_0: entered promiscuous mode [ 693.319501][T20186] hsr_slave_1: entered promiscuous mode [ 693.325690][T20186] debugfs: 'hsr0' already exists in 'hsr' [ 693.331883][T20186] Cannot create hsr debugfs directory [ 693.379463][T20190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.386736][T20190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.413723][T20190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.453771][T20190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.461497][T20190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 693.488395][T20190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.522968][T20188] hsr_slave_0: entered promiscuous mode [ 693.529914][T20188] hsr_slave_1: entered promiscuous mode [ 693.537116][T20188] debugfs: 'hsr0' already exists in 'hsr' [ 693.543235][T20188] Cannot create hsr debugfs directory [ 693.551403][T16974] Bluetooth: hci12: command tx timeout [ 693.667670][T20190] hsr_slave_0: entered promiscuous mode [ 693.674867][T20190] hsr_slave_1: entered promiscuous mode [ 693.681884][T20190] debugfs: 'hsr0' already exists in 'hsr' [ 693.687619][T20190] Cannot create hsr debugfs directory [ 693.712048][T16974] Bluetooth: hci13: command tx timeout [ 693.790792][T16974] Bluetooth: hci10: command tx timeout [ 693.801001][T16974] Bluetooth: hci14: command tx timeout [ 694.431524][T16974] Bluetooth: hci11: command tx timeout [ 695.632150][T16974] Bluetooth: hci12: command tx timeout [ 695.791031][T16974] Bluetooth: hci13: command tx timeout [ 695.880915][T16974] Bluetooth: hci14: command tx timeout [ 695.880974][T20136] Bluetooth: hci10: command tx timeout [ 696.511067][T20136] Bluetooth: hci11: command tx timeout [ 697.711511][T20136] Bluetooth: hci12: command tx timeout [ 697.871335][T20136] Bluetooth: hci13: command tx timeout [ 697.950527][T20136] Bluetooth: hci10: command tx timeout [ 697.952188][T16974] Bluetooth: hci14: command tx timeout [ 698.590911][T16974] Bluetooth: hci11: command tx timeout [ 699.790882][T16974] Bluetooth: hci12: command tx timeout [ 699.950822][T16974] Bluetooth: hci13: command tx timeout [ 700.030558][T16974] Bluetooth: hci14: command tx timeout [ 728.671085][ T981] page_pool_release_retry() stalled pool shutdown: id 78, 1 inflight 302 sec [ 749.618229][T20136] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 749.627140][T20136] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 749.636695][T20136] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 749.648647][T20136] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 749.656770][T20136] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 749.689691][T20214] lo speed is unknown, defaulting to 1000 [ 749.810098][T20214] chnl_net:caif_netlink_parms(): no params data found [ 749.882720][T20214] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.889927][T20214] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.897738][T20214] bridge_slave_0: entered allmulticast mode [ 749.905146][T20214] bridge_slave_0: entered promiscuous mode [ 749.913718][T20214] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.921572][T20214] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.928843][T20214] bridge_slave_1: entered allmulticast mode [ 749.936173][T20214] bridge_slave_1: entered promiscuous mode [ 749.968835][T20214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.982237][T20214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.015654][T20214] team0: Port device team_slave_0 added [ 750.024516][T20214] team0: Port device team_slave_1 added [ 750.055826][T20214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 750.063437][T20214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.090802][T20214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.103188][T20214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.110203][T20214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.137049][T20214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.179368][T20214] hsr_slave_0: entered promiscuous mode [ 750.185795][T20214] hsr_slave_1: entered promiscuous mode [ 750.192629][T20214] debugfs: 'hsr0' already exists in 'hsr' [ 750.198407][T20214] Cannot create hsr debugfs directory [ 750.689514][T20136] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 750.702573][T20136] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 750.712798][T20136] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 750.722423][T20136] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 750.732224][T20136] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 750.766498][T20223] lo speed is unknown, defaulting to 1000 [ 750.897774][T20223] chnl_net:caif_netlink_parms(): no params data found [ 750.998321][T20223] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.006848][T20223] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.015299][T20223] bridge_slave_0: entered allmulticast mode [ 751.024707][T20223] bridge_slave_0: entered promiscuous mode [ 751.035591][T20223] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.043796][T20223] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.051745][T20223] bridge_slave_1: entered allmulticast mode [ 751.059823][T20223] bridge_slave_1: entered promiscuous mode [ 751.110599][T20223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.124838][T20223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.174831][T20223] team0: Port device team_slave_0 added [ 751.186319][T20223] team0: Port device team_slave_1 added [ 751.233494][T20223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.241596][T20223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.269087][T20223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.282195][T16974] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 751.284068][T20223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.292377][T16974] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 751.297219][T20223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.306478][T16974] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 751.341033][T20223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.342923][T16974] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 751.361664][T16974] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 751.403780][T20223] hsr_slave_0: entered promiscuous mode [ 751.410221][T20223] hsr_slave_1: entered promiscuous mode [ 751.417086][T20223] debugfs: 'hsr0' already exists in 'hsr' [ 751.423214][T20223] Cannot create hsr debugfs directory [ 751.536690][T20232] lo speed is unknown, defaulting to 1000 [ 751.720847][T20136] Bluetooth: hci15: command tx timeout [ 751.906467][T16974] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 751.918605][T16974] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 751.928326][T16974] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 751.938704][T16974] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 751.948278][T16974] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 752.026371][T20136] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 752.042578][T20136] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 752.053244][T20136] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 752.067763][T20136] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 752.078950][T20136] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 752.123536][T20237] lo speed is unknown, defaulting to 1000 [ 752.123877][T20232] chnl_net:caif_netlink_parms(): no params data found [ 752.219742][T20240] lo speed is unknown, defaulting to 1000 [ 752.326867][T20232] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.334793][T20232] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.342453][T20232] bridge_slave_0: entered allmulticast mode [ 752.350225][T20232] bridge_slave_0: entered promiscuous mode [ 752.365981][T20232] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.374161][T20232] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.382596][T20232] bridge_slave_1: entered allmulticast mode [ 752.391907][T20232] bridge_slave_1: entered promiscuous mode [ 752.452713][T20232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.472680][T20232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.558899][T20232] team0: Port device team_slave_0 added [ 752.587919][T20232] team0: Port device team_slave_1 added [ 752.667983][T20232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.676029][T20232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.702260][T20232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.737733][T20232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.745159][T20232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.752363][T20249] Bluetooth: hci16: command tx timeout [ 752.772302][T20232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.899338][T20232] hsr_slave_0: entered promiscuous mode [ 752.907019][T20232] hsr_slave_1: entered promiscuous mode [ 752.914454][T20232] debugfs: 'hsr0' already exists in 'hsr' [ 752.920573][T20232] Cannot create hsr debugfs directory [ 752.949391][T20237] chnl_net:caif_netlink_parms(): no params data found [ 753.015344][T20240] chnl_net:caif_netlink_parms(): no params data found [ 753.147311][T20237] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.156132][T20237] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.164208][T20237] bridge_slave_0: entered allmulticast mode [ 753.171618][T20237] bridge_slave_0: entered promiscuous mode [ 753.205341][T20237] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.212830][T20237] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.220069][T20237] bridge_slave_1: entered allmulticast mode [ 753.227997][T20237] bridge_slave_1: entered promiscuous mode [ 753.281334][T20240] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.288523][T20240] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.296060][T20240] bridge_slave_0: entered allmulticast mode [ 753.303813][T20240] bridge_slave_0: entered promiscuous mode [ 753.333660][T20240] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.341314][T20240] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.348599][T20240] bridge_slave_1: entered allmulticast mode [ 753.356354][T20240] bridge_slave_1: entered promiscuous mode [ 753.366460][T20237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.400659][T20249] Bluetooth: hci17: command tx timeout [ 753.402342][T20237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.457549][T20240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.475125][T20240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.503941][T20237] team0: Port device team_slave_0 added [ 753.540118][T20237] team0: Port device team_slave_1 added [ 753.564036][T20240] team0: Port device team_slave_0 added [ 753.587839][T20240] team0: Port device team_slave_1 added [ 753.627449][T20237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 753.635199][T20237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.661766][T20237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 753.697126][T20237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 753.704775][T20237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.732132][T20237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.744393][T20240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 753.752105][T20240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.778881][T20240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 753.800590][T20249] Bluetooth: hci15: command tx timeout [ 753.808360][T20240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 753.815689][T20240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.842490][T20240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.905795][T20237] hsr_slave_0: entered promiscuous mode [ 753.912989][T20237] hsr_slave_1: entered promiscuous mode [ 753.919446][T20237] debugfs: 'hsr0' already exists in 'hsr' [ 753.925572][T20237] Cannot create hsr debugfs directory [ 753.971428][T20240] hsr_slave_0: entered promiscuous mode [ 753.978116][T20240] hsr_slave_1: entered promiscuous mode [ 753.985018][T20240] debugfs: 'hsr0' already exists in 'hsr' [ 753.991589][T20240] Cannot create hsr debugfs directory [ 754.030845][T20249] Bluetooth: hci18: command tx timeout [ 754.111607][T20249] Bluetooth: hci19: command tx timeout [ 754.673441][T20249] Bluetooth: hci6: command 0x0406 tx timeout [ 754.679731][T20249] Bluetooth: hci7: command 0x0406 tx timeout [ 754.686478][T20249] Bluetooth: hci5: command 0x0406 tx timeout [ 754.693242][T20248] Bluetooth: hci8: command 0x0406 tx timeout [ 754.694506][T20249] Bluetooth: hci9: command 0x0406 tx timeout [ 754.831043][ T5862] Bluetooth: hci16: command tx timeout [ 755.471047][ T5862] Bluetooth: hci17: command tx timeout [ 755.871156][ T5862] Bluetooth: hci15: command tx timeout [ 756.110859][ T5862] Bluetooth: hci18: command tx timeout [ 756.192046][ T5862] Bluetooth: hci19: command tx timeout [ 756.910687][ T5862] Bluetooth: hci16: command tx timeout [ 757.550601][ T5862] Bluetooth: hci17: command tx timeout [ 757.950758][ T5862] Bluetooth: hci15: command tx timeout [ 758.190913][ T5862] Bluetooth: hci18: command tx timeout [ 758.270674][ T5862] Bluetooth: hci19: command tx timeout [ 758.990743][ T5862] Bluetooth: hci16: command tx timeout [ 759.630931][ T5862] Bluetooth: hci17: command tx timeout [ 760.270860][ T5862] Bluetooth: hci18: command tx timeout [ 760.350921][ T5862] Bluetooth: hci19: command tx timeout [ 776.910960][ T31] INFO: task syz.2.3724:20064 blocked for more than 143 seconds. [ 776.918840][ T31] Not tainted syzkaller #0 [ 776.923913][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 776.932782][ T31] task:syz.2.3724 state:D stack:25096 pid:20064 tgid:20062 ppid:17164 task_flags:0x400140 flags:0x00004004 [ 776.945060][ T31] Call Trace: [ 776.948375][ T31] [ 776.951500][ T31] __schedule+0x1798/0x4cc0 [ 776.956027][ T31] ? validate_chain+0x897/0x2140 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 776.961085][ T31] ? __lock_acquire+0xab9/0xd20 [ 776.966076][ T31] ? __pfx___schedule+0x10/0x10 [ 776.971865][ T31] ? schedule+0x91/0x360 [ 776.976152][ T31] schedule+0x165/0x360 [ 776.980489][ T31] schedule_timeout+0x9a/0x270 [ 776.985284][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 776.991419][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 777.010310][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 777.015577][ T31] ? wait_for_completion+0x267/0x5d0 [ 777.038741][ T31] wait_for_completion+0x2bf/0x5d0 [ 777.044132][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 777.060767][ T31] ? flush_workqueue_prep_pwqs+0x47c/0x4f0 [ 777.066668][ T31] ? check_flush_dependency+0x88/0x400 [ 777.072447][ T31] __flush_workqueue+0x6f7/0x14b0 [ 777.077508][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 777.083562][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 777.088976][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 777.094705][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 777.100806][ T31] ? __wake_up_common_lock+0x190/0x1f0 [ 777.106277][ T31] nbd_disconnect_and_put+0x9e/0x2a0 [ 777.111958][ T31] nbd_genl_disconnect+0x485/0x570 [ 777.117073][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 777.123261][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 777.129630][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 777.135478][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 777.142212][ T31] ? stack_trace_save+0x9c/0xe0 [ 777.147081][ T31] genl_rcv_msg+0x60e/0x790 [ 777.152304][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 777.157406][ T31] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 777.163213][ T31] netlink_rcv_skb+0x208/0x470 [ 777.168063][ T31] ? __lock_acquire+0xab9/0xd20 [ 777.173086][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 777.178174][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 777.184014][ T31] ? down_read+0x1ad/0x2e0 [ 777.188482][ T31] genl_rcv+0x28/0x40 [ 777.192838][ T31] netlink_unicast+0x82c/0x9e0 [ 777.197650][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 777.203283][ T31] ? netlink_sendmsg+0x642/0xb30 [ 777.208238][ T31] ? skb_put+0x11b/0x210 [ 777.212915][ T31] netlink_sendmsg+0x805/0xb30 [ 777.217715][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 777.223283][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 777.228244][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 777.234419][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 777.239746][ T31] __sock_sendmsg+0x219/0x270 [ 777.244987][ T31] ____sys_sendmsg+0x505/0x830 [ 777.249803][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 777.255465][ T31] ? import_iovec+0x74/0xa0 [ 777.260003][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 777.265066][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 777.270368][ T31] ? __fget_files+0x2a/0x420 [ 777.274981][ T31] ? __fget_files+0x3a0/0x420 [ 777.279685][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 777.285139][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 777.291178][ T31] ? rcu_is_watching+0x15/0xb0 [ 777.296000][ T31] ? do_syscall_64+0xbe/0x3b0 [ 777.301093][ T31] do_syscall_64+0xfa/0x3b0 [ 777.305657][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 777.311942][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.318073][ T31] ? clear_bhb_loop+0x60/0xb0 [ 777.323093][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.329007][ T31] RIP: 0033:0x7f93d298eec9 [ 777.333756][ T31] RSP: 002b:00007f93d38d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 777.342607][ T31] RAX: ffffffffffffffda RBX: 00007f93d2be5fa0 RCX: 00007f93d298eec9 [ 777.351014][ T31] RDX: 0000000000000010 RSI: 0000200000000540 RDI: 0000000000000005 [ 777.358981][ T31] RBP: 00007f93d2a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 777.367355][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.375969][ T31] R13: 00007f93d2be6038 R14: 00007f93d2be5fa0 R15: 00007ffdba1da8a8 [ 777.384313][ T31] [ 777.387351][ T31] INFO: task syz.0.3729:20084 blocked for more than 143 seconds. [ 777.395509][ T31] Not tainted syzkaller #0 [ 777.400878][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 777.409592][ T31] task:syz.0.3729 state:D stack:25384 pid:20084 tgid:20081 ppid:17475 task_flags:0x400140 flags:0x00004004 [ 777.421881][ T31] Call Trace: [ 777.425174][ T31] [ 777.428101][ T31] __schedule+0x1798/0x4cc0 [ 777.433041][ T31] ? __lock_acquire+0xab9/0xd20 [ 777.437916][ T31] ? __pfx___schedule+0x10/0x10 [ 777.443137][ T31] ? schedule+0x91/0x360 [ 777.447426][ T31] schedule+0x165/0x360 [ 777.451870][ T31] schedule_preempt_disabled+0x13/0x30 [ 777.457367][ T31] __mutex_lock+0x7e6/0x1350 [ 777.462525][ T31] ? __mutex_lock+0x5bb/0x1350 [ 777.467292][ T31] ? genl_rcv_msg+0x10d/0x790 [ 777.472865][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 777.477942][ T31] ? stack_trace_save+0x9c/0xe0 [ 777.483103][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 777.488529][ T31] ? radix_tree_lookup+0x240/0x290 [ 777.494173][ T31] genl_rcv_msg+0x10d/0x790 [ 777.498713][ T31] ? __lock_acquire+0xab9/0xd20 [ 777.503863][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 777.508910][ T31] netlink_rcv_skb+0x208/0x470 [ 777.514239][ T31] ? __lock_acquire+0xab9/0xd20 [ 777.519136][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 777.524683][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 777.529996][ T31] ? down_read+0x1ad/0x2e0 [ 777.534698][ T31] genl_rcv+0x28/0x40 [ 777.538682][ T31] netlink_unicast+0x82c/0x9e0 [ 777.543764][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 777.549074][ T31] ? netlink_sendmsg+0x642/0xb30 [ 777.555242][ T31] ? skb_put+0x11b/0x210 [ 777.559580][ T31] netlink_sendmsg+0x805/0xb30 [ 777.564676][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 777.569973][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 777.575466][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 777.581646][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 777.587019][ T31] __sock_sendmsg+0x219/0x270 [ 777.592070][ T31] ____sys_sendmsg+0x505/0x830 [ 777.596859][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 777.602463][ T31] ? import_iovec+0x74/0xa0 [ 777.607041][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 777.612177][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 777.617427][ T31] ? __fget_files+0x2a/0x420 [ 777.622388][ T31] ? __fget_files+0x3a0/0x420 [ 777.627132][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 777.632982][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 777.638513][ T31] ? rcu_is_watching+0x15/0xb0 [ 777.643771][ T31] ? trace_sys_enter+0x25/0x100 [ 777.648668][ T31] do_syscall_64+0xfa/0x3b0 [ 777.653474][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 777.658719][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.665152][ T31] ? clear_bhb_loop+0x60/0xb0 [ 777.669901][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.676261][ T31] RIP: 0033:0x7fad26f8eec9 [ 777.680972][ T31] RSP: 002b:00007fad27d3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 777.689380][ T31] RAX: ffffffffffffffda RBX: 00007fad271e5fa0 RCX: 00007fad26f8eec9 [ 777.697407][ T31] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 000000000000000d [ 777.705549][ T31] RBP: 00007fad27011f91 R08: 0000000000000000 R09: 0000000000000000 [ 777.714310][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.722603][ T31] R13: 00007fad271e6038 R14: 00007fad271e5fa0 R15: 00007ffc63b56fa8 [ 777.731383][ T31] [ 777.734448][ T31] INFO: task syz.0.3729:20085 blocked for more than 144 seconds. [ 777.742734][ T31] Not tainted syzkaller #0 [ 777.747706][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 777.756728][ T31] task:syz.0.3729 state:D stack:28360 pid:20085 tgid:20081 ppid:17475 task_flags:0x400040 flags:0x00004004 [ 777.769074][ T31] Call Trace: [ 777.772630][ T31] [ 777.775557][ T31] __schedule+0x1798/0x4cc0 [ 777.780058][ T31] ? __lock_acquire+0xab9/0xd20 [ 777.785188][ T31] ? __pfx___schedule+0x10/0x10 [ 777.790039][ T31] ? schedule+0x91/0x360 [ 777.795581][ T31] schedule+0x165/0x360 [ 777.799771][ T31] schedule_preempt_disabled+0x13/0x30 [ 777.805546][ T31] __mutex_lock+0x7e6/0x1350 [ 777.810130][ T31] ? __mutex_lock+0x5bb/0x1350 [ 777.815154][ T31] ? genl_rcv_msg+0x10d/0x790 [ 777.819840][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 777.825290][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 777.830964][ T31] ? radix_tree_lookup+0x240/0x290 [ 777.836111][ T31] genl_rcv_msg+0x10d/0x790 [ 777.841195][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 777.846252][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 777.851699][ T31] ? __asan_memcpy+0x40/0x70 [ 777.856282][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 777.862013][ T31] netlink_rcv_skb+0x208/0x470 [ 777.866770][ T31] ? __lock_acquire+0xab9/0xd20 [ 777.872321][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 777.877371][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 777.883063][ T31] ? down_read+0x1ad/0x2e0 [ 777.887496][ T31] genl_rcv+0x28/0x40 [ 777.891757][ T31] netlink_unicast+0x82c/0x9e0 [ 777.896517][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 777.902233][ T31] ? netlink_sendmsg+0x642/0xb30 [ 777.907161][ T31] ? skb_put+0x11b/0x210 [ 777.911967][ T31] netlink_sendmsg+0x805/0xb30 [ 777.916735][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 777.922301][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 777.927233][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 777.932976][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 777.938269][ T31] __sock_sendmsg+0x219/0x270 [ 777.943356][ T31] __sys_sendto+0x3bd/0x520 [ 777.947855][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 777.953647][ T31] ? count_memcg_event_mm+0x21/0x260 [ 777.958954][ T31] ? exc_page_fault+0x76/0xf0 [ 777.963965][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 777.969252][ T31] __x64_sys_sendto+0xde/0x100 [ 777.974243][ T31] do_syscall_64+0xfa/0x3b0 [ 777.978741][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 777.983989][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.990072][ T31] ? clear_bhb_loop+0x60/0xb0 [ 777.994766][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.001165][ T31] RIP: 0033:0x7fad26f90d5c [ 778.005591][ T31] RSP: 002b:00007fad251f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 778.014431][ T31] RAX: ffffffffffffffda RBX: 00007fad251f4fc0 RCX: 00007fad26f90d5c [ 778.022734][ T31] RDX: 0000000000000020 RSI: 00007fad251f5010 RDI: 000000000000000f [ 778.031665][ T31] RBP: 0000000000000000 R08: 00007fad251f4f14 R09: 000000000000000c [ 778.039689][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000f [ 778.047982][ T31] R13: 00007fad251f4f68 R14: 00007fad251f5010 R15: 0000000000000000 [ 778.056294][ T31] [ 778.059407][ T31] INFO: task syz.4.3732:20093 blocked for more than 144 seconds. [ 778.070622][ T31] Not tainted syzkaller #0 [ 778.075614][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 778.084540][ T31] task:syz.4.3732 state:D stack:28360 pid:20093 tgid:20092 ppid:17980 task_flags:0x400140 flags:0x00004004 [ 778.096765][ T31] Call Trace: [ 778.100103][ T31] [ 778.103240][ T31] __schedule+0x1798/0x4cc0 [ 778.107784][ T31] ? __lock_acquire+0xab9/0xd20 [ 778.113100][ T31] ? __pfx___schedule+0x10/0x10 [ 778.118062][ T31] ? schedule+0x91/0x360 [ 778.122498][ T31] schedule+0x165/0x360 [ 778.126704][ T31] schedule_preempt_disabled+0x13/0x30 [ 778.132415][ T31] __mutex_lock+0x7e6/0x1350 [ 778.137095][ T31] ? __mutex_lock+0x5bb/0x1350 [ 778.142231][ T31] ? genl_rcv_msg+0x10d/0x790 [ 778.146943][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 778.152024][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 778.157151][ T31] ? radix_tree_lookup+0x240/0x290 [ 778.162486][ T31] genl_rcv_msg+0x10d/0x790 [ 778.167021][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 778.172356][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 778.177410][ T31] ? __asan_memcpy+0x40/0x70 [ 778.182201][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 778.187638][ T31] netlink_rcv_skb+0x208/0x470 [ 778.193445][ T31] ? __lock_acquire+0xab9/0xd20 [ 778.198350][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 778.203826][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 778.209156][ T31] ? down_read+0x1ad/0x2e0 [ 778.213658][ T31] genl_rcv+0x28/0x40 [ 778.217660][ T31] netlink_unicast+0x82c/0x9e0 [ 778.222580][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 778.227892][ T31] ? netlink_sendmsg+0x642/0xb30 [ 778.233259][ T31] ? skb_put+0x11b/0x210 [ 778.237498][ T31] netlink_sendmsg+0x805/0xb30 [ 778.242381][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.247661][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 778.252646][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 778.257951][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.263573][ T31] __sock_sendmsg+0x219/0x270 [ 778.268293][ T31] __sys_sendto+0x3bd/0x520 [ 778.273210][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 778.278273][ T31] ? count_memcg_event_mm+0x21/0x260 [ 778.283703][ T31] ? exc_page_fault+0x76/0xf0 [ 778.288402][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 778.293886][ T31] __x64_sys_sendto+0xde/0x100 [ 778.298649][ T31] do_syscall_64+0xfa/0x3b0 [ 778.303240][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 778.308443][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.314550][ T31] ? clear_bhb_loop+0x60/0xb0 [ 778.319254][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.325451][ T31] RIP: 0033:0x7fd6aab90d5c [ 778.329880][ T31] RSP: 002b:00007fd6aba78ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 778.338447][ T31] RAX: ffffffffffffffda RBX: 00007fd6aba78fc0 RCX: 00007fd6aab90d5c [ 778.347093][ T31] RDX: 0000000000000020 RSI: 00007fd6aba79010 RDI: 0000000000000005 [ 778.356861][ T31] RBP: 0000000000000000 R08: 00007fd6aba78f14 R09: 000000000000000c [ 778.366006][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 778.374434][ T31] R13: 00007fd6aba78f68 R14: 00007fd6aba79010 R15: 0000000000000000 [ 778.382962][ T31] [ 778.386126][ T31] INFO: task syz.1.3735:20108 blocked for more than 144 seconds. [ 778.394997][ T31] Not tainted syzkaller #0 [ 778.399995][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 778.409065][ T31] task:syz.1.3735 state:D stack:26920 pid:20108 tgid:20107 ppid:16973 task_flags:0x400140 flags:0x00004004 [ 778.421528][ T31] Call Trace: [ 778.424835][ T31] [ 778.428152][ T31] __schedule+0x1798/0x4cc0 [ 778.433448][ T31] ? __lock_acquire+0xab9/0xd20 [ 778.438373][ T31] ? __pfx___schedule+0x10/0x10 [ 778.443598][ T31] ? schedule+0x91/0x360 [ 778.447854][ T31] schedule+0x165/0x360 [ 778.452417][ T31] schedule_preempt_disabled+0x13/0x30 [ 778.457884][ T31] __mutex_lock+0x7e6/0x1350 [ 778.462787][ T31] ? __mutex_lock+0x5bb/0x1350 [ 778.467602][ T31] ? genl_rcv_msg+0x10d/0x790 [ 778.472844][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 778.477900][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 778.483482][ T31] ? radix_tree_lookup+0x240/0x290 [ 778.488621][ T31] genl_rcv_msg+0x10d/0x790 [ 778.493423][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 778.498478][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 778.503876][ T31] ? __asan_memcpy+0x40/0x70 [ 778.508481][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 778.514426][ T31] netlink_rcv_skb+0x208/0x470 [ 778.519186][ T31] ? __lock_acquire+0xab9/0xd20 [ 778.524365][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 778.529419][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 778.535140][ T31] ? down_read+0x1ad/0x2e0 [ 778.539563][ T31] genl_rcv+0x28/0x40 [ 778.543969][ T31] netlink_unicast+0x82c/0x9e0 [ 778.548739][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 778.554315][ T31] ? netlink_sendmsg+0x642/0xb30 [ 778.559248][ T31] ? skb_put+0x11b/0x210 [ 778.563792][ T31] netlink_sendmsg+0x805/0xb30 [ 778.568576][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.574068][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 778.579067][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 778.584545][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.589853][ T31] __sock_sendmsg+0x219/0x270 [ 778.594797][ T31] __sys_sendto+0x3bd/0x520 [ 778.599339][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 778.604865][ T31] ? count_memcg_event_mm+0x21/0x260 [ 778.610191][ T31] ? exc_page_fault+0x76/0xf0 [ 778.615236][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 778.621106][ T31] __x64_sys_sendto+0xde/0x100 [ 778.625910][ T31] do_syscall_64+0xfa/0x3b0 [ 778.631185][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 778.636426][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.642869][ T31] ? clear_bhb_loop+0x60/0xb0 [ 778.647579][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.653926][ T31] RIP: 0033:0x7fe217190d5c [ 778.658466][ T31] RSP: 002b:00007fe217f7dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 778.667351][ T31] RAX: ffffffffffffffda RBX: 00007fe217f7dfc0 RCX: 00007fe217190d5c [ 778.675658][ T31] RDX: 0000000000000024 RSI: 00007fe217f7e010 RDI: 0000000000000003 [ 778.683949][ T31] RBP: 0000000000000000 R08: 00007fe217f7df14 R09: 000000000000000c [ 778.692537][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 778.700896][ T31] R13: 00007fe217f7df68 R14: 00007fe217f7e010 R15: 0000000000000000 [ 778.708910][ T31] [ 778.712280][ T31] INFO: task syz.3.3736:20110 blocked for more than 145 seconds. [ 778.720030][ T31] Not tainted syzkaller #0 [ 778.725454][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 778.734474][ T31] task:syz.3.3736 state:D stack:28200 pid:20110 tgid:20109 ppid:17717 task_flags:0x400140 flags:0x00004004 [ 778.746854][ T31] Call Trace: [ 778.750173][ T31] [ 778.754082][ T31] __schedule+0x1798/0x4cc0 [ 778.758656][ T31] ? __lock_acquire+0xab9/0xd20 [ 778.763860][ T31] ? __pfx___schedule+0x10/0x10 [ 778.768769][ T31] ? schedule+0x91/0x360 [ 778.773349][ T31] schedule+0x165/0x360 [ 778.777538][ T31] schedule_preempt_disabled+0x13/0x30 [ 778.783443][ T31] __mutex_lock+0x7e6/0x1350 [ 778.788054][ T31] ? __mutex_lock+0x5bb/0x1350 [ 778.793158][ T31] ? genl_rcv_msg+0x10d/0x790 [ 778.797895][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 778.803456][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 778.808612][ T31] ? radix_tree_lookup+0x240/0x290 [ 778.814166][ T31] genl_rcv_msg+0x10d/0x790 [ 778.818765][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 778.824091][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 778.829130][ T31] ? __asan_memcpy+0x40/0x70 [ 778.834638][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 778.840116][ T31] netlink_rcv_skb+0x208/0x470 [ 778.845209][ T31] ? __lock_acquire+0xab9/0xd20 [ 778.850091][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 778.855276][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 778.861235][ T31] ? down_read+0x1ad/0x2e0 [ 778.865708][ T31] genl_rcv+0x28/0x40 [ 778.869722][ T31] netlink_unicast+0x82c/0x9e0 [ 778.874869][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 778.880199][ T31] ? netlink_sendmsg+0x642/0xb30 [ 778.885202][ T31] ? skb_put+0x11b/0x210 [ 778.889454][ T31] netlink_sendmsg+0x805/0xb30 [ 778.894313][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.899597][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 778.904992][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 778.911069][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 778.916392][ T31] __sock_sendmsg+0x219/0x270 [ 778.921468][ T31] __sys_sendto+0x3bd/0x520 [ 778.925974][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 778.931731][ T31] ? count_memcg_event_mm+0x21/0x260 [ 778.937036][ T31] ? exc_page_fault+0x76/0xf0 [ 778.942286][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 778.947629][ T31] __x64_sys_sendto+0xde/0x100 [ 778.952782][ T31] do_syscall_64+0xfa/0x3b0 [ 778.957330][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 778.962944][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.969014][ T31] ? clear_bhb_loop+0x60/0xb0 [ 778.974224][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.980141][ T31] RIP: 0033:0x7f9032390d5c [ 778.984873][ T31] RSP: 002b:00007f90331f0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 778.993799][ T31] RAX: ffffffffffffffda RBX: 00007f90331f0fc0 RCX: 00007f9032390d5c [ 779.002075][ T31] RDX: 0000000000000020 RSI: 00007f90331f1010 RDI: 0000000000000006 [ 779.010040][ T31] RBP: 0000000000000000 R08: 00007f90331f0f14 R09: 000000000000000c [ 779.018330][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 779.026711][ T31] R13: 00007f90331f0f68 R14: 00007f90331f1010 R15: 0000000000000000 [ 779.035147][ T31] [ 779.038175][ T31] INFO: task syz.3.3736:20114 blocked for more than 145 seconds. [ 779.046430][ T31] Not tainted syzkaller #0 [ 779.052195][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 779.061190][ T31] task:syz.3.3736 state:D stack:28136 pid:20114 tgid:20109 ppid:17717 task_flags:0x400140 flags:0x00004004 [ 779.073786][ T31] Call Trace: [ 779.077090][ T31] [ 779.080012][ T31] __schedule+0x1798/0x4cc0 [ 779.085034][ T31] ? __lock_acquire+0xab9/0xd20 [ 779.089942][ T31] ? __pfx___schedule+0x10/0x10 [ 779.095108][ T31] ? schedule+0x91/0x360 [ 779.099350][ T31] schedule+0x165/0x360 [ 779.103827][ T31] schedule_preempt_disabled+0x13/0x30 [ 779.109302][ T31] __mutex_lock+0x7e6/0x1350 [ 779.114406][ T31] ? __mutex_lock+0x5bb/0x1350 [ 779.119223][ T31] ? genl_rcv_msg+0x10d/0x790 [ 779.124308][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 779.129377][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 779.134813][ T31] ? radix_tree_lookup+0x240/0x290 [ 779.140037][ T31] genl_rcv_msg+0x10d/0x790 [ 779.145163][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 779.150211][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 779.155325][ T31] ? __asan_memcpy+0x40/0x70 [ 779.159992][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 779.166366][ T31] netlink_rcv_skb+0x208/0x470 [ 779.171446][ T31] ? __lock_acquire+0xab9/0xd20 [ 779.176371][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 779.181445][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 779.186737][ T31] ? down_read+0x1ad/0x2e0 [ 779.191242][ T31] genl_rcv+0x28/0x40 [ 779.195223][ T31] netlink_unicast+0x82c/0x9e0 [ 779.199977][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 779.205697][ T31] ? netlink_sendmsg+0x642/0xb30 [ 779.210968][ T31] ? skb_put+0x11b/0x210 [ 779.215213][ T31] netlink_sendmsg+0x805/0xb30 [ 779.219987][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.225811][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 779.231976][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 779.237314][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.243003][ T31] __sock_sendmsg+0x219/0x270 [ 779.247711][ T31] __sys_sendto+0x3bd/0x520 [ 779.252665][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 779.257736][ T31] ? fd_install+0x97/0x540 [ 779.262663][ T31] ? fd_install+0x30d/0x540 [ 779.267292][ T31] __x64_sys_sendto+0xde/0x100 [ 779.272463][ T31] do_syscall_64+0xfa/0x3b0 [ 779.276979][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 779.283005][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.289071][ T31] ? clear_bhb_loop+0x60/0xb0 [ 779.294164][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.300044][ T31] RIP: 0033:0x7f9032390d5c [ 779.304736][ T31] RSP: 002b:00007f903318dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 779.314718][ T31] RAX: ffffffffffffffda RBX: 00007f903318dfc0 RCX: 00007f9032390d5c [ 779.323157][ T31] RDX: 0000000000000020 RSI: 00007f903318e010 RDI: 000000000000000a [ 779.331490][ T31] RBP: 0000000000000000 R08: 00007f903318df14 R09: 000000000000000c [ 779.339464][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a [ 779.347727][ T31] R13: 00007f903318df68 R14: 00007f903318e010 R15: 0000000000000000 [ 779.356355][ T31] [ 779.359423][ T31] INFO: task syz-executor:20116 blocked for more than 145 seconds. [ 779.367750][ T31] Not tainted syzkaller #0 [ 779.372984][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 779.382411][ T31] task:syz-executor state:D stack:22600 pid:20116 tgid:20116 ppid:1 task_flags:0x400140 flags:0x00004004 [ 779.394984][ T31] Call Trace: [ 779.398276][ T31] [ 779.401473][ T31] __schedule+0x1798/0x4cc0 [ 779.405976][ T31] ? __lock_acquire+0xab9/0xd20 [ 779.411252][ T31] ? __lock_acquire+0xab9/0xd20 [ 779.416104][ T31] ? __pfx___schedule+0x10/0x10 [ 779.421258][ T31] ? schedule+0x91/0x360 [ 779.425512][ T31] schedule+0x165/0x360 [ 779.429675][ T31] schedule_preempt_disabled+0x13/0x30 [ 779.435428][ T31] __mutex_lock+0x7e6/0x1350 [ 779.440019][ T31] ? __mutex_lock+0x5bb/0x1350 [ 779.445182][ T31] ? genl_rcv_msg+0x10d/0x790 [ 779.449859][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 779.455168][ T31] ? stack_trace_save+0x9c/0xe0 [ 779.460017][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 779.465515][ T31] ? radix_tree_lookup+0x240/0x290 [ 779.471380][ T31] genl_rcv_msg+0x10d/0x790 [ 779.476032][ T31] ? __lock_acquire+0xab9/0xd20 [ 779.481019][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 779.486078][ T31] netlink_rcv_skb+0x208/0x470 [ 779.491397][ T31] ? __lock_acquire+0xab9/0xd20 [ 779.496348][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 779.501795][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 779.507086][ T31] ? down_read+0x1ad/0x2e0 [ 779.511770][ T31] genl_rcv+0x28/0x40 [ 779.515747][ T31] netlink_unicast+0x82c/0x9e0 [ 779.520987][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 779.526265][ T31] ? netlink_sendmsg+0x642/0xb30 [ 779.531592][ T31] ? skb_put+0x11b/0x210 [ 779.535831][ T31] netlink_sendmsg+0x805/0xb30 [ 779.540876][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.546165][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 779.551792][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 779.557108][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.562881][ T31] __sock_sendmsg+0x219/0x270 [ 779.567576][ T31] __sys_sendto+0x3bd/0x520 [ 779.572371][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 779.577446][ T31] ? fd_install+0x97/0x540 [ 779.582401][ T31] ? fd_install+0x30d/0x540 [ 779.586937][ T31] __x64_sys_sendto+0xde/0x100 [ 779.592242][ T31] do_syscall_64+0xfa/0x3b0 [ 779.596779][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 779.602510][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.608620][ T31] ? clear_bhb_loop+0x60/0xb0 [ 779.613613][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.619510][ T31] RIP: 0033:0x7f742a590d5c [ 779.624329][ T31] RSP: 002b:00007fffbd2fc8b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 779.633189][ T31] RAX: ffffffffffffffda RBX: 00007f742b314620 RCX: 00007f742a590d5c [ 779.641478][ T31] RDX: 0000000000000020 RSI: 00007f742b314670 RDI: 0000000000000005 [ 779.649496][ T31] RBP: 0000000000000000 R08: 00007fffbd2fc904 R09: 000000000000000c [ 779.657868][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 779.666130][ T31] R13: 00007fffbd2fc958 R14: 00007f742b314670 R15: 0000000000000000 [ 779.674537][ T31] [ 779.677616][ T31] INFO: task syz-executor:20128 blocked for more than 146 seconds. [ 779.686149][ T31] Not tainted syzkaller #0 [ 779.691562][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 779.700283][ T31] task:syz-executor state:D stack:22600 pid:20128 tgid:20128 ppid:1 task_flags:0x400140 flags:0x00004004 [ 779.713362][ T31] Call Trace: [ 779.716686][ T31] [ 779.719677][ T31] __schedule+0x1798/0x4cc0 [ 779.724661][ T31] ? __lock_acquire+0xab9/0xd20 [ 779.729603][ T31] ? __lock_acquire+0xab9/0xd20 [ 779.734790][ T31] ? __pfx___schedule+0x10/0x10 [ 779.739649][ T31] ? schedule+0x91/0x360 [ 779.744337][ T31] schedule+0x165/0x360 [ 779.748508][ T31] schedule_preempt_disabled+0x13/0x30 [ 779.754317][ T31] __mutex_lock+0x7e6/0x1350 [ 779.758924][ T31] ? __mutex_lock+0x5bb/0x1350 [ 779.763766][ T31] ? genl_rcv_msg+0x10d/0x790 [ 779.768494][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 779.773732][ T31] ? stack_trace_save+0x9c/0xe0 [ 779.778585][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 779.783984][ T31] ? radix_tree_lookup+0x240/0x290 [ 779.789093][ T31] genl_rcv_msg+0x10d/0x790 [ 779.794287][ T31] ? __lock_acquire+0xab9/0xd20 [ 779.799188][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 779.804848][ T31] netlink_rcv_skb+0x208/0x470 [ 779.809641][ T31] ? __lock_acquire+0xab9/0xd20 [ 779.814809][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 779.819847][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 779.825473][ T31] ? down_read+0x1ad/0x2e0 [ 779.829891][ T31] genl_rcv+0x28/0x40 [ 779.834407][ T31] netlink_unicast+0x82c/0x9e0 [ 779.839206][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 779.844830][ T31] ? netlink_sendmsg+0x642/0xb30 [ 779.849777][ T31] ? skb_put+0x11b/0x210 [ 779.854335][ T31] netlink_sendmsg+0x805/0xb30 [ 779.859102][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.864897][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 779.869849][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 779.875558][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.881159][ T31] __sock_sendmsg+0x219/0x270 [ 779.885873][ T31] __sys_sendto+0x3bd/0x520 [ 779.890880][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 779.895963][ T31] ? fd_install+0x97/0x540 [ 779.900941][ T31] ? fd_install+0x30d/0x540 [ 779.905474][ T31] __x64_sys_sendto+0xde/0x100 [ 779.910308][ T31] do_syscall_64+0xfa/0x3b0 [ 779.914853][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 779.920153][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.926894][ T31] ? clear_bhb_loop+0x60/0xb0 [ 779.932271][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.938229][ T31] RIP: 0033:0x7fa9f6790d5c [ 779.942991][ T31] RSP: 002b:00007fffc0dbea20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 779.952197][ T31] RAX: ffffffffffffffda RBX: 00007fa9f7514620 RCX: 00007fa9f6790d5c [ 779.960183][ T31] RDX: 0000000000000020 RSI: 00007fa9f7514670 RDI: 0000000000000005 [ 779.968456][ T31] RBP: 0000000000000000 R08: 00007fffc0dbea74 R09: 000000000000000c [ 779.976794][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 779.985200][ T31] R13: 00007fffc0dbeac8 R14: 00007fa9f7514670 R15: 0000000000000000 [ 779.993556][ T31] [ 779.996622][ T31] INFO: task syz-executor:20130 blocked for more than 146 seconds. [ 780.004823][ T31] Not tainted syzkaller #0 [ 780.009753][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 780.018848][ T31] task:syz-executor state:D stack:22600 pid:20130 tgid:20130 ppid:1 task_flags:0x400140 flags:0x00004004 [ 780.031530][ T31] Call Trace: [ 780.034882][ T31] [ 780.037858][ T31] __schedule+0x1798/0x4cc0 [ 780.043359][ T31] ? __bfs+0x151/0x2a0 [ 780.047521][ T31] ? __lock_acquire+0xab9/0xd20 [ 780.052694][ T31] ? __lock_acquire+0xab9/0xd20 [ 780.057574][ T31] ? __pfx___schedule+0x10/0x10 [ 780.062770][ T31] ? schedule+0x91/0x360 [ 780.067054][ T31] schedule+0x165/0x360 [ 780.071416][ T31] schedule_preempt_disabled+0x13/0x30 [ 780.076895][ T31] __mutex_lock+0x7e6/0x1350 [ 780.081547][ T31] ? __mutex_lock+0x5bb/0x1350 [ 780.086303][ T31] ? genl_rcv_msg+0x10d/0x790 [ 780.091020][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 780.096045][ T31] ? stack_trace_save+0x9c/0xe0 [ 780.101385][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 780.106760][ T31] ? radix_tree_lookup+0x240/0x290 [ 780.112578][ T31] genl_rcv_msg+0x10d/0x790 [ 780.117301][ T31] ? __lock_acquire+0xab9/0xd20 [ 780.122797][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 780.127892][ T31] netlink_rcv_skb+0x208/0x470 [ 780.133104][ T31] ? __lock_acquire+0xab9/0xd20 [ 780.138153][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 780.145139][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 780.151036][ T31] ? down_read+0x1ad/0x2e0 [ 780.155494][ T31] genl_rcv+0x28/0x40 [ 780.159488][ T31] netlink_unicast+0x82c/0x9e0 [ 780.164719][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 780.170042][ T31] ? netlink_sendmsg+0x642/0xb30 [ 780.175293][ T31] ? skb_put+0x11b/0x210 [ 780.179541][ T31] netlink_sendmsg+0x805/0xb30 [ 780.184606][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 780.189938][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 780.195466][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 780.201067][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 780.206353][ T31] __sock_sendmsg+0x219/0x270 [ 780.211323][ T31] __sys_sendto+0x3bd/0x520 [ 780.215826][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 780.221338][ T31] ? fd_install+0x97/0x540 [ 780.225778][ T31] ? fd_install+0x30d/0x540 [ 780.230882][ T31] __x64_sys_sendto+0xde/0x100 [ 780.235708][ T31] do_syscall_64+0xfa/0x3b0 [ 780.240769][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 780.246007][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.252654][ T31] ? clear_bhb_loop+0x60/0xb0 [ 780.257340][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.263592][ T31] RIP: 0033:0x7fc6ebf90d5c [ 780.268014][ T31] RSP: 002b:00007fffe9bd5ee0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 780.276898][ T31] RAX: ffffffffffffffda RBX: 00007fc6ecd14620 RCX: 00007fc6ebf90d5c [ 780.285316][ T31] RDX: 0000000000000020 RSI: 00007fc6ecd14670 RDI: 0000000000000005 [ 780.293660][ T31] RBP: 0000000000000000 R08: 00007fffe9bd5f34 R09: 000000000000000c [ 780.302006][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 780.309993][ T31] R13: 00007fffe9bd5f88 R14: 00007fc6ecd14670 R15: 0000000000000000 [ 780.318471][ T31] [ 780.321815][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 780.331327][ T31] INFO: task syz-executor:20132 blocked for more than 146 seconds. [ 780.339263][ T31] Not tainted syzkaller #0 [ 780.344640][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 780.353948][ T31] task:syz-executor state:D stack:22600 pid:20132 tgid:20132 ppid:1 task_flags:0x400140 flags:0x00004004 [ 780.366231][ T31] Call Trace: [ 780.369537][ T31] [ 780.372830][ T31] __schedule+0x1798/0x4cc0 [ 780.377415][ T31] ? __lock_acquire+0xab9/0xd20 [ 780.382332][ T31] ? __lock_acquire+0xab9/0xd20 [ 780.387188][ T31] ? __pfx___schedule+0x10/0x10 [ 780.392371][ T31] ? schedule+0x91/0x360 [ 780.396768][ T31] schedule+0x165/0x360 [ 780.401386][ T31] schedule_preempt_disabled+0x13/0x30 [ 780.406845][ T31] __mutex_lock+0x7e6/0x1350 [ 780.411716][ T31] ? __mutex_lock+0x5bb/0x1350 [ 780.416469][ T31] ? genl_rcv_msg+0x10d/0x790 [ 780.421423][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 780.426455][ T31] ? stack_trace_save+0x9c/0xe0 [ 780.432224][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 780.437627][ T31] ? radix_tree_lookup+0x240/0x290 [ 780.443142][ T31] genl_rcv_msg+0x10d/0x790 [ 780.447649][ T31] ? __lock_acquire+0xab9/0xd20 [ 780.452793][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 780.457825][ T31] netlink_rcv_skb+0x208/0x470 [ 780.462991][ T31] ? __lock_acquire+0xab9/0xd20 [ 780.467831][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 780.473609][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 780.478942][ T31] ? down_read+0x1ad/0x2e0 [ 780.483653][ T31] genl_rcv+0x28/0x40 [ 780.487639][ T31] netlink_unicast+0x82c/0x9e0 [ 780.492830][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 780.498130][ T31] ? netlink_sendmsg+0x642/0xb30 [ 780.503340][ T31] ? skb_put+0x11b/0x210 [ 780.507580][ T31] netlink_sendmsg+0x805/0xb30 [ 780.513332][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 780.518719][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 780.524190][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 780.529499][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 780.535076][ T31] __sock_sendmsg+0x219/0x270 [ 780.539794][ T31] __sys_sendto+0x3bd/0x520 [ 780.544610][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 780.549674][ T31] ? fd_install+0x97/0x540 [ 780.554503][ T31] ? fd_install+0x30d/0x540 [ 780.559027][ T31] __x64_sys_sendto+0xde/0x100 [ 780.564179][ T31] do_syscall_64+0xfa/0x3b0 [ 780.568698][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 780.574202][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.581096][ T31] ? clear_bhb_loop+0x60/0xb0 [ 780.585830][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.592544][ T31] RIP: 0033:0x7fd355d90d5c [ 780.597056][ T31] RSP: 002b:00007ffe745d2980 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 780.605974][ T31] RAX: ffffffffffffffda RBX: 00007fd356b14620 RCX: 00007fd355d90d5c [ 780.614398][ T31] RDX: 0000000000000020 RSI: 00007fd356b14670 RDI: 0000000000000005 [ 780.622689][ T31] RBP: 0000000000000000 R08: 00007ffe745d29d4 R09: 000000000000000c [ 780.631056][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 780.639019][ T31] R13: 00007ffe745d2a28 R14: 00007fd356b14670 R15: 0000000000000000 [ 780.647394][ T31] [ 780.650539][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 780.659805][ T31] [ 780.659805][ T31] Showing all locks held in the system: [ 780.667572][ T31] 1 lock held by khungtaskd/31: [ 780.672915][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 780.683138][ T31] 2 locks held by getty/5625: [ 780.687858][ T31] #0: ffff888033f060a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 780.698343][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 780.708938][ T31] 2 locks held by kworker/u9:7/5876: [ 780.714639][ T31] #0: ffff8880251c9948 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 780.726191][ T31] #1: ffffc900042ffbc0 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 780.738406][ T31] 2 locks held by kworker/u8:20/6992: [ 780.744110][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 780.758252][ T31] #1: ffffc90002ef7bc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 780.771581][ T31] 3 locks held by syz.2.3724/20064: [ 780.776790][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 780.785273][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 780.794553][ T31] #2: ffff888025135a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_disconnect_and_put+0x2f/0x2a0 [ 780.805484][ T31] 2 locks held by syz.0.3729/20084: [ 780.811214][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 780.819456][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 780.828724][ T31] 2 locks held by syz.0.3729/20085: [ 780.834401][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 780.842880][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 780.852141][ T31] 2 locks held by syz.4.3732/20093: [ 780.857327][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 780.865919][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 780.875154][ T31] 2 locks held by syz.1.3735/20108: [ 780.880874][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 780.889059][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 780.898630][ T31] 2 locks held by syz.3.3736/20110: [ 780.904149][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 780.912836][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 780.922615][ T31] 2 locks held by syz.3.3736/20114: [ 780.927841][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 780.936320][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 780.945585][ T31] 2 locks held by syz-executor/20116: [ 780.951257][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 780.959446][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 780.968437][ T31] 2 locks held by syz-executor/20128: [ 780.973833][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 780.982418][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 780.992080][ T31] 2 locks held by syz-executor/20130: [ 780.997475][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 781.006051][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 781.015554][ T31] 2 locks held by syz-executor/20132: [ 781.021391][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 781.029631][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 781.038916][ T31] 2 locks held by syz-executor/20133: [ 781.044718][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 781.053205][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 781.062477][ T31] 2 locks held by syz-executor/20166: [ 781.067837][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 781.076513][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 781.085789][ T31] 2 locks held by syz-executor/20175: [ 781.091447][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 781.099624][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 781.109000][ T31] 2 locks held by syz-executor/20186: [ 781.114678][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 781.123213][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 781.132755][ T31] 2 locks held by syz-executor/20188: [ 781.138127][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 781.146669][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 781.155957][ T31] 2 locks held by syz-executor/20190: [ 781.161763][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 781.169944][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 781.179204][ T31] 2 locks held by syz-executor/20214: [ 781.184918][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 781.193567][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 781.202834][ T31] 2 locks held by syz-executor/20223: [ 781.208196][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 781.216678][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 781.226061][ T31] 2 locks held by syz-executor/20232: [ 781.232128][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 781.240717][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 781.249736][ T31] 2 locks held by syz-executor/20237: [ 781.255407][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 781.263716][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 781.273086][ T31] 2 locks held by syz-executor/20240: [ 781.278504][ T31] #0: ffffffff8f5a0690 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 781.287116][ T31] #1: ffffffff8f5a04a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 781.296388][ T31] [ 781.298714][ T31] ============================================= [ 781.298714][ T31] [ 781.307472][ T31] NMI backtrace for cpu 1 [ 781.307486][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 781.307508][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 781.307520][ T31] Call Trace: [ 781.307528][ T31] [ 781.307537][ T31] dump_stack_lvl+0x189/0x250 [ 781.307566][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 781.307589][ T31] ? __pfx__printk+0x10/0x10 [ 781.307629][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 781.307647][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 781.307663][ T31] ? __pfx__printk+0x10/0x10 [ 781.307678][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 781.307694][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 781.307710][ T31] watchdog+0xf93/0xfe0 [ 781.307727][ T31] ? watchdog+0x1de/0xfe0 [ 781.307743][ T31] kthread+0x70e/0x8a0 [ 781.307756][ T31] ? __pfx_watchdog+0x10/0x10 [ 781.307768][ T31] ? __pfx_kthread+0x10/0x10 [ 781.307781][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 781.307791][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 781.307801][ T31] ? __pfx_kthread+0x10/0x10 [ 781.307813][ T31] ret_from_fork+0x439/0x7d0 [ 781.307824][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 781.307836][ T31] ? __switch_to_asm+0x39/0x70 [ 781.307848][ T31] ? __switch_to_asm+0x33/0x70 [ 781.307859][ T31] ? __pfx_kthread+0x10/0x10 [ 781.307871][ T31] ret_from_fork_asm+0x1a/0x30 [ 781.307891][ T31] [ 781.307895][ T31] Sending NMI from CPU 1 to CPUs 0: [ 781.459719][ C0] NMI backtrace for cpu 0 [ 781.459737][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 781.459755][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 781.459766][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 781.459789][ C0] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 69 14 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 781.459804][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 781.459819][ C0] RAX: d6be34ab1f39a800 RBX: ffffffff81968528 RCX: d6be34ab1f39a800 [ 781.459833][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b22b6 RDI: ffffffff8be33f80 [ 781.459845][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 781.459857][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa30830 [ 781.459880][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 781.459891][ C0] FS: 0000000000000000(0000) GS:ffff888125c39000(0000) knlGS:0000000000000000 [ 781.459904][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 781.459916][ C0] CR2: 000055bfefcd9000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 781.459931][ C0] Call Trace: [ 781.459939][ C0] [ 781.459946][ C0] default_idle+0x13/0x20 [ 781.459965][ C0] default_idle_call+0x74/0xb0 [ 781.459987][ C0] do_idle+0x1e8/0x510 [ 781.460014][ C0] ? __pfx_do_idle+0x10/0x10 [ 781.460046][ C0] cpu_startup_entry+0x44/0x60 [ 781.460070][ C0] rest_init+0x2de/0x300 [ 781.460092][ C0] start_kernel+0x3a9/0x410 [ 781.460117][ C0] x86_64_start_reservations+0x24/0x30 [ 781.460136][ C0] x86_64_start_kernel+0x143/0x1c0 [ 781.460154][ C0] common_startup_64+0x13e/0x147 [ 781.460182][ C0] [ 781.460886][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 781.460906][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 781.460929][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 781.460940][ T31] Call Trace: [ 781.460949][ T31] [ 781.460958][ T31] dump_stack_lvl+0x99/0x250 [ 781.460982][ T31] ? __asan_memcpy+0x40/0x70 [ 781.461005][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 781.461026][ T31] ? __pfx__printk+0x10/0x10 [ 781.461064][ T31] vpanic+0x281/0x750 [ 781.461088][ T31] ? __pfx_vpanic+0x10/0x10 [ 781.461107][ T31] ? preempt_schedule+0xae/0xc0 [ 781.461130][ T31] ? preempt_schedule_common+0x83/0xd0 [ 781.461156][ T31] panic+0xb9/0xc0 [ 781.461176][ T31] ? __pfx_panic+0x10/0x10 [ 781.461198][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 781.461232][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 781.461264][ T31] watchdog+0xfd2/0xfe0 [ 781.461294][ T31] ? watchdog+0x1de/0xfe0 [ 781.461325][ T31] kthread+0x70e/0x8a0 [ 781.461350][ T31] ? __pfx_watchdog+0x10/0x10 [ 781.461374][ T31] ? __pfx_kthread+0x10/0x10 [ 781.461418][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 781.461438][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 781.461457][ T31] ? __pfx_kthread+0x10/0x10 [ 781.461480][ T31] ret_from_fork+0x439/0x7d0 [ 781.461502][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 781.461526][ T31] ? __switch_to_asm+0x39/0x70 [ 781.461548][ T31] ? __switch_to_asm+0x33/0x70 [ 781.461570][ T31] ? __pfx_kthread+0x10/0x10 [ 781.461593][ T31] ret_from_fork_asm+0x1a/0x30 [ 781.461639][ T31] [ 781.792356][ T31] Kernel Offset: disabled [ 781.796694][ T31] Rebooting in 86400 seconds..