last executing test programs: 20.620966816s ago: executing program 0 (id=5138): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0xfffc, 0x202, 0x6, 0x0, r1}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095", 0x4a}, {&(0x7f0000000600)="e827749185fb5a1aaf6f700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306aeaa0123cc910470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58", 0xa6}], 0x3}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0xffffff8b}], 0x2}, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000010) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x40, 0x0, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6aec728}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xff}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x40081) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x800) 20.377301935s ago: executing program 1 (id=5144): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x10, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000180)=ANY=[@ANYRES32=r0]) 20.28953866s ago: executing program 1 (id=5145): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000240)="5399812dc4a3249ed637e4bcc79445190ef4f5c347ad91565dc0a1fcc6b00f169f6c4f5f86cc5825ae5356f64757fd6a650eb020ab85250fdce25e83e001cc32ef1305d37758bdc2d589f7d4d104fc89a24668d8bb29ec7e8e5627ae0dee3fccd74cbbe090", 0x65}, {&(0x7f00000002c0)="11469f6c04c51f96210551228783157bd582bcbeec359e3c1a3b8137c90dadf6c9b81cf316883d290f0b376da98b6da75e0dbd462045963625fb8919bcd87fb117e7cd9233b07d8678c126ac3a6e87c6fae3cbbc444497f7e45dce68a24dd0b42c3113431d2d8a08437549fb2ec5c98f8b68883ff18547de583446e3eaddd590f3e1d154bdce995da98b2925d3e1d4ea0d354a089d0a2b1d2aa398d42d9e870612af70ae8c8581f08d1003c833476321f2213516d92572d8e428e3c9e1b6dd93ade16d", 0xc3}, {&(0x7f00000003c0)="585b642788e7843b752018951d72c8a4dabc8b7f00007f5fc18646fbaaeadbb4b38685de7719dd67b1c7e02fa6ff842811e7c84ab7111aafdfa6dd183f9830c6abd233785bab8748d837bbbb927844dd7b013d642bceec12d56cd0fb2c5d519c263d4ba3a6e3aef716f27ea4ebad330e7ce49ef7737db0e9754fdc", 0x7b}, {&(0x7f0000000540)="230ece5a87dcac2d68b620bc572afd7a1d4904b6e73fe500bd271e448bf0003977f384b15640d8ef4c3a0c7e584bdd17407dd40f33710a6fcb2dbb6dc0c567a3ab55336f625a39ab9e6cb4d4dee3d2a5087f41180020485e09c518f25cc3b1a1dae821c4dbf33cc5fa3c73cb739232825f61a99a05c697b400485796", 0x7c}, {&(0x7f00000005c0)="3b8572a9fb078dc6da693fc992c1c0aa99809e90485633aa214e59e3784e4bbbcf425cb0070d4f3aeac8573e09a1ff38b163e51a071f060c3bbc020587ffc4eb6d93c94220dbbd0dfebeab053c677f1405483fdd4b3f83d7", 0x58}, {&(0x7f0000000640)="6d878b11b2dacf4247e10fed85d7541222b24f2e7f0d5e1ecf165151761e3b6bb9ec7c7579bcb22f971f2a07cf2fa69d6704a50388306b63daa6a742bd3d9f267a3102f696023f3de025bc39626d83d2a2f4c647aeed6e16309eedd778a1fdf931d536753ff4a07da6e41a6adeb4fa38d5197b7d0c88e9428b596aeb73f5841e1dcbbbab7506558506b9d926cd83cc918b12d5277ff5e671e00621aa5cdf12caf0a0fc87d650b0ea69ec104fc2c67acad7e2ffa5d549c0cd5102304d71b1b83fd0bd749314676819fb39d37f587d032244f1ae985459d96e7adaaba6246888", 0xdf}, {&(0x7f0000000740)="b811aec537e4d5a71722ce3f822024f7a934dbc49205a22749bf87efb59b3fb31ed55cf081a09a4173c76b5c1eedff861ca9837a7eaafed26010ee0437159969adfa185ac112a454f5c86a5485ed33991b", 0x51}, {&(0x7f00000007c0)="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", 0xfd}], 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r3, @ANYBLOB="04"], 0xc4}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x27, 0x3, 0x0) r8 = socket$unix(0x1, 0xa66e1400ab3c6015, 0x0) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000440)={0x0, 0xffffffc1, 0x9, 0x7}, &(0x7f0000000940)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000000c40)={r10, @in={{0x2, 0x4e20, @local}}, [0x6, 0x0, 0x9, 0x100, 0x2, 0x8000000000000000, 0xfffffffffffffffe, 0x4, 0xb10, 0x5, 0x3, 0x121, 0x8, 0x40, 0xfffffffffffffa9d]}, &(0x7f0000000980)=0x100) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x80, 0x1, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r12) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r13 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r13, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r13, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r11, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}, {&(0x7f0000000800)="258d6ac381562407cea4d3e5092130c7e922ab9a89bcd856d7f9459fdd10974c51c97e41b980bccc094742796e60ec164f9a91f87da52f71393b2c6d408bdbd8973f8aa5fcad81a8aadebd14adb648485a39ca8a3aac7c3e5537c7d992deaa05b9f2b4642ec73aea7a143bed8469bc2e04d59776e2931b7fe131a2c3cbdc7442415511507cdeec64d381cbf50c08a888c0aedd71e26ba6679daaa11c6ef2956e1212e26638b4587a53d43768a2b4af6af7d23f39537113e06f36c779cd07098435e405d0d140e0c533bd337bfbef60bdba19ca423a6b5056bd53c74a3fc8df316e6822ee9c6ca6dcee234184bfcfa77c63e92aa6", 0xf4}, {&(0x7f00000009c0)="b1435c7b947125b263d85ac30cb7ffc7855292ba72d726851d9fb18d574c4aa8f894cd3602a01f09ba677fa14acb586e07ab13b1a014c9160756617d178a5dbfa122490cc0851b6ca0d5f91e82648608568b1043da588a3c75fd27ebceb994e892e07da952d99bbbcdb5a33c63aa05d3abba5970a9aae7448e356ebfc0bd7944ea9aa53d274367cf71ca1a4f72530e9a11629da0ff33b4d667dff62d", 0x9c}, {&(0x7f0000000ac0)="2bd4c5812005a616b58a605767f6c99ac4038e8661a4ad1fef7ff53a605c0111af3f354bf44a1f38659151648684b12a85fc9859f6aa0eaeb459db0e24616333a4aa01dff64593257b06606b14fed386bd9123ed5a907e565a716479a7409252d80ab3631cea08c6f9b1337a17037dd32aac54e9127f49c321b183592fc9720d9da8eca7c4dc8177b1f9d83e8e68e81f38eead6e4405c11e92aabd8e634bdd88baab2b0c9c15c5047d8fc82c6cdeb8f2f4cf2196602b3e5f256b6a57f5f90a71090b", 0xc2}], 0x5}, 0x4) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000100)={0x8, 0x562, 0x4, 0x50}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r5, 0x25, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r14 = socket$xdp(0x2c, 0x3, 0x0) setsockopt(r14, 0x11b, 0x9, 0x0, 0x0) 19.672487689s ago: executing program 0 (id=5151): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="88010000", @ANYRES16=r4, @ANYBLOB="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"/386], 0x188}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000100001002dbd7000fedbdf2500000000", @ANYRES32=r6, @ANYBLOB="00000000000000003000128008000100736974002400028006000f0002073f01af4552069b230000080014"], 0x50}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@broadcast}, &(0x7f00000000c0)=0xc) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56441, 0x70b928, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xfff2}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x5, 0x80000000, 0x46f, 0xfff, 0x5, 0x200}, [@TCA_NETEM_RATE={0x14, 0x6, {0xff, 0x2, 0x6, 0x401}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(0x3) 19.672010968s ago: executing program 4 (id=5152): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000080), 0x12) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000040), 0x12) syz_emit_ethernet(0x56, &(0x7f0000000280)={@remote, @broadcast, @void, {@canfd={0xd, {{0x4, 0x1}, 0x21, 0x3, 0x0, 0x0, "3f3064153f90f287f248bed639e32a7b00926d6771e47c52616cd0221415bc8e0561c0124f745ea5ea04797a2b31240fa807f4764098bc7d0cd2ab1ee9b3fdce"}}}}, &(0x7f00000001c0)={0x0, 0x3, [0xf7f, 0x841, 0xa5a, 0x9d2]}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000080), 0x12) close(r5) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x84, @rand_addr=0x64010100, 0x4e22, 0x2000003, 'sh\x00', 0x2f, 0x4, 0x76}, 0x2c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0xffff86b6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x5}}, [0x6, 0x0, 0x250, 0x7, 0xd00b, 0x12, 0xca59, 0x6, 0x3, 0x8ef, 0xfc00000000000000, 0x8, 0x4, 0x1003, 0xd3b]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000180)={r6, 0x7, 0xfff7}, 0x8) 19.454615861s ago: executing program 4 (id=5153): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x54, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x401}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendto$inet6(r0, &(0x7f0000000380)="b3", 0x1, 0x20060000, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='dctcp', 0x5) (async) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x54, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x401}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x804) (async) sendto$inet6(r0, &(0x7f0000000380)="b3", 0x1, 0x20060000, 0x0, 0x0) (async) 17.863261234s ago: executing program 1 (id=5156): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f00006fb000/0x4000)=nil, 0x4000, 0x200000a, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x4}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req={0x10, 0x8001, 0xf71b, 0x10ffe}, 0x10) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xc, 0x13012, r0, 0x0) 17.838298551s ago: executing program 4 (id=5157): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=r1, @ANYRES8=r0], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000190001092bbd70000000000002188000ff034a000010000808000100ac1414"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0x31, 0x0, "dc6efbc3b54972ba0604b8e20a587d8607043cff9ba01fb10d4df7171eb926b1343726c9a11ca54306250d2d2002d17c1fb42d00e3cefe6630aa40e9a73a7095657daea8791536fe9c5268be2bdd7a74"}, 0xd8) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 17.542586585s ago: executing program 0 (id=5161): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x810, r0, 0xda6e0000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x80000008, 0x10003}) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000100007020000027ffeffffff057c00000800048004004980"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) 17.4606638s ago: executing program 2 (id=5162): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="03009000"}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x39}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcd) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xffffffffffffff67) ioctl$sock_netdev_private(r1, 0x8924, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000207000000000000001bbf92ed7f8e1ff6559a000000957fda84601cff6718f2be62de29d6cafb6ed4a3f7ee08592800c653f8e831862f889595d2b90c3fa51a77"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x54}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000038c0), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003940)={&(0x7f0000003900)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x200008d0) 17.385304735s ago: executing program 0 (id=5163): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000b040000000000000000020000002400048020000180070001006374000014000280080001400000000c080002400000000f0900010073797a30000000000900020073797a32000000001400000011000100000000795c09000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x18, 0x18, 0x2, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x20040845) 17.236507884s ago: executing program 3 (id=5164): socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8) r1 = socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}}, 0x4) sendmsg$netlink(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x2) (async) listen(r1, 0x2) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) close(0x3) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000000)={&(0x7f00000001c0)=""/209, 0xd1}) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'tunl0\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x7, 0x700, 0x3, 0x4, {{0xb, 0x4, 0x2, 0x18, 0x2c, 0x68, 0x0, 0xb0, 0x29, 0x0, @remote, @remote, {[@timestamp={0x44, 0x8, 0x9, 0x0, 0x8, [0xa]}, @rr={0x7, 0xf, 0x50, [@private=0xa010101, @empty, @broadcast]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@deltclass={0x38, 0x29, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0x8}, {0xfff2, 0x60cf900b36a92384}, {0x0, 0x8}}, [@tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x9, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x20000080) 17.233875787s ago: executing program 2 (id=5165): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0x4000, 0x4c, &(0x7f0000001cc0)="633268f83ca3000000a2029e3815bb2fa117d8326687688b2c969fd7267d546214af00d1ca2524d00f9e4d9555f3ab381b5d44fd6bda8c509e66101d296f10c805252e7c5d48d9814f46db8f07441878734b13270fe47fba418b7358984b9a61c2bbf964a520459fd0d90590b46cf1677d580a26933b6e35aee75996b73a15a25aa8ae2f1f9bc9699a505c0dc4050ab2255fc35f508ccc52f10ac12febf28652fe36f725714868675ca2a7042ab4b26904b2f000589694f69ab0b22a5aec72c5036ce1c8974690045e4ab412a70336b4c65b2dfc8121af4143c2e10a0e5632bcd44e0b000029da424d86f298656822dae2c002e289fbfa6fe0dfb2fd57713a7684dc166c628dc45027ac174c5db54f22e409eb4e94263dbc9919f90f1af3290918b9824c3e0268b300bf69cc2eb3fc58f655439bdbe2b905", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000240)={0x1100, 0x0, 0x4, 0x7fffffffffffffff}) 17.065563398s ago: executing program 1 (id=5166): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fcffff203a4098b605be1800000400"/36, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000950000000000000018400000feffffff480000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f00000016c0)=ANY=[@ANYBLOB="18080200d4ff000000000000ff000015182e1b43", @ANYRES32=r1, @ANYBLOB="0000000010180000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@broadcast}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}]}, 0x138}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000800231e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 17.065311682s ago: executing program 0 (id=5167): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 17.064928901s ago: executing program 3 (id=5168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0xc0, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0x1}, {0xfff2}}, [@TCA_STAB={0x9c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x5e, 0xb, 0x8, 0x0, 0x8, 0x0, 0x3}}, {0xa, 0x2, [0x5b4, 0x14, 0x100]}}, {{0x1c, 0x1, {0xc0, 0x7, 0x5, 0xe09, 0x2, 0x1, 0x0, 0x2}}, {0x8, 0x2, [0x4, 0x7ff]}}, {{0x1c, 0x1, {0x3, 0x7, 0x2f, 0xf7e9, 0x0, 0x0, 0x8, 0x1}}, {0x6, 0x2, [0x8001]}}, {{0x1c, 0x1, {0xb4, 0x0, 0xf4, 0x7, 0x0, 0x74, 0x4, 0x4}}, {0xc, 0x2, [0x4, 0xfffb, 0xff, 0xf33b]}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) splice(r6, &(0x7f0000000180)=0x4, r3, &(0x7f00000001c0)=0x3, 0x7, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 16.999570627s ago: executing program 2 (id=5169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0xd, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x402c880}, 0x80) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="edcaf499"}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, r2, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x20}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x593}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x47}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5c}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x28}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xbf}, @NL80211_ATTR_PMK={0x14, 0xfe, "5390f35f0a9130ae6793d87910a5bbc7"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xcbf}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0xd, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x402c880}, 0x80) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="edcaf499"}]}, 0x1c}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, r2, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x20}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x593}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x47}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5c}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x28}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xbf}, @NL80211_ATTR_PMK={0x14, 0xfe, "5390f35f0a9130ae6793d87910a5bbc7"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xcbf}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) 16.953624422s ago: executing program 1 (id=5170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000520001000000000000fd00000a0000000c000600"], 0x20}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)=0x28) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000240)=@x25, 0x80, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x3}, 0x1) socket$netlink(0x10, 0x3, 0x8) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9, 0x8010, r1, 0xa24c000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_TTL={0x5, 0x2, 0x1f}, @NFTA_OSF_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 16.857819196s ago: executing program 0 (id=5171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14}}, 0xa4}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r4, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x1b}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x884) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @local}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20084084) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f00000005c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r9, 0x29, 0x38, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xeb4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x20000008}, 0x4000010) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)={0xc4, r11, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '-@\x1c+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12c}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0x5, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20040840}, 0x8) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r10, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r12, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x1) 16.832778071s ago: executing program 4 (id=5172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x2}, @val={0x1, 0x4, 0x3, 0x3, 0x7f, 0x5}, @x25={0x1, 0x9, 0xf7, "b88c41222c2019d06efeba4ee4ba0f03631aa4eeb6f0ca87eb1d3b2e5a83d522f91148e962eb9bc3c6a1991656"}}, 0x3e) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) close(0x3) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000feffffff000000000000000071104b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 16.811567136s ago: executing program 2 (id=5173): r0 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f09f057acc54d4077549f4e34e86f469eb08000240000000000900010073797a30000000000900020073797a32000000001400000011000100000000000000000000000a00"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockname$l2tp(r0, &(0x7f0000000180)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) getpeername$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'pim6reg\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x80000001, 0x4, 0x1}}}}]}, 0x44}}, 0x0) 16.698119289s ago: executing program 1 (id=5174): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x800) clock_gettime(0x0, &(0x7f0000003a40)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000039c0)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)=""/236, 0xec}, {&(0x7f0000000200)=""/121, 0x79}], 0x2, &(0x7f00000002c0)=""/203, 0xcb}, 0x5}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000002900)=[{&(0x7f0000000440)=""/220, 0xdc}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/146, 0x92}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/55, 0x37}, {&(0x7f0000002640)=""/139, 0x8b}, {&(0x7f0000002700)=""/58, 0x3a}, {&(0x7f0000002740)=""/246, 0xf6}, {&(0x7f0000002840)=""/93, 0x5d}, {&(0x7f00000028c0)=""/62, 0x3e}], 0xa, &(0x7f00000029c0)=""/4096, 0x1000}, 0x80000000}], 0x2, 0x0, &(0x7f0000003a80)={r1, r2+10000000}) recvmmsg(r3, &(0x7f0000005f40)=[{{&(0x7f0000003ac0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000003b40)=""/75, 0x4b}, {&(0x7f0000003bc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004c00)=""/55, 0x37}, 0x5}, {{&(0x7f0000004c40)=@nfc={0x27, 0x0}, 0x80, &(0x7f0000004f40)=[{&(0x7f0000004cc0)=""/253, 0xfd}, {&(0x7f0000004dc0)=""/43, 0x2b}, {&(0x7f0000004e00)=""/205, 0xcd}, {&(0x7f0000004f00)=""/27, 0x1b}], 0x4, &(0x7f0000004f80)=""/217, 0xd9}, 0x7}, {{&(0x7f0000005080)=@nl, 0x80, &(0x7f00000054c0)=[{&(0x7f0000005100)=""/216, 0xd8}, {&(0x7f0000005200)=""/81, 0x51}, {&(0x7f0000005280)=""/160, 0xa0}, {&(0x7f0000005340)=""/160, 0xa0}, {&(0x7f0000005400)=""/142, 0x8e}], 0x5, &(0x7f0000005540)=""/134, 0x86}}, {{&(0x7f0000005600)=@rc, 0x80, &(0x7f0000005940)=[{&(0x7f0000005680)=""/172, 0xac}, {&(0x7f0000005740)=""/202, 0xca}, {&(0x7f0000005840)=""/50, 0x32}, {&(0x7f0000005880)=""/151, 0x97}], 0x4, &(0x7f0000005980)=""/206, 0xce}, 0x9}, {{&(0x7f0000005a80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005b00)=""/32, 0x20}, {&(0x7f0000005b40)=""/132, 0x84}, {&(0x7f0000005c00)=""/134, 0x86}, {&(0x7f0000005cc0)=""/157, 0x9d}, {&(0x7f0000005d80)=""/254, 0xfe}], 0x5, &(0x7f0000005f00)=""/9, 0x9}, 0x80000001}], 0x5, 0x40000040, &(0x7f0000006080)={0x0, 0x989680}) accept$netrom(r6, &(0x7f00000060c0)={{}, [@rose, @bcast, @remote, @bcast, @null, @default, @rose, @rose]}, &(0x7f0000006140)=0x48) sendmmsg(r6, &(0x7f00000072c0)=[{{&(0x7f0000006180)=@nl=@kern={0x10, 0x0, 0x0, 0x400000}, 0x80, &(0x7f00000065c0)=[{&(0x7f0000006200)="587b763f80fbab0d04b5fc293648a344f2289bd5cf80a1308b161c798e4d34213a2e2e4061e62e73d31cc44409b22e83d101b7e061d86e57fc84cfa91d5803b38546351003e19ee23457b9e33c41a7a144f32399aa163d9f3eab4b34a72e7295c58a3a3e20747d45654df846849d49883bc3510a62f1e37fd24e6fec9737bf5389dc6541ab0e8fa396aff1bd14e80b2339936383cacd4d81618a2df60605794b0996c059b8a7c101e2", 0xa9}, {&(0x7f00000062c0)="31fabc4715bb342bfee515109ca00c5b3d323d625d95d1d9f3acd5afb753282e03075b7d9dadeb32cc69b396b578575bf8c7dc14bfdc3a24d19a0af788d522163fc1d1c0f2803a658b27d2c6715df0c96302fa58fc9cdf885563578e3f4546a35fdb4ce82ff300a8b223767007802435664a17a0d9144a5f57cec56d0889275e47c39974689c9c83dd7868c69c6e27b01d912b26c4aacd882459892c208d7d54d91fa6508f98749dc39a746f616ade0f1b001c33f0f12e7509a02b8bfc1cf1890f0a", 0xc2}, {&(0x7f00000063c0)="82b9e8d3ce198663b4dd4d568aeb67ee5737", 0x12}, {&(0x7f0000006400)="d767c015bcd66c4c79e200f222450ef74082c1f849d6f593d5640e2a62ba620ba6ab7eef66594b4cd202312458396c91ef3867d664e1340e90d969ba93e3f6504d4ab10d7ead4276c1ecbcca1bfacd6c68c1a1b782783b960b1f29fb70b631b09caef34cc35f1cc76bb376510e4caedfbd73e12ef442230546714b79ff7902ab8ad01971", 0x84}, {&(0x7f00000064c0)="4d61aaa9d018d0f3326dd9c0a8575782f1d943a0a9cbf5800c5bc843dc9c9372cdffb26ddd426638bb26be137c2cb56ac095b1b0f9d0d74ea8da1e6f8ba6107545e72894b0b6cf67fff4292a695b9fcbd5c8fecc05d8f5986fa778245e941557be450f5c8cc6fdf6abd1b7a118967fd7432c2d4c40c31bce0241eda328f8e6ff850ebd69a637987c12dcd3eb8fbeda2f70fffe2935022527acda74da7bdc86179c34195831c40dd1a0aae457ca240d87bee2988d6b6278aee9d655855f1ce87f7e97cc9cbac4f5d5dacf209920fa15e502ca4ac9220cc6085d10ff7093749660", 0xe0}], 0x5, &(0x7f0000006640)=[{0x78, 0x103, 0xc4c, "9612744a37abc7f370e09fe91cf0263ddf4c5b2c80a4fd5f18bb277126cdbd2c1eb0bf3f7ba90c7dc8e1242ce9d65b5fdd6f76f18cdc975f34a211419a38945b4ee1bf8ea801140143b2af9436926c773c808832ea5e5bff206f4b7b60540a12709de3c474"}, {0xd0, 0x0, 0x9, "7a18bef8f1ccae8a180edfaef94894fb5f6f5f1e23a7ec1ecbbc18d940c976dd4371b894cae8c4a09337c8dd5bcad915782bacd267372e5bf1063efd6168e497f9d5c18f979dd3c6bf9b1b3cdfb88af88633d0250a86a7cdaefc2ba701485433187adcf41b46543646c7703a0963ac73726ae68623d35f687aac418f3555f667615ee4cb3deb671abe48dfd2f7ba69692a35aac9701547e246292bb1ed9f7b8f1637984399a2711758e3a848764dfe2535cdb9b616bf639a4ead62"}, {0x70, 0x101, 0xfffffff8, "757779e58a83dcaf6112f26bfd987261420e48fbe2955d05fa555bc60158109df5b0f3beb693dd8878b571bdadcb013264610689f189bdfb5a3558731b47b3dc452b3e9f984edbc6c98eac535c5ea2bcc12f9674d7238b96dc06c8"}], 0x1b8}}, {{&(0x7f0000006800)=@l2={0x1f, 0x2, @any, 0x7ff}, 0x80, &(0x7f0000006900)=[{&(0x7f0000006880)="6e55386802da4e5a5f5340821d06965be5306966bc07b06dc2d38d9570936b366614409a73cde2b6cb432db1d1839d787fb3cdbf97c82b7744a82935de61223887b51362014aabf981", 0x49}], 0x1, &(0x7f0000006940)=[{0x20, 0x10c, 0x3ff, "0140108ec798bcb94dd44080065f"}], 0x20}}, {{&(0x7f0000006980)=@nfc={0x27, r5, 0x1, 0x5f63eb25fdebf447}, 0x80, &(0x7f0000006b80)=[{&(0x7f0000006a00)="382ea792357da4cc9a5671dbb538741dcdfb8d2f05b911ff38d48f96217dd489e4fb165045c158acb0b025f29cc68d", 0x2f}, {&(0x7f0000006a40)="b7a1ce5feb6e3b4b8fbc65e820d45ea0b0cdafb695be19da4ba630", 0x1b}, {&(0x7f0000006a80)="b062af8ab8865308325bc35de8c3f31fc4c537b222286b1cca4dea7e542063398518bec32b3754aa1eb075fd7a0f688ca10f62e8d9f51d1e615553ecf5bf33b8bad199bd0decbef84317b4ba293955e9199fdb737881c82bbac55943faab7a15150d882e6e2d5216ea67d49def4f599159f49636750c9c30d97211fa7ef55a016510dd3c17c3d6a5538e885bb65de3ba54e194038b28fb98f1f5acd406d02ae3d49b72d8cdc7b4d7845989a202d116ae980fcbcf46c57d2aedec6c033361e7716a", 0xc1}], 0x3, &(0x7f0000006bc0)=[{0x40, 0x10d, 0x6, "e5b5ac035184966717f6ca76bff6b0e0c5b35bdcb57fba6ff6037520c56dd4e2f0b92be7bb3230e59784b2d4ee01d3be"}, {0x60, 0x10c, 0x5, "742f9aaf407e70dc2ee552839aec745f75bcb638d461a87ea3a17498c4149368b43caf2c8d9c1c46cee31db81887fe56022e4e6aad6ecd1f207e97db9d4bb2cbe96388b84dfc49254278ccf3f2655f"}, {0x48, 0x114, 0x5, "f466a40125d524895c821b7391205139a0a46435378c74e2e6cde2c2c941d4beaf62151813e5bf99670dd20dc864b03acd13b88a72232a"}, {0x10, 0x108, 0x6}], 0xf8}}, {{&(0x7f0000006cc0)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @private=0xa010101}, 0x0, 0x2, 0x2, 0x3}}, 0x80, &(0x7f0000007000)=[{&(0x7f0000006d40)="db7e1896aebf8766e2cbf781a96e", 0xe}, {&(0x7f0000006d80)="cbb6d08578", 0x5}, {&(0x7f0000006dc0)="a8b1f500c1ce45067055e98757d3fe3ba7f968357ede67aa61d10920d4ed04f7c467232c97b01ea5e60a4fe8b59b3ed8bb14573dacebad330552d7b6a8eb8d79b9f2b95a1dc04419da2e4bf21b1716618685ec1804f53aa292eab453ce432cbfd14c47913309cca53509b87bc7", 0x6d}, {&(0x7f0000006e40)="f202857a466e92350354ddbdd9879db26ea788cc6d419f7273dbd63cd7caa66af763cf9c8ae1aa2558e448f12a56e3e420973b0a35314715ec54039141811f82d38a20a4496b66419a91d5c746fa5db3fe2e161e7c23a5947fca5febba524c4cac9e7e6d0d997e5ed9d31a5d9a0daabe128f1c9f97eee498651d49c4816e4eac62095ba1d7a47d9d", 0x88}, {&(0x7f0000006f00)="f49179db4877cf83a9a406b96ab1a0bda0af5b4d1edf817ebdb498529e901257ba9d056c0e06773f2db2a9cb531764046a074658468a186dcc142203dcd0b74e80cd6b4741293fabbe55a2b623f3fc03b87b5c466a2e39ac2850203665de48032ee3d443fd1cb8b6d2b089a80f9093be721f976000ad80402b15827dfb3fe54936eca3ecdfda769d72eea5e44feb3c293f66572a3e26076c9c60d6f5db21a06873581d998a88b07c569be1e3d974c292b6be4976627cfc3586bd001baa9da4a2ffda66c3974fc77d850423ab5e3694", 0xcf}], 0x5, &(0x7f0000007080)=[{0xc8, 0x1d, 0xfffffffc, "f9827c652cbb95e49e6ecb592027a72f8557874ba5372a112931a81cbf1a93cdc4018a534af1cbe038a59d97e713837b94732d40cff1e0fad7ed7fbd2d1f3c0250ac9d88c99e53d20b6780c4b69a72fd38d7fdee1ee68b7053a3cb258967186cf523fd82f567650d07344d1339abe91987caa782dac4817b31fec9ee1c24396ef79627a6bac8cf5a02e20feaf785ed34b0183409e099b49360248e2468d0add7dc342864058fcdffd22b7ba8f431b3495e9cd8e9a1"}, {0x78, 0x112, 0x2, "895ca5efd00a6d93848a6e7e1f0f74c9814cd58375c4281560f9eb0848afc38e689089a650b3562069bdd5eeb599d441c3f39758afb2145250c43ee6a1f9a1709d7c921321ddedd714bbb2768450bfad5e96a3a7d44974acc03a8253ecf05c31dc"}, {0xf0, 0x3a, 0xaa62, "bfdd382b4325e420b912db95599cc5fe31009f3a07ac0a2fdc9a4c23392b5cab8c4a9bce0b765be4fbede0b6259253d23a0aec1c6f630b68ab0cdea2502e2ee409ef1172c1605cc45cf787e37dc4e3bc558e2041345922976431d77e1ca9709be1ee064935b8b911826d5f6ef1166237b2a0de7c6c4b6ee504bbdab86a193cd59cc1f9e010f81b540f9b6a1a6ca5e8a0f008eb14c0cce5a47b6d2d705eff1ddd08b2a9920ace190e9c7658cd6c9bd8c547790af4e51409839a35f759ebb6c8efefa3ea0e85e535fd8d0d0daab5c82b37463068d8e644ebdb53b8a8ee7d0da865"}], 0x230}}], 0x4, 0x24040004) clock_gettime(0x4, &(0x7f00000073c0)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000007400), 0x4e8a83, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000007440)={'ip6gretap0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket(0x3, 0x8, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000074c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000007580)={&(0x7f0000007480), 0xc, &(0x7f0000007540)={&(0x7f0000007500)=@gettclass={0x24, 0x2a, 0x400, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x2, 0xf}, {0x2, 0x1}, {0x10, 0x9}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10040000}, 0x8000) listen(r8, 0x529) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f00000076c0)={r3, &(0x7f00000075c0)='\'&,#:\x00', 0x400200, &(0x7f0000007600)={@align=0x8000, {0x9, 0x10, 0xffff, 0x200}}, 0xffff, &(0x7f0000007640)={@_ha_fsid}, &(0x7f0000007680)=0x4}) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000007700)=0x31201, 0x4) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007780), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000077c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r8, &(0x7f0000007880)={&(0x7f0000007740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000007840)={&(0x7f0000007800)={0x3c, r11, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x318}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4010000) getsockname$inet(r8, &(0x7f00000078c0)={0x2, 0x0, @private}, &(0x7f0000007900)=0x10) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000007a00)={&(0x7f0000007940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000079c0)={&(0x7f0000007980)={0x28, 0x1, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4050) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000007a40), 0x4, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r10, 0x84009422, &(0x7f0000007a80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000007e80)={0x0, 0x4, 0x3}) ioctl$BTRFS_IOC_BALANCE_V2(r13, 0xc4009420, &(0x7f0000008280)={0x1, 0x0, {0xd2, @struct={0x7, 0xfffffff9}, r14, 0x80, 0xc133, 0x2, 0x8, 0x3, 0x400, @struct={0x1, 0x5878}, 0xf017, 0x8, [0x80000000, 0xa, 0x0, 0x6, 0x10000, 0xfffffffffffff967]}, {0x6, @usage=0x200, 0x0, 0x3, 0x2, 0x200, 0x9, 0x2ee7, 0x0, @usage=0x47c2, 0xfffffffd, 0xb, [0x7, 0x8, 0xa, 0x0, 0x7, 0x9]}, {0x4, @usage=0x1, r15, 0xfffffffffffffffd, 0x1, 0xe80, 0xb0b, 0x24, 0x10, @usage=0x200, 0x7, 0x30, [0x9, 0x1, 0x9, 0x5, 0x54b4, 0x40]}, {0x2, 0x67, 0x9}}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r8, 0x8008f513, &(0x7f0000008680)) syz_genetlink_get_family_id$nl802154(&(0x7f00000086c0), 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY(r8, 0x5000940f, &(0x7f0000008700)={{r13}, "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"}) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000009840)={&(0x7f0000009700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000009800)={&(0x7f0000009780)={0x5c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 16.582096424s ago: executing program 3 (id=5175): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0xfffffffffffffdd0, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x49, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES64=r1, @ANYRESHEX=0x0, @ANYRES8=r0, @ANYRES16=r0], 0x3c}}, 0x4004001) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0xfffffffffffffdd0, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x49, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES64=r1, @ANYRESHEX=0x0, @ANYRES8=r0, @ANYRES16=r0], 0x3c}}, 0x4004001) (async) 16.540374822s ago: executing program 4 (id=5176): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491005c7259743c6b53f76a", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/120, 0x78}, {&(0x7f0000000380)=""/193, 0xc1}], 0x2}, 0x12000) writev(r2, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0x13a}], 0x1) 16.401585068s ago: executing program 2 (id=5177): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) (async) r2 = getpid() write$cgroup_pid(r1, &(0x7f0000000880)=r2, 0x12) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) (async) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x2, {0x3}, 0xff}, 0x18) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) (rerun: 64) sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, r6, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff9, 0x7f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x40400c0) (async, rerun: 64) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) (async, rerun: 64) r7 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="597fe8a2b5eaaa6b0ed243fdb55f65d4", 0x10}], 0x1}, 0x20040810) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x201}, 0x1c}}, 0x0) (async) getsockopt$netlink(r8, 0x10e, 0x5, 0x0, &(0x7f0000001d80)) (async, rerun: 32) recvmmsg(r7, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000080)=""/15, 0xf}], 0x259}, 0x8}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/108, 0x79}], 0x1, 0x0, 0xfffffcb9}, 0x9cd}], 0x2, 0x2, 0x0) (rerun: 32) 16.3974791s ago: executing program 4 (id=5178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002602000000dbdf2501000000000000000c410000000c00147377f5e04a7d16f92f"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004090}, 0x6) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 16.31541576s ago: executing program 3 (id=5179): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a008313"], 0x28}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddaf0200000000000000d2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a630900010073797a30000000000900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) 16.250340845s ago: executing program 2 (id=5180): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x68771fe363ef18f5}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xfc, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x4f, 0xa8, @random="a55a70292337afaa6929a3e18bbe1b6e467462b9802e9cb4550bd51149f000d5e11751b154d38068958220c21d0e08f6a7bf7e01fe4ec92ee7505cced96313810c0cf5321ec96c9eafe6c8"}, @DEVLINK_ATTR_RATE_NODE_NAME={0x87, 0xa8, @random="954c28349e4e03d0ce9f9efdc4bddd2cd87ccf89c52e735523531cee823b538e555852a33339352939f0ef489ff5b0b81ca2a3ea880e9a7f5324f9cfb538d197c2480fc243f406fadb458d55047b2c6c76faad5c295c51d0a5ac6e4ff9349536e129593585ac47d140d881cb157834c3eac63a551f11890b7f72989986c3c5c71cc645"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000084}, 0x1) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x44000440}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4b}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x4f, 0xc5, "199b505257db7e127c2781d3c76ede3d1df81fce5f5f4668ce141ee2f5803a068c4f2c33b12c4e80d654ea4aa3c8567fdc8ba9b698044607f5a3b84e147306d46c4448181e05f627c234bf"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4008800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0x7, [@restrict={0xf, 0x0, 0x0, 0xb, 0x3}, @func={0x7, 0x0, 0x0, 0xc, 0x2}, @var={0xa, 0x0, 0x0, 0xe, 0x5}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x4, 0x7}, @struct={0xe, 0x8, 0x0, 0x4, 0x1, 0x4, [{0xe, 0x1, 0x3}, {0x6, 0x4, 0x7}, {0x1, 0x1, 0x2}, {0xb, 0x3, 0x100}, {0xe, 0x5}, {0x4, 0x1, 0xf81}, {0xf, 0x5, 0xe}, {0x5, 0x3, 0xeb}]}, @func={0xd, 0x0, 0x0, 0xc, 0x4}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x1}, @restrict={0xb, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x2e, 0x61, 0x30, 0x2e, 0x0]}}, &(0x7f0000000500)=""/210, 0xe7, 0xd2, 0x0, 0x8}, 0x28) r5 = accept4$unix(r1, &(0x7f0000000640)=@abs, &(0x7f00000006c0)=0x6e, 0x81800) recvmsg$unix(r5, &(0x7f0000000900)={&(0x7f0000000700), 0x6e, &(0x7f0000000800)=[{&(0x7f0000000780)=""/94, 0x5e}], 0x1, &(0x7f0000000840)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x10020) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xdb45, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}}, 0x4004004) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000b80)={&(0x7f0000000a80), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r8, 0x300, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x19, 0xde9, @udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x4040) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000bc0), r9) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r9) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r9, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x40, r10, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x240080d0}, 0x4000000) recvfrom$unix(r5, &(0x7f0000000d40)=""/4096, 0x1000, 0x10160, &(0x7f0000001d40)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)=@gettaction={0x30, 0x32, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40081) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000001fc0), r12) sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f00000020c0)={&(0x7f0000002000), 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x1c, r3, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x84) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r13, 0x0, 0x2, &(0x7f0000002100)={0x0, [0x4], 0xa}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000002140), r0) 16.228739743s ago: executing program 3 (id=5181): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1, 0x2, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffb08, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000001400)=ANY=[@ANYBLOB="180200000c0010000000000000000000850000004100000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x12, 0x0, 0x0, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000040), &(0x7f0000000180)=r3}, 0x20) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_extract_tcp_res(0x0, 0x9, 0x9) syz_emit_ethernet(0x36, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r8, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200010100000000e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="000000000040ead008001d00c3"], 0x28}}, 0x0) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000000)=@req3={0xffff, 0x7fff, 0x0, 0x81, 0x8, 0xd40}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x13, r7, 0xc252d000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 16.184180218s ago: executing program 3 (id=5182): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffef, @remote}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf251500000008000300c887a8383cfeee0494c5a89356b2c56fd2e60c953a0b56d3b61934aeadfeb737462aa58ba66b78299faafd26cee54f6c220d5c968d12d4d79a8ae0add99fc8556762be47d3ac2113ae507c4bd7a3d9ee11ef8c53251e33e39fed0977d6329dd9da75626e4c7784a13cd917be67319d4b43b1176d45de0ed3cbe8678d06450de3c3653ea8e08fe9e2a52544d12a675a44b82e7872595214", @ANYRES32=r3, @ANYBLOB='\b\x00,\x00\a\x00\x00\x00'], 0x24}}, 0x44000) r4 = socket$alg(0x26, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x13, 0x4, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x4}, 0x94) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ad76b6c5", 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x11, 0x3, 'none\x00', 0x1, 0x6, 0x4e}, 0x2c) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448dd, &(0x7f0000000240)={0x3, 0x0, '\x00', 0x0, 0x2}) r7 = socket$kcm(0xa, 0x2, 0x0) socket(0xb, 0xa, 0x3f0b8395) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r8 = accept4(r4, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000380)='syzkaller\x00', 0x2, 0xc3, &(0x7f00000009c0)=""/195, 0x3d79bfe63988112, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x86}, 0x10}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r13, @ANYRES32=r12, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r13}, &(0x7f0000000000), &(0x7f00000002c0)=r9}, 0x20) sendmsg$inet(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000001c0)='>', 0x1}], 0x1}, 0x4000040) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000140)={0x0, 'vlan0\x00', {0x2}, 0x3}) recvmsg$unix(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)=""/231, 0xe7}], 0x1}, 0x42) sendmmsg$alg(r8, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a9861869a75f66ef7d128ae4230965648a021cdf93508c9706dc1e4d9e1d4c436faf1d2786", 0x25}, {&(0x7f0000000240)="eeb9ff4efd6c", 0x6}, {&(0x7f00000001c0)='z3', 0x2}], 0x3, 0x0, 0x0, 0x4012}], 0x1, 0x0) 1.205224455s ago: executing program 32 (id=5171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14}}, 0xa4}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r4, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x1b}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x884) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @local}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20084084) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f00000005c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r9, 0x29, 0x38, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xeb4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x20000008}, 0x4000010) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)={0xc4, r11, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '-@\x1c+'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12c}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0x5, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20040840}, 0x8) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r10, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r12, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x1) 1.160916433s ago: executing program 33 (id=5174): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x800) clock_gettime(0x0, &(0x7f0000003a40)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000039c0)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)=""/236, 0xec}, {&(0x7f0000000200)=""/121, 0x79}], 0x2, &(0x7f00000002c0)=""/203, 0xcb}, 0x5}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000002900)=[{&(0x7f0000000440)=""/220, 0xdc}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/146, 0x92}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/55, 0x37}, {&(0x7f0000002640)=""/139, 0x8b}, {&(0x7f0000002700)=""/58, 0x3a}, {&(0x7f0000002740)=""/246, 0xf6}, {&(0x7f0000002840)=""/93, 0x5d}, {&(0x7f00000028c0)=""/62, 0x3e}], 0xa, &(0x7f00000029c0)=""/4096, 0x1000}, 0x80000000}], 0x2, 0x0, &(0x7f0000003a80)={r1, r2+10000000}) recvmmsg(r3, &(0x7f0000005f40)=[{{&(0x7f0000003ac0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000003b40)=""/75, 0x4b}, {&(0x7f0000003bc0)=""/4096, 0x1000}], 0x2, &(0x7f0000004c00)=""/55, 0x37}, 0x5}, {{&(0x7f0000004c40)=@nfc={0x27, 0x0}, 0x80, &(0x7f0000004f40)=[{&(0x7f0000004cc0)=""/253, 0xfd}, {&(0x7f0000004dc0)=""/43, 0x2b}, {&(0x7f0000004e00)=""/205, 0xcd}, {&(0x7f0000004f00)=""/27, 0x1b}], 0x4, &(0x7f0000004f80)=""/217, 0xd9}, 0x7}, {{&(0x7f0000005080)=@nl, 0x80, &(0x7f00000054c0)=[{&(0x7f0000005100)=""/216, 0xd8}, {&(0x7f0000005200)=""/81, 0x51}, {&(0x7f0000005280)=""/160, 0xa0}, {&(0x7f0000005340)=""/160, 0xa0}, {&(0x7f0000005400)=""/142, 0x8e}], 0x5, &(0x7f0000005540)=""/134, 0x86}}, {{&(0x7f0000005600)=@rc, 0x80, &(0x7f0000005940)=[{&(0x7f0000005680)=""/172, 0xac}, {&(0x7f0000005740)=""/202, 0xca}, {&(0x7f0000005840)=""/50, 0x32}, {&(0x7f0000005880)=""/151, 0x97}], 0x4, &(0x7f0000005980)=""/206, 0xce}, 0x9}, {{&(0x7f0000005a80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005b00)=""/32, 0x20}, {&(0x7f0000005b40)=""/132, 0x84}, {&(0x7f0000005c00)=""/134, 0x86}, {&(0x7f0000005cc0)=""/157, 0x9d}, {&(0x7f0000005d80)=""/254, 0xfe}], 0x5, &(0x7f0000005f00)=""/9, 0x9}, 0x80000001}], 0x5, 0x40000040, &(0x7f0000006080)={0x0, 0x989680}) accept$netrom(r6, &(0x7f00000060c0)={{}, [@rose, @bcast, @remote, @bcast, @null, @default, @rose, @rose]}, &(0x7f0000006140)=0x48) sendmmsg(r6, &(0x7f00000072c0)=[{{&(0x7f0000006180)=@nl=@kern={0x10, 0x0, 0x0, 0x400000}, 0x80, &(0x7f00000065c0)=[{&(0x7f0000006200)="587b763f80fbab0d04b5fc293648a344f2289bd5cf80a1308b161c798e4d34213a2e2e4061e62e73d31cc44409b22e83d101b7e061d86e57fc84cfa91d5803b38546351003e19ee23457b9e33c41a7a144f32399aa163d9f3eab4b34a72e7295c58a3a3e20747d45654df846849d49883bc3510a62f1e37fd24e6fec9737bf5389dc6541ab0e8fa396aff1bd14e80b2339936383cacd4d81618a2df60605794b0996c059b8a7c101e2", 0xa9}, {&(0x7f00000062c0)="31fabc4715bb342bfee515109ca00c5b3d323d625d95d1d9f3acd5afb753282e03075b7d9dadeb32cc69b396b578575bf8c7dc14bfdc3a24d19a0af788d522163fc1d1c0f2803a658b27d2c6715df0c96302fa58fc9cdf885563578e3f4546a35fdb4ce82ff300a8b223767007802435664a17a0d9144a5f57cec56d0889275e47c39974689c9c83dd7868c69c6e27b01d912b26c4aacd882459892c208d7d54d91fa6508f98749dc39a746f616ade0f1b001c33f0f12e7509a02b8bfc1cf1890f0a", 0xc2}, {&(0x7f00000063c0)="82b9e8d3ce198663b4dd4d568aeb67ee5737", 0x12}, {&(0x7f0000006400)="d767c015bcd66c4c79e200f222450ef74082c1f849d6f593d5640e2a62ba620ba6ab7eef66594b4cd202312458396c91ef3867d664e1340e90d969ba93e3f6504d4ab10d7ead4276c1ecbcca1bfacd6c68c1a1b782783b960b1f29fb70b631b09caef34cc35f1cc76bb376510e4caedfbd73e12ef442230546714b79ff7902ab8ad01971", 0x84}, {&(0x7f00000064c0)="4d61aaa9d018d0f3326dd9c0a8575782f1d943a0a9cbf5800c5bc843dc9c9372cdffb26ddd426638bb26be137c2cb56ac095b1b0f9d0d74ea8da1e6f8ba6107545e72894b0b6cf67fff4292a695b9fcbd5c8fecc05d8f5986fa778245e941557be450f5c8cc6fdf6abd1b7a118967fd7432c2d4c40c31bce0241eda328f8e6ff850ebd69a637987c12dcd3eb8fbeda2f70fffe2935022527acda74da7bdc86179c34195831c40dd1a0aae457ca240d87bee2988d6b6278aee9d655855f1ce87f7e97cc9cbac4f5d5dacf209920fa15e502ca4ac9220cc6085d10ff7093749660", 0xe0}], 0x5, &(0x7f0000006640)=[{0x78, 0x103, 0xc4c, "9612744a37abc7f370e09fe91cf0263ddf4c5b2c80a4fd5f18bb277126cdbd2c1eb0bf3f7ba90c7dc8e1242ce9d65b5fdd6f76f18cdc975f34a211419a38945b4ee1bf8ea801140143b2af9436926c773c808832ea5e5bff206f4b7b60540a12709de3c474"}, {0xd0, 0x0, 0x9, "7a18bef8f1ccae8a180edfaef94894fb5f6f5f1e23a7ec1ecbbc18d940c976dd4371b894cae8c4a09337c8dd5bcad915782bacd267372e5bf1063efd6168e497f9d5c18f979dd3c6bf9b1b3cdfb88af88633d0250a86a7cdaefc2ba701485433187adcf41b46543646c7703a0963ac73726ae68623d35f687aac418f3555f667615ee4cb3deb671abe48dfd2f7ba69692a35aac9701547e246292bb1ed9f7b8f1637984399a2711758e3a848764dfe2535cdb9b616bf639a4ead62"}, {0x70, 0x101, 0xfffffff8, "757779e58a83dcaf6112f26bfd987261420e48fbe2955d05fa555bc60158109df5b0f3beb693dd8878b571bdadcb013264610689f189bdfb5a3558731b47b3dc452b3e9f984edbc6c98eac535c5ea2bcc12f9674d7238b96dc06c8"}], 0x1b8}}, {{&(0x7f0000006800)=@l2={0x1f, 0x2, @any, 0x7ff}, 0x80, &(0x7f0000006900)=[{&(0x7f0000006880)="6e55386802da4e5a5f5340821d06965be5306966bc07b06dc2d38d9570936b366614409a73cde2b6cb432db1d1839d787fb3cdbf97c82b7744a82935de61223887b51362014aabf981", 0x49}], 0x1, &(0x7f0000006940)=[{0x20, 0x10c, 0x3ff, "0140108ec798bcb94dd44080065f"}], 0x20}}, {{&(0x7f0000006980)=@nfc={0x27, r5, 0x1, 0x5f63eb25fdebf447}, 0x80, &(0x7f0000006b80)=[{&(0x7f0000006a00)="382ea792357da4cc9a5671dbb538741dcdfb8d2f05b911ff38d48f96217dd489e4fb165045c158acb0b025f29cc68d", 0x2f}, {&(0x7f0000006a40)="b7a1ce5feb6e3b4b8fbc65e820d45ea0b0cdafb695be19da4ba630", 0x1b}, {&(0x7f0000006a80)="b062af8ab8865308325bc35de8c3f31fc4c537b222286b1cca4dea7e542063398518bec32b3754aa1eb075fd7a0f688ca10f62e8d9f51d1e615553ecf5bf33b8bad199bd0decbef84317b4ba293955e9199fdb737881c82bbac55943faab7a15150d882e6e2d5216ea67d49def4f599159f49636750c9c30d97211fa7ef55a016510dd3c17c3d6a5538e885bb65de3ba54e194038b28fb98f1f5acd406d02ae3d49b72d8cdc7b4d7845989a202d116ae980fcbcf46c57d2aedec6c033361e7716a", 0xc1}], 0x3, &(0x7f0000006bc0)=[{0x40, 0x10d, 0x6, "e5b5ac035184966717f6ca76bff6b0e0c5b35bdcb57fba6ff6037520c56dd4e2f0b92be7bb3230e59784b2d4ee01d3be"}, {0x60, 0x10c, 0x5, "742f9aaf407e70dc2ee552839aec745f75bcb638d461a87ea3a17498c4149368b43caf2c8d9c1c46cee31db81887fe56022e4e6aad6ecd1f207e97db9d4bb2cbe96388b84dfc49254278ccf3f2655f"}, {0x48, 0x114, 0x5, "f466a40125d524895c821b7391205139a0a46435378c74e2e6cde2c2c941d4beaf62151813e5bf99670dd20dc864b03acd13b88a72232a"}, {0x10, 0x108, 0x6}], 0xf8}}, {{&(0x7f0000006cc0)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @private=0xa010101}, 0x0, 0x2, 0x2, 0x3}}, 0x80, &(0x7f0000007000)=[{&(0x7f0000006d40)="db7e1896aebf8766e2cbf781a96e", 0xe}, {&(0x7f0000006d80)="cbb6d08578", 0x5}, {&(0x7f0000006dc0)="a8b1f500c1ce45067055e98757d3fe3ba7f968357ede67aa61d10920d4ed04f7c467232c97b01ea5e60a4fe8b59b3ed8bb14573dacebad330552d7b6a8eb8d79b9f2b95a1dc04419da2e4bf21b1716618685ec1804f53aa292eab453ce432cbfd14c47913309cca53509b87bc7", 0x6d}, {&(0x7f0000006e40)="f202857a466e92350354ddbdd9879db26ea788cc6d419f7273dbd63cd7caa66af763cf9c8ae1aa2558e448f12a56e3e420973b0a35314715ec54039141811f82d38a20a4496b66419a91d5c746fa5db3fe2e161e7c23a5947fca5febba524c4cac9e7e6d0d997e5ed9d31a5d9a0daabe128f1c9f97eee498651d49c4816e4eac62095ba1d7a47d9d", 0x88}, {&(0x7f0000006f00)="f49179db4877cf83a9a406b96ab1a0bda0af5b4d1edf817ebdb498529e901257ba9d056c0e06773f2db2a9cb531764046a074658468a186dcc142203dcd0b74e80cd6b4741293fabbe55a2b623f3fc03b87b5c466a2e39ac2850203665de48032ee3d443fd1cb8b6d2b089a80f9093be721f976000ad80402b15827dfb3fe54936eca3ecdfda769d72eea5e44feb3c293f66572a3e26076c9c60d6f5db21a06873581d998a88b07c569be1e3d974c292b6be4976627cfc3586bd001baa9da4a2ffda66c3974fc77d850423ab5e3694", 0xcf}], 0x5, &(0x7f0000007080)=[{0xc8, 0x1d, 0xfffffffc, "f9827c652cbb95e49e6ecb592027a72f8557874ba5372a112931a81cbf1a93cdc4018a534af1cbe038a59d97e713837b94732d40cff1e0fad7ed7fbd2d1f3c0250ac9d88c99e53d20b6780c4b69a72fd38d7fdee1ee68b7053a3cb258967186cf523fd82f567650d07344d1339abe91987caa782dac4817b31fec9ee1c24396ef79627a6bac8cf5a02e20feaf785ed34b0183409e099b49360248e2468d0add7dc342864058fcdffd22b7ba8f431b3495e9cd8e9a1"}, {0x78, 0x112, 0x2, "895ca5efd00a6d93848a6e7e1f0f74c9814cd58375c4281560f9eb0848afc38e689089a650b3562069bdd5eeb599d441c3f39758afb2145250c43ee6a1f9a1709d7c921321ddedd714bbb2768450bfad5e96a3a7d44974acc03a8253ecf05c31dc"}, {0xf0, 0x3a, 0xaa62, "bfdd382b4325e420b912db95599cc5fe31009f3a07ac0a2fdc9a4c23392b5cab8c4a9bce0b765be4fbede0b6259253d23a0aec1c6f630b68ab0cdea2502e2ee409ef1172c1605cc45cf787e37dc4e3bc558e2041345922976431d77e1ca9709be1ee064935b8b911826d5f6ef1166237b2a0de7c6c4b6ee504bbdab86a193cd59cc1f9e010f81b540f9b6a1a6ca5e8a0f008eb14c0cce5a47b6d2d705eff1ddd08b2a9920ace190e9c7658cd6c9bd8c547790af4e51409839a35f759ebb6c8efefa3ea0e85e535fd8d0d0daab5c82b37463068d8e644ebdb53b8a8ee7d0da865"}], 0x230}}], 0x4, 0x24040004) clock_gettime(0x4, &(0x7f00000073c0)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000007400), 0x4e8a83, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000007440)={'ip6gretap0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket(0x3, 0x8, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000074c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000007580)={&(0x7f0000007480), 0xc, &(0x7f0000007540)={&(0x7f0000007500)=@gettclass={0x24, 0x2a, 0x400, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x2, 0xf}, {0x2, 0x1}, {0x10, 0x9}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10040000}, 0x8000) listen(r8, 0x529) ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f00000076c0)={r3, &(0x7f00000075c0)='\'&,#:\x00', 0x400200, &(0x7f0000007600)={@align=0x8000, {0x9, 0x10, 0xffff, 0x200}}, 0xffff, &(0x7f0000007640)={@_ha_fsid}, &(0x7f0000007680)=0x4}) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000007700)=0x31201, 0x4) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007780), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000077c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r8, &(0x7f0000007880)={&(0x7f0000007740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000007840)={&(0x7f0000007800)={0x3c, r11, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x318}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4010000) getsockname$inet(r8, &(0x7f00000078c0)={0x2, 0x0, @private}, &(0x7f0000007900)=0x10) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000007a00)={&(0x7f0000007940)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000079c0)={&(0x7f0000007980)={0x28, 0x1, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4050) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000007a40), 0x4, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r10, 0x84009422, &(0x7f0000007a80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000007e80)={0x0, 0x4, 0x3}) ioctl$BTRFS_IOC_BALANCE_V2(r13, 0xc4009420, &(0x7f0000008280)={0x1, 0x0, {0xd2, @struct={0x7, 0xfffffff9}, r14, 0x80, 0xc133, 0x2, 0x8, 0x3, 0x400, @struct={0x1, 0x5878}, 0xf017, 0x8, [0x80000000, 0xa, 0x0, 0x6, 0x10000, 0xfffffffffffff967]}, {0x6, @usage=0x200, 0x0, 0x3, 0x2, 0x200, 0x9, 0x2ee7, 0x0, @usage=0x47c2, 0xfffffffd, 0xb, [0x7, 0x8, 0xa, 0x0, 0x7, 0x9]}, {0x4, @usage=0x1, r15, 0xfffffffffffffffd, 0x1, 0xe80, 0xb0b, 0x24, 0x10, @usage=0x200, 0x7, 0x30, [0x9, 0x1, 0x9, 0x5, 0x54b4, 0x40]}, {0x2, 0x67, 0x9}}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r8, 0x8008f513, &(0x7f0000008680)) syz_genetlink_get_family_id$nl802154(&(0x7f00000086c0), 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) close(0xffffffffffffffff) ioctl$BTRFS_IOC_SNAP_DESTROY(r8, 0x5000940f, &(0x7f0000008700)={{r13}, "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"}) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000009840)={&(0x7f0000009700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000009800)={&(0x7f0000009780)={0x5c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8001}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 1.112697917s ago: executing program 34 (id=5180): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x68771fe363ef18f5}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xfc, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x4f, 0xa8, @random="a55a70292337afaa6929a3e18bbe1b6e467462b9802e9cb4550bd51149f000d5e11751b154d38068958220c21d0e08f6a7bf7e01fe4ec92ee7505cced96313810c0cf5321ec96c9eafe6c8"}, @DEVLINK_ATTR_RATE_NODE_NAME={0x87, 0xa8, @random="954c28349e4e03d0ce9f9efdc4bddd2cd87ccf89c52e735523531cee823b538e555852a33339352939f0ef489ff5b0b81ca2a3ea880e9a7f5324f9cfb538d197c2480fc243f406fadb458d55047b2c6c76faad5c295c51d0a5ac6e4ff9349536e129593585ac47d140d881cb157834c3eac63a551f11890b7f72989986c3c5c71cc645"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000084}, 0x1) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x44000440}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4b}, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x4f, 0xc5, "199b505257db7e127c2781d3c76ede3d1df81fce5f5f4668ce141ee2f5803a068c4f2c33b12c4e80d654ea4aa3c8567fdc8ba9b698044607f5a3b84e147306d46c4448181e05f627c234bf"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4008800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0x7, [@restrict={0xf, 0x0, 0x0, 0xb, 0x3}, @func={0x7, 0x0, 0x0, 0xc, 0x2}, @var={0xa, 0x0, 0x0, 0xe, 0x5}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x4, 0x7}, @struct={0xe, 0x8, 0x0, 0x4, 0x1, 0x4, [{0xe, 0x1, 0x3}, {0x6, 0x4, 0x7}, {0x1, 0x1, 0x2}, {0xb, 0x3, 0x100}, {0xe, 0x5}, {0x4, 0x1, 0xf81}, {0xf, 0x5, 0xe}, {0x5, 0x3, 0xeb}]}, @func={0xd, 0x0, 0x0, 0xc, 0x4}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x1}, @restrict={0xb, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x2e, 0x61, 0x30, 0x2e, 0x0]}}, &(0x7f0000000500)=""/210, 0xe7, 0xd2, 0x0, 0x8}, 0x28) r5 = accept4$unix(r1, &(0x7f0000000640)=@abs, &(0x7f00000006c0)=0x6e, 0x81800) recvmsg$unix(r5, &(0x7f0000000900)={&(0x7f0000000700), 0x6e, &(0x7f0000000800)=[{&(0x7f0000000780)=""/94, 0x5e}], 0x1, &(0x7f0000000840)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x10020) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xdb45, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}}, 0x4004004) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000b80)={&(0x7f0000000a80), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r8, 0x300, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x19, 0xde9, @udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x4040) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000bc0), r9) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r9) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r9, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x40, r10, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x240080d0}, 0x4000000) recvfrom$unix(r5, &(0x7f0000000d40)=""/4096, 0x1000, 0x10160, &(0x7f0000001d40)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)=@gettaction={0x30, 0x32, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40081) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000001fc0), r12) sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f00000020c0)={&(0x7f0000002000), 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x1c, r3, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x84) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r13, 0x0, 0x2, &(0x7f0000002100)={0x0, [0x4], 0xa}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000002140), r0) 1.051000263s ago: executing program 35 (id=5178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002602000000dbdf2501000000000000000c410000000c00147377f5e04a7d16f92f"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004090}, 0x6) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 0s ago: executing program 36 (id=5182): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffef, @remote}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf251500000008000300c887a8383cfeee0494c5a89356b2c56fd2e60c953a0b56d3b61934aeadfeb737462aa58ba66b78299faafd26cee54f6c220d5c968d12d4d79a8ae0add99fc8556762be47d3ac2113ae507c4bd7a3d9ee11ef8c53251e33e39fed0977d6329dd9da75626e4c7784a13cd917be67319d4b43b1176d45de0ed3cbe8678d06450de3c3653ea8e08fe9e2a52544d12a675a44b82e7872595214", @ANYRES32=r3, @ANYBLOB='\b\x00,\x00\a\x00\x00\x00'], 0x24}}, 0x44000) r4 = socket$alg(0x26, 0x5, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x13, 0x4, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x4}, 0x94) bind$alg(r4, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ad76b6c5", 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x11, 0x3, 'none\x00', 0x1, 0x6, 0x4e}, 0x2c) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448dd, &(0x7f0000000240)={0x3, 0x0, '\x00', 0x0, 0x2}) r7 = socket$kcm(0xa, 0x2, 0x0) socket(0xb, 0xa, 0x3f0b8395) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r8 = accept4(r4, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000380)='syzkaller\x00', 0x2, 0xc3, &(0x7f00000009c0)=""/195, 0x3d79bfe63988112, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x86}, 0x10}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r13, @ANYRES32=r12, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r13}, &(0x7f0000000000), &(0x7f00000002c0)=r9}, 0x20) sendmsg$inet(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000001c0)='>', 0x1}], 0x1}, 0x4000040) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000140)={0x0, 'vlan0\x00', {0x2}, 0x3}) recvmsg$unix(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)=""/231, 0xe7}], 0x1}, 0x42) sendmmsg$alg(r8, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a9861869a75f66ef7d128ae4230965648a021cdf93508c9706dc1e4d9e1d4c436faf1d2786", 0x25}, {&(0x7f0000000240)="eeb9ff4efd6c", 0x6}, {&(0x7f00000001c0)='z3', 0x2}], 0x3, 0x0, 0x0, 0x4012}], 0x1, 0x0) kernel console output (not intermixed with test programs): te type 1 has an invalid length. [ 393.705532][T19096] __nla_validate_parse: 7 callbacks suppressed [ 393.705548][T19096] netlink: 476 bytes leftover after parsing attributes in process `syz.3.3546'. [ 393.714476][T19090] 8021q: adding VLAN 0 to HW filter on device bond2 [ 393.733537][T19096] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.3546'. [ 393.777513][T19095] bond2: (slave geneve2): making interface the new active one [ 393.791308][T19095] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 393.827035][ T6263] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.840017][T19103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3548'. [ 393.846435][ T6263] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.895193][ T6263] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.929558][ T6263] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.268346][T19127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3554'. [ 394.981003][T19162] netlink: 'syz.4.3561': attribute type 3 has an invalid length. [ 395.023464][T19162] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3561'. [ 395.051789][T19171] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3562'. [ 395.359850][T19180] netlink: 'syz.2.3566': attribute type 21 has an invalid length. [ 395.418991][T19180] netlink: 'syz.2.3566': attribute type 6 has an invalid length. [ 395.458512][T19180] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3566'. [ 395.526606][T19189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3570'. [ 395.773912][T19203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.784934][T19200] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3573'. [ 395.847718][T19203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.942946][T19204] erspan0: entered promiscuous mode [ 395.977419][T19204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3574'. [ 395.992424][T19213] netlink: 'syz.0.3575': attribute type 7 has an invalid length. [ 396.001911][T19219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.029760][T19209] netlink: 'syz.0.3575': attribute type 1 has an invalid length. [ 396.251185][ T1678] block nbd1: Possible stuck request ffff8880260f0000: control (read@0,1024B). Runtime 90 seconds [ 396.262120][ T1678] block nbd1: Possible stuck request ffff8880260f0200: control (read@1024,1024B). Runtime 90 seconds [ 396.274290][ T1678] block nbd1: Possible stuck request ffff8880260f0400: control (read@2048,1024B). Runtime 90 seconds [ 396.284269][T19223] geneve2: entered promiscuous mode [ 396.285642][ T1678] block nbd1: Possible stuck request ffff8880260f0600: control (read@3072,1024B). Runtime 90 seconds [ 396.303104][ T6271] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 40780 - 0 [ 396.313495][ T6271] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 40780 - 0 [ 396.334319][ T6271] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 40780 - 0 [ 396.388827][T19231] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 396.514601][T19223] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.203157][T19268] netlink: 'syz.4.3590': attribute type 11 has an invalid length. [ 397.223666][T19270] xt_cgroup: path and classid specified [ 397.505919][T19285] bond2: entered promiscuous mode [ 397.511120][T19285] bond2: entered allmulticast mode [ 397.517536][T19285] 8021q: adding VLAN 0 to HW filter on device bond2 [ 397.915117][T19318] netlink: 'syz.1.3601': attribute type 1 has an invalid length. [ 397.958549][T19323] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 397.998321][T19323] bond1 (unregistering): Released all slaves [ 398.066840][T19318] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 398.344602][T19223] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.395809][T19223] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 40780 - 0 [ 398.406221][T19356] netlink: 'syz.2.3606': attribute type 11 has an invalid length. [ 398.549251][T19354] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 398.565932][T19354] bond1: option packets_per_slave: allowed values 0 - 65535 [ 398.575633][T19354] bond1 (unregistering): Released all slaves [ 398.657594][T19223] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.676609][T19223] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 40780 - 0 [ 398.817924][T19223] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.844449][T19223] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 40780 - 0 [ 399.101697][T19388] __nla_validate_parse: 7 callbacks suppressed [ 399.101718][T19388] netlink: 401 bytes leftover after parsing attributes in process `syz.4.3614'. [ 399.127160][ T3552] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 40780 - 0 [ 399.150808][ T3552] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 399.258622][ T6274] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 40780 - 0 [ 399.268454][ T6274] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 399.372574][ T6274] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 40780 - 0 [ 399.409959][ T6274] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 399.483651][ T6271] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 40780 - 0 [ 399.505783][ T6271] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 399.697553][T19407] netlink: 'syz.2.3620': attribute type 1 has an invalid length. [ 399.788861][T19420] xfrm1: entered allmulticast mode [ 399.809406][T19426] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3627'. [ 399.841078][T19429] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3626'. [ 399.893695][T19426] syzkaller0: entered allmulticast mode [ 399.997147][T19426] syzkaller0 (unregistering): left allmulticast mode [ 400.305179][T19450] bond1: (slave veth3): Enslaving as an active interface with a down link [ 400.408386][T19452] bond3: Removing last ns target with arp_interval on [ 400.641974][T19471] syzkaller1: entered promiscuous mode [ 400.657405][T19471] syzkaller1: entered allmulticast mode [ 400.667066][T19471] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 400.794691][T19477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.864689][T19485] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3643'. [ 400.998324][T19489] pim6reg527: entered allmulticast mode [ 401.045509][T19492] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3645'. [ 401.280883][T19504] syzkaller0: entered promiscuous mode [ 401.296260][T19504] syzkaller0: entered allmulticast mode [ 401.643210][T19541] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 401.652145][ T5823] IPVS: starting estimator thread 0... [ 401.795783][T19542] IPVS: using max 30 ests per chain, 72000 per kthread [ 401.956573][T19564] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3661'. [ 402.001217][T19548] syzkaller0: entered promiscuous mode [ 402.030148][T19548] syzkaller0: entered allmulticast mode [ 402.181086][T19572] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 402.219927][T19572] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 402.471796][T19592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3669'. [ 402.831578][T19607] dvmrp0: entered allmulticast mode [ 403.174984][T19632] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3678'. [ 403.371243][T19642] netlink: 'syz.2.3682': attribute type 1 has an invalid length. [ 403.417717][T19642] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3682'. [ 403.499670][T19642] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3682'. [ 403.562572][T19648] veth3: entered allmulticast mode [ 403.747242][T19666] openvswitch: netlink: Flow key attr not present in new flow. [ 403.901264][T19671] netdevsim netdevsim2: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 404.109102][T19692] __nla_validate_parse: 3 callbacks suppressed [ 404.109123][T19692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3696'. [ 404.205048][T19687] syzkaller0: entered promiscuous mode [ 404.211755][T19687] syzkaller0: entered allmulticast mode [ 404.222344][T19692] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 404.278769][T19692] team1: entered promiscuous mode [ 404.295319][T19692] team1: entered allmulticast mode [ 404.495864][T19717] netlink: 'syz.3.3701': attribute type 64 has an invalid length. [ 404.566690][T19722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3701'. [ 406.321975][T19733] x_tables: duplicate underflow at hook 1 [ 406.371759][T19736] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3705'. [ 406.594487][T19751] netlink: 'syz.4.3709': attribute type 1 has an invalid length. [ 406.608674][T19750] netlink: 'syz.4.3709': attribute type 1 has an invalid length. [ 406.612687][T19751] netlink: 'syz.4.3709': attribute type 11 has an invalid length. [ 406.618408][T19750] netlink: 'syz.4.3709': attribute type 11 has an invalid length. [ 406.629606][T19751] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3709'. [ 406.645343][T19753] netlink: 'syz.3.3710': attribute type 1 has an invalid length. [ 406.692399][T19750] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3709'. [ 406.820160][T19750] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3709'. [ 406.856708][T19759] bond2: (slave gretap1): making interface the new active one [ 406.886683][T19759] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 407.189789][T19786] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.3717'. [ 407.216075][T19786] openvswitch: netlink: Missing key (keys=40, expected=100) [ 407.386396][T19798] netlink: 'syz.0.3722': attribute type 12 has an invalid length. [ 407.415413][T19798] netlink: 'syz.0.3722': attribute type 29 has an invalid length. [ 407.462168][T19798] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3722'. [ 407.481210][T19798] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3722'. [ 407.639390][T19823] syzkaller0: entered promiscuous mode [ 407.647761][T19823] syzkaller0: entered allmulticast mode [ 407.705827][T19824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3725'. [ 407.765476][T19828] netlink: 'syz.0.3730': attribute type 12 has an invalid length. [ 408.174769][T19844] pim6reg: entered allmulticast mode [ 408.207612][T19846] pim6reg: left allmulticast mode [ 408.973934][T19891] netlink: 'syz.1.3744': attribute type 12 has an invalid length. [ 409.018024][T19891] netlink: 'syz.1.3744': attribute type 29 has an invalid length. [ 409.044006][T19891] netlink: 'syz.1.3744': attribute type 2 has an invalid length. [ 409.137184][T19891] syzkaller0: create flow: hash 3092733528 index 1 [ 409.174993][T19901] netlink: del zone limit has 8 unknown bytes [ 409.214705][ T6271] syzkaller0: tun_net_xmit 76 [ 409.244045][ T6271] syzkaller0: tun_net_xmit 48 [ 409.254189][ T9] syzkaller0: tun_net_xmit 76 [ 409.498704][T19895] syzkaller0: delete flow: hash 3092733528 index 1 [ 409.825228][T19943] __nla_validate_parse: 7 callbacks suppressed [ 409.825248][T19943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3750'. [ 409.874618][T19943] xt_l2tp: v2 doesn't support IP mode [ 411.401019][T19946] ip_vti0: entered promiscuous mode [ 411.418658][T19946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3753'. [ 411.796283][T19974] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3758'. [ 411.840909][T19974] nbd: illegal input index -8454144 [ 411.916925][T19980] bond3: Removing last arp target with arp_interval on [ 411.924479][T19980] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 411.964655][T19980] bond3 (unregistering): Released all slaves [ 412.052628][T19974] bond3: Removing last arp target with arp_interval on [ 412.061656][T19974] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 412.081752][T19997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3760'. [ 412.096628][T19974] bond3 (unregistering): Released all slaves [ 412.106965][T19999] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.3762'. [ 412.668517][T20021] syzkaller0: entered promiscuous mode [ 412.674182][T20021] syzkaller0: entered allmulticast mode [ 412.817202][T20030] bond3: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 412.896589][T20030] bond3 (unregistering): Released all slaves [ 413.056422][T20042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3770'. [ 413.058397][ T5936] IPVS: starting estimator thread 0... [ 413.083872][T20049] IPVS: lblcr: FWM 3 0x00000003 - no destination available [ 413.152130][T20051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3775'. [ 413.197713][T20053] IPVS: using max 26 ests per chain, 62400 per kthread [ 413.360041][T20064] macvlan0: entered promiscuous mode [ 413.443965][T20070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3782'. [ 414.085470][T20108] netem: unknown loss type 0 [ 414.098532][T20108] netem: change failed [ 414.692926][T20129] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3802'. [ 414.974251][T20142] geneve2: entered promiscuous mode [ 414.989141][ T6274] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 46318 - 0 [ 415.012398][ T6274] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 46318 - 0 [ 415.025963][ T6274] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 46318 - 0 [ 415.035256][ T6274] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 46318 - 0 [ 415.047424][T20147] sock: sock_set_timeout: `syz.0.3809' (pid 20147) tries to set negative timeout [ 415.071706][T20145] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3808'. [ 415.083047][T20147] netlink: 'syz.0.3809': attribute type 29 has an invalid length. [ 415.095445][T20147] netlink: 'syz.0.3809': attribute type 29 has an invalid length. [ 415.116967][T20147] netlink: 500 bytes leftover after parsing attributes in process `syz.0.3809'. [ 415.427342][T20159] netlink: 'syz.3.3812': attribute type 4 has an invalid length. [ 415.445485][T20159] netlink: 'syz.3.3812': attribute type 5 has an invalid length. [ 415.454397][T20159] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3812'. [ 415.462356][T20162] netlink: 'syz.4.3813': attribute type 1 has an invalid length. [ 415.538451][T20162] bond4: entered promiscuous mode [ 415.551496][T20162] bond4: entered allmulticast mode [ 415.557900][T20162] 8021q: adding VLAN 0 to HW filter on device bond4 [ 415.617711][T20164] macvlan4: entered promiscuous mode [ 415.656099][T20164] macvlan4: entered allmulticast mode [ 415.678651][T20164] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 415.730493][T20171] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3816'. [ 415.896774][T20179] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3819'. [ 416.354024][T20210] netlink: 'syz.3.3827': attribute type 1 has an invalid length. [ 416.405586][T20214] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3827'. [ 416.441763][T20210] 8021q: adding VLAN 0 to HW filter on device bond3 [ 416.537742][T20210] ip6erspan0: entered promiscuous mode [ 416.806100][T20230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3832'. [ 416.863307][T20232] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.3834'. [ 417.022012][T20238] vcan0: tx address claim with different name [ 417.031042][T20239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3837'. [ 417.585395][T20279] bond1: option mode: unable to set because the bond device has slaves [ 418.063752][T20305] geneve2: entered promiscuous mode [ 418.087030][ T6263] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 55567 - 0 [ 418.104009][ T6263] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 55567 - 0 [ 418.153575][ T6263] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 55567 - 0 [ 418.164339][T20313] netlink: 'syz.2.3856': attribute type 178 has an invalid length. [ 418.195526][ T6263] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 55567 - 0 [ 418.259872][T20317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3857'. [ 418.329437][T20324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.570033][T20289] infiniband syz0: set down [ 418.585795][T20289] infiniband syz0: added bond0 [ 418.807621][T20289] RDS/IB: syz0: added [ 418.811782][T20289] smc: adding ib device syz0 with port count 1 [ 418.857033][T20289] smc: ib device syz0 port 1 has no pnetid [ 419.020882][T20360] xt_ipcomp: unknown flags 1D [ 419.028627][T20361] xt_ipcomp: unknown flags 1D [ 419.076234][T20367] IPVS: Unknown mcast interface: pim6reg [ 420.336574][T20428] nbd: nbd1 already in use [ 420.349648][T20428] block nbd1: NBD_DISCONNECT [ 420.354397][T20428] block nbd1: Send disconnect failed -32 [ 420.377117][T20428] block nbd1: shutting down sockets [ 420.386348][ C1] blk_print_req_error: 138 callbacks suppressed [ 420.386369][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 420.402222][ C1] buffer_io_error: 138 callbacks suppressed [ 420.402241][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 420.417427][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 420.426989][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 420.434815][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 420.444423][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 420.452287][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 420.461817][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 420.472283][T20428] __nla_validate_parse: 2 callbacks suppressed [ 420.472303][T20428] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3887'. [ 420.488437][ T9775] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 420.499618][ T9775] Buffer I/O error on dev nbd1, logical block 0, async page read [ 420.507744][ T9775] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 420.517987][ T9775] Buffer I/O error on dev nbd1, logical block 1, async page read [ 420.538654][ T9775] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 420.593276][ T9775] Buffer I/O error on dev nbd1, logical block 2, async page read [ 420.611730][ T9775] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 420.648619][T20439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3891'. [ 420.668603][ T9775] Buffer I/O error on dev nbd1, logical block 3, async page read [ 420.697131][ T9775] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 420.756071][ T9775] Buffer I/O error on dev nbd1, logical block 0, async page read [ 420.764015][ T9775] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 420.811206][ T9775] Buffer I/O error on dev nbd1, logical block 1, async page read [ 420.833410][ T9775] ldm_validate_partition_table(): Disk read failed. [ 420.845962][T20446] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 420.860590][ T9775] Dev nbd1: unable to read RDB block 0 [ 420.876371][ T9775] nbd1: unable to read partition table [ 420.887215][T20448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3895'. [ 420.918340][ T9775] ldm_validate_partition_table(): Disk read failed. [ 420.925611][ T9775] Dev nbd1: unable to read RDB block 0 [ 420.966577][ T9775] nbd1: unable to read partition table [ 421.059015][T20458] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.3897'. [ 421.087261][ T6263] bridge_slave_1: left allmulticast mode [ 421.092980][ T6263] bridge_slave_1: left promiscuous mode [ 421.117946][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.188909][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.305608][T20461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3899'. [ 421.500466][ T6263] bond0 (unregistering): (slave gretap1): Releasing active interface [ 421.903788][ T6263] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.913755][ T6263] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.923248][ T6263] ` (unregistering): Released all slaves [ 421.933092][ T6263] bond1 (unregistering): Released all slaves [ 421.951295][ T6263] bond2 (unregistering): Released all slaves [ 421.966204][ T6263] bond3 (unregistering): (slave veth1): Releasing active interface [ 421.974853][ T6263] bond3 (unregistering): Released all slaves [ 421.990107][ T6263] bond4 (unregistering): Released all slaves [ 422.008486][ T6263] bond5 (unregistering): Released all slaves [ 422.025532][ T6263] bond6 (unregistering): Released all slaves [ 422.041024][ T6263] bond0 (unregistering): Released all slaves [ 422.248222][T20486] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3903'. [ 422.588923][T20496] syzkaller0: entered promiscuous mode [ 422.595895][T20496] syzkaller0: entered allmulticast mode [ 423.027486][T20511] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3910'. [ 423.039236][T20511] block nbd0: not configured, cannot reconfigure [ 423.381269][T20523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3913'. [ 424.762195][T20557] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 424.862074][T20563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3924'. [ 424.891372][ T6263] hsr_slave_0: left promiscuous mode [ 424.897660][ T6263] hsr_slave_1: left promiscuous mode [ 424.903745][ T6263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.914241][ T6263] batman_adv: batadv0: Removing interface: ipvlan0 [ 424.922030][ T6263] batman_adv: batadv0: Removing interface: ipvlan1 [ 425.158765][ T6263] team0 (unregistering): Port device team_slave_1 removed [ 425.199216][ T6263] team0 (unregistering): Port device team_slave_0 removed [ 425.335632][ T6263] lo (unregistering): left allmulticast mode [ 425.509857][T20563] team0: Port device team_slave_0 removed [ 425.831680][T20582] vlan3: entered promiscuous mode [ 425.851685][T20582] bridge0: entered promiscuous mode [ 426.145487][ T6263] IPVS: stop unused estimator thread 0... [ 426.155445][T20575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3928'. [ 426.251546][T20603] ip6gre1: entered allmulticast mode [ 426.628463][T20627] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3940'. [ 426.812992][T20638] netlink: 'syz.1.3943': attribute type 8 has an invalid length. [ 427.179366][T20648] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3945'. [ 449.912838][T20662] netlink: 'syz.4.3950': attribute type 26 has an invalid length. [ 449.920264][T20663] netlink: 'syz.1.3947': attribute type 5 has an invalid length. [ 450.056019][T20672] netlink: 'syz.3.3952': attribute type 1 has an invalid length. [ 450.196117][T20678] netlink: 'syz.4.3955': attribute type 4 has an invalid length. [ 450.203918][T20678] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3955'. [ 450.243027][T20678] `: renamed from bond0 [ 450.280226][T20687] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 450.449713][T20692] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.3959'. [ 450.660420][T20700] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 450.882216][T20709] netlink: 'syz.0.3966': attribute type 1 has an invalid length. [ 450.891374][T20709] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3966'. [ 451.560653][T20723] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3969'. [ 451.784342][T20736] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3974'. [ 451.968638][T20743] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3975'. [ 451.978423][T20742] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3975'. [ 452.014269][T20745] xt_NFQUEUE: number of total queues is 0 [ 452.121284][T20747] netlink: 4108 bytes leftover after parsing attributes in process `syz.1.3977'. [ 452.230274][T20751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3979'. [ 452.368090][T20756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.436853][T20756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.456569][T20756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.478944][T20756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.496547][T20756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.530436][T20756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.576345][T20756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.595300][T20773] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3984'. [ 452.636749][T20756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.654420][T20756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.664802][T20756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.973603][T20789] netlink: 'syz.2.3989': attribute type 6 has an invalid length. [ 452.997213][T20787] geneve2: entered promiscuous mode [ 453.012838][T20787] geneve2: entered allmulticast mode [ 453.260498][T20803] syzkaller1: entered promiscuous mode [ 453.285506][T20803] syzkaller1: entered allmulticast mode [ 453.351670][T20812] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 454.570929][T20867] syzkaller0: entered promiscuous mode [ 454.576808][T20867] syzkaller0: entered allmulticast mode [ 454.769854][T20874] smc: net device team0 applied user defined pnetid SYZ2 [ 455.209131][T20895] xt_TCPMSS: Only works on TCP SYN packets [ 455.268438][T20895] __nla_validate_parse: 17 callbacks suppressed [ 455.268458][T20895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4023'. [ 455.322409][T20895] netlink: 'syz.2.4023': attribute type 5 has an invalid length. [ 455.546709][ T6263] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.585992][ T6263] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.646133][ T6263] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.771743][ T6263] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.059856][T20932] netem: change failed [ 456.158781][T20943] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4035'. [ 456.374278][T20948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4035'. [ 457.150042][T20977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4046'. [ 457.224161][T20977] netlink: 'syz.2.4046': attribute type 61 has an invalid length. [ 457.236869][T20977] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4046'. [ 457.286393][T20983] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 457.525614][T20992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4051'. [ 457.984311][T21013] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4057'. [ 458.010951][T21016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4058'. [ 458.072913][T21020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4058'. [ 458.241853][T21018] bond0 (unregistering): Released all slaves [ 458.288286][T21030] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4061'. [ 458.469720][T21036] syzkaller0: entered promiscuous mode [ 458.482378][T21036] syzkaller0: entered allmulticast mode [ 458.881312][T21054] netlink: 'syz.2.4070': attribute type 1 has an invalid length. [ 458.890264][T21054] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 459.081948][T21076] dvmrp0: entered allmulticast mode [ 459.104921][T21074] syzkaller0: entered promiscuous mode [ 459.111770][T21074] syzkaller0: entered allmulticast mode [ 459.122377][T21074] net_ratelimit: 57 callbacks suppressed [ 459.122397][T21074] 0: reclassify loop, rule prio 0, protocol 800 [ 459.367398][T21086] scsi_nl_rcv_msg: discarding partial skb [ 459.467679][T21100] netlink: 'syz.0.4083': attribute type 1 has an invalid length. [ 459.599397][T21103] bond3: (slave gretap1): making interface the new active one [ 459.625391][T21103] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 459.661724][T21094] 8021q: adding VLAN 0 to HW filter on device bond3 [ 459.936987][T21122] netlink: 'syz.0.4091': attribute type 1 has an invalid length. [ 459.956918][T21122] netlink: 'syz.0.4091': attribute type 1 has an invalid length. [ 459.958781][T21118] tipc: Started in network mode [ 459.972291][T21122] netlink: 'syz.0.4091': attribute type 1 has an invalid length. [ 459.990949][T21122] netlink: 'syz.0.4091': attribute type 2 has an invalid length. [ 460.006023][T21118] tipc: Node identity b2812cd35588, cluster identity 4711 [ 460.014729][T21118] tipc: Enabled bearer , priority 0 [ 460.026822][T21118] +: renamed from syzkaller0 [ 460.027579][T21125] netlink: 'syz.2.4093': attribute type 1 has an invalid length. [ 460.043257][T21118] tipc: Disabling bearer [ 460.114124][T21129] netlink: 'syz.2.4095': attribute type 21 has an invalid length. [ 460.121368][T21132] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 460.295920][T21135] __nla_validate_parse: 4 callbacks suppressed [ 460.295943][T21135] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4096'. [ 460.397804][T21143] ksmbd: Unknown IPC event: 3, ignore. [ 460.408496][T21137] bond1: entered promiscuous mode [ 460.413593][T21137] bond1: entered allmulticast mode [ 460.419642][T21137] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.437835][T21144] erspan1: entered allmulticast mode [ 460.450392][T21144] bond1: (slave erspan1): making interface the new active one [ 460.459500][T21144] erspan1: entered promiscuous mode [ 460.469431][T21144] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 460.620329][T21150] validate_nla: 1 callbacks suppressed [ 460.620350][T21150] netlink: 'syz.4.4101': attribute type 32 has an invalid length. [ 460.640470][T21150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4101'. [ 460.688745][T21150] bond0: option coupled_control: invalid value (52) [ 460.717502][T21150] bond0 (unregistering): Released all slaves [ 460.804198][T21159] tipc: Enabling of bearer rejected, media not registered [ 461.110914][T21184] xt_CT: You must specify a L4 protocol and not use inversions on it [ 461.138067][T21184] netlink: 'syz.0.4110': attribute type 21 has an invalid length. [ 461.147186][T21184] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4110'. [ 461.162748][T21184] netlink: 'syz.0.4110': attribute type 5 has an invalid length. [ 461.178015][T21184] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4110'. [ 461.198259][T21186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4111'. [ 461.225881][T21186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4111'. [ 461.375419][T21199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4116'. [ 461.448189][T21198] netlink: 'syz.0.4114': attribute type 1 has an invalid length. [ 461.503359][T21198] 8021q: adding VLAN 0 to HW filter on device bond4 [ 461.581070][T21198] bond4: (slave veth3): Enslaving as an active interface with a down link [ 461.613485][T21213] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 461.625169][T21198] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 461.626295][T21213] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 461.643913][T21198] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 461.797595][T21222] syzkaller0: entered promiscuous mode [ 461.803579][T21222] syzkaller0: entered allmulticast mode [ 462.142124][T21232] netlink: 'syz.3.4127': attribute type 1 has an invalid length. [ 462.171956][T21238] netlink: 'syz.3.4127': attribute type 1 has an invalid length. [ 462.822145][T21275] netlink: 'syz.2.4139': attribute type 1 has an invalid length. [ 462.903561][T21279] netlink: 312 bytes leftover after parsing attributes in process `syz.0.4141'. [ 463.003141][T21283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.313303][T21298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4149'. [ 463.353864][T21300] smc: net device team0 applied user defined pnetid SYZ2 [ 463.732934][T21321] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4156'. [ 463.864202][T21329] netlink: 'syz.2.4159': attribute type 1 has an invalid length. [ 464.063506][T21341] sctp: [Deprecated]: syz.1.4162 (pid 21341) Use of int in maxseg socket option. [ 464.063506][T21341] Use struct sctp_assoc_value instead [ 464.168043][T21349] Bluetooth: MGMT ver 1.23 [ 464.488797][T21371] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 464.600252][T21374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.672847][T21374] bond0: (slave rose0): Enslaving as an active interface with an up link [ 464.785814][T21389] netlink: 'syz.1.4174': attribute type 17 has an invalid length. [ 464.821203][T21391] netlink: 'syz.1.4174': attribute type 17 has an invalid length. [ 464.852197][T21387] syzkaller1: entered promiscuous mode [ 464.864685][T21387] syzkaller1: entered allmulticast mode [ 465.218658][T21420] syzkaller1: entered promiscuous mode [ 465.224948][T21420] syzkaller1: entered allmulticast mode [ 465.668675][T21442] netlink: 'syz.4.4183': attribute type 1 has an invalid length. [ 465.679327][T21442] __nla_validate_parse: 7 callbacks suppressed [ 465.679348][T21442] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4183'. [ 466.120274][T21453] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4187'. [ 466.299233][T21464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4189'. [ 466.348247][T21464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4189'. [ 466.680355][T21484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4193'. [ 466.725185][T21475] 8021q: adding VLAN 0 to HW filter on device bond2 [ 466.727454][T21484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4193'. [ 466.825837][T21484] bond0: entered promiscuous mode [ 466.847798][T21484] bond_slave_0: entered promiscuous mode [ 466.854095][T21484] bond_slave_1: entered promiscuous mode [ 466.870107][T21484] gretap0: entered promiscuous mode [ 467.246407][T21506] netlink: 'syz.3.4198': attribute type 30 has an invalid length. [ 467.694327][T21541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4208'. [ 467.787219][T21541] team0: Cannot enslave team device to itself [ 467.835479][T21542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4208'. [ 467.862362][T21544] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4210'. [ 468.116260][T21561] netlink: 'syz.2.4213': attribute type 1 has an invalid length. [ 468.222602][T21568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4215'. [ 468.452158][T21568] bond4: option xmit_hash_policy: invalid value (64) [ 468.473604][T21568] bond4 (unregistering): Released all slaves [ 469.142382][T21608] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 469.383218][T21627] 8021q: VLANs not supported on ip6gre0 [ 469.867591][T21647] netlink: 'syz.3.4238': attribute type 2 has an invalid length. [ 469.902016][T21647] 9: entered promiscuous mode [ 470.449490][T21678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.519458][T21683] xt_CT: You must specify a L4 protocol and not use inversions on it [ 470.548638][T21678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.594897][T21686] erspan0: entered promiscuous mode [ 470.714243][T21692] __nla_validate_parse: 7 callbacks suppressed [ 470.714257][T21692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4252'. [ 470.786139][T21692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4252'. [ 470.802435][T21692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4252'. [ 470.813308][T21692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4252'. [ 471.829121][T21755] netlink: set zone limit has 4 unknown bytes [ 471.877969][ T24] IPVS: starting estimator thread 0... [ 471.965818][T21760] IPVS: using max 51 ests per chain, 122400 per kthread [ 474.480435][T21731] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 474.667009][T21763] netlink: 'syz.3.4273': attribute type 33 has an invalid length. [ 474.704852][T21770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4272'. [ 474.913775][T21775] nbd0: detected capacity change from 0 to 127 [ 474.932342][T21784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4280'. [ 475.093943][T21797] sch_fq: defrate 0 ignored. [ 475.643035][T21819] netlink: 'syz.0.4286': attribute type 3 has an invalid length. [ 475.651515][T21819] netlink: 'syz.0.4286': attribute type 3 has an invalid length. [ 475.661862][T21818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4287'. [ 475.687754][T21818] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4287'. [ 475.730327][T21821] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4289'. [ 475.755876][T21821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4289'. [ 475.859355][ T5836] block nbd0: Receive control failed (result -104) [ 476.635630][T21865] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4300'. [ 476.778290][T21874] netlink: 'syz.3.4305': attribute type 11 has an invalid length. [ 476.796076][T21874] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4305'. [ 477.064534][T21886] openvswitch: netlink: Flow key attr not present in new flow. [ 477.710817][ T6271] bond0 (unregistering): Released all slaves [ 477.721498][ T6271] bond1 (unregistering): Released all slaves [ 477.735539][ T6271] bond2 (unregistering): Released all slaves [ 477.750906][ T6271] bond3 (unregistering): Released all slaves [ 477.764795][ T6271] bond4 (unregistering): Released all slaves [ 477.781951][ T6271] bond5 (unregistering): Released all slaves [ 477.807139][ T6271] bond6 (unregistering): Released all slaves [ 477.822141][ T6271] bond7 (unregistering): Released all slaves [ 477.835852][ T6271] bond8 (unregistering): Released all slaves [ 477.850590][ T6271] bond9 (unregistering): Released all slaves [ 477.865606][ T6271] bond10 (unregistering): Released all slaves [ 477.940529][T21889] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 478.156398][ T6271] : left promiscuous mode [ 478.372221][ T6271] tipc: Left network mode [ 478.450143][T21917] openvswitch: netlink: IPv4 tun info is not correct [ 478.878993][T21933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4324'. [ 478.910442][T21933] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4324'. [ 478.951922][T21933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4324'. [ 479.020393][T21937] openvswitch: netlink: Flow actions attr not present in new flow. [ 479.346848][T21962] ip6t_srh: unknown srh invflags 4000 [ 479.528713][T21955] syzkaller0: entered promiscuous mode [ 479.545876][T21955] syzkaller0: entered allmulticast mode [ 479.910493][T21997] x_tables: unsorted entry at hook 2 [ 479.995136][T21994] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4338'. [ 480.071300][T22004] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4341'. [ 480.109748][T21994] syzkaller0: entered promiscuous mode [ 480.122929][T22003] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.4340'. [ 480.133106][T21994] syzkaller0: entered allmulticast mode [ 480.460594][T22027] netlink: 'syz.1.4347': attribute type 61 has an invalid length. [ 480.650004][ T6271] hsr_slave_0: left promiscuous mode [ 480.666137][ T6271] hsr_slave_1: left promiscuous mode [ 480.773350][ T6271] pim6reg527 (unregistering): left allmulticast mode [ 480.876339][ T6271] team0 (unregistering): Port device batadv1 removed [ 481.697104][T22036] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 481.879686][T22091] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 481.947395][T22091] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 481.964661][T22091] gretap1: entered promiscuous mode [ 481.971260][T22091] gretap1: entered allmulticast mode [ 482.203833][T22107] netlink: 'syz.2.4358': attribute type 4 has an invalid length. [ 482.279281][T22111] netlink: 'syz.2.4358': attribute type 4 has an invalid length. [ 482.674253][T22123] __nla_validate_parse: 4 callbacks suppressed [ 482.674273][T22123] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4363'. [ 482.725246][T22128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4364'. [ 483.179305][T22154] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 483.250545][T22160] netlink: 'syz.2.4371': attribute type 5 has an invalid length. [ 483.282035][T22160] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4371'. [ 483.352393][T22165] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 483.545014][T22174] x_tables: duplicate underflow at hook 2 [ 483.558805][T22178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4380'. [ 483.752045][ T6271] IPVS: stop unused estimator thread 0... [ 484.138947][T22208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4390'. [ 484.165608][T22210] xt_limit: Overflow, try lower: 604147548/4200216962 [ 484.352639][T22223] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004 [ 484.361391][T22222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4394'. [ 484.380120][T22223] IPVS: Error connecting to the multicast addr [ 484.401012][T22222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4394'. [ 484.634743][T22234] netlink: 'syz.2.4398': attribute type 13 has an invalid length. [ 484.673316][T22236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.199066][T22268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4411'. [ 485.236514][T22273] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4410'. [ 485.675098][T22282] syzkaller0: entered promiscuous mode [ 485.708768][T22282] syzkaller0: entered allmulticast mode [ 485.724097][T22284] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4414'. [ 485.797719][T22295] lo: entered allmulticast mode [ 487.624583][T22381] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 487.826134][T22387] __nla_validate_parse: 9 callbacks suppressed [ 487.826156][T22387] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4443'. [ 487.882450][T22390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.971322][T22397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4446'. [ 487.978497][T22398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4446'. [ 488.022138][T22396] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4446'. [ 488.318518][ T29] audit: type=1107 audit(1771041340.689:9): pid=22419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 488.328576][T22416] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4452'. [ 488.555456][T22434] tipc: Started in network mode [ 488.579640][T22434] tipc: Node identity 4ec494f6d7f6, cluster identity 4711 [ 488.593744][T22439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.604012][T22434] tipc: Enabled bearer , priority 0 [ 488.658670][T22435] syzkaller0: entered promiscuous mode [ 488.699740][T22435] syzkaller0: entered allmulticast mode [ 488.735409][T22443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.754557][T22434] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 488.829404][T22434] tipc: Resetting bearer [ 488.840988][T22433] tipc: Resetting bearer [ 488.862575][T22433] tipc: Disabling bearer [ 489.078118][T22466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4469'. [ 489.154821][T22465] ksmbd: Unknown IPC event: 8, ignore. [ 489.220061][T22476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4470'. [ 489.383400][T22467] syzkaller0: entered promiscuous mode [ 489.396383][T22467] syzkaller0: entered allmulticast mode [ 489.519527][T22482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4473'. [ 489.718776][T22500] IPv6: NLM_F_CREATE should be specified when creating new route [ 490.260757][T22529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4483'. [ 490.319551][T22531] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4484'. [ 490.454195][T22536] openvswitch: netlink: Flow actions attr not present in new flow. [ 490.560127][T22544] tipc: Enabling of bearer rejected, failed to enable media [ 490.567988][T22549] netlink: 'syz.1.4488': attribute type 29 has an invalid length. [ 490.620397][T22556] ipvlan2: entered allmulticast mode [ 490.626101][T22556] batadv_slave_1: entered allmulticast mode [ 490.769026][T22561] IPVS: set_ctl: invalid protocol: 46 172.30.1.4:20002 [ 490.820342][T22566] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 490.849799][T22564] xfrm1: entered allmulticast mode [ 491.011589][T22573] netlink: 'syz.3.4496': attribute type 1 has an invalid length. [ 491.571190][T22605] netlink: 'syz.3.4506': attribute type 26 has an invalid length. [ 491.582045][T22514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.596523][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.606988][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.619026][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.868089][T22617] syzkaller0: entered promiscuous mode [ 491.873897][T22617] syzkaller0: entered allmulticast mode [ 491.898888][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.907444][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.997808][T22632] netlink: 'syz.1.4512': attribute type 3 has an invalid length. [ 492.572554][T22669] netlink: 'syz.0.4525': attribute type 4 has an invalid length. [ 492.588543][T22669] netlink: 'syz.0.4525': attribute type 1 has an invalid length. [ 492.595310][T22668] tipc: Started in network mode [ 492.602338][T22668] tipc: Node identity 926acc5fc6a4, cluster identity 4711 [ 492.623447][T22668] tipc: Enabled bearer , priority 11 [ 492.845398][T22679] __nla_validate_parse: 19 callbacks suppressed [ 492.845421][T22679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4527'. [ 492.918305][T22679] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4527'. [ 492.954914][T22679] gretap2: entered promiscuous mode [ 492.960764][T22679] gretap2: entered allmulticast mode [ 492.971630][T22694] tipc: Enabling of bearer rejected, failed to enable media [ 493.046156][T22695] syzkaller0: entered promiscuous mode [ 493.052281][T22695] syzkaller0: entered allmulticast mode [ 493.087433][T22699] netlink: 'syz.3.4533': attribute type 1 has an invalid length. [ 493.125926][T22699] netlink: 'syz.3.4533': attribute type 1 has an invalid length. [ 493.131231][T22702] syzkaller0: entered promiscuous mode [ 493.139647][T22702] syzkaller0: entered allmulticast mode [ 493.444023][T22706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4535'. [ 493.554843][T22727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4539'. [ 493.583120][T22723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4539'. [ 493.653996][T22727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4539'. [ 493.839290][T22745] net_ratelimit: 7 callbacks suppressed [ 493.839310][T22745] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.979633][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.988481][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.702721][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.018986][ T1206] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.027673][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.309015][ T5970] tipc: Node number set to 1422838879 [ 495.317756][T22746] lo: Caught tx_queue_len zero misconfig [ 495.323571][T22746] netem: unknown loss type 0 [ 495.349035][T22746] netem: change failed [ 495.526973][T22750] bridge_slave_0: left allmulticast mode [ 495.535934][T22750] bridge_slave_0: left promiscuous mode [ 495.543638][T22750] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.565221][T22755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4548'. [ 495.585069][T22755] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 495.602255][T22750] bridge_slave_1: left allmulticast mode [ 495.611771][T22750] bridge_slave_1: left promiscuous mode [ 495.617851][T22750] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.669735][T22750] bond0: (slave bond_slave_0): Releasing backup interface [ 495.731169][T22774] netlink: 'syz.3.4549': attribute type 1 has an invalid length. [ 495.796984][T22750] bond0: (slave bond_slave_1): Releasing backup interface [ 495.875407][T22750] team0: Port device team_slave_1 removed [ 495.908689][T22750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.923738][T22765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4549'. [ 495.926052][T22750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.947631][T22750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.956524][T22750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.966856][T22750] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 496.081795][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.090388][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.285522][T22793] netlink: zone id is out of range [ 496.548164][T22801] erspan0: left promiscuous mode [ 496.665149][T22814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4559'. [ 496.686447][T22820] netlink: 'syz.0.4559': attribute type 11 has an invalid length. [ 496.694312][T22820] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4559'. [ 496.822997][T22801] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.830592][T22801] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.086768][T22830] bond1: option mode: unable to set because the bond device has slaves [ 497.201881][T22834] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 497.310108][T22840] team_slave_0: entered promiscuous mode [ 497.315936][T22840] team_slave_1: entered promiscuous mode [ 497.332473][T22840] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 497.526953][T22851] siw: device registration error -23 [ 497.625456][T22860] xfrm2: entered promiscuous mode [ 497.645980][T22860] xfrm2: entered allmulticast mode [ 497.680209][T22860] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 497.871827][T22872] __nla_validate_parse: 5 callbacks suppressed [ 497.871846][T22872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4577'. [ 497.899162][T22875] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 497.952678][T22878] netlink: 'syz.1.4576': attribute type 1 has an invalid length. [ 497.979060][T22878] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4576'. [ 497.988828][T22878] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4576'. [ 497.996468][T22882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4579'. [ 498.170038][T22895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4579'. [ 498.176939][T22896] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4583'. [ 498.329219][T22902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4587'. [ 498.355864][T22902] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4587'. [ 498.375368][T22902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4587'. [ 498.664609][T22921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4593'. [ 498.905521][T22932] netlink: 'syz.0.4598': attribute type 2 has an invalid length. [ 498.928959][T22930] veth0: entered promiscuous mode [ 498.934840][T22930] veth0: left promiscuous mode [ 499.023167][T22939] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 499.063036][T22939] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 499.603515][T22975] netlink: 'syz.0.4612': attribute type 1 has an invalid length. [ 499.611980][T22975] netlink: 'syz.0.4612': attribute type 1 has an invalid length. [ 499.621092][T22975] netlink: 'syz.0.4612': attribute type 8 has an invalid length. [ 499.634566][T22975] veth0: entered promiscuous mode [ 499.635242][T22976] xt_CT: You must specify a L4 protocol and not use inversions on it [ 499.652062][T22973] veth0: left promiscuous mode [ 499.829833][T22987] syzkaller0: entered promiscuous mode [ 499.843106][T22987] syzkaller0: entered allmulticast mode [ 499.864039][T22987] macsec1: entered promiscuous mode [ 499.873125][T22987] vlan0: entered promiscuous mode [ 499.944898][T22996] netlink: 'syz.2.4620': attribute type 4 has an invalid length. [ 500.063761][T22998] xt_TPROXY: Can be used only with -p tcp or -p udp [ 500.969361][T23049] netlink: 'syz.4.4637': attribute type 1 has an invalid length. [ 501.023634][T23049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.051142][T23049] macvlan4: entered promiscuous mode [ 501.063542][T23049] macvlan4: entered allmulticast mode [ 501.124428][T23051] net_ratelimit: 147 callbacks suppressed [ 501.124449][T23051] netlink: zone id is out of range [ 501.150608][T23051] netlink: get zone limit has 4 unknown bytes [ 501.165614][T23057] netlink: 'syz.1.4640': attribute type 15 has an invalid length. [ 501.385603][ T5836] Bluetooth: hci1: link tx timeout [ 501.397520][ T5836] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 501.809474][T23098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.426848][ T5138] Bluetooth: hci1: command 0x0405 tx timeout [ 503.774621][T23121] __nla_validate_parse: 19 callbacks suppressed [ 503.774641][T23121] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4662'. [ 504.007369][T23136] tipc: Enabling of bearer rejected, failed to enable media [ 504.160451][T23149] netlink: 'syz.4.4670': attribute type 13 has an invalid length. [ 504.207755][T23148] syzkaller0: entered promiscuous mode [ 504.213288][T23148] syzkaller0: entered allmulticast mode [ 504.219480][T23149] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4670'. [ 504.250802][T23149] syz_tun: refused to change device tx_queue_len [ 504.392589][T23174] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4676'. [ 504.447466][T23183] netlink: 'syz.2.4677': attribute type 1 has an invalid length. [ 504.899494][T23204] netlink: 'syz.2.4685': attribute type 1 has an invalid length. [ 504.940570][T23211] netlink: 'syz.0.4687': attribute type 21 has an invalid length. [ 504.951139][T23204] 8021q: adding VLAN 0 to HW filter on device bond4 [ 505.001657][T23211] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4687'. [ 505.019799][ T1678] block nbd0: Possible stuck request ffff888026088000: control (read@0,1024B). Runtime 30 seconds [ 505.031200][ T1678] block nbd0: Possible stuck request ffff888026088200: control (read@1024,1024B). Runtime 30 seconds [ 505.044708][ T1678] block nbd0: Possible stuck request ffff888026088400: control (read@2048,1024B). Runtime 30 seconds [ 505.055918][ T1678] block nbd0: Possible stuck request ffff888026088600: control (read@3072,1024B). Runtime 30 seconds [ 505.255558][T23231] netlink: 'syz.1.4694': attribute type 4 has an invalid length. [ 505.362094][T23237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4695'. [ 505.881437][T23269] syzkaller0: entered promiscuous mode [ 505.938719][T23260] can: request_module (can-proto-4) failed. [ 506.117932][T23281] netlink: 'syz.3.4710': attribute type 83 has an invalid length. [ 506.270072][T23286] netlink: zone id is out of range [ 506.275440][T23286] netlink: get zone limit has 4 unknown bytes [ 506.370797][T23287] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.657569][T23299] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.761416][T23179] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.775307][T23302] netlink: 'syz.3.4718': attribute type 4 has an invalid length. [ 506.798048][T23302] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4718'. [ 506.805754][T23179] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.830654][T23179] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.866233][T23179] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.183799][T23324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4728'. [ 507.210548][T23320] syzkaller0: entered promiscuous mode [ 507.216342][T23320] syzkaller0: entered allmulticast mode [ 507.225437][T23320] netlink: 'syz.2.4726': attribute type 1 has an invalid length. [ 507.239023][T23320] netlink: 'syz.2.4726': attribute type 1 has an invalid length. [ 507.399264][T23335] netlink: 'syz.3.4732': attribute type 20 has an invalid length. [ 507.408148][T23335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4732'. [ 507.439343][T23335] netlink: 'syz.3.4732': attribute type 20 has an invalid length. [ 507.447564][T23335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4732'. [ 507.549565][T23348] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4733'. [ 507.755074][T23355] bond4: entered promiscuous mode [ 507.760963][T23355] 8021q: adding VLAN 0 to HW filter on device bond4 [ 507.877983][T23355] 8021q: adding VLAN 0 to HW filter on device bond4 [ 507.897227][T23355] bond4: (slave sit1): The slave device specified does not support setting the MAC address [ 507.914355][T23355] bond4: (slave sit1): Error -95 calling set_mac_address [ 508.398164][T23395] netlink: 'syz.0.4745': attribute type 5 has an invalid length. [ 508.426286][T23399] netlink: 'syz.0.4745': attribute type 5 has an invalid length. [ 508.587600][T23403] bond2: Unable to set up delay as MII monitoring is disabled [ 508.598467][T23403] bond2 (unregistering): Released all slaves [ 508.643494][T23413] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 508.840829][T23428] delete_channel: no stack [ 509.160085][T23443] __nla_validate_parse: 8 callbacks suppressed [ 509.160107][T23443] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4759'. [ 509.285565][T23454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 509.355555][T23461] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 509.514825][T23464] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 509.643838][T23476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4767'. [ 509.696143][T23481] RDS: rds_bind could not find a transport for ::ffff:ffff, load rds_tcp or rds_rdma? [ 509.718231][T23476] bond0 (unregistering): left promiscuous mode [ 509.724455][T23476] bond_slave_0: left promiscuous mode [ 509.745083][T23476] bond_slave_1: left promiscuous mode [ 509.781024][T23476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.796523][T23483] netlink: 'syz.1.4771': attribute type 1 has an invalid length. [ 509.820274][T23476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.820608][T23485] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 509.850741][T23476] bond0 (unregistering): Released all slaves [ 509.917330][T23492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4770'. [ 509.929047][T23487] bond2: (slave ip6gretap1): making interface the new active one [ 509.961936][T23487] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 510.100736][T23485] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 510.132645][T23485] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 510.168834][T23488] syzkaller0: entered promiscuous mode [ 510.174448][T23488] syzkaller0: entered allmulticast mode [ 510.307088][T23507] netlink: 'syz.1.4775': attribute type 32 has an invalid length. [ 510.315181][T23507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4775'. [ 510.352097][T23507] bond3: option coupled_control: invalid value (232) [ 510.361690][T23507] bond3 (unregistering): Released all slaves [ 510.548583][T23517] xt_TPROXY: Can be used only with -p tcp or -p udp [ 510.553541][T23515] : entered promiscuous mode [ 510.588619][T23518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4778'. [ 510.673856][T23518] bridge0: port 1(veth7) entered blocking state [ 510.681443][T23523] nbd: socks must be embedded in a SOCK_ITEM attr [ 510.688729][T23518] bridge0: port 1(veth7) entered disabled state [ 510.698425][T23518] veth7: entered allmulticast mode [ 510.706787][T23518] veth7: entered promiscuous mode [ 510.761411][T23525] bridge0: port 2(veth0_to_bond) entered blocking state [ 510.772583][T23525] bridge0: port 2(veth0_to_bond) entered disabled state [ 510.785299][T23525] veth0_to_bond: entered allmulticast mode [ 510.794604][T23525] veth0_to_bond: entered promiscuous mode [ 510.880260][T23529] bond5: Unable to set up delay as MII monitoring is disabled [ 510.889695][T23529] bond5 (unregistering): Released all slaves [ 511.257100][T23551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4789'. [ 511.422139][T23555] tipc: Enabling of bearer rejected, failed to enable media [ 511.581175][T23565] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 511.687341][T23573] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 511.800831][T23580] netlink: zone id is out of range [ 511.845424][T23578] netlink: set zone limit has 4 unknown bytes [ 511.854646][T23580] netlink: zone id is out of range [ 512.045143][T23601] ip6gre1: entered promiscuous mode [ 512.097930][T23601] ip6gre1: entered allmulticast mode [ 512.372036][T23623] validate_nla: 1 callbacks suppressed [ 512.372051][T23623] netlink: 'syz.0.4814': attribute type 10 has an invalid length. [ 512.386706][T23623] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 512.459656][T23628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4814'. [ 514.809689][T23582] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 515.006336][T23633] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4816'. [ 515.016682][T23638] Unsupported ieee802154 address type: 0 [ 515.034879][T23638] syz_tun: entered allmulticast mode [ 515.052327][T23633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 515.104661][T23638] dvmrp1: entered allmulticast mode [ 515.166579][T23652] syzkaller0: entered promiscuous mode [ 515.173272][T23652] syzkaller0: entered allmulticast mode [ 515.203680][T23640] netem: change failed [ 515.213066][T23640] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4817'. [ 515.312256][T23658] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 515.494713][T23670] netlink: 'syz.1.4826': attribute type 2 has an invalid length. [ 515.509911][T23670] ‚#{6c: entered promiscuous mode [ 515.519976][T23670] netlink: 'syz.1.4826': attribute type 2 has an invalid length. [ 515.530302][T23670] netlink: 'syz.1.4826': attribute type 2 has an invalid length. [ 515.541461][T23670] netlink: 'syz.1.4826': attribute type 2 has an invalid length. [ 515.552280][T23670] netlink: 'syz.1.4826': attribute type 2 has an invalid length. [ 515.556956][T23669] netlink: 'syz.1.4826': attribute type 2 has an invalid length. [ 515.566284][T23670] netlink: 'syz.1.4826': attribute type 2 has an invalid length. [ 515.576692][T23670] ‚#{6c: left promiscuous mode [ 515.629737][T23670] netlink: 'syz.1.4826': attribute type 2 has an invalid length. [ 515.638490][T23669] netlink: 'syz.1.4826': attribute type 2 has an invalid length. [ 515.647022][T23673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4827'. [ 515.713779][T23675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4828'. [ 515.737252][T23675] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4828'. [ 515.836734][T23637] syz_tun: left allmulticast mode [ 518.025574][T23642] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 518.259566][T23687] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4835'. [ 518.272222][T23690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4831'. [ 518.285443][T23693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4833'. [ 518.443154][T23699] validate_nla: 57 callbacks suppressed [ 518.443177][T23699] netlink: 'syz.2.4837': attribute type 1 has an invalid length. [ 518.601377][T23703] bond0: (slave gretap3): making interface the new active one [ 518.617073][T23703] bond0: (slave gretap3): Enslaving as an active interface with an up link [ 518.640565][T23704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4836'. [ 518.652817][T23710] openvswitch: netlink: IP tunnel dst address not specified [ 519.000629][T23722] bond7: entered promiscuous mode [ 519.020913][T23722] bond7: entered allmulticast mode [ 519.035309][T23722] 8021q: adding VLAN 0 to HW filter on device bond7 [ 519.268022][T23741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4851'. [ 519.309153][T23741] hsr_slave_0: left promiscuous mode [ 519.597997][T23757] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 519.893130][T23767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.953664][T23772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.007731][T23772] 8021q: adding VLAN 0 to HW filter on device bond5 [ 520.572031][T23804] __nla_validate_parse: 2 callbacks suppressed [ 520.572060][T23804] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4872'. [ 520.710484][T23806] 8021q: VLANs not supported on ip6tnl0 [ 520.786069][T23811] netlink: 'syz.1.4877': attribute type 10 has an invalid length. [ 520.804587][T23813] netlink: 'syz.1.4877': attribute type 10 has an invalid length. [ 520.853533][T23811] bridge0: port 3(team0) entered blocking state [ 520.868923][T23811] bridge0: port 3(team0) entered disabled state [ 520.875575][T23811] team0: entered allmulticast mode [ 520.885479][T23811] team_slave_1: entered allmulticast mode [ 520.904672][T23811] team0: entered promiscuous mode [ 520.915908][T23811] team_slave_1: entered promiscuous mode [ 520.936778][T23811] bridge0: port 3(team0) entered blocking state [ 520.943243][T23811] bridge0: port 3(team0) entered forwarding state [ 521.476265][T23808] can: request_module (can-proto-0) failed. [ 521.510531][T23852] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4887'. [ 521.564699][T23856] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 521.629869][T23855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.723057][T23863] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4890'. [ 522.009048][T23846] netlink: 'syz.4.4884': attribute type 29 has an invalid length. [ 522.045878][T23846] netlink: 'syz.4.4884': attribute type 29 has an invalid length. [ 522.280743][T23888] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4895'. [ 522.299431][T23892] Cannot find set identified by id 65534 to match [ 522.726947][T23915] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.4901'. [ 522.753534][T23922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4901'. [ 523.079723][T23941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4911'. [ 523.380623][T23966] netlink: 'syz.1.4919': attribute type 10 has an invalid length. [ 523.467306][T23974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4920'. [ 523.522481][T23966] dummy0: entered promiscuous mode [ 523.541835][T23966] dummy0: entered allmulticast mode [ 523.550193][T23966] team0: Port device dummy0 added [ 523.556673][T23974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4920'. [ 524.275580][T24021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4935'. [ 524.291690][T24023] netlink: 'syz.1.4936': attribute type 2 has an invalid length. [ 524.346609][T24026] syzkaller0: entered promiscuous mode [ 524.357281][T24026] syzkaller0: entered allmulticast mode [ 524.554169][T24038] dvmrp0: left allmulticast mode [ 524.803259][T24053] erspan0: entered promiscuous mode [ 524.827085][T24053] gretap0: entered promiscuous mode [ 524.858288][T24053] debugfs: 'hsr1' already exists in 'hsr' [ 524.864081][T24053] Cannot create hsr debugfs directory [ 524.957952][T24065] netlink: 'syz.3.4950': attribute type 1 has an invalid length. [ 524.966062][T24065] netlink: 'syz.3.4950': attribute type 4 has an invalid length. [ 525.128701][T24073] netlink: 'syz.3.4953': attribute type 83 has an invalid length. [ 525.228434][T24079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.244095][T24079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.565965][T24094] netlink: 'syz.2.4960': attribute type 1 has an invalid length. [ 525.743134][T24104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.798360][T24106] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.920910][T24116] __nla_validate_parse: 7 callbacks suppressed [ 525.920932][T24116] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4963'. [ 526.182503][T24131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4969'. [ 526.709722][T24163] veth0: entered promiscuous mode [ 526.742253][T24162] veth0: left promiscuous mode [ 526.937948][T24183] netlink: 'syz.2.4987': attribute type 2 has an invalid length. [ 526.954373][T24183] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4987'. [ 527.018635][T24192] macvlan1: entered promiscuous mode [ 527.024827][T24192] macvlan1: entered allmulticast mode [ 527.030488][T24192] veth1_vlan: entered allmulticast mode [ 527.058342][T24180] syzkaller0: entered promiscuous mode [ 527.064133][T24180] syzkaller0: entered allmulticast mode [ 527.473228][T24215] sctp: [Deprecated]: syz.3.4996 (pid 24215) Use of int in maxseg socket option. [ 527.473228][T24215] Use struct sctp_assoc_value instead [ 527.524084][T24226] netlink: 348 bytes leftover after parsing attributes in process `syz.4.4999'. [ 527.536385][T24226] netlink: 'syz.4.4999': attribute type 28 has an invalid length. [ 527.544549][T24226] netlink: 'syz.4.4999': attribute type 3 has an invalid length. [ 527.585520][T24226] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4999'. [ 528.097709][T24264] netlink: 'syz.1.5010': attribute type 2 has an invalid length. [ 528.124530][T24265] netlink: 'syz.1.5010': attribute type 2 has an invalid length. [ 528.518696][T24291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5019'. [ 528.675171][T24302] syz_tun: entered allmulticast mode [ 528.780140][T24302] syz_tun: left allmulticast mode [ 528.802831][T24312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5026'. [ 528.838157][T24307] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 528.856736][T24307] syzkaller1: Linktype set failed because interface is up [ 528.960162][T24323] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 529.031867][T24318] syzkaller0: entered promiscuous mode [ 529.037565][T24318] syzkaller0: entered allmulticast mode [ 529.087453][T24318] tipc: Enabled bearer , priority 0 [ 529.128014][T24317] tipc: Resetting bearer [ 529.157271][T24317] tipc: Disabling bearer [ 529.314643][T24333] can: request_module (can-proto-0) failed. [ 529.625399][T24360] tipc: Enabled bearer , priority 0 [ 529.633854][T24360] netlink: 'syz.1.5042': attribute type 21 has an invalid length. [ 529.659218][T24360] IPv6: NLM_F_CREATE should be specified when creating new route [ 529.670875][T24362] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5043'. [ 529.707844][T24360] syzkaller0: entered promiscuous mode [ 529.713347][T24360] syzkaller0: entered allmulticast mode [ 529.719819][T24360] tipc: Resetting bearer [ 529.729496][T24362] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5043'. [ 529.754705][T24359] tipc: Resetting bearer [ 529.808197][T24369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5045'. [ 531.895426][T24359] tipc: Disabling bearer [ 532.154126][T24398] vlan4: entered promiscuous mode [ 532.177650][T24398] vlan4: entered allmulticast mode [ 532.182828][T24398] hsr_slave_1: entered allmulticast mode [ 532.196636][T24403] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 532.233094][T24412] __nla_validate_parse: 1 callbacks suppressed [ 532.233210][T24412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5057'. [ 532.437798][T24423] netlink: 'syz.2.5060': attribute type 29 has an invalid length. [ 532.692625][T24439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5067'. [ 532.982657][T24450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5071'. [ 533.131923][T24452] netlink: 'syz.2.5072': attribute type 16 has an invalid length. [ 533.147093][T24452] netlink: 'syz.2.5072': attribute type 17 has an invalid length. [ 533.189842][T24452] erspan0: left promiscuous mode [ 533.201909][T24462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5076'. [ 533.204046][T24452] ip_vti0: left promiscuous mode [ 533.231030][T24452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 533.506879][T24471] netem: change failed [ 533.559318][T24477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5079'. [ 533.654986][T24481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5081'. [ 533.688278][T24481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5081'. [ 533.690099][T24480] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5082'. [ 533.745251][T24480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5082'. [ 533.770021][T24480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5082'. [ 534.469319][T24529] netlink: 'syz.4.5093': attribute type 3 has an invalid length. [ 534.603063][T24533] syzkaller0: entered promiscuous mode [ 534.636299][T24533] syzkaller0: entered allmulticast mode [ 534.861884][T24555] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 535.114927][ T1678] block nbd0: Possible stuck request ffff888026088000: control (read@0,1024B). Runtime 60 seconds [ 535.136165][ T1678] block nbd0: Possible stuck request ffff888026088200: control (read@1024,1024B). Runtime 60 seconds [ 535.151588][ T1678] block nbd0: Possible stuck request ffff888026088400: control (read@2048,1024B). Runtime 60 seconds [ 535.158535][T24576] nbd: must specify at least one socket [ 535.162809][ T1678] block nbd0: Possible stuck request ffff888026088600: control (read@3072,1024B). Runtime 60 seconds [ 535.218635][T24576] nbd: couldn't find device at index 1 [ 535.298558][T24588] netlink: 'syz.1.5107': attribute type 19 has an invalid length. [ 535.399755][T24598] sctp: [Deprecated]: syz.0.5111 (pid 24598) Use of struct sctp_assoc_value in delayed_ack socket option. [ 535.399755][T24598] Use struct sctp_sack_info instead [ 538.233778][T24582] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 538.442002][T24622] syzkaller0: entered promiscuous mode [ 538.451344][T24624] netlink: 'syz.1.5117': attribute type 8 has an invalid length. [ 538.459479][T24622] syzkaller0: entered allmulticast mode [ 538.527466][T24626] syzkaller0: entered promiscuous mode [ 538.535023][T24626] syzkaller0: entered allmulticast mode [ 538.600810][T24633] __nla_validate_parse: 10 callbacks suppressed [ 538.600831][T24633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5122'. [ 539.339057][T24684] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5135'. [ 539.349070][T24665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5132'. [ 539.452225][T24693] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 539.687799][T24699] syzkaller0: entered promiscuous mode [ 539.708717][T24699] syzkaller0: entered allmulticast mode [ 539.810125][T24709] netlink: 'syz.3.5143': attribute type 1 has an invalid length. [ 539.888602][T24714] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5142'. [ 539.972561][T24716] syzkaller0: entered promiscuous mode [ 540.016466][T24716] syzkaller0: entered allmulticast mode [ 540.033239][T24722] netlink: 284 bytes leftover after parsing attributes in process `syz.2.5147'. [ 540.045895][T24722] ip6tnl0: Caught tx_queue_len zero misconfig [ 540.192446][T24727] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5148'. [ 540.639677][T24751] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5151'. [ 540.646288][T24748] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 542.143399][T24722] netlink: 284 bytes leftover after parsing attributes in process `syz.2.5147'. [ 542.229876][T24746] kthread_run failed with err -4 [ 542.270881][T24770] bridge_slave_0: invalid flags given to default FDB implementation [ 542.279588][T24770] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5154'. [ 542.342874][T24770] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5154'. [ 543.230772][T24819] syzkaller0: entered promiscuous mode [ 543.252812][T24819] syzkaller0: entered allmulticast mode [ 543.286651][T24819] tipc: Enabled bearer , priority 0 [ 543.324436][T24818] tipc: Resetting bearer [ 543.428096][T24818] tipc: Disabling bearer [ 543.445357][T24834] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 543.680030][T24849] __nla_validate_parse: 3 callbacks suppressed [ 543.680050][T24849] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5175'. [ 543.733916][T24849] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5175'. [ 543.757708][T24853] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5175'. [ 543.784254][T24853] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5175'. [ 543.802330][T24856] "syz.2.5177" (24856) uses obsolete ecb(arc4) skcipher [ 543.877062][T24864] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5179'. [ 544.100794][T24873] Bluetooth: hci3: Opcode 0x0c1a failed: -22 [ 546.893917][ T5187] udevd[5187]: worker [20669] /devices/virtual/block/nbd0 is taking a long time [ 559.169349][T24886] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 559.180795][T24886] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 559.189215][T24886] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 559.206923][T24886] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 559.218425][T24886] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 559.280491][T24886] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 559.290325][T24886] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 559.299373][T24886] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 559.307921][T24886] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 559.317159][T24886] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 559.379689][T24886] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 559.391817][T24886] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 559.400584][T24886] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 559.409019][T24886] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 559.428732][T24893] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 559.440312][T24893] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 559.450390][ T5836] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 559.459230][ T5836] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 559.479509][T24894] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 559.487468][T24894] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 559.834965][T24884] chnl_net:caif_netlink_parms(): no params data found [ 560.071863][T24884] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.079762][T24884] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.087440][T24884] bridge_slave_0: entered allmulticast mode [ 560.094600][T24884] bridge_slave_0: entered promiscuous mode [ 560.104634][T24884] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.112773][T24884] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.120744][T24884] bridge_slave_1: entered allmulticast mode [ 560.138139][T24884] bridge_slave_1: entered promiscuous mode [ 560.303324][T24884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.358115][T24884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.408250][T24886] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 560.419540][T24886] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 560.428955][T24886] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 560.437868][T24886] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 560.446434][T24886] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 560.488853][T24884] team0: Port device team_slave_0 added [ 560.520680][T24884] team0: Port device team_slave_1 added [ 560.581913][T24887] chnl_net:caif_netlink_parms(): no params data found [ 560.603616][T24884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.610938][T24884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.637960][T24884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.650484][T24884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.657592][T24884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.683862][T24884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.828643][T24884] hsr_slave_0: entered promiscuous mode [ 560.835361][T24884] hsr_slave_1: entered promiscuous mode [ 561.041047][T24887] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.048501][T24887] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.056398][T24887] bridge_slave_0: entered allmulticast mode [ 561.063596][T24887] bridge_slave_0: entered promiscuous mode [ 561.122456][T24887] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.131083][T24887] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.138551][T24887] bridge_slave_1: entered allmulticast mode [ 561.148610][T24887] bridge_slave_1: entered promiscuous mode [ 561.217996][T24889] chnl_net:caif_netlink_parms(): no params data found [ 561.255719][T24894] Bluetooth: hci0: command tx timeout [ 561.311303][T24887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.347561][T24891] chnl_net:caif_netlink_parms(): no params data found [ 561.360997][T24887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.416750][T24894] Bluetooth: hci6: command tx timeout [ 561.479952][T24887] team0: Port device team_slave_0 added [ 561.496400][T24894] Bluetooth: hci7: command tx timeout [ 561.515357][T24887] team0: Port device team_slave_1 added [ 561.577312][T24894] Bluetooth: hci8: command tx timeout [ 561.614540][T24887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.621713][T24887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.648082][T24887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.661387][T24887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.668738][T24887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.694904][T24887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.709141][T24889] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.716747][T24889] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.724052][T24889] bridge_slave_0: entered allmulticast mode [ 561.731705][T24889] bridge_slave_0: entered promiscuous mode [ 561.776734][T24889] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.783962][T24889] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.791669][T24889] bridge_slave_1: entered allmulticast mode [ 561.798986][T24889] bridge_slave_1: entered promiscuous mode [ 561.806360][T24891] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.813580][T24891] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.821249][T24891] bridge_slave_0: entered allmulticast mode [ 561.829139][T24891] bridge_slave_0: entered promiscuous mode [ 561.838103][T24891] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.845408][T24891] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.853363][T24891] bridge_slave_1: entered allmulticast mode [ 561.860910][T24891] bridge_slave_1: entered promiscuous mode [ 561.951719][T24889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.976331][T24891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.998059][T24889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.037773][T24887] hsr_slave_0: entered promiscuous mode [ 562.044213][T24887] hsr_slave_1: entered promiscuous mode [ 562.051538][T24887] debugfs: 'hsr0' already exists in 'hsr' [ 562.059162][T24887] Cannot create hsr debugfs directory [ 562.067111][T24891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.110819][T24889] team0: Port device team_slave_0 added [ 562.124044][T24891] team0: Port device team_slave_0 added [ 562.134146][T24891] team0: Port device team_slave_1 added [ 562.143627][T24889] team0: Port device team_slave_1 added [ 562.231644][T24904] chnl_net:caif_netlink_parms(): no params data found [ 562.243483][T24891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.250675][T24891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.277303][T24891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.289884][T24889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.297071][T24889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.325300][T24889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.349978][T24891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.357070][T24891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.383503][T24891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.395322][T24889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.402735][T24889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.431192][T24889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.537254][T24894] Bluetooth: hci9: command tx timeout [ 562.603575][T24889] hsr_slave_0: entered promiscuous mode [ 562.610018][T24889] hsr_slave_1: entered promiscuous mode [ 562.616966][T24889] debugfs: 'hsr0' already exists in 'hsr' [ 562.622767][T24889] Cannot create hsr debugfs directory [ 562.647663][T24891] hsr_slave_0: entered promiscuous mode [ 562.654644][T24891] hsr_slave_1: entered promiscuous mode [ 562.661130][T24891] debugfs: 'hsr0' already exists in 'hsr' [ 562.667058][T24891] Cannot create hsr debugfs directory [ 562.684873][T24904] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.692141][T24904] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.699998][T24904] bridge_slave_0: entered allmulticast mode [ 562.707209][T24904] bridge_slave_0: entered promiscuous mode [ 562.723602][T24904] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.731290][T24904] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.739077][T24904] bridge_slave_1: entered allmulticast mode [ 562.746628][T24904] bridge_slave_1: entered promiscuous mode [ 562.874255][T24904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.889004][T24904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.974228][T24904] team0: Port device team_slave_0 added [ 562.999483][T24904] team0: Port device team_slave_1 added [ 563.077415][T24904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.084395][T24904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.111881][T24904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.153842][T24904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.161069][T24904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.188016][T24904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.314956][T24904] hsr_slave_0: entered promiscuous mode [ 563.321903][T24904] hsr_slave_1: entered promiscuous mode [ 563.328795][T24904] debugfs: 'hsr0' already exists in 'hsr' [ 563.334737][T24904] Cannot create hsr debugfs directory [ 563.346061][T24894] Bluetooth: hci0: command tx timeout [ 563.496417][T24894] Bluetooth: hci6: command tx timeout [ 563.585990][T24894] Bluetooth: hci7: command tx timeout [ 563.656463][T24894] Bluetooth: hci8: command tx timeout [ 564.615987][T24894] Bluetooth: hci9: command tx timeout [ 565.177740][ T1678] block nbd0: Possible stuck request ffff888026088000: control (read@0,1024B). Runtime 90 seconds [ 565.188866][ T1678] block nbd0: Possible stuck request ffff888026088200: control (read@1024,1024B). Runtime 90 seconds [ 565.200151][ T1678] block nbd0: Possible stuck request ffff888026088400: control (read@2048,1024B). Runtime 90 seconds [ 565.211378][ T1678] block nbd0: Possible stuck request ffff888026088600: control (read@3072,1024B). Runtime 90 seconds [ 565.416338][T24894] Bluetooth: hci0: command tx timeout [ 565.575862][T24894] Bluetooth: hci6: command tx timeout [ 565.656384][T24894] Bluetooth: hci7: command tx timeout [ 565.740775][T24894] Bluetooth: hci8: command tx timeout [ 566.695902][T24894] Bluetooth: hci9: command tx timeout [ 567.495834][T24894] Bluetooth: hci0: command tx timeout [ 567.656146][T24894] Bluetooth: hci6: command tx timeout [ 567.736152][T24894] Bluetooth: hci7: command tx timeout [ 567.820382][T24894] Bluetooth: hci8: command tx timeout [ 568.775846][T24894] Bluetooth: hci9: command tx timeout [ 595.256980][ T1678] block nbd0: Possible stuck request ffff888026088000: control (read@0,1024B). Runtime 120 seconds [ 595.267895][ T1678] block nbd0: Possible stuck request ffff888026088200: control (read@1024,1024B). Runtime 120 seconds [ 595.279323][ T1678] block nbd0: Possible stuck request ffff888026088400: control (read@2048,1024B). Runtime 120 seconds [ 595.290988][ T1678] block nbd0: Possible stuck request ffff888026088600: control (read@3072,1024B). Runtime 120 seconds [ 619.157799][T24886] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 619.169103][T24886] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 619.180742][ T5836] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 619.190193][T24886] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 619.194201][ T5836] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 619.207607][ T5836] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 619.217455][T24886] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 619.224782][ T5836] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 619.225334][T24886] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 619.234371][ T5836] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 619.641876][T24930] chnl_net:caif_netlink_parms(): no params data found [ 619.775926][T24930] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.783432][T24930] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.790814][T24930] bridge_slave_0: entered allmulticast mode [ 619.798028][T24930] bridge_slave_0: entered promiscuous mode [ 619.807030][T24930] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.814205][T24930] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.822542][T24930] bridge_slave_1: entered allmulticast mode [ 619.830141][T24930] bridge_slave_1: entered promiscuous mode [ 619.868894][T24930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.885071][T24930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.934980][T24930] team0: Port device team_slave_0 added [ 619.950940][T24930] team0: Port device team_slave_1 added [ 619.991533][T24930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.998889][T24930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.025283][T24930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.038950][T24930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.046254][T24930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.072652][T24930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.124750][T24932] chnl_net:caif_netlink_parms(): no params data found [ 620.184920][T24930] hsr_slave_0: entered promiscuous mode [ 620.193205][T24930] hsr_slave_1: entered promiscuous mode [ 620.201271][T24930] debugfs: 'hsr0' already exists in 'hsr' [ 620.208804][T24930] Cannot create hsr debugfs directory [ 620.305323][ T5138] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 620.320891][ T5138] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 620.330189][ T5138] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 620.338489][ T5138] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 620.346486][ T5138] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 620.376707][T24886] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 620.387306][T24886] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 620.397044][T24886] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 620.407838][T24886] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 620.425250][T24886] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 620.507569][T24932] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.516689][T24932] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.524042][T24932] bridge_slave_0: entered allmulticast mode [ 620.533551][T24932] bridge_slave_0: entered promiscuous mode [ 620.546221][T24932] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.553743][T24932] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.561464][T24932] bridge_slave_1: entered allmulticast mode [ 620.570307][T24932] bridge_slave_1: entered promiscuous mode [ 620.692708][T24932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.717433][T24932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.822289][T24932] team0: Port device team_slave_0 added [ 620.867826][T24932] team0: Port device team_slave_1 added [ 620.966710][T24932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.973912][T24932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.000468][T24932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.043242][T24932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.050620][T24932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.078100][T24932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.145831][T24932] hsr_slave_0: entered promiscuous mode [ 621.152798][T24932] hsr_slave_1: entered promiscuous mode [ 621.159385][T24932] debugfs: 'hsr0' already exists in 'hsr' [ 621.165183][T24932] Cannot create hsr debugfs directory [ 621.330227][ T5138] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 621.335872][ T5836] Bluetooth: hci11: command tx timeout [ 621.342890][T24894] Bluetooth: hci10: command tx timeout [ 621.370898][ T5138] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 621.380150][ T5138] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 621.391487][ T5138] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 621.399728][ T5138] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 621.533996][T24946] chnl_net:caif_netlink_parms(): no params data found [ 621.815156][T24948] chnl_net:caif_netlink_parms(): no params data found [ 621.855365][T24946] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.862960][T24946] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.870474][T24946] bridge_slave_0: entered allmulticast mode [ 621.878068][T24946] bridge_slave_0: entered promiscuous mode [ 621.886662][T24946] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.893812][T24946] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.901557][T24946] bridge_slave_1: entered allmulticast mode [ 621.911687][T24946] bridge_slave_1: entered promiscuous mode [ 622.017520][T24946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.031074][T24946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.097490][T24946] team0: Port device team_slave_0 added [ 622.118086][T24946] team0: Port device team_slave_1 added [ 622.174070][T24948] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.181992][T24948] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.189906][T24948] bridge_slave_0: entered allmulticast mode [ 622.197460][T24948] bridge_slave_0: entered promiscuous mode [ 622.205378][T24948] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.213389][T24948] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.221450][T24948] bridge_slave_1: entered allmulticast mode [ 622.229655][T24948] bridge_slave_1: entered promiscuous mode [ 622.254875][T24946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.262081][T24946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.288462][T24946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.317994][T24946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.324975][T24946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.352498][T24946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.386844][ T5138] Bluetooth: hci12: command tx timeout [ 622.426452][T24948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.439089][T24948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.526058][T24948] team0: Port device team_slave_0 added [ 622.546184][ T5138] Bluetooth: hci13: command tx timeout [ 622.559857][T24948] team0: Port device team_slave_1 added [ 622.584103][T24946] hsr_slave_0: entered promiscuous mode [ 622.592182][T24946] hsr_slave_1: entered promiscuous mode [ 622.598880][T24946] debugfs: 'hsr0' already exists in 'hsr' [ 622.605109][T24946] Cannot create hsr debugfs directory [ 622.652733][T24954] chnl_net:caif_netlink_parms(): no params data found [ 622.679668][T24948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.687245][T24948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.715384][T24948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.728668][T24948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.736098][T24948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.762770][T24948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.922899][T24948] hsr_slave_0: entered promiscuous mode [ 622.930492][T24948] hsr_slave_1: entered promiscuous mode [ 622.937891][T24948] debugfs: 'hsr0' already exists in 'hsr' [ 622.943665][T24948] Cannot create hsr debugfs directory [ 622.972711][T24954] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.980561][T24954] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.988063][T24954] bridge_slave_0: entered allmulticast mode [ 622.995857][T24954] bridge_slave_0: entered promiscuous mode [ 623.019925][T24954] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.027231][T24954] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.034623][T24954] bridge_slave_1: entered allmulticast mode [ 623.043323][T24954] bridge_slave_1: entered promiscuous mode [ 623.113960][T24954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.135997][T24954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.217812][T24954] team0: Port device team_slave_0 added [ 623.242955][T24954] team0: Port device team_slave_1 added [ 623.308578][T24954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.316221][T24954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.344770][T24954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.364413][T24954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.372131][T24954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.398951][T24954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.417037][ T5138] Bluetooth: hci11: command tx timeout [ 623.417087][T24886] Bluetooth: hci10: command tx timeout [ 623.476858][T24954] hsr_slave_0: entered promiscuous mode [ 623.483492][T24954] hsr_slave_1: entered promiscuous mode [ 623.490828][T24954] debugfs: 'hsr0' already exists in 'hsr' [ 623.497040][T24954] Cannot create hsr debugfs directory [ 623.506107][T24886] Bluetooth: hci14: command tx timeout [ 624.456203][T24886] Bluetooth: hci12: command tx timeout [ 624.616069][T24886] Bluetooth: hci13: command tx timeout [ 625.337535][ T1678] block nbd0: Possible stuck request ffff888026088000: control (read@0,1024B). Runtime 150 seconds [ 625.348518][ T1678] block nbd0: Possible stuck request ffff888026088200: control (read@1024,1024B). Runtime 150 seconds [ 625.360225][ T1678] block nbd0: Possible stuck request ffff888026088400: control (read@2048,1024B). Runtime 150 seconds [ 625.371887][ T1678] block nbd0: Possible stuck request ffff888026088600: control (read@3072,1024B). Runtime 150 seconds [ 625.496909][ T5138] Bluetooth: hci11: command tx timeout [ 625.502587][T24886] Bluetooth: hci10: command tx timeout [ 625.576219][T24886] Bluetooth: hci14: command tx timeout [ 626.535901][T24886] Bluetooth: hci12: command tx timeout [ 626.696293][T24886] Bluetooth: hci13: command tx timeout [ 627.576155][T24886] Bluetooth: hci10: command tx timeout [ 627.578525][ T5138] Bluetooth: hci11: command tx timeout [ 627.656029][ T5138] Bluetooth: hci14: command tx timeout [ 628.616088][ T5138] Bluetooth: hci12: command tx timeout [ 628.775822][ T5138] Bluetooth: hci13: command tx timeout [ 629.736123][ T5138] Bluetooth: hci14: command tx timeout [ 655.429424][ T1678] block nbd0: Possible stuck request ffff888026088000: control (read@0,1024B). Runtime 180 seconds [ 655.440912][ T1678] block nbd0: Possible stuck request ffff888026088200: control (read@1024,1024B). Runtime 180 seconds [ 655.452165][ T1678] block nbd0: Possible stuck request ffff888026088400: control (read@2048,1024B). Runtime 180 seconds [ 655.463248][ T1678] block nbd0: Possible stuck request ffff888026088600: control (read@3072,1024B). Runtime 180 seconds [ 657.185972][ T5187] udevd[5187]: worker [20669] /devices/virtual/block/nbd0 timeout; kill it [ 657.194820][ T5187] udevd[5187]: seq 27456 '/devices/virtual/block/nbd0' killed [ 679.727086][T24886] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 679.738745][T24886] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 679.750023][ T5836] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 679.760667][T24886] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 679.763871][ T5836] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 679.776803][ T5836] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 679.777905][T24886] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 679.794156][T24886] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 679.809306][ T5836] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 679.817563][ T5836] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 680.190475][T24975] chnl_net:caif_netlink_parms(): no params data found [ 680.319690][T24975] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.327543][T24975] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.335155][T24975] bridge_slave_0: entered allmulticast mode [ 680.342716][T24975] bridge_slave_0: entered promiscuous mode [ 680.355156][T24975] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.362739][T24975] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.370482][T24975] bridge_slave_1: entered allmulticast mode [ 680.379473][T24975] bridge_slave_1: entered promiscuous mode [ 680.415152][T24975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.431342][T24975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.490151][T24975] team0: Port device team_slave_0 added [ 680.504201][T24975] team0: Port device team_slave_1 added [ 680.549260][T24975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.558428][T24975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.585208][T24975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.608072][T24975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.615140][T24975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.650929][T24975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.685900][T24977] chnl_net:caif_netlink_parms(): no params data found [ 680.828774][T24975] hsr_slave_0: entered promiscuous mode [ 680.851347][T24975] hsr_slave_1: entered promiscuous mode [ 680.860212][ T5836] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 680.871263][ T5836] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 680.882118][ T5836] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 680.890049][ T5138] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 680.896793][T24975] debugfs: 'hsr0' already exists in 'hsr' [ 680.900606][ T5138] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 680.903606][T24975] Cannot create hsr debugfs directory [ 680.912082][ T5138] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 680.927764][T24894] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 680.943804][ T5138] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 680.953865][ T5138] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 680.968437][ T5138] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 681.131592][T24977] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.138844][T24977] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.147513][T24977] bridge_slave_0: entered allmulticast mode [ 681.154861][T24977] bridge_slave_0: entered promiscuous mode [ 681.189105][T24977] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.197460][T24977] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.205406][T24977] bridge_slave_1: entered allmulticast mode [ 681.214839][T24977] bridge_slave_1: entered promiscuous mode [ 681.297993][T24977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.338264][T24977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.410253][T24977] team0: Port device team_slave_0 added [ 681.419931][T24977] team0: Port device team_slave_1 added [ 681.555105][T24977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.576909][T24977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.605063][T24977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.618649][T24977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.626112][T24977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.652702][T24977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.791510][T24977] hsr_slave_0: entered promiscuous mode [ 681.798892][T24977] hsr_slave_1: entered promiscuous mode [ 681.807735][T24977] debugfs: 'hsr0' already exists in 'hsr' [ 681.813505][T24977] Cannot create hsr debugfs directory [ 681.818003][T24998] Bluetooth: hci15: command tx timeout [ 681.908745][T25002] Bluetooth: hci16: command tx timeout [ 681.916069][T24893] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 681.927336][T24893] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 681.936827][T24893] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 681.945182][T24893] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 681.956436][T24893] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 682.202286][T24992] chnl_net:caif_netlink_parms(): no params data found [ 682.507222][T24992] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.514472][T24992] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.522355][T24992] bridge_slave_0: entered allmulticast mode [ 682.530232][T24992] bridge_slave_0: entered promiscuous mode [ 682.544976][T24990] chnl_net:caif_netlink_parms(): no params data found [ 682.568482][T24992] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.576768][T24992] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.584179][T24992] bridge_slave_1: entered allmulticast mode [ 682.592288][T24992] bridge_slave_1: entered promiscuous mode [ 682.682965][T24992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.711535][T24992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.779228][T24992] team0: Port device team_slave_0 added [ 682.821571][T24992] team0: Port device team_slave_1 added [ 682.841185][T24990] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.849258][T24990] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.856957][T24990] bridge_slave_0: entered allmulticast mode [ 682.864272][T24990] bridge_slave_0: entered promiscuous mode [ 682.901027][T24990] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.908450][T24990] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.916355][T24990] bridge_slave_1: entered allmulticast mode [ 682.923799][T24990] bridge_slave_1: entered promiscuous mode [ 682.953086][T24992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.960225][T24992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.986645][T24992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.015915][T24998] Bluetooth: hci18: command tx timeout [ 683.022620][T24893] Bluetooth: hci17: command tx timeout [ 683.045928][T24992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.053082][T24992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.080054][T24992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.103327][T24893] Bluetooth: hci8: command 0x0406 tx timeout [ 683.103692][T25002] Bluetooth: hci6: command 0x0406 tx timeout [ 683.109472][T24893] Bluetooth: hci7: command 0x0406 tx timeout [ 683.109511][T24893] Bluetooth: hci9: command 0x0406 tx timeout [ 683.129006][T24998] Bluetooth: hci0: command 0x0406 tx timeout [ 683.206703][T24990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.221700][T24990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.277779][T25001] chnl_net:caif_netlink_parms(): no params data found [ 683.291546][T24990] team0: Port device team_slave_0 added [ 683.300154][T24990] team0: Port device team_slave_1 added [ 683.328578][T24992] hsr_slave_0: entered promiscuous mode [ 683.335459][T24992] hsr_slave_1: entered promiscuous mode [ 683.342414][T24992] debugfs: 'hsr0' already exists in 'hsr' [ 683.348589][T24992] Cannot create hsr debugfs directory [ 683.422598][T24990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.429680][T24990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.456147][T24990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.469100][T24990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.476308][T24990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 683.502687][T24990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.601792][T25001] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.609478][T25001] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.617443][T25001] bridge_slave_0: entered allmulticast mode [ 683.624862][T25001] bridge_slave_0: entered promiscuous mode [ 683.651132][T25001] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.658648][T25001] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.666932][T25001] bridge_slave_1: entered allmulticast mode [ 683.674226][T25001] bridge_slave_1: entered promiscuous mode [ 683.723429][T24990] hsr_slave_0: entered promiscuous mode [ 683.730250][T24990] hsr_slave_1: entered promiscuous mode [ 683.737627][T24990] debugfs: 'hsr0' already exists in 'hsr' [ 683.743380][T24990] Cannot create hsr debugfs directory [ 683.792658][T25001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.806777][T25001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.895348][T25001] team0: Port device team_slave_0 added [ 683.901314][T24886] Bluetooth: hci15: command tx timeout [ 683.908466][T25001] team0: Port device team_slave_1 added [ 683.976190][T24886] Bluetooth: hci16: command tx timeout [ 683.981769][T24886] Bluetooth: hci19: command tx timeout [ 683.982261][T25001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.995491][T25001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.022698][T25001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.058364][T25001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.065341][T25001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.092426][T25001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.175243][T25001] hsr_slave_0: entered promiscuous mode [ 684.182082][T25001] hsr_slave_1: entered promiscuous mode [ 684.188582][T25001] debugfs: 'hsr0' already exists in 'hsr' [ 684.194402][T25001] Cannot create hsr debugfs directory [ 685.095987][T24997] Bluetooth: hci18: command tx timeout [ 685.101748][T24886] Bluetooth: hci17: command tx timeout [ 685.506040][ T1678] block nbd0: Possible stuck request ffff888026088000: control (read@0,1024B). Runtime 210 seconds [ 685.517242][ T1678] block nbd0: Possible stuck request ffff888026088200: control (read@1024,1024B). Runtime 210 seconds [ 685.528424][ T1678] block nbd0: Possible stuck request ffff888026088400: control (read@2048,1024B). Runtime 210 seconds [ 685.539857][ T1678] block nbd0: Possible stuck request ffff888026088600: control (read@3072,1024B). Runtime 210 seconds [ 685.975800][T24886] Bluetooth: hci15: command tx timeout [ 686.056044][T24886] Bluetooth: hci19: command tx timeout [ 686.056160][T24997] Bluetooth: hci16: command tx timeout [ 687.176205][T24997] Bluetooth: hci17: command tx timeout [ 687.176217][T24886] Bluetooth: hci18: command tx timeout [ 688.055882][T24886] Bluetooth: hci15: command tx timeout [ 688.136293][T24886] Bluetooth: hci16: command tx timeout [ 688.136781][T24997] Bluetooth: hci19: command tx timeout [ 689.256155][T24997] Bluetooth: hci18: command tx timeout [ 689.256340][T24886] Bluetooth: hci17: command tx timeout [ 690.215878][T24886] Bluetooth: hci19: command tx timeout [ 695.096048][ T30] INFO: task dhcpcd:5482 blocked for more than 143 seconds. [ 695.103492][ T30] Not tainted syzkaller #0 [ 695.108587][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 695.117583][ T30] task:dhcpcd state:D stack:25216 pid:5482 tgid:5482 ppid:1 task_flags:0x400140 flags:0x00080000 [ 695.129758][ T30] Call Trace: [ 695.133166][ T30] [ 695.136325][ T30] __schedule+0x1568/0x5290 [ 695.141146][ T30] ? __lock_acquire+0x6b5/0x2cf0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 695.146216][ T30] ? __pfx___schedule+0x10/0x10 [ 695.151120][ T30] ? schedule+0x90/0x360 [ 695.155407][ T30] schedule+0x164/0x360 [ 695.159773][ T30] schedule_preempt_disabled+0x13/0x30 [ 695.165286][ T30] __mutex_lock+0x7fe/0x1300 [ 695.171372][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 695.205708][ T30] ? __mutex_lock+0x5ac/0x1300 [ 695.210560][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 695.215369][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 695.241030][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 695.249031][ T30] ? radix_tree_lookup+0x240/0x290 [ 695.254286][ T30] genl_rcv_msg+0x10b/0x7a0 [ 695.261896][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 695.267282][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 695.272439][ T30] netlink_rcv_skb+0x232/0x4b0 [ 695.277820][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 695.282943][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 695.288528][ T30] ? genl_rcv+0x19/0x40 [ 695.292717][ T30] ? down_read+0x272/0x2e0 [ 695.297193][ T30] ? genl_rcv+0xd/0x40 [ 695.301439][ T30] genl_rcv+0x28/0x40 [ 695.305421][ T30] netlink_unicast+0x80f/0x9b0 [ 695.310491][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 695.316123][ T30] ? netlink_sendmsg+0x650/0xb40 [ 695.321069][ T30] ? skb_put+0x11b/0x210 [ 695.325313][ T30] netlink_sendmsg+0x813/0xb40 [ 695.330165][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 695.335466][ T30] ? __se_sys_ioctl+0x47/0x170 [ 695.340503][ T30] ? do_syscall_64+0x14d/0xf80 [ 695.345317][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 695.350778][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 695.356410][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 695.361720][ T30] ____sys_sendmsg+0xa68/0xad0 [ 695.366608][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 695.371941][ T30] ? import_iovec+0x73/0xa0 [ 695.376716][ T30] ___sys_sendmsg+0x2a5/0x360 [ 695.381429][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 695.386951][ T30] ? __rtnl_unlock+0xc8/0xf0 [ 695.391580][ T30] ? __seccomp_filter+0x3e9/0x1ef0 [ 695.396780][ T30] ? __pfx___seccomp_filter+0x10/0x10 [ 695.402187][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 695.407487][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 695.413134][ T30] ? __secure_computing+0xe1/0x2a0 [ 695.418415][ T30] do_syscall_64+0x14d/0xf80 [ 695.423203][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.429352][ T30] ? clear_bhb_loop+0x40/0x90 [ 695.434051][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.440216][ T30] RIP: 0033:0x7f3465567407 [ 695.444646][ T30] RSP: 002b:00007fff818f5970 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 695.453320][ T30] RAX: ffffffffffffffda RBX: 00007f34654dd740 RCX: 00007f3465567407 [ 695.461518][ T30] RDX: 0000000000000000 RSI: 00007fff818f59f0 RDI: 000000000000000e [ 695.469802][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 695.477850][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000055c5b9a42e10 [ 695.485929][ T30] R13: 000000000000000e R14: 00007fff81909eb0 R15: 000055c5e94cd7f0 [ 695.493946][ T30] [ 695.497630][ T30] INFO: task syz.0.5171:24831 blocked for more than 143 seconds. [ 695.505359][ T30] Not tainted syzkaller #0 [ 695.511181][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 695.519944][ T30] task:syz.0.5171 state:D stack:25664 pid:24831 tgid:24830 ppid:16465 task_flags:0x480140 flags:0x00080002 [ 695.532160][ T30] Call Trace: [ 695.535435][ T30] [ 695.538442][ T30] __schedule+0x1568/0x5290 [ 695.542970][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 695.548167][ T30] ? __pfx___schedule+0x10/0x10 [ 695.553042][ T30] ? schedule+0x90/0x360 [ 695.557769][ T30] schedule+0x164/0x360 [ 695.561979][ T30] blk_mq_freeze_queue_wait+0x101/0x180 [ 695.567697][ T30] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 695.573790][ T30] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 695.580656][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 695.587030][ T30] queue_limits_commit_update_frozen+0x55/0xd0 [ 695.593283][ T30] nbd_set_size+0x516/0x6d0 [ 695.597950][ T30] ? __pfx_nbd_set_size+0x10/0x10 [ 695.603004][ T30] ? nla_memcpy+0x5b/0xc0 [ 695.607475][ T30] nbd_genl_reconfigure+0x7f5/0x1ea0 [ 695.612809][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 695.618825][ T30] ? rcu_is_watching+0x15/0xb0 [ 695.623616][ T30] ? __nla_parse+0x40/0x60 [ 695.628133][ T30] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 695.634610][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 695.640260][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 695.646571][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 695.651540][ T30] genl_rcv_msg+0x61c/0x7a0 [ 695.656338][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 695.661398][ T30] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 695.667214][ T30] netlink_rcv_skb+0x232/0x4b0 [ 695.672099][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 695.677402][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 695.682933][ T30] ? genl_rcv+0x19/0x40 [ 695.687422][ T30] ? down_read+0x272/0x2e0 [ 695.691881][ T30] ? genl_rcv+0xd/0x40 [ 695.696181][ T30] genl_rcv+0x28/0x40 [ 695.700370][ T30] netlink_unicast+0x80f/0x9b0 [ 695.705160][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 695.710895][ T30] ? netlink_sendmsg+0x650/0xb40 [ 695.715935][ T30] ? skb_put+0x11b/0x210 [ 695.720225][ T30] netlink_sendmsg+0x813/0xb40 [ 695.725005][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 695.730403][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 695.741200][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 695.746767][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 695.752074][ T30] ____sys_sendmsg+0xa68/0xad0 [ 695.756902][ T30] ? __might_fault+0xaf/0x130 [ 695.761950][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 695.767622][ T30] ? import_iovec+0x73/0xa0 [ 695.772143][ T30] ___sys_sendmsg+0x2a5/0x360 [ 695.777084][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 695.782078][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 695.787359][ T30] ? futex_wake+0x4ac/0x580 [ 695.791989][ T30] ? __fget_files+0x2a/0x420 [ 695.797087][ T30] ? __fget_files+0x3a0/0x420 [ 695.801795][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 695.806910][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 695.812430][ T30] ? rcu_is_watching+0x15/0xb0 [ 695.817406][ T30] do_syscall_64+0x14d/0xf80 [ 695.822044][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.828388][ T30] ? trace_irq_disable+0x37/0x100 [ 695.833565][ T30] ? clear_bhb_loop+0x40/0x90 [ 695.838389][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.844306][ T30] RIP: 0033:0x7f4de019bf79 [ 695.848827][ T30] RSP: 002b:00007f4dde3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 695.857700][ T30] RAX: ffffffffffffffda RBX: 00007f4de0415fa0 RCX: 00007f4de019bf79 [ 695.865875][ T30] RDX: 0000000000000008 RSI: 0000200000000800 RDI: 000000000000000b [ 695.873864][ T30] RBP: 00007f4de02327e0 R08: 0000000000000000 R09: 0000000000000000 [ 695.881906][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.890181][ T30] R13: 00007f4de0416038 R14: 00007f4de0415fa0 R15: 00007ffd1a829b18 [ 695.898738][ T30] [ 695.901804][ T30] INFO: task syz.0.5171:24838 blocked for more than 144 seconds. [ 695.909735][ T30] Not tainted syzkaller #0 [ 695.914689][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 695.923639][ T30] task:syz.0.5171 state:D stack:25592 pid:24838 tgid:24830 ppid:16465 task_flags:0x400140 flags:0x00080002 [ 695.935920][ T30] Call Trace: [ 695.939238][ T30] [ 695.942206][ T30] __schedule+0x1568/0x5290 [ 695.947262][ T30] ? __pfx___schedule+0x10/0x10 [ 695.952156][ T30] ? schedule+0x90/0x360 [ 695.956546][ T30] schedule+0x164/0x360 [ 695.960845][ T30] schedule_preempt_disabled+0x13/0x30 [ 695.966420][ T30] __mutex_lock+0x7fe/0x1300 [ 695.971061][ T30] ? __mutex_lock+0x5ac/0x1300 [ 695.976282][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 695.980991][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 695.986153][ T30] ? __dev_queue_xmit+0x274/0x3850 [ 695.991310][ T30] ? radix_tree_lookup+0x240/0x290 [ 695.996497][ T30] genl_rcv_msg+0x10b/0x7a0 [ 696.001038][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 696.006390][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 696.011369][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 696.016956][ T30] netlink_rcv_skb+0x232/0x4b0 [ 696.021746][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 696.026835][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 696.032399][ T30] ? genl_rcv+0x19/0x40 [ 696.036813][ T30] ? down_read+0x272/0x2e0 [ 696.041234][ T30] ? genl_rcv+0xd/0x40 [ 696.045306][ T30] genl_rcv+0x28/0x40 [ 696.049453][ T30] netlink_unicast+0x80f/0x9b0 [ 696.054246][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 696.059748][ T30] ? netlink_sendmsg+0x650/0xb40 [ 696.064713][ T30] ? skb_put+0x11b/0x210 [ 696.069358][ T30] netlink_sendmsg+0x813/0xb40 [ 696.074224][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.079576][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 696.084539][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 696.090097][ T30] __sys_sendto+0x709/0x7a0 [ 696.094727][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 696.100099][ T30] ? fd_install+0x94/0x3d0 [ 696.104533][ T30] ? fd_install+0x306/0x3d0 [ 696.109213][ T30] __x64_sys_sendto+0xde/0x100 [ 696.114029][ T30] do_syscall_64+0x14d/0xf80 [ 696.118814][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.125085][ T30] ? trace_irq_disable+0x37/0x100 [ 696.130421][ T30] ? clear_bhb_loop+0x40/0x90 [ 696.135151][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.141238][ T30] RIP: 0033:0x7f4de015c84e [ 696.145720][ T30] RSP: 002b:00007f4dde3d3e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 696.154318][ T30] RAX: ffffffffffffffda RBX: 00007f4dde3d56c0 RCX: 00007f4de015c84e [ 696.162560][ T30] RDX: 0000000000000024 RSI: 00007f4dde3d4000 RDI: 000000000000000a [ 696.170605][ T30] RBP: 0000000000000000 R08: 00007f4dde3d3f04 R09: 000000000000000c [ 696.178928][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 696.187167][ T30] R13: 00007f4dde3d3f58 R14: 00007f4dde3d4000 R15: 0000000000000000 [ 696.195166][ T30] [ 696.198415][ T30] INFO: task syz.1.5174:24841 blocked for more than 144 seconds. [ 696.211390][ T30] Not tainted syzkaller #0 [ 696.216946][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 696.225682][ T30] task:syz.1.5174 state:D stack:27840 pid:24841 tgid:24840 ppid:18051 task_flags:0x400040 flags:0x00080002 [ 696.239776][ T30] Call Trace: [ 696.243110][ T30] [ 696.246538][ T30] __schedule+0x1568/0x5290 [ 696.251099][ T30] ? __pfx___schedule+0x10/0x10 [ 696.256328][ T30] ? schedule+0x90/0x360 [ 696.260599][ T30] schedule+0x164/0x360 [ 696.264756][ T30] schedule_preempt_disabled+0x13/0x30 [ 696.270286][ T30] __mutex_lock+0x7fe/0x1300 [ 696.274902][ T30] ? __mutex_lock+0x5ac/0x1300 [ 696.279798][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 696.284514][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 696.289842][ T30] ? __dev_queue_xmit+0x274/0x3850 [ 696.294971][ T30] ? radix_tree_lookup+0x240/0x290 [ 696.300328][ T30] genl_rcv_msg+0x10b/0x7a0 [ 696.304870][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 696.309966][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 696.315029][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 696.320796][ T30] netlink_rcv_skb+0x232/0x4b0 [ 696.325744][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 696.330798][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 696.336217][ T30] ? genl_rcv+0x19/0x40 [ 696.340426][ T30] ? down_read+0x272/0x2e0 [ 696.344860][ T30] ? genl_rcv+0xd/0x40 [ 696.349415][ T30] genl_rcv+0x28/0x40 [ 696.353659][ T30] netlink_unicast+0x80f/0x9b0 [ 696.358550][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 696.364069][ T30] ? netlink_sendmsg+0x650/0xb40 [ 696.369300][ T30] ? skb_put+0x11b/0x210 [ 696.373671][ T30] netlink_sendmsg+0x813/0xb40 [ 696.379244][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.385339][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 696.390346][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 696.395727][ T30] __sys_sendto+0x709/0x7a0 [ 696.400260][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 696.405307][ T30] ? exc_page_fault+0x6a/0xc0 [ 696.410220][ T30] ? do_user_addr_fault+0xc7c/0x1360 [ 696.415530][ T30] __x64_sys_sendto+0xde/0x100 [ 696.420446][ T30] do_syscall_64+0x14d/0xf80 [ 696.425085][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.431322][ T30] ? trace_irq_disable+0x37/0x100 [ 696.436652][ T30] ? clear_bhb_loop+0x40/0x90 [ 696.441415][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.447419][ T30] RIP: 0033:0x7fef5335c84e [ 696.451857][ T30] RSP: 002b:00007fef541a9e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 696.460558][ T30] RAX: ffffffffffffffda RBX: 00007fef541ab6c0 RCX: 00007fef5335c84e [ 696.468878][ T30] RDX: 0000000000000020 RSI: 00007fef541aa000 RDI: 0000000000000003 [ 696.477315][ T30] RBP: 0000000000000000 R08: 00007fef541a9f04 R09: 000000000000000c [ 696.485398][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 696.493629][ T30] R13: 00007fef541a9f58 R14: 00007fef541aa000 R15: 0000000000000000 [ 696.501836][ T30] [ 696.504957][ T30] INFO: task syz.1.5174:24845 blocked for more than 144 seconds. [ 696.512780][ T30] Not tainted syzkaller #0 [ 696.518033][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 696.527022][ T30] task:syz.1.5174 state:D stack:27576 pid:24845 tgid:24840 ppid:18051 task_flags:0x400040 flags:0x00080002 [ 696.539553][ T30] Call Trace: [ 696.542848][ T30] [ 696.545844][ T30] __schedule+0x1568/0x5290 [ 696.550490][ T30] ? __pfx___schedule+0x10/0x10 [ 696.555365][ T30] ? schedule+0x90/0x360 [ 696.559964][ T30] schedule+0x164/0x360 [ 696.564253][ T30] schedule_preempt_disabled+0x13/0x30 [ 696.570048][ T30] __mutex_lock+0x7fe/0x1300 [ 696.575021][ T30] ? __mutex_lock+0x5ac/0x1300 [ 696.579870][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 696.584676][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 696.590024][ T30] ? __dev_queue_xmit+0x274/0x3850 [ 696.595149][ T30] ? radix_tree_lookup+0x240/0x290 [ 696.600364][ T30] genl_rcv_msg+0x10b/0x7a0 [ 696.604889][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 696.610024][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 696.615283][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 696.621202][ T30] netlink_rcv_skb+0x232/0x4b0 [ 696.626266][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 696.631372][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 696.637173][ T30] ? genl_rcv+0x19/0x40 [ 696.641558][ T30] ? down_read+0x272/0x2e0 [ 696.646502][ T30] ? genl_rcv+0xd/0x40 [ 696.650619][ T30] genl_rcv+0x28/0x40 [ 696.654620][ T30] netlink_unicast+0x80f/0x9b0 [ 696.659593][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 696.665009][ T30] ? netlink_sendmsg+0x650/0xb40 [ 696.670193][ T30] ? skb_put+0x11b/0x210 [ 696.674531][ T30] netlink_sendmsg+0x813/0xb40 [ 696.679673][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.685060][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 696.690087][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 696.695396][ T30] __sys_sendto+0x709/0x7a0 [ 696.700105][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 696.705209][ T30] ? fd_install+0x94/0x3d0 [ 696.709948][ T30] ? fd_install+0x306/0x3d0 [ 696.714614][ T30] __x64_sys_sendto+0xde/0x100 [ 696.719505][ T30] do_syscall_64+0x14d/0xf80 [ 696.724125][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.730283][ T30] ? trace_irq_disable+0x37/0x100 [ 696.735422][ T30] ? clear_bhb_loop+0x40/0x90 [ 696.740390][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.746405][ T30] RIP: 0033:0x7fef5335c84e [ 696.750851][ T30] RSP: 002b:00007fef54188e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 696.759539][ T30] RAX: ffffffffffffffda RBX: 00007fef5418a6c0 RCX: 00007fef5335c84e [ 696.767798][ T30] RDX: 0000000000000024 RSI: 00007fef54189000 RDI: 0000000000000005 [ 696.781379][ T30] RBP: 0000000000000000 R08: 00007fef54188f04 R09: 000000000000000c [ 696.789561][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 696.797752][ T30] R13: 00007fef54188f58 R14: 00007fef54189000 R15: 0000000000000000 [ 696.805801][ T30] [ 696.808846][ T30] INFO: task syz.4.5178:24859 blocked for more than 145 seconds. [ 696.816707][ T30] Not tainted syzkaller #0 [ 696.821867][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 696.830931][ T30] task:syz.4.5178 state:D stack:28312 pid:24859 tgid:24858 ppid:17057 task_flags:0x400040 flags:0x00080002 [ 696.842998][ T30] Call Trace: [ 696.846328][ T30] [ 696.849259][ T30] __schedule+0x1568/0x5290 [ 696.853768][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 696.858995][ T30] ? __pfx___schedule+0x10/0x10 [ 696.863881][ T30] ? schedule+0x90/0x360 [ 696.868217][ T30] schedule+0x164/0x360 [ 696.872419][ T30] schedule_preempt_disabled+0x13/0x30 [ 696.877964][ T30] __mutex_lock+0x7fe/0x1300 [ 696.882671][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 696.888206][ T30] ? __mutex_lock+0x5ac/0x1300 [ 696.893003][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 696.897942][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 696.903169][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 696.908245][ T30] ? radix_tree_lookup+0x240/0x290 [ 696.913377][ T30] genl_rcv_msg+0x10b/0x7a0 [ 696.918265][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 696.923292][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 696.928330][ T30] netlink_rcv_skb+0x232/0x4b0 [ 696.933131][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 696.939192][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 696.944483][ T30] ? genl_rcv+0x19/0x40 [ 696.949046][ T30] ? down_read+0x272/0x2e0 [ 696.953532][ T30] ? genl_rcv+0xd/0x40 [ 696.957690][ T30] genl_rcv+0x28/0x40 [ 696.961818][ T30] netlink_unicast+0x80f/0x9b0 [ 696.966650][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 696.971985][ T30] ? netlink_sendmsg+0x650/0xb40 [ 696.977171][ T30] ? skb_put+0x11b/0x210 [ 696.981430][ T30] netlink_sendmsg+0x813/0xb40 [ 696.986302][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.991880][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 696.996914][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 697.002235][ T30] __sys_sendto+0x709/0x7a0 [ 697.007142][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 697.012230][ T30] ? exc_page_fault+0x6a/0xc0 [ 697.017191][ T30] ? do_user_addr_fault+0xc7c/0x1360 [ 697.022686][ T30] __x64_sys_sendto+0xde/0x100 [ 697.027656][ T30] do_syscall_64+0x14d/0xf80 [ 697.032372][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.038829][ T30] ? trace_irq_disable+0x37/0x100 [ 697.043972][ T30] ? clear_bhb_loop+0x40/0x90 [ 697.048814][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.054738][ T30] RIP: 0033:0x7fc636b5c84e [ 697.059280][ T30] RSP: 002b:00007fc63799be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 697.067917][ T30] RAX: ffffffffffffffda RBX: 00007fc63799d6c0 RCX: 00007fc636b5c84e [ 697.075982][ T30] RDX: 0000000000000020 RSI: 00007fc63799c000 RDI: 0000000000000006 [ 697.083966][ T30] RBP: 0000000000000000 R08: 00007fc63799bf04 R09: 000000000000000c [ 697.092105][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 697.100329][ T30] R13: 00007fc63799bf58 R14: 00007fc63799c000 R15: 0000000000000000 [ 697.108475][ T30] [ 697.111699][ T30] INFO: task syz.2.5180:24866 blocked for more than 145 seconds. [ 697.120548][ T30] Not tainted syzkaller #0 [ 697.125511][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 697.134655][ T30] task:syz.2.5180 state:D stack:27416 pid:24866 tgid:24865 ppid:18387 task_flags:0x400040 flags:0x00080002 [ 697.146750][ T30] Call Trace: [ 697.150127][ T30] [ 697.153060][ T30] __schedule+0x1568/0x5290 [ 697.157852][ T30] ? __pfx___schedule+0x10/0x10 [ 697.162907][ T30] ? schedule+0x90/0x360 [ 697.167294][ T30] schedule+0x164/0x360 [ 697.171470][ T30] schedule_preempt_disabled+0x13/0x30 [ 697.177199][ T30] __mutex_lock+0x7fe/0x1300 [ 697.181837][ T30] ? __mutex_lock+0x5ac/0x1300 [ 697.186881][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 697.191591][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 697.196795][ T30] ? __dev_queue_xmit+0x274/0x3850 [ 697.201966][ T30] ? radix_tree_lookup+0x240/0x290 [ 697.207158][ T30] genl_rcv_msg+0x10b/0x7a0 [ 697.211700][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 697.217100][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 697.222089][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 697.227665][ T30] netlink_rcv_skb+0x232/0x4b0 [ 697.232646][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 697.237776][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 697.243229][ T30] ? genl_rcv+0x19/0x40 [ 697.247710][ T30] ? down_read+0x272/0x2e0 [ 697.252248][ T30] ? genl_rcv+0xd/0x40 [ 697.256539][ T30] genl_rcv+0x28/0x40 [ 697.260545][ T30] netlink_unicast+0x80f/0x9b0 [ 697.265404][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 697.270843][ T30] ? netlink_sendmsg+0x650/0xb40 [ 697.276140][ T30] ? skb_put+0x11b/0x210 [ 697.280497][ T30] netlink_sendmsg+0x813/0xb40 [ 697.285368][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.290730][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 697.295828][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 697.301160][ T30] __sys_sendto+0x709/0x7a0 [ 697.305921][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 697.311078][ T30] ? exc_page_fault+0x6a/0xc0 [ 697.316118][ T30] ? do_user_addr_fault+0xc7c/0x1360 [ 697.321423][ T30] __x64_sys_sendto+0xde/0x100 [ 697.326368][ T30] do_syscall_64+0x14d/0xf80 [ 697.331418][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.337968][ T30] ? trace_irq_disable+0x37/0x100 [ 697.343081][ T30] ? clear_bhb_loop+0x40/0x90 [ 697.347844][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.353975][ T30] RIP: 0033:0x7f1bb015c84e [ 697.358551][ T30] RSP: 002b:00007f1bb113ee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 697.367497][ T30] RAX: ffffffffffffffda RBX: 00007f1bb11406c0 RCX: 00007f1bb015c84e [ 697.375499][ T30] RDX: 0000000000000020 RSI: 00007f1bb113f000 RDI: 0000000000000005 [ 697.383818][ T30] RBP: 0000000000000000 R08: 00007f1bb113ef04 R09: 000000000000000c [ 697.391951][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 697.400181][ T30] R13: 00007f1bb113ef58 R14: 00007f1bb113f000 R15: 0000000000000000 [ 697.408305][ T30] [ 697.411349][ T30] INFO: task syz.2.5180:24869 blocked for more than 145 seconds. [ 697.419398][ T30] Not tainted syzkaller #0 [ 697.424349][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 697.433458][ T30] task:syz.2.5180 state:D stack:27104 pid:24869 tgid:24865 ppid:18387 task_flags:0x400140 flags:0x00080002 [ 697.445700][ T30] Call Trace: [ 697.449042][ T30] [ 697.451983][ T30] __schedule+0x1568/0x5290 [ 697.456807][ T30] ? __pfx___schedule+0x10/0x10 [ 697.461686][ T30] ? schedule+0x90/0x360 [ 697.466083][ T30] schedule+0x164/0x360 [ 697.470518][ T30] schedule_preempt_disabled+0x13/0x30 [ 697.476157][ T30] __mutex_lock+0x7fe/0x1300 [ 697.480775][ T30] ? __mutex_lock+0x5ac/0x1300 [ 697.485598][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 697.490382][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 697.495498][ T30] ? __dev_queue_xmit+0x274/0x3850 [ 697.501108][ T30] ? radix_tree_lookup+0x240/0x290 [ 697.506320][ T30] genl_rcv_msg+0x10b/0x7a0 [ 697.510992][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 697.516174][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 697.521146][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 697.526952][ T30] netlink_rcv_skb+0x232/0x4b0 [ 697.531752][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 697.536929][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 697.542407][ T30] ? genl_rcv+0x19/0x40 [ 697.546732][ T30] ? down_read+0x272/0x2e0 [ 697.551173][ T30] ? genl_rcv+0xd/0x40 [ 697.555239][ T30] genl_rcv+0x28/0x40 [ 697.559630][ T30] netlink_unicast+0x80f/0x9b0 [ 697.564423][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 697.569915][ T30] ? netlink_sendmsg+0x650/0xb40 [ 697.574877][ T30] ? skb_put+0x11b/0x210 [ 697.579413][ T30] netlink_sendmsg+0x813/0xb40 [ 697.584208][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.589832][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 697.594944][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 697.600351][ T30] __sys_sendto+0x709/0x7a0 [ 697.604972][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 697.610282][ T30] ? fd_install+0x94/0x3d0 [ 697.614714][ T30] ? fd_install+0x306/0x3d0 [ 697.619574][ T30] __x64_sys_sendto+0xde/0x100 [ 697.624348][ T30] do_syscall_64+0x14d/0xf80 [ 697.629070][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.635163][ T30] ? trace_irq_disable+0x37/0x100 [ 697.640279][ T30] ? clear_bhb_loop+0x40/0x90 [ 697.644995][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.651218][ T30] RIP: 0033:0x7f1bb015c84e [ 697.656247][ T30] RSP: 002b:00007f1bb111de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 697.664690][ T30] RAX: ffffffffffffffda RBX: 00007f1bb111f6c0 RCX: 00007f1bb015c84e [ 697.672816][ T30] RDX: 0000000000000020 RSI: 00007f1bb111e000 RDI: 0000000000000008 [ 697.681195][ T30] RBP: 0000000000000000 R08: 00007f1bb111df04 R09: 000000000000000c [ 697.689679][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 697.697801][ T30] R13: 00007f1bb111df58 R14: 00007f1bb111e000 R15: 0000000000000000 [ 697.706268][ T30] [ 697.709430][ T30] INFO: task syz.2.5180:24872 blocked for more than 145 seconds. [ 697.717413][ T30] Not tainted syzkaller #0 [ 697.722360][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 697.731080][ T30] task:syz.2.5180 state:D stack:27104 pid:24872 tgid:24865 ppid:18387 task_flags:0x400140 flags:0x00080002 [ 697.743274][ T30] Call Trace: [ 697.746620][ T30] [ 697.749593][ T30] __schedule+0x1568/0x5290 [ 697.754108][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 697.759237][ T30] ? __pfx___schedule+0x10/0x10 [ 697.764216][ T30] ? schedule+0x90/0x360 [ 697.768768][ T30] schedule+0x164/0x360 [ 697.773139][ T30] schedule_preempt_disabled+0x13/0x30 [ 697.778755][ T30] __mutex_lock+0x7fe/0x1300 [ 697.783373][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 697.788651][ T30] ? __mutex_lock+0x5ac/0x1300 [ 697.793439][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 697.798392][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 697.803451][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 697.808467][ T30] ? radix_tree_lookup+0x240/0x290 [ 697.813621][ T30] genl_rcv_msg+0x10b/0x7a0 [ 697.821095][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 697.826394][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 697.831362][ T30] netlink_rcv_skb+0x232/0x4b0 [ 697.836339][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 697.841672][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 697.847072][ T30] ? genl_rcv+0x19/0x40 [ 697.851285][ T30] ? down_read+0x272/0x2e0 [ 697.855960][ T30] ? genl_rcv+0xd/0x40 [ 697.860039][ T30] genl_rcv+0x28/0x40 [ 697.864018][ T30] netlink_unicast+0x80f/0x9b0 [ 697.869072][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 697.874399][ T30] ? netlink_sendmsg+0x650/0xb40 [ 697.879407][ T30] ? skb_put+0x11b/0x210 [ 697.883683][ T30] netlink_sendmsg+0x813/0xb40 [ 697.888956][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 697.894288][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 697.899397][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 697.904735][ T30] __sys_sendto+0x709/0x7a0 [ 697.909346][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 697.914439][ T30] ? exc_page_fault+0x6a/0xc0 [ 697.919489][ T30] ? do_user_addr_fault+0xc7c/0x1360 [ 697.924780][ T30] __x64_sys_sendto+0xde/0x100 [ 697.929715][ T30] do_syscall_64+0x14d/0xf80 [ 697.934328][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.940720][ T30] ? trace_irq_disable+0x37/0x100 [ 697.945984][ T30] ? clear_bhb_loop+0x40/0x90 [ 697.950673][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.956649][ T30] RIP: 0033:0x7f1bb015c84e [ 697.961188][ T30] RSP: 002b:00007f1bb10fce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 697.969786][ T30] RAX: ffffffffffffffda RBX: 00007f1bb10fe6c0 RCX: 00007f1bb015c84e [ 697.978105][ T30] RDX: 0000000000000024 RSI: 00007f1bb10fd000 RDI: 000000000000000a [ 697.986261][ T30] RBP: 0000000000000000 R08: 00007f1bb10fcf04 R09: 000000000000000c [ 697.994518][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 698.002806][ T30] R13: 00007f1bb10fcf58 R14: 00007f1bb10fd000 R15: 0000000000000000 [ 698.011312][ T30] [ 698.014366][ T30] INFO: task syz.2.5180:24876 blocked for more than 146 seconds. [ 698.022188][ T30] Not tainted syzkaller #0 [ 698.027393][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 698.036309][ T30] task:syz.2.5180 state:D stack:28776 pid:24876 tgid:24865 ppid:18387 task_flags:0x400040 flags:0x00080002 [ 698.048398][ T30] Call Trace: [ 698.051685][ T30] [ 698.054618][ T30] __schedule+0x1568/0x5290 [ 698.059482][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 698.064465][ T30] ? __pfx___schedule+0x10/0x10 [ 698.069711][ T30] ? schedule+0x90/0x360 [ 698.073997][ T30] schedule+0x164/0x360 [ 698.078250][ T30] schedule_preempt_disabled+0x13/0x30 [ 698.083758][ T30] __mutex_lock+0x7fe/0x1300 [ 698.088673][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 698.093932][ T30] ? __mutex_lock+0x5ac/0x1300 [ 698.098978][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 698.103787][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 698.109274][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 698.114343][ T30] ? radix_tree_lookup+0x240/0x290 [ 698.119604][ T30] genl_rcv_msg+0x10b/0x7a0 [ 698.124231][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 698.129541][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 698.134592][ T30] netlink_rcv_skb+0x232/0x4b0 [ 698.139524][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 698.144588][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 698.150049][ T30] ? genl_rcv+0x19/0x40 [ 698.154363][ T30] ? down_read+0x272/0x2e0 [ 698.159181][ T30] ? genl_rcv+0xd/0x40 [ 698.163346][ T30] genl_rcv+0x28/0x40 [ 698.167385][ T30] netlink_unicast+0x80f/0x9b0 [ 698.172193][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 698.177632][ T30] ? netlink_sendmsg+0x650/0xb40 [ 698.182602][ T30] ? skb_put+0x11b/0x210 [ 698.187124][ T30] netlink_sendmsg+0x813/0xb40 [ 698.192015][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.197418][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 698.202528][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 698.207981][ T30] __sys_sendto+0x709/0x7a0 [ 698.212627][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 698.218126][ T30] ? exc_page_fault+0x6a/0xc0 [ 698.222833][ T30] ? do_user_addr_fault+0xc7c/0x1360 [ 698.228246][ T30] __x64_sys_sendto+0xde/0x100 [ 698.233040][ T30] do_syscall_64+0x14d/0xf80 [ 698.237679][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.243780][ T30] ? trace_irq_disable+0x37/0x100 [ 698.249074][ T30] ? clear_bhb_loop+0x40/0x90 [ 698.253841][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.259812][ T30] RIP: 0033:0x7f1bb015c84e [ 698.264271][ T30] RSP: 002b:00007f1bb10dbe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 698.272767][ T30] RAX: ffffffffffffffda RBX: 00007f1bb10dd6c0 RCX: 00007f1bb015c84e [ 698.280997][ T30] RDX: 0000000000000024 RSI: 00007f1bb10dc000 RDI: 000000000000000a [ 698.289125][ T30] RBP: 0000000000000000 R08: 00007f1bb10dbf04 R09: 000000000000000c [ 698.297227][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 698.305305][ T30] R13: 00007f1bb10dbf58 R14: 00007f1bb10dc000 R15: 0000000000000000 [ 698.313646][ T30] [ 698.316889][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 698.326221][ T30] INFO: task syz.2.5180:24878 blocked for more than 146 seconds. [ 698.333982][ T30] Not tainted syzkaller #0 [ 698.339358][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 698.348086][ T30] task:syz.2.5180 state:D stack:27840 pid:24878 tgid:24865 ppid:18387 task_flags:0x400140 flags:0x00080002 [ 698.360084][ T30] Call Trace: [ 698.363382][ T30] [ 698.366661][ T30] __schedule+0x1568/0x5290 [ 698.371206][ T30] ? __pfx___schedule+0x10/0x10 [ 698.376334][ T30] ? schedule+0x90/0x360 [ 698.380625][ T30] schedule+0x164/0x360 [ 698.384811][ T30] schedule_preempt_disabled+0x13/0x30 [ 698.390424][ T30] __mutex_lock+0x7fe/0x1300 [ 698.395143][ T30] ? __mutex_lock+0x5ac/0x1300 [ 698.400370][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 698.405073][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 698.410212][ T30] ? __dev_queue_xmit+0x274/0x3850 [ 698.415355][ T30] ? radix_tree_lookup+0x240/0x290 [ 698.420550][ T30] genl_rcv_msg+0x10b/0x7a0 [ 698.425181][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 698.430513][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 698.435489][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 698.440999][ T30] netlink_rcv_skb+0x232/0x4b0 [ 698.445984][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 698.451058][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 698.456941][ T30] ? genl_rcv+0x19/0x40 [ 698.461246][ T30] ? down_read+0x272/0x2e0 [ 698.465741][ T30] ? genl_rcv+0xd/0x40 [ 698.469833][ T30] genl_rcv+0x28/0x40 [ 698.473829][ T30] netlink_unicast+0x80f/0x9b0 [ 698.478785][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 698.484188][ T30] ? netlink_sendmsg+0x650/0xb40 [ 698.489451][ T30] ? skb_put+0x11b/0x210 [ 698.493700][ T30] netlink_sendmsg+0x813/0xb40 [ 698.498570][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.503881][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 698.508869][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 698.514178][ T30] __sys_sendto+0x709/0x7a0 [ 698.518942][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 698.524184][ T30] ? exc_page_fault+0x6a/0xc0 [ 698.528979][ T30] ? do_user_addr_fault+0xc7c/0x1360 [ 698.534289][ T30] __x64_sys_sendto+0xde/0x100 [ 698.539410][ T30] do_syscall_64+0x14d/0xf80 [ 698.544048][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.550611][ T30] ? trace_irq_disable+0x37/0x100 [ 698.556064][ T30] ? clear_bhb_loop+0x40/0x90 [ 698.560863][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.566851][ T30] RIP: 0033:0x7f1bb015c84e [ 698.571455][ T30] RSP: 002b:00007f1bb10bae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 698.580280][ T30] RAX: ffffffffffffffda RBX: 00007f1bb10bc6c0 RCX: 00007f1bb015c84e [ 698.588599][ T30] RDX: 000000000000001c RSI: 00007f1bb10bb000 RDI: 000000000000000c [ 698.596681][ T30] RBP: 0000000000000000 R08: 00007f1bb10baf04 R09: 000000000000000c [ 698.604760][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 698.613261][ T30] R13: 00007f1bb10baf58 R14: 00007f1bb10bb000 R15: 0000000000000000 [ 698.621519][ T30] [ 698.624565][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 698.633655][ T30] INFO: task syz.2.5180:24879 blocked for more than 146 seconds. [ 698.641654][ T30] Not tainted syzkaller #0 [ 698.646711][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 698.655387][ T30] task:syz.2.5180 state:D stack:27104 pid:24879 tgid:24865 ppid:18387 task_flags:0x400140 flags:0x00080002 [ 698.667714][ T30] Call Trace: [ 698.671034][ T30] [ 698.673986][ T30] __schedule+0x1568/0x5290 [ 698.678646][ T30] ? __pfx___schedule+0x10/0x10 [ 698.683539][ T30] ? schedule+0x90/0x360 [ 698.687885][ T30] schedule+0x164/0x360 [ 698.692084][ T30] schedule_preempt_disabled+0x13/0x30 [ 698.697917][ T30] __mutex_lock+0x7fe/0x1300 [ 698.702552][ T30] ? __mutex_lock+0x5ac/0x1300 [ 698.707525][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 698.712340][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 698.718168][ T30] ? __dev_queue_xmit+0x274/0x3850 [ 698.723328][ T30] ? radix_tree_lookup+0x240/0x290 [ 698.728783][ T30] genl_rcv_msg+0x10b/0x7a0 [ 698.733415][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 698.738560][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 698.743633][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 698.749074][ T30] netlink_rcv_skb+0x232/0x4b0 [ 698.753948][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 698.759284][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 698.764658][ T30] ? genl_rcv+0x19/0x40 [ 698.768984][ T30] ? down_read+0x272/0x2e0 [ 698.773440][ T30] ? genl_rcv+0xd/0x40 [ 698.777898][ T30] genl_rcv+0x28/0x40 [ 698.781886][ T30] netlink_unicast+0x80f/0x9b0 [ 698.787049][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 698.792471][ T30] ? netlink_sendmsg+0x650/0xb40 [ 698.797733][ T30] ? skb_put+0x11b/0x210 [ 698.801984][ T30] netlink_sendmsg+0x813/0xb40 [ 698.806842][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 698.812144][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 698.817445][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 698.822985][ T30] __sys_sendto+0x709/0x7a0 [ 698.827608][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 698.832694][ T30] ? exc_page_fault+0x6a/0xc0 [ 698.837668][ T30] ? do_user_addr_fault+0xc7c/0x1360 [ 698.843081][ T30] __x64_sys_sendto+0xde/0x100 [ 698.848358][ T30] do_syscall_64+0x14d/0xf80 [ 698.852962][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.862492][ T30] ? trace_irq_disable+0x37/0x100 [ 698.867610][ T30] ? clear_bhb_loop+0x40/0x90 [ 698.872405][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.878760][ T30] RIP: 0033:0x7f1bb015c84e [ 698.883216][ T30] RSP: 002b:00007f1bb1099e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 698.892168][ T30] RAX: ffffffffffffffda RBX: 00007f1bb109b6c0 RCX: 00007f1bb015c84e [ 698.900334][ T30] RDX: 0000000000000020 RSI: 00007f1bb109a000 RDI: 0000000000000004 [ 698.908848][ T30] RBP: 0000000000000000 R08: 00007f1bb1099f04 R09: 000000000000000c [ 698.916872][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 698.924958][ T30] R13: 00007f1bb1099f58 R14: 00007f1bb109a000 R15: 0000000000000000 [ 698.933173][ T30] [ 698.936984][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 698.946321][ T30] INFO: task syz.3.5182:24871 blocked for more than 147 seconds. [ 698.954172][ T30] Not tainted syzkaller #0 [ 698.959196][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 698.968134][ T30] task:syz.3.5182 state:D stack:28088 pid:24871 tgid:24870 ppid:17475 task_flags:0x400140 flags:0x00080002 [ 698.980502][ T30] Call Trace: [ 698.983799][ T30] [ 698.986901][ T30] __schedule+0x1568/0x5290 [ 698.991459][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 698.997054][ T30] ? __pfx___schedule+0x10/0x10 [ 699.002062][ T30] ? schedule+0x90/0x360 [ 699.006396][ T30] schedule+0x164/0x360 [ 699.010604][ T30] schedule_preempt_disabled+0x13/0x30 [ 699.016571][ T30] __mutex_lock+0x7fe/0x1300 [ 699.021209][ T30] ? is_bpf_text_address+0x26/0x2b0 [ 699.026770][ T30] ? __mutex_lock+0x5ac/0x1300 [ 699.031563][ T30] ? genl_rcv_msg+0x10b/0x7a0 [ 699.036432][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 699.041499][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 699.046546][ T30] ? radix_tree_lookup+0x240/0x290 [ 699.051695][ T30] genl_rcv_msg+0x10b/0x7a0 [ 699.056492][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 699.061615][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 699.066669][ T30] netlink_rcv_skb+0x232/0x4b0 [ 699.071733][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 699.077090][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 699.082389][ T30] ? genl_rcv+0x19/0x40 [ 699.086803][ T30] ? down_read+0x272/0x2e0 [ 699.091267][ T30] ? genl_rcv+0xd/0x40 [ 699.095330][ T30] genl_rcv+0x28/0x40 [ 699.099552][ T30] netlink_unicast+0x80f/0x9b0 [ 699.104448][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 699.110045][ T30] ? netlink_sendmsg+0x650/0xb40 [ 699.115027][ T30] ? skb_put+0x11b/0x210 [ 699.119536][ T30] netlink_sendmsg+0x813/0xb40 [ 699.124353][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.129845][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 699.134922][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 699.140338][ T30] __sys_sendto+0x709/0x7a0 [ 699.144869][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 699.150177][ T30] ? exc_page_fault+0x6a/0xc0 [ 699.154878][ T30] ? do_user_addr_fault+0xc7c/0x1360 [ 699.160381][ T30] __x64_sys_sendto+0xde/0x100 [ 699.165187][ T30] do_syscall_64+0x14d/0xf80 [ 699.169906][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.176568][ T30] ? trace_irq_disable+0x37/0x100 [ 699.181658][ T30] ? clear_bhb_loop+0x40/0x90 [ 699.186432][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.192352][ T30] RIP: 0033:0x7fb9d6d5c84e [ 699.196839][ T30] RSP: 002b:00007fb9d7d2ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 699.205880][ T30] RAX: ffffffffffffffda RBX: 00007fb9d7d2c6c0 RCX: 00007fb9d6d5c84e [ 699.213888][ T30] RDX: 0000000000000024 RSI: 00007fb9d7d2b000 RDI: 0000000000000005 [ 699.222039][ T30] RBP: 0000000000000000 R08: 00007fb9d7d2af04 R09: 000000000000000c [ 699.230063][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 699.238493][ T30] R13: 00007fb9d7d2af58 R14: 00007fb9d7d2b000 R15: 0000000000000000 [ 699.246758][ T30] [ 699.249793][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 699.259185][ T30] [ 699.259185][ T30] Showing all locks held in the system: [ 699.267190][ T30] 1 lock held by khungtaskd/30: [ 699.272036][ T30] #0: ffffffff8e75e0a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 699.282136][ T30] 1 lock held by klogd/5176: [ 699.286895][ T30] #0: ffff8880b863abe0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 699.297160][ T30] 2 locks held by dhcpcd/5482: [ 699.302055][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.310476][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 699.319728][ T30] 2 locks held by getty/5584: [ 699.324509][ T30] #0: ffff8880326830a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 699.334680][ T30] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 699.344937][ T30] 1 lock held by udevd/20669: [ 699.349732][ T30] #0: ffff888026041358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 699.359314][ T30] 6 locks held by syz.0.5171/24831: [ 699.364518][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.372786][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 699.381926][ T30] #2: ffff888026035a78 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0 [ 699.393063][ T30] #3: ffff88802603c978 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2ba/0x6d0 [ 699.402576][ T30] #4: ffff88802603c318 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 699.414753][ T30] #5: ffff88802603c350 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 699.427334][ T30] 2 locks held by syz.0.5171/24838: [ 699.432683][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.441151][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 699.450224][ T30] 2 locks held by syz.1.5174/24841: [ 699.456086][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.464311][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 699.473366][ T30] 2 locks held by syz.1.5174/24845: [ 699.478706][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.487159][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 699.496637][ T30] 2 locks held by syz.4.5178/24859: [ 699.501857][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.510130][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 699.519584][ T30] 2 locks held by syz.2.5180/24866: [ 699.524826][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.533185][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 699.542244][ T30] 2 locks held by syz.2.5180/24869: [ 699.547882][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.556145][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 699.565233][ T30] 2 locks held by syz.2.5180/24872: [ 699.570512][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.579224][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 699.588297][ T30] 2 locks held by syz.2.5180/24876: [ 699.593524][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.601846][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 699.611015][ T30] 2 locks held by syz.2.5180/24878: [ 699.616297][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.624697][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 699.633792][ T30] 2 locks held by syz.2.5180/24879: [ 699.639252][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.647486][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 699.656786][ T30] 2 locks held by syz.3.5182/24871: [ 699.661998][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.670445][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 699.679770][ T30] 2 locks held by syz-executor/24884: [ 699.685139][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.693409][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 699.702801][ T30] 2 locks held by syz-executor/24887: [ 699.708344][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.716627][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 699.726520][ T30] 2 locks held by syz-executor/24889: [ 699.732073][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.741037][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 699.750104][ T30] 2 locks held by syz-executor/24891: [ 699.755487][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.763832][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 699.773430][ T30] 2 locks held by syz-executor/24904: [ 699.778876][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.787272][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 699.796483][ T30] 2 locks held by syz-executor/24930: [ 699.801874][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.810242][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 699.819519][ T30] 2 locks held by syz-executor/24932: [ 699.825187][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.833885][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 699.843089][ T30] 2 locks held by syz-executor/24946: [ 699.848553][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.857185][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 699.866254][ T30] 2 locks held by syz-executor/24948: [ 699.871658][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.880007][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 699.889444][ T30] 2 locks held by syz-executor/24954: [ 699.894969][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.906459][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 699.915523][ T30] 2 locks held by syz-executor/24975: [ 699.921166][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.929413][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 699.938550][ T30] 2 locks held by syz-executor/24977: [ 699.943937][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.952393][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 699.961481][ T30] 2 locks held by syz-executor/24990: [ 699.966953][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 699.975189][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 699.985368][ T30] 2 locks held by syz-executor/24992: [ 699.992134][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 700.000634][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 700.010309][ T30] 2 locks held by syz-executor/25001: [ 700.015978][ T30] #0: ffffffff8fc2c430 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 700.024400][ T30] #1: ffffffff8fc2c248 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 700.033677][ T30] [ 700.036187][ T30] ============================================= [ 700.036187][ T30] [ 700.044785][ T30] NMI backtrace for cpu 0 [ 700.044800][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 700.044814][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 700.044821][ T30] Call Trace: [ 700.044826][ T30] [ 700.044833][ T30] dump_stack_lvl+0xe8/0x150 [ 700.044854][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 700.044867][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 700.044881][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 700.044895][ T30] sys_info+0x135/0x170 [ 700.044911][ T30] watchdog+0xf90/0xfe0 [ 700.044927][ T30] ? watchdog+0x209/0xfe0 [ 700.044944][ T30] kthread+0x388/0x470 [ 700.044960][ T30] ? __pfx_watchdog+0x10/0x10 [ 700.044972][ T30] ? __pfx_kthread+0x10/0x10 [ 700.044998][ T30] ret_from_fork+0x51e/0xb90 [ 700.045013][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 700.045025][ T30] ? __switch_to+0xc7d/0x1400 [ 700.045038][ T30] ? __pfx_kthread+0x10/0x10 [ 700.045054][ T30] ret_from_fork_asm+0x1a/0x30 [ 700.045077][ T30] [ 700.045082][ T30] Sending NMI from CPU 0 to CPUs 1: [ 700.158027][ C1] NMI backtrace for cpu 1 [ 700.158053][ C1] CPU: 1 UID: 0 PID: 23175 Comm: kworker/u8:25 Not tainted syzkaller #0 PREEMPT(full) [ 700.158072][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 700.158082][ C1] Workqueue: bat_events batadv_mcast_mla_update [ 700.158112][ C1] RIP: 0010:check_preemption_disabled+0x29/0xe0 [ 700.158144][ C1] Code: 90 55 41 57 41 56 53 65 8b 05 57 93 78 07 65 8b 0d 4c 93 78 07 f7 c1 ff ff ff 7f 74 0c 5b 41 5e 41 5f 5d c3 cc cc cc cc cc 9c <59> f7 c1 00 02 00 00 74 ea 65 4c 8b 3d fe 92 78 07 41 f6 47 2f 04 [ 700.158157][ C1] RSP: 0018:ffffc9000484f898 EFLAGS: 00000046 [ 700.158170][ C1] RAX: 0000000000000001 RBX: 00000000ffffffff RCX: 0000000080000000 [ 700.158181][ C1] RDX: ffff88805a92bc80 RSI: ffffffff8defc83c RDI: ffffffff8c276500 [ 700.158193][ C1] RBP: 00000000ffffffff R08: ffffffff8b699226 R09: ffffffff8e75e0a0 [ 700.158204][ C1] R10: dffffc0000000000 R11: ffffed10095b1ed0 R12: 0000000000000246 [ 700.158215][ C1] R13: ffff88805a92bc80 R14: ffffffff8e75e0a0 R15: ffffc9000484fa30 [ 700.158226][ C1] FS: 0000000000000000(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 700.158246][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 700.158256][ C1] CR2: 000055bdc31edf40 CR3: 000000000e54a000 CR4: 00000000003526f0 [ 700.158272][ C1] Call Trace: [ 700.158278][ C1] [ 700.158287][ C1] lock_is_held_type+0x5a/0x150 [ 700.158309][ C1] batadv_mcast_mla_update+0xd18/0x3740 [ 700.158331][ C1] ? batadv_mcast_mla_update+0x186/0x3740 [ 700.158357][ C1] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 700.158379][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 700.158399][ C1] ? lock_acquire+0x106/0x330 [ 700.158415][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 700.158436][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 700.158458][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 700.158473][ C1] ? process_scheduled_works+0xa0f/0x17a0 [ 700.158489][ C1] process_scheduled_works+0xaec/0x17a0 [ 700.158518][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 700.158536][ C1] ? assign_work+0x3d5/0x5e0 [ 700.158555][ C1] worker_thread+0xa50/0xfc0 [ 700.158583][ C1] kthread+0x388/0x470 [ 700.158602][ C1] ? __pfx_worker_thread+0x10/0x10 [ 700.158618][ C1] ? __pfx_kthread+0x10/0x10 [ 700.158638][ C1] ret_from_fork+0x51e/0xb90 [ 700.158656][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 700.158672][ C1] ? __switch_to+0xc7d/0x1400 [ 700.158688][ C1] ? __pfx_kthread+0x10/0x10 [ 700.158707][ C1] ret_from_fork_asm+0x1a/0x30 [ 700.158735][ C1] [ 700.412810][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 700.419690][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 700.429241][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 700.439396][ T30] Call Trace: [ 700.442766][ T30] [ 700.445839][ T30] vpanic+0x1e0/0x670 [ 700.449848][ T30] panic+0xc5/0xd0 [ 700.453564][ T30] ? __pfx_panic+0x10/0x10 [ 700.458007][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 700.463420][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 700.469752][ T30] watchdog+0xfda/0xfe0 [ 700.473935][ T30] ? watchdog+0x209/0xfe0 [ 700.478306][ T30] kthread+0x388/0x470 [ 700.482471][ T30] ? __pfx_watchdog+0x10/0x10 [ 700.487243][ T30] ? __pfx_kthread+0x10/0x10 [ 700.491832][ T30] ret_from_fork+0x51e/0xb90 [ 700.496510][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 700.501615][ T30] ? __switch_to+0xc7d/0x1400 [ 700.506284][ T30] ? __pfx_kthread+0x10/0x10 [ 700.510955][ T30] ret_from_fork_asm+0x1a/0x30 [ 700.515748][ T30] [ 700.519280][ T30] Kernel Offset: disabled [ 700.524212][ T30] Rebooting in 86400 seconds..