last executing test programs: 19.810560304s ago: executing program 1 (id=658): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES64=r1, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4ae9114853f03bd6) r2 = socket$nl_rdma(0x10, 0x3, 0x14) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000000414010027bd7000fbdbdf25080001000000000008000300"], 0x30}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r3, 0x5411, 0x0) (async) ioctl$sock_SIOCOUTQ(r3, 0x5411, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000000140)=""/159, 0x9f}], 0x3}, 0x2000) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r6) r9 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) (async) getsockname$packet(r9, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r10, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000ffdbdf250100000008000200010000ef08000100", @ANYRES32=r10, @ANYBLOB="58ec6889fd48a347d13fadbdc65d574a71cf1ee0bdb86a6305a755ad06509a02a154120b8013c7f34d05146830659e"], 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r12 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r12, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) connect$can_bcm(r12, &(0x7f0000000040), 0x10) (async) connect$can_bcm(r12, &(0x7f0000000040), 0x10) 19.532655783s ago: executing program 1 (id=664): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b090002007379"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x0, 0x40060) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, 0x0, 0x20000800) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r2, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x7, 0x8, 0x77c, 0x0, {{0x6, 0x4, 0x3, 0x0, 0x18, 0x65, 0x0, 0x7, 0x2f, 0x0, @loopback, @local, {[@ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', r6, 0x4, 0x81, 0xf0, 0x10000, 0x28, @mcast1, @empty, 0x700, 0x8, 0x3}}) 19.254262055s ago: executing program 1 (id=669): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/183, 0xb7, 0x0, &(0x7f0000000100)=""/51, 0x33}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r1, 0x4) r2 = accept4(0xffffffffffffffff, &(0x7f0000000200)=@nfc_llcp, &(0x7f0000000280)=0x80, 0x80000) sendmsg$sock(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)="98e828686bc2692e84838f125548fe13fb67c275d47783e2ecdc8850a03435dfd209a429a18369b8dfdac6752fe6afec031a05ef76c790229fbe12e82a", 0x3d}, {&(0x7f0000000300)="105c85779cdb30651e1211edde2411c16516a42e949f542999ec", 0x1a}, {&(0x7f0000000340)="1911963a8b66589c3154afd33c50685a28334f4c2177137a800b40eda2fde24b68939dd347211bd74b6ddbc977d2fd9fbafce6aebc541de5d5fc68061e7ff2da69da1af96a231be015f0913d1bbe7c0ca0b08cbc8f46f95a643f8b9e2aef54bd771b4292af464bbee3140461903b3d0f57f0264aa0e9a50089ef7b523db57acc5b843fcfbdba1f91bb37d84135f7adf06653afa5a1beb11aeb3f1facdc6f654dcaa110ee93caa389e91e0b4d149437c9678c43f43096a3179f33c418bfe68ca4d51aeffa3723b9bfb1dedaee0996f445f6c24afd16a5375716d8225249d00b3b4087aa0a4990fb7f60802f26c7c11ed00482d976b19e1c3b5f13b5aa613a38ebbac6546590a816dce0a09d329e053b1af6087d3e39b90fa19181e20f5e90633f69b1ba71b0f16b5b7b0514901c96b4011ecdf21f48c31bc0ecdf4852d0eb56456e71411351604e1b72f7d1fbc882e2723d0b9abb155514cac12f4ed9af31a00abb014b722a3cfdf57694280d3b817de358a13caaff1c690836c06be230b8ca94b43e588418d94f46465c4576165cb39853204d73f52c7521ed900039bf1258f8178faa5fa2a2765900b662c58f9a9531c0bb1613479f8872326c8e40201a491c9a846b7e450f84dedbec4b17dcc35b504186d2852d331a834cc7d3a22983187444d70c3535f07a5c082da089588f4a09c8875494bc780a82357e3f0c79b416a087421ac29e1a09dfa48e983839748f81e9cec1bb28067c8d60c38d7abbeea67050d6da87e2635a920b4961bdd6d4bf49ef55b4d4779f6733eb9ea4d3a304c13dee39de4ea4bf60f6f052fe5b64bec97a572fd657b880f5ed709c90beff4761fb83d44626216df1461f71028a2a188cc83d0b4e6dea3db67d00b782cb0b1ecce676f67483cc1af4b4751189e3b42e5784919aec14d936bf2542ae6364f509361c726d1ab797100d8b127ece1cf73c1ff9a9a44b39a59bfddb998b558db4e3580d4d034ec659935d6b8737cd1e7c5d29a10dc1ce0b68ea100ece573e89cd578fb7d481568f404dc4d6bb24080899d6737fc8f47caef3e70b669c28da7df8bedd15abd976e75f6002f3a041cb54a1b07d7d2ccb364b594231a91269a6581fc519659bd8c8f9dee1c52e6c3ab29610b0349c339bd4f02c1aba716b2e9cab8de10f00d0995ffd64731ec8b31bc46c94c1d4c6c0c8af8fecc1fbc00aa5fc5f969da98340ab9566ffce5cd68e0ecf2ec43b625803011380df300f83c80180611b8e58f579f87dff5e5598328315489e61bf20ebb46815bd47e7dbe093be645ace0a73c5f5d2ad3e752751311c14aa2be7d87b74280d292f0cacdbcfba60587d4d9846dbfaf5177676a390746fc299910e32c7b1ae89ad4ee2c39b942cf319fdd646f2dddf6646e7e4b731566b13cd55e580efe3d721f54cbcb56eb267bb5ec81bf2cf8b0e73531e516a400b1dfeed69188eef9dd0c1ecbd87e7d234602f81eb6eeacd1801974a7b5bde200d955e81831b7a155aeb6d5ef62cf86511f540dcdb1a2925787440d10ae1a777c39e0cb7f43ad8ebd787242e1c766ff55446f3273e21ab615c08da8a4ea9f6a0a04ea3de36d4251e92510266bd6d7c5cbd991b888a1d6aacb32fde88f6e33ac31bcc29bf5635dbd7474a2dcdf49ec68984d028e9eba223fd0e2492b7b97da7ddcb33911ac9189885caf5cb2965be6b14c2ceadd3aa7348d3ff496f334a9dfef2fb40bdeb8396da6084e6496201b32c21912cf18da4b0db183da7230d7969d67711a5b6d6cd2b2dca8377cc7b1f1da3dd7305ce78c25e1b9d6151f1d88d5dc940813035d856043aeb79305aadf9ba4f45d997728ca24d719c3ca01f884651e4535a6b2d4dfe49978cdbdad0a2b2666becee64d4e84fdaab31e9dc42fd9f43f1cf2036fe4876b28ea8ed6cf0eec5f1ec0d13eb788aafb218ed97b0fd0c8e7c796396951247c8ef9e288e283f26e490dba0b30af5fbfdfbed8aba6b1afb449f33aac8f84bb2993b5107df4e03cfb5119eab2f4969d54c3845dba8e1aa2b3267bd8e3d9f95957ead77e9bdd6d421a47b7968e7712ff1b066c11cc6758b3229331b41a3d09ddb98e5d5a1d7005cef137bad81bafcc01e0611efcfda7c6348c0574b5ea4a7748fef64d0c6cda6bde1546044b70bd00a10a5d79ff3c055250af0476fd5fa88affa5f9ad990c56f7a21e5393998fbe289b325ee4b15e66e47d0239d4ac4b59b30049ad415224ac64d6d6b09ed787f4d842b23443b756c4120b8876a97c158023129cdd0c98e090bd18fb955b2a336dc95c764688219b761c00f402f31f82a12d9e2a33ea2b5be599cbb93764fadc3c517feb5b3bdb62a2672bb81c2b0e935128c78167711487628c910283d0444a008d526ccc260ca7b1f1f0db15d88614a3b005e1025241c62cd10c6a2a15d12d530c6d3b6290ed4f2986122cb9a1b19b68b4f66c6d685546ec8dc49a0a68fd8dabf5828f9029288d0b68952d24d3ec94ee4bc1754e1e9371a084958e786e1d02fcd9060321261deea5f5d775efc3e10ea9debd3293d5d6ae88b7f8ac95c5c31a3a75c596da86ed8d934a3c4bfe32c34d9b8cd0c49ff4ecffb2fd049844fbedcf0a628d4b476ed52c96ed3c7d74281ff1e35235257510fbeec38bc40d52b470bc6267af488e96d2bdffbe45eec839634d46bb4ebcc9e53fb4a120ebac990750a8f9d9e7b3014dadf55dee1e20c78c9a919f01215484d3f9891fbc92421ecaf9f4e0afadb53c1a9fb24b9256954190c247b9e514bd95a6b4d376c0ee5fe9e6b9c4dc3c6b0112812bbcd60da9e431b04f3a8e7778fc355529dfc31be45b3a63bcf24ab864c61b3613fbf88c420e8d35158d02671f2634b0a71d7d4853e6370f96e13b7b9094f99bd9218c5337bc0a5151e6fc5620e0da9fc1fb5be8101f2d76426811a8f9c3aea5923e074bea8bee49eff024083f43f424946d93524b6406c65e73199d7d41e39cf294b5e7891a0d0ae638365361738843dbaf9864f28281bf98cd02946c92af644cf141143ad87450042947520d98f6179339a5a1cc998261c91165d1edad917b43a6991e3315713542ba6bfa13950453625a5a34c4cecfaf149f69e1c365a84c2abd9b1b3508fb9ad07a17f33c8ab1d50b206f648dfbe07bc43011065b5b35b7423aff77b4f14309696ae27a669efb3ddd1146a1b6d1492c9c7b9bfe62d42800c7cc36fec3f08649070e1b0249dc473fcd8688999ec5eed17f161a54d3eb4c3158691f7e1369cecd244a91415ca2e73b61f60298cd61d1db7ea4e369818381c7deeb816e14c9c0df11bb1d1805573bf3fc7ebbcbd5e4f4ebd79be5b697df7d1cb1afc6388f6047f36b3cbedb02bb60870ea3195b75f1881a0de3014c569299a63271a57fdae24672ce42abbfd6f0687602d5a939c0c09e377a3e9f0cf8e81fe3a52683d1fdbadc45af549e36a68da28e6b0693ada678116f044d2ce9355af3e980094786b238e6df9107f1af073886943afe496f1897bd6c5742e1c74bbb1194830adea543563543b90aeb5fb31540757be35bdb244df8a3a25334da2d67dca9333aff64c28e6dd3ce2b8ccd52f7b81189d778c940e2cb803de7adc8c785f6d6e20928ef2ee056b129390b3f1269920114cf29fdcdfd40788200770c527f2412f837f3ac7cff121115fd2c6c55b6e8ab97a20775c94f3d7dd16c7381ee209d5fffe50b0dca631a0a78e9f304dccc80243a3ee81a2ec67feed496b85f600c5739a89af641177042da00fa39222d31226b918e69b59ef86898daeffb958375a60aa41a2193c5bf1a8e379e46de40fd0cb4414888cf45f4812ab8b8e20b889a1a951320ee2cb7b37307973aa09e6ccdaecf99287e3a0943f88fac93ac5e31a69cd3857c1274379ce7c1959ea4ff5041d2a4ce38acab4ed5b7fe552eecd8fd5490841c05018ef0a5833b5e1e5d586f31bb4f038d7fb423922d8273380d4022fb33e2cf24e2bdd23c8dac0a55eaea43895af207516db6db1f6c2ae13a3f569a5810d43c0446eeef1106b9d3747add9b5dbd01244ed9ba8db62bae9ca1fb8f407dc7a077dea0db765f88348bfc6ecd5e25505ad6788ea9d3b9349910834ec6e018fdd88d49ad0b83ed93a42975d814f25747b93fab23b3b2e94bc17ee453cab5aef9014712fc8e8f6fd78a53f7f7f0ecbf7992896fd5f778ba9ae21a2d44deadce09ce540771183f8de7ec677793f4c6f91129383c7c641e4fdd80fa987707210663d1413e98592c5fb6b6c25853735eaa1cafb92eb5e344d5c451f0249b9dd7702587db521aaa562b1b6742f36593569fe2fb8abfb2b807020487888af792b3631b4b484b1431ed1a71ce8a64e70478b98f7ed118840b459fa8d4eefc1d26a5551dee0ce606b10d00532535dc89f27bdacd9cc797df6b3cd7c4b90d084ea84567f6e04c13a3ac38eb99f9da296f5e76f89f4177f0a7e1be31dfc61c39b53643450c4253ff57bd9a2a6a6dc22bb25120722a12a7b7476b08c45615a4a0723a84266a3ff12357a0b2c50a61be9b50b9819e5a80b35e88b5cdccdda8e6c779d6217a0f6987847da05a92c503cc0d22119b2de243fd4c21afdeaf7ccc731fc703f12e22c9c42e8d83d46119de7b23caa4385362056fbaf4275184f89196bdedd6f8f4a4c0b9dab27b926f540bf046f2ec8ae42466c0641150aed745d420350eee3d7135061c78dc6a7b8a19abc2291964505232a463b6851d75d59a1e5226c318ab158d14faf38ccb982d513e6383eb7d687809ec16b9814586c50eb84412a587570c6ee991d926d000c01322c76a60bdea00a70a6dcbc7d73e666e1d21d7699259badb6e666aae7a2e4bddea1bf71408bf9e471393c1b632ccf6454b9801724ca941565616fe96368c0f7e399a1f7e0d8831378e7ecaedd556de739713ba2a9127493ec25f5429ff05560169955584d80b81c4e5d2063e41599f2be5971ad4023a99066f8daa47a58d724396325b24c95b38d76274f7e2307d102298c2defe80533154b9185c398397290f4c899ebeda8662972e209fc23b362d416e293515a0ba94b2887e417c40ee86c3bd4bb439d5d75eaa6d3298dcfaba490b044449203a6ac43373e30c0fa17d3c9c6c66a59a21c2c7c53633a0d6d1a16c8f51630f21c2ed9dffe53e2153d770a22c41bba9b60c273a07f9a944812de215579badcefd1410f54bff4571fdb4e1a024f88208ebe24be939bc76fa65e419c710bcd6292dc96dcd7c43f9aa72b343201b8b2821f3fe2776de2dedf669d30e40b88b31e8c7c3757f2173a2226716b0f0c84dc08308a199c68ab6c30745e830e51c2d935a8bc81d07d428e539b3c86bc3fcfe01496c048454abbe26c5154079e387f846a485a8ffc578c885cc9894f57771e1342388701eadb21807a112074064d1f6140374e05495cc1eb29e302ccdfb311d7b4b56b0ce9cd8afd4afe15af05b4336cd12c82af40a186e9bb02ca16bd42786380eed688ddcc9a33ed733513665ce332a547c931667887f00f62c6930f5688f9865fbaca71204c0594f71f2bec6764c86ba87e38d5c40247285befca7fbb119b4b7235d7643a9bfb5da9f739a8bce871f45219707d8fe24a003c60e117b057440b196963167b992fd7afff97841e85f9dcdb94b0a96607ff704c67a9321637ff5a296a1c42c898f3f79f9a58d2f0dfa253a15526c7524f111617164240ecf2824b7533b66641b67ea9b6c80beb11f94ff83961545dabab2acccfb915ff81d2217c4b21dea2753f79363a1ff63791e959b5eb4bfb95d70117c21a", 0x1000}], 0x3}, 0x4c004) r3 = accept$ax25(r2, &(0x7f00000013c0)={{0x3, @rose}, [@remote, @null, @netrom, @rose, @default, @default, @netrom]}, &(0x7f0000001440)=0x48) connect$ax25(r3, &(0x7f0000001480)={{0x3, @null, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000001500)={0x0, 0x100000000, [0x3, 0x200, 0x9, 0x800, 0x1ff, 0x3]}) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000001640)={r2, r3, 0x8, 0xf2, &(0x7f0000001540)="1d586d5677aa0dc688362748424315ce7b4515260aba49393f953d9d085028009c47832a88ffabd113ef2b6a7a7001bcf013d2eeb55b2178003011c614b96219bfb87559b3b34cb95514280b108e2b815025d4ebfa0da3c37c6f371cd8c2408a8b9169009e208835f0adf88279d0b9af61a0a8a62e03bb6df18a4005e7644143318c209d10c797f71c1c760f888364250d7d8b94b5da8f7e2119453d1e5f583232b6f7cdf52554c382a279adbe8eca3f269ff12e601437fa11ded96adee5bfa8d83118fab3f6c3bc65b36c98398b1cc58474ef00f5dd7afeedd1b7ec5432a097f22f32090bbdcb930d4c8eb84795a965532d", 0x10, 0x7, 0xc000, 0x7, 0x9, 0x2, 0xaa8d, 'syz1\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001700), 0x20000, 0x0) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000001740)=0x8) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)={0x4c, 0x1402, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000001) ioctl$sock_ifreq(r3, 0x8931, &(0x7f00000018c0)={'dummy0\x00', @ifru_hwaddr=@remote}) accept4$nfc_llcp(r2, &(0x7f0000001900), &(0x7f0000001980)=0x60, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x40, 0x0, 0x8, 0x102, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x8e}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x1) setsockopt$MRT6_TABLE(r2, 0x29, 0xcf, &(0x7f0000001ac0)=0xffffffff, 0x4) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000001b00)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000001bc0)={{}, r6, 0x14, @inherit={0x58, &(0x7f0000001b40)={0x1, 0x2, 0xcb3, 0x1, {0x22, 0x0, 0x9, 0x400, 0x1}, [0x1, 0x1]}}, @subvolid=0x4}) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000002bc0), &(0x7f0000002c00)=0x4) getsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000002c40), &(0x7f0000002c80)=0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NOTIFY_RADAR(r7, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d00)={0x50, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffb979, 0x67}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdb000000}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000081) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002e40), r2) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000003180)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003140)={&(0x7f0000002e80)={0x2a4, r8, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @loopback, 0x7fffffff}}}}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "6d0ab6a3829e0e96963d8a31e827f61f0fe00ed6cad6a24a80ad25b5788aa3ceffc880e8"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "e389b7b5bea703800044ec05485766d8bdb8f14668e884cece6c"}}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x39d9b381}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb4c3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x822b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5b3677fc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcd0c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x22e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1}]}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x69d0, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}}}}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x8004}, 0x20000004) accept$ax25(r3, &(0x7f00000031c0)={{}, [@netrom, @default, @remote, @bcast, @bcast, @default, @bcast, @null]}, &(0x7f0000003240)=0x48) syz_genetlink_get_family_id$mptcp(&(0x7f0000003280), r7) socket$inet_sctp(0x2, 0x5, 0x84) 19.078962633s ago: executing program 1 (id=672): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x8814) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001000000", @ANYRES32, @ANYBLOB="00000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) recvfrom$inet(r1, &(0x7f0000000280)=""/57, 0x39, 0x40000000, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000180)=0x880019, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408200000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000040000080400000008"], 0x48) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}, 0x1, 0x0, 0x0, 0x1af8ebd30674bad4}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB='7\x00'/12, @ANYRES32, @ANYBLOB="b78dcb25fa05000000b6998ed74ba35400f2d35ebdfdc32d000057547180887fbe68dfda6de27cc4ee2048bcb15e90526a23e95c6ad6148ca06b265c7162d08ca4547ef3b29894a4d72794fdf3d615ba3aca81107b97be25e1e0a301d089d3c1f386531489cb1d0a7d2b34962700000100000000000000aff7aea6e4a0d73b4e8207c4d4c1b60f4a89b10dbbb23a42069ea9f92df69548408abb63fea4dbf2c45be987cf21bb310c469ef8ac9a83fcd2b8a23ce10ae3aa9d5312af5a90797b4e1c8afe13157fdec4240ed1334bf6b5d8851f2c7143a193efcca9", @ANYRES64=0x0], 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 19.020909193s ago: executing program 0 (id=673): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)=r1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000010000000000feffffffe000000200000000000000000000000000000000000000000000000000000000000000002000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ccd3ffffffffffff00000000000000000000000000000000000000000a00000000000000000000001c00170000000000000000000000000000000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d0000000000"], 0x15c}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) accept4$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @local}, &(0x7f0000000140)=0x10, 0x100000) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$inet(r4, &(0x7f0000000100)=[{{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(0xffffffffffffffff, &(0x7f0000000c80)="e8", 0x1, 0x12008010, 0x0, 0x0) 18.936797673s ago: executing program 3 (id=674): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000001200)={@mcast1}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000002000010000000000000000000200000000000000000000000c001400", @ANYRES32], 0x28}}, 0x0) 18.823495888s ago: executing program 3 (id=675): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='.\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001640)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb, 0x6}}}}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000000000007311330000000000851000000200000085000000c400000095000000000002009500a505000000004a6940b5a5e6f6568da262e3"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="20440000140003058d9dcc4588ed815c0218000057282070d887034d4538d458fe76f005d5f71ef2b53835e7a7fba7d35afdc5108f8ff200515acfe09a4519ef05f4e5fb2aa51e1bd1eeaf3469c5452b823a7a39952895a8ad7aa106c927a01e402b9a98ed4c7f201e32d22989315fc3c776b6b067ca77021e9ce28ec8e9ffa7ef36dfaf219f112418e0d1f821a0604e912b23cd5249d3483452c35d797759063c8c0010000000000000da9781985289267e40db0f6e44a58c90cb6760db1b2629d20112c381ef95924db5a728460780c4bbcb63b4b1921f1d19cdca572ac094469da1ca4f", @ANYRES32=r6, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)={'syztnl2\x00', r6, 0x40, 0x7, 0x3ff, 0x3, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x68, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @empty}}}}) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001700)={0x0, @in={{0x2, 0x4e23, @empty}}}, &(0x7f0000000380)=0x84) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="34020000", @ANYRES16=r8, @ANYBLOB="050000000000000000000f000000d9000300", @ANYRES32=r9, @ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x20008145}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000007b80), 0x3) getsockname(0xffffffffffffffff, &(0x7f00000001c0)=@tipc, &(0x7f0000000240)=0x80) write(r3, &(0x7f0000000100)="520003000100b8", 0x7) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001680)=ANY=[], 0x44}}, 0x40004) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r12, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) socket$kcm(0x2, 0xa, 0x2) socket$igmp6(0xa, 0x3, 0x2) 18.449580541s ago: executing program 4 (id=680): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x30}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x1c, 0x3a, 0x229, 0x0, 0x0, {0xa}, [@generic="750ec696b5"]}, 0x1c}}, 0x0) r3 = socket$inet(0xa, 0x801, 0x0) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000021b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x2, 0x0, 0xfd3c) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000b40)="4dcbef0e1937efbfe7ad923c291963104815a0d9c63243ccc79feb1c41fb3936cb1ddcd380a910d663656292bd2158f41b24969935bd06a8df6ebdd1065f1695da2c103b817e6e09b1cc8d1ac2ac5956e9fe3b", 0x53) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r8}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r8}]}}}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYRES16=r1], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', r1, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 18.303584417s ago: executing program 4 (id=681): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ipvlan1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 18.076348145s ago: executing program 1 (id=684): r0 = socket$kcm(0x2, 0x922000000001, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000000000000c00"], 0x50}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000100)={@val={0x0, 0x88f7}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0x8000, 0x8100, 0x8}}}}}}, 0x2e) sendmsg$inet(r0, &(0x7f0000003080)={0x0, 0x0, 0x0}, 0x200488d5) 18.075266417s ago: executing program 4 (id=685): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008112a2000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = accept4$rose(0xffffffffffffffff, &(0x7f00000002c0)=@short={0xb, @dev, @bcast, 0x1, @netrom}, &(0x7f0000000300)=0x1c, 0x800) ioctl$SIOCRSGL2CALL(r1, 0x89e5, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x40, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 17.901989691s ago: executing program 4 (id=687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'geneve1\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x20008801, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x48, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x4, 0xfff3}, {}, {0xffe0, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 17.83961118s ago: executing program 3 (id=689): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x68, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_COST={0x8, 0x3, 0xec}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000010000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x4040004}, 0x200588c0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000100)=0x5, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x24}, 0x90) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000170a01010000000000005b2800000000fd41ef57cace6a907c9f64a96dcbb1992647b3d8592d2f7f2dfd3d22d03ba5e1431b7c3c0688a51b61c2a28493b50b0f5b7ef2f4ce9e855ad7f318691531ff6f02e2705a136cc4347f636fb7937757603e630f8f630ccf3a0b93d81119afc7c4abb66843dadcfbab0977de1a317c70d40dc62300de7b6bd7ac9a92fd438f701d2ebb5d2ccfbcd8fef7ceb90862c31de445a8afe0c44e05804409fc7cf5953e522624a197d45e15253969a66d4813aa7b"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b7c, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 17.718059267s ago: executing program 4 (id=691): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c0000001c00070c29bd7000000000002d", @ANYRES8=0x0, @ANYBLOB="7464b3f7cdfce5214af275378a5b4998ae3e98bec389", @ANYRES64=r0, @ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYBLOB="ac1d62fb5e23f68cd24a9d6cb1ab77d1f701dc37fd633043faa124b8f376f13f869fd21579890d44d89a387e1f29533f139e70f7d4e6df05ee8f15e0d7a2958cae70f8d268cf64caa32195c2b0c1c320fbaaf7db4cd756383ebc092a993049d3563e44a017570f4fc4b8e6cda37f166951366051717b4a6986b0bf379dd1ab1478d9b38e90564160cc901265927eb6a4759a7803f33b945197f45e15611c14ba51f8c6d920691ad59210340550d0d418f9fcaedc8426866c233e0b4421b2cc15536c811070f8ab1ef323ea259c42733734078c7c36ee87611edbfa48c112460971f91d5f3eb2f0079c1a05f1d825412434fb0cad6a00bc131c157b95402d6551b1ff707e7cbf16a4dc7006f6005936671530d55208cb936ff76e9ef58218785d1124770ddbe23f444cdd1bd324ceb958e3130f036d2e343c2c9021206e2aa5360d3606f9cce1f449e55a0a3a21170c174165f6457e409be4eeacf12df33e68421d20f7ec061c18e8f87fd4aab9f1819e40de51e1ef6de4bf62adadb84e9f9cec307c60afc83b7b0fa508bbeb4a7909bff174313c2f5d09ed41cef5e364135678aed5972592931d8e881fb4cab0a78f7bdc48ab538d4c478de102338db105fe4c7f7396404d5c4040bf2bf869d60c802e52420d14b00089e5dac7c019878cf28aae028be5d0c6e859b78c7ee141dfd62bf487b6c75cd01fcdde985a4f01951aa0ebec2d42c250e9a4e94083a45afd86ffcd415fd2fb18607da0e371f87386cd239c32c4c5249c1fdcee736bdc9acee23e25bb33700fb9a8bf8063527f861c9cb53d055d0278a5b88f86c43f5fb92dee2f72480cacc0eb2c31cf756a5feb5567b835a460556874cd6e2e8b18a3d86a105f43f957f450375f128a1d37c821ab30083d13f3cb6afcb1bd5a9a2ccce1a1deb08ba1733596a740699ebae9938ddf05b82fe9479a0b9427ad0fd690a5a527335222a5b1e4fce8cc5b4a92494efafa7ae6ba21e9c2aa9d9b0c46c7d0d70dc76e4f82e0c508bb97c6c7f07f63953a8121f90805d09d6af1615575ed2c52983e31682426067f2165187f4d16a2dffe569a2724ba61d73076a6b2de129eaa1fd5ae139d99c9b16848bd0ce3f484a5572713d96c4e51d0cba63654a18b080d3ae7bd012a28affab4acfd3db8e8bc2cefe0d85438431a722200c044da85542aa5c740d0b049b2c70334b8d5a501597f8d1f7ea02fe3c6886cd78f09a1d66c6ab821bc7de90bf66921fce4c4ddcc819bbb51c82284bb0732d78f7babf0a5f05c96da03131b4d1661f99e39dd4e7cbb9bf787d8ebe7919a40168af026c4a8f50aaa99f7471d262ec5daa7791559000484e40d6950721992b70115d0c4db1f3d033f7c99bbc40c02d8308f5cfebaf37f1e76aab49fcce38f8e4336a66bd0ab6aae0f4440126e394200fa74dea3236ad09065eeb6df3dbc4b98123ff3a19f02e152878dd27770d00eee23780487b411a04fb01e222d8733da160ea9887d38db5e5ab1d855661b796201d1558b111b61a5909a2c716b04b60e80c19c05b5ca36cafd0cc50ccddbef0a774242cd9fdc34d456bfbf682bbdde8b7518ecd9a11528a6b47d141e4ce18fb6c1a0cd5530ec12cedff1854459b0add01b0540d8d23748a91b6a9e90edddb72c16eb7f4ffc0e422576783390401879508e07b12ebfa18ddc75c9e5b64a34f33e5b2b43bbc09c2f07e05f12522deb7e7c973aa715a7a172a4ddeef46dad4ac90ee2ee60285ae213e75eae6f84d6ceb8d76dd5e24cb799e7c061c0555a3f403f18263584a04525b93ef88d14fd70fbb5d34d952221ed7ab41076b79840d985efa14880de9a3e34e950db4d02738d985992b88cbf854b4e85e9ae171e6ea50d4c3c95aed47178fd9c7098dcd2d15d6cec17cdf332aa01fe47b43dcecb9495920a3530e5da1c53cb6c15c853a6ed30873cc63beee8f4abb27bdff42c6ed205c58690f4bdd6f9bc969acdfddb91ed8a9a335f8168d621f7bcf52009c6ae876f825fa884c7027d90bbf37498fc43f2c830f7294e17acc42981636cca3eb903418acb4153c3c087d3c1fb0c69944885e62dfa7baa33bb4c5d960899c0011c8f3b38e1e79e931e6cf274220e5f2eb617f26951fce6726a0b1800d26f7e39b183a024e41ad00c0ebf9b335482b7e8984041d1db802fb126ab65ed1ac4e991855b1b972a7baef50e387aee7e38f48321e9b3f317a6a25d51a3755d71ec8f58e6bd38999b32c348e8bd403fcea36058cbbe3a889dda7fcc553f4124674a80dd1ce54097aeec1241d1d6ce6ccfd8192c85abd252dda2486fd97bbb55adbf9c56251d5e00952beab4f26fa9bd52ca8f134e9b5a399f9d9f9e46533298f4f57fd531f70904fd3431d7f3e83d596185ba36371a8b2690e06921cdb748c686f0805e0810cdb83a6f6c90e44ba15d56b92c89a7e5c1201640593f9d629cfc67af897db2946775e4bc1c7788ec397064e88a46467540e908fcecde6cf1a33b1d3e78febea3f4a99568e765c1661a5a2549e8b1c9f19c19747321823ace61280fca4b9c9fe375340f36ac736ce74794f5fb24fbe4b2469a13c2b5560bb5d9ec925b27e9f1cf337c02f9950285ac868944d09affdcbd8bf0700807a594a05627ff3064b5b20bfe7aa1c410046c9a65fb635fd894da8ce0f56bfc823562bf50837c4590b26d5f30c2f32622270a17b0a5a6880c9fc9b2b6b8934eb7a93a3ebe2ea700e1ae81f4a9a776354b7310bf50ce088dd151a78f63f61cca276381f5e6850d9f5485cbcdac965bc1c5443e2083b4dc4f44274b38980a7f765d558590fd1c3d4be69a5cadaa47b00bfe2f3859f837c9658b1b6b3d2f9ad46524f3997fa82e906eae39cdb6f7a0918dc4ef5cfdad97afb53abcf087d4ecd3e47f942aeae87dc6ef87a1b50b7b675ac736e1090e8f5d35795e942285116fb0ba6967bfca7d502eb5fd408b20ea2882b255d4c2fe29fcfaf28add00e3388478e86c000e9eac58f8c3094b827ce16f0a4114156530d3abaab618fcf6f4dcd9fad17537afd18780bf4cf15df0f6230b7119f1906dddaecebc70c9b19b20524769968474ca8074219135e0f35c014b51ea5696a0667a7d8dd20759ac6cbc7c4782f601a0b351e3b819896bed36e72611e22f0cf9395061b65d26ccda319d1f8a38a3309ec0f976307379a56945aa392d36692a4fc52e4e50e6cc5e3536b7e74ae54fa944836bf1ed2c493bbc1274422ccf053c18dbd7d80ab44aa4e65459dc8880fbaf91a7a4c43388301342cdbe3f0e5b407564dfcb483e37f3792f86762b92a8b306d443a60bf70cbff710288afaf52ccc32f254f83be238b8fb43b6cb09f3256f90c2c66639473b73f04881f58dceec604e2d6628f8d2a2e174d33d1f9555e22bc44fe3c758e375f653b8df6b29ec10a644e21ef7667d7be348d610379037cd276ffc4547ca412ae35aba81ce9d5441fe990a205009b9f22b35bdb0e7f2bc59f2fb2b40bda27cbd36bd0bb86b361e0b92fa6e3b194c4718f11d467a17dd910d65646fb98ad4ddfcedd83a39626013b05bca3ab5709e1cb980186f1cfb62cd7ced12648e845df551c87bdf29df5e5d8030c3b903d339fa7bfd9be24b756a5ff7f769be0dc25ce6a909d06fb300ef3849463fedb12a58a082cc585f7b65c8bf85b896faf5dde786891e8dd6dc31bedc9da6e33f2d3bddd55d97da624e5725cf5a51bfcc72fc27cb50e6f2c9faae6b9a81e95eedbf73fde9fc7530e0d055e161b26cf478184fa6bfc129822adeb986ef1d190cce5d73248e5dd38a763df0dbd9a67a0e04ac9c4894337824d3f6fa6013e923fb32fa6f44c533b4c15b9eba52153cadffa7a8cca9027cfb76b73a9257fcfe6e07615b14694c32d632b400954531ef80caaa3fc2990c940a4f0e3c9e234faafff5d14d6758904ec59f735a8ca9c9aa35cf95bb2a9230529a737471684c4d23128e79df0b122ffdaa75e79ba526e05381d1770be78b5283e7ead2ca71874d8e03f1a30f6e78ba0c75e3020dd38b28db7ae4ffe7285bcc1a28369d09b593fe29af085b28432dce53e853c38dc37ca32c46eb66ab1f290a1e9854ecd79083f4d597699aa34b07dc16f4cd4623d737ec95307a059283a7861910b8fd9f10643da127d1d443618ddeb23b5809a00a4b2fa324ed4f75696b314d54e4b20038e508a6d96c63fce77e804d2fbcdb9fffee85827ae6c29833b67f3923fd42502b883f768adb66d0a09e4be3f1ceb4d6cfe83928c2bdeb28b4f8df42868e1220298155d83462e9a2a54015f0dce06045cdd6f1761afc3b1917a88374a8802041f8e0ebc8433fefe6c4e3845b8758245c6325a53f1f3ece378188d065bbb62d53d2c331734eef0c90582fa444a12d65e9a80394b3f373aa2ee34c75a7e5af1d646de73c83a6b59a708645144c329753986c820fec3b1496e085397f96cec77ca3ec20fcd4f000ef3ae41aa507b97b9f6242ef7aeb3f56765cff31b0e5e6648147130f8132d51d2c30eb242a527270336368cfe9f53721c6b22be717fc4012353b5fe6e8d587631b8b533ec8c927b6320a2507405965a5de5f24b3ce673ff8b78a0b9a6f6ee068a535961cb3f46904cd98318c3aac6a03f4b577606075661bad6d5dbf055335911b5f4c4255b2cdfccc03fb0328cfe7380f85ea3a738d14b0d65aa6e0bf15724cf6ab5ddcdc3735041fdb940d1d98c7eae7bc90c6607fd23f92b6b3602314478099e3a0cebba6986fb6c29804b3b23df82fcf2a64c3ae94b06a030df7ad94a8c5c01286739a3b47590aa90e369171523c70c402b697afc0a709bbe5b9a5227ab5f3a2f2b536290bb66322c9cc747ea6670cd6c6379e8cf28b4611e9907e7edce365e5d5ba3d26c8e87154d23bebfb16d404558bb73e52890f7ae8f667f899fe934a0ae0fa3aff4f03a0f8b802122fc1ee0f3bb55d5c601d138dc38e1adcd8c20048296600c9c334861b8ec1f72f9fe9e6fa28dc1c36c4ac67a4ddfd6e2e617d3f47554255129cce70bcb7b88d632941850684ca7d8fa9977ffc04e803a9023c4a35f6036a87a24af04fd6492b623afb34e52a61dc15003578544b63d484a8742dbb885bdba9514e8616629eed88e6d133a94edb7f104135ab8fe044eedce714269ad5103f549f8ef4f537d9fe6ec890e3ded7ba09e843bb689b0289f9fed4b0422234a886111f07e4036ce08bf9c56049ec752ac21bf1e0390936e6fb3fc26eb3f864056a7c40b95775ee147e4371f2871149314a6123d6e64dde3c0fbe92b1b1458a9aa00470eadca8e66b055334ae9473d0435f9109c7cca68c18b5d70230b028f3565a6415dbbd75d0b309061c2f385d485a17e5b027b5cd2e9e422904bd1616e64d076fa934e0ca0cade764668344f1733d5a5253ae03ac1b9da163ea8d5c1159c29246b760ca8a220c295c0fa71aaa59aad2d2c69b017a5a70b89a43a3a0697b4715d17f05031186d89d81efab68e232e8bb51106cfbf37421a340be77ec92f6903132dd3d02ae8be36dbec41f23ac850f83cd694f654f9c189913e014868e3bb497411d47db432f10a791c5bf97feb3fb0806e45f9a9bb6cd039f4046fa2c8d43e569b36196fca23a99ad7dbb9e8322c8c91811f0245a82e6c212eb37b29998bdcb85a97ce18f5b14ce8011ce217647403150c417f3978da01128ceeaa236668579889dbf2bee70588d337e6a3c87ef2bf5e757a121ce5f603187e2ff951d3202983eae98980aa06a8a3e3fd9c26ba29d8b59f8b8aec9c173a68062f9cd4ed16d7859a2564efb641eb0"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100), 0x6) getsockname(r2, 0x0, &(0x7f0000002100)) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) shutdown(r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r3) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r4}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r5, 0x87, &(0x7f0000000800)}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000001d80)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x49}, [@ldst={0x4, 0x0, 0x0, 0x0, 0xa, 0x0, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x2f3, &(0x7f000000cf3d)=""/195, 0x0, 0x28}, 0x48) getsockopt$inet_tcp_int(r6, 0x6, 0x7, 0x0, &(0x7f0000000180)) r7 = socket(0xa, 0x3, 0x4) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="390979fd459c"}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff000000000008000000b70400000000000085000000540000009500000000000000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 17.643640152s ago: executing program 1 (id=692): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, 0x0, 0xc088) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x4000041) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c4000001a00fbbe00000000000000000a00000000000000000000004947ee29c853495c38b05458f51d1edd6b0b4174dfcada22896121e58c384614294ea4af831613d51c08c872c424b83845ee582c51b4899a4e15fe86401a48ca0900000000000000aba6a109c47f85258ea00a2d47def9c78a99b1ceb7b90a5c7f7c0923a93a7b9d0a8cc552"], 0x1c}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e0001000200"], 0x8) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r4], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000020303000000000000000029201008000100010000000000309324ed4b6102de6453a29cff1e39e1f9e8cb5644427a048e9da2ef43dd5ec0a7e149aca508957456a7368f71168a41171093935855270b550baa161946f397ce86a065ea46091d58d943971f01fde285ce75c705fdcca2427c53b712579ba9fd1b1a4845ff6057091ff43bcc86c60b7506f80393983992d9c4740e342afed8749a5d5b925bc3aae3bb458838623b5abe1b0424"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000020301020000000000000000000000100800"], 0x1c}}, 0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r9, 0x104, 0x3, &(0x7f0000000340)=0xf0000008, 0xfec1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0)='F', &(0x7f0000000100)=""/12}, 0x20) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4084) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf251c00000008000400010000000800040001000000080003000100000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="94c3ea4991ea6c1f423c7a8cb7ba523a44"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0e000a00000008000d004000002cefff000000000000000000000000b602567a0000", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x24000000) 17.563819513s ago: executing program 3 (id=693): sendmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000040)=@rc={0x1f, @none, 0x81}, 0x80, &(0x7f0000000680)=[{&(0x7f00000000c0)="11ae035cfa8ba4d06d32d26ad7a81a1bbb3aff28b0c72457fb13b9e85395a1eadecda8854cb78be230ddb848f0943b507618d61cefa29c54e9f6d7fcf672588a626493a03e56aba0db2ac74a0d19187b74618d", 0x53}, {&(0x7f0000000200)="538bff659fbd9b88df4897b584aeacf7b5c0321f3a30f4f2c160bec43b5a8e2a76633920dcbd88fc859063fd8c50717023a342fc2d58f44a2c5120160e2f0b9722ab3fba8bbd9d45aba3105197339fb10b99453b384f8cded5373685d6ab1d1069b0106d29b5ef08f42aaf4a237094e91a64b30e8a158bb0599b4517bdcc733645bc89d1076a3d2402ad7119726cc58ed145025897ddc31810260e5855f1b494fc794dd1bba8e1aa2d5455642f482309f9e837cf13650b927f0062a5dd88fdc9436940cfc6dffa31c1f72f2bf5ca03a3739e39b707a2d49d1f5f3e2cebcedb2f1a4f", 0xe2}, {&(0x7f0000000140)="a3441a1ec08d0c544277459a87c278c9c3461f138f653a92c4eb2d1f063a33a12881f9f5a8df85ade072aef3e8c621ce296991528a9a2f09f26e96ec", 0x3c}, {&(0x7f0000000300)="4a661ecfce60d21b8f35aebefe8648f31fc6e388a7283b77928dcb7600d95d4dde943ca4d369abb459bb31bf08efd7b8e7a75622664e7ec33a865f6c5b50eec9db9808a0ca41c1bd69cbb8222cc9b3a16617558239bb8cc26a394e303699070b460e213174d6831a4786efb572158fb61b62489349f2a33a7104917f18cc6827d1860a8ce0bfb12aada09ec4d429eed385664dcc2e2b2c98f745579be073c75d260b6ddf572607a2c291eba101", 0xad}, {&(0x7f00000003c0)="f761dd68cc4af165b388c9a4ba645e45203fba3d3c5ce204e875db624c58e81c75c61e792b696f8f9633716d99a3e39798f9983e72243d68968d4f90fd8c380d9d79d19c14b0e2dfae", 0x49}, {&(0x7f0000000440)="05eefb800921bf0a7b315843b556aafa791cba79f53bfa5a1f4579a9377ed84b13e87c1fef16393c130a8ccf18d1e37616db042497ebad541f48ca3954419e854a085477758330356afd040272e77e142c8e7029facf8bca018906fd18f7f52e8666e9905eee14da139db81812dca972d4789535633a584d8294ec9149531e1160b1d01a74b9a7f3375a443b6d10b69c185e07a1775d", 0x96}, {&(0x7f0000000500)="164587d5cab00774e4971789746e42f6dd764f098c2f710094825273b2bbc67b9c3dc46e35c8315d8a634cb43585df153d6464d279169beabcbcf623e457cb634bb537f59d09d7db9929a3c457714ccd80cd9fd8ba3d6b56d173f6fca38c183ed4ca1bf1935793fa3d5bfeec97aa939443dcd7aab2011c343fa60323debfdf6ab95d44129086c549f5b3f61d3a56191bad51cdecafc373d2d66046e336354ccb78441f9303fe027c510ea54d19e4a2fcffcd7819c6ef916e112923a1de1482c0052d0ef5", 0xc4}, {&(0x7f0000000600)="f0ed3bbb8f199e5a2ad4a49533c6b5f4b5ce5909564277bc024e154aa5de53aa4b31c673c9a0df2bb72e49464c7b1227003869b7c1cadc0d41b51d7fc1cc7d11ed0627e23a80fe2f2285d4af528eedddd02886fd2fdef6a8fd82a0e08958bd660b089fc96094e32f9cfe", 0x6a}], 0x8, &(0x7f0000000700)=[{0xe0, 0x119, 0x3, "cfd2b977d56863f82e6753e38e7c2d70378a157562d79361de01ca6dae0a12239f78fa19c5e42f551ddf1d2f9a026983e33e45778dacdc3458253e87535fc90076dd85a890607357bb809385c642dd1bfc3c4cbd46b9edf3d21d311129bd3bb382828a3ce8005d1c5d17b56df83f7b75a77109e0daade394fc8fb45eac1e1fb5f853dede7cd5c15df5806991334560e990b31948e264a0daf686aa6630f78a74be9fa37ddb130c11c8dc32ee491f8f7e8ac68f1e2d1b885569854f565d5f76f4ff7382679d87ea015d"}, {0x58, 0x10e, 0x1, "b88f663fe1a9a05d2f22b2c64affb82882eca648bc7343bab9e5ec44b90a45b59ab3bd33ca92dfa13d0303b9e266c4899000d9696f4ceb1606b63856ef012917f5e5e61fff10"}, {0xf8, 0xc, 0x0, "f7237954197dee4a225114a156b26170a24cbd30ff7f7c0ae6c2750d91e3888b3b89e5a915b441ea7a09760e41783d89a8ab99a87f47f184b3e3c2c5ce6c47d5d6802e878003502915a23dc9732e8aac699ccb94b37c3b24d16e04768e3aebb34b44c9b2493b2fb6882ed6dd9134266cb41104405449115d5b73ea6524ec3aa1846a4da38f6bf1716a8bd77fe39e3d78d18055dc4a020bafb231198bd2bb94f5a3764319f1fe41fa8164777c6f6e587850bd4f74c04c3954ae70e3a9d297db19bf3c512074d45cbeb5b25c3c72429cc30f276300bc595aff409210dd15c4a51506a3"}, {0x98, 0x1, 0x3ff, "55cec880146431b74696b6b26331ec17b5512edbe91130ba227fefd91a656bff499712d61a21529c1dcfd47a0e7bac5e512ad03730edccfd36025544aeaf547d25083a3853b47ccf2b1752dd01a576945ccb06d61bd13395bd535c4745a0c799d9f5e0e8a3cdff7b1c150e44f85ba8905d24aed31fafd2f9f3c8d1ada25c9ccdc13e1315"}, {0x10, 0x115, 0xf7}, {0x58, 0x1, 0x401, "66bd8255fe635ebf1ed02519a8d971c8a83597990c36b84cf5fc4d53e2e65c95c5151b87194014c22c3c6cd0ddbecf42c26dfcd9ff8bbdb1a7e027da951cb94e4ada307dfd0c1049"}, {0x38, 0xff, 0x9, "19a530e6e39fa6eec74c77871bc9e77a63651a02747d98e2581bfcab58c87d49bfc6343409"}, {0xa8, 0x10e, 0x0, "0cd14a47d703f425e9c9593d0f2538968ea925b82e83568f24660737d18c0745a05a4e9c552e891a96b1568e36dbbeb3fa9b6a84db41902754dd93c411fd72dd1232e489b7b7e7e4501f04320880e4e21c63607cd019593dbd4aeec63f6623e64f0d090000706b031e2e4f03d98b46bb34402458fdc8f8be5af4d1b95fc98d0ac70a9bae6297483bad486d25bb3bd80d3529c9"}], 0x410}}, {{&(0x7f0000000b40)=@rc={0x1f, @any, 0x9}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000180)="4576d284e0a8798877b454600c544f063a6485dd7576789c8765eca62053a22246", 0x21}], 0x1}}], 0x2, 0x4000052) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x11e, 0x1, 0x0, &(0x7f0000000000)) 17.551984099s ago: executing program 2 (id=694): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$nci(r0, &(0x7f0000000240)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x0, 0x2, 0x1, 0x9}, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newneigh={0x34, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_DST_MAC={0xa, 0x1, @local}]}, 0x34}}, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000040)=0x4, &(0x7f00000000c0)=0x1) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000300)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/80, 0x50}], 0x1) socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000100)) 17.415681966s ago: executing program 3 (id=695): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ipvlan1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 16.785519476s ago: executing program 4 (id=696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 16.623420991s ago: executing program 2 (id=697): r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @rose}, [@rose, @netrom, @default, @null, @remote, @remote, @rose, @netrom]}, &(0x7f0000000000)=0x48) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000014000104595e0000008000001e"], 0x18}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000001340)='T', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={r3, 0x3ff, 0x8, 0x9fe3, 0x0, 0x2, 0x8, 0x10, {r3, @in={{0x2, 0x4e21, @multicast1}}, 0x3, 0x10000, 0xa22, 0xade1, 0x53c6}}, &(0x7f00000001c0)=0xb0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18e2ffffffffffffff000000000000002170200046f526"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x8}, 0x94) 16.519685288s ago: executing program 2 (id=698): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000440)=0x7f, 0x4) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @mcast2}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000300)="9c4f00346cd789c943351d5e3812274807b9503c1ddac6001229a93abb66d57fd2a03b07", 0x24}, {&(0x7f0000002280)="42fcd9fe19201ddf64559806cd323da67fe16faa009a56eed81e2e6cb52e913555dbab9388fb8bdd350f69a5557494b8f4ca13c6f5bd31da00000000000000124f8ea174254ede34582a13f1b4943912b54fd7ad67a9c57c47b00fe8", 0x5c}], 0x2}}], 0x1, 0x80) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800a000100717565756500000014000280060001400000000008000440000000000900010073797a30000000000900020073797a32000000001400005d62001100010000000000000000000000000a72ac86c601a97a5871189ad2abd6c4c1a655f89e9821f594547966a6ef50684adec626d26f6e0bfb440a597aa6b010f8f59260db217931c94a0afe2120fb437d50558540f1819efdc79cf64594143ff4aac1e3e9ca3d02a9552e62236444c6f89d1b0fd5f7493314d3b6f84b"], 0x7c}}, 0x0) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002d80)={0x6, 0xf, &(0x7f0000002d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe3e, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xfffffffc}, 0x10}, 0x90) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000000)=0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0xffffffff, 0x4) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x33fe0}}, 0x0) (async, rerun: 32) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x4c}, 0x4c}}, 0x0) (rerun: 32) 16.068243206s ago: executing program 2 (id=699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'statistic\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "4cb4fc4ba7906e8f58c2052fade1bc2c62cdeb7521cf85ee"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000240)=ANY=[@ANYRES64=r1, @ANYRESOCT=r1, @ANYRES32=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.993598913s ago: executing program 2 (id=700): socket$packet(0x11, 0x2, 0x300) 15.989471072s ago: executing program 3 (id=701): r0 = epoll_create1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r4 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ec}, [], {0x14, 0x3e8}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000600050003"], 0x24}}, 0x0) epoll_pwait(r0, &(0x7f0000000200)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x400000000000009]}, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4008010) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f00000001c0), 0x4) syz_emit_ethernet(0xd2, &(0x7f0000000140)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x9c, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0xe22, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "8742fe4687d86e5da82e41ef2302058dc3b5674f7389ec494011ccec4f7d012c", "f2760709a418c2d54dfc3bcd6b0dc0f026e4dbbd0fc37c4cf9e05eebedd14ed77e5af90f021be4d1922cd5279600538f", "9cd204eeecae9a729ee1662af2f006faf435c215365df6e6c5db8235", {"aeb6eb691496126a2d28d73f1a738b14", "fc81aa717bf9ce692ed96249827491df"}}}}}}}}, 0x0) 15.852268536s ago: executing program 2 (id=702): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800733268000100030010000000008000000000000000000c00020002000000150000000c000c800800030007"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) r2 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e20ac1414bb000000000000000002000100000000000000070c00000000030005000000000002004e20ac1e01010000000000000000010014"], 0x70}, 0x1, 0x7}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, &(0x7f0000000040)=0x11) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x45}}, 0x3f}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r8, 0x1, 0x70bd25, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4084}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x3}, {0xffff}, {0x9}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x34, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x101}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x102}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x27c0b074}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x3fe}]}}]}, 0x64}}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) 15.545905615s ago: executing program 0 (id=703): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYRES16=r0], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0x5}, {0xc, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x2, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x80000001}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x2755}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x30}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x400}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8081}, 0x22000810) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f00000000c0)={0x0, 0x2710}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x10, 0x80000000, 0x4, {0x0, 0x0, 0x0, r4, {0x8, 0x3}, {0xa, 0xfff2}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x1a}, @TCA_FQ_PIE_TUPDATE={0x8}]}}]}, 0x44}}, 0x20004055) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000070a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003803100010076657468305f746f5f687372000000005c000000200a0101000b000000000000010000000900020073797a30000084000900010073797a30"], 0xe8}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000008000000071102f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="020b0908060000002cbd7000050000000400ff030000000007000000000000000800000000000000bb6e000000000000ef8797"], 0x30}}, 0x4040800) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x1, 0x3}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) 15.452243989s ago: executing program 0 (id=704): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(cast6-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) sendmsg$NL80211_CMD_CONNECT(r1, 0x0, 0x20048810) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) 15.338740508s ago: executing program 0 (id=705): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x7d, 0x0, 0x8}, &(0x7f0000000100)=0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:', @ANYRESDEC], 0xd) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x3, @local, 0xfffffffb}], 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f0000000240)={0xb, 0x18, [0x3, 0xffffffffffff21a3, 0x75, 0x1], &(0x7f0000000200)=[0x0, 0x0, 0x0]}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57105b, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, &(0x7f0000000280)=0x6, &(0x7f00000002c0)=0x2) 15.23532407s ago: executing program 0 (id=706): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) bind$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0x4001}, 0xc) (async, rerun: 32) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(blake2b-256)\x00'}, 0x58) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r4 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$TUNGETVNETBE(r9, 0x800454df, &(0x7f0000000140)=0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r11 = socket(0x400000000010, 0x3, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0xa, 0x0, 0x7f, 0x1, 0x7, 0x80000001, 0x6, 0x8, 0x46d, 0x400, 0x303, 0x214, 0xb0c, 0x100, 0x7, 0xe, 0x2, 0x7fff, 0x8, 0x7fff, 0x5, 0x80, 0x400, 0x4, 0x1, 0xff, 0x9, 0x1, 0x0, 0x5071, 0x1bf66fb9, 0x7, 0xf50c, 0x4, 0x0, 0x800, 0x1f01, 0x3, 0x0, 0xfffffffe, 0xffff, 0x6, 0xd17, 0x7fffffff, 0x1, 0x8, 0xc, 0xd6e1, 0xbaf5, 0x2, 0x9, 0x970c, 0xffffffb2, 0x4, 0x101, 0x5, 0x40, 0x2, 0x2, 0xd0d5, 0x0, 0x2, 0x1, 0x3b05, 0x5, 0xfffffffd, 0x7, 0xc8b8, 0x0, 0x8, 0xe42, 0x8, 0x5, 0x7, 0x401, 0x5, 0x1000, 0x4, 0x10001, 0x6, 0x7, 0x0, 0x8001, 0x0, 0x1, 0xf, 0x5, 0xc1d6, 0x5, 0x100, 0x8, 0xa411, 0x6, 0x2, 0x1, 0x1, 0x10001, 0x6, 0xa6c, 0x7, 0x1ff, 0x7ff, 0xfffffffa, 0x60, 0x6, 0x9f50, 0x400, 0x9, 0x1ff, 0x0, 0x101, 0x6, 0x1575, 0x2, 0x101, 0x6, 0xebc, 0x5, 0x5f1, 0x1, 0x2, 0x3, 0x7, 0x2, 0x6, 0x1ff, 0x80000000, 0x6, 0x86, 0x7d, 0x2, 0x9, 0xd386, 0x6, 0x10, 0x6, 0x2, 0x8001, 0x5a, 0x7, 0x8001, 0x1, 0x0, 0x4b2, 0x4, 0x1, 0xffffffff, 0x9, 0xffffffff, 0x5, 0x8000000, 0x0, 0x5, 0xcd16, 0x4, 0x1, 0x7b5000, 0x9, 0x0, 0x7, 0x4000, 0x6, 0xf497, 0x1, 0x4, 0x3, 0x9, 0x1, 0x3, 0x101, 0xa9, 0x300, 0x37, 0x4, 0x403d, 0x400, 0x0, 0x80000000, 0x10001, 0xa, 0x5, 0x4, 0x8, 0x5247bda0, 0x1afeb244, 0x6, 0x10001, 0x0, 0xd7, 0xc, 0x2, 0x10, 0x4, 0x5, 0x100, 0x0, 0x2, 0x4000000, 0xf, 0xd886, 0x10000, 0x7, 0x3, 0xf, 0x2, 0xa, 0xc, 0x101, 0x1ff, 0xfffffffb, 0x8, 0x0, 0x0, 0x3, 0x6, 0x80, 0x209a3f, 0x5, 0xfffffff9, 0x5, 0x7, 0x1, 0x4, 0xf7, 0x4, 0x1, 0x81, 0x4, 0x7, 0x6, 0x15a64618, 0x7, 0x0, 0x7, 0xff, 0xae6, 0x1000, 0x6, 0x7, 0x1, 0x10000, 0x7, 0xfffffff9, 0x1, 0x3, 0x587, 0x1e1, 0x1, 0x0, 0x5, 0x5, 0x9, 0x80000000, 0x5, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x20000000, 0x3, 0x4, 0x0, {0x4, 0x2, 0x8, 0x8, 0x4, 0x5}, {0xe, 0x2, 0xfff, 0xff00, 0x10, 0x1}, 0xb72, 0x8001, 0xdb}}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x1, 0x2, 0x800, 0x3b5e, 0xfffff801, 0x79, 0x8001, 0xf22, 0x0, 0x1, 0x0, 0x8, 0x4a7, 0x1, 0x2, 0x81, 0x4, 0x7, 0x2, 0xd5d, 0x5268, 0x7e, 0x3, 0x0, 0x6, 0x5, 0x3, 0xffffffc0, 0x4455, 0xffffffff, 0xfffeffff, 0x8, 0x45e, 0xff, 0x2, 0x0, 0x207f, 0x7ff, 0x2, 0x7, 0x8, 0xffffff45, 0x4, 0xc, 0x6, 0x6cff1733, 0xd39, 0x4, 0x0, 0x7, 0x8, 0x8, 0x8, 0x3, 0x2, 0x1, 0x200, 0x12000000, 0x2, 0x9c, 0x7, 0xfffffffc, 0x2, 0x5, 0x2, 0x5, 0x9, 0x96, 0x37, 0xb6, 0x6, 0x1, 0x7, 0x7d, 0x2, 0xe2b, 0x10001, 0xfff, 0x3a, 0x2, 0x10000, 0x81, 0x2, 0x7, 0x9, 0xd317, 0x9de, 0x6, 0x800, 0x1, 0x43, 0xff, 0x4, 0x0, 0x7fffffff, 0x8, 0x6, 0x10000, 0x9, 0x5, 0x7, 0xd, 0x9e5, 0x0, 0x4, 0x76, 0x5, 0xffffffff, 0x7, 0x2, 0x5f, 0x0, 0x6, 0x865feb0b, 0x2, 0x0, 0x1fb, 0x7fffffff, 0x401, 0x400, 0x5, 0xa2, 0x2, 0x195, 0x7, 0x3, 0x800005, 0x6, 0xffff8c56, 0xfffffffb, 0x8, 0x2, 0x5, 0x7fffffff, 0x1, 0x6, 0x2, 0x7, 0x2, 0x4, 0x10001, 0x1, 0x48, 0x10001, 0x5, 0x1, 0x2, 0x5, 0x7, 0x7f, 0x36800, 0x0, 0x0, 0x3, 0xfffffffe, 0x6, 0xe000, 0xb1, 0x5, 0x8, 0x4, 0xffffffff, 0x1000, 0x7ff, 0xb, 0x80, 0x1, 0x5, 0x80000000, 0x53, 0x6, 0x4, 0x0, 0x3ff, 0x838, 0x9, 0xfffffffc, 0x7, 0x9, 0x2, 0x2, 0xffff, 0x1, 0xfffffff8, 0x5, 0x80000001, 0xfffffffe, 0x4, 0x2, 0x400, 0x800, 0x4, 0xfffff4bb, 0x8, 0x6, 0xc, 0x6, 0x1, 0x6, 0x9, 0x0, 0x944, 0x70, 0x6, 0x5, 0x10000, 0x5, 0x3, 0xb52f, 0xfe, 0x0, 0xa0, 0x8, 0x203, 0x4, 0x6, 0x0, 0xff, 0x3, 0x0, 0x5c, 0x6, 0x8, 0x0, 0x15, 0xffff, 0x0, 0x9, 0x7f, 0x4, 0x6, 0x6, 0x7, 0x0, 0x9, 0x8, 0x5, 0x4, 0x9, 0xffff, 0x9d1, 0x1, 0xf, 0x8, 0x40, 0x10000, 0xd3ae, 0x5f5a, 0x1, 0x6, 0xd00, 0x0, 0x24e00b6d, 0x8f3, 0x2]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@delneigh={0x28, 0x1d, 0x100, 0x70bd25, 0x25dfdbfe, {0xa, 0x0, 0x0, r1, 0x80, 0x46, 0x2}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) 15.19536173s ago: executing program 0 (id=707): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, 0xfffffffffffffffc, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xffe00000, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x0, 0x81, 0xfe, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0x92a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x6, 0x922e, 0x0, 0x10001, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0x5, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x5, 0x7fffffff, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x6, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x800, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x87, 0x10, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xc, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x10000009, 0x2, 0x3, 0x10001, 0xffff, 0x4d, 0x100000d, 0x8, 0x2, 0x2, 0x8]}]}]}}]}, 0x43c}}, 0x4000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2}]}]}]}, 0x3c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000077000701feffffff000000"], 0x18}, 0x1, 0x0, 0x0, 0x20048808}, 0xc000) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1a000}}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/264, 0x108}], 0x1}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r10, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0xc801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) 2.163418659s ago: executing program 32 (id=692): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, 0x0, 0xc088) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x4000041) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c4000001a00fbbe00000000000000000a00000000000000000000004947ee29c853495c38b05458f51d1edd6b0b4174dfcada22896121e58c384614294ea4af831613d51c08c872c424b83845ee582c51b4899a4e15fe86401a48ca0900000000000000aba6a109c47f85258ea00a2d47def9c78a99b1ceb7b90a5c7f7c0923a93a7b9d0a8cc552"], 0x1c}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e0001000200"], 0x8) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r3, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r4], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000020303000000000000000029201008000100010000000000309324ed4b6102de6453a29cff1e39e1f9e8cb5644427a048e9da2ef43dd5ec0a7e149aca508957456a7368f71168a41171093935855270b550baa161946f397ce86a065ea46091d58d943971f01fde285ce75c705fdcca2427c53b712579ba9fd1b1a4845ff6057091ff43bcc86c60b7506f80393983992d9c4740e342afed8749a5d5b925bc3aae3bb458838623b5abe1b0424"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000020301020000000000000000000000100800"], 0x1c}}, 0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r9, 0x104, 0x3, &(0x7f0000000340)=0xf0000008, 0xfec1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000000c0)='F', &(0x7f0000000100)=""/12}, 0x20) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x4084) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf251c00000008000400010000000800040001000000080003000100000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="94c3ea4991ea6c1f423c7a8cb7ba523a44"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0e000a00000008000d004000002cefff000000000000000000000000b602567a0000", @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x24000000) 1.134962092s ago: executing program 33 (id=696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 100.938356ms ago: executing program 34 (id=707): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, 0xfffffffffffffffc, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xffe00000, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x0, 0x81, 0xfe, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0x92a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x6, 0x922e, 0x0, 0x10001, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0x5, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x5, 0x7fffffff, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x6, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x800, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x87, 0x10, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xc, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x10000009, 0x2, 0x3, 0x10001, 0xffff, 0x4d, 0x100000d, 0x8, 0x2, 0x2, 0x8]}]}]}}]}, 0x43c}}, 0x4000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2}]}]}]}, 0x3c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000077000701feffffff000000"], 0x18}, 0x1, 0x0, 0x0, 0x20048808}, 0xc000) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1a000}}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000540)=""/264, 0x108}], 0x1}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r10, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0xc801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) 58.395303ms ago: executing program 35 (id=702): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800733268000100030010000000008000000000000000000c00020002000000150000000c000c800800030007"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) r2 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000140)) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e20ac1414bb000000000000000002000100000000000000070c00000000030005000000000002004e20ac1e01010000000000000000010014"], 0x70}, 0x1, 0x7}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, &(0x7f0000000040)=0x11) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x45}}, 0x3f}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r8, 0x1, 0x70bd25, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4084}, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x3}, {0xffff}, {0x9}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x34, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x101}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x102}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x27c0b074}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x3fe}]}}]}, 0x64}}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) 0s ago: executing program 36 (id=701): r0 = epoll_create1(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r4 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ec}, [], {0x14, 0x3e8}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000600050003"], 0x24}}, 0x0) epoll_pwait(r0, &(0x7f0000000200)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x400000000000009]}, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4008010) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f00000001c0), 0x4) syz_emit_ethernet(0xd2, &(0x7f0000000140)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x9c, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0xe22, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "8742fe4687d86e5da82e41ef2302058dc3b5674f7389ec494011ccec4f7d012c", "f2760709a418c2d54dfc3bcd6b0dc0f026e4dbbd0fc37c4cf9e05eebedd14ed77e5af90f021be4d1922cd5279600538f", "9cd204eeecae9a729ee1662af2f006faf435c215365df6e6c5db8235", {"aeb6eb691496126a2d28d73f1a738b14", "fc81aa717bf9ce692ed96249827491df"}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.118' (ED25519) to the list of known hosts. [ 72.448475][ T5818] cgroup: Unknown subsys name 'net' [ 72.614216][ T5818] cgroup: Unknown subsys name 'cpuset' [ 72.623412][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.018692][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.552384][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.562797][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.571231][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.582770][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.591261][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.601788][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.609685][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.619083][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.628490][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.651313][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.673108][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.681049][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.682895][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.696029][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.697517][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.709989][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.716169][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.729857][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.730190][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.737796][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.755266][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.764627][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.771836][ T5151] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.788597][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.817027][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.462514][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 79.507177][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 79.533730][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 79.651464][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 79.753712][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 79.879282][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.887260][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.896211][ T5831] bridge_slave_0: entered allmulticast mode [ 79.904287][ T5831] bridge_slave_0: entered promiscuous mode [ 79.933214][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.940712][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.947904][ T5830] bridge_slave_0: entered allmulticast mode [ 79.955579][ T5830] bridge_slave_0: entered promiscuous mode [ 79.964444][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.972136][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.979487][ T5831] bridge_slave_1: entered allmulticast mode [ 79.987920][ T5831] bridge_slave_1: entered promiscuous mode [ 80.000040][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.007239][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.014502][ T5829] bridge_slave_0: entered allmulticast mode [ 80.021720][ T5829] bridge_slave_0: entered promiscuous mode [ 80.035536][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.042762][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.050118][ T5830] bridge_slave_1: entered allmulticast mode [ 80.057586][ T5830] bridge_slave_1: entered promiscuous mode [ 80.100255][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.107564][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.115189][ T5829] bridge_slave_1: entered allmulticast mode [ 80.122457][ T5829] bridge_slave_1: entered promiscuous mode [ 80.198968][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.212346][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.221818][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.229125][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.236935][ T5828] bridge_slave_0: entered allmulticast mode [ 80.244226][ T5828] bridge_slave_0: entered promiscuous mode [ 80.252042][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.259255][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.266815][ T5828] bridge_slave_1: entered allmulticast mode [ 80.275247][ T5828] bridge_slave_1: entered promiscuous mode [ 80.305789][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.318259][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.352173][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.362219][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.369738][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.377615][ T5837] bridge_slave_0: entered allmulticast mode [ 80.384820][ T5837] bridge_slave_0: entered promiscuous mode [ 80.430149][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.448715][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.456550][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.464243][ T5837] bridge_slave_1: entered allmulticast mode [ 80.472163][ T5837] bridge_slave_1: entered promiscuous mode [ 80.490985][ T5831] team0: Port device team_slave_0 added [ 80.499885][ T5830] team0: Port device team_slave_0 added [ 80.508351][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.546117][ T5831] team0: Port device team_slave_1 added [ 80.554393][ T5830] team0: Port device team_slave_1 added [ 80.576683][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.587519][ T5829] team0: Port device team_slave_0 added [ 80.644691][ T5829] team0: Port device team_slave_1 added [ 80.653669][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.675989][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.683419][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.713209][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.750272][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.781097][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.788690][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.815320][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.827828][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.834974][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.842697][ T53] Bluetooth: hci2: command tx timeout [ 80.867255][ T53] Bluetooth: hci4: command tx timeout [ 80.867332][ T5832] Bluetooth: hci0: command tx timeout [ 80.873160][ T5850] Bluetooth: hci3: command tx timeout [ 80.885067][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.907708][ T5828] team0: Port device team_slave_0 added [ 80.920602][ T53] Bluetooth: hci1: command tx timeout [ 80.939566][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.947372][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.974110][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.996171][ T5828] team0: Port device team_slave_1 added [ 81.003513][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.011060][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.038849][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.053229][ T5837] team0: Port device team_slave_0 added [ 81.063668][ T5837] team0: Port device team_slave_1 added [ 81.089086][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.096616][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.122824][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.190198][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.197548][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.224604][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.276488][ T5830] hsr_slave_0: entered promiscuous mode [ 81.283243][ T5830] hsr_slave_1: entered promiscuous mode [ 81.290765][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.297725][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.324139][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.336715][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.343859][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.370127][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.387038][ T5831] hsr_slave_0: entered promiscuous mode [ 81.393411][ T5831] hsr_slave_1: entered promiscuous mode [ 81.399438][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 81.405480][ T5831] Cannot create hsr debugfs directory [ 81.444329][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.451389][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.478229][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.523751][ T5829] hsr_slave_0: entered promiscuous mode [ 81.530028][ T5829] hsr_slave_1: entered promiscuous mode [ 81.536357][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 81.542284][ T5829] Cannot create hsr debugfs directory [ 81.681054][ T5828] hsr_slave_0: entered promiscuous mode [ 81.688307][ T5828] hsr_slave_1: entered promiscuous mode [ 81.695091][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 81.701984][ T5828] Cannot create hsr debugfs directory [ 81.756868][ T5837] hsr_slave_0: entered promiscuous mode [ 81.763976][ T5837] hsr_slave_1: entered promiscuous mode [ 81.770587][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 81.776412][ T5837] Cannot create hsr debugfs directory [ 82.352255][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.366710][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.378004][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.399680][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.455576][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.469778][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.486117][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.507170][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.581646][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.599983][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.613143][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.625857][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.727809][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.751681][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.762243][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.774449][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.913099][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.921165][ T5850] Bluetooth: hci3: command tx timeout [ 82.921188][ T5832] Bluetooth: hci0: command tx timeout [ 82.926835][ T5849] Bluetooth: hci2: command tx timeout [ 82.939057][ T53] Bluetooth: hci4: command tx timeout [ 82.945822][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.983440][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.991449][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.000986][ T53] Bluetooth: hci1: command tx timeout [ 83.008015][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.019457][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.087051][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.099758][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.118278][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.138113][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.145551][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.155845][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.163252][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.191789][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.198899][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.224414][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.231932][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.266808][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.277426][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.300115][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.307461][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.338963][ T3013] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.346305][ T3013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.389215][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.435084][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.442639][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.475921][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.483143][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.536377][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.647846][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.730625][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.738418][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.784998][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.792416][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.902154][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.106955][ T5830] veth0_vlan: entered promiscuous mode [ 84.168141][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.196626][ T5830] veth1_vlan: entered promiscuous mode [ 84.225182][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.312638][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.369060][ T5831] veth0_vlan: entered promiscuous mode [ 84.386849][ T5830] veth0_macvtap: entered promiscuous mode [ 84.398508][ T5830] veth1_macvtap: entered promiscuous mode [ 84.431973][ T5829] veth0_vlan: entered promiscuous mode [ 84.443834][ T5831] veth1_vlan: entered promiscuous mode [ 84.462835][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.483149][ T5829] veth1_vlan: entered promiscuous mode [ 84.492643][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.514308][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.559944][ T44] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.596196][ T44] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.629711][ T5831] veth0_macvtap: entered promiscuous mode [ 84.646125][ T44] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.657219][ T44] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.676746][ T5831] veth1_macvtap: entered promiscuous mode [ 84.700110][ T5828] veth0_vlan: entered promiscuous mode [ 84.779938][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.790080][ T5829] veth0_macvtap: entered promiscuous mode [ 84.827230][ T5829] veth1_macvtap: entered promiscuous mode [ 84.867876][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.877338][ T5828] veth1_vlan: entered promiscuous mode [ 84.903390][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.919499][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.957958][ T1014] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.967693][ T1014] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.989072][ T1014] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.998285][ T1014] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.009500][ T53] Bluetooth: hci2: command tx timeout [ 85.009521][ T5849] Bluetooth: hci0: command tx timeout [ 85.009553][ T5849] Bluetooth: hci4: command tx timeout [ 85.015671][ T53] Bluetooth: hci3: command tx timeout [ 85.026560][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.044448][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.071270][ T3013] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.085826][ T3013] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.091535][ T53] Bluetooth: hci1: command tx timeout [ 85.097332][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.103045][ T3013] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.110766][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.140033][ T3013] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.198033][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.209238][ T5828] veth0_macvtap: entered promiscuous mode [ 85.285358][ T5828] veth1_macvtap: entered promiscuous mode [ 85.297998][ T5837] veth0_vlan: entered promiscuous mode [ 85.331210][ T5837] veth1_vlan: entered promiscuous mode [ 85.374049][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.423802][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.440548][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.440993][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.448555][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.481407][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.531253][ T5837] veth0_macvtap: entered promiscuous mode [ 85.572512][ T2974] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.582487][ T2974] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.605233][ T5837] veth1_macvtap: entered promiscuous mode [ 85.614410][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.623605][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.633803][ T2974] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.643425][ T2974] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.713693][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.725421][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.766792][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.840118][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.895426][ T44] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.915209][ T44] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.949726][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.971883][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.982321][ T44] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.003176][ T3013] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.093732][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 86.110599][ T5967] netlink: 1296 bytes leftover after parsing attributes in process `syz.3.8'. [ 86.180502][ T3013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.199955][ T3013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.365513][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.408378][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.433550][ T5982] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.507566][ T5982] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 86.572274][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.593460][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.847314][ T898] cfg80211: failed to load regulatory.db [ 86.885709][ T5992] bridge1: entered promiscuous mode [ 86.901881][ T5992] bridge1: entered allmulticast mode [ 86.910028][ T5992] team0: Port device bridge1 added [ 86.937778][ T6000] syz.0.16 uses obsolete (PF_INET,SOCK_PACKET) [ 86.949026][ T5996] bridge0: port 3(team0) entered blocking state [ 86.967561][ T5996] bridge0: port 3(team0) entered disabled state [ 86.988032][ T5996] team0: entered allmulticast mode [ 87.003728][ T5996] team_slave_0: entered allmulticast mode [ 87.028981][ T5996] team_slave_1: entered allmulticast mode [ 87.061136][ T5996] team0: entered promiscuous mode [ 87.078553][ T5996] team_slave_0: entered promiscuous mode [ 87.088141][ T53] Bluetooth: hci4: command tx timeout [ 87.088185][ T53] Bluetooth: hci0: command tx timeout [ 87.088216][ T53] Bluetooth: hci2: command tx timeout [ 87.092137][ T53] Bluetooth: hci3: command tx timeout [ 87.114783][ T5996] team_slave_1: entered promiscuous mode [ 87.132098][ T5996] bridge0: port 3(team0) entered blocking state [ 87.138697][ T5996] bridge0: port 3(team0) entered forwarding state [ 87.167910][ T6006] Zero length message leads to an empty skb [ 87.177215][ T53] Bluetooth: hci1: command tx timeout [ 87.654017][ T6020] syzkaller0: entered promiscuous mode [ 87.659525][ T6020] syzkaller0: entered allmulticast mode [ 87.791834][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23'. [ 87.807301][ T6028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.840106][ T6027] tipc: Enabling of bearer rejected, failed to enable media [ 88.137444][ T6039] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.285243][ T6039] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.334928][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.31'. [ 88.387577][ T6049] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.31'. [ 88.443740][ T6039] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.520287][ T6056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.627650][ T6039] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.792276][ T3013] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.851227][ T3013] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.956036][ T2974] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.963199][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39'. [ 89.003407][ T6068] bond1: Invalid ad_actor_system MAC address. [ 89.012091][ T6068] bond1: option ad_actor_system: invalid value (1) [ 89.022079][ T6068] bond1 (unregistering): Released all slaves [ 89.046894][ T67] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.398879][ T6092] netlink: 'syz.4.45': attribute type 1 has an invalid length. [ 89.644823][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'. [ 89.935104][ T6114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 89.949646][ T6121] netlink: 36 bytes leftover after parsing attributes in process `syz.4.49'. [ 90.706327][ T6161] netlink: 'syz.4.67': attribute type 30 has an invalid length. [ 90.835165][ T6161] bond1: option arp_missed_max: invalid value (0) [ 90.845255][ T6161] bond1: option arp_missed_max: allowed values 1 - 255 [ 90.866742][ T6161] bond1 (unregistering): Released all slaves [ 90.902999][ T6176] netlink: 24 bytes leftover after parsing attributes in process `syz.2.70'. [ 91.601722][ T6203] netlink: 'syz.3.78': attribute type 10 has an invalid length. [ 91.601823][ T6204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.75'. [ 91.630107][ T6203] netlink: 40 bytes leftover after parsing attributes in process `syz.3.78'. [ 91.657611][ T6203] dummy0: entered promiscuous mode [ 91.672221][ T6203] bridge0: port 4(dummy0) entered blocking state [ 91.678984][ T6203] bridge0: port 4(dummy0) entered disabled state [ 91.691499][ T6203] dummy0: entered allmulticast mode [ 91.705965][ T6203] bridge0: port 4(dummy0) entered blocking state [ 91.712620][ T6203] bridge0: port 4(dummy0) entered forwarding state [ 91.863301][ T6217] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.896721][ T6216] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 92.003793][ T5835] IPVS: starting estimator thread 0... [ 92.149549][ T6227] openvswitch: netlink: Key type 64 is out of range max 32 [ 92.170624][ T6223] IPVS: using max 31 ests per chain, 74400 per kthread [ 92.223062][ T6234] xt_cgroup: xt_cgroup: no path or classid specified [ 92.403858][ T6238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.447172][ T6238] trusted_key: syz.4.87 sent an empty control message without MSG_MORE. [ 92.469647][ T6238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.496335][ T6239] netlink: 'syz.3.88': attribute type 13 has an invalid length. [ 92.597919][ T6241] syz.1.89 (6241) used greatest stack depth: 17832 bytes left [ 92.673517][ T6218] netlink: 28 bytes leftover after parsing attributes in process `syz.0.81'. [ 92.793487][ T6258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.93'. [ 92.958564][ T6263] tipc: Started in network mode [ 92.963930][ T6263] tipc: Node identity ac1414aa, cluster identity 4711 [ 92.981514][ T6263] tipc: Enabled bearer , priority 10 [ 92.997628][ T6259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.92'. [ 93.324617][ T6274] netlink: 212360 bytes leftover after parsing attributes in process `syz.4.98'. [ 93.516106][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 93.552415][ T6291] pimreg: entered allmulticast mode [ 93.809768][ T6302] netlink: 6 bytes leftover after parsing attributes in process `syz.4.104'. [ 93.948452][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.108'. [ 94.112269][ T875] tipc: Node number set to 2886997162 [ 94.176425][ T6313] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 94.247391][ T6313] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 94.267991][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.112'. [ 94.278097][ T898] IPVS: starting estimator thread 0... [ 94.278188][ T6323] delete_channel: no stack [ 94.391301][ T6322] IPVS: using max 30 ests per chain, 72000 per kthread [ 95.152622][ T6351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.242796][ T6361] : renamed from hsr0 (while UP) [ 95.312704][ T6365] sctp: [Deprecated]: syz.2.126 (pid 6365) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.312704][ T6365] Use struct sctp_sack_info instead [ 96.441392][ T6429] netlink: 'syz.3.145': attribute type 1 has an invalid length. [ 96.473187][ T6429] netlink: 'syz.3.145': attribute type 2 has an invalid length. [ 96.611361][ T6419] syzkaller0: entered promiscuous mode [ 96.617117][ T6419] syzkaller0: entered allmulticast mode [ 96.625005][ T6416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.699730][ T6420] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 97.382430][ T6441] IPv4: Oversized IP packet from 127.202.26.0 [ 98.142718][ T6448] __nla_validate_parse: 4 callbacks suppressed [ 98.142742][ T6448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.152'. [ 99.029112][ T6457] bond1 (unregistering): Released all slaves [ 99.219856][ T6470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.325886][ T6470] bond0: (slave rose0): Enslaving as an active interface with an up link [ 99.359886][ T6481] netlink: 'syz.2.162': attribute type 1 has an invalid length. [ 100.161700][ T6526] netlink: 36 bytes leftover after parsing attributes in process `syz.0.171'. [ 100.231819][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.172'. [ 100.335627][ T6531] team1: entered promiscuous mode [ 100.342217][ T6531] team1: entered allmulticast mode [ 100.404227][ T6541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.174'. [ 100.408295][ T6538] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.175'. [ 100.708610][ T6554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.180'. [ 100.806884][ T6566] netlink: 51 bytes leftover after parsing attributes in process `syz.4.181'. [ 101.160586][ T5849] Bluetooth: hci4: command 0x0405 tx timeout [ 101.340257][ T6597] bond0: option ad_select: unable to set because the bond device is up [ 101.675805][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'. [ 102.012710][ T6628] netlink: 'syz.2.197': attribute type 15 has an invalid length. [ 102.085526][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'. [ 102.818748][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 103.056239][ T6682] syzkaller0: entered promiscuous mode [ 103.069366][ T6686] unsupported nlmsg_type 40 [ 103.076170][ T6682] syzkaller0: entered allmulticast mode [ 103.415101][ T6704] netlink: 'syz.0.216': attribute type 2 has an invalid length. [ 103.449058][ T6701] __nla_validate_parse: 1 callbacks suppressed [ 103.449078][ T6701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.215'. [ 103.456352][ T6707] TCP: TCP_TX_DELAY enabled [ 103.457327][ T6707] netlink: 'syz.2.217': attribute type 16 has an invalid length. [ 103.499251][ T6707] netlink: 'syz.2.217': attribute type 3 has an invalid length. [ 103.540506][ T6707] netlink: 132 bytes leftover after parsing attributes in process `syz.2.217'. [ 103.838839][ T6721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.221'. [ 103.915819][ T6721] netlink: 'syz.0.221': attribute type 4 has an invalid length. [ 104.016379][ T6730] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 104.054400][ T6730] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 104.368960][ T6758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.231'. [ 104.472345][ T6765] netlink: 16 bytes leftover after parsing attributes in process `syz.3.232'. [ 104.505015][ T6765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.232'. [ 104.527239][ T6765] netlink: 16 bytes leftover after parsing attributes in process `syz.3.232'. [ 104.675607][ T6775] netlink: 28 bytes leftover after parsing attributes in process `syz.4.236'. [ 104.676635][ T6776] netlink: 'syz.0.238': attribute type 3 has an invalid length. [ 104.735275][ T6775] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.775667][ T6775] bridge_slave_1: left allmulticast mode [ 104.782029][ T6775] bridge_slave_1: left promiscuous mode [ 104.787994][ T6775] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.814254][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.239'. [ 104.931132][ T6790] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.014696][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'. [ 105.062776][ T6793] netlink: 'syz.0.242': attribute type 3 has an invalid length. [ 105.072758][ T6797] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 105.278080][ T6803] syzkaller0: entered promiscuous mode [ 105.291553][ T6803] syzkaller0: entered allmulticast mode [ 105.449160][ T6795] IPv6: sit1: Disabled Multicast RS [ 105.461684][ T6795] sit1: entered allmulticast mode [ 105.750183][ T6820] sit1: entered promiscuous mode [ 105.792956][ T6820] sit1: entered allmulticast mode [ 105.977267][ T6834] netlink: 'syz.2.255': attribute type 7 has an invalid length. [ 106.095296][ T6839] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.410966][ T6858] syzkaller0: entered promiscuous mode [ 106.416576][ T6858] syzkaller0: entered allmulticast mode [ 106.440922][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 106.500638][ T6859] nbd0: detected capacity change from 0 to 127 [ 106.513604][ T6866] Bluetooth: MGMT ver 1.23 [ 106.973607][ T53] block nbd0: Receive control failed (result -104) [ 107.390964][ T6907] warning: `syz.4.279' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 107.577795][ T6913] bond1 (unregistering): Released all slaves [ 107.912931][ T6940] netlink: 'syz.4.285': attribute type 13 has an invalid length. [ 108.077294][ T6954] x_tables: unsorted underflow at hook 3 [ 108.111668][ T6958] sctp: [Deprecated]: syz.4.285 (pid 6958) Use of struct sctp_assoc_value in delayed_ack socket option. [ 108.111668][ T6958] Use struct sctp_sack_info instead [ 108.643125][ T6981] netlink: 'syz.0.295': attribute type 1 has an invalid length. [ 109.213162][ T7011] __nla_validate_parse: 12 callbacks suppressed [ 109.213181][ T7011] netlink: 56 bytes leftover after parsing attributes in process `syz.0.303'. [ 109.359377][ T6977] infiniband syz2: set active [ 109.378220][ T6977] infiniband syz2: added team_slave_1 [ 109.388705][ T6977] syz2: rxe_create_cq: returned err = -12 [ 109.396795][ T6977] infiniband syz2: Couldn't create ib_mad CQ [ 109.409300][ T6977] infiniband syz2: Couldn't open port 1 [ 109.557753][ T6977] RDS/IB: syz2: added [ 109.591017][ T6977] smc: adding ib device syz2 with port count 1 [ 109.597554][ T6977] smc: ib device syz2 port 1 has no pnetid [ 109.927005][ T7045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.108734][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'. [ 110.653798][ T7078] x_tables: duplicate entry at hook 2 [ 111.027440][ T7089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.327'. [ 111.255699][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.329'. [ 111.256517][ T7104] lo: Caught tx_queue_len zero misconfig [ 111.288300][ T7103] netlink: 'syz.0.329': attribute type 1 has an invalid length. [ 111.298283][ T7103] netlink: 'syz.0.329': attribute type 2 has an invalid length. [ 111.328363][ T7103] netlink: zone id is out of range [ 111.343298][ T7103] netlink: zone id is out of range [ 111.358841][ T7103] netlink: zone id is out of range [ 111.369938][ T7103] netlink: zone id is out of range [ 111.384186][ T7103] netlink: zone id is out of range [ 111.399092][ T7103] netlink: zone id is out of range [ 111.412455][ T7103] netlink: zone id is out of range [ 111.424994][ T7103] netlink: zone id is out of range [ 111.445338][ T7103] netlink: zone id is out of range [ 111.462293][ T7103] netlink: zone id is out of range [ 111.539188][ T7111] netlink: 'syz.2.333': attribute type 11 has an invalid length. [ 111.573164][ T7111] netlink: 224 bytes leftover after parsing attributes in process `syz.2.333'. [ 112.335285][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'. [ 112.576218][ T7158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.349'. [ 112.643668][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.346'. [ 112.943424][ T7176] netlink: 124 bytes leftover after parsing attributes in process `syz.3.355'. [ 112.948242][ T7178] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.356'. [ 113.076087][ T7188] netlink: 'syz.3.358': attribute type 1 has an invalid length. [ 113.097803][ T7188] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 113.853015][ T7233] netlink: 'syz.1.371': attribute type 7 has an invalid length. [ 113.872953][ T7233] netlink: 'syz.1.371': attribute type 10 has an invalid length. [ 113.890693][ T7233] bridge0: port 3(team0) entered blocking state [ 113.918150][ T7233] bridge0: port 3(team0) entered disabled state [ 113.939966][ T7233] team0: entered allmulticast mode [ 113.955923][ T7233] team_slave_0: entered allmulticast mode [ 113.977094][ T7233] team_slave_1: entered allmulticast mode [ 113.995382][ T7233] team0: entered promiscuous mode [ 114.007707][ T7233] team_slave_0: entered promiscuous mode [ 114.014477][ T7233] team_slave_1: entered promiscuous mode [ 114.023799][ T7233] bridge0: port 3(team0) entered blocking state [ 114.030296][ T7233] bridge0: port 3(team0) entered forwarding state [ 114.232267][ T7249] xt_bpf: check failed: parse error [ 114.470625][ T7259] __nla_validate_parse: 4 callbacks suppressed [ 114.470644][ T7259] netlink: 28 bytes leftover after parsing attributes in process `syz.3.377'. [ 114.522740][ T53] Bluetooth: hci1: command tx timeout [ 114.549349][ T7264] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 114.594953][ T7266] syzkaller0: entered promiscuous mode [ 114.635121][ T7266] syzkaller0: entered allmulticast mode [ 114.806955][ T7278] veth1_to_bond: entered allmulticast mode [ 114.850116][ T7275] veth1_to_bond: left allmulticast mode [ 115.031908][ T7287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.383'. [ 115.043322][ T7286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.384'. [ 115.056611][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.383'. [ 115.135705][ T7297] netlink: 16 bytes leftover after parsing attributes in process `syz.3.383'. [ 115.148806][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.383'. [ 115.254736][ T7290] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.436602][ T7305] netlink: 96 bytes leftover after parsing attributes in process `syz.4.390'. [ 115.531494][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.388'. [ 115.555082][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.388'. [ 115.794685][ T7326] netlink: 24 bytes leftover after parsing attributes in process `syz.4.393'. [ 115.876112][ T7329] syzkaller0: entered promiscuous mode [ 115.882762][ T7329] syzkaller0: entered allmulticast mode [ 116.495603][ T7366] xt_limit: Overflow, try lower: 604147548/4200216962 [ 116.600496][ T53] Bluetooth: hci1: command tx timeout [ 117.549212][ T7404] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 117.589653][ T7404] bond1 (unregistering): Released all slaves [ 117.696958][ T7433] netlink: 'syz.4.418': attribute type 39 has an invalid length. [ 117.721807][ T7412] syzkaller0: entered promiscuous mode [ 117.727617][ T7412] syzkaller0: entered allmulticast mode [ 117.837234][ T7440] bridge_slave_0: invalid flags given to default FDB implementation [ 119.693473][ T7474] __nla_validate_parse: 7 callbacks suppressed [ 119.693493][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 119.708511][ T7470] syzkaller0: entered promiscuous mode [ 119.708535][ T7470] syzkaller0: entered allmulticast mode [ 120.495587][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 121.079963][ T7489] syzkaller0: entered promiscuous mode [ 121.086358][ T7489] syzkaller0: entered allmulticast mode [ 121.322913][ T7514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.439'. [ 121.346224][ T7515] netlink: 88 bytes leftover after parsing attributes in process `syz.0.440'. [ 122.054924][ T7509] delete_channel: no stack [ 123.425137][ T7584] xt_hashlimit: overflow, try lower: 3/0 [ 123.597058][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.455'. [ 123.639839][ T7599] netlink: 'syz.1.456': attribute type 1 has an invalid length. [ 123.742643][ T7603] netlink: 'syz.1.458': attribute type 64 has an invalid length. [ 123.750806][ T7603] netlink: 20 bytes leftover after parsing attributes in process `syz.1.458'. [ 123.933196][ T7611] netlink: 'syz.3.460': attribute type 1 has an invalid length. [ 124.006636][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 124.129596][ T7616] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 124.163094][ T7623] veth3: entered promiscuous mode [ 124.180525][ T7623] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 124.227214][ T7626] tipc: Started in network mode [ 124.250004][ T7626] tipc: Node identity 6eb7bc98e047, cluster identity 4711 [ 124.271664][ T7626] tipc: Enabled bearer , priority 0 [ 124.377674][ T7626] syzkaller0: entered promiscuous mode [ 124.403730][ T7636] netlink: 76 bytes leftover after parsing attributes in process `syz.2.469'. [ 124.412800][ T7626] syzkaller0: entered allmulticast mode [ 124.965474][ T7652] net_ratelimit: 5 callbacks suppressed [ 124.965494][ T7652] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 125.099490][ T7660] netlink: 48 bytes leftover after parsing attributes in process `syz.3.471'. [ 125.120271][ T7624] tipc: Resetting bearer [ 125.215641][ T7624] tipc: Disabling bearer [ 125.466174][ T7680] syzkaller0: entered promiscuous mode [ 125.472327][ T7680] syzkaller0: entered allmulticast mode [ 125.513640][ T7684] netlink: 36 bytes leftover after parsing attributes in process `syz.4.478'. [ 125.533322][ T7682] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 125.918676][ T7705] netlink: 24 bytes leftover after parsing attributes in process `syz.4.485'. [ 125.934886][ T7703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.484'. [ 125.953253][ T7703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.484'. [ 125.986757][ T7703] gretap0: entered promiscuous mode [ 126.031694][ T7703] gretap0: left promiscuous mode [ 126.119343][ T7705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.485'. [ 126.459354][ T7735] netlink: 104 bytes leftover after parsing attributes in process `syz.2.494'. [ 126.962557][ T7761] netlink: 'syz.4.505': attribute type 21 has an invalid length. [ 126.983853][ T7761] netlink: 'syz.4.505': attribute type 6 has an invalid length. [ 127.012432][ T7761] netlink: 132 bytes leftover after parsing attributes in process `syz.4.505'. [ 127.234984][ T30] audit: type=1800 audit(1763935983.265:2): pid=7783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.512" name="memory.events" dev="tmpfs" ino=516 res=0 errno=0 [ 127.411403][ T7792] netlink: 'syz.3.515': attribute type 4 has an invalid length. [ 127.653414][ T7814] netlink: 'syz.1.513': attribute type 17 has an invalid length. [ 127.696231][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. [ 127.736905][ T7814] netlink: 28 bytes leftover after parsing attributes in process `syz.1.513'. [ 128.225864][ T7833] netlink: 'syz.3.522': attribute type 1 has an invalid length. [ 128.461012][ T7851] syz.0.527 (7851) used obsolete PPPIOCDETACH ioctl [ 128.578622][ T7855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.759894][ T7866] netlink: 'syz.1.532': attribute type 10 has an invalid length. [ 128.781723][ T7866] batadv0: entered promiscuous mode [ 128.786979][ T7866] batadv0: entered allmulticast mode [ 128.794440][ T7866] bridge0: port 4(batadv0) entered blocking state [ 128.803423][ T7866] bridge0: port 4(batadv0) entered disabled state [ 128.814589][ T7866] bridge0: port 4(batadv0) entered blocking state [ 128.821232][ T7866] bridge0: port 4(batadv0) entered forwarding state [ 128.830641][ T7868] syz_tun: entered allmulticast mode [ 129.138587][ T7867] syz_tun: left allmulticast mode [ 129.230781][ T2974] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 129.240298][ T2974] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 129.373161][ T7886] syzkaller0: entered promiscuous mode [ 129.378670][ T7886] syzkaller0: entered allmulticast mode [ 129.431506][ T7863] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 129.611811][ T7894] netlink: 'syz.4.539': attribute type 11 has an invalid length. [ 129.643183][ T7896] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 129.673137][ T7900] ipt_ECN: cannot use operation on non-tcp rule [ 129.713645][ T7901] netlink: 'syz.0.538': attribute type 30 has an invalid length. [ 129.768605][ T7901] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 129.928005][ T7920] nbd: must specify at least one socket [ 130.093854][ T7931] tipc: Failed to obtain node identity [ 130.142299][ T7931] tipc: Enabling of bearer rejected, failed to enable media [ 130.350919][ T7941] __nla_validate_parse: 6 callbacks suppressed [ 130.350937][ T7941] netlink: 32 bytes leftover after parsing attributes in process `syz.0.550'. [ 130.470268][ T7951] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 130.632609][ T7963] netlink: 340 bytes leftover after parsing attributes in process `syz.0.555'. [ 130.725999][ T7974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.557'. [ 130.738029][ T7975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.557'. [ 130.896014][ T7985] tipc: Enabling of bearer rejected, failed to enable media [ 131.004572][ T7992] netlink: 'syz.2.561': attribute type 1 has an invalid length. [ 131.034478][ T7992] netlink: 224 bytes leftover after parsing attributes in process `syz.2.561'. [ 131.141228][ T8001] netlink: 'syz.1.564': attribute type 1 has an invalid length. [ 131.410166][ T8014] tipc: Enabled bearer , priority 0 [ 131.421989][ T8014] syzkaller0: entered promiscuous mode [ 131.427482][ T8014] syzkaller0: entered allmulticast mode [ 131.498067][ T8013] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 131.555427][ T8020] netlink: 52 bytes leftover after parsing attributes in process `syz.0.569'. [ 131.587453][ T8013] tipc: Resetting bearer [ 131.626974][ T8013] sctp: [Deprecated]: syz.4.566 (pid 8013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.626974][ T8013] Use struct sctp_sack_info instead [ 131.680168][ T8011] tipc: Resetting bearer [ 131.706190][ T8011] tipc: Disabling bearer [ 131.921664][ T8036] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 131.947877][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'. [ 131.961918][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'. [ 131.984200][ T8034] netlink: 'syz.1.575': attribute type 3 has an invalid length. [ 132.163878][ T8039] tipc: Started in network mode [ 132.168811][ T8039] tipc: Node identity 7, cluster identity 4711 [ 132.178317][ T8039] tipc: Node number set to 7 [ 132.192126][ T8051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.580'. [ 132.333528][ T8065] netlink: 40 bytes leftover after parsing attributes in process `syz.2.584'. [ 132.930710][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.476561][ T8125] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.502046][ T8138] geneve2: entered promiscuous mode [ 133.852200][ T8160] netlink: 'syz.3.610': attribute type 13 has an invalid length. [ 133.872057][ T8160] veth0_macvtap: left promiscuous mode [ 133.877997][ T8160] macvtap0: entered allmulticast mode [ 133.899466][ T8163] xt_bpf: check failed: parse error [ 133.905989][ T8160] macvtap0: refused to change device tx_queue_len [ 134.459272][ T8201] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 134.595134][ T8209] syzkaller0: entered promiscuous mode [ 134.604071][ T8209] syzkaller0: entered allmulticast mode [ 134.956289][ T8227] netlink: 'syz.1.633': attribute type 10 has an invalid length. [ 134.984513][ T8227] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.997378][ T8227] bridge_slave_1: left allmulticast mode [ 135.003590][ T8227] bridge_slave_1: left promiscuous mode [ 135.010166][ T8227] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.077921][ T8227] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 136.014325][ T8298] __nla_validate_parse: 12 callbacks suppressed [ 136.014344][ T8298] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.657'. [ 136.152364][ T8309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.658'. [ 136.164727][ T8303] tipc: Started in network mode [ 136.169622][ T8303] tipc: Node identity 268f713ba807, cluster identity 4711 [ 136.178573][ T8303] tipc: Enabled bearer , priority 0 [ 136.186286][ T8309] netlink: 16 bytes leftover after parsing attributes in process `syz.1.658'. [ 136.217782][ T8303] syzkaller0: entered promiscuous mode [ 136.231145][ T8303] syzkaller0: entered allmulticast mode [ 136.299889][ T8308] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 136.338624][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.664'. [ 136.350015][ T8316] netlink: 'syz.0.661': attribute type 11 has an invalid length. [ 136.351280][ T8322] tipc: Resetting bearer [ 136.361526][ T8316] netlink: 224 bytes leftover after parsing attributes in process `syz.0.661'. [ 136.385737][ T8303] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 136.413858][ T8316] netlink: 'syz.0.661': attribute type 1 has an invalid length. [ 136.436269][ T2974] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.436417][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.664'. [ 136.447570][ T2974] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.489189][ T2974] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.506525][ T2974] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.592475][ T8308] tipc: Resetting bearer [ 136.642323][ T8308] tipc: Disabling bearer [ 136.771647][ T25] block nbd0: Possible stuck request ffff888025000000: control (read@0,1024B). Runtime 30 seconds [ 136.784270][ T25] block nbd0: Possible stuck request ffff8880250001c0: control (read@1024,1024B). Runtime 30 seconds [ 136.800466][ T25] block nbd0: Possible stuck request ffff888025000380: control (read@2048,1024B). Runtime 30 seconds [ 136.812156][ T25] block nbd0: Possible stuck request ffff888025000540: control (read@3072,1024B). Runtime 30 seconds [ 136.969184][ T8357] netlink: 'syz.1.672': attribute type 4 has an invalid length. [ 137.015820][ T8357] netlink: 'syz.1.672': attribute type 4 has an invalid length. [ 137.081675][ T8362] netlink: 'syz.3.675': attribute type 3 has an invalid length. [ 137.097827][ T8362] netlink: 'syz.3.675': attribute type 3 has an invalid length. [ 137.107312][ T8362] netlink: 'syz.3.675': attribute type 5 has an invalid length. [ 137.119250][ T8362] Bluetooth: MGMT ver 1.23 [ 137.290996][ T8350] infiniband !yz!: set active [ 137.297144][ T8350] infiniband !yz!: added team_slave_0 [ 137.419859][ T8375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.680'. [ 137.440014][ T8350] RDS/IB: !yz!: added [ 137.447237][ T8350] smc: adding ib device !yz! with port count 1 [ 137.453898][ T8350] smc: ib device !yz! port 1 has no pnetid [ 137.619903][ T8380] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 137.643157][ T8380] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 137.855675][ T8388] netlink: 60 bytes leftover after parsing attributes in process `syz.1.684'. [ 137.865922][ T8389] netlink: 28 bytes leftover after parsing attributes in process `syz.4.685'. [ 138.108604][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.689'. [ 138.242616][ T8404] Bluetooth: MGMT ver 1.23 [ 138.259718][ T8404] netlink: 'syz.1.692': attribute type 3 has an invalid length. [ 138.464436][ T8417] syzkaller0: entered promiscuous mode [ 138.470041][ T8417] syzkaller0: entered allmulticast mode [ 153.836241][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.845950][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.854157][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.863056][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.871211][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.222805][ T8482] chnl_net:caif_netlink_parms(): no params data found [ 154.290477][ T8482] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.297717][ T8482] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.305856][ T8482] bridge_slave_0: entered allmulticast mode [ 154.314009][ T8482] bridge_slave_0: entered promiscuous mode [ 154.322148][ T8482] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.329480][ T8482] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.336960][ T8482] bridge_slave_1: entered allmulticast mode [ 154.344063][ T8482] bridge_slave_1: entered promiscuous mode [ 154.374447][ T8482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.386240][ T8482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.419597][ T8482] team0: Port device team_slave_0 added [ 154.428179][ T8482] team0: Port device team_slave_1 added [ 154.454928][ T8482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.461954][ T8482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.488518][ T8482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.501045][ T8482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.508279][ T8482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.534634][ T8482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.576534][ T8482] hsr_slave_0: entered promiscuous mode [ 154.582915][ T8482] hsr_slave_1: entered promiscuous mode [ 154.589212][ T8482] debugfs: 'hsr0' already exists in 'hsr' [ 154.595316][ T8482] Cannot create hsr debugfs directory [ 154.907682][ T5849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.917366][ T5849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.926996][ T5849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.936533][ T5849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.944538][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.306839][ T8491] chnl_net:caif_netlink_parms(): no params data found [ 155.375268][ T8491] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.382496][ T8491] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.389720][ T8491] bridge_slave_0: entered allmulticast mode [ 155.397046][ T8491] bridge_slave_0: entered promiscuous mode [ 155.406480][ T8491] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.414510][ T8491] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.423520][ T8491] bridge_slave_1: entered allmulticast mode [ 155.431826][ T8491] bridge_slave_1: entered promiscuous mode [ 155.461319][ T8491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.472925][ T8491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.503092][ T8491] team0: Port device team_slave_0 added [ 155.511465][ T8491] team0: Port device team_slave_1 added [ 155.540892][ T8491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.547862][ T8491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.574162][ T8491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.586659][ T8491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.594251][ T8491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.620768][ T8491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.664160][ T8491] hsr_slave_0: entered promiscuous mode [ 155.671060][ T8491] hsr_slave_1: entered promiscuous mode [ 155.677152][ T8491] debugfs: 'hsr0' already exists in 'hsr' [ 155.683096][ T8491] Cannot create hsr debugfs directory [ 155.971076][ T5849] Bluetooth: hci5: command tx timeout [ 156.232245][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 156.241415][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 156.251972][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 156.261575][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 156.271406][ T5832] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 156.279377][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 156.281854][ T5832] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 156.295878][ T5832] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 156.311338][ T5849] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 156.332351][ T5832] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 156.430119][ T5832] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 156.439291][ T5832] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 156.447955][ T5832] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 156.458289][ T5832] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 156.466952][ T5832] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 157.010457][ T5832] Bluetooth: hci6: command tx timeout [ 157.175603][ T8504] chnl_net:caif_netlink_parms(): no params data found [ 157.415669][ T8504] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.422971][ T8504] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.430171][ T8504] bridge_slave_0: entered allmulticast mode [ 157.437696][ T8504] bridge_slave_0: entered promiscuous mode [ 157.450091][ T8504] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.457438][ T8504] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.465345][ T8504] bridge_slave_1: entered allmulticast mode [ 157.472630][ T8504] bridge_slave_1: entered promiscuous mode [ 157.509984][ T8502] chnl_net:caif_netlink_parms(): no params data found [ 157.535391][ T8504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.576254][ T8504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.639802][ T8504] team0: Port device team_slave_0 added [ 157.651599][ T8504] team0: Port device team_slave_1 added [ 157.703803][ T8502] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.711223][ T8502] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.718432][ T8502] bridge_slave_0: entered allmulticast mode [ 157.726191][ T8502] bridge_slave_0: entered promiscuous mode [ 157.749858][ T8502] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.757332][ T8502] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.765025][ T8502] bridge_slave_1: entered allmulticast mode [ 157.773042][ T8502] bridge_slave_1: entered promiscuous mode [ 157.787288][ T8504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.794336][ T8504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.820964][ T8504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.833874][ T8504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.841089][ T8504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.867103][ T8504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.946068][ T8502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.959134][ T8502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.034070][ T8506] chnl_net:caif_netlink_parms(): no params data found [ 158.040632][ T5832] Bluetooth: hci5: command tx timeout [ 158.059328][ T8502] team0: Port device team_slave_0 added [ 158.076963][ T8504] hsr_slave_0: entered promiscuous mode [ 158.083508][ T8504] hsr_slave_1: entered promiscuous mode [ 158.089599][ T8504] debugfs: 'hsr0' already exists in 'hsr' [ 158.096526][ T8504] Cannot create hsr debugfs directory [ 158.104159][ T8502] team0: Port device team_slave_1 added [ 158.194440][ T8502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.201705][ T8502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.228656][ T8502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.251738][ T8502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.258708][ T8502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.285132][ T8502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.360556][ T5832] Bluetooth: hci8: command tx timeout [ 158.366666][ T5832] Bluetooth: hci7: command tx timeout [ 158.380050][ T8506] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.387718][ T8506] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.395459][ T8506] bridge_slave_0: entered allmulticast mode [ 158.403910][ T8506] bridge_slave_0: entered promiscuous mode [ 158.434132][ T8506] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.441577][ T8506] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.448922][ T8506] bridge_slave_1: entered allmulticast mode [ 158.456290][ T8506] bridge_slave_1: entered promiscuous mode [ 158.468806][ T8502] hsr_slave_0: entered promiscuous mode [ 158.475684][ T8502] hsr_slave_1: entered promiscuous mode [ 158.482230][ T8502] debugfs: 'hsr0' already exists in 'hsr' [ 158.487960][ T8502] Cannot create hsr debugfs directory [ 158.520951][ T5832] Bluetooth: hci9: command tx timeout [ 158.572331][ T8506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.612159][ T8506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.667883][ T8506] team0: Port device team_slave_0 added [ 158.694310][ T8506] team0: Port device team_slave_1 added [ 158.766950][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.774049][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.801837][ T8506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.830676][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.837670][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.865806][ T8506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.952201][ T8506] hsr_slave_0: entered promiscuous mode [ 158.958589][ T8506] hsr_slave_1: entered promiscuous mode [ 158.965305][ T8506] debugfs: 'hsr0' already exists in 'hsr' [ 158.971258][ T8506] Cannot create hsr debugfs directory [ 159.081202][ T5832] Bluetooth: hci6: command tx timeout [ 160.120568][ T5832] Bluetooth: hci5: command tx timeout [ 160.440690][ T5832] Bluetooth: hci7: command tx timeout [ 160.440698][ T5850] Bluetooth: hci8: command tx timeout [ 160.600941][ T5850] Bluetooth: hci9: command tx timeout [ 161.160522][ T5850] Bluetooth: hci6: command tx timeout [ 162.200572][ T5850] Bluetooth: hci5: command tx timeout [ 162.520560][ T5850] Bluetooth: hci7: command tx timeout [ 162.520652][ T5832] Bluetooth: hci8: command tx timeout [ 162.680727][ T5832] Bluetooth: hci9: command tx timeout [ 163.240685][ T5832] Bluetooth: hci6: command tx timeout [ 164.600663][ T5832] Bluetooth: hci7: command tx timeout [ 164.602838][ T5850] Bluetooth: hci8: command tx timeout [ 164.760773][ T5850] Bluetooth: hci9: command tx timeout [ 166.843007][ T25] block nbd0: Possible stuck request ffff888025000000: control (read@0,1024B). Runtime 60 seconds [ 166.853828][ T25] block nbd0: Possible stuck request ffff8880250001c0: control (read@1024,1024B). Runtime 60 seconds [ 166.864863][ T25] block nbd0: Possible stuck request ffff888025000380: control (read@2048,1024B). Runtime 60 seconds [ 166.876633][ T25] block nbd0: Possible stuck request ffff888025000540: control (read@3072,1024B). Runtime 60 seconds [ 168.179694][ T5201] udevd[5201]: worker [5888] /devices/virtual/block/nbd0 is taking a long time [ 194.365331][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.921622][ T25] block nbd0: Possible stuck request ffff888025000000: control (read@0,1024B). Runtime 90 seconds [ 196.932474][ T25] block nbd0: Possible stuck request ffff8880250001c0: control (read@1024,1024B). Runtime 90 seconds [ 196.943455][ T25] block nbd0: Possible stuck request ffff888025000380: control (read@2048,1024B). Runtime 90 seconds [ 196.954456][ T25] block nbd0: Possible stuck request ffff888025000540: control (read@3072,1024B). Runtime 90 seconds [ 201.562937][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 201.563536][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 201.569005][ T5850] Bluetooth: hci3: command 0x0406 tx timeout [ 214.699419][ T5849] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 214.708734][ T5849] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 214.718918][ T5849] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 214.727211][ T5849] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 214.735176][ T5849] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 215.097462][ T8532] chnl_net:caif_netlink_parms(): no params data found [ 215.165827][ T8532] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.173698][ T8532] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.181018][ T8532] bridge_slave_0: entered allmulticast mode [ 215.188240][ T8532] bridge_slave_0: entered promiscuous mode [ 215.196253][ T8532] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.203503][ T8532] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.211071][ T8532] bridge_slave_1: entered allmulticast mode [ 215.218118][ T8532] bridge_slave_1: entered promiscuous mode [ 215.248006][ T8532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.259970][ T8532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.296085][ T8532] team0: Port device team_slave_0 added [ 215.303832][ T8532] team0: Port device team_slave_1 added [ 215.331808][ T8532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.339055][ T8532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.365072][ T8532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.377127][ T8532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.384293][ T8532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.410751][ T8532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.452619][ T8532] hsr_slave_0: entered promiscuous mode [ 215.459007][ T8532] hsr_slave_1: entered promiscuous mode [ 215.465723][ T8532] debugfs: 'hsr0' already exists in 'hsr' [ 215.471649][ T8532] Cannot create hsr debugfs directory [ 215.769678][ T5832] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 215.777930][ T5832] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 215.786115][ T5832] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 215.796600][ T5832] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 215.805068][ T5832] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 216.226825][ T8541] chnl_net:caif_netlink_parms(): no params data found [ 216.296864][ T8541] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.304204][ T8541] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.311895][ T8541] bridge_slave_0: entered allmulticast mode [ 216.319231][ T8541] bridge_slave_0: entered promiscuous mode [ 216.327293][ T8541] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.334460][ T8541] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.341915][ T8541] bridge_slave_1: entered allmulticast mode [ 216.348912][ T8541] bridge_slave_1: entered promiscuous mode [ 216.379726][ T8541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.392591][ T8541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.422273][ T8541] team0: Port device team_slave_0 added [ 216.430006][ T8541] team0: Port device team_slave_1 added [ 216.458193][ T8541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.466547][ T8541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.492915][ T8541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.505974][ T8541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.513113][ T8541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.539187][ T8541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.613124][ T8541] hsr_slave_0: entered promiscuous mode [ 216.623423][ T8541] hsr_slave_1: entered promiscuous mode [ 216.641266][ T8541] debugfs: 'hsr0' already exists in 'hsr' [ 216.647037][ T8541] Cannot create hsr debugfs directory [ 216.761332][ T5849] Bluetooth: hci10: command tx timeout [ 217.041702][ T5832] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 217.060022][ T5832] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 217.072708][ T5832] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 217.091995][ T5832] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 217.100558][ T5832] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 217.237797][ T5832] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 217.251205][ T5832] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 217.262973][ T5850] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 217.273774][ T5850] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 217.282974][ T5850] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 217.291025][ T5832] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 217.298973][ T5832] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 217.306315][ T5850] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 217.314647][ T5850] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 217.322805][ T5832] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 217.880782][ T5849] Bluetooth: hci11: command tx timeout [ 218.096218][ T8552] chnl_net:caif_netlink_parms(): no params data found [ 218.299847][ T8552] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.308114][ T8552] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.315920][ T8552] bridge_slave_0: entered allmulticast mode [ 218.323546][ T8552] bridge_slave_0: entered promiscuous mode [ 218.355661][ T8552] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.366166][ T8552] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.373956][ T8552] bridge_slave_1: entered allmulticast mode [ 218.381455][ T8552] bridge_slave_1: entered promiscuous mode [ 218.452303][ T8552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.477058][ T8552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.498337][ T8554] chnl_net:caif_netlink_parms(): no params data found [ 218.542004][ T8552] team0: Port device team_slave_0 added [ 218.576051][ T8552] team0: Port device team_slave_1 added [ 218.649251][ T8552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.656464][ T8552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.682962][ T8552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.720788][ T8552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.727747][ T8552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.753938][ T8552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.795507][ T8554] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.803569][ T8554] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.811162][ T8554] bridge_slave_0: entered allmulticast mode [ 218.819128][ T8554] bridge_slave_0: entered promiscuous mode [ 218.828350][ T8554] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.836773][ T8554] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.844649][ T8554] bridge_slave_1: entered allmulticast mode [ 218.850749][ T5832] Bluetooth: hci10: command tx timeout [ 218.852906][ T8554] bridge_slave_1: entered promiscuous mode [ 218.903867][ T8556] chnl_net:caif_netlink_parms(): no params data found [ 218.930016][ T8554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.951334][ T8552] hsr_slave_0: entered promiscuous mode [ 218.957916][ T8552] hsr_slave_1: entered promiscuous mode [ 218.964406][ T8552] debugfs: 'hsr0' already exists in 'hsr' [ 218.970133][ T8552] Cannot create hsr debugfs directory [ 218.978731][ T8554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.060826][ T8554] team0: Port device team_slave_0 added [ 219.087284][ T8554] team0: Port device team_slave_1 added [ 219.133663][ T8556] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.140954][ T8556] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.148169][ T8556] bridge_slave_0: entered allmulticast mode [ 219.156908][ T8556] bridge_slave_0: entered promiscuous mode [ 219.163587][ T5832] Bluetooth: hci12: command tx timeout [ 219.191335][ T8556] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.199541][ T8556] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.206995][ T8556] bridge_slave_1: entered allmulticast mode [ 219.214277][ T8556] bridge_slave_1: entered promiscuous mode [ 219.221866][ T8554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.229952][ T8554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.256355][ T8554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.294177][ T8554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.301185][ T8554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.328744][ T8554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.372820][ T8556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.391727][ T8556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.402374][ T5832] Bluetooth: hci14: command tx timeout [ 219.402386][ T5849] Bluetooth: hci13: command tx timeout [ 219.480910][ T8554] hsr_slave_0: entered promiscuous mode [ 219.487854][ T8554] hsr_slave_1: entered promiscuous mode [ 219.494848][ T8554] debugfs: 'hsr0' already exists in 'hsr' [ 219.500708][ T8554] Cannot create hsr debugfs directory [ 219.514249][ T8556] team0: Port device team_slave_0 added [ 219.529034][ T8556] team0: Port device team_slave_1 added [ 219.588431][ T8556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.595908][ T8556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.624647][ T8556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.657180][ T8556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.664361][ T8556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.690849][ T8556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.770103][ T8556] hsr_slave_0: entered promiscuous mode [ 219.776985][ T8556] hsr_slave_1: entered promiscuous mode [ 219.783921][ T8556] debugfs: 'hsr0' already exists in 'hsr' [ 219.789663][ T8556] Cannot create hsr debugfs directory [ 219.970506][ T5832] Bluetooth: hci11: command tx timeout [ 220.920806][ T5832] Bluetooth: hci10: command tx timeout [ 221.240735][ T5832] Bluetooth: hci12: command tx timeout [ 221.480551][ T5832] Bluetooth: hci13: command tx timeout [ 221.480654][ T5849] Bluetooth: hci14: command tx timeout [ 222.040575][ T5849] Bluetooth: hci11: command tx timeout [ 223.000734][ T5849] Bluetooth: hci10: command tx timeout [ 223.320990][ T5849] Bluetooth: hci12: command tx timeout [ 223.560768][ T5849] Bluetooth: hci14: command tx timeout [ 223.564672][ T5832] Bluetooth: hci13: command tx timeout [ 224.120608][ T5832] Bluetooth: hci11: command tx timeout [ 225.400736][ T5832] Bluetooth: hci12: command tx timeout [ 225.640614][ T5832] Bluetooth: hci14: command tx timeout [ 225.640757][ T5849] Bluetooth: hci13: command tx timeout [ 227.001641][ T25] block nbd0: Possible stuck request ffff888025000000: control (read@0,1024B). Runtime 120 seconds [ 227.014249][ T25] block nbd0: Possible stuck request ffff8880250001c0: control (read@1024,1024B). Runtime 120 seconds [ 227.025620][ T25] block nbd0: Possible stuck request ffff888025000380: control (read@2048,1024B). Runtime 120 seconds [ 227.036854][ T25] block nbd0: Possible stuck request ffff888025000540: control (read@3072,1024B). Runtime 120 seconds [ 232.280768][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 255.804153][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.085196][ T25] block nbd0: Possible stuck request ffff888025000000: control (read@0,1024B). Runtime 150 seconds [ 257.096022][ T25] block nbd0: Possible stuck request ffff8880250001c0: control (read@1024,1024B). Runtime 150 seconds [ 257.107094][ T25] block nbd0: Possible stuck request ffff888025000380: control (read@2048,1024B). Runtime 150 seconds [ 257.118795][ T25] block nbd0: Possible stuck request ffff888025000540: control (read@3072,1024B). Runtime 150 seconds [ 275.278911][ T5832] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 275.287297][ T5832] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 275.296632][ T5832] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 275.304885][ T5832] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 275.313443][ T5832] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 275.670165][ T8584] chnl_net:caif_netlink_parms(): no params data found [ 275.738181][ T8584] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.746181][ T8584] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.753967][ T8584] bridge_slave_0: entered allmulticast mode [ 275.761250][ T8584] bridge_slave_0: entered promiscuous mode [ 275.768928][ T8584] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.776213][ T8584] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.783792][ T8584] bridge_slave_1: entered allmulticast mode [ 275.791243][ T8584] bridge_slave_1: entered promiscuous mode [ 275.822814][ T8584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.834587][ T8584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.867992][ T8584] team0: Port device team_slave_0 added [ 275.875772][ T8584] team0: Port device team_slave_1 added [ 275.903536][ T8584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.910675][ T8584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.936821][ T8584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.949144][ T8584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.956912][ T8584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.983499][ T8584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.024822][ T8584] hsr_slave_0: entered promiscuous mode [ 276.031406][ T8584] hsr_slave_1: entered promiscuous mode [ 276.037577][ T8584] debugfs: 'hsr0' already exists in 'hsr' [ 276.044525][ T8584] Cannot create hsr debugfs directory [ 276.338345][ T5850] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 276.347145][ T5850] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 276.355563][ T5850] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 276.371024][ T5850] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 276.378997][ T5850] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 276.795444][ T8593] chnl_net:caif_netlink_parms(): no params data found [ 276.864487][ T8593] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.871964][ T8593] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.880137][ T8593] bridge_slave_0: entered allmulticast mode [ 276.887831][ T8593] bridge_slave_0: entered promiscuous mode [ 276.895670][ T8593] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.902832][ T8593] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.910056][ T8593] bridge_slave_1: entered allmulticast mode [ 276.917516][ T8593] bridge_slave_1: entered promiscuous mode [ 276.947295][ T8593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.959720][ T8593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.992765][ T8593] team0: Port device team_slave_0 added [ 277.001193][ T8593] team0: Port device team_slave_1 added [ 277.027586][ T8593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.034676][ T8593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.061018][ T8593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.073636][ T8593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.082666][ T8593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.108929][ T8593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.160981][ T8593] hsr_slave_0: entered promiscuous mode [ 277.168044][ T8593] hsr_slave_1: entered promiscuous mode [ 277.177188][ T8593] debugfs: 'hsr0' already exists in 'hsr' [ 277.184600][ T8593] Cannot create hsr debugfs directory [ 277.401873][ T5832] Bluetooth: hci15: command tx timeout [ 277.701006][ T5850] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 277.710925][ T5850] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 277.719031][ T5850] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 277.732510][ T5840] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 277.746006][ T5850] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 277.752198][ T5840] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 277.761044][ T5840] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 277.772356][ T5840] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 277.793270][ T5840] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 277.805322][ T5840] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 277.849524][ T5846] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 277.864327][ T5846] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 277.875100][ T5846] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 277.885888][ T5846] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 277.901446][ T5846] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 278.362153][ T5840] Bluetooth: hci6: command 0x0406 tx timeout [ 278.362916][ T5846] Bluetooth: hci5: command 0x0406 tx timeout [ 278.446315][ T53] Bluetooth: hci16: command tx timeout [ 278.650198][ T8604] chnl_net:caif_netlink_parms(): no params data found [ 278.838182][ T8604] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.847538][ T8604] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.855293][ T8604] bridge_slave_0: entered allmulticast mode [ 278.863623][ T8604] bridge_slave_0: entered promiscuous mode [ 278.916976][ T8604] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.925367][ T8604] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.932825][ T8604] bridge_slave_1: entered allmulticast mode [ 278.939930][ T8604] bridge_slave_1: entered promiscuous mode [ 279.021645][ T8604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.039169][ T8604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.071497][ T8606] chnl_net:caif_netlink_parms(): no params data found [ 279.110120][ T8604] team0: Port device team_slave_0 added [ 279.134205][ T8604] team0: Port device team_slave_1 added [ 279.187859][ T8604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.195004][ T8604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.222480][ T8604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.262027][ T8604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.268973][ T8604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.295637][ T8604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.328369][ T8606] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.337312][ T8606] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.344750][ T8606] bridge_slave_0: entered allmulticast mode [ 279.352354][ T8606] bridge_slave_0: entered promiscuous mode [ 279.366910][ T8606] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.374242][ T8606] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.381756][ T8606] bridge_slave_1: entered allmulticast mode [ 279.388867][ T8606] bridge_slave_1: entered promiscuous mode [ 279.461012][ T8604] hsr_slave_0: entered promiscuous mode [ 279.467628][ T8604] hsr_slave_1: entered promiscuous mode [ 279.474082][ T8604] debugfs: 'hsr0' already exists in 'hsr' [ 279.479882][ T8604] Cannot create hsr debugfs directory [ 279.485391][ T53] Bluetooth: hci15: command tx timeout [ 279.526171][ T8606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.562216][ T8606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.644714][ T8606] team0: Port device team_slave_0 added [ 279.664376][ T8606] team0: Port device team_slave_1 added [ 279.690761][ T8608] chnl_net:caif_netlink_parms(): no params data found [ 279.728425][ T8606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.735572][ T8606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.763798][ T8606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.792361][ T8606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.799327][ T8606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.811607][ T53] Bluetooth: hci17: command tx timeout [ 279.831450][ T8606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.880799][ T53] Bluetooth: hci18: command tx timeout [ 279.960667][ T53] Bluetooth: hci19: command tx timeout [ 279.967310][ T8606] hsr_slave_0: entered promiscuous mode [ 279.974494][ T8606] hsr_slave_1: entered promiscuous mode [ 279.981010][ T8606] debugfs: 'hsr0' already exists in 'hsr' [ 279.986784][ T8606] Cannot create hsr debugfs directory [ 280.017346][ T8608] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.024750][ T8608] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.032299][ T8608] bridge_slave_0: entered allmulticast mode [ 280.039457][ T8608] bridge_slave_0: entered promiscuous mode [ 280.064165][ T8608] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.071593][ T8608] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.078838][ T8608] bridge_slave_1: entered allmulticast mode [ 280.086398][ T8608] bridge_slave_1: entered promiscuous mode [ 280.147190][ T8608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.161176][ T8608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.222986][ T8608] team0: Port device team_slave_0 added [ 280.245932][ T8608] team0: Port device team_slave_1 added [ 280.303512][ T8608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.310647][ T8608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.337443][ T8608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.352065][ T8608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.359437][ T8608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.385720][ T8608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.491115][ T8608] hsr_slave_0: entered promiscuous mode [ 280.497559][ T8608] hsr_slave_1: entered promiscuous mode [ 280.504572][ T8608] debugfs: 'hsr0' already exists in 'hsr' [ 280.510431][ T8608] Cannot create hsr debugfs directory [ 280.520726][ T53] Bluetooth: hci16: command tx timeout [ 281.560636][ T5840] Bluetooth: hci15: command tx timeout [ 281.880641][ T5840] Bluetooth: hci17: command tx timeout [ 281.960808][ T5840] Bluetooth: hci18: command tx timeout [ 282.040721][ T5840] Bluetooth: hci19: command tx timeout [ 282.600615][ T5840] Bluetooth: hci16: command tx timeout [ 283.484791][ T5832] Bluetooth: hci7: command 0x0406 tx timeout [ 283.488027][ T5840] Bluetooth: hci9: command 0x0406 tx timeout [ 283.491847][ T5850] Bluetooth: hci8: command 0x0406 tx timeout [ 283.641336][ T5846] Bluetooth: hci15: command tx timeout [ 283.960957][ T5846] Bluetooth: hci17: command tx timeout [ 284.041432][ T5846] Bluetooth: hci18: command tx timeout [ 284.120564][ T5846] Bluetooth: hci19: command tx timeout [ 284.680717][ T5846] Bluetooth: hci16: command tx timeout [ 286.040504][ T5846] Bluetooth: hci17: command tx timeout [ 286.130630][ T5846] Bluetooth: hci18: command tx timeout [ 286.200661][ T5846] Bluetooth: hci19: command tx timeout [ 287.164035][ T25] block nbd0: Possible stuck request ffff888025000000: control (read@0,1024B). Runtime 180 seconds [ 287.175101][ T25] block nbd0: Possible stuck request ffff8880250001c0: control (read@1024,1024B). Runtime 180 seconds [ 287.186490][ T25] block nbd0: Possible stuck request ffff888025000380: control (read@2048,1024B). Runtime 180 seconds [ 287.197604][ T25] block nbd0: Possible stuck request ffff888025000540: control (read@3072,1024B). Runtime 180 seconds [ 289.519643][ T5201] udevd[5201]: worker [5888] /devices/virtual/block/nbd0 timeout; kill it [ 289.528597][ T5201] udevd[5201]: seq 11873 '/devices/virtual/block/nbd0' killed [ 297.400773][ T31] INFO: task syz.1.692:8404 blocked for more than 143 seconds. [ 297.408640][ T31] Not tainted syzkaller #0 [ 297.413702][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 297.422515][ T31] task:syz.1.692 state:D stack:26024 pid:8404 tgid:8402 ppid:5830 task_flags:0x480140 flags:0x00080002 [ 297.434557][ T31] Call Trace: [ 297.437849][ T31] [ 297.441066][ T31] __schedule+0x1798/0x4cc0 [ 297.445594][ T31] ? __lock_acquire+0xab9/0xd20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 297.450566][ T31] ? __lock_acquire+0xab9/0xd20 [ 297.455430][ T31] ? __pfx___schedule+0x10/0x10 [ 297.462154][ T31] ? schedule+0x91/0x360 [ 297.466749][ T31] schedule+0x165/0x360 [ 297.471169][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 297.476712][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 297.484713][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 297.491210][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 297.520730][ T31] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 297.527042][ T31] nbd_set_size+0x47e/0x6a0 [ 297.545705][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 297.561022][ T31] ? nla_memcpy+0x5b/0xc0 [ 297.565420][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 297.573688][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 297.579515][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 297.585565][ T31] ? bpf_lsm_capable+0x9/0x20 [ 297.590477][ T31] ? security_capable+0x7e/0x2e0 [ 297.595433][ T31] ? radix_tree_lookup+0x240/0x290 [ 297.600648][ T31] nbd_genl_reconfigure+0x414/0x1a50 [ 297.605944][ T31] ? preempt_schedule_irq+0xde/0x150 [ 297.611569][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 297.617324][ T31] ? irqentry_exit+0x74/0x90 [ 297.622079][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.627303][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 297.633301][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 297.638877][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 297.645228][ T31] ? stack_trace_save+0x9c/0xe0 [ 297.650080][ T31] genl_rcv_msg+0x60e/0x790 [ 297.654762][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.659802][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 297.666496][ T31] netlink_rcv_skb+0x208/0x470 [ 297.671458][ T31] ? __lock_acquire+0xab9/0xd20 [ 297.676335][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.681478][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 297.686789][ T31] ? down_read+0x1ad/0x2e0 [ 297.691377][ T31] genl_rcv+0x28/0x40 [ 297.695376][ T31] netlink_unicast+0x82f/0x9e0 [ 297.700151][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 297.705662][ T31] ? netlink_sendmsg+0x642/0xb30 [ 297.710851][ T31] ? skb_put+0x11b/0x210 [ 297.715116][ T31] netlink_sendmsg+0x805/0xb30 [ 297.719879][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.725736][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 297.731021][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 297.736338][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.741964][ T31] __sock_sendmsg+0x21c/0x270 [ 297.746675][ T31] ____sys_sendmsg+0x505/0x830 [ 297.752098][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.757406][ T31] ? import_iovec+0x74/0xa0 [ 297.761991][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 297.767369][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.772847][ T31] ? rcu_is_watching+0x15/0xb0 [ 297.777647][ T31] ? __fget_files+0x2a/0x420 [ 297.782297][ T31] ? __fget_files+0x3a0/0x420 [ 297.786986][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 297.792067][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 297.797550][ T31] ? do_syscall_64+0xbe/0xfa0 [ 297.802551][ T31] do_syscall_64+0xfa/0xfa0 [ 297.807082][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.812509][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.818673][ T31] ? clear_bhb_loop+0x60/0xb0 [ 297.823425][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.829323][ T31] RIP: 0033:0x7fbd37b8f749 [ 297.834065][ T31] RSP: 002b:00007fbd389d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.842653][ T31] RAX: ffffffffffffffda RBX: 00007fbd37de5fa0 RCX: 00007fbd37b8f749 [ 297.850761][ T31] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000006 [ 297.858733][ T31] RBP: 00007fbd37c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 297.867489][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.875743][ T31] R13: 00007fbd37de6038 R14: 00007fbd37de5fa0 R15: 00007ffcba303b78 [ 297.884231][ T31] [ 297.887355][ T31] INFO: task syz.1.692:8413 blocked for more than 143 seconds. [ 297.896126][ T31] Not tainted syzkaller #0 [ 297.901829][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 297.911043][ T31] task:syz.1.692 state:D stack:28616 pid:8413 tgid:8402 ppid:5830 task_flags:0x400040 flags:0x00080002 [ 297.923197][ T31] Call Trace: [ 297.926491][ T31] [ 297.929415][ T31] __schedule+0x1798/0x4cc0 [ 297.934090][ T31] ? __lock_acquire+0xab9/0xd20 [ 297.938959][ T31] ? __lock_acquire+0xab9/0xd20 [ 297.944077][ T31] ? __pfx___schedule+0x10/0x10 [ 297.948962][ T31] ? schedule+0x91/0x360 [ 297.953410][ T31] schedule+0x165/0x360 [ 297.957592][ T31] schedule_preempt_disabled+0x13/0x30 [ 297.963530][ T31] __mutex_lock+0x7e6/0x1350 [ 297.968160][ T31] ? __mutex_lock+0x5bb/0x1350 [ 297.973816][ T31] ? genl_rcv_msg+0x10d/0x790 [ 297.978524][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 297.983835][ T31] ? stack_trace_save+0x9c/0xe0 [ 297.988710][ T31] ? radix_tree_lookup+0x240/0x290 [ 297.994078][ T31] genl_rcv_msg+0x10d/0x790 [ 297.998613][ T31] ? __lock_acquire+0xab9/0xd20 [ 298.003668][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 298.008733][ T31] netlink_rcv_skb+0x208/0x470 [ 298.013679][ T31] ? __lock_acquire+0xab9/0xd20 [ 298.018543][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 298.023698][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 298.029009][ T31] ? down_read+0x1ad/0x2e0 [ 298.033671][ T31] genl_rcv+0x28/0x40 [ 298.037660][ T31] netlink_unicast+0x82f/0x9e0 [ 298.042995][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 298.048308][ T31] ? netlink_sendmsg+0x642/0xb30 [ 298.053532][ T31] ? skb_put+0x11b/0x210 [ 298.057801][ T31] netlink_sendmsg+0x805/0xb30 [ 298.062763][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.068059][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 298.073871][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 298.079181][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.084654][ T31] __sock_sendmsg+0x21c/0x270 [ 298.089351][ T31] __sys_sendto+0x3bd/0x520 [ 298.094039][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 298.099086][ T31] ? count_memcg_event_mm+0x21/0x260 [ 298.104590][ T31] ? exc_page_fault+0x82/0x100 [ 298.109377][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 298.114856][ T31] __x64_sys_sendto+0xde/0x100 [ 298.119632][ T31] do_syscall_64+0xfa/0xfa0 [ 298.124543][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.129785][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.136023][ T31] ? clear_bhb_loop+0x60/0xb0 [ 298.140865][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.146777][ T31] RIP: 0033:0x7fbd37b915dc [ 298.151678][ T31] RSP: 002b:00007fbd389b0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 298.160114][ T31] RAX: ffffffffffffffda RBX: 00007fbd389b0fc0 RCX: 00007fbd37b915dc [ 298.168383][ T31] RDX: 000000000000001c RSI: 00007fbd389b1010 RDI: 0000000000000006 [ 298.177154][ T31] RBP: 0000000000000000 R08: 00007fbd389b0f14 R09: 000000000000000c [ 298.185266][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 298.193384][ T31] R13: 00007fbd389b0f68 R14: 00007fbd389b1010 R15: 0000000000000000 [ 298.201543][ T31] [ 298.204596][ T31] INFO: task syz.4.696:8420 blocked for more than 144 seconds. [ 298.214984][ T31] Not tainted syzkaller #0 [ 298.219938][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 298.229040][ T31] task:syz.4.696 state:D stack:26624 pid:8420 tgid:8419 ppid:5837 task_flags:0x400140 flags:0x00080002 [ 298.241168][ T31] Call Trace: [ 298.244464][ T31] [ 298.247407][ T31] __schedule+0x1798/0x4cc0 [ 298.252016][ T31] ? __lock_acquire+0xab9/0xd20 [ 298.256890][ T31] ? __lock_acquire+0xab9/0xd20 [ 298.261973][ T31] ? __pfx___schedule+0x10/0x10 [ 298.266865][ T31] ? schedule+0x91/0x360 [ 298.271193][ T31] schedule+0x165/0x360 [ 298.275359][ T31] schedule_preempt_disabled+0x13/0x30 [ 298.281444][ T31] __mutex_lock+0x7e6/0x1350 [ 298.286212][ T31] ? __mutex_lock+0x5bb/0x1350 [ 298.291076][ T31] ? genl_rcv_msg+0x10d/0x790 [ 298.295766][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 298.300897][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 298.306029][ T31] ? radix_tree_lookup+0x240/0x290 [ 298.311270][ T31] genl_rcv_msg+0x10d/0x790 [ 298.315795][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 298.320927][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 298.325958][ T31] ? __asan_memcpy+0x40/0x70 [ 298.330792][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 298.336189][ T31] netlink_rcv_skb+0x208/0x470 [ 298.341037][ T31] ? __lock_acquire+0xab9/0xd20 [ 298.345894][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 298.350989][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 298.356291][ T31] ? down_read+0x1ad/0x2e0 [ 298.360907][ T31] genl_rcv+0x28/0x40 [ 298.364902][ T31] netlink_unicast+0x82f/0x9e0 [ 298.369678][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 298.375058][ T31] ? netlink_sendmsg+0x642/0xb30 [ 298.380264][ T31] ? skb_put+0x11b/0x210 [ 298.384524][ T31] netlink_sendmsg+0x805/0xb30 [ 298.389304][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.394701][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 298.399690][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 298.405038][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.410420][ T31] __sock_sendmsg+0x21c/0x270 [ 298.415109][ T31] ____sys_sendmsg+0x505/0x830 [ 298.419873][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.425243][ T31] ? import_iovec+0x74/0xa0 [ 298.429774][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 298.434611][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 298.439836][ T31] ? irqentry_exit+0x74/0x90 [ 298.445720][ T31] ? rcu_is_watching+0x15/0xb0 [ 298.450745][ T31] ? __fget_files+0x2a/0x420 [ 298.455348][ T31] ? __fget_files+0x3a0/0x420 [ 298.460017][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 298.465171][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 298.470803][ T31] ? do_syscall_64+0xbe/0xfa0 [ 298.475506][ T31] do_syscall_64+0xfa/0xfa0 [ 298.479999][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.485698][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.491868][ T31] ? clear_bhb_loop+0x60/0xb0 [ 298.496560][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.502558][ T31] RIP: 0033:0x7ff3c698f749 [ 298.506983][ T31] RSP: 002b:00007ff3c78ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.515516][ T31] RAX: ffffffffffffffda RBX: 00007ff3c6be5fa0 RCX: 00007ff3c698f749 [ 298.523623][ T31] RDX: 0000000008000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 298.531659][ T31] RBP: 00007ff3c6a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 298.539640][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.547952][ T31] R13: 00007ff3c6be6038 R14: 00007ff3c6be5fa0 R15: 00007ffcb0c47478 [ 298.556346][ T31] [ 298.559402][ T31] INFO: task syz.3.701:8433 blocked for more than 144 seconds. [ 298.567066][ T31] Not tainted syzkaller #0 [ 298.572101][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 298.580960][ T31] task:syz.3.701 state:D stack:28360 pid:8433 tgid:8430 ppid:5831 task_flags:0x400040 flags:0x00080002 [ 298.594052][ T31] Call Trace: [ 298.597359][ T31] [ 298.601183][ T31] __schedule+0x1798/0x4cc0 [ 298.605744][ T31] ? __lock_acquire+0xab9/0xd20 [ 298.610788][ T31] ? __lock_acquire+0xab9/0xd20 [ 298.615656][ T31] ? __pfx___schedule+0x10/0x10 [ 298.620697][ T31] ? schedule+0x91/0x360 [ 298.624985][ T31] schedule+0x165/0x360 [ 298.629176][ T31] schedule_preempt_disabled+0x13/0x30 [ 298.634794][ T31] __mutex_lock+0x7e6/0x1350 [ 298.639436][ T31] ? __mutex_lock+0x5bb/0x1350 [ 298.644453][ T31] ? genl_rcv_msg+0x10d/0x790 [ 298.649162][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 298.654380][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 298.659522][ T31] ? radix_tree_lookup+0x240/0x290 [ 298.664800][ T31] genl_rcv_msg+0x10d/0x790 [ 298.669333][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 298.674411][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 298.679442][ T31] ? __asan_memcpy+0x40/0x70 [ 298.684423][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 298.690360][ T31] netlink_rcv_skb+0x208/0x470 [ 298.695590][ T31] ? __lock_acquire+0xab9/0xd20 [ 298.700619][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 298.705659][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 298.711233][ T31] ? down_read+0x1ad/0x2e0 [ 298.715669][ T31] genl_rcv+0x28/0x40 [ 298.719659][ T31] netlink_unicast+0x82f/0x9e0 [ 298.724648][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 298.729978][ T31] ? netlink_sendmsg+0x642/0xb30 [ 298.734976][ T31] ? skb_put+0x11b/0x210 [ 298.739229][ T31] netlink_sendmsg+0x805/0xb30 [ 298.744188][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.749506][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 298.754624][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 298.759934][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.765908][ T31] __sock_sendmsg+0x21c/0x270 [ 298.770768][ T31] __sys_sendto+0x3bd/0x520 [ 298.775310][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 298.780541][ T31] ? count_memcg_event_mm+0x21/0x260 [ 298.785861][ T31] ? exc_page_fault+0x82/0x100 [ 298.791508][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 298.796843][ T31] __x64_sys_sendto+0xde/0x100 [ 298.801800][ T31] do_syscall_64+0xfa/0xfa0 [ 298.806328][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.811613][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.817708][ T31] ? clear_bhb_loop+0x60/0xb0 [ 298.822681][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.828595][ T31] RIP: 0033:0x7fcb6e5915dc [ 298.833158][ T31] RSP: 002b:00007fcb6f4aeec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 298.841907][ T31] RAX: ffffffffffffffda RBX: 00007fcb6f4aefc0 RCX: 00007fcb6e5915dc [ 298.849897][ T31] RDX: 0000000000000020 RSI: 00007fcb6f4af010 RDI: 0000000000000006 [ 298.858025][ T31] RBP: 0000000000000000 R08: 00007fcb6f4aef14 R09: 000000000000000c [ 298.866123][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 298.874257][ T31] R13: 00007fcb6f4aef68 R14: 00007fcb6f4af010 R15: 0000000000000000 [ 298.882374][ T31] [ 298.885403][ T31] INFO: task syz.3.701:8440 blocked for more than 144 seconds. [ 298.894078][ T31] Not tainted syzkaller #0 [ 298.899027][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 298.907863][ T31] task:syz.3.701 state:D stack:28360 pid:8440 tgid:8430 ppid:5831 task_flags:0x400040 flags:0x00080002 [ 298.919905][ T31] Call Trace: [ 298.923883][ T31] [ 298.926838][ T31] __schedule+0x1798/0x4cc0 [ 298.931645][ T31] ? __lock_acquire+0xab9/0xd20 [ 298.936502][ T31] ? __lock_acquire+0xab9/0xd20 [ 298.941845][ T31] ? __pfx___schedule+0x10/0x10 [ 298.946741][ T31] ? schedule+0x91/0x360 [ 298.951059][ T31] schedule+0x165/0x360 [ 298.955222][ T31] schedule_preempt_disabled+0x13/0x30 [ 298.960841][ T31] __mutex_lock+0x7e6/0x1350 [ 298.965454][ T31] ? __mutex_lock+0x5bb/0x1350 [ 298.970211][ T31] ? genl_rcv_msg+0x10d/0x790 [ 298.975032][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 298.980072][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 298.985366][ T31] ? radix_tree_lookup+0x240/0x290 [ 298.990621][ T31] genl_rcv_msg+0x10d/0x790 [ 298.995826][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 299.001075][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 299.006117][ T31] ? __asan_memcpy+0x40/0x70 [ 299.010898][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 299.016293][ T31] netlink_rcv_skb+0x208/0x470 [ 299.021190][ T31] ? __lock_acquire+0xab9/0xd20 [ 299.026049][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 299.031225][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 299.036536][ T31] ? down_read+0x1ad/0x2e0 [ 299.041220][ T31] genl_rcv+0x28/0x40 [ 299.045212][ T31] netlink_unicast+0x82f/0x9e0 [ 299.049971][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 299.055444][ T31] ? netlink_sendmsg+0x642/0xb30 [ 299.060458][ T31] ? skb_put+0x11b/0x210 [ 299.064716][ T31] netlink_sendmsg+0x805/0xb30 [ 299.069480][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.074890][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 299.079845][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 299.085337][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.090877][ T31] __sock_sendmsg+0x21c/0x270 [ 299.096380][ T31] __sys_sendto+0x3bd/0x520 [ 299.101014][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 299.106053][ T31] ? __lock_acquire+0xab9/0xd20 [ 299.111092][ T31] ? fd_install+0x97/0x540 [ 299.115529][ T31] ? fd_install+0x30d/0x540 [ 299.120022][ T31] __x64_sys_sendto+0xde/0x100 [ 299.124871][ T31] do_syscall_64+0xfa/0xfa0 [ 299.129386][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.134793][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.140964][ T31] ? clear_bhb_loop+0x60/0xb0 [ 299.145647][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.151841][ T31] RIP: 0033:0x7fcb6e5915dc [ 299.156268][ T31] RSP: 002b:00007fcb6f46cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 299.164835][ T31] RAX: ffffffffffffffda RBX: 00007fcb6f46cfc0 RCX: 00007fcb6e5915dc [ 299.172948][ T31] RDX: 000000000000001c RSI: 00007fcb6f46d010 RDI: 000000000000000a [ 299.181014][ T31] RBP: 0000000000000000 R08: 00007fcb6f46cf14 R09: 000000000000000c [ 299.188994][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a [ 299.197123][ T31] R13: 00007fcb6f46cf68 R14: 00007fcb6f46d010 R15: 0000000000000000 [ 299.205919][ T31] [ 299.208974][ T31] INFO: task syz.2.702:8439 blocked for more than 145 seconds. [ 299.216718][ T31] Not tainted syzkaller #0 [ 299.221715][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 299.230515][ T31] task:syz.2.702 state:D stack:26728 pid:8439 tgid:8434 ppid:5828 task_flags:0x400140 flags:0x00080002 [ 299.242658][ T31] Call Trace: [ 299.245947][ T31] [ 299.248866][ T31] __schedule+0x1798/0x4cc0 [ 299.253570][ T31] ? __lock_acquire+0xab9/0xd20 [ 299.258444][ T31] ? __lock_acquire+0xab9/0xd20 [ 299.263622][ T31] ? __pfx___schedule+0x10/0x10 [ 299.268510][ T31] ? schedule+0x91/0x360 [ 299.273176][ T31] schedule+0x165/0x360 [ 299.277379][ T31] schedule_preempt_disabled+0x13/0x30 [ 299.282938][ T31] __mutex_lock+0x7e6/0x1350 [ 299.287555][ T31] ? __mutex_lock+0x5bb/0x1350 [ 299.292433][ T31] ? genl_rcv_msg+0x10d/0x790 [ 299.297120][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 299.303076][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 299.308221][ T31] ? radix_tree_lookup+0x240/0x290 [ 299.313484][ T31] genl_rcv_msg+0x10d/0x790 [ 299.318014][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 299.323445][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 299.328495][ T31] ? __asan_memcpy+0x40/0x70 [ 299.333163][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 299.338546][ T31] netlink_rcv_skb+0x208/0x470 [ 299.343473][ T31] ? __lock_acquire+0xab9/0xd20 [ 299.348340][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 299.353476][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 299.358786][ T31] ? down_read+0x1ad/0x2e0 [ 299.363355][ T31] genl_rcv+0x28/0x40 [ 299.367348][ T31] netlink_unicast+0x82f/0x9e0 [ 299.372346][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 299.377665][ T31] ? netlink_sendmsg+0x642/0xb30 [ 299.382766][ T31] ? skb_put+0x11b/0x210 [ 299.387015][ T31] netlink_sendmsg+0x805/0xb30 [ 299.391871][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.397164][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 299.403330][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 299.408641][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.414081][ T31] __sock_sendmsg+0x21c/0x270 [ 299.419172][ T31] __sys_sendto+0x3bd/0x520 [ 299.423890][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 299.428923][ T31] ? count_memcg_event_mm+0x21/0x260 [ 299.434599][ T31] ? exc_page_fault+0x82/0x100 [ 299.439360][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 299.444788][ T31] __x64_sys_sendto+0xde/0x100 [ 299.449563][ T31] do_syscall_64+0xfa/0xfa0 [ 299.454138][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.459346][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.465587][ T31] ? clear_bhb_loop+0x60/0xb0 [ 299.470338][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.476224][ T31] RIP: 0033:0x7fd6b03915dc [ 299.481173][ T31] RSP: 002b:00007fd6b1212ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 299.489605][ T31] RAX: ffffffffffffffda RBX: 00007fd6b1212fc0 RCX: 00007fd6b03915dc [ 299.497708][ T31] RDX: 0000000000000024 RSI: 00007fd6b1213010 RDI: 0000000000000008 [ 299.506415][ T31] RBP: 0000000000000000 R08: 00007fd6b1212f14 R09: 000000000000000c [ 299.514485][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 299.522697][ T31] R13: 00007fd6b1212f68 R14: 00007fd6b1213010 R15: 0000000000000000 [ 299.530848][ T31] [ 299.533905][ T31] INFO: task syz.2.702:8443 blocked for more than 145 seconds. [ 299.541600][ T31] Not tainted syzkaller #0 [ 299.546525][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 299.555254][ T31] task:syz.2.702 state:D stack:24168 pid:8443 tgid:8434 ppid:5828 task_flags:0x400040 flags:0x00080002 [ 299.567451][ T31] Call Trace: [ 299.570877][ T31] [ 299.573817][ T31] __schedule+0x1798/0x4cc0 [ 299.578317][ T31] ? __lock_acquire+0xab9/0xd20 [ 299.583318][ T31] ? __lock_acquire+0xab9/0xd20 [ 299.588179][ T31] ? __pfx___schedule+0x10/0x10 [ 299.593268][ T31] ? schedule+0x91/0x360 [ 299.597528][ T31] schedule+0x165/0x360 [ 299.601873][ T31] schedule_preempt_disabled+0x13/0x30 [ 299.608320][ T31] __mutex_lock+0x7e6/0x1350 [ 299.613050][ T31] ? __mutex_lock+0x5bb/0x1350 [ 299.617840][ T31] ? genl_rcv_msg+0x10d/0x790 [ 299.622666][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 299.627718][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 299.632985][ T31] ? radix_tree_lookup+0x240/0x290 [ 299.638114][ T31] genl_rcv_msg+0x10d/0x790 [ 299.643096][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 299.648246][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 299.653768][ T31] ? __asan_memcpy+0x40/0x70 [ 299.658408][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 299.664176][ T31] netlink_rcv_skb+0x208/0x470 [ 299.668991][ T31] ? __lock_acquire+0xab9/0xd20 [ 299.674101][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 299.679160][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 299.684896][ T31] ? down_read+0x1ad/0x2e0 [ 299.689344][ T31] genl_rcv+0x28/0x40 [ 299.693457][ T31] netlink_unicast+0x82f/0x9e0 [ 299.698245][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 299.703766][ T31] ? netlink_sendmsg+0x642/0xb30 [ 299.708714][ T31] ? skb_put+0x11b/0x210 [ 299.713863][ T31] netlink_sendmsg+0x805/0xb30 [ 299.718654][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.724224][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 299.729186][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 299.734555][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.739845][ T31] __sock_sendmsg+0x21c/0x270 [ 299.744714][ T31] __sys_sendto+0x3bd/0x520 [ 299.749231][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 299.754411][ T31] ? __lock_acquire+0xab9/0xd20 [ 299.759285][ T31] ? fd_install+0x97/0x540 [ 299.763819][ T31] ? fd_install+0x30d/0x540 [ 299.768332][ T31] __x64_sys_sendto+0xde/0x100 [ 299.773152][ T31] do_syscall_64+0xfa/0xfa0 [ 299.777679][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.783043][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.789119][ T31] ? clear_bhb_loop+0x60/0xb0 [ 299.793927][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.799832][ T31] RIP: 0033:0x7fd6b03915dc [ 299.804623][ T31] RSP: 002b:00007fd6b11f1ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 299.814416][ T31] RAX: ffffffffffffffda RBX: 00007fd6b11f1fc0 RCX: 00007fd6b03915dc [ 299.822585][ T31] RDX: 0000000000000024 RSI: 00007fd6b11f2010 RDI: 000000000000000b [ 299.830696][ T31] RBP: 0000000000000000 R08: 00007fd6b11f1f14 R09: 000000000000000c [ 299.838711][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 299.846784][ T31] R13: 00007fd6b11f1f68 R14: 00007fd6b11f2010 R15: 0000000000000000 [ 299.854830][ T31] [ 299.857862][ T31] INFO: task syz.0.707:8475 blocked for more than 145 seconds. [ 299.865668][ T31] Not tainted syzkaller #0 [ 299.870685][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 299.879349][ T31] task:syz.0.707 state:D stack:24680 pid:8475 tgid:8474 ppid:5829 task_flags:0x400140 flags:0x00080002 [ 299.891459][ T31] Call Trace: [ 299.894742][ T31] [ 299.897676][ T31] __schedule+0x1798/0x4cc0 [ 299.902326][ T31] ? __lock_acquire+0xab9/0xd20 [ 299.907202][ T31] ? __lock_acquire+0xab9/0xd20 [ 299.912125][ T31] ? __pfx___schedule+0x10/0x10 [ 299.917380][ T31] ? schedule+0x91/0x360 [ 299.921813][ T31] schedule+0x165/0x360 [ 299.926001][ T31] schedule_preempt_disabled+0x13/0x30 [ 299.931522][ T31] __mutex_lock+0x7e6/0x1350 [ 299.936129][ T31] ? __mutex_lock+0x5bb/0x1350 [ 299.940961][ T31] ? genl_rcv_msg+0x10d/0x790 [ 299.945650][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 299.950742][ T31] ? stack_trace_save+0x9c/0xe0 [ 299.955606][ T31] ? radix_tree_lookup+0x240/0x290 [ 299.961547][ T31] genl_rcv_msg+0x10d/0x790 [ 299.966092][ T31] ? __lock_acquire+0xab9/0xd20 [ 299.971111][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 299.976146][ T31] netlink_rcv_skb+0x208/0x470 [ 299.980953][ T31] ? __lock_acquire+0xab9/0xd20 [ 299.985808][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 299.990876][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 299.996176][ T31] ? down_read+0x1ad/0x2e0 [ 300.000614][ T31] genl_rcv+0x28/0x40 [ 300.004610][ T31] netlink_unicast+0x82f/0x9e0 [ 300.009432][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 300.014783][ T31] ? netlink_sendmsg+0x642/0xb30 [ 300.019968][ T31] ? skb_put+0x11b/0x210 [ 300.024328][ T31] netlink_sendmsg+0x805/0xb30 [ 300.029111][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.034473][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 300.039439][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 300.044999][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.050340][ T31] __sock_sendmsg+0x21c/0x270 [ 300.055042][ T31] __sys_sendto+0x3bd/0x520 [ 300.059549][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 300.064613][ T31] ? count_memcg_event_mm+0x21/0x260 [ 300.069930][ T31] ? exc_page_fault+0x82/0x100 [ 300.074790][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 300.080086][ T31] __x64_sys_sendto+0xde/0x100 [ 300.084906][ T31] do_syscall_64+0xfa/0xfa0 [ 300.089425][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.094688][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.100786][ T31] ? clear_bhb_loop+0x60/0xb0 [ 300.105459][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.111424][ T31] RIP: 0033:0x7f68523915dc [ 300.115844][ T31] RSP: 002b:00007f68505f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 300.124881][ T31] RAX: ffffffffffffffda RBX: 00007f68505f4fc0 RCX: 00007f68523915dc [ 300.132938][ T31] RDX: 0000000000000028 RSI: 00007f68505f5010 RDI: 0000000000000009 [ 300.140985][ T31] RBP: 0000000000000000 R08: 00007f68505f4f14 R09: 000000000000000c [ 300.148960][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 300.156987][ T31] R13: 00007f68505f4f68 R14: 00007f68505f5010 R15: 0000000000000000 [ 300.165066][ T31] [ 300.168101][ T31] INFO: task syz.0.707:8477 blocked for more than 146 seconds. [ 300.175697][ T31] Not tainted syzkaller #0 [ 300.180664][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 300.189362][ T31] task:syz.0.707 state:D stack:28360 pid:8477 tgid:8474 ppid:5829 task_flags:0x400040 flags:0x00080002 [ 300.201530][ T31] Call Trace: [ 300.204821][ T31] [ 300.207743][ T31] __schedule+0x1798/0x4cc0 [ 300.212285][ T31] ? __lock_acquire+0xab9/0xd20 [ 300.217147][ T31] ? __lock_acquire+0xab9/0xd20 [ 300.222358][ T31] ? __pfx___schedule+0x10/0x10 [ 300.227249][ T31] ? schedule+0x91/0x360 [ 300.231544][ T31] schedule+0x165/0x360 [ 300.235713][ T31] schedule_preempt_disabled+0x13/0x30 [ 300.241217][ T31] __mutex_lock+0x7e6/0x1350 [ 300.245823][ T31] ? __mutex_lock+0x5bb/0x1350 [ 300.250651][ T31] ? genl_rcv_msg+0x10d/0x790 [ 300.255351][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 300.260488][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 300.265620][ T31] ? radix_tree_lookup+0x240/0x290 [ 300.270789][ T31] genl_rcv_msg+0x10d/0x790 [ 300.275311][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.280860][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 300.286035][ T31] ? __asan_memcpy+0x40/0x70 [ 300.290679][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 300.296078][ T31] netlink_rcv_skb+0x208/0x470 [ 300.300884][ T31] ? __lock_acquire+0xab9/0xd20 [ 300.305735][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.310814][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.316121][ T31] ? down_read+0x1ad/0x2e0 [ 300.320642][ T31] genl_rcv+0x28/0x40 [ 300.325000][ T31] netlink_unicast+0x82f/0x9e0 [ 300.329789][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 300.335116][ T31] ? netlink_sendmsg+0x642/0xb30 [ 300.340054][ T31] ? skb_put+0x11b/0x210 [ 300.344341][ T31] netlink_sendmsg+0x805/0xb30 [ 300.349124][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.354439][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 300.359392][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 300.364843][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.370141][ T31] __sock_sendmsg+0x21c/0x270 [ 300.374922][ T31] __sys_sendto+0x3bd/0x520 [ 300.379439][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 300.384541][ T31] ? count_memcg_event_mm+0x21/0x260 [ 300.389854][ T31] ? exc_page_fault+0x82/0x100 [ 300.394666][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 300.399963][ T31] __x64_sys_sendto+0xde/0x100 [ 300.404776][ T31] do_syscall_64+0xfa/0xfa0 [ 300.409290][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.414544][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.420656][ T31] ? clear_bhb_loop+0x60/0xb0 [ 300.425348][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.431668][ T31] RIP: 0033:0x7f68523915dc [ 300.436111][ T31] RSP: 002b:00007f68505d3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 300.444667][ T31] RAX: ffffffffffffffda RBX: 00007f68505d3fc0 RCX: 00007f68523915dc [ 300.452689][ T31] RDX: 0000000000000020 RSI: 00007f68505d4010 RDI: 0000000000000008 [ 300.460705][ T31] RBP: 0000000000000000 R08: 00007f68505d3f14 R09: 000000000000000c [ 300.468678][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 300.476676][ T31] R13: 00007f68505d3f68 R14: 00007f68505d4010 R15: 0000000000000000 [ 300.484699][ T31] [ 300.487723][ T31] INFO: task syz.0.707:8478 blocked for more than 146 seconds. [ 300.495370][ T31] Not tainted syzkaller #0 [ 300.500342][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 300.509019][ T31] task:syz.0.707 state:D stack:27688 pid:8478 tgid:8474 ppid:5829 task_flags:0x400040 flags:0x00080002 [ 300.523692][ T31] Call Trace: [ 300.526996][ T31] [ 300.530749][ T31] __schedule+0x1798/0x4cc0 [ 300.535287][ T31] ? __lock_acquire+0xab9/0xd20 [ 300.540127][ T31] ? __lock_acquire+0xab9/0xd20 [ 300.545175][ T31] ? __pfx___schedule+0x10/0x10 [ 300.550086][ T31] ? schedule+0x91/0x360 [ 300.554457][ T31] schedule+0x165/0x360 [ 300.558624][ T31] schedule_preempt_disabled+0x13/0x30 [ 300.564338][ T31] __mutex_lock+0x7e6/0x1350 [ 300.568953][ T31] ? __mutex_lock+0x5bb/0x1350 [ 300.573892][ T31] ? genl_rcv_msg+0x10d/0x790 [ 300.578583][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 300.583964][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 300.589103][ T31] ? radix_tree_lookup+0x240/0x290 [ 300.594279][ T31] genl_rcv_msg+0x10d/0x790 [ 300.598794][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.603994][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 300.609028][ T31] ? __asan_memcpy+0x40/0x70 [ 300.613724][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 300.619107][ T31] netlink_rcv_skb+0x208/0x470 [ 300.623946][ T31] ? __lock_acquire+0xab9/0xd20 [ 300.628801][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.634177][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.639559][ T31] ? down_read+0x1ad/0x2e0 [ 300.644090][ T31] genl_rcv+0x28/0x40 [ 300.648082][ T31] netlink_unicast+0x82f/0x9e0 [ 300.652921][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 300.658220][ T31] ? netlink_sendmsg+0x642/0xb30 [ 300.663223][ T31] ? skb_put+0x11b/0x210 [ 300.667490][ T31] netlink_sendmsg+0x805/0xb30 [ 300.672403][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.677741][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 300.683220][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 300.688584][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.694053][ T31] __sock_sendmsg+0x21c/0x270 [ 300.698753][ T31] __sys_sendto+0x3bd/0x520 [ 300.703307][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 300.708340][ T31] ? count_memcg_event_mm+0x21/0x260 [ 300.713697][ T31] ? exc_page_fault+0x82/0x100 [ 300.718484][ T31] ? do_user_addr_fault+0xc85/0x1380 [ 300.723840][ T31] __x64_sys_sendto+0xde/0x100 [ 300.728628][ T31] do_syscall_64+0xfa/0xfa0 [ 300.733189][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.738648][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.744783][ T31] ? clear_bhb_loop+0x60/0xb0 [ 300.749472][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.755405][ T31] RIP: 0033:0x7f68523915dc [ 300.759830][ T31] RSP: 002b:00007f68505b2ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 300.768454][ T31] RAX: ffffffffffffffda RBX: 00007f68505b2fc0 RCX: 00007f68523915dc [ 300.776491][ T31] RDX: 0000000000000020 RSI: 00007f68505b3010 RDI: 0000000000000005 [ 300.784520][ T31] RBP: 0000000000000000 R08: 00007f68505b2f14 R09: 000000000000000c [ 300.792535][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 300.800589][ T31] R13: 00007f68505b2f68 R14: 00007f68505b3010 R15: 0000000000000000 [ 300.808593][ T31] [ 300.811685][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 300.820827][ T31] [ 300.820827][ T31] Showing all locks held in the system: [ 300.828550][ T31] 1 lock held by khungtaskd/31: [ 300.833513][ T31] #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 300.843738][ T31] 3 locks held by kworker/u8:7/1169: [ 300.849033][ T31] #0: ffff8880b893a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 300.858998][ T31] #1: ffff8880b8924048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 300.867956][ T31] #2: ffff8880b8925958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 300.877332][ T31] 2 locks held by getty/5591: [ 300.882082][ T31] #0: ffff88814d8e50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 300.891899][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 300.902053][ T31] 1 lock held by udevd/5888: [ 300.906645][ T31] #0: ffff888024b63358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 300.915962][ T31] 6 locks held by syz.1.692/8404: [ 300.921048][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 300.930075][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 300.939431][ T31] #2: ffff888024b70a70 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x375/0x1a50 [ 300.949867][ T31] #3: ffff8881433e2478 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 300.959310][ T31] #4: ffff8881433e1e18 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 300.971495][ T31] #5: ffff8881433e1e50 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 300.983932][ T31] 2 locks held by syz.1.692/8413: [ 300.988954][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 300.997169][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 301.006504][ T31] 2 locks held by syz.4.696/8420: [ 301.011641][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 301.019853][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 301.028877][ T31] 2 locks held by syz.3.701/8433: [ 301.034009][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 301.042666][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 301.051737][ T31] 2 locks held by syz.3.701/8440: [ 301.056772][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 301.065014][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 301.074057][ T31] 2 locks held by syz.2.702/8439: [ 301.079065][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 301.087361][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 301.096392][ T31] 2 locks held by syz.2.702/8443: [ 301.101447][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 301.109659][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 301.118692][ T31] 2 locks held by syz.0.707/8475: [ 301.123741][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 301.131947][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 301.140981][ T31] 2 locks held by syz.0.707/8477: [ 301.146248][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 301.154536][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 301.163625][ T31] 2 locks held by syz.0.707/8478: [ 301.168655][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 301.176911][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 301.185933][ T31] 2 locks held by syz-executor/8482: [ 301.191233][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 301.199441][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 301.208453][ T31] 2 locks held by syz-executor/8491: [ 301.213864][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 301.222110][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 301.231137][ T31] 2 locks held by syz-executor/8502: [ 301.236408][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 301.245145][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 301.254620][ T31] 2 locks held by syz-executor/8504: [ 301.259915][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 301.268162][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 301.277237][ T31] 2 locks held by syz-executor/8506: [ 301.282589][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 301.290957][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 301.299948][ T31] 2 locks held by syz-executor/8532: [ 301.305485][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 301.313815][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 301.323155][ T31] 2 locks held by syz-executor/8541: [ 301.328448][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 301.336825][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 301.345981][ T31] 2 locks held by syz-executor/8552: [ 301.352357][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 301.360912][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 301.369926][ T31] 2 locks held by syz-executor/8554: [ 301.375278][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 301.383515][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 301.392525][ T31] 2 locks held by syz-executor/8556: [ 301.397809][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 301.406589][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 301.415789][ T31] 2 locks held by syz-executor/8584: [ 301.421193][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 301.429370][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 301.438437][ T31] 2 locks held by syz-executor/8593: [ 301.443861][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 301.453051][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 301.462334][ T31] 2 locks held by syz-executor/8604: [ 301.467623][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 301.476016][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 301.485372][ T31] 2 locks held by syz-executor/8606: [ 301.490784][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 301.498996][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 301.508096][ T31] 2 locks held by syz-executor/8608: [ 301.513591][ T31] #0: ffffffff8f331c10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 301.521964][ T31] #1: ffffffff8f331a28 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 301.531038][ T31] [ 301.533366][ T31] ============================================= [ 301.533366][ T31] [ 301.542032][ T31] NMI backtrace for cpu 1 [ 301.542055][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 301.542073][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 301.542083][ T31] Call Trace: [ 301.542090][ T31] [ 301.542096][ T31] dump_stack_lvl+0x189/0x250 [ 301.542121][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.542135][ T31] ? __pfx__printk+0x10/0x10 [ 301.542152][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 301.542166][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 301.542178][ T31] ? __pfx__printk+0x10/0x10 [ 301.542191][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 301.542209][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 301.542222][ T31] watchdog+0xf60/0xfa0 [ 301.542235][ T31] ? watchdog+0x1e2/0xfa0 [ 301.542248][ T31] kthread+0x711/0x8a0 [ 301.542263][ T31] ? __pfx_watchdog+0x10/0x10 [ 301.542273][ T31] ? __pfx_kthread+0x10/0x10 [ 301.542287][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 301.542300][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.542314][ T31] ? __pfx_kthread+0x10/0x10 [ 301.542328][ T31] ret_from_fork+0x4bc/0x870 [ 301.542339][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 301.542353][ T31] ? __switch_to_asm+0x39/0x70 [ 301.542361][ T31] ? __switch_to_asm+0x33/0x70 [ 301.542369][ T31] ? __pfx_kthread+0x10/0x10 [ 301.542382][ T31] ret_from_fork_asm+0x1a/0x30 [ 301.542400][ T31] [ 301.542404][ T31] Sending NMI from CPU 1 to CPUs 0: [ 301.689598][ C0] NMI backtrace for cpu 0 [ 301.689626][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 301.689644][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 301.689655][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 301.689683][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 b1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 301.689698][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 301.689714][ C0] RAX: b82ac1ac2d065c00 RBX: ffffffff81967b47 RCX: b82ac1ac2d065c00 [ 301.689726][ C0] RDX: 0000000000000001 RSI: ffffffff8d70e844 RDI: ffffffff8bbf08e0 [ 301.689738][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 301.689750][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7cf270 [ 301.689763][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 301.689773][ C0] FS: 0000000000000000(0000) GS:ffff888126139000(0000) knlGS:0000000000000000 [ 301.689786][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.689798][ C0] CR2: 000055cdd02dd000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 301.689812][ C0] Call Trace: [ 301.689820][ C0] [ 301.689826][ C0] default_idle+0x13/0x20 [ 301.689842][ C0] default_idle_call+0x73/0xb0 [ 301.689860][ C0] do_idle+0x1e7/0x510 [ 301.689881][ C0] ? __pfx_do_idle+0x10/0x10 [ 301.689904][ C0] cpu_startup_entry+0x44/0x60 [ 301.689921][ C0] rest_init+0x2de/0x300 [ 301.689939][ C0] start_kernel+0x3ae/0x410 [ 301.689960][ C0] x86_64_start_reservations+0x24/0x30 [ 301.689985][ C0] x86_64_start_kernel+0x143/0x1c0 [ 301.690009][ C0] common_startup_64+0x13e/0x147 [ 301.690038][ C0]