last executing test programs: 20.40471314s ago: executing program 4 (id=1658): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000440)={r0, &(0x7f0000000100)='/%\x00', 0x20100, &(0x7f00000001c0)={@_ha_fsid={[0x8, 0x7]}, {0x8, 0xf3dc, 0x2, 0x81}}, 0x3ff, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000400)=0x7fff}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000cc0)={{r0, &(0x7f0000000480)='\x00', 0x400000, &(0x7f00000004c0)={@_ha_fsid={[0x4, 0x80000001]}, {0x4, 0x5, 0xfd4, 0x7f}}, 0x10001, &(0x7f0000000500), &(0x7f0000000540)=0x48}, 0x6, &(0x7f0000000c00)=[{0x1, 0x10001, &(0x7f0000000580)='.\x00', &(0x7f0000000740)="44a0935491a25a309a83acb2d67a77af4f07dbb2f758ddd2f819579b5b193c47a8b16514733c26abf74880e068285ac7b11654dd0da47496453a23b2efd76e1e52a5768f2b0ce52d285f8e4807bf09771e188815eefe750a807cc86880bffac1970704e28a0594a56fd71d14f5c8d4cf3ffa14bcc70f3f9263a0c7fcee8c9772e30668895496383d72d0f72661c66df7df128e08e80fad404f7f6967178be01cad1ecdde19f3d56ff2912954356068f8dbd7e3e8766854009d31e16eef2866be5545c45d325e0eb77885", 0xca}, {0x1, 0x2, &(0x7f0000000840)='.[+)\'}**)\x00', &(0x7f0000000880)="9af80f2b8dc6e48c48cfb040", 0xc, 0x32}, {0x3, 0x9, &(0x7f00000008c0)='\x00', &(0x7f0000000900)="19d28bb52494456c1210c5a11998995cb61e2317584660b401a24632fb376b67991b35fcefe1b3c240ef1b3a04238309142cc3ae0f736b5389fd7760232aa0498f27012b6b6cc70f04b7c59572383887f1d5c95310005c837c", 0x59}, {0x2, 0xc6, &(0x7f0000000980)='vlan0\x00', &(0x7f00000009c0)="6213e6d94c34c084746f0b522c67297c9c24a613069fb7437c428d926e88a56030c22126231e9cb7e3224e2c090e537bdea45c686819acebdaaad2af84c37cf3abd66f34e720a42a95ecfa5916c4c9df727662158e6bf4a669c27cda013fbf0720d1b7afa7c5ca81bb75a0f58e005b02043fbd01efb124759f6f13b6cb29e241912c40", 0x83, 0x2}, {0x2, 0x9, &(0x7f0000000a80)='syzkaller\x00', &(0x7f0000000ac0)="9a16b275569ca9899be38ed5e7b6429e9e3b27d6b3de97c3d3", 0x19, 0x2}, {0x3, 0x2, &(0x7f0000000b00)='\x00', &(0x7f0000000b40)="516ba4fc9744ab6d8d492cd3131beec7aaa781545069a405d635b04ddb9bd9f0506bdaf884483fc0295c5321aeaf7fe13856e93d8f36ab54cbfd5011613067d74942cbd6063e1cb1f3a71503bd486a8766fb049b18385a90880ae52b661d7dbdd0cc91318b07790921299942e020e5b5a4bbc6ac54c1af7e2b98f29a253d3759a6ff9672e2ef16261cbba7c4fbcb5903ab921f41919153379ad798d82983854a063472aa8c87418e3e7088e84290c372", 0xb0, 0x26}]}) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f00000006c0)=0x8, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r5, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)}, 0x20) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x25, &(0x7f0000000e00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x51}, @cb_func={0x18, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_val={0x18, 0x4, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xffff}, @generic={0x7, 0x6, 0x0, 0x800, 0xffff9891}, @jmp={0x5, 0x1, 0x1, 0x5, 0x1, 0x4, 0x10}, @generic={0xff, 0xd, 0x5, 0x2, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0xffffffffffffffff]}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x11, 0x800000003, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r9, 0x8917, &(0x7f0000000000)={'bond0\x00'}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r8, 0x8983, &(0x7f0000000040)={0x8, 'vlan0\x00', {'bond_slave_0\x00'}, 0x3}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0xa5dfdbfe, {0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x4044908}, 0x4044850) r10 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCADDRT(r10, 0x890b, &(0x7f0000000640)={0x0, @qipcrtr={0x2a, 0x2, 0x1}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3}, @nl=@kern={0x10, 0x0, 0x0, 0x1000000}, 0x5, 0x0, 0x0, 0x0, 0x30e, &(0x7f00000005c0)='wlan0\x00', 0xab, 0x0, 0x6}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$int_out(r7, 0x2, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r11, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x0, 0x1e}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4f440b82bfac933bc01c94e04e"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "5133ab9bf5d91d377f485e6d5bd5"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 20.064575482s ago: executing program 2 (id=1663): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001100)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan1\x00', 0x10) connect$inet(r0, 0x0, 0x0) 20.005547704s ago: executing program 3 (id=1665): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) clock_gettime(0x9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) bind$x25(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) readv(r0, &(0x7f0000002cc0)=[{&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/1, 0x1}, {&(0x7f0000002c80)=""/31, 0x1f}], 0x3) 19.953192436s ago: executing program 2 (id=1666): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000500)={{0xffffffffffffffff, &(0x7f0000000040)='vxcan\x00', 0x101201, &(0x7f0000000080)={@_ha_fsid={[0x5, 0x2]}, {0x8, 0x1, 0x1, 0x3}}, 0x8, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x5}, 0x4, &(0x7f0000000480)=[{0x2, 0xfff, &(0x7f0000000140)='h\xf7{\'\'/*%[@\x00', &(0x7f0000000180)="8f6df2dfd8aba39e6f217aea2831a7f0a8e28dc04f392051e9ae", 0x1a, 0x20}, {0x3, 0x6, &(0x7f00000001c0)='@]@\x00', &(0x7f0000000200)="19c7b01d", 0x4, 0x20}, {0x1, 0x8, &(0x7f0000000240)='\xd2}\\&/(\x00', &(0x7f0000000280)="04f92b70e90537410aa93d89ce2a9f142a4aeeef410242a5616aad7f5a0a1a8ca3b39b", 0x23}, {0x1, 0x12, &(0x7f0000000340)='vxcan\x00', &(0x7f0000000380)="7b5b722afc2363c82e9c42068b4ce00778355e2c680adc224a547015531362e05c857cf854ea891cb5a885897bd8aa229099db8978bc6484c9de71e8bede7026b4a0f0c44409e91c6165eae3c681632b4076858fd9381ea4b436460901572b2ab32a3ee6f0d2a695bf48e7b480b36f429a398d7a3f5e2e8117eef0929fd9895e23aad0d3d1313fa329024ec6a4e38430a640e62aed89d630ed8470070212b56131baaa61ecb2484c0d7be46416cce528b439a028dfcdb12523ccbef31ea2d1fc52f6063140d8543043aa1db724d2410ed2ace6f7813f7af00f5ad1369a746a8f4c525539c712c1232a1d3c1aa329218bf5", 0xf1, 0x1a}]}) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000580), 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8835}}}}}}]}, 0x48}}, 0x4044001) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000005c0)={0x5, 0x0, 0x1ff, 0x6}, 0x8) (async) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000600)=0x1, 0x4) 19.871044295s ago: executing program 0 (id=1667): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000040)={r0}) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt(r1, 0x0, 0x482, &(0x7f0000000100)="110000007f0000014e2100000000000074776f730000000000000000000000000000000000000000ffffffff", 0x2c) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt(r2, 0x0, 0x487, &(0x7f0000000200)="110000007f0000014e2100000000000074776f730000000000000000000000000000000000000000ffffffff7f0000014e210000000000000100"/68, 0x44) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)=@ll={0x11, 0x2, 0x0, 0x1, 0x40, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="9cc0056a65ab76", 0x7}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="50000000000000001701000080000000d8737c1dcc71733c080d00b13ca31657e5bcbc4a55dc4909b5d2b8e72970066d004c7033d2716d32a66e395ae9d301e869795e2f082fe7f36efcbe12645d19006000000000000000030100000000000096fc2a8829d25f944e96566b9e30b87ae9f4c90ae3287b7581693ee2468013965f7159d644ac2edea6f87c94c1afd01cfbcc93f94bad8237f0bf6e41c91b9ca21d956c0000000000000000"], 0xb0}, 0xc0c5) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000400)="12345678", 0x4, 0x0, &(0x7f0000000500)={0x2, 0x4e21, @local={0x7f, 0x0, 0x0, 0x1}}, 0x10) (async) write(r0, &(0x7f0000000000)="41000200010078", 0x7) 19.80249242s ago: executing program 2 (id=1668): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340000000011400000011"], 0x64}}, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="18db000000000000100100000d000000aa00"/33], 0x30}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002e00fcff400010"], 0x40}}, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000540)={r1, r4, 0x1, 0xdb, &(0x7f00000003c0)="efccf12da2b11b8bddc09401924a4787b677e0ee57ca5294ac1f56153411da2ae04a0bf6af727c0960a79e75e409bd3222da527b1952e12897f04a1600a0ebda1d16b9e14675b10ec4033c10246ed8818a4a88af1a8a44e46512b02d502ac409da4a7b13ede0276128310625baea20e605bab41da1efa8cc22dc0d0cfa996f062deff9295f89cde5621033d8257404e6ec6a2166d36466bf77305b79aa159d87e93161103c7f99b066a77519d77217f06f00b0290e4bfaf904bfd4c9b2e8dbf09d6b03860ae5e5bb90ecc8054e860771411053e15e8698f991104d", 0x6, 0xb, 0x75f2, 0x4, 0x7, 0x0, 0x7, 'syz0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340000000011400000011"], 0x64}}, 0x0) (async) socket$kcm(0x21, 0x2, 0xa) (async) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="18db000000000000100100000d000000aa00"/33], 0x30}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet_tcp(0x2, 0x1, 0x6) (async) close(0x3) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002e00fcff400010"], 0x40}}, 0x0) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000540)={r1, r4, 0x1, 0xdb, &(0x7f00000003c0)="efccf12da2b11b8bddc09401924a4787b677e0ee57ca5294ac1f56153411da2ae04a0bf6af727c0960a79e75e409bd3222da527b1952e12897f04a1600a0ebda1d16b9e14675b10ec4033c10246ed8818a4a88af1a8a44e46512b02d502ac409da4a7b13ede0276128310625baea20e605bab41da1efa8cc22dc0d0cfa996f062deff9295f89cde5621033d8257404e6ec6a2166d36466bf77305b79aa159d87e93161103c7f99b066a77519d77217f06f00b0290e4bfaf904bfd4c9b2e8dbf09d6b03860ae5e5bb90ecc8054e860771411053e15e8698f991104d", 0x6, 0xb, 0x75f2, 0x4, 0x7, 0x0, 0x7, 'syz0\x00'}) (async) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) 19.715622254s ago: executing program 0 (id=1670): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0xe8, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xc0, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x4c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x30000}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3ac}]}, 0x58}, 0x1, 0x0, 0x0, 0x24008041}, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611087000000000063013800000000009500098300000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 19.601482759s ago: executing program 2 (id=1671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000012006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r3, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x5, &(0x7f0000000080)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x2c, r7, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0xc090) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r10 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r10, 0x6a, 0x1, 0x0, &(0x7f0000000640)) r11 = socket(0x11, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r11, &(0x7f0000000180)={0x11, 0x0, r13}, 0x14) sendmsg$can_raw(r10, &(0x7f0000000500)={&(0x7f0000000000)={0x1d, r13}, 0x10, &(0x7f00000004c0)={&(0x7f00000003c0)=@canfd={{0x3, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "fd1cb40502f1c5bf9188a880a96a582ec1385f60dc672cda47aade884e9be8dcc3bf88a6ea32bcf075755ae33292da59c500923f9e96ee0f721e93af7ffcacbe"}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20000880) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r15, @ANYRES16=r14, @ANYBLOB="016b00000000000003006700000008000300", @ANYRES32=r16, @ANYBLOB="0c00990002000000210000000800c400010000000800c3007413"], 0x3c}}, 0x880) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f000500010000000000000001010000000000000f0001006f76732d7302080000000000080002"], 0x30}}, 0x0) 19.549805521s ago: executing program 1 (id=1672): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r2, r2, 0x7, 0x0, 0x0, 0xe, 0x4, 0x8, 0x9, 0x3, 0x2, 0x2, 'syz1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)={0x4c, r4, 0x1, 0x70bd2a, 0x0, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab, 0xfffffffc}}, {0x8, 0xb, 0x60a7}, {0x6, 0x11, 0x2}}]}, 0x4c}}, 0x4004880) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0xffffffff, 0x4) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x4c, 0x12, 0x400, 0x0, 0x40000000, {0x0, 0x2, 0x0, 0xfc, {0x0, 0x0, [], [0x0, 0x0, 0x0, 0x3]}}}, 0x4c}}, 0x24008000) setsockopt$sock_int(r0, 0x1, 0x6e, &(0x7f0000000040)=0xc, 0x4) 19.543271902s ago: executing program 0 (id=1673): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) (async) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r0], 0x38}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 19.453269562s ago: executing program 4 (id=1674): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000a1639e48a1000000000007000000004000"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0x20, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000f0ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x1a, 0xf, &(0x7f0000000440)=@ringbuf, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x1c}, 0x90) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r3, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x438) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in=@dev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@local}}, &(0x7f00000004c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@private1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f00000006c0)=0xe8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60) socket(0x40000000015, 0x805, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r9 = socket(0x15, 0x5, 0x0) r10 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r10, &(0x7f0000000000)="6000000400143340000000000000ea0000c0000000000000ff0000a52af834000000000000000000", 0x28, 0x8000, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, 0x1c) getsockopt(r9, 0x200000000114, 0x2716, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) sendmsg$nl_xfrm(r4, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)=@getpolicy={0x104, 0x15, 0x400, 0x70bd27, 0x25dfdbff, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x4e23, 0x101, 0x4e21, 0x5, 0x2, 0x30, 0x20, 0x3b, r3, r5}, 0x0, 0x1}, [@proto={0x5, 0x19, 0x33}, @policy={0xac, 0x7, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast2, 0x4e24, 0x0, 0x4e20, 0xc8d, 0x2, 0xa0, 0x60, 0x2e, r3, r6}, {0xac, 0x1, 0x6e724125, 0x6, 0x0, 0x7, 0x7f}, {0x6, 0x1af2, 0x6, 0x9d76}, 0x4, 0x6e6bb2, 0x0, 0x0, 0x3}}]}, 0x104}}, 0x4000000) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x2, 0x2, 0x6, 0x81, 0x80000001, 0x4}) 19.362423998s ago: executing program 1 (id=1675): r0 = socket(0x1a, 0xb, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000200265d1a211fd4ef176d53d3f6a47a26912da635bd78ab35a8db132403f71cf3e3f3cb2e91939600311d56e09bb3ae890890f7185b35e3939776813d1584fad2bd62af620ac9b91d7a08127cc24925ccd6e0989265cca84614402facb95b1794aa1c2259"], 0x14}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@gettaction={0x1c, 0x32, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x82}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048005}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x7ffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0xeaa3ef926154ef0f, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8001, 0x2, 0x8, 0x7, 0x10001}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="03002bbd7000fddbdf254400000008000300", @ANYRES32=r10, @ANYBLOB="20007000050006000100000005000600000000000400040004000400040004002c0023800800140000000000080009008346000006000200aa000000060019000900000006000300f400"], 0x68}, 0x1, 0x0, 0x0, 0x4004040}, 0x8000) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x101, 0x62}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x44) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000380)=0x8) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@getaddr={0x14, 0x16, 0x800, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) 19.362208895s ago: executing program 0 (id=1676): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001100)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan1\x00', 0x10) connect$inet(r0, 0x0, 0x0) 19.307648132s ago: executing program 4 (id=1677): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000004000000080000000100000001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00', @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x9}}]}, 0x38}}, 0x4000010) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0xfe33) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001240)={r1, &(0x7f0000000200), &(0x7f0000001200)=@udp6, 0x6}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711053000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) 19.273186691s ago: executing program 1 (id=1678): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="1c0300002e00010003000000fcdbdf250b03f3800c00e5800800da00", @ANYRES32=0x0, @ANYBLOB="5d017f80cc39cb9db042474549524889905886009171313736215baae9fdfd00355318c9977e4535d6b232b37dc0067392db2608b279505c77b74983531f58fce686effe61b609487abb81bc75d4e67ca3e055d72cb435ab6f1639ffd15c57dfcf7a0a6386e7afb30e5a0ce79b72d75913f80bec69229f826d13775d03b15cc5d9882718098ed0675d1935b77f14e53e774732635edbf74182997ee58a1413e08e03a3389678ab2957a52405dabfa582c12516d13e7b20e21bec94abd3cc16f391bb36c846adb1a2dde9e7c38240b38b72f3f4f667a4f434dde0b0aeb0a2f56f7fd8eba140f139432ea7537f6f3f749d8dfca2afb270aebbe449c0fda2131ad1c773103d88ebb282185baceaa3003f43f6993418a06f3f7a0a4a7342638a92486ebfdd5f632e95a74f510d67c3ea24374ce3676f13e058fe6d39426ccf2a0bf4c7e7ebab5b43d4756cbc7775fed402e1e066532afc62323a1bacacdf6200000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc358"], 0x31c}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r1, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r2, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r3, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.209892328s ago: executing program 0 (id=1679): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$alg(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="02000000751acbc37e3f3c975ca42ff9eaca612497c4490d2f6f5c815bfdd938e5474531a3210bcf0d99b96375692e0ce6bfb89eb2a07d3645c05c1adb1ca4688feee47ca8b22b354ccf7cfae7", 0x4d}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) 19.198675245s ago: executing program 1 (id=1680): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x50, r1, 0x1, 0x2, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x34, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xb1}, @device_b, @device_b, @random="5bfc17a59ee6", {0x7, 0xc}, @value=@ver_80211n={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0x35, @val={0x8c, 0x10, {0x6fe, "e838f9c4e117", @short="561c6309be93916a"}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x63586791227cfe5}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x72}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x38, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r0}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 19.182098372s ago: executing program 4 (id=1681): getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r0, 0x700, 0x7, 0x3d, 0x800, {{0x14, 0x4, 0x0, 0x2e, 0x50, 0x64, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010102, @private=0xa010100, {[@timestamp={0x44, 0x24, 0xe2, 0x0, 0x1, [0xe11, 0x7, 0xffffae84, 0x488c, 0x10000, 0x2, 0x1, 0x73a]}, @end, @timestamp={0x44, 0x14, 0xa6, 0x0, 0x0, [0x8, 0xfffff001, 0x6, 0x96]}]}}}}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0xc00) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200008c4}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r7, 0xb0c, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x9ab136c3b1e0c963) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r8, &(0x7f00000009c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000500)={0x44c, 0x3f4, 0x1, 0x70bd25, 0x25dfdbfe, {0x5, 0x1, 0x8, [0x9, 0xffffffff, 0x4, 0x5, 0xffff, 0x3, 0x7, 0x9, 0x7f, 0x9, 0x7f34, 0x8, 0xb734, 0x51c, 0x9, 0xffff, 0xa, 0xff, 0x8, 0xfffffff7, 0xb, 0x1, 0x2, 0x3ff, 0x6, 0x7fff, 0x2, 0x100, 0x5, 0x80000000, 0x400, 0x1, 0x80, 0x6, 0x5, 0x7, 0xd, 0xc, 0x1000000, 0x3, 0x7ff, 0x0, 0x9, 0x6, 0x2, 0x4, 0x6, 0x1, 0xe, 0xfff, 0x1, 0xfffffffc, 0x0, 0x5, 0x80000000, 0x0, 0xffff, 0x8, 0x2, 0x2, 0x6, 0x7, 0x1, 0xa], [0xe, 0x6, 0x4, 0x3, 0x1, 0x0, 0xfffffffe, 0xa34fd26, 0x0, 0x9, 0x9, 0x2, 0xf, 0xb, 0x10000, 0x0, 0x200, 0x3, 0xe, 0x4, 0x3, 0xa4, 0x4, 0x8, 0x0, 0xffff, 0x5, 0x7, 0xc, 0x5, 0x17, 0x8, 0x8, 0x8000, 0xff, 0x2e, 0x1, 0xff, 0x3ff, 0xc, 0x5, 0x2, 0x0, 0xb3ae, 0x8, 0xffff, 0x0, 0xc, 0xc094, 0x7fffffff, 0x3, 0x101, 0x3, 0x5, 0xfffffffd, 0xb5c1, 0xfffffffb, 0x9, 0x101, 0x3, 0x2, 0x2, 0x2, 0xeff9], [0x8, 0x2, 0x3, 0x1, 0x2, 0x7, 0x3, 0x9, 0x964, 0xc08, 0x6, 0x3, 0x2, 0x361b, 0x8, 0x1, 0x1, 0x3, 0x8, 0x3, 0x9, 0x29, 0x4, 0x3, 0x101, 0x7, 0x1, 0x81, 0x7fffffff, 0x3, 0xc, 0x10001, 0x2, 0xffff7fff, 0x4, 0x5, 0x1, 0xfffffff9, 0x31535e5b, 0x5a757ecf, 0x7b9, 0x9, 0x6, 0x8, 0x5, 0x7, 0x0, 0x6, 0xa, 0x2, 0x6, 0x9, 0x6146c8ea, 0x3, 0x6, 0x9, 0x3ff, 0x6, 0x2, 0x800, 0x6, 0x3, 0x9, 0x1], [0x1, 0xa, 0x9, 0x9, 0x8, 0x0, 0x9, 0x5, 0x7ff, 0x6, 0xaa, 0x1, 0x3, 0x6, 0xd4a7, 0x80000001, 0x9, 0x4, 0x6, 0x10, 0x3, 0x4, 0x8, 0xb2, 0x8, 0x949, 0xa8349b32, 0x9, 0x5, 0x80, 0x7, 0x80000001, 0x9, 0x7, 0x7, 0x7, 0x800, 0x0, 0x97, 0x8, 0x3, 0x1, 0x6, 0x3, 0x0, 0xffff, 0x1, 0x80000000, 0xfff, 0x3, 0x1, 0x3, 0x6, 0x0, 0x7fffffff, 0x1000, 0x8000, 0x8285, 0xef9, 0x1, 0x800, 0x1a4, 0xc169, 0x6], 0x2b, ['nl80211\x00', '{/)\x00', 'nl80211\x00', '*,\x00', '![&@\x00', '[$&\x00', ']\\&\\++\x00', 'nbd\x00']}, [""]}, 0x44c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000014) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000c40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)={0x144, r9, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd754}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x677b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0xd5e469495968d7f8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xe}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x10}, 0x8010) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), r4) ioctl$F2FS_IOC_GET_PIN_FILE(r8, 0x8004f50e, &(0x7f0000000cc0)) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0x19, &(0x7f0000000d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1ff}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e00)='syzkaller\x00', 0x7e1a, 0x43, &(0x7f0000000e40)=""/67, 0x41000, 0x4e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000f00)={0x3, 0x7, 0xfffffff8, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[0x1, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000001040)=r11, 0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000001680)={{r2, &(0x7f0000001080)='syztnl0\x00', 0x80100, &(0x7f00000010c0)={@align=0x6, {0x4, 0xc000, 0x3d6, 0x5}}, 0xffff7fff, &(0x7f0000001100)={@_ha_fsid}, &(0x7f0000001140)=0x5}, 0x5, &(0x7f00000015c0)=[{0x1, 0xf9, &(0x7f0000001180)='IPVS\x00', &(0x7f00000011c0)="031164dd2cca7b1ed5a74a9764af103bd00d2987c809c9d85fd64733cd8b33f0e0509316bda0f2b89af7", 0x2a, 0x20}, {0x0, 0x0, &(0x7f0000001200)=']\\&\\++\x00', &(0x7f0000001240)="26ae3bda2392d36a9056b57f0a87b2b5b757b4f48c4a832deb04e6f76dce2407e2ae8dedd3678dfdb588566a4ea5eef3f44c2097ce909b7cd6251a98f049a07b3f73a7f91dd91815a21a7a0621c6fbeed5d0e1d7337fc40c49f209a75b04fd726caf586beee79cf055ea851cbdb27d2cc0057eac76ef4a272b8a70e7bbae803d701558001dce0a446938368ec3ad16a6f8832e88962112f7739b1dc888c1765f0843f29d829f14baa94ef19352be5a78c907b21a5cf1b38bedff2328fcc2f4c2586fdb526a46", 0xc6, 0x18}, {0x2, 0x2, &(0x7f0000001340)='@\x00', &(0x7f0000001380)="0dbf425bd907c7e95594cadda03d8d6c0292cff09323d58b7d148b104616eb943dfc98e55376b713c599a68dd4cd7b24c109eef01afce8c95db8a5dc761a173b009274f261854c1a6016e9b5ae4409f4f94eb6d10da2aad2e7501aca6edb5b0bd0a4e214237d89c06da8646dbf6b53036e7131f4ddd32c65ce50e89c1ad6e05eac60900b2f64bdae20cfa2614f0d0304d2b5686cab", 0x95, 0x20}, {0x3, 0x6, &(0x7f0000001440)='\x00', &(0x7f0000001480)="bc8c87fabce1711a686deeda7cf9b4a9f19f387f648cfa038505c48014156e9e01849c47ecc0f47c1bab6dccbed5d264e1f800701ad17d1e58676943f1844dac58645111acdb0036f458b01008042655e8d756", 0x53, 0x5a}, {0x1, 0x0, &(0x7f0000001500)='{/)\x00', &(0x7f0000001540)="e167b313a3e27cb825c74f95a7d0159dd744fc20e03623e8881bb93d0839f333bb0af39a8a8a05a4b20dbf7acc6a3bccd13e378364da23ebe6c2b99bc5525d34010946aac774e78e0ee076ecb3ec1f7423aab762fe7c770bbf304bc5beb6c122b98feb9a34f8992c1946048a1e4850430150", 0x72, 0x28}]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000017c0)={'sit0\x00', &(0x7f0000001740)={'gre0\x00', r1, 0x40, 0x1, 0x8, 0x1, {{0x14, 0x4, 0x2, 0x6, 0x50, 0x64, 0x0, 0x64, 0x4, 0x0, @multicast1, @loopback, {[@lsrr={0x83, 0x17, 0xf0, [@local, @empty, @dev={0xac, 0x14, 0x14, 0x3b}, @rand_addr=0x64010100, @empty]}, @ssrr={0x89, 0x23, 0x53, [@rand_addr=0x64010102, @remote, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2, @empty, @private=0xa010100]}]}}}}}) sendmsg$nl_route_sched(r12, &(0x7f0000001980)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001940)={&(0x7f0000001800)=@newqdisc={0x140, 0x24, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0xffe0, 0x3}, {0xfff1, 0xc}, {0x8}}, [@TCA_STAB={0xf8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xad, 0x57, 0x9, 0x6, 0x2, 0x8, 0x5, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x6, 0x0, 0x8, 0x401, 0x0, 0x7, 0x16, 0x5}}, {0xe, 0x2, [0x3, 0x1, 0x0, 0xbf98, 0x1]}}, {{0x1c, 0x1, {0xe4, 0xf, 0x81, 0x9, 0x0, 0x6, 0x4, 0x5}}, {0xe, 0x2, [0x55, 0xe, 0xa, 0x2f43, 0x7ff]}}, {{0x1c, 0x1, {0x80, 0x84, 0x28, 0xe247, 0x1, 0x7, 0x80000001, 0x8}}, {0x14, 0x2, [0x7, 0x7f, 0x3b86, 0xc, 0x2, 0x7, 0x9, 0xc]}}, {{0x1c, 0x1, {0x4, 0xb, 0x2, 0x8, 0x1, 0x80000001, 0xd, 0x2}}, {0x8, 0x2, [0x6ae0, 0x0]}}, {{0x1c, 0x1, {0x9, 0x1, 0x0, 0x3, 0x1, 0x8be2e48, 0x3, 0x1}}, {0x6, 0x2, [0x7f]}}]}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x8, 0x0, 0x7, 0x3}}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x400c8d0}, 0x4000) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r14, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x48, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5e}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xe921}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x10}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001b40), r12) sendmsg$IPVS_CMD_DEL_DAEMON(r12, &(0x7f0000001d40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b80)={0x15c, r15, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x9c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x15c}}, 0x20000000) openat$tun(0xffffffffffffff9c, &(0x7f0000001d80), 0x2000, 0x0) ioctl$sock_SIOCGPGRP(r14, 0x8904, &(0x7f0000001e00)=0x0) sendmsg$nl_generic(r12, &(0x7f00000020c0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x10100000}, 0xc, &(0x7f0000002080)={&(0x7f0000001e40)={0x224, 0x31, 0x300, 0x70bd2d, 0x25dfdbfc, {0x1d}, [@typed={0x8, 0xd1, 0x0, 0x0, @uid}, @generic="bc39ea9019f7", @generic="d0e3c28272b958e89aa832cf4fd943a856abe787b9dc771da3988d16bae5cd9a612695b16a1365b08748f3f2e727c22d015aefd059a2c0e5b037589e10c97405e835c288d7aac44508b81a62928ad94503caf98ac49fff288967df76a73cfeab16969082e87e3bfd2f6e7ad3e8bfbb3371b12fa6ff6eeca61994bfe6b483af106174e3ab66490125a6a554c2450e8ee02defd8106a670076e930cd976c5456121c3bc85dab66453ad8", @nested={0xa4, 0x163, 0x0, 0x1, [@typed={0x14, 0x109, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @typed={0xc, 0xd2, 0x0, 0x0, @u64=0x3400000000000}, @typed={0x6b, 0x6, 0x0, 0x0, @binary="382134a3323b91102560903b47675a279fd3a2a280d0d7b52e531854398c4f35dba5003be4f7426fcbc67dcb3aedbbda397ec795a51150c9f31c1525900bb0ca0ee950f7f62da392a4ade1ab2d3d0eacc6afcd8b3a7d8f0e6f36a14f2f86c84899812463e9d5c8"}, @typed={0x8, 0xeb, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x162, 0x0, 0x0, @u32=0x3}, @nested={0x4, 0x5d}]}, @generic="55c4b15e790f6522fab7", @typed={0x8, 0x142, 0x0, 0x0, @pid=r16}, @nested={0xa0, 0x29, 0x0, 0x1, [@typed={0x14, 0xd2, 0x0, 0x0, @ipv6=@local}, @generic="0c60347c69385d1ad2dcd1907146d25d740447f519a132f75644c0542fbb0cd9798b9b001a3b70acd156c068f80c165282a875fb4c19ea00571bf50a250d02b03957a46526d17c3981007b2ab3209d616da716557652096228c34086bcf9f05d54c099585d042de893baa03c55d5129b6abdc32adaf54496aafe8b1fad729b6e12462561", @typed={0x4, 0x71}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x22040091}, 0x4010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r14, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x20022001}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x50, r10, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x10000}, 0x40) 19.057491571s ago: executing program 4 (id=1682): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000aaaaaaaa0000140012800b00010065727370616e0000040002809836396aa2fe02000a600d1f76500afc5534d1f5182817b0da3ce86a3881e4a867f3e763a6eb49919ce14ed84f0f41f5fda3812ce0061cbca654bf3afe6b4b45c869b202b0d99d0309fcc230262814e88c9cc7525f65561708"], 0x40}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x15, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x7ffffffc}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x10040) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffa888, 0x3}]}}}}}}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@broadcast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x1010000, 0x100}}}}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0xe, 0x0, &(0x7f0000000140)="eb00000000000010000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 19.05664496s ago: executing program 0 (id=1683): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000c00), r0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) (async) ioctl$sock_bt_hci(r2, 0x400448cc, &(0x7f0000000000)="3b97") ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000000)) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0xc8c1}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r5, @ANYBLOB="00012cbd7000fddbdf251d0000000c000600020000000000000064002f800c0002000202aaaaaaaaaaaa080001000180000020000380080001000000000008000400000100000c000500770000000000000008000100400000000c0002000200aaaaaaaaaaaa0c0002000200aaaaaaaaaaaa0c00020000000000000000000c00060002000000000000000c00060001000000010000000c000600030000000000000008000300", @ANYRES32=r6, @ANYBLOB="c4f4140ef38f90ba4c5735845d4e2c04fbe9d8d6908105da0fd6b2916b34c60a44fb38c28e4758c21e4b91f16a0b440fec97ec34a59cdfac158a9e13e07389bdae03b546188b436f53c7e7965309df7f3b63fb50dfe958a1c588fc9a48c9a2343be8850d068d365b21bd09332d03c809bedff9034e71f84d07da4bfd75fcbd1c73047af1f8a15790cc"], 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x54, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) setsockopt$inet_int(r3, 0x0, 0x1, 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000002060101000000000000000000000003050005000a0000000900020073797a30000000000500010007000000cec9ea03d32153d60ddb22d4e39200595e246bb42fcb5883202d3dccfb5fb26c7c9d3ac543f63ea30b51aa1351a3f2e5e1f8cced977288ca77a2d2febee6c4b632092f543c16"], 0x30}}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0x2002}, 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000070000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r10, 0x89e3, &(0x7f0000000140)={0x6a, 0x3, 0x8, 0xc, 0x8}) (async) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) 19.044097597s ago: executing program 3 (id=1684): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) write$nci(r2, &(0x7f00000000c0)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x1, 0x2, 0x5, 0x6}, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x228, 0x16, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x74, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10d}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c04}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x184, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2f}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x27}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1ff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'pim6reg\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x68}]}]}], {0x14}}, 0x298}}, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r4}, 0x8) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000440)={{r2}, "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"}) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) (async) write$nci(r2, &(0x7f00000000c0)=@NCI_OP_CORE_CONN_CLOSE_RSP={0x0, 0x1, 0x2, 0x5, 0x6}, 0x4) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x228, 0x16, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0x74, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10d}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c04}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x184, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2f}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x27}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1ff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'pim6reg\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x68}]}]}], {0x14}}, 0x298}}, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r4}, 0x8) (async) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000140)={0x0, 0x1, 0x6, @remote}, 0x10) (async) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000440)={{r2}, "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"}) (async) 18.995886796s ago: executing program 1 (id=1685): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1650c2, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1650c2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x112}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(0x3) 18.894872787s ago: executing program 4 (id=1686): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, 0x0, 0x8) write$cgroup_devices(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="02002a3a2a207200"], 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x3}]}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) (async) write$cgroup_devices(r2, 0x0, 0x8) (async) write$cgroup_devices(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="02002a3a2a207200"], 0x8) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x3}]}]}, 0x28}}, 0x0) (async) 18.784760451s ago: executing program 3 (id=1687): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000010101020000000000000000020000090800074000000000140019ae080001"], 0x30}, 0x1, 0x0, 0x0, 0x2406c414}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c00"], 0x78}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000085000000d000000095"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000001580)="e0856497d56cf0f21a0000000010", 0x0, 0x20000700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) accept4$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10, 0x100400) mmap(&(0x7f000012a000/0x1000)=nil, 0x1000, 0x800009, 0x28012, r4, 0x80089000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xcb}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) mmap(&(0x7f00003fc000/0x4000)=nil, 0x4000, 0x3, 0x100010, r5, 0x4df34000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r7, 0xc0205866, &(0x7f0000000c00)={&(0x7f0000000380)=0xff, 0x42, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000bc0)}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000080)={@mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x5, 0x6, 0x0, 0x0, 0x5, 0x8602008e, r8}) mmap(&(0x7f000040b000/0x2000)=nil, 0x2000, 0x1000002, 0x30, r4, 0x0) mmap(&(0x7f00001c4000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 18.737676836s ago: executing program 1 (id=1688): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x28, 0x0, 0x0, 0xc0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {{0x1000, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0xffff}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_newvlan={0x18, 0x70, 0x1, 0x0, 0x25dfdbfe}, 0x18}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010000000000feffffffe0000002000000000000000000000000e00000010000000000000000000000004e20000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000010000ca486500000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x4840}, 0x24000080) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x80000000}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x80}]}, 0x50}}, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x2, 0x4, 0x0, 0x1, {0xa, 0x4e21, 0xbd54, @private2, 0x2}}}, 0x3a) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) (async) syz_emit_ethernet(0x36, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x28, 0x0, 0x0, 0xc0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {{0x1000, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0xffff}}}}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_newvlan={0x18, 0x70, 0x1, 0x0, 0x25dfdbfe}, 0x18}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010000000000feffffffe0000002000000000000000000000000e00000010000000000000000000000004e20000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000010000ca486500000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x4840}, 0x24000080) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x80000000}]}, 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x80}]}, 0x50}}, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x2, 0x4, 0x0, 0x1, {0xa, 0x4e21, 0xbd54, @private2, 0x2}}}, 0x3a) (async) 18.665619068s ago: executing program 2 (id=1689): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001100)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan1\x00', 0x10) connect$inet(r0, &(0x7f0000001200)={0x2, 0x4e1e, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (fail_nth: 1) 18.342042711s ago: executing program 2 (id=1690): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="4c8220882daa92108fdfd5b7ca161441f10dc55ec225fe0efaa7f5b96b69c66ae2effcd46309475afa1123d10505787881e0ad89c475dc49a4b9231c00848a79d7ec0933374a2aaa410e4a0b5ea04ccefe48d4553bfc4083692fe684c0aafb6da7cfd3dd253dc54e", @ANYRES16=r1, @ANYBLOB="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"], 0x34c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="4c8220882daa92108fdfd5b7ca161441f10dc55ec225fe0efaa7f5b96b69c66ae2effcd46309475afa1123d10505787881e0ad89c475dc49a4b9231c00848a79d7ec0933374a2aaa410e4a0b5ea04ccefe48d4553bfc4083692fe684c0aafb6da7cfd3dd253dc54e", @ANYRES16=r1, @ANYBLOB="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"], 0x34c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x4c}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x4000080) (async) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x4000080) sendmsg$IPSET_CMD_PROTOCOL(r2, 0x0, 0x4010) ioctl$OCFS2_IOC_MOVE_EXT(0xffffffffffffffff, 0x40406f06, 0x0) (async) ioctl$OCFS2_IOC_MOVE_EXT(0xffffffffffffffff, 0x40406f06, 0x0) accept$packet(r2, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r5) sendmsg$NFC_CMD_DISABLE_SE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010228bd7000fbdbdf251200000008000100", @ANYRES32=0x0, @ANYBLOB="0800150001000000080801", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x400c800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40"], 0xa8}}, 0x8000) socket$inet(0x2, 0x3, 0x2) (async) socket$inet(0x2, 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x2, 0xa, 0x2) (async) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (async) write$tun(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x800) 15.606388362s ago: executing program 3 (id=1691): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000006300004"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='lp', 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000006300004"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='lp', 0x2) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) (async) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) (async) socket$inet6(0xa, 0x2, 0x0) (async) 15.395345467s ago: executing program 3 (id=1692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x1, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x13, 0x3, 0xca, {0x0, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002640)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xc}, {}, {0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0x1}, {0x6000, 0x0, 0x4, 0x2, 0x1, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5, 0x7, 0x6}, {{0x1, 0x1, 0x1}, {0x1fffffff}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) close(r0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a0000000900020073797a3000000000050004000000000005000100060000000c00078008001240fffffffd14000300686173683a69702c706f72742c6970"], 0x58}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 15.24253813s ago: executing program 3 (id=1693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a010400000000000000000a0000010900010073797a3100000000ac0004802000018007000100637400001400028008000240000000150800014000000009540001800a00010072656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002400000000f08000340000000ad444bc6c7d990f3f0e561303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a32000000000900010073797a3100"], 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x24004804) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000dc0), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x4c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4081}, 0x200040c4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000880)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0x2b4, r5, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1c1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x310a46d4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1a}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xb2c0}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xf32}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_SEC_DEVKEY={0x70, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x6c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x60, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0xe8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xad1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x74, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x51a7}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0xe0, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x200}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401000000000000000000280002"], 0x38}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_CT_KEY={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf4}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000203010100000000000000000200000008000100010000020900020000000000353027241dc7341a6380018bd49be820fbfe3d8c"], 0x38}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r10, &(0x7f0000000200)="11223344", 0x4, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) 3.213658716s ago: executing program 32 (id=1683): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000c00), r0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) (async) ioctl$sock_bt_hci(r2, 0x400448cc, &(0x7f0000000000)="3b97") ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000000)) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0xc8c1}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r5, @ANYBLOB="00012cbd7000fddbdf251d0000000c000600020000000000000064002f800c0002000202aaaaaaaaaaaa080001000180000020000380080001000000000008000400000100000c000500770000000000000008000100400000000c0002000200aaaaaaaaaaaa0c0002000200aaaaaaaaaaaa0c00020000000000000000000c00060002000000000000000c00060001000000010000000c000600030000000000000008000300", @ANYRES32=r6, @ANYBLOB="c4f4140ef38f90ba4c5735845d4e2c04fbe9d8d6908105da0fd6b2916b34c60a44fb38c28e4758c21e4b91f16a0b440fec97ec34a59cdfac158a9e13e07389bdae03b546188b436f53c7e7965309df7f3b63fb50dfe958a1c588fc9a48c9a2343be8850d068d365b21bd09332d03c809bedff9034e71f84d07da4bfd75fcbd1c73047af1f8a15790cc"], 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x54, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) setsockopt$inet_int(r3, 0x0, 0x1, 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000002060101000000000000000000000003050005000a0000000900020073797a30000000000500010007000000cec9ea03d32153d60ddb22d4e39200595e246bb42fcb5883202d3dccfb5fb26c7c9d3ac543f63ea30b51aa1351a3f2e5e1f8cced977288ca77a2d2febee6c4b632092f543c16"], 0x30}}, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0x2002}, 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000070000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) ioctl$SIOCX25SFACILITIES(r10, 0x89e3, &(0x7f0000000140)={0x6a, 0x3, 0x8, 0xc, 0x8}) (async) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) 3.176383961s ago: executing program 33 (id=1688): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x28, 0x0, 0x0, 0xc0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {{0x1000, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0xffff}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_newvlan={0x18, 0x70, 0x1, 0x0, 0x25dfdbfe}, 0x18}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010000000000feffffffe0000002000000000000000000000000e00000010000000000000000000000004e20000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000010000ca486500000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x4840}, 0x24000080) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x80000000}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x80}]}, 0x50}}, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x2, 0x4, 0x0, 0x1, {0xa, 0x4e21, 0xbd54, @private2, 0x2}}}, 0x3a) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) (async) syz_emit_ethernet(0x36, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x28, 0x0, 0x0, 0xc0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {{0x1000, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, 0xffff}}}}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_newvlan={0x18, 0x70, 0x1, 0x0, 0x25dfdbfe}, 0x18}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010000000000feffffffe0000002000000000000000000000000e00000010000000000000000000000004e20000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000010000ca486500000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x4840}, 0x24000080) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x80000000}]}, 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x80}]}, 0x50}}, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x2, 0x4, 0x0, 0x1, {0xa, 0x4e21, 0xbd54, @private2, 0x2}}}, 0x3a) (async) 3.131378739s ago: executing program 34 (id=1690): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="4c8220882daa92108fdfd5b7ca161441f10dc55ec225fe0efaa7f5b96b69c66ae2effcd46309475afa1123d10505787881e0ad89c475dc49a4b9231c00848a79d7ec0933374a2aaa410e4a0b5ea04ccefe48d4553bfc4083692fe684c0aafb6da7cfd3dd253dc54e", @ANYRES16=r1, @ANYBLOB="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"], 0x34c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="4c8220882daa92108fdfd5b7ca161441f10dc55ec225fe0efaa7f5b96b69c66ae2effcd46309475afa1123d10505787881e0ad89c475dc49a4b9231c00848a79d7ec0933374a2aaa410e4a0b5ea04ccefe48d4553bfc4083692fe684c0aafb6da7cfd3dd253dc54e", @ANYRES16=r1, @ANYBLOB="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"], 0x34c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x4c}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x4000080) (async) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x4000080) sendmsg$IPSET_CMD_PROTOCOL(r2, 0x0, 0x4010) ioctl$OCFS2_IOC_MOVE_EXT(0xffffffffffffffff, 0x40406f06, 0x0) (async) ioctl$OCFS2_IOC_MOVE_EXT(0xffffffffffffffff, 0x40406f06, 0x0) accept$packet(r2, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r5) sendmsg$NFC_CMD_DISABLE_SE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010228bd7000fbdbdf251200000008000100", @ANYRES32=0x0, @ANYBLOB="0800150001000000080801", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x400c800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40"], 0xa8}}, 0x8000) socket$inet(0x2, 0x3, 0x2) (async) socket$inet(0x2, 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x2, 0xa, 0x2) (async) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (async) write$tun(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x800) 3.076794138s ago: executing program 35 (id=1686): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, 0x0, 0x8) write$cgroup_devices(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="02002a3a2a207200"], 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x3}]}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) (async) write$cgroup_devices(r2, 0x0, 0x8) (async) write$cgroup_devices(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="02002a3a2a207200"], 0x8) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x3}]}]}, 0x28}}, 0x0) (async) 0s ago: executing program 36 (id=1693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a010400000000000000000a0000010900010073797a3100000000ac0004802000018007000100637400001400028008000240000000150800014000000009540001800a00010072656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002400000000f08000340000000ad444bc6c7d990f3f0e561303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a32000000000900010073797a3100"], 0x100}, 0x1, 0x0, 0x0, 0x8001}, 0x24004804) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000dc0), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x4c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4081}, 0x200040c4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000880)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000580)={0x2b4, r5, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1c1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x310a46d4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1a}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xb2c0}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xf32}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_SEC_DEVKEY={0x70, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x6c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x60, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0xe8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xad1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x74, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x51a7}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0xe0, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x200}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}]}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401000000000000000000280002"], 0x38}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_CT_KEY={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf4}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000203010100000000000000000200000008000100010000020900020000000000353027241dc7341a6380018bd49be820fbfe3d8c"], 0x38}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r10, &(0x7f0000000200)="11223344", 0x4, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) kernel console output (not intermixed with test programs): laved [ 128.206957][ T7427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.440'. [ 128.290000][ T7438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.440'. [ 128.300605][ T7437] bond0: Error: CAN devices cannot be enslaved [ 128.570149][ T7460] netlink: 'syz.4.449': attribute type 1 has an invalid length. [ 128.620081][ T7462] netlink: NAT attribute has 5 unknown bytes [ 128.620116][ T7462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.697946][ T7461] bond1: (slave gretap2): making interface the new active one [ 128.698987][ T7461] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 129.024001][ T7479] netlink: 72 bytes leftover after parsing attributes in process `syz.4.452'. [ 129.347475][ T7495] netlink: 'syz.4.455': attribute type 1 has an invalid length. [ 129.347671][ T7495] block nbd296: server does not support multiple connections per device. [ 129.348123][ T7495] block nbd296: shutting down sockets [ 129.524119][ T7508] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 129.574909][ T7509] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 129.738808][ T7516] netlink: 3 bytes leftover after parsing attributes in process `syz.1.459'. [ 130.223525][ T5279] veth1_vlan: left promiscuous mode [ 130.953505][ T7567] ipt_rpfilter: unknown options [ 130.954477][ T7567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.473'. [ 131.035044][ T7571] veth2: entered promiscuous mode [ 131.035070][ T7571] veth2: entered allmulticast mode [ 131.140334][ T7573] netlink: 'syz.4.474': attribute type 1 has an invalid length. [ 131.182688][ T7578] Bluetooth: MGMT ver 1.23 [ 131.240956][ T7573] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.418438][ T7572] bond2: (slave veth3): Enslaving as an active interface with a down link [ 131.463905][ T7573] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 131.491657][ T7594] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 131.511670][ T7594] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 131.523958][ T7573] bond2: (slave batadv1): making interface the new active one [ 131.532211][ T7594] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 131.566035][ T7594] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 131.584757][ T7594] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 131.589844][ T7573] batadv1: entered promiscuous mode [ 131.590356][ T7573] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 131.616738][ T7594] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 131.632119][ T7593] netlink: 'syz.1.480': attribute type 4 has an invalid length. [ 131.646041][ T7594] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 131.664052][ T7594] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 131.672403][ T7594] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 131.700607][ T7594] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 132.835763][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.835826][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.938979][ T7651] __nla_validate_parse: 1 callbacks suppressed [ 132.938994][ T7651] netlink: 72 bytes leftover after parsing attributes in process `syz.0.495'. [ 132.939004][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.495'. [ 132.939013][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.495'. [ 132.983775][ T7651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.495'. [ 133.146374][ T7654] netlink: 240 bytes leftover after parsing attributes in process `syz.0.495'. [ 134.754892][ T1730] block nbd0: Possible stuck request ffff888026ffe000: control (read@0,4096B). Runtime 30 seconds [ 135.435734][ T7625] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 135.453484][ T7632] netlink: 'syz.4.490': attribute type 2 has an invalid length. [ 135.662214][ T7665] netlink: 'syz.1.499': attribute type 1 has an invalid length. [ 135.662237][ T7665] netlink: 84 bytes leftover after parsing attributes in process `syz.1.499'. [ 135.662255][ T7665] netlink: 'syz.1.499': attribute type 2 has an invalid length. [ 135.662269][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.499'. [ 135.752590][ T7668] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.498'. [ 136.199623][ T7694] netlink: 'syz.0.506': attribute type 1 has an invalid length. [ 136.386194][ T7712] vxcan0: tx address claim with dest, not broadcast [ 136.883643][ T7740] sctp: Trying to GSO but underlying device doesn't support it. [ 136.896970][ T7738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.520'. [ 136.939874][ T7742] netlink: 20 bytes leftover after parsing attributes in process `syz.4.522'. [ 137.224115][ T7755] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 137.230231][ T7755] netlink: 'syz.1.526': attribute type 8 has an invalid length. [ 137.246164][ T7753] bond3: entered promiscuous mode [ 137.246386][ T7753] bond3: entered allmulticast mode [ 137.250562][ T7753] 8021q: adding VLAN 0 to HW filter on device bond3 [ 138.071431][ T7800] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.115763][ T7791] __nla_validate_parse: 7 callbacks suppressed [ 138.115784][ T7791] netlink: 236 bytes leftover after parsing attributes in process `syz.2.535'. [ 138.188387][ T7791] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 138.225583][ T7791] bond2 (unregistering): Released all slaves [ 138.631740][ T7824] veth1_to_team: entered promiscuous mode [ 138.796217][ T7829] macvtap2: entered promiscuous mode [ 138.796243][ T7829] hsr0: entered promiscuous mode [ 138.796825][ T7829] macvtap2: entered allmulticast mode [ 138.796842][ T7829] hsr0: entered allmulticast mode [ 138.796856][ T7829] hsr_slave_0: entered allmulticast mode [ 138.796872][ T7829] hsr_slave_1: entered allmulticast mode [ 138.797388][ T7839] netlink: 'syz.2.543': attribute type 10 has an invalid length. [ 138.899872][ T7839] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 139.065542][ T7852] netlink: 'syz.3.550': attribute type 1 has an invalid length. [ 139.147989][ T7852] veth5: entered allmulticast mode [ 139.152309][ T7852] bond3: (slave veth5): Enslaving as an active interface with a down link [ 139.167254][ T7856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.552'. [ 139.167276][ T7856] netlink: 13 bytes leftover after parsing attributes in process `syz.1.552'. [ 139.209792][ T7856] veth7: entered promiscuous mode [ 139.306758][ T7852] bond3: (slave veth0_to_bond): making interface the new active one [ 139.308072][ T7852] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 139.630814][ T7877] netlink: 'syz.2.557': attribute type 7 has an invalid length. [ 139.630836][ T7877] netlink: 140 bytes leftover after parsing attributes in process `syz.2.557'. [ 140.268191][ T7906] syzkaller0: entered promiscuous mode [ 140.268215][ T7906] syzkaller0: entered allmulticast mode [ 140.565640][ T7919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.569'. [ 140.753839][ T7928] netlink: 'syz.0.572': attribute type 10 has an invalid length. [ 140.790999][ T7928] team0: Device veth0_macvtap failed to register rx_handler [ 140.828768][ T7925] bond0: entered allmulticast mode [ 140.828794][ T7925] bond_slave_0: entered allmulticast mode [ 140.828814][ T7925] bond_slave_1: entered allmulticast mode [ 140.828830][ T7925] veth0_to_bond: entered allmulticast mode [ 140.976627][ T7932] netlink: 'syz.0.576': attribute type 1 has an invalid length. [ 141.102318][ T7936] tap0: tun_chr_ioctl cmd 1074025672 [ 141.102342][ T7936] tap0: ignored: set checksum disabled [ 141.459585][ T7968] xt_esp: unknown flags DD [ 141.459737][ T7968] xt_esp: unknown flags DD [ 141.459869][ T7968] xt_esp: unknown flags DD [ 141.459982][ T7968] xt_esp: unknown flags DD [ 141.460138][ T7968] xt_esp: unknown flags DD [ 141.460253][ T7968] xt_esp: unknown flags DD [ 141.460366][ T7968] xt_esp: unknown flags DD [ 141.460479][ T7968] xt_esp: unknown flags DD [ 141.460594][ T7968] xt_esp: unknown flags DD [ 141.460711][ T7968] xt_esp: unknown flags DD [ 142.122553][ T7992] ip6gretap0: entered promiscuous mode [ 142.149290][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 142.149316][ T7999] netlink: 'syz.3.592': attribute type 5 has an invalid length. [ 142.149327][ T7999] netlink: 20 bytes leftover after parsing attributes in process `syz.3.592'. [ 142.173855][ T7999] netlink: 'syz.3.592': attribute type 29 has an invalid length. [ 142.175548][ T7999] netlink: 'syz.3.592': attribute type 29 has an invalid length. [ 142.397455][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.596'. [ 142.397480][ T8008] netlink: 'syz.3.596': attribute type 10 has an invalid length. [ 142.397491][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.596'. [ 142.477243][ T8010] ip_tables: iptables: counters copy to user failed while replacing table [ 142.776940][ T59] batadv1: left promiscuous mode [ 143.009481][ T8031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.599'. [ 143.011410][ T8031] openvswitch: netlink: Flow key attr not present in new flow. [ 144.332155][ T7961] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.582232][ T8055] __nla_validate_parse: 1 callbacks suppressed [ 144.582254][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz.2.600'. [ 144.626028][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.605'. [ 144.628428][ T8061] openvswitch: netlink: Flow actions attr not present in new flow. [ 144.628835][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.605'. [ 144.675287][ T8067] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 144.700017][ T8066] erspan0: entered allmulticast mode [ 144.918093][ T8082] netlink: 100 bytes leftover after parsing attributes in process `syz.3.606'. [ 144.930366][ T8077] netlink: 'syz.4.608': attribute type 33 has an invalid length. [ 145.046855][ T8078] bond4 (unregistering): Released all slaves [ 145.305873][ T8095] netlink: 165 bytes leftover after parsing attributes in process `syz.4.610'. [ 145.307913][ T8095] netlink: 'syz.4.610': attribute type 2 has an invalid length. [ 145.307950][ T8095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.610'. [ 145.325399][ T8098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'. [ 145.325463][ T8098] netlink: 2 bytes leftover after parsing attributes in process `syz.2.612'. [ 145.958549][ T8120] veth0_macvtap: entered allmulticast mode [ 145.958701][ T8120] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 146.264954][ T8145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.619'. [ 146.295841][ T8144] netlink: 'syz.4.622': attribute type 4 has an invalid length. [ 146.295865][ T8144] netlink: 152 bytes leftover after parsing attributes in process `syz.4.622'. [ 146.340686][ T8144] .`: renamed from bond0 (while UP) [ 146.553506][ T8150] xt_hashlimit: size too large, truncated to 1048576 [ 146.641384][ T8153] xt_hashlimit: size too large, truncated to 1048576 [ 146.753961][ T8155] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 146.756882][ T8155] bond4 (unregistering): Released all slaves [ 146.786823][ T8168] block nbd2: server does not support multiple connections per device. [ 146.789676][ T8168] block nbd2: shutting down sockets [ 146.904262][ T8161] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 146.925376][ T8161] bond4 (unregistering): Released all slaves [ 147.335355][ T8189] openvswitch: netlink: IPv4 tunnel dst address is zero [ 147.335388][ T8189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.507384][ T8195] veth0: entered promiscuous mode [ 147.768100][ T8198] syzkaller1: entered promiscuous mode [ 147.768136][ T8198] syzkaller1: entered allmulticast mode [ 148.007687][ T8194] veth0: left promiscuous mode [ 148.183273][ T8216] netlink: 'syz.1.635': attribute type 19 has an invalid length. [ 148.231369][ T8216] netlink: 'syz.1.635': attribute type 19 has an invalid length. [ 149.731362][ T8257] Bluetooth: hci0: unsupported parameter 5135 [ 149.731386][ T8257] Bluetooth: hci0: unsupported parameter 8192 [ 149.731403][ T8257] Bluetooth: hci0: unsupported parameter 5135 [ 149.731415][ T8257] Bluetooth: hci0: unsupported parameter 8192 [ 149.884751][ T8259] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 150.071618][ T8267] ip_tables: iptables: counters copy to user failed while replacing table [ 150.152408][ T8272] netdevsim netdevsim4 : renamed from netdevsim0 [ 150.386531][ T31] audit: type=1800 audit(1791030843.306:4): pid=8284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.655" name="memory.events" dev="tmpfs" ino=663 res=0 errno=0 [ 150.486678][ T8277] netlink: Failed to add nicvf0 helper -22 [ 150.486733][ T8277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.987418][ T8316] __nla_validate_parse: 4 callbacks suppressed [ 150.987438][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.662'. [ 151.384897][ T8342] netlink: 'syz.0.669': attribute type 1 has an invalid length. [ 151.467183][ T8342] bond3: entered promiscuous mode [ 151.467673][ T8342] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.557927][ T8357] netlink: 36 bytes leftover after parsing attributes in process `syz.3.673'. [ 152.298142][ T8387] netlink: 'syz.1.681': attribute type 10 has an invalid length. [ 152.592347][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.660'. [ 153.006346][ T1485] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 153.024224][ T1485] bond0: (slave veth0_to_bond): link status definitely down, disabling slave [ 153.030695][ T8389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.066056][ T8389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.109074][ T8391] tipc: Enabling of bearer rejected, failed to enable media [ 153.249153][ T8396] x_tables: duplicate underflow at hook 2 [ 153.724682][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.691'. [ 153.761585][ T8420] 8021q: VLANs not supported on sit0 [ 153.906538][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.692'. [ 153.934750][ T8430] ip_tables: iptables: counters copy to user failed while replacing table [ 154.473674][ T8450] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 154.789109][ T8469] netlink: 88 bytes leftover after parsing attributes in process `syz.0.703'. [ 154.972434][ T8472] xt_TPROXY: Can be used only with -p tcp or -p udp [ 155.356537][ T8493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.708'. [ 155.583722][ T8505] netlink: 'syz.3.712': attribute type 2 has an invalid length. [ 155.630236][ T8505] : entered promiscuous mode [ 155.712040][ T8511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.715'. [ 155.731455][ T8511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.824903][ T8513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.880731][ T8519] netlink: 'syz.4.716': attribute type 33 has an invalid length. [ 155.921187][ T8513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.030632][ T8525] netlink: 44 bytes leftover after parsing attributes in process `syz.2.719'. [ 156.984046][ T8575] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 157.068492][ T8581] netlink: 244 bytes leftover after parsing attributes in process `syz.0.738'. [ 157.154302][ T8583] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 157.154506][ T8583] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 157.403534][ T8592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.743'. [ 157.446515][ T8592] bond0: (slave bond_slave_0): Releasing backup interface [ 157.507880][ T8592] bond_slave_0: entered promiscuous mode [ 157.507904][ T8592] bond_slave_0: entered allmulticast mode [ 158.073364][ T8633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.077430][ T8632] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.132156][ T8636] netlink: 'syz.4.754': attribute type 21 has an invalid length. [ 158.132180][ T8636] IPv6: NLM_F_CREATE should be specified when creating new route [ 158.238259][ T8628] syz.2.751 (8628) used greatest stack depth: 18088 bytes left [ 158.342960][ T8643] netlink: 'syz.3.755': attribute type 4 has an invalid length. [ 158.620055][ T8654] netlink: 'syz.0.757': attribute type 21 has an invalid length. [ 158.703041][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.758'. [ 158.722441][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.758'. [ 159.068572][ T8681] Bluetooth: hci0: unsupported parameter 5135 [ 159.068595][ T8681] Bluetooth: hci0: unsupported parameter 8192 [ 159.068608][ T8681] Bluetooth: hci0: unsupported parameter 5135 [ 159.068621][ T8681] Bluetooth: hci0: unsupported parameter 8192 [ 159.627996][ T8711] netlink: 104 bytes leftover after parsing attributes in process `syz.1.769'. [ 159.654171][ T8712] netlink: 104 bytes leftover after parsing attributes in process `syz.1.769'. [ 159.689284][ T8716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.767'. [ 159.905181][ T8728] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 160.052067][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.772'. [ 160.052096][ T8732] block nbd2: Unsupported socket: should be TCP or UNIX. [ 160.445180][ T8750] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 160.567825][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'. [ 160.567862][ T8751] netlink: 'syz.0.777': attribute type 1 has an invalid length. [ 160.568119][ T8751] netlink: 'syz.0.777': attribute type 1 has an invalid length. [ 160.662268][ T8759] v: renamed from veth0_vlan (while UP) [ 161.708479][ T8793] __nla_validate_parse: 3 callbacks suppressed [ 161.708500][ T8793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.785'. [ 161.928758][ T8793] : renamed from bond_slave_0 (while UP) [ 162.285866][ T8820] Bluetooth: hci0: unsupported parameter 5135 [ 162.285892][ T8820] Bluetooth: hci0: unsupported parameter 8192 [ 162.285906][ T8820] Bluetooth: hci0: unsupported parameter 5135 [ 162.285920][ T8820] Bluetooth: hci0: unsupported parameter 8192 [ 162.432890][ T5622] Bluetooth: hci4: command 0x0405 tx timeout [ 162.606048][ T8839] PKCS7: Unknown OID: [4] (bad) [ 162.606068][ T8839] PKCS7: Only support pkcs7_signedData type [ 162.987057][ T8856] netlink: 132 bytes leftover after parsing attributes in process `syz.4.791'. [ 163.041515][ T8856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.791'. [ 163.175598][ T8856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.791'. [ 163.421191][ T8872] netlink: 277 bytes leftover after parsing attributes in process `syz.2.795'. [ 163.847686][ T8896] xt_hashlimit: size too large, truncated to 1048576 [ 163.851229][ T8900] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 164.166773][ T8917] pim6reg: entered allmulticast mode [ 164.172586][ T8917] pim6reg: left allmulticast mode [ 164.225634][ T8924] ip_tables: iptables: counters copy to user failed while replacing table [ 164.421004][ T8937] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 164.421039][ T8937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.696036][ T8950] netlink: 104 bytes leftover after parsing attributes in process `syz.0.813'. [ 164.834217][ T1730] block nbd0: Possible stuck request ffff888026ffe000: control (read@0,4096B). Runtime 60 seconds [ 165.111665][ T8976] xt_TPROXY: Can be used only with -p tcp or -p udp [ 165.192780][ T8980] netlink: Unknown nat attribute (0) [ 165.192817][ T8980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.602572][ T8986] ip_tables: iptables: counters copy to user failed while replacing table [ 165.682589][ T8995] gtp0: entered promiscuous mode [ 165.682613][ T8995] gtp0: entered allmulticast mode [ 166.139487][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.826'. [ 166.156775][ T9017] netlink: 'syz.0.826': attribute type 39 has an invalid length. [ 168.914838][ T4984] udevd[4984]: worker [5631] /devices/virtual/block/nbd0 is taking a long time [ 169.008371][ T9051] ip_tables: iptables: counters copy to user failed while replacing table [ 169.641420][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.833'. [ 169.921071][ T5738] hid (null): nested delimiters [ 170.159661][ T9087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.836'. [ 170.159742][ T9087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.836'. [ 170.208339][ T9087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.836'. [ 170.208389][ T9087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.836'. [ 170.294085][ T9092] netlink: 277 bytes leftover after parsing attributes in process `syz.0.837'. [ 170.466363][ T9101] xt_ecn: cannot match TCP bits for non-tcp packets [ 170.477150][ T9101] netlink: 144 bytes leftover after parsing attributes in process `syz.1.839'. [ 171.002401][ T9127] netlink: 'syz.3.848': attribute type 1 has an invalid length. [ 171.084837][ T9127] bond4: entered promiscuous mode [ 171.084897][ T9127] bond4: entered allmulticast mode [ 171.086778][ T9127] 8021q: adding VLAN 0 to HW filter on device bond4 [ 171.114280][ T9134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.850'. [ 171.114307][ T9134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.850'. [ 171.154291][ T9134] netlink: 20 bytes leftover after parsing attributes in process `syz.0.850'. [ 171.487903][ T5738] hid-generic 0005:4C4A:4155.0001: unknown main item tag 0x0 [ 171.487941][ T5738] hid-generic 0005:4C4A:4155.0001: unknown main item tag 0x0 [ 171.487967][ T5738] hid-generic 0005:4C4A:4155.0001: unknown main item tag 0x0 [ 171.487993][ T5738] hid-generic 0005:4C4A:4155.0001: unknown main item tag 0x0 [ 171.488019][ T5738] hid-generic 0005:4C4A:4155.0001: unknown main item tag 0x0 [ 171.488044][ T5738] hid-generic 0005:4C4A:4155.0001: unknown main item tag 0x0 [ 171.488079][ T5738] hid-generic 0005:4C4A:4155.0001: unknown main item tag 0x0 [ 171.488105][ T5738] hid-generic 0005:4C4A:4155.0001: unknown main item tag 0x0 [ 171.488130][ T5738] hid-generic 0005:4C4A:4155.0001: unknown main item tag 0x0 [ 171.488156][ T5738] hid-generic 0005:4C4A:4155.0001: unknown main item tag 0x0 [ 171.488181][ T5738] hid-generic 0005:4C4A:4155.0001: nested delimiters [ 171.488194][ T5738] hid-generic 0005:4C4A:4155.0001: item 0 2 2 10 parsing failed [ 171.491830][ T5738] hid-generic 0005:4C4A:4155.0001: probe with driver hid-generic failed with error -22 [ 172.177994][ T9186] 8021q: VLANs not supported on gre0 [ 172.390563][ T9200] sctp: [Deprecated]: syz.2.867 (pid 9200) Use of int in maxseg socket option. [ 172.390563][ T9200] Use struct sctp_assoc_value instead [ 172.947386][ T9225] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 173.355085][ T9247] batman_adv: batadv0: Adding interface: syzkaller0 [ 173.355108][ T9247] batman_adv: batadv0: Interface activated: syzkaller0 [ 173.427111][ T9253] ip_tables: iptables: counters copy to user failed while replacing table [ 173.428485][ T5622] Bluetooth: hci2: unexpected event 0x0f length: 0 < 4 [ 174.304392][ T9273] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.498702][ T9283] sctp: [Deprecated]: syz.0.888 (pid 9283) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.498702][ T9283] Use struct sctp_sack_info instead [ 174.610879][ T9282] nbd: couldn't find device at index 1 [ 174.708466][ T9286] __nla_validate_parse: 40 callbacks suppressed [ 174.708489][ T9286] netlink: 16 bytes leftover after parsing attributes in process `syz.3.889'. [ 174.757534][ T9290] netlink: 'syz.2.890': attribute type 1 has an invalid length. [ 174.926333][ T9290] bond2: entered promiscuous mode [ 174.926745][ T9290] 8021q: adding VLAN 0 to HW filter on device bond2 [ 175.024871][ T9300] team0: No ports can be present during mode change [ 175.547936][ T9318] netlink: 16 bytes leftover after parsing attributes in process `syz.2.897'. [ 175.798594][ T9340] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 176.026585][ T9358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.903'. [ 176.593229][ T9375] bond0: option arp_all_targets: invalid value (18446744073709551613) [ 176.621938][ T9375] bond0 (unregistering): Released all slaves [ 176.831381][ T9375] bond0: option arp_all_targets: invalid value (18446744073709551613) [ 176.845837][ T9375] bond0 (unregistering): Released all slaves [ 176.981811][ T9375] bond0: option arp_all_targets: invalid value (18446744073709551613) [ 176.997094][ T9375] bond0 (unregistering): Released all slaves [ 177.105842][ T9375] bond0: option arp_all_targets: invalid value (18446744073709551613) [ 177.127499][ T9375] bond0 (unregistering): Released all slaves [ 177.220786][ T9407] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.913'. [ 177.349104][ T9375] bond0: option arp_all_targets: invalid value (18446744073709551613) [ 177.379606][ T9375] bond0 (unregistering): Released all slaves [ 177.397656][ T9414] netlink: 40 bytes leftover after parsing attributes in process `syz.2.914'. [ 177.424980][ T9416] ip_tables: iptables: counters copy to user failed while replacing table [ 177.548488][ T9422] ip_tables: iptables: counters copy to user failed while replacing table [ 177.740461][ T9438] bridge_slave_0: invalid flags given to default FDB implementation [ 178.119337][ T9453] netlink: 'syz.4.926': attribute type 1 has an invalid length. [ 178.178280][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.926'. [ 178.210177][ T9453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.263687][ T9463] netlink: 32 bytes leftover after parsing attributes in process `syz.0.929'. [ 178.308667][ T9453] bond0: (slave bridge1): making interface the new active one [ 178.310260][ T9453] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 178.477213][ T9470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.932'. [ 178.500635][ T9470] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.545637][ T9470] bridge_slave_1 (unregistering): left allmulticast mode [ 178.545664][ T9470] bridge_slave_1 (unregistering): left promiscuous mode [ 178.548608][ T9470] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.697794][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.935'. [ 178.802072][ T9479] ipvlan0: entered promiscuous mode [ 178.802121][ T9479] ipvlan0: entered allmulticast mode [ 178.802136][ T9479] veth0_vlan: entered allmulticast mode [ 178.911529][ T9488] ip_tables: iptables: counters copy to user failed while replacing table [ 180.028069][ T9515] xt_CONNSECMARK: invalid mode: 0 [ 180.205227][ T9523] netlink: 'syz.2.950': attribute type 1 has an invalid length. [ 180.205250][ T9523] netlink: 'syz.2.950': attribute type 2 has an invalid length. [ 180.229786][ T9528] netlink: 'syz.1.947': attribute type 8 has an invalid length. [ 180.256859][ T9524] netlink: 'syz.2.950': attribute type 1 has an invalid length. [ 180.256884][ T9524] netlink: 'syz.2.950': attribute type 2 has an invalid length. [ 180.372018][ T9531] ieee802154 phy1 wpan1: encryption failed: -22 [ 180.409553][ T9536] geneve2: entered allmulticast mode [ 180.454655][ T9523] xt_CT: No such helper "snmp_trap" [ 180.785864][ T9557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.958'. [ 181.189430][ T9578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.962'. [ 181.334622][ T9588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.962'. [ 181.334651][ T9588] openvswitch: netlink: Flow actions attr not present in new flow. [ 184.192656][ T9596] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!00000000000000000000003ÿÿÿ [ 184.642474][ T9605] netlink: 'syz.3.967': attribute type 1 has an invalid length. [ 184.796131][ T9614] netlink: 32 bytes leftover after parsing attributes in process `syz.0.971'. [ 184.796171][ T9614] openvswitch: netlink: Flow key attr not present in new flow. [ 184.977924][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.973'. [ 185.271912][ T9644] veth1_to_team: left promiscuous mode [ 185.271935][ T9644] veth1_to_team: entered allmulticast mode [ 185.301828][ T9636] netlink: 'syz.1.977': attribute type 39 has an invalid length. [ 186.469580][ T9676] netlink: 68 bytes leftover after parsing attributes in process `syz.1.984'. [ 186.504644][ T9676] netlink: 68 bytes leftover after parsing attributes in process `syz.1.984'. [ 186.841210][ T9695] netlink: 32 bytes leftover after parsing attributes in process `syz.3.987'. [ 187.124353][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.991'. [ 187.227844][ T9716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.991'. [ 187.577681][ T9733] netlink: 14 bytes leftover after parsing attributes in process `syz.2.997'. [ 187.579037][ T9731] netlink: 14 bytes leftover after parsing attributes in process `syz.2.997'. [ 187.579230][ T9731] netlink: 14 bytes leftover after parsing attributes in process `syz.2.997'. [ 187.579406][ T9731] netlink: 14 bytes leftover after parsing attributes in process `syz.2.997'. [ 187.579550][ T9735] openvswitch: netlink: Unknown key attributes 20 [ 187.581531][ T9736] geneve0: entered promiscuous mode [ 187.592540][ T9731] netlink: 14 bytes leftover after parsing attributes in process `syz.2.997'. [ 187.691965][ T9738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.094956][ T5720] syz2: Port: 1 Link ACTIVE [ 188.119614][ T9759] netlink: NAT attribute has 8 unknown bytes [ 188.119651][ T9759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.578394][ T9778] netlink: 'syz.3.1008': attribute type 12 has an invalid length. [ 188.578416][ T9778] netlink: 'syz.3.1008': attribute type 11 has an invalid length. [ 188.963202][ T9793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.069231][ T9793] sit1: entered allmulticast mode [ 189.226954][ T9814] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 189.306057][ T9816] netlink: 'syz.1.1022': attribute type 4 has an invalid length. [ 189.338373][ T9816] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 189.359148][ T9816] bond4 (unregistering): Released all slaves [ 189.417745][ T9818] netlink: 'syz.1.1022': attribute type 4 has an invalid length. [ 189.485257][ T9818] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 189.517156][ T9818] bond4 (unregistering): Released all slaves [ 189.645719][ T9822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.691136][ T9822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.930128][ T9853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.370010][ T9877] block nbd2: Unsupported socket: should be TCP or UNIX. [ 190.389637][ T9878] IPVS: length: 71 != 8 [ 190.461256][ T9885] block nbd2: Unsupported socket: should be TCP or UNIX. [ 191.278336][ T9936] netlink: 'syz.0.1044': attribute type 1 has an invalid length. [ 191.837480][ T9975] netlink: 'syz.0.1052': attribute type 4 has an invalid length. [ 191.866910][ T9975] __nla_validate_parse: 70 callbacks suppressed [ 191.866932][ T9975] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1052'. [ 192.469337][ T9995] netlink: zone id is out of range [ 192.469530][ T9995] netlink: zone id is out of range [ 192.839395][T10010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1057'. [ 192.982097][T10022] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1057'. [ 193.063663][T10010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1057'. [ 193.174931][T10028] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 193.402576][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1065'. [ 193.402826][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1065'. [ 193.402967][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1065'. [ 193.403107][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1065'. [ 193.403252][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1065'. [ 193.419280][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1065'. [ 193.479798][T10053] sctp: [Deprecated]: syz.0.1065 (pid 10053) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.479798][T10053] Use struct sctp_sack_info instead [ 193.709318][T10065] ipvlan1: entered promiscuous mode [ 193.768257][T10052] ipvlan1 (unregistering): left promiscuous mode [ 193.906518][T10067] syzkaller1: entered promiscuous mode [ 193.906545][T10067] syzkaller1: entered allmulticast mode [ 194.096511][T10075] wg0 speed is unknown, defaulting to 1000 [ 194.096587][T10075] wg0 speed is unknown, defaulting to 1000 [ 194.097422][T10075] wg0 speed is unknown, defaulting to 1000 [ 194.100206][T10075] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 194.100243][T10075] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 194.100284][T10075] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 194.186755][T10075] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 194.231189][T10075] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 194.278240][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.290832][T10075] wg0 speed is unknown, defaulting to 1000 [ 194.304317][T10075] wg0 speed is unknown, defaulting to 1000 [ 194.307625][T10075] wg0 speed is unknown, defaulting to 1000 [ 194.309605][T10075] wg0 speed is unknown, defaulting to 1000 [ 194.311593][T10075] wg0 speed is unknown, defaulting to 1000 [ 194.688505][T10097] Bluetooth: hci0: unsupported parameter 5135 [ 194.688530][T10097] Bluetooth: hci0: unsupported parameter 8192 [ 194.688543][T10097] Bluetooth: hci0: unsupported parameter 5135 [ 194.688575][T10097] Bluetooth: hci0: unsupported parameter 8192 [ 194.727704][T10101] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 194.914472][ T1730] block nbd0: Possible stuck request ffff888026ffe000: control (read@0,4096B). Runtime 90 seconds [ 195.031123][T10093] netlink: 'syz.1.1076': attribute type 10 has an invalid length. [ 195.067025][T10093] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.097231][T10093] bond0: (slave team0): Enslaving as an active interface with an up link [ 195.335283][T10124] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 195.335737][T10127] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20003 [ 195.339814][T10124] bond5 (unregistering): Released all slaves [ 195.915534][T10149] bridge0: port 3(batadv1) entered blocking state [ 195.915872][T10149] bridge0: port 3(batadv1) entered disabled state [ 195.916042][T10149] batadv1: entered allmulticast mode [ 195.918543][T10149] batadv1: entered promiscuous mode [ 196.059548][T10162] bond5: entered promiscuous mode [ 196.059574][T10162] bond5: entered allmulticast mode [ 196.240323][ T3362] batman_adv: batadv1: IGMP Querier appeared [ 196.240343][ T3362] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 196.434357][T10188] netlink: 'syz.1.1096': attribute type 1 has an invalid length. [ 196.579782][T10188] bond4: entered promiscuous mode [ 196.580230][T10188] 8021q: adding VLAN 0 to HW filter on device bond4 [ 197.085341][T10213] sctp: [Deprecated]: syz.3.1102 (pid 10213) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.085341][T10213] Use struct sctp_sack_info instead [ 197.350422][T10222] __nla_validate_parse: 34 callbacks suppressed [ 197.350445][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1106'. [ 197.351804][T10223] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 197.356245][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1105'. [ 197.397700][T10222] netlink: 'syz.1.1106': attribute type 21 has an invalid length. [ 197.397785][T10222] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1106'. [ 197.439576][T10229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1107'. [ 197.439610][T10229] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1107'. [ 197.452422][T10225] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 197.463023][T10226] netlink: 'syz.2.1103': attribute type 1 has an invalid length. [ 197.680177][T10236] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 197.694295][T10239] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 197.769227][T10241] Bluetooth: MGMT ver 1.23 [ 197.842997][T10250] netlink: 'syz.4.1113': attribute type 2 has an invalid length. [ 197.879713][T10256] netlink: 'syz.4.1113': attribute type 2 has an invalid length. [ 197.985074][T10265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1111'. [ 197.991279][T10265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1111'. [ 198.022051][T10268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1114'. [ 198.039120][T10270] siw: device registration error -23 [ 198.224777][T10276] IPv6: NLM_F_CREATE should be specified when creating new route [ 198.264702][T10279] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1118'. [ 198.338566][T10281] netlink: 'syz.3.1119': attribute type 4 has an invalid length. [ 199.530524][T10334] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 199.535041][T10334] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1138'. [ 199.556664][T10334] SET target dimension over the limit! [ 199.566550][T10334] xt_LOG: prefix is not null-terminated [ 199.756137][T10345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.756164][T10345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.759082][T10345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.759105][T10345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.761452][T10345] batman_adv: batadv0: Removing interface: macvtap1 [ 199.763299][T10345] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 199.763320][T10345] batman_adv: batadv0: Removing interface: syzkaller0 [ 199.860892][T10346] hsr_slave_0: left promiscuous mode [ 199.862017][T10346] hsr_slave_1: left promiscuous mode [ 200.192469][T10373] sctp: [Deprecated]: syz.4.1148 (pid 10373) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.192469][T10373] Use struct sctp_sack_info instead [ 200.220945][T10372] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 200.265400][T10376] syzkaller0: entered promiscuous mode [ 200.265425][T10376] syzkaller0: entered allmulticast mode [ 200.308808][T10378] netlink: 'syz.4.1148': attribute type 1 has an invalid length. [ 200.933057][T10407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.008741][T10373] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 201.502432][T10447] netlink: 'syz.0.1166': attribute type 4 has an invalid length. [ 206.600653][ T5634] Bluetooth: hci3: command 0x0406 tx timeout [ 206.600713][ T5634] Bluetooth: hci1: command 0x0406 tx timeout [ 206.601808][ T5625] Bluetooth: hci2: command 0x0406 tx timeout [ 225.005949][ T1730] block nbd0: Possible stuck request ffff888026ffe000: control (read@0,4096B). Runtime 120 seconds [ 230.619900][T10503] __nla_validate_parse: 15 callbacks suppressed [ 230.619920][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1182'. [ 230.619940][T10503] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1182'. [ 230.948225][T10527] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1186'. [ 230.948535][T10527] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1186'. [ 231.018093][T10524] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1186'. [ 231.181799][T10543] netlink: 'syz.0.1189': attribute type 10 has an invalid length. [ 231.228742][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1189'. [ 231.228778][T10543] netlink: 'syz.0.1189': attribute type 5 has an invalid length. [ 231.228794][T10543] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1189'. [ 231.293593][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1189'. [ 231.293628][T10550] netlink: 'syz.0.1189': attribute type 5 has an invalid length. [ 231.293644][T10550] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1189'. [ 231.342525][T10543] geneve2: entered promiscuous mode [ 231.342548][T10543] geneve2: entered allmulticast mode [ 231.377561][ T59] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 231.386362][ T59] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 231.416535][ T148] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 231.416585][ T148] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 231.554292][T10564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1194'. [ 231.578564][T10564] batadv1: left allmulticast mode [ 231.578646][T10564] batadv1: left promiscuous mode [ 231.578922][T10564] bridge0: port 3(batadv1) entered disabled state [ 231.604073][T10564] bridge_slave_1: left allmulticast mode [ 231.604098][T10564] bridge_slave_1: left promiscuous mode [ 231.604312][T10564] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.635971][T10564] ¾x9ÿ: left allmulticast mode [ 231.636011][T10564] ¾x9ÿ: left promiscuous mode [ 231.636221][T10564] bridge0: port 1(1¾x9ÿ) entered disabled state [ 231.769797][T10575] openvswitch: netlink: Message has 4 unknown bytes. [ 231.788597][T10570] netlink: 'syz.3.1196': attribute type 5 has an invalid length. [ 231.986877][T10581] xt_TPROXY: Can be used only with -p tcp or -p udp [ 231.990860][T10583] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 232.057054][T10585] x_tables: duplicate underflow at hook 1 [ 232.125143][T10590] netlink: 'syz.2.1204': attribute type 1 has an invalid length. [ 232.224650][T10590] bond3: entered promiscuous mode [ 232.224705][T10590] bond3: entered allmulticast mode [ 232.225386][T10590] 8021q: adding VLAN 0 to HW filter on device bond3 [ 232.273352][T10596] erspan2: entered allmulticast mode [ 232.292231][T10596] bond3: (slave erspan2): making interface the new active one [ 232.292255][T10596] erspan2: entered promiscuous mode [ 232.333089][T10596] bond3: (slave erspan2): Enslaving as an active interface with an up link [ 232.636260][T10609] bond4: entered allmulticast mode [ 232.639353][T10620] x_tables: ip_tables: osf match: only valid for protocol 6 [ 232.639711][T10620] x_tables: ip_tables: osf match: only valid for protocol 6 [ 232.640021][T10620] x_tables: ip_tables: osf match: only valid for protocol 6 [ 232.640313][T10620] x_tables: ip_tables: osf match: only valid for protocol 6 [ 232.657048][T10620] x_tables: ip_tables: osf match: only valid for protocol 6 [ 232.657615][T10620] x_tables: ip_tables: osf match: only valid for protocol 6 [ 232.670143][T10620] x_tables: ip_tables: osf match: only valid for protocol 6 [ 232.690357][T10620] x_tables: ip_tables: osf match: only valid for protocol 6 [ 232.691416][T10620] x_tables: ip_tables: osf match: only valid for protocol 6 [ 232.718847][T10620] x_tables: ip_tables: osf match: only valid for protocol 6 [ 232.959881][ T52] Bluetooth: hci4: link tx timeout [ 232.959899][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.960271][ T52] Bluetooth: hci4: link tx timeout [ 232.960285][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.960313][ T52] Bluetooth: hci4: link tx timeout [ 232.960324][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.960349][ T52] Bluetooth: hci4: link tx timeout [ 232.960360][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.960385][ T52] Bluetooth: hci4: link tx timeout [ 232.960395][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.960525][ T52] Bluetooth: hci4: link tx timeout [ 232.960537][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.960603][ T52] Bluetooth: hci4: link tx timeout [ 232.961277][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.961313][ T52] Bluetooth: hci4: link tx timeout [ 232.961324][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.961452][ T52] Bluetooth: hci4: link tx timeout [ 232.961465][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.961492][ T52] Bluetooth: hci4: link tx timeout [ 232.961503][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.961528][ T52] Bluetooth: hci4: link tx timeout [ 232.961539][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.961609][ T52] Bluetooth: hci4: link tx timeout [ 232.961621][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.961646][ T52] Bluetooth: hci4: link tx timeout [ 232.961657][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.961747][ T52] Bluetooth: hci4: link tx timeout [ 232.961759][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.961785][ T52] Bluetooth: hci4: link tx timeout [ 232.961796][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.961860][ T52] Bluetooth: hci4: link tx timeout [ 232.961872][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.961897][ T52] Bluetooth: hci4: link tx timeout [ 232.961909][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.961980][ T52] Bluetooth: hci4: link tx timeout [ 232.961993][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.962018][ T52] Bluetooth: hci4: link tx timeout [ 232.962029][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.962055][ T52] Bluetooth: hci4: link tx timeout [ 232.962066][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.962130][ T52] Bluetooth: hci4: link tx timeout [ 232.962142][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.962167][ T52] Bluetooth: hci4: link tx timeout [ 232.962178][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.962240][ T52] Bluetooth: hci4: link tx timeout [ 232.962252][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.962277][ T52] Bluetooth: hci4: link tx timeout [ 232.962288][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.962410][ T52] Bluetooth: hci4: link tx timeout [ 232.962422][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.962455][ T52] Bluetooth: hci4: link tx timeout [ 232.962466][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.962490][ T52] Bluetooth: hci4: link tx timeout [ 232.962501][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.962565][ T52] Bluetooth: hci4: link tx timeout [ 232.962577][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.962602][ T52] Bluetooth: hci4: link tx timeout [ 232.962613][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.962873][ T52] Bluetooth: hci4: link tx timeout [ 232.962928][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.037355][ T52] Bluetooth: hci4: link tx timeout [ 233.037375][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.037406][ T52] Bluetooth: hci4: link tx timeout [ 233.037417][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.037450][ T52] Bluetooth: hci4: link tx timeout [ 233.037461][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.037486][ T52] Bluetooth: hci4: link tx timeout [ 233.037497][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.037522][ T52] Bluetooth: hci4: link tx timeout [ 233.037533][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.037557][ T52] Bluetooth: hci4: link tx timeout [ 233.037568][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.039468][ T52] Bluetooth: hci4: link tx timeout [ 233.039490][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.039518][ T52] Bluetooth: hci4: link tx timeout [ 233.039529][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.039553][ T52] Bluetooth: hci4: link tx timeout [ 233.039564][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.039588][ T52] Bluetooth: hci4: link tx timeout [ 233.039599][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.039623][ T52] Bluetooth: hci4: link tx timeout [ 233.039633][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.039686][ T52] Bluetooth: hci4: link tx timeout [ 233.039698][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.039778][ T52] Bluetooth: hci4: link tx timeout [ 233.039790][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.039834][ T52] Bluetooth: hci4: link tx timeout [ 233.039845][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.039937][ T52] Bluetooth: hci4: link tx timeout [ 233.039947][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.040020][ T52] Bluetooth: hci4: link tx timeout [ 233.040032][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.040058][ T52] Bluetooth: hci4: link tx timeout [ 233.040069][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.040094][ T52] Bluetooth: hci4: link tx timeout [ 233.040104][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.040163][ T52] Bluetooth: hci4: link tx timeout [ 233.040175][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.040200][ T52] Bluetooth: hci4: link tx timeout [ 233.040211][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.040268][ T52] Bluetooth: hci4: link tx timeout [ 233.040279][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.040305][ T52] Bluetooth: hci4: link tx timeout [ 233.040316][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.040418][ T52] Bluetooth: hci4: link tx timeout [ 233.040430][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.040464][ T52] Bluetooth: hci4: link tx timeout [ 233.040476][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.040501][ T52] Bluetooth: hci4: link tx timeout [ 233.040512][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.040574][ T52] Bluetooth: hci4: link tx timeout [ 233.040585][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.040612][ T52] Bluetooth: hci4: link tx timeout [ 233.040623][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.040705][ T52] Bluetooth: hci4: link tx timeout [ 233.040717][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.040787][ T52] Bluetooth: hci4: link tx timeout [ 233.040799][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.040824][ T52] Bluetooth: hci4: link tx timeout [ 233.040835][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.040888][ T52] Bluetooth: hci4: link tx timeout [ 233.040899][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.040926][ T52] Bluetooth: hci4: link tx timeout [ 233.040936][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.041025][ T52] Bluetooth: hci4: link tx timeout [ 233.041037][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.041062][ T52] Bluetooth: hci4: link tx timeout [ 233.041072][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.041171][ T52] Bluetooth: hci4: link tx timeout [ 233.041182][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.041207][ T52] Bluetooth: hci4: link tx timeout [ 233.041218][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.041242][ T52] Bluetooth: hci4: link tx timeout [ 233.041253][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.041308][ T52] Bluetooth: hci4: link tx timeout [ 233.041319][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.041344][ T52] Bluetooth: hci4: link tx timeout [ 233.041354][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.041408][ T52] Bluetooth: hci4: link tx timeout [ 233.041420][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.041451][ T52] Bluetooth: hci4: link tx timeout [ 233.041462][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.041518][ T52] Bluetooth: hci4: link tx timeout [ 233.041529][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.041555][ T52] Bluetooth: hci4: link tx timeout [ 233.041566][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.041640][ T52] Bluetooth: hci4: link tx timeout [ 233.041652][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.041729][ T52] Bluetooth: hci4: link tx timeout [ 233.041741][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.041766][ T52] Bluetooth: hci4: link tx timeout [ 233.041777][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.041844][ T52] Bluetooth: hci4: link tx timeout [ 233.041856][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.041881][ T52] Bluetooth: hci4: link tx timeout [ 233.041892][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.041946][ T52] Bluetooth: hci4: link tx timeout [ 233.041958][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.042012][ T52] Bluetooth: hci4: link tx timeout [ 233.042023][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.042127][ T52] Bluetooth: hci4: link tx timeout [ 233.042138][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.042163][ T52] Bluetooth: hci4: link tx timeout [ 233.042174][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.042228][ T52] Bluetooth: hci4: link tx timeout [ 233.042239][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.042292][ T52] Bluetooth: hci4: link tx timeout [ 233.042303][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.042330][ T52] Bluetooth: hci4: link tx timeout [ 233.042340][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.042400][ T52] Bluetooth: hci4: link tx timeout [ 233.042412][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.042445][ T52] Bluetooth: hci4: link tx timeout [ 233.042456][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.042481][ T52] Bluetooth: hci4: link tx timeout [ 233.042492][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.042547][ T52] Bluetooth: hci4: link tx timeout [ 233.042559][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.042584][ T52] Bluetooth: hci4: link tx timeout [ 233.042595][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 233.752471][T10641] netlink: Setting conntrack mark requires 'commit' flag. [ 233.752608][T10641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.967170][T10642] hsr0: entered allmulticast mode [ 233.967246][T10642] hsr_slave_0: entered allmulticast mode [ 233.967296][T10642] hsr_slave_1: entered allmulticast mode [ 234.040362][T10642] hsr_slave_0: left promiscuous mode [ 234.067973][T10642] hsr_slave_1: left promiscuous mode [ 234.201005][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 234.230786][ T31] audit: type=1107 audit(1791030927.126:5): pid=10644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='XìÑ{Y•æ}“¸b 2?§m£V0mQ±kuat Q¸"6X¯±YñøÏ¿n¦ZÞIðÔ¶ì°àÏÒ˜÷˜e¦÷ÍPþIÑÃØ:©±ï{ÆáÙ\ŠhMݳN­á×ßHüHŠñ%(„jÀà©ç~k,Æ ÂbS7·†)‚ íÁê›Ã' [ 234.272346][T10642] hsr0 (unregistering): left allmulticast mode [ 234.448830][T10651] xt_policy: neither incoming nor outgoing policy selected [ 234.449790][T10651] netlink: 'syz.2.1221': attribute type 2 has an invalid length. [ 235.116475][T10698] netlink: 'syz.1.1234': attribute type 10 has an invalid length. [ 235.134100][ T6311] bond0: (slave team0): link status definitely down, disabling slave [ 235.647182][T10727] Cannot find set identified by id 65535 to match [ 235.992202][T10747] __nla_validate_parse: 11 callbacks suppressed [ 235.992224][T10747] netlink: 4464 bytes leftover after parsing attributes in process `syz.3.1245'. [ 236.272979][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 236.625036][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1248'. [ 236.733596][T10710] lo speed is unknown, defaulting to 1000 [ 236.738877][T10710] wg0 speed is unknown, defaulting to 1000 [ 236.840686][T10775] netlink: 'syz.4.1248': attribute type 3 has an invalid length. [ 236.840710][T10775] netlink: 'syz.4.1248': attribute type 1 has an invalid length. [ 236.840724][T10775] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1248'. [ 236.917051][T10783] ip_tables: iptables: counters copy to user failed while replacing table [ 236.917394][T10783] ip_tables: iptables: counters copy to user failed while replacing table [ 236.917729][T10783] ip_tables: iptables: counters copy to user failed while replacing table [ 236.918049][T10783] ip_tables: iptables: counters copy to user failed while replacing table [ 236.930068][T10783] ip_tables: iptables: counters copy to user failed while replacing table [ 236.936986][T10783] ip_tables: iptables: counters copy to user failed while replacing table [ 236.937965][T10783] ip_tables: iptables: counters copy to user failed while replacing table [ 236.947080][T10783] ip_tables: iptables: counters copy to user failed while replacing table [ 236.956972][T10783] ip_tables: iptables: counters copy to user failed while replacing table [ 236.958031][T10783] ip_tables: iptables: counters copy to user failed while replacing table [ 237.027737][T10788] netlink: 'syz.3.1252': attribute type 2 has an invalid length. [ 237.027775][T10788] netlink: 'syz.3.1252': attribute type 2 has an invalid length. [ 237.090738][T10787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1250'. [ 237.195255][T10785] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 237.214964][T10785] bond7 (unregistering): Released all slaves [ 237.257311][T10794] syzkaller0: entered promiscuous mode [ 237.708403][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1256'. [ 237.725788][T10812] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 237.728406][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1256'. [ 239.037322][T10896] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1278'. [ 239.191433][T10905] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1281'. [ 239.191752][T10905] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1281'. [ 239.330372][T10905] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1281'. [ 239.367835][T10910] No such timeout policy "s" [ 239.651448][ T4934] Bluetooth: hci3: unexpected event for opcode 0x0005 [ 239.816526][T10925] netlink: 'syz.3.1285': attribute type 1 has an invalid length. [ 240.061275][T10926] veth7: entered allmulticast mode [ 240.091064][T10922] bond3: (slave veth0_to_bond): Releasing active interface [ 240.123766][T10922] bond6: (slave veth0_to_bond): making interface the new active one [ 240.124856][T10922] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 240.180899][T10945] IPVS: length: 24 != 6168 [ 240.380896][T10916] xt_addrtype: ipv6 does not support BROADCAST matching [ 240.700227][T10965] netlink: 'syz.0.1293': attribute type 83 has an invalid length. [ 240.836093][T10969] xt_socket: unknown flags 0x4 [ 241.378839][T11001] __nla_validate_parse: 2 callbacks suppressed [ 241.378860][T11001] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1306'. [ 241.475719][T11005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1309'. [ 241.899793][T11031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1319'. [ 241.919111][T11034] xt_TPROXY: Can be used only with -p tcp or -p udp [ 241.929897][T11034] x_tables: duplicate underflow at hook 1 [ 241.939426][T11034] netlink: 'syz.2.1320': attribute type 1 has an invalid length. [ 241.939448][T11034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1320'. [ 242.297310][T11050] net_ratelimit: 8 callbacks suppressed [ 242.297331][T11050] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 242.616139][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1334'. [ 242.616835][T11073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1334'. [ 242.767313][T11076] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 242.782382][T11086] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1338'. [ 242.869348][T11086] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 242.888559][T11086] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1338'. [ 242.909943][T11092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1340'. [ 243.336506][T11121] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 243.427881][T11124] netlink: 'syz.2.1348': attribute type 12 has an invalid length. [ 243.427907][T11124] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1348'. [ 243.507639][T11127] block nbd0: Unsupported socket: should be TCP or UNIX. [ 243.521624][T11127] atomic_op ffff88807f7f11e0 conn xmit_atomic 0000000000000000 [ 243.809852][T11142] x_tables: duplicate underflow at hook 2 [ 243.927337][T11148] netlink: 'syz.2.1356': attribute type 2 has an invalid length. [ 244.008512][T11148] v: left promiscuous mode [ 244.010162][T11148] v: entered promiscuous mode [ 244.045481][T11148] veth1_macvtap: entered promiscuous mode [ 244.054827][T11162] raw_sendmsg: syz.4.1360 forgot to set AF_INET. Fix it! [ 244.079861][T11148] batman_adv: batadv0: Interface activated: gretap1 [ 244.081332][T11148] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.102378][T11148] veth1_vlan: entered promiscuous mode [ 244.109460][T11148] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 244.796018][T11203] nbd: must specify a size in bytes for the device [ 245.186331][T11232] sctp: [Deprecated]: syz.1.1376 (pid 11232) Use of int in max_burst socket option. [ 245.186331][T11232] Use struct sctp_assoc_value instead [ 245.472520][T11246] netlink: 'syz.2.1379': attribute type 15 has an invalid length. [ 245.506913][T11246] netlink: 'syz.2.1379': attribute type 15 has an invalid length. [ 245.513355][T11125] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 245.529686][T11125] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 245.529728][T11125] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 245.529761][T11125] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 246.317166][T11281] xt_cgroup: path and classid specified [ 246.319442][T11282] ip_tables: iptables: counters copy to user failed while replacing table [ 246.641051][T11296] Bluetooth: MGMT ver 1.23 [ 246.845138][T11306] netlink: 'syz.3.1398': attribute type 1 has an invalid length. [ 246.931150][T11306] __nla_validate_parse: 14 callbacks suppressed [ 246.931173][T11306] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1398'. [ 246.985363][ T4934] Bluetooth: hci1: ACL packet for unknown connection handle 3484 [ 246.991717][T11312] netlink: 'syz.1.1401': attribute type 11 has an invalid length. [ 247.018175][T11309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1399'. [ 247.060466][T11312] netlink: 'syz.1.1401': attribute type 7 has an invalid length. [ 247.140068][ T91] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 247.176801][T11326] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1403'. [ 247.176834][T11326] nbd: illegal input index -8454144 [ 247.177013][T11327] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1403'. [ 247.177029][T11327] nbd: illegal input index -8454144 [ 247.260588][T11325] openvswitch: netlink: Invalid VLAN frame [ 247.370893][T11329] Bluetooth: hci0: unsupported parameter 5134 [ 247.370917][T11329] Bluetooth: hci0: unsupported parameter 8192 [ 247.370930][T11329] Bluetooth: hci0: unsupported parameter 5134 [ 247.370943][T11329] Bluetooth: hci0: unsupported parameter 8192 [ 247.575432][T11346] netlink: 'syz.1.1408': attribute type 1 has an invalid length. [ 247.575455][T11346] netlink: 756 bytes leftover after parsing attributes in process `syz.1.1408'. [ 247.620922][T11346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1408'. [ 247.620949][T11346] nbd: socks must be embedded in a SOCK_ITEM attr [ 247.874879][T11360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1415'. [ 248.324979][T11389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1426'. [ 248.344587][T11389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1426'. [ 248.438409][T11399] Bluetooth: hci0: invalid len left 17, exp >= 23 [ 248.576315][T11411] netlink: 'syz.0.1430': attribute type 3 has an invalid length. [ 248.576336][T11411] netlink: 'syz.0.1430': attribute type 1 has an invalid length. [ 248.581110][T11411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1430'. [ 248.848858][T11420] syzkaller1: entered promiscuous mode [ 248.848883][T11420] syzkaller1: entered allmulticast mode [ 248.850781][T11420] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4116 [ 248.940435][T11424] netlink: 'syz.2.1433': attribute type 18 has an invalid length. [ 248.940697][T11424] netlink: 'syz.2.1433': attribute type 18 has an invalid length. [ 249.370605][T11449] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.372420][T11449] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.577052][T11468] netlink: 'syz.2.1444': attribute type 16 has an invalid length. [ 250.528764][T11507] netlink: 'syz.3.1459': attribute type 4 has an invalid length. [ 250.811587][T11523] syzkaller0: left promiscuous mode [ 250.858294][T11528] TCP: TCP_TX_DELAY enabled [ 251.381828][T11570] tipc: Enabling of bearer rejected, failed to enable media [ 251.660325][T11580] syzkaller0: entered promiscuous mode [ 251.660350][T11580] syzkaller0: entered allmulticast mode [ 252.060760][T11596] x_tables: duplicate underflow at hook 3 [ 252.612038][T11639] ip_tables: iptables: counters copy to user failed while replacing table [ 252.930479][T11651] __nla_validate_parse: 15 callbacks suppressed [ 252.930500][T11651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1506'. [ 252.930767][T11653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1506'. [ 253.127603][T11669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1508'. [ 253.293103][T11676] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1513'. [ 253.871977][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1521'. [ 253.920053][T11710] 8021q: adding VLAN 0 to HW filter on device team1 [ 253.932225][T11710] netlink: 'syz.2.1521': attribute type 3 has an invalid length. [ 253.932246][T11710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1521'. [ 254.020409][T11715] netlink: 'syz.0.1522': attribute type 1 has an invalid length. [ 254.138612][T11721] veth9: entered allmulticast mode [ 254.152394][T11721] bond7: (slave veth9): Enslaving as an active interface with a down link [ 254.207279][T11722] macsec1: entered promiscuous mode [ 254.315024][T11715] bond1: (slave veth0_to_bond): Releasing backup interface [ 254.374648][T11715] bond7: (slave veth0_to_bond): making interface the new active one [ 254.381348][T11715] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 254.448613][T11721] macvlan4: entered promiscuous mode [ 254.448636][T11721] macvlan4: entered allmulticast mode [ 254.451519][T11721] bond7: entered promiscuous mode [ 254.451538][T11721] veth0_to_bond: entered promiscuous mode [ 254.478061][T11721] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 254.479100][T11721] bond7: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 254.479264][T11721] bond7: left promiscuous mode [ 254.479282][T11721] veth0_to_bond: left promiscuous mode [ 254.617771][T11730] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 254.903021][T11746] IPv6: NLM_F_REPLACE set, but no existing node found! [ 255.075220][ T1730] block nbd0: Possible stuck request ffff888026ffe000: control (read@0,4096B). Runtime 150 seconds [ 255.404319][T11771] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1533'. [ 255.718997][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.323200][T11812] sctp: [Deprecated]: syz.2.1542 (pid 11812) Use of int in maxseg socket option. [ 256.323200][T11812] Use struct sctp_assoc_value instead [ 256.326962][T11813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1541'. [ 256.327018][T11813] netlink: 'syz.0.1541': attribute type 7 has an invalid length. [ 256.327033][T11813] netlink: 'syz.0.1541': attribute type 8 has an invalid length. [ 256.327047][T11813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1541'. [ 256.638725][T11830] openvswitch: netlink: Tunnel attr 13 has unexpected len 4 expected 16 [ 256.793732][T11833] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1544'. [ 257.497072][T11856] bond0: Error: Cannot enslave bond to itself. [ 257.531780][T11841] gretap1: entered promiscuous mode [ 257.531804][T11841] gretap1: entered allmulticast mode [ 257.554157][T11861] netlink: 'syz.4.1552': attribute type 12 has an invalid length. [ 258.245473][T11889] syzkaller1: entered promiscuous mode [ 258.245497][T11889] syzkaller1: entered allmulticast mode [ 258.260144][T11890] __nla_validate_parse: 4 callbacks suppressed [ 258.260191][T11890] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1562'. [ 258.306897][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1562'. [ 258.306924][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1562'. [ 258.344761][T11890] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1562'. [ 258.365289][T11898] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1562'. [ 258.375569][T11900] netlink: Conntrack attr has 4 unknown bytes [ 258.400703][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1562'. [ 258.521174][T11908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1565'. [ 258.596858][T11911] netlink: 'syz.2.1568': attribute type 10 has an invalid length. [ 258.778960][T11913] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 258.779684][T11913] team0: Device ipvlan2 is already an upper device of the team interface [ 258.849698][T11922] netlink: 'syz.1.1573': attribute type 25 has an invalid length. [ 258.909275][T11920] netlink: 'syz.2.1572': attribute type 22 has an invalid length. [ 258.909301][T11920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1572'. [ 258.909549][T11920] netlink: 'syz.2.1572': attribute type 22 has an invalid length. [ 258.909568][T11920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1572'. [ 258.964356][T11934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.322063][T11950] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1582'. [ 259.599557][T11971] ip_tables: iptables: counters copy to user failed while replacing table [ 259.620887][T11965] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 260.046825][T11999] netlink: 'syz.4.1596': attribute type 6 has an invalid length. [ 260.047472][T11999] netlink: 'syz.4.1596': attribute type 6 has an invalid length. [ 260.089278][T12007] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 260.126874][T12016] IPVS: rr: UDP [fe80::aa]:8080 - no destination available [ 260.176586][T11995] block nbd2: Unsupported socket: should be TCP or UNIX. [ 260.514830][T12039] ip_tables: iptables: counters copy to user failed while replacing table [ 260.584992][T12039] syzkaller1: entered promiscuous mode [ 260.585017][T12039] syzkaller1: entered allmulticast mode [ 260.777355][T12043] openvswitch: netlink: Missing valid actions attribute. [ 260.777391][T12043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.032458][T12059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.032484][T12059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.101724][T12062] netlink: 'syz.0.1609': attribute type 1 has an invalid length. [ 261.306273][T12075] syzkaller0: entered promiscuous mode [ 261.306297][T12075] syzkaller0: entered allmulticast mode [ 261.629202][T12103] bond5: option min_links: invalid value (18446744073709551614) [ 261.629229][T12103] bond5: option min_links: allowed values 0 - 2147483647 [ 261.657016][T12103] bond5 (unregistering): Released all slaves [ 261.782551][T12055] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 262.746924][T12156] syz_tun: entered allmulticast mode [ 262.817459][T12164] : renamed from bond0 (while UP) [ 262.818358][T12162] netlink: 'syz.3.1630': attribute type 21 has an invalid length. [ 262.839072][T12162] syzkaller1: entered promiscuous mode [ 262.839094][T12162] syzkaller1: entered allmulticast mode [ 262.881367][T12154] syz_tun: left allmulticast mode [ 262.927523][ T5713] fq: likely mono tstamp with tstamp_type 0 [ 263.179715][T12191] C: entered promiscuous mode [ 263.190024][T12191] C: left promiscuous mode [ 263.311780][T12201] netlink: 'syz.3.1641': attribute type 2 has an invalid length. [ 263.465119][T12206] Bluetooth: hci0: unsupported parameter 5135 [ 263.465136][T12206] Bluetooth: hci0: unsupported parameter 8192 [ 263.465146][T12206] Bluetooth: hci0: unsupported parameter 5135 [ 263.465154][T12206] Bluetooth: hci0: unsupported parameter 8192 [ 263.541807][T12208] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 263.714983][T12215] __nla_validate_parse: 15 callbacks suppressed [ 263.715005][T12215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1646'. [ 263.760284][T12212] bond5: entered promiscuous mode [ 263.760308][T12212] bond5: entered allmulticast mode [ 264.502605][T12262] xt_check_match_common: 56 callbacks suppressed [ 264.502629][T12262] x_tables: ip_tables: osf match: only valid for protocol 6 [ 264.630114][T12269] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1660'. [ 264.702229][T12271] x_tables: duplicate underflow at hook 2 [ 264.711733][T12273] netlink: 'syz.1.1662': attribute type 5 has an invalid length. [ 264.809158][T12275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1664'. [ 264.847539][T12232] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 264.896900][T12282] openvswitch: netlink: IP tunnel TTL not specified. [ 265.009223][T12291] netlink: 'syz.1.1669': attribute type 1 has an invalid length. [ 265.009620][T12289] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 265.058059][T12291] bond0: entered promiscuous mode [ 265.060115][T12291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.101567][T12291] macvtap1: entered allmulticast mode [ 265.123413][T12291] macvtap2: entered allmulticast mode [ 265.149160][T12291] bond0: (slave bridge2): making interface the new active one [ 265.149201][T12291] bridge2: entered promiscuous mode [ 265.151326][T12291] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 265.275846][T12309] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 265.356236][T12311] openvswitch: ovs-s: Dropping previously announced user features [ 265.429908][T12318] bond0: invalid NS target ff00:: specified for addition [ 265.429941][T12318] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 265.660347][T12332] netlink: 'syz.1.1680': attribute type 2 has an invalid length. [ 265.758130][T12332] : entered promiscuous mode [ 265.797624][T12338] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1682'. [ 265.980881][T12355] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1683'. [ 266.033323][ T4934] Bluetooth: hci2: command 0x0406 tx timeout [ 266.141397][T12368] netlink: 'syz.3.1687': attribute type 1 has an invalid length. [ 266.141421][T12368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1687'. [ 266.141445][T12368] bond0: option mode: unable to set because the bond device has slaves [ 266.172063][T12369] ip_tables: iptables: counters copy to user failed while replacing table [ 266.191492][T12369] netlink: 'syz.1.1688': attribute type 4 has an invalid length. [ 266.207185][T12371] FAULT_INJECTION: forcing a failure. [ 266.207185][T12371] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 266.207232][T12371] CPU: 1 UID: 0 PID: 12371 Comm: syz.2.1689 Not tainted syzkaller #0 PREEMPT(full) [ 266.207260][T12371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 266.207275][T12371] Call Trace: [ 266.207285][T12371] [ 266.207291][T12371] dump_stack_lvl+0xe8/0x150 [ 266.207317][T12371] should_fail_ex+0x410/0x560 [ 266.207340][T12371] _copy_from_user+0x2d/0xb0 [ 266.207362][T12371] __sys_connect+0x155/0x450 [ 266.207384][T12371] ? __pfx___sys_connect+0x10/0x10 [ 266.207413][T12371] ? __pfx_ksys_write+0x10/0x10 [ 266.207434][T12371] __x64_sys_connect+0x7a/0x90 [ 266.207455][T12371] do_syscall_64+0x166/0x520 [ 266.207476][T12371] ? trace_irq_disable+0x3b/0x140 [ 266.207492][T12371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.207507][T12371] ? clear_bhb_loop+0x70/0xc0 [ 266.207525][T12371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.207540][T12371] RIP: 0033:0x7f7088b9e159 [ 266.207558][T12371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.207570][T12371] RSP: 002b:00007f7089a09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 266.207589][T12371] RAX: ffffffffffffffda RBX: 00007f7088e25fa0 RCX: 00007f7088b9e159 [ 266.207600][T12371] RDX: 0000000000000010 RSI: 0000200000001200 RDI: 0000000000000003 [ 266.207610][T12371] RBP: 00007f7089a09090 R08: 0000000000000000 R09: 0000000000000000 [ 266.207620][T12371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.207629][T12371] R13: 00007f7088e26038 R14: 00007f7088e25fa0 R15: 00007ffcca1842b8 [ 266.207683][T12371] [ 266.467154][T12379] netlink: 'syz.1.1688': attribute type 4 has an invalid length. [ 269.215178][T12401] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1691'. [ 269.218550][T12401] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1691'. [ 269.219331][T12401] gretap0: entered promiscuous mode [ 269.238402][T12401] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1691'. [ 269.248371][T12401] 0ªî{X¹¦: renamed from gretap0 [ 269.264615][T12401] 0ªî{X¹¦: left promiscuous mode [ 269.264633][T12401] 0ªî{X¹¦: entered allmulticast mode [ 269.267048][T12401] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 269.285704][T12401] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1691'. [ 269.310161][T12401] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1691'. [ 269.310161][T12402] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1691'. [ 269.310257][T12402] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 269.323189][T12402] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 269.353589][T12401] 1ªî{X¹¦: entered promiscuous mode [ 269.353610][T12401] 1ªî{X¹¦: left allmulticast mode [ 269.523566][T12409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1693'. [ 269.631005][T12411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1693'. [ 281.837091][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 281.838930][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 281.840881][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 281.842418][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 281.845290][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.957192][ T5622] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 281.959092][ T5622] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 281.961318][ T5622] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 281.962273][ T5622] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 281.963317][ T5622] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 282.005110][ T5622] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 282.009408][ T5622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 282.010486][ T5622] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 282.036884][ T5625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 282.044583][ T5625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 282.142132][ T5625] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 282.151346][ T5625] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 282.152075][ T5625] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 282.156509][ T5625] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 282.158117][ T5625] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 283.005207][T12416] lo speed is unknown, defaulting to 1000 [ 283.007160][T12416] wg0 speed is unknown, defaulting to 1000 [ 283.238961][T12419] lo speed is unknown, defaulting to 1000 [ 283.256048][T12419] wg0 speed is unknown, defaulting to 1000 [ 283.472266][T12416] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.472492][T12416] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.472630][T12416] bridge_slave_0: entered allmulticast mode [ 283.495812][T12416] bridge_slave_0: entered promiscuous mode [ 283.513771][T12416] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.515422][T12416] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.515578][T12416] bridge_slave_1: entered allmulticast mode [ 283.517379][T12416] bridge_slave_1: entered promiscuous mode [ 283.574771][T12420] lo speed is unknown, defaulting to 1000 [ 283.580997][T12416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.604583][T12420] wg0 speed is unknown, defaulting to 1000 [ 283.623507][T12416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.707744][T12416] team0: Port device team_slave_0 added [ 283.756369][T12416] team0: Port device team_slave_1 added [ 283.845242][T12427] lo speed is unknown, defaulting to 1000 [ 283.865912][T12416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.865931][T12416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.865961][T12416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.867442][T12427] wg0 speed is unknown, defaulting to 1000 [ 283.921625][T12416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.921731][T12416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.921802][T12416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.953596][ T52] Bluetooth: hci5: command tx timeout [ 284.033339][ T52] Bluetooth: hci7: command tx timeout [ 284.091547][T12416] hsr_slave_0: entered promiscuous mode [ 284.095047][T12416] hsr_slave_1: entered promiscuous mode [ 284.097467][T12416] debugfs: 'hsr0' already exists in 'hsr' [ 284.097522][T12416] Cannot create hsr debugfs directory [ 284.113922][ T52] Bluetooth: hci6: command tx timeout [ 284.192907][ T52] Bluetooth: hci8: command tx timeout [ 284.443261][T12419] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.443675][T12419] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.444041][T12419] bridge_slave_0: entered allmulticast mode [ 284.445480][T12419] bridge_slave_0: entered promiscuous mode [ 284.508455][T12419] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.508549][T12419] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.508701][T12419] bridge_slave_1: entered allmulticast mode [ 284.510392][T12419] bridge_slave_1: entered promiscuous mode [ 284.620377][T12419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.635291][T12419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.712283][T12420] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.712459][T12420] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.712579][T12420] bridge_slave_0: entered allmulticast mode [ 284.719358][T12420] bridge_slave_0: entered promiscuous mode [ 284.761179][T12419] team0: Port device team_slave_0 added [ 284.761524][T12420] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.761748][T12420] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.761881][T12420] bridge_slave_1: entered allmulticast mode [ 284.790465][T12420] bridge_slave_1: entered promiscuous mode [ 284.890167][T12419] team0: Port device team_slave_1 added [ 284.930814][ T5625] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 284.940380][ T5625] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 284.941951][ T5625] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 284.943844][ T5625] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 284.945540][ T5625] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 285.028959][T12420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.063407][T12419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.063426][T12419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.063454][T12419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.122265][T12420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.148332][T12419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.148350][T12419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.148397][T12419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.157289][ T1730] block nbd0: Possible stuck request ffff888026ffe000: control (read@0,4096B). Runtime 180 seconds [ 285.269042][T12427] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.269135][T12427] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.269487][T12427] bridge_slave_0: entered allmulticast mode [ 285.271185][T12427] bridge_slave_0: entered promiscuous mode [ 285.311942][T12420] team0: Port device team_slave_0 added [ 285.328226][T12427] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.328339][T12427] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.328467][T12427] bridge_slave_1: entered allmulticast mode [ 285.331697][T12427] bridge_slave_1: entered promiscuous mode [ 285.374338][T12420] team0: Port device team_slave_1 added [ 285.475950][T12419] hsr_slave_0: entered promiscuous mode [ 285.477033][T12419] hsr_slave_1: entered promiscuous mode [ 285.477862][T12419] debugfs: 'hsr0' already exists in 'hsr' [ 285.477882][T12419] Cannot create hsr debugfs directory [ 285.481983][T12427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.485578][T12427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.536084][T12420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.536103][T12420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.536131][T12420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.538429][T12420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.538441][T12420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.538463][T12420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.611856][T12427] team0: Port device team_slave_0 added [ 285.678950][T12427] team0: Port device team_slave_1 added [ 285.776919][T12427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.776937][T12427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.776963][T12427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.818611][T12420] hsr_slave_0: entered promiscuous mode [ 285.821330][T12420] hsr_slave_1: entered promiscuous mode [ 285.832374][T12420] debugfs: 'hsr0' already exists in 'hsr' [ 285.832426][T12420] Cannot create hsr debugfs directory [ 285.858085][T12427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.858116][T12427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.858147][T12427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.033049][ T5625] Bluetooth: hci5: command tx timeout [ 286.071809][T12427] hsr_slave_0: entered promiscuous mode [ 286.074947][T12427] hsr_slave_1: entered promiscuous mode [ 286.077101][T12427] debugfs: 'hsr0' already exists in 'hsr' [ 286.077166][T12427] Cannot create hsr debugfs directory [ 286.112830][ T5625] Bluetooth: hci7: command tx timeout [ 286.193211][ T5625] Bluetooth: hci6: command tx timeout [ 286.238446][T12482] lo speed is unknown, defaulting to 1000 [ 286.240226][T12482] wg0 speed is unknown, defaulting to 1000 [ 286.272954][ T5625] Bluetooth: hci8: command tx timeout [ 286.806391][T12482] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.806551][T12482] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.806698][T12482] bridge_slave_0: entered allmulticast mode [ 286.808088][T12482] bridge_slave_0: entered promiscuous mode [ 286.815440][T12482] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.815763][T12482] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.816137][T12482] bridge_slave_1: entered allmulticast mode [ 286.821823][T12482] bridge_slave_1: entered promiscuous mode [ 286.884165][T12482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.887201][T12482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.934075][T12482] team0: Port device team_slave_0 added [ 286.936369][T12482] team0: Port device team_slave_1 added [ 286.968911][T12482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.968928][T12482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.968956][T12482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.970624][T12482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.970638][T12482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.970692][T12482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.072933][ T5625] Bluetooth: hci9: command tx timeout [ 287.094055][T12482] hsr_slave_0: entered promiscuous mode [ 287.095053][T12482] hsr_slave_1: entered promiscuous mode [ 287.095565][T12482] debugfs: 'hsr0' already exists in 'hsr' [ 287.095586][T12482] Cannot create hsr debugfs directory [ 288.112901][ T5625] Bluetooth: hci5: command tx timeout [ 288.192840][ T5625] Bluetooth: hci7: command tx timeout [ 288.273223][ T5625] Bluetooth: hci6: command tx timeout [ 288.352901][ T5625] Bluetooth: hci8: command tx timeout [ 289.152828][ T5625] Bluetooth: hci9: command tx timeout [ 290.192869][ T5625] Bluetooth: hci5: command tx timeout [ 290.272961][ T5625] Bluetooth: hci7: command tx timeout [ 290.283397][ T4984] udevd[4984]: worker [5631] /devices/virtual/block/nbd0 timeout; kill it [ 290.283834][ T4984] udevd[4984]: seq 11101 '/devices/virtual/block/nbd0' killed [ 290.353132][ T5625] Bluetooth: hci6: command tx timeout [ 290.432990][ T5625] Bluetooth: hci8: command tx timeout [ 291.232921][ T5625] Bluetooth: hci9: command tx timeout [ 293.312776][ T5625] Bluetooth: hci9: command tx timeout [ 315.236621][ T1730] block nbd0: Possible stuck request ffff888026ffe000: control (read@0,4096B). Runtime 210 seconds [ 317.156324][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.369743][ T52] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 342.386199][ T52] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 342.395543][ T52] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 342.409213][ T52] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 342.410180][ T52] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 342.462554][ T52] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 342.473778][ T52] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 342.476278][ T52] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 342.477443][ T52] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 342.482119][ T52] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 342.581901][ T52] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 342.590381][ T52] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 342.591132][ T52] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 342.592161][ T52] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 342.595795][ T52] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 342.701816][ T5625] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 342.710292][ T5625] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 342.710993][ T5625] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 342.711848][ T5625] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 342.741091][ T5625] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 343.560361][T12516] lo speed is unknown, defaulting to 1000 [ 343.562121][T12516] wg0 speed is unknown, defaulting to 1000 [ 343.813081][T12514] lo speed is unknown, defaulting to 1000 [ 343.851683][T12514] wg0 speed is unknown, defaulting to 1000 [ 343.959071][T12516] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.959251][T12516] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.959390][T12516] bridge_slave_0: entered allmulticast mode [ 343.961559][T12516] bridge_slave_0: entered promiscuous mode [ 344.005284][T12516] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.005467][T12516] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.005595][T12516] bridge_slave_1: entered allmulticast mode [ 344.007527][T12516] bridge_slave_1: entered promiscuous mode [ 344.094522][T12516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.095473][T12524] lo speed is unknown, defaulting to 1000 [ 344.126490][T12516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.152599][T12524] wg0 speed is unknown, defaulting to 1000 [ 344.204321][T12516] team0: Port device team_slave_0 added [ 344.233736][T12516] team0: Port device team_slave_1 added [ 344.325890][T12516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.325910][T12516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.325936][T12516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.395123][T12516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.395140][T12516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.395168][T12516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.402558][T12520] lo speed is unknown, defaulting to 1000 [ 344.446007][ T5625] Bluetooth: hci10: command tx timeout [ 344.473894][T12520] wg0 speed is unknown, defaulting to 1000 [ 344.569464][T12516] hsr_slave_0: entered promiscuous mode [ 344.570234][T12516] hsr_slave_1: entered promiscuous mode [ 344.570770][T12516] debugfs: 'hsr0' already exists in 'hsr' [ 344.570790][T12516] Cannot create hsr debugfs directory [ 344.604706][ T52] Bluetooth: hci11: command tx timeout [ 344.673689][ T52] Bluetooth: hci12: command tx timeout [ 344.833218][ T52] Bluetooth: hci13: command tx timeout [ 344.845335][T12514] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.845565][T12514] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.845927][T12514] bridge_slave_0: entered allmulticast mode [ 344.863726][T12514] bridge_slave_0: entered promiscuous mode [ 344.873963][T12514] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.874220][T12514] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.876597][T12514] bridge_slave_1: entered allmulticast mode [ 344.891980][T12514] bridge_slave_1: entered promiscuous mode [ 344.991367][T12514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.035079][T12514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.169147][T12514] team0: Port device team_slave_0 added [ 345.169793][T12524] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.169892][T12524] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.170018][T12524] bridge_slave_0: entered allmulticast mode [ 345.176708][T12524] bridge_slave_0: entered promiscuous mode [ 345.227521][T12514] team0: Port device team_slave_1 added [ 345.227893][T12524] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.227999][T12524] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.228141][T12524] bridge_slave_1: entered allmulticast mode [ 345.231540][T12524] bridge_slave_1: entered promiscuous mode [ 345.317024][ T1730] block nbd0: Possible stuck request ffff888026ffe000: control (read@0,4096B). Runtime 240 seconds [ 345.375550][T12524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.415810][T12514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.415827][T12514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.415854][T12514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.419659][T12514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.419674][T12514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.419701][T12514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.432875][T12524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.537380][ T5625] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 345.541134][ T5625] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 345.546227][ T5625] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 345.567892][ T5625] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 345.568537][ T5625] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 345.648705][T12524] team0: Port device team_slave_0 added [ 345.699346][T12524] team0: Port device team_slave_1 added [ 345.754503][T12520] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.754679][T12520] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.754809][T12520] bridge_slave_0: entered allmulticast mode [ 345.757445][T12520] bridge_slave_0: entered promiscuous mode [ 345.809030][T12514] hsr_slave_0: entered promiscuous mode [ 345.810598][T12514] hsr_slave_1: entered promiscuous mode [ 345.811353][T12514] debugfs: 'hsr0' already exists in 'hsr' [ 345.811373][T12514] Cannot create hsr debugfs directory [ 345.812444][T12524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.812458][T12524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.812484][T12524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.824734][T12520] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.825143][T12520] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.825511][T12520] bridge_slave_1: entered allmulticast mode [ 345.831817][T12520] bridge_slave_1: entered promiscuous mode [ 345.917799][T12524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.917817][T12524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.917847][T12524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.998547][T12520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.037144][T12520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.200607][T12520] team0: Port device team_slave_0 added [ 346.215858][T12520] team0: Port device team_slave_1 added [ 346.252311][T12524] hsr_slave_0: entered promiscuous mode [ 346.256086][T12524] hsr_slave_1: entered promiscuous mode [ 346.260398][T12524] debugfs: 'hsr0' already exists in 'hsr' [ 346.260465][T12524] Cannot create hsr debugfs directory [ 346.328873][T12520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.328892][T12520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.328918][T12520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.416912][T12520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.416931][T12520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.416960][T12520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.513093][ T5625] Bluetooth: hci10: command tx timeout [ 346.627856][T12520] hsr_slave_0: entered promiscuous mode [ 346.629089][T12520] hsr_slave_1: entered promiscuous mode [ 346.630155][T12520] debugfs: 'hsr0' already exists in 'hsr' [ 346.630176][T12520] Cannot create hsr debugfs directory [ 346.677613][T12581] lo speed is unknown, defaulting to 1000 [ 346.684062][ T5625] Bluetooth: hci11: command tx timeout [ 346.709754][T12581] wg0 speed is unknown, defaulting to 1000 [ 346.752857][ T5625] Bluetooth: hci12: command tx timeout [ 346.913543][ T5625] Bluetooth: hci13: command tx timeout [ 347.207509][T12581] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.207721][T12581] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.207813][T12581] bridge_slave_0: entered allmulticast mode [ 347.209137][T12581] bridge_slave_0: entered promiscuous mode [ 347.215904][T12581] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.216139][T12581] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.216463][T12581] bridge_slave_1: entered allmulticast mode [ 347.221069][T12581] bridge_slave_1: entered promiscuous mode [ 347.302429][T12581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.310342][T12581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.343870][T12581] team0: Port device team_slave_0 added [ 347.358993][T12581] team0: Port device team_slave_1 added [ 347.388364][T12581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.388380][T12581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.388400][T12581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.390043][T12581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.390056][T12581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.390078][T12581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.499266][T12581] hsr_slave_0: entered promiscuous mode [ 347.500258][T12581] hsr_slave_1: entered promiscuous mode [ 347.501841][T12581] debugfs: 'hsr0' already exists in 'hsr' [ 347.501859][T12581] Cannot create hsr debugfs directory [ 347.632900][ T5625] Bluetooth: hci14: command tx timeout [ 348.593054][ T5625] Bluetooth: hci10: command tx timeout [ 348.755148][ T5625] Bluetooth: hci11: command tx timeout [ 348.832945][ T5625] Bluetooth: hci12: command tx timeout [ 348.992874][ T5625] Bluetooth: hci13: command tx timeout [ 349.712886][ T5625] Bluetooth: hci14: command tx timeout [ 350.683146][ T5625] Bluetooth: hci10: command tx timeout [ 350.833437][ T5625] Bluetooth: hci11: command tx timeout [ 350.912964][ T5625] Bluetooth: hci12: command tx timeout [ 351.073475][ T5625] Bluetooth: hci13: command tx timeout [ 351.793207][ T5625] Bluetooth: hci14: command tx timeout [ 353.873287][ T5625] Bluetooth: hci14: command tx timeout [ 363.233771][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.393364][ T1730] block nbd0: Possible stuck request ffff888026ffe000: control (read@0,4096B). Runtime 270 seconds [ 378.597824][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.032880][ T5625] Bluetooth: hci4: command 0x0405 tx timeout [ 402.370263][ T5625] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 402.380932][ T5625] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 402.389928][ T5625] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 402.399173][ T5625] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 402.399799][ T5625] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 402.428814][ T4934] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 402.442131][ T52] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 402.457582][ T52] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 402.460950][ T52] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 402.461702][ T52] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 403.013566][T12610] lo speed is unknown, defaulting to 1000 [ 403.015682][T12610] wg0 speed is unknown, defaulting to 1000 [ 403.233111][T12612] lo speed is unknown, defaulting to 1000 [ 403.235057][T12612] wg0 speed is unknown, defaulting to 1000 [ 403.494813][ T52] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 403.502117][ T52] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 403.504531][ T52] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 403.516072][ T52] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 403.518388][ T52] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 403.570587][T12610] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.571226][T12610] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.571376][T12610] bridge_slave_0: entered allmulticast mode [ 403.595850][T12610] bridge_slave_0: entered promiscuous mode [ 403.609961][T12610] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.610219][T12610] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.610365][T12610] bridge_slave_1: entered allmulticast mode [ 403.634576][T12610] bridge_slave_1: entered promiscuous mode [ 403.684335][ T52] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 403.691510][ T52] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 403.692352][ T52] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 403.696044][ T52] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 403.698270][ T52] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 403.741859][T12610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.761383][T12610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.837943][T12610] team0: Port device team_slave_0 added [ 403.845991][T12610] team0: Port device team_slave_1 added [ 403.944564][T12610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.944583][T12610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.944635][T12610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.946739][T12610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.946755][T12610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.946783][T12610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.108000][T12610] hsr_slave_0: entered promiscuous mode [ 404.110692][T12610] hsr_slave_1: entered promiscuous mode [ 404.111759][T12610] debugfs: 'hsr0' already exists in 'hsr' [ 404.111780][T12610] Cannot create hsr debugfs directory [ 404.432761][T12656] Bluetooth: hci15: command tx timeout [ 404.456542][T12612] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.456677][T12612] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.457131][T12612] bridge_slave_0: entered allmulticast mode [ 404.459798][T12612] bridge_slave_0: entered promiscuous mode [ 404.491565][T12612] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.491766][T12612] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.491912][T12612] bridge_slave_1: entered allmulticast mode [ 404.513918][T12612] bridge_slave_1: entered promiscuous mode [ 404.522979][T12656] Bluetooth: hci16: command tx timeout [ 404.588668][T12612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.622036][T12612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.697811][T12612] team0: Port device team_slave_0 added [ 404.726351][T12612] team0: Port device team_slave_1 added [ 404.775409][T12612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.775427][T12612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.775455][T12612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.777509][T12612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.777524][T12612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 404.777552][T12612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.954990][T12612] hsr_slave_0: entered promiscuous mode [ 404.956118][T12612] hsr_slave_1: entered promiscuous mode [ 404.956840][T12612] debugfs: 'hsr0' already exists in 'hsr' [ 404.956859][T12612] Cannot create hsr debugfs directory [ 405.006854][T12640] lo speed is unknown, defaulting to 1000 [ 405.035734][T12640] wg0 speed is unknown, defaulting to 1000 [ 405.288649][T12643] lo speed is unknown, defaulting to 1000 [ 405.304497][T12643] wg0 speed is unknown, defaulting to 1000 [ 405.477855][ T1730] block nbd0: Possible stuck request ffff888026ffe000: control (read@0,4096B). Runtime 300 seconds [ 405.536968][ T5616] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 405.544843][ T5616] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 405.548145][ T5616] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 405.575631][ T5616] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 405.580555][ T5616] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 405.632941][T12656] Bluetooth: hci17: command tx timeout [ 405.793006][T12656] Bluetooth: hci18: command tx timeout [ 406.064821][T12640] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.065015][T12640] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.065206][T12640] bridge_slave_0: entered allmulticast mode [ 406.067260][T12640] bridge_slave_0: entered promiscuous mode [ 406.128424][T12640] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.128520][T12640] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.128678][T12640] bridge_slave_1: entered allmulticast mode [ 406.130675][T12640] bridge_slave_1: entered promiscuous mode [ 406.217884][T12640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.248102][T12640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.270645][T12643] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.270849][T12643] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.270982][T12643] bridge_slave_0: entered allmulticast mode [ 406.272273][T12643] bridge_slave_0: entered promiscuous mode [ 406.295064][T12656] Bluetooth: hci5: command 0x0406 tx timeout [ 406.295104][ T5616] Bluetooth: hci7: command 0x0406 tx timeout [ 406.295110][T12656] Bluetooth: hci6: command 0x0406 tx timeout [ 406.295138][ T5616] Bluetooth: hci8: command 0x0406 tx timeout [ 406.401571][T12640] team0: Port device team_slave_0 added [ 406.401832][T12643] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.402938][T12643] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.403095][T12643] bridge_slave_1: entered allmulticast mode [ 406.414482][T12643] bridge_slave_1: entered promiscuous mode [ 406.459753][T12640] team0: Port device team_slave_1 added [ 406.513338][ T5622] Bluetooth: hci15: command tx timeout [ 406.535178][T12643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.584883][T12643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.585976][T12640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.585992][T12640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.586021][T12640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.592849][ T5622] Bluetooth: hci16: command tx timeout [ 406.677325][T12640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.677344][T12640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.677373][T12640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.732126][T12643] team0: Port device team_slave_0 added [ 406.749045][T12643] team0: Port device team_slave_1 added [ 406.826042][T12671] lo speed is unknown, defaulting to 1000 [ 406.839205][T12640] hsr_slave_0: entered promiscuous mode [ 406.840304][T12640] hsr_slave_1: entered promiscuous mode [ 406.841024][T12640] debugfs: 'hsr0' already exists in 'hsr' [ 406.841043][T12640] Cannot create hsr debugfs directory [ 406.865936][T12643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.865953][T12643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.865981][T12643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.868233][T12643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.868249][T12643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.868278][T12643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.917581][T12671] wg0 speed is unknown, defaulting to 1000 [ 407.096302][T12643] hsr_slave_0: entered promiscuous mode [ 407.097216][T12643] hsr_slave_1: entered promiscuous mode [ 407.097854][T12643] debugfs: 'hsr0' already exists in 'hsr' [ 407.097875][T12643] Cannot create hsr debugfs directory [ 407.569554][T12671] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.569735][T12671] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.569832][T12671] bridge_slave_0: entered allmulticast mode [ 407.571253][T12671] bridge_slave_0: entered promiscuous mode [ 407.578788][T12671] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.579053][T12671] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.579274][T12671] bridge_slave_1: entered allmulticast mode [ 407.580859][T12671] bridge_slave_1: entered promiscuous mode [ 407.633533][ T5622] Bluetooth: hci19: command tx timeout [ 407.665463][T12671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.668113][T12671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.709835][T12671] team0: Port device team_slave_0 added [ 407.717053][T12671] team0: Port device team_slave_1 added [ 407.718881][ T5622] Bluetooth: hci17: command tx timeout [ 407.761988][T12671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.762004][T12671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.762029][T12671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.808520][T12671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.808537][T12671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.808563][T12671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.873523][ T5622] Bluetooth: hci18: command tx timeout [ 407.905432][T12671] hsr_slave_0: entered promiscuous mode [ 407.906273][T12671] hsr_slave_1: entered promiscuous mode [ 407.906848][T12671] debugfs: 'hsr0' already exists in 'hsr' [ 407.906869][T12671] Cannot create hsr debugfs directory [ 408.592873][ T5622] Bluetooth: hci15: command tx timeout [ 408.673210][ T5622] Bluetooth: hci16: command tx timeout [ 409.712799][ T5622] Bluetooth: hci19: command tx timeout [ 409.793082][ T5622] Bluetooth: hci17: command tx timeout [ 409.953553][ T5622] Bluetooth: hci18: command tx timeout [ 410.673123][ T5622] Bluetooth: hci15: command tx timeout [ 410.752967][ T5622] Bluetooth: hci16: command tx timeout [ 411.392864][ T5622] Bluetooth: hci9: command 0x0406 tx timeout [ 411.792891][ T5634] Bluetooth: hci19: command tx timeout [ 411.873381][ T5634] Bluetooth: hci17: command tx timeout [ 412.032828][ T5622] Bluetooth: hci18: command tx timeout [ 413.873154][ T5622] Bluetooth: hci19: command tx timeout [ 423.393371][ T32] INFO: task syz.0.1683:12334 blocked for more than 143 seconds. [ 423.393397][ T32] Not tainted syzkaller #0 [ 423.393407][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.393416][ T32] task:syz.0.1683 state:D stack:27976 pid:12334 tgid:12333 ppid:5614 task_flags:0x400140 flags:0x00080002 [ 423.393503][ T32] Call Trace: [ 423.393515][ T32] [ 423.393528][ T32] __schedule+0x17db/0x58f0 [ 423.393615][ T32] ? __pfx___schedule+0x10/0x10 [ 423.393651][ T32] ? schedule+0x90/0x2b0 [ 423.393680][ T32] schedule+0x164/0x2b0 [ 423.393707][ T32] schedule_preempt_disabled+0x13/0x30 [ 423.393733][ T32] __mutex_lock+0x7c1/0x1550 ** replaying previous printk message ** [ 423.393733][ T32] __mutex_lock+0x7c1/0x1550 [ 423.393767][ T32] ? __mutex_lock+0x5d4/0x1550 [ 423.393798][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 423.393827][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 423.393856][ T32] ? stack_trace_save+0xa9/0x100 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 423.393880][ T32] ? __lock_acquire+0x747/0x2de0 [ 423.393904][ T32] ? radix_tree_lookup+0x240/0x290 [ 423.393932][ T32] genl_rcv_msg+0x10b/0x7a0 [ 423.393965][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.394005][ T32] netlink_rcv_skb+0x226/0x4a0 [ 423.394027][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.394054][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.394093][ T32] ? down_read+0x2be/0x330 [ 423.394119][ T32] genl_rcv+0x28/0x40 [ 423.394137][ T32] netlink_unicast+0x7bd/0x940 [ 423.394167][ T32] netlink_sendmsg+0x813/0xb40 [ 423.394189][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.394211][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 423.394231][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.394246][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 423.394266][ T32] __sys_sendto+0x408/0x5a0 [ 423.394290][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 423.394329][ T32] ? rcu_is_watching+0x16/0xb0 [ 423.394374][ T32] __x64_sys_sendto+0xde/0x100 [ 423.394408][ T32] do_syscall_64+0x166/0x520 [ 423.394429][ T32] ? trace_irq_disable+0x3b/0x140 [ 423.394450][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.394465][ T32] ? clear_bhb_loop+0x70/0xc0 [ 423.394483][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.394498][ T32] RIP: 0033:0x7fe60dd5e98e [ 423.394511][ T32] RSP: 002b:00007fe60ebcee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 423.394526][ T32] RAX: ffffffffffffffda RBX: 00007fe60ebd06c0 RCX: 00007fe60dd5e98e [ 423.394537][ T32] RDX: 0000000000000024 RSI: 00007fe60ebcf000 RDI: 0000000000000004 [ 423.394547][ T32] RBP: 0000000000000000 R08: 00007fe60ebcef04 R09: 000000000000000c [ 423.394556][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 423.394565][ T32] R13: 00007fe60ebcef58 R14: 00007fe60ebcf000 R15: 0000000000000000 [ 423.394653][ T32] [ 423.394660][ T32] INFO: task syz.0.1683:12337 blocked for more than 143 seconds. [ 423.394671][ T32] Not tainted syzkaller #0 [ 423.394679][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.394685][ T32] task:syz.0.1683 state:D stack:26536 pid:12337 tgid:12333 ppid:5614 task_flags:0x480140 flags:0x00080002 [ 423.394729][ T32] Call Trace: [ 423.394734][ T32] [ 423.394742][ T32] __schedule+0x17db/0x58f0 [ 423.394762][ T32] ? __lock_acquire+0x747/0x2de0 [ 423.394795][ T32] ? __pfx___schedule+0x10/0x10 [ 423.394812][ T32] ? lock_acquire+0x115/0x350 [ 423.394834][ T32] ? schedule+0x90/0x2b0 [ 423.394855][ T32] schedule+0x164/0x2b0 [ 423.394875][ T32] blk_mq_freeze_queue_wait+0x101/0x180 [ 423.394918][ T32] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 423.394945][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 423.394978][ T32] queue_limits_commit_update_frozen+0x55/0xd0 [ 423.395001][ T32] nbd_set_size+0x4c5/0x7d0 [ 423.395023][ T32] ? __pfx_nbd_set_size+0x10/0x10 [ 423.395069][ T32] ? nla_memcpy+0x5b/0xc0 [ 423.395096][ T32] nbd_genl_reconfigure+0x7e1/0x1040 [ 423.395122][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 423.395140][ T32] ? __kmalloc_noprof+0x38c/0x720 [ 423.395158][ T32] ? __nla_parse+0x40/0x60 [ 423.395181][ T32] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 423.395207][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 423.395232][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 423.395259][ T32] ? __lock_acquire+0x747/0x2de0 [ 423.395281][ T32] genl_rcv_msg+0x614/0x7a0 [ 423.395304][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.395323][ T32] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 423.395349][ T32] netlink_rcv_skb+0x226/0x4a0 [ 423.395365][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.395385][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.395411][ T32] ? down_read+0x2be/0x330 [ 423.395440][ T32] genl_rcv+0x28/0x40 [ 423.395458][ T32] netlink_unicast+0x7bd/0x940 [ 423.395488][ T32] netlink_sendmsg+0x813/0xb40 [ 423.395510][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.395531][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 423.395550][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.395565][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 423.395620][ T32] ____sys_sendmsg+0x54e/0x850 [ 423.395657][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.395686][ T32] ? import_iovec+0x73/0xa0 [ 423.395708][ T32] ___sys_sendmsg+0x2a5/0x360 [ 423.395729][ T32] ? __lock_acquire+0x747/0x2de0 [ 423.395748][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.395794][ T32] ? __fget_files+0x2a/0x420 [ 423.395815][ T32] ? __fget_files+0x3a2/0x420 [ 423.395844][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 423.395865][ T32] ? _raw_spin_unlock_irq+0x2e/0x50 [ 423.395885][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 423.395913][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 423.395937][ T32] do_syscall_64+0x166/0x520 [ 423.395958][ T32] ? trace_irq_disable+0x3b/0x140 [ 423.395973][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.395988][ T32] ? clear_bhb_loop+0x70/0xc0 [ 423.396006][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.396021][ T32] RIP: 0033:0x7fe60dd9e159 [ 423.396033][ T32] RSP: 002b:00007fe60eb8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.396048][ T32] RAX: ffffffffffffffda RBX: 00007fe60e026180 RCX: 00007fe60dd9e159 [ 423.396059][ T32] RDX: 0000000000000010 RSI: 0000200000000d00 RDI: 0000000000000004 [ 423.396068][ T32] RBP: 00007fe60de3506b R08: 0000000000000000 R09: 0000000000000000 [ 423.396078][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.396087][ T32] R13: 00007fe60e026218 R14: 00007fe60e026180 R15: 00007ffe610c5978 [ 423.396110][ T32] [ 423.396116][ T32] INFO: task syz.4.1686:12359 blocked for more than 143 seconds. [ 423.396127][ T32] Not tainted syzkaller #0 [ 423.396134][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.396140][ T32] task:syz.4.1686 state:D stack:27872 pid:12359 tgid:12357 ppid:5615 task_flags:0x400140 flags:0x00080002 [ 423.396182][ T32] Call Trace: [ 423.396187][ T32] [ 423.396195][ T32] __schedule+0x17db/0x58f0 [ 423.396233][ T32] ? __pfx___schedule+0x10/0x10 [ 423.396257][ T32] ? schedule+0x90/0x2b0 [ 423.396278][ T32] schedule+0x164/0x2b0 [ 423.396297][ T32] schedule_preempt_disabled+0x13/0x30 [ 423.396316][ T32] __mutex_lock+0x7c1/0x1550 [ 423.396340][ T32] ? __mutex_lock+0x5d4/0x1550 [ 423.396363][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 423.396383][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 423.396402][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 423.396426][ T32] ? radix_tree_lookup+0x240/0x290 [ 423.396457][ T32] genl_rcv_msg+0x10b/0x7a0 [ 423.396481][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.396511][ T32] netlink_rcv_skb+0x226/0x4a0 [ 423.396527][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.396547][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.396572][ T32] ? down_read+0x2be/0x330 [ 423.396642][ T32] genl_rcv+0x28/0x40 [ 423.396660][ T32] netlink_unicast+0x7bd/0x940 [ 423.396690][ T32] netlink_sendmsg+0x813/0xb40 [ 423.396712][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.396733][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 423.396752][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.396766][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 423.396784][ T32] __sys_sendto+0x408/0x5a0 [ 423.396808][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 423.396847][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 423.396865][ T32] __x64_sys_sendto+0xde/0x100 [ 423.396887][ T32] do_syscall_64+0x166/0x520 [ 423.396906][ T32] ? trace_irq_disable+0x3b/0x140 [ 423.396921][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.396937][ T32] ? clear_bhb_loop+0x70/0xc0 [ 423.396955][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.396970][ T32] RIP: 0033:0x7f220995e98e [ 423.396981][ T32] RSP: 002b:00007f220a879e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 423.396996][ T32] RAX: ffffffffffffffda RBX: 00007f220a87b6c0 RCX: 00007f220995e98e [ 423.397007][ T32] RDX: 0000000000000020 RSI: 00007f220a87a000 RDI: 0000000000000006 [ 423.397016][ T32] RBP: 0000000000000000 R08: 00007f220a879f04 R09: 000000000000000c [ 423.397026][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 423.397034][ T32] R13: 00007f220a879f58 R14: 00007f220a87a000 R15: 0000000000000000 [ 423.397057][ T32] [ 423.397063][ T32] INFO: task syz.4.1686:12364 blocked for more than 143 seconds. [ 423.397073][ T32] Not tainted syzkaller #0 [ 423.397079][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.397086][ T32] task:syz.4.1686 state:D stack:27872 pid:12364 tgid:12357 ppid:5615 task_flags:0x400040 flags:0x00080002 [ 423.397129][ T32] Call Trace: [ 423.397133][ T32] [ 423.397142][ T32] __schedule+0x17db/0x58f0 [ 423.397179][ T32] ? __pfx___schedule+0x10/0x10 [ 423.397204][ T32] ? schedule+0x90/0x2b0 [ 423.397224][ T32] schedule+0x164/0x2b0 [ 423.397244][ T32] schedule_preempt_disabled+0x13/0x30 [ 423.397262][ T32] __mutex_lock+0x7c1/0x1550 [ 423.397285][ T32] ? __mutex_lock+0x5d4/0x1550 [ 423.397308][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 423.397328][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 423.397347][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 423.397370][ T32] ? radix_tree_lookup+0x240/0x290 [ 423.397390][ T32] genl_rcv_msg+0x10b/0x7a0 [ 423.397413][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.397448][ T32] netlink_rcv_skb+0x226/0x4a0 [ 423.397464][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.397484][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.397510][ T32] ? down_read+0x2be/0x330 [ 423.397535][ T32] genl_rcv+0x28/0x40 [ 423.397552][ T32] netlink_unicast+0x7bd/0x940 [ 423.397634][ T32] netlink_sendmsg+0x813/0xb40 [ 423.397664][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.397686][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 423.397705][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.397719][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 423.397738][ T32] __sys_sendto+0x408/0x5a0 [ 423.397763][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 423.397781][ T32] ? errseq_sample+0x40/0x70 [ 423.397817][ T32] ? fd_install+0x94/0x3d0 [ 423.397837][ T32] ? fd_install+0x309/0x3d0 [ 423.397862][ T32] __x64_sys_sendto+0xde/0x100 [ 423.397884][ T32] do_syscall_64+0x166/0x520 [ 423.397904][ T32] ? trace_irq_disable+0x3b/0x140 [ 423.397919][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.397935][ T32] ? clear_bhb_loop+0x70/0xc0 [ 423.397953][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.397968][ T32] RIP: 0033:0x7f220995e98e [ 423.397980][ T32] RSP: 002b:00007f220a7f5e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 423.397995][ T32] RAX: ffffffffffffffda RBX: 00007f220a7f76c0 RCX: 00007f220995e98e [ 423.398006][ T32] RDX: 0000000000000020 RSI: 00007f220a7f6000 RDI: 000000000000000a [ 423.398015][ T32] RBP: 0000000000000000 R08: 00007f220a7f5f04 R09: 000000000000000c [ 423.398025][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 423.398034][ T32] R13: 00007f220a7f5f58 R14: 00007f220a7f6000 R15: 0000000000000000 [ 423.398056][ T32] [ 423.398062][ T32] INFO: task syz.1.1688:12373 blocked for more than 143 seconds. [ 423.398073][ T32] Not tainted syzkaller #0 [ 423.398079][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.398086][ T32] task:syz.1.1688 state:D stack:27736 pid:12373 tgid:12367 ppid:5617 task_flags:0x400040 flags:0x00080002 [ 423.398130][ T32] Call Trace: [ 423.398135][ T32] [ 423.398143][ T32] __schedule+0x17db/0x58f0 [ 423.398181][ T32] ? __pfx___schedule+0x10/0x10 [ 423.398206][ T32] ? schedule+0x90/0x2b0 [ 423.398227][ T32] schedule+0x164/0x2b0 [ 423.398247][ T32] schedule_preempt_disabled+0x13/0x30 [ 423.398265][ T32] __mutex_lock+0x7c1/0x1550 [ 423.398290][ T32] ? __mutex_lock+0x5d4/0x1550 [ 423.398313][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 423.398333][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 423.398353][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 423.398376][ T32] ? radix_tree_lookup+0x240/0x290 [ 423.398397][ T32] genl_rcv_msg+0x10b/0x7a0 [ 423.398420][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.398455][ T32] netlink_rcv_skb+0x226/0x4a0 [ 423.398471][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.398492][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.398517][ T32] ? down_read+0x2be/0x330 [ 423.398542][ T32] genl_rcv+0x28/0x40 [ 423.398559][ T32] netlink_unicast+0x7bd/0x940 [ 423.398632][ T32] netlink_sendmsg+0x813/0xb40 [ 423.398657][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.398678][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 423.398697][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.398712][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 423.398742][ T32] __sys_sendto+0x408/0x5a0 [ 423.398763][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 423.398800][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 423.398816][ T32] __x64_sys_sendto+0xde/0x100 [ 423.398837][ T32] do_syscall_64+0x166/0x520 [ 423.398854][ T32] ? trace_irq_disable+0x3b/0x140 [ 423.398868][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.398882][ T32] ? clear_bhb_loop+0x70/0xc0 [ 423.398898][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.398911][ T32] RIP: 0033:0x7f6427b5e98e [ 423.398922][ T32] RSP: 002b:00007f6428983e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 423.398937][ T32] RAX: ffffffffffffffda RBX: 00007f64289856c0 RCX: 00007f6427b5e98e [ 423.398947][ T32] RDX: 0000000000000020 RSI: 00007f6428984000 RDI: 0000000000000008 [ 423.398955][ T32] RBP: 0000000000000000 R08: 00007f6428983f04 R09: 000000000000000c [ 423.398964][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 423.398972][ T32] R13: 00007f6428983f58 R14: 00007f6428984000 R15: 0000000000000000 [ 423.398993][ T32] [ 423.398998][ T32] INFO: task syz.1.1688:12382 blocked for more than 143 seconds. [ 423.399008][ T32] Not tainted syzkaller #0 [ 423.399014][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.399020][ T32] task:syz.1.1688 state:D stack:27656 pid:12382 tgid:12367 ppid:5617 task_flags:0x400040 flags:0x00080002 [ 423.399060][ T32] Call Trace: [ 423.399064][ T32] [ 423.399072][ T32] __schedule+0x17db/0x58f0 [ 423.399107][ T32] ? __pfx___schedule+0x10/0x10 [ 423.399130][ T32] ? schedule+0x90/0x2b0 [ 423.399149][ T32] schedule+0x164/0x2b0 [ 423.399168][ T32] schedule_preempt_disabled+0x13/0x30 [ 423.399184][ T32] __mutex_lock+0x7c1/0x1550 [ 423.399207][ T32] ? __mutex_lock+0x5d4/0x1550 [ 423.399228][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 423.399246][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 423.399265][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 423.399286][ T32] ? radix_tree_lookup+0x240/0x290 [ 423.399305][ T32] genl_rcv_msg+0x10b/0x7a0 [ 423.399326][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.399354][ T32] netlink_rcv_skb+0x226/0x4a0 [ 423.399368][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.399387][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.399410][ T32] ? down_read+0x2be/0x330 [ 423.399437][ T32] genl_rcv+0x28/0x40 [ 423.399454][ T32] netlink_unicast+0x7bd/0x940 [ 423.399501][ T32] netlink_sendmsg+0x813/0xb40 [ 423.399522][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.399543][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 423.399562][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.399576][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 423.399640][ T32] __sys_sendto+0x408/0x5a0 [ 423.399665][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 423.399683][ T32] ? errseq_sample+0x40/0x70 [ 423.399720][ T32] ? fd_install+0x94/0x3d0 [ 423.399739][ T32] ? fd_install+0x309/0x3d0 [ 423.399765][ T32] __x64_sys_sendto+0xde/0x100 [ 423.399787][ T32] do_syscall_64+0x166/0x520 [ 423.399807][ T32] ? trace_irq_disable+0x3b/0x140 [ 423.399823][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.399838][ T32] ? clear_bhb_loop+0x70/0xc0 [ 423.399855][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.399870][ T32] RIP: 0033:0x7f6427b5e98e [ 423.399882][ T32] RSP: 002b:00007f6425d4fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 423.399896][ T32] RAX: ffffffffffffffda RBX: 00007f6425d516c0 RCX: 00007f6427b5e98e [ 423.399907][ T32] RDX: 0000000000000020 RSI: 00007f6425d50000 RDI: 0000000000000010 [ 423.399916][ T32] RBP: 0000000000000000 R08: 00007f6425d4ff04 R09: 000000000000000c [ 423.399926][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 423.399937][ T32] R13: 00007f6425d4ff58 R14: 00007f6425d50000 R15: 0000000000000000 [ 423.399959][ T32] [ 423.399965][ T32] INFO: task syz.2.1690:12377 blocked for more than 143 seconds. [ 423.399975][ T32] Not tainted syzkaller #0 [ 423.399982][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.399988][ T32] task:syz.2.1690 state:D stack:27872 pid:12377 tgid:12376 ppid:5619 task_flags:0x400040 flags:0x00080002 [ 423.400031][ T32] Call Trace: [ 423.400036][ T32] [ 423.400044][ T32] __schedule+0x17db/0x58f0 [ 423.400082][ T32] ? __pfx___schedule+0x10/0x10 [ 423.400106][ T32] ? schedule+0x90/0x2b0 [ 423.400126][ T32] schedule+0x164/0x2b0 [ 423.400146][ T32] schedule_preempt_disabled+0x13/0x30 [ 423.400164][ T32] __mutex_lock+0x7c1/0x1550 [ 423.400188][ T32] ? __mutex_lock+0x5d4/0x1550 [ 423.400211][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 423.400231][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 423.400250][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 423.400273][ T32] ? radix_tree_lookup+0x240/0x290 [ 423.400293][ T32] genl_rcv_msg+0x10b/0x7a0 [ 423.400315][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.400345][ T32] netlink_rcv_skb+0x226/0x4a0 [ 423.400360][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.400389][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.400415][ T32] ? down_read+0x2be/0x330 [ 423.400445][ T32] genl_rcv+0x28/0x40 [ 423.400462][ T32] netlink_unicast+0x7bd/0x940 [ 423.400492][ T32] netlink_sendmsg+0x813/0xb40 [ 423.400514][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.400535][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 423.400554][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.400569][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 423.400625][ T32] __sys_sendto+0x408/0x5a0 [ 423.400657][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 423.400697][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 423.400715][ T32] __x64_sys_sendto+0xde/0x100 [ 423.400738][ T32] do_syscall_64+0x166/0x520 [ 423.400758][ T32] ? trace_irq_disable+0x3b/0x140 [ 423.400773][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.400788][ T32] ? clear_bhb_loop+0x70/0xc0 [ 423.400806][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.400821][ T32] RIP: 0033:0x7f7088b5e98e [ 423.400833][ T32] RSP: 002b:00007f7089a07e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 423.400847][ T32] RAX: ffffffffffffffda RBX: 00007f7089a096c0 RCX: 00007f7088b5e98e [ 423.400858][ T32] RDX: 0000000000000020 RSI: 00007f7089a08000 RDI: 0000000000000004 [ 423.400867][ T32] RBP: 0000000000000000 R08: 00007f7089a07f04 R09: 000000000000000c [ 423.400876][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 423.400885][ T32] R13: 00007f7089a07f58 R14: 00007f7089a08000 R15: 0000000000000000 [ 423.400907][ T32] [ 423.400913][ T32] INFO: task syz.2.1690:12388 blocked for more than 143 seconds. [ 423.400923][ T32] Not tainted syzkaller #0 [ 423.400930][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.400938][ T32] task:syz.2.1690 state:D stack:27200 pid:12388 tgid:12376 ppid:5619 task_flags:0x400140 flags:0x00080002 [ 423.400982][ T32] Call Trace: [ 423.400986][ T32] [ 423.400995][ T32] __schedule+0x17db/0x58f0 [ 423.401033][ T32] ? __pfx___schedule+0x10/0x10 [ 423.401058][ T32] ? schedule+0x90/0x2b0 [ 423.401079][ T32] schedule+0x164/0x2b0 [ 423.401099][ T32] schedule_preempt_disabled+0x13/0x30 [ 423.401117][ T32] __mutex_lock+0x7c1/0x1550 [ 423.401142][ T32] ? __mutex_lock+0x5d4/0x1550 [ 423.401165][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 423.401186][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 423.401208][ T32] ? stack_trace_save+0xa9/0x100 [ 423.401225][ T32] ? __lock_acquire+0x747/0x2de0 [ 423.401243][ T32] ? radix_tree_lookup+0x240/0x290 [ 423.401264][ T32] genl_rcv_msg+0x10b/0x7a0 [ 423.401286][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.401317][ T32] netlink_rcv_skb+0x226/0x4a0 [ 423.401332][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.401352][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.401378][ T32] ? down_read+0x2be/0x330 [ 423.401409][ T32] genl_rcv+0x28/0x40 [ 423.401426][ T32] netlink_unicast+0x7bd/0x940 [ 423.401460][ T32] netlink_sendmsg+0x813/0xb40 [ 423.401482][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.401504][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 423.401523][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.401538][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 423.401556][ T32] __sys_sendto+0x408/0x5a0 [ 423.401624][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 423.401670][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 423.401687][ T32] __x64_sys_sendto+0xde/0x100 [ 423.401708][ T32] do_syscall_64+0x166/0x520 [ 423.401727][ T32] ? trace_irq_disable+0x3b/0x140 [ 423.401741][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.401755][ T32] ? clear_bhb_loop+0x70/0xc0 [ 423.401772][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.401786][ T32] RIP: 0033:0x7f7088b5e98e [ 423.401797][ T32] RSP: 002b:00007f70899e6e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 423.401811][ T32] RAX: ffffffffffffffda RBX: 00007f70899e86c0 RCX: 00007f7088b5e98e [ 423.401821][ T32] RDX: 000000000000001c RSI: 00007f70899e7000 RDI: 000000000000000b [ 423.401830][ T32] RBP: 0000000000000000 R08: 00007f70899e6f04 R09: 000000000000000c [ 423.401839][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 423.401847][ T32] R13: 00007f70899e6f58 R14: 00007f70899e7000 R15: 0000000000000000 [ 423.401868][ T32] [ 423.401874][ T32] INFO: task syz.3.1693:12409 blocked for more than 143 seconds. [ 423.401883][ T32] Not tainted syzkaller #0 [ 423.401890][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.401896][ T32] task:syz.3.1693 state:D stack:26736 pid:12409 tgid:12408 ppid:5624 task_flags:0x400140 flags:0x00080002 [ 423.401938][ T32] Call Trace: [ 423.401942][ T32] [ 423.401950][ T32] __schedule+0x17db/0x58f0 [ 423.401987][ T32] ? __pfx___schedule+0x10/0x10 [ 423.402018][ T32] ? schedule+0x90/0x2b0 [ 423.402037][ T32] schedule+0x164/0x2b0 [ 423.402056][ T32] schedule_preempt_disabled+0x13/0x30 [ 423.402074][ T32] __mutex_lock+0x7c1/0x1550 [ 423.402097][ T32] ? __mutex_lock+0x5d4/0x1550 [ 423.402119][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 423.402138][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 423.402159][ T32] ? stack_trace_save+0xa9/0x100 [ 423.402175][ T32] ? __lock_acquire+0x747/0x2de0 [ 423.402192][ T32] ? radix_tree_lookup+0x240/0x290 [ 423.402211][ T32] genl_rcv_msg+0x10b/0x7a0 [ 423.402233][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.402262][ T32] netlink_rcv_skb+0x226/0x4a0 [ 423.402276][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.402296][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.402319][ T32] ? down_read+0x2be/0x330 [ 423.402343][ T32] genl_rcv+0x28/0x40 [ 423.402359][ T32] netlink_unicast+0x7bd/0x940 [ 423.402387][ T32] netlink_sendmsg+0x813/0xb40 [ 423.402408][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.402428][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 423.402451][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.402465][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 423.402482][ T32] __sys_sendto+0x408/0x5a0 [ 423.402504][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 423.402542][ T32] ? do_user_addr_fault+0xc4c/0x1340 [ 423.402558][ T32] __x64_sys_sendto+0xde/0x100 [ 423.407497][ T32] do_syscall_64+0x166/0x520 [ 423.407639][ T32] ? trace_irq_disable+0x3b/0x140 [ 423.407698][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.407757][ T32] ? clear_bhb_loop+0x70/0xc0 [ 423.407812][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.407862][ T32] RIP: 0033:0x7fb0f655e98e [ 423.407914][ T32] RSP: 002b:00007fb0f7439e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 423.407967][ T32] RAX: ffffffffffffffda RBX: 00007fb0f743b6c0 RCX: 00007fb0f655e98e [ 423.408026][ T32] RDX: 0000000000000024 RSI: 00007fb0f743a000 RDI: 0000000000000007 [ 423.408060][ T32] RBP: 0000000000000000 R08: 00007fb0f7439f04 R09: 000000000000000c [ 423.408093][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 423.408127][ T32] R13: 00007fb0f7439f58 R14: 00007fb0f743a000 R15: 0000000000000000 [ 423.410729][ T32] [ 423.410741][ T32] INFO: task syz.3.1693:12410 blocked for more than 143 seconds. [ 423.410758][ T32] Not tainted syzkaller #0 [ 423.410768][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 423.410778][ T32] task:syz.3.1693 state:D stack:27872 pid:12410 tgid:12408 ppid:5624 task_flags:0x400040 flags:0x00080002 [ 423.410834][ T32] Call Trace: [ 423.410841][ T32] [ 423.410852][ T32] __schedule+0x17db/0x58f0 [ 423.410910][ T32] ? __pfx___schedule+0x10/0x10 [ 423.410946][ T32] ? schedule+0x90/0x2b0 [ 423.410976][ T32] schedule+0x164/0x2b0 [ 423.411004][ T32] schedule_preempt_disabled+0x13/0x30 [ 423.411030][ T32] __mutex_lock+0x7c1/0x1550 [ 423.411064][ T32] ? __mutex_lock+0x5d4/0x1550 [ 423.411097][ T32] ? genl_rcv_msg+0x10b/0x7a0 [ 423.411125][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 423.411151][ T32] ? __dev_queue_xmit+0x29b/0x3920 [ 423.411186][ T32] ? radix_tree_lookup+0x240/0x290 [ 423.411215][ T32] genl_rcv_msg+0x10b/0x7a0 [ 423.411249][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.411310][ T32] netlink_rcv_skb+0x226/0x4a0 [ 423.411348][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 423.411452][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 423.411550][ T32] ? down_read+0x2be/0x330 [ 423.411691][ T32] genl_rcv+0x28/0x40 [ 423.411759][ T32] netlink_unicast+0x7bd/0x940 [ 423.411859][ T32] netlink_sendmsg+0x813/0xb40 [ 423.411940][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.412014][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 423.412083][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.412135][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 423.416677][ T32] __sys_sendto+0x408/0x5a0 [ 423.416792][ T32] ? __pfx___sys_sendto+0x10/0x10 [ 423.416866][ T32] ? errseq_sample+0x40/0x70 [ 423.416999][ T32] ? fd_install+0x94/0x3d0 [ 423.417068][ T32] ? fd_install+0x309/0x3d0 [ 423.417157][ T32] __x64_sys_sendto+0xde/0x100 [ 423.417236][ T32] do_syscall_64+0x166/0x520 [ 423.417311][ T32] ? trace_irq_disable+0x3b/0x140 [ 423.417362][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.417418][ T32] ? clear_bhb_loop+0x70/0xc0 [ 423.417480][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.417537][ T32] RIP: 0033:0x7fb0f655e98e [ 423.417579][ T32] RSP: 002b:00007fb0f7418e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 423.417678][ T32] RAX: ffffffffffffffda RBX: 00007fb0f741a6c0 RCX: 00007fb0f655e98e [ 423.417717][ T32] RDX: 0000000000000024 RSI: 00007fb0f7419000 RDI: 0000000000000006 [ 423.417748][ T32] RBP: 0000000000000000 R08: 00007fb0f7418f04 R09: 000000000000000c [ 423.417785][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 423.417817][ T32] R13: 00007fb0f7418f58 R14: 00007fb0f7419000 R15: 0000000000000000 [ 423.417916][ T32] [ 423.417936][ T32] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 423.418100][ T32] [ 423.418100][ T32] Showing all locks held in the system: [ 423.418130][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 423.421327][ T32] #0: ffffffff8ec364d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 423.421492][ T32] #1: ffffffff9ad442d8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 423.421699][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 423.421739][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 423.421872][ T32] locks held by kworker/u8:5/84: 3, last CPU#1: [ 423.421910][ T32] #0: ffff888033265940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 423.422071][ T32] #1: ffffc900024dfc40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 423.422217][ T32] #2: ffff88807f3669c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xd4/0xfc0 [ 423.422457][ T32] locks held by getty/5372: 2, on CPU#1: [ 423.422489][ T32] #0: ffff8880360840a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 423.429086][ T32] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 423.429261][ T32] locks held by udevd/5631: 1, on CPU#0: [ 423.429292][ T32] #0: ffff88802237f350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 423.429464][ T32] locks held by kworker/u8:13/6311: 5, last CPU#1: [ 423.429510][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 423.429722][ T32] #1: ffffc900099b7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 423.429863][ T32] #2: ffffffff8ebe9970 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 [ 423.430010][ T32] #3: ffffffff8ee38bc0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1a0 [ 423.430151][ T32] #4: ffffffff8ebff720 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 423.430332][ T32] locks held by syz.0.1683/12334: 2, on CPU#1: [ 423.430366][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 423.430520][ T32] #1: ffffffff902c5bc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 423.435645][ T32] locks held by syz.0.1683/12337: 6, on CPU#1: [ 423.435678][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 423.435809][ T32] #1: ffffffff902c5bc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 423.435964][ T32] #2: ffff888021fc8a60 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4a6/0x1040 [ 423.436110][ T32] #3: ffff88802238c7c8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x284/0x7d0 [ 423.436238][ T32] #4: ffff88802238c190 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 423.436386][ T32] #5: ffff88802238c1c8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 423.436545][ T32] locks held by syz.4.1686/12359: 2, on CPU#0: [ 423.436654][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 423.436801][ T32] #1: ffffffff902c5bc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 423.436933][ T32] locks held by syz.4.1686/12364: 2, on CPU#1: [ 423.436968][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 423.440616][ T32] #1: ffffffff902c5bc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 423.440775][ T32] locks held by syz.1.1688/12373: 2, on CPU#1: [ 423.440821][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 423.440949][ T32] #1: ffffffff902c5bc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 423.441089][ T32] locks held by syz.1.1688/12382: 2, on CPU#1: [ 423.441127][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 423.441259][ T32] #1: ffffffff902c5bc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 423.441391][ T32] locks held by syz.2.1690/12377: 2, on CPU#0: [ 423.441437][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 423.441568][ T32] #1: ffffffff902c5bc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 423.441748][ T32] locks held by syz.2.1690/12388: 2, on CPU#1: [ 423.441786][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 423.441916][ T32] #1: ffffffff902c5bc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 423.442455][ T32] locks held by syz.3.1693/12409: 2, on CPU#0: [ 423.442495][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 423.445457][ T32] #1: ffffffff902c5bc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 423.445656][ T32] locks held by syz.3.1693/12410: 2, on CPU#0: [ 423.445697][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 423.445833][ T32] #1: ffffffff902c5bc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 423.445969][ T32] locks held by syz-executor/12416: 2, on CPU#1: [ 423.445994][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 423.446133][ T32] #1: ffffffff902c5bc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 423.446264][ T32] locks held by syz-executor/12419: 2, on CPU#0: [ 423.446303][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 423.446450][ T32] #1: ffffffff902c5bc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 423.448255][ T32] locks held by syz-executor/12420: 2, on CPU#1: [ 423.448270][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 423.448444][ T32] #1: ffffffff902c5bc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 423.448586][ T32] locks held by syz-executor/12427: 2, on CPU#0: [ 423.448665][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 423.448792][ T32] #1: ffffffff902c5bc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 423.448945][ T32] locks held by syz-executor/12482: 2, on CPU#0: [ 423.448976][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 423.449119][ T32] #1: ffffffff902c5bc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 423.449263][ T32] locks held by syz-executor/12514: 2, on CPU#0: [ 423.449295][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 423.449440][ T32] #1: ffffffff902c5bc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 423.449578][ T32] locks held by syz-executor/12516: 2, on CPU#0: [ 423.449795][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 423.449948][ T32] #1: ffffffff902c5bc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 423.450080][ T32] locks held by syz-executor/12520: 2, on CPU#1: [ 423.450118][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 423.450259][ T32] #1: ffffffff902c5bc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 423.450395][ T32] locks held by syz-executor/12524: 2, on CPU#0: [ 423.450442][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 423.450572][ T32] #1: ffffffff902c5bc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 423.450775][ T32] locks held by syz-executor/12581: 2, on CPU#0: [ 423.450807][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 423.450946][ T32] #1: ffffffff902c5bc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 423.451084][ T32] locks held by syz-executor/12610: 2, on CPU#1: [ 423.451129][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 423.451327][ T32] #1: ffffffff902c5bc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 423.451466][ T32] locks held by syz-executor/12612: 2, on CPU#0: [ 423.451504][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 423.451681][ T32] #1: ffffffff902c5bc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 423.451822][ T32] locks held by syz-executor/12640: 2, on CPU#0: [ 423.451859][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 423.451983][ T32] #1: ffffffff902c5bc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 423.452118][ T32] locks held by syz-executor/12643: 2, on CPU#1: [ 423.452149][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 423.452278][ T32] #1: ffffffff902c5bc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 423.452418][ T32] locks held by syz-executor/12671: 2, on CPU#0: [ 423.452463][ T32] #0: ffffffff902c5d88 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 423.464823][ T32] #1: ffffffff902c5bc0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 423.465022][ T32] [ 423.465034][ T32] ============================================= [ 423.465034][ T32] [ 423.465078][ T32] NMI backtrace for cpu 1 [ 423.465119][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 423.465178][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 423.465207][ T32] Call Trace: [ 423.465228][ T32] [ 423.465254][ T32] dump_stack_lvl+0xe8/0x150 [ 423.465326][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 423.465392][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 423.465495][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 423.465565][ T32] sys_info+0x135/0x170 [ 423.465614][ T32] watchdog+0xfd7/0x1030 [ 423.465686][ T32] ? watchdog+0x1c7/0x1030 [ 423.465762][ T32] kthread+0x38b/0x480 [ 423.465811][ T32] ? __pfx_watchdog+0x10/0x10 [ 423.465853][ T32] ? __pfx_kthread+0x10/0x10 [ 423.465912][ T32] ret_from_fork+0x514/0xb70 [ 423.465998][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 423.466047][ T32] ? __switch_to+0xc89/0x1420 [ 423.466149][ T32] ? __pfx_kthread+0x10/0x10 [ 423.466219][ T32] ret_from_fork_asm+0x1a/0x30 [ 423.466359][ T32] [ 423.466446][ T32] Sending NMI from CPU 1 to CPUs 0: [ 423.466514][ C0] NMI backtrace for cpu 0 [ 423.466527][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 423.466548][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 423.466559][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 423.466586][ C0] Code: e8 7e 83 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f 86 c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 5a 7f 76 06 cc 44 89 f9 80 e1 07 [ 423.466606][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 423.466623][ C0] RAX: 1ffffffff35a8800 RBX: 00000000000003fd RCX: 0000000000000000 [ 423.466636][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 423.466647][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 423.466660][ C0] R10: dffffc0000000000 R11: ffffffff85736a40 R12: dffffc0000000000 [ 423.466674][ C0] R13: 0000000000000000 R14: ffffffff9ad44300 R15: 0000000000000000 [ 423.466687][ C0] FS: 0000000000000000(0000) GS:ffff888124cc7000(0000) knlGS:0000000000000000 [ 423.466703][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 423.466716][ C0] CR2: 0000558168f87168 CR3: 000000007f166000 CR4: 00000000003526f0 [ 423.466735][ C0] Call Trace: [ 423.466742][ C0] [ 423.466751][ C0] wait_for_lsr+0x184/0x2f0 [ 423.466776][ C0] __serial8250_console_fifo_write+0x346/0x3e0 [ 423.466810][ C0] serial8250_console_write+0xaa1/0x1200 [ 423.466838][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 423.466860][ C0] ? __schedule+0x17f1/0x58f0 [ 423.466892][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 423.466924][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 423.466956][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 423.466987][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 423.467013][ C0] nbcon_kthread_func+0x679/0x880 [ 423.467038][ C0] ? nbcon_kthread_func+0x163/0x880 [ 423.467058][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 423.467083][ C0] ? __kthread_parkme+0x71/0x1f0 [ 423.467111][ C0] ? __kthread_parkme+0x199/0x1f0 [ 423.467141][ C0] kthread+0x38b/0x480 [ 423.467159][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 423.467178][ C0] ? __pfx_kthread+0x10/0x10 [ 423.467197][ C0] ret_from_fork+0x514/0xb70 [ 423.467216][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 423.467233][ C0] ? __switch_to+0xc89/0x1420 [ 423.467260][ C0] ? __pfx_kthread+0x10/0x10 [ 423.467279][ C0] ret_from_fork_asm+0x1a/0x30 [ 423.467316][ C0] [ 423.472584][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 427.326696][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 427.335827][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 427.345908][ T32] Call Trace: [ 427.349208][ T32] [ 427.352156][ T32] vpanic+0x56d/0xa60 [ 427.356182][ T32] ? __pfx___schedule+0x10/0x10 [ 427.361062][ T32] ? __pfx_vpanic+0x10/0x10 [ 427.365613][ T32] panic+0xc5/0xd0 [ 427.369363][ T32] ? __pfx_panic+0x10/0x10 [ 427.373805][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 427.379304][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 427.384699][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 427.390875][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 427.397055][ T32] watchdog+0x1030/0x1030 [ 427.401425][ T32] ? watchdog+0x1c7/0x1030 [ 427.405868][ T32] kthread+0x38b/0x480 [ 427.409969][ T32] ? __pfx_watchdog+0x10/0x10 [ 427.414661][ T32] ? __pfx_kthread+0x10/0x10 [ 427.419281][ T32] ret_from_fork+0x514/0xb70 [ 427.423889][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 427.429034][ T32] ? __switch_to+0xc89/0x1420 [ 427.433742][ T32] ? __pfx_kthread+0x10/0x10 [ 427.438352][ T32] ret_from_fork_asm+0x1a/0x30 [ 427.443152][ T32] [ 427.446781][ T32] Kernel Offset: disabled [ 427.451139][ T32] Rebooting in 86400 seconds..