last executing test programs: 20.922400977s ago: executing program 4 (id=621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0xf}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xbc, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x100, 0x4}, {0x0, 0xd, 0x2}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x5, 0x0, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r5, r6, 0x0, 0xffffffff004) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x6, 0xd, 0x3, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x40, 0x4, 0x96c0000}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="0018110000000000000000000000000000000000427e8915a83018219046be8ad7bb611fde3bcb6a37b088840bfe8394183d34c17e59c2bc8d1bef1f89d7992d9c5ee81c6ac807dd4e5817bb58e9209d9f6be4a1a49484a9860f75809804952f7084b30f75bc03253253bfaef8f00a5442f5be1f057409a21ac8f03212375de0c08069ce86a1", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000e00100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000320dc1c28500000082000000850000000f00000095000000000000009500a50500000000", @ANYRES8=r5], &(0x7f0000000040)='GPL\x00', 0x5, 0xc3, &(0x7f00000000c0)=""/195, 0x41100, 0x0, '\x00', r8, @fallback=0x35, r4, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94) 20.0241923s ago: executing program 1 (id=627): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0xd, 0x0, &(0x7f0000001bc0)) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e25, @broadcast}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)={@multicast1=0xe0000000, @loopback, 0x0, 0x1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x14) 19.691015126s ago: executing program 1 (id=631): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x6a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/299, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071122b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x44001, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast1, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0x0, 0xfffe, 0x7}, 0x8) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/uts\x00') ioctl$NS_GET_NSTYPE(r4, 0x8004b708, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r6, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfca2}) 19.581619332s ago: executing program 4 (id=632): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r4 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1088}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "56242cc20b362cea", "37064a1f0a0409163205033ac33f5b8b", "c38fe296", "1852f770ddf2de89"}, 0x28) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe, 0x0, 0x2}, 0x10) (async) write(r10, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24) (async) setsockopt$WPAN_SECURITY(r10, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) 19.581172506s ago: executing program 3 (id=633): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="53822fd833", 0x5}, {0x0}], 0x3, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000004000000040000000980000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000180)={r5, r4, 0x29}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r7, 0x75, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000000640)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f0000000580), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bind$inet(r6, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071102300000000009500005b00000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) pread64(r9, 0x0, 0x0, 0x1) splice(r0, 0x0, r6, 0x0, 0x2000000002ffff, 0x0) 19.580923812s ago: executing program 2 (id=634): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x8, 0x7}}}}}}, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0xfffffffffffffd57, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe19}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x10000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x1, 0x70bd35, 0x25dfdbfc, {0x0, 0x0, 0x600, r3, 0x48c81, 0x78001}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xfffffffc, 0x56e, 0x800}}]}]}, @IFLA_MTU={0x8, 0x4, 0xff}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 19.386143098s ago: executing program 3 (id=635): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYBLOB="c60bf0e1ede01c4a483977de6d5e5731540027bd4c4760a8f0597b99eb4da87cabd0b3ee04bf8bfa132a9b214ac44ee520db019bdf09400e568bb030cd7e9526bb890aca3c1674b3c5f3c3f62ddb5f186e072cb8278fd0e9973e5e5ddde311eea9506863f667885f17d87fd18d77b3", @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r3}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) (async) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYBLOB="c60bf0e1ede01c4a483977de6d5e5731540027bd4c4760a8f0597b99eb4da87cabd0b3ee04bf8bfa132a9b214ac44ee520db019bdf09400e568bb030cd7e9526bb890aca3c1674b3c5f3c3f62ddb5f186e072cb8278fd0e9973e5e5ddde311eea9506863f667885f17d87fd18d77b3", @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r3}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) 19.026869086s ago: executing program 2 (id=636): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x24042091, &(0x7f0000000480)={0xa, 0x0, 0x7f60, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000002c0), &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000300)={0x0, 0x61, "371789b34c0550d62a667a7a86adc858b7da81fd1c498fad478d133c8deda9605e83a0ef972509dba8cae98b34ee1bc8c5c7f9a0aa3378b78365c52cd3ccbd5b1cf1166a796f5aeb0697fca2ab73493ea369308a7b67627b2571e88bda2260ac2c"}, &(0x7f0000000000)=0x69) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000380)={r4, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}}, 0x80000000, 0x80, 0x2, 0x7, 0x2}, &(0x7f0000000080)=0x98) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @mcast1, 0x100000}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x800, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x110}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) getsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000240), &(0x7f0000000440)=0x4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff}, 0x8) close(r0) 18.900932855s ago: executing program 2 (id=637): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711220000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r5, 0x0, 0x6df33d3f}, 0x18) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x20, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x40, 0x0, 0x200, 0x470bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x200400d0}, 0x0) socket(0x10, 0x3, 0xc) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x2a020400) r7 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r7, 0x0) ppoll(&(0x7f0000000300)=[{r7, 0x100}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e22, 0x400, @empty}, 0x1c) sendto$inet6(r6, &(0x7f0000000000)="0e3e", 0x2, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 18.834229041s ago: executing program 4 (id=638): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r1 = socket$inet(0x2, 0x800, 0x7) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000180)=0x80000000) socket$inet6_tcp(0xa, 0x1, 0x0) writev(r2, 0x0, 0x0) write$tun(r2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@local, 0x400, 0x2, 0x0, 0x4, 0x5, 0x3}, &(0x7f00000000c0)=0x20) r4 = syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/pid\x00') ioctl$NS_GET_NSTYPE(r4, 0x8004b708, 0x0) socket(0x22, 0x5, 0x7) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, &(0x7f0000000180), &(0x7f0000000240)=""/125}, 0x20) 18.801825495s ago: executing program 1 (id=639): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x5452, &(0x7f0000000a00)={'dvmrp0\x00', @random='c\b\x00'}) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}, {0x0}], 0x2}, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x1c, 0x4) 18.28163648s ago: executing program 3 (id=640): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) socket$inet6(0xa, 0x2, 0x9) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000200000008000000f10f000000100400", @ANYRES32, @ANYBLOB='/\b\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="05000000050000f535b9900004005358fbfbb3c8c2dc000000"], 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="400000b29e29d1582b61c6002652703400"/33, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000280), &(0x7f00000000c0)='%pi6 \x00'}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1d, 0x2, 0x6) unshare(0x22020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7, 0x0, 0x4}, 0x18) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) 18.162198968s ago: executing program 4 (id=642): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00'}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000bf169dc127774f5e000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000001400128009000100626f6e640000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) 17.801250362s ago: executing program 0 (id=644): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req={0x2, 0xb, 0xe, 0x9e91}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close(0x4) 17.728595808s ago: executing program 2 (id=645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000300)="cd", 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000040)=0x5, 0x4) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x61}, {0x0, 0x0, 0x0, 0xffffffff}, {0x2, 0x0, 0x0, 0x40}, {0x6}]}) 17.585757818s ago: executing program 4 (id=646): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa, 0x2}, 0xe) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r1, 0x89e3) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)="2ba2bb6f8b7d0adf745526c5aa82579be29df13bf3", 0x15}], 0x1) epoll_create1(0x0) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e07", 0xdd) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x8001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtaction={0x1ac, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x198, 0x1, [@m_csum={0x194, 0x5, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x4, 0x2000000e, 0x80000000}, 0x18}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x3e, 0x0, 0x3, 0xe}, 0x4c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1d, 0xed4, 0x6, 0x81, 0x2}, 0x1a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x5f41291e, 0x1, 0x81, 0x2}, 0x46}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8001, 0x8, 0x8, 0x7fff}, 0x73}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x20000003, 0x581, 0x2}, 0x56}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x8, 0x9, 0x9}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xf, 0x100, 0x2, 0x3, 0x8}, 0x39}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x7ff, 0x0, 0x9, 0x7}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10001, 0xd75f, 0x3, 0x7, 0x81}, 0x22}}]}, {0x4e, 0x6, "2cb90ef12de838788df3de43973afd41c7674886522c403fc16fd698c525dcf9b2d53a40cfb91d0c17e72e8f40978720d860fa2af1c4bbf5dd2254a397aab82568e1e7014f6170dabe32"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="680200000005010400000000000000000a0000075402010000000000ffffff7f0908d70081000d0073"], 0x268}, 0x1, 0x0, 0x0, 0x2004}, 0x20040081) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000280)=0x9, 0x12) write$cgroup_subtree(r5, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0], 0x5) readv(r7, &(0x7f0000000140)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1) 17.125221521s ago: executing program 1 (id=647): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100006e8063f29fa54545c540d4941de75c77c490872455ea79010000008fe6d51b96ea465d0ba366c6aae50c0a3cdf0e6739a3c85beb59639a0f0ca021d4c6d72cd7c77b80c6199abec72c3e963e0ed19bdb5d21890c9846c5d369970b517d3a", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b55385000000912b5fd785000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000100)={r6, 0x4, 0x0, 0x80000001}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001"], 0x98}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) 17.125030244s ago: executing program 0 (id=648): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffe, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x22}}]}}}, @IFLA_MTU={0x8, 0x4, 0x1000}]}, 0x44}}, 0x4000) 17.090662739s ago: executing program 0 (id=649): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x6a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/299, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071122b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x44001, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast1, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0xfffc, 0x0, 0xfffe, 0x7}, 0x8) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/uts\x00') ioctl$NS_GET_NSTYPE(r4, 0x8004b708, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r6, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfca2}) 17.035486453s ago: executing program 2 (id=650): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x38, 0x701, 0xfffffffc, 0x0, {0x6}}, 0x14}}, 0x0) (async, rerun: 64) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000600"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async, rerun: 32) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r9 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x8, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='consume_skb\x00', r11}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r13, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r12, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async, rerun: 64) unshare(0x100) (rerun: 64) 16.801982371s ago: executing program 2 (id=651): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x8, r5}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x60) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x30) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180095", @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRES32=r4, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r8, 0x8b2b, &(0x7f0000000040)) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r9) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000400000014000500fc0100000000000000000000ad000001080002000500000014000600ff020000000000a30885621a982b3c0106000b0002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) 16.628685751s ago: executing program 4 (id=652): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x16, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x941, 0x0, 0x0, 0x0, 0x1}, @tail_call, @map_idx={0x18, 0x4, 0x5, 0x0, 0xc}]}, &(0x7f00000004c0)='syzkaller\x00', 0x1, 0xd1, &(0x7f0000000500)=""/209, 0x41000, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x1, 0x8000, 0x10}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000006c0)=[{0x2, 0x2, 0x7, 0x5}, {0x3, 0x3, 0x6, 0x7}, {0x0, 0x3, 0x2, 0xb}], 0x10, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000003c0)='rpcgss_createauth\x00', r3, 0x0, 0x7}, 0x18) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r4, @ANYBLOB="2f0429bd7000fbdbdf25030000000c0002000700000000000000080001000000000005000a00ff000000400007800c000180"], 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB=' '], 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000000040)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(r6, &(0x7f0000000980)="16014ea710bf38f3fcaa32dbcda72c5fa4b9900a7210aa2acaf7fd05d04a010ebd638d852f1175717fc90c3934337fa4a6a6c082a525cebf5f0a161018ac836cfab3a594aeae29235a74f4179c563d1de02fe54b9bf7a7899d317a14998dfb8de0f1523de6ee39bb68a09e30e418e7bbf10481eb70a034df6b927b4d5ce2da4519f32433ff4e6dad8babca09eb7169dd79eff35526b534618db7291602a885c4b01db44fa6e524fc9a71ff36100e6330a0da9a452209d57a2b861064238104819a4932efd776c1275a6d29d58a4c8dd3e1e98b0cb2aa00675be8b19a796cb9f05ee3aa40727ce9c81801d23b30f20109c8669a61d30a30d90773649f9fdaa7d56057080a76ec17c9bc037cc74e58c658429e9cead4ad43c0a5b1d0bc1e1a99bd2c2c54ec5ee301981d046b8a86067fb6762724902021951d35dd805eecaee2670d407e44e4db0190062e29f7f13354a7f5492c5d61f4be599b1f66e8315d408af8306450324640618fe5889c5cbb661282a1952c9bf45ea552232cd7df3625de31520b7c625746bbe8d77789427420d62b9fc80edd2f200d8a16aadff9c975fb0fef1f3d4c615059b53066b08367ed5eeeda26cafc51104b0ae8f2bb58994d7b33e629e744dcbc62d10bc93544cfc699377cc059eabbf13d62dc7cbfe9a065366a818fa81cdd92c1269261c59857b93fd4ae3c6be939cf755a7b21a43e580af3103030b888e599998b3127640f12e26446df2c40a5449c108377b460f1f3dc657eedbb1465587a4c9c50ecb9e26a113c7064f6974cddf257c87847586a834e99e77277466245f7eec316a1e49ac15b7e152b3ba1e23db400e63e6da03265656ba943f03d1d99e8ba03cefa33905ebce443883ad760dd710b588cea59e75dca23751026c53e1166dd6f5f5d600b5fdbcc84f1d5b0a13017a6c5ffe78f35c5e01a89d03476bc06537a817f2e473536e6562af43abb34f3eaee8b3045003e7ef5ce4f41180cb9350c78eca918d7d340553f80b4d29a8878bb28f44c5826181e15df8c5cb0bfa757687ce82ce66830527edf255ed7b55d503e1f7850a9636d1d1c6a5c89fee3500d3569e75ab232b3a289aaceab7553c15d60c41f9c964ae514937dad79ce04b6676bf77eac4c3ead7ec7be4f0afa6dbf66bfd5344eeb66259b5b6f201aa5691435a50a589bb4784b6b8c160081d34a50931efe6228b540bf4296bcd51e35b18df90671036305bcf9f9bda809452dc5ea605a8d6bd48b194e2a1ce810987598ba61768e0fc31671606614414a9aa147e6d32e9bbbefbd490eedc6e80c0235ba8ca3c11dd4eef6d8c28a6dd563b62e956b7a60ee9ae7685fa475c0df868f446d02755479d314cda2bca491786fe56db40117da5f9b1881f80df91e86928b3034f1cf33a4ff6cd69b9a39f4417f546b8defc864f393930cdf32a64e8dce459b2316aeaaf450df002ccb5b7c0b448253fa3460594052da150bcc011ebc91f793ba2f7ec031d0e9d2da1aabadcbfa6ed2b9bfa7a4ced3fb6b36de12b53240deb2174b5127e568951384bedfdb2f1e5d868ea2e3abff867a3ff3d0555f9d47313a5b2fea2caa308a8cc552a2a6dd9b025edbf62a0a89e8b8c3f7afd55f3c96c45a921d65acf6de588e6d845f668d4d072fc175adb83e07571c81f4ae00fcb3c1e0038cdec2f2b15cd4580a6a6bdc1348a418f740a4a75b428f293e27f5161854f34b2f533563bd941bf9be615a0468c066a44a7380ad06bd6db50087c7068896aaabc667f549bef9798c57e8c5a377683cd2640975f9a3e7fb0c617b537e12b3cb27944242e672c1da421619fc79820801cf17019c362596df3eabc029cb4c5d8e0d3041d945ea6bb1e84b21409e7163921b32eba6b57d280feaf8308b3a28aa2e791127248dfbb9639c895cf1da9017940f688a719f3511f881a1da4937b81c41d79cd84d925a39acf39559ff2d48bc84fbb990af4b46c7d571dae61f54566a0615426221883535f670767794ae46903219f8dd3be145cabeb309dfcf87a8f27144f71bb710d9bbcf67ed80c5017e860c3196abdc241a679d949aa02641fa48f93212fdb2a70a61fe8823fbd0fe5c461addac89e1a13848ad6923db4a6a9cdd592105c10290701d2ece1c14c812a029dd917ff402b0397b42887a1ed1d2a5ad22c87525264ae799bfbe96ce50b734404836a2f431dccedb217fb8d7f88208c67503456b7a6f4af3389be33c3999b0ba128f240aa1755e6c63bfe169a7d22aa19784ea668fa62153c3a923ed710a8f93381d41751ab72007999643d7eabf202b3aabbe127fc27e363ec4dd1ee58eba0c177638f5199f6c6f4478f4b4169025db77b37979c17f3519a1f01d87b119c22923c5bde730f483a16bd5832ba9d48df8a87e6b20c2a376584e7c93e40eeee52e801327a21b3e8a19aea0bc4c1e0c32b8e23b1bc3560dafa62df036407ec1435824f05c1c869b60ce59ae5d823766c3b7d938425980bff9c6b631c98a689772cc9ecfcebe0009e78c9e237c1c107cd3812d6a6f41e6b40d0ed34cf3e6fae41a4ac5190919cd828c76c3fee68be5690c278b7789d758ee71e9d4e0e012db60436f6bc076c518812db8a83822ab43c2305b66d8f71a545f6ed8f8baa7a60d1e3a6674fc8d605f328d1c5f2425776b83bd5abacd5f845c8d79fa49afaf3f516cc821fb52ac5a49a4585e75e98507ea32ec481947b8113b030a1d578f9a345287f4b8f7a99f202f3ea744039920a9c2d9c4f0a234ede1742caee73ef53275063aeb21081008dcbff8b46fdaf057dc1bc70a26061dec75347577370c44f9bb7a66c9b6b39bccca0f9dd4851807d65694d52c496e67527da4bcd0563fd025f2317ef7f6d0d2157e3ac58ab87abf1098111189e31095ea86ced9c4b7f48ba4421d8f03dfb2c4164c66001caba26ded1927f42d147cd717bbc1d8e48bffe6fab68a42b0260537006b7991371e53f7bb2a7d783e9c9171827855899e5c86c44debbde4ec0eece5ccfaca8edbb06072d97879b3cc5d2fe922b3aa47cc4ddaf5f3762e9fc306915dc290612a689a7a0286a7c15a333e2440bd26ca939791f95826bea09becfed83e515987996f6edd39f941077d288c3ce10f2ec650926bee278692b3516dfd0de4aa07999533477d81cd1c35276526ccc623879f3e2ff233b80e3d6bd6d3219d3e120514a1e4bbb001f80f4c9f42406a2d158d4944b67675358f887057fe4f0e2b4e8372285e3c2bc2fccfc6be769f743cf2d821b01ed8340ea41f86f7400af7383805c458f37357b0d7c24e5047e51bcd876d5916a7499bd9ae6bdb6a4d5104d8f49e5621a73d395d69311c4ef9895e4890802b7357ee501c8124c2ef44dd6c602f82823d163c7f03e05e67916619785b26b3aed89caefc5358d35d93fd91773803ef3637be904bc081d8df3ac74f7e1b351b7fd2133c7a5a14620804c99fff9b06d6a8f84b3fca1c036a80d1f652d6d058a6b8f571682984e0066042e49c88c9426f61546df190139ff21571ac27ca6d69069512907df72cc01e89fd48617878216c2cf89ca4dcb8bff86f571fed6955504d091fbf3c4b4a364b97405839ea094e44ccf189ba1096de51623448a184fb0cc3af21109d315d380209b2e07eb07c19b2d1d61ff8c98cebc0e6911e4627e3ad6d7a3c9000b8516c52291806fb81e798960b2e9bbf50712f434107b4bbb95756995b2778e60d5e4f9aaf1444ca5b73c6ca45b52bd2ad61b593354cd2557356e7fe5b47f40ac82345feed6a7018de8fa78db4cb833e1ce96d80c88ba779698ef4c5c81ac2bd7645770c1b9061cc867e86aeacb7f16633368591da46a15b1181145b5f4654d1031807c14f6cdfe237a2ca233493a6d2db02fd59b92c9f1386ab7decb62ea147e78489cd91d9783d848cfeca30fdad0a7f7ed48278bc3c6da1369feb00c38996fd037760945c55f72bbbaed7e7798e9c75458b3dc8bfcd941bf93815945e5d77e2972892a2cf3256852e03a658e3698d1ffe7a6d296ed8ad45d304b8f100c952b1d7c95696bab3bb8439e9c20e5ff84001b061b9f26b5871299675e1dbc1a411f4dffaa09b4057c3e607dbc8c1b963a4a9092d155926b3b8064e4ce77b638e60e051803c8a7656ca8dab5cac574fbb4bbb9fe5944e354f8ce566fd01a35b141e17cb5548ea15ddac515e2c4ae76f58fc1adf77935a141abf1417ffb12104a54183b55b48811f230dbc400396987683d3d5e4776f52b586583e5e5679fbd042a22534d55becb6be164b8a9ab42474beec08695d69085828f658baa77e9d443a276494e0dc87425c3b08a70c47e34b0354b3016df8318aaf2cc7846166cd58e1b720554bec80ad5c555e5d699a690250ed8b81893e044ef7fcc3ef3598b8e96060bae01c036b72cf5125664030b08ea5a50b70d039aeb5a81c10d587f3e2cd9b438a37fcf8fa4aa5427b77db41d3647cb4a7d3305cd5e3e1dbbff3cb8ae9d2579501e10c37c83aa563351f001dbd9a5c57eccb1267cda8bc7dad3b18d7e8e74f739d28f20fac5530d1747dfd08303e1a6590470e97509fd19603a7f787715f56655b697a27a79fde7533dbe245674cd653a33848919453749664a33f5fde8c804bf71ae364d9c3cd65e7e6eb0a447f0f5e8c93b49ee6932f28a53f4f63cee63135327f7678f96a25af75df6854358eab6e5eea26bb23289d6dbc1d036c8e371d076dbac2bd64116de7cf92a896fa732abdb91eae05191fc0e300dc4a1fc80a493871144f1a177c8c7c89c2b9659665f3e0df8f6295c0a7df7187c55140f43a24a2a883d1649503add4d7beac6f6c706910881675c4b8c7dec03cb48c70a030db5f4bd066d32b0739670ac299246e535f76937c4f36a5a0e7ea373ad7f11e86ed0d2eb622a822816341b797fd2636e0275024fee1e47a04c65968e95fd8cad4500f448ae7a9d7a762b89ede70b941d503006f897fd44d5b57e5c47fc25da9f5acb7a52374d207ea1e0242c04f96ae99d83ceaddae32992950b3cbe5e88e65599e262ae2db9fb4c33f8186d28a36d326e24b14a913d08c142a3ac775918958dbd02e23b932a7db473659aec0b39be3110bf2ebe42a1472eb69ac45250ba4663c1650f18f799abcd7360c6d9b906e9387f752a2ce7e58734072e536314057aad08d5875bf6be9d71ce3e719940d358cf78ed7a3167b03ef442f7558392579c74e278a66d403f671151d3d1ea54ef572f11e66e0d40f6a222203fd563f5b510dceb31a56b07fbaa875f10d50786a877fc32cf97effefd05dca9d73163f8adff4d124b28820f6dc2e204642d0432b323c4689f8e375e7bd8db88221ab69695a8b986a05e27cc0470ef2bf8d04c59d80f8064c9982b78b427ac367cb3d5b97387dfd0c7564dcec5b87cafac431c8ed18cd80be2e6e387a2c3e855a43287d59fc962a8c3db58fd0bb6f6b895d15a9baf8d62e2e74676b4ac6fb50de9afded1f9228645c030dcf4903d840505192312f4f23769ba2e3a52d602eec00db4cbcff5f55c5bc29d2194778c298efe7c49e8576e5553eeb429b7b8f12748aa0041c009b6daafefc9266d3e0145c2bff0700cf1fedf20ce1a914d91c1532f81d1968c41700bc2a907b30ef26e6af9e8dbf0fa5f1b700af93a9b8453f6287e779d2a1b95ec1a466d57c506485d40a9e7532c3aef74f5de2adc9fee5afa30de183f65db4cc6318a5d4c8494912c4c71f8ce4448ed7adeb0efe8131b265e8f5dcf7c7dcb6bb07e6147b4fa45fadc3de041f633b81cd19a54e307346c1675f4e", 0x1000, 0x8000, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000200), 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000ffffff7f00000000fdffffff7123f4590000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x88, &(0x7f0000000140)=""/136, 0x0, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004a40)={0x28, 0x2b, 0xb, 0x0, 0x0, {0x7}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x30004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x10, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x2000c010) 16.439918574s ago: executing program 1 (id=653): socket(0xa, 0x1, 0x84) (async) r0 = socket(0xa, 0x1, 0x84) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010025bd7000fddbdf250000000040b5e37bdc72d0bd9840258ddf759d864e69e08214ae16cbe4982944005466896f275b8f0f6a470ac9d87270fc9fb3de720dd4b50b3c326afe6c1bde0c3054386ba398fd0ced89ae7079f84e6767698e253d5f7c49cdb784511f52d448a99d6ec29581ea9afa46abf159f30546654313d777051b10f3d755d74f63c3b0305ece22daf47175", @ANYRES32=0x0, @ANYBLOB="390902000360000008001b00000000000800040000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010025bd7000fddbdf250000000040b5e37bdc72d0bd9840258ddf759d864e69e08214ae16cbe4982944005466896f275b8f0f6a470ac9d87270fc9fb3de720dd4b50b3c326afe6c1bde0c3054386ba398fd0ced89ae7079f84e6767698e253d5f7c49cdb784511f52d448a99d6ec29581ea9afa46abf159f30546654313d777051b10f3d755d74f63c3b0305ece22daf47175", @ANYRES32=0x0, @ANYBLOB="390902000360000008001b00000000000800040000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) close(0x3) 16.328996803s ago: executing program 1 (id=654): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x100c3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}]}}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6(0xa, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000040)={r7, 0x80000000, 0x7fffffff, 0x6, 0x1, 0x2, 0x8, 0x5, {0x0, @in6={{0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, 0x400, 0xfff, 0xa, 0x0, 0x1}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000004c0)={r7, 0xe0, "f4820ed5eb05858627627d4596ffb2e95e15bd4d0ad39c3e91d99fce495df89dfc17d22e86741c145f3dfd80b19a36d3f5a241369e957ad385d462b75f3d8689ac7f53ddee51110ecd3b9a6f40d0db147cc294f9b22554ff5665e7279a765549433dd6af705e2078e9f69cf083c4323bf58a97d520571b9f0377f7e8a16d7031fae82dca2bfd7350e74049a58e0785eee165cd8432ec9107efb5befa2323dad02b57db0277366ca14f674460b1cded3c37c197b6beed1a018d835b7d9839a9e485cf4e6995ef4288e4663fcd597be6b097710d7dc12987d0f28ca322048cc096"}, &(0x7f0000000240)=0xe8) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r2, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)={0x2c, r11, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x3, 0x8, 0x18, @mcast1, @empty, 0x8000, 0x80, 0x8000, 0x4a91fb1}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e86c0d85ff9783763a0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 16.213216695s ago: executing program 3 (id=655): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1ff}], 0x18, 0x40}, 0x40008d0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f00000006c0)=""/138, 0x8a}, {&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000900)=""/108, 0x6c}, {&(0x7f0000000800)=""/21, 0x15}, {&(0x7f0000000480)=""/4, 0x4}, {&(0x7f0000000980)=""/202, 0xca}], 0x7}}], 0x2, 0x41, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="fc4406008e199ae0898c7a8988823619ba", 0x11}, {&(0x7f00000048c0)="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", 0x35f}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x4815) recvmmsg(r4, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000400)=""/234, 0xea}, {&(0x7f0000000500)=""/232, 0xe8}], 0x3}, 0x3}], 0x1, 0x2100, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@abs={0x1}, 0x4f) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000440)="5800000014001d2340834b80040d8d560a067ee500ff000000000000000058000b4824ca945f64009400140425010ebc000000000000008000f0fffeffe809005300fff5dd80000010000100080c10000000000000000100", 0x58}], 0x1) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) 16.154040232s ago: executing program 0 (id=656): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x2810, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x2f, 0x0, @empty, @multicast1}}}}) sendto$packet(r2, &(0x7f0000000180)="0b0312002e1264000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100}, 0x14) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000004c0)={0x12, 0x2, {0x61, @usage=0xffffffffffffffff, 0x0, 0x800, 0xcdc6, 0x3b78, 0x7, 0x2, 0x80, @struct={0x2ac4, 0x4}, 0x3, 0xe, [0x8, 0x2, 0x3, 0x4, 0xf9e, 0x7]}, {0x1, @usage=0x3, 0x0, 0xfffffffffffffffb, 0x9, 0x2, 0x3, 0x3, 0xd, @struct={0x4, 0x3}, 0xbb, 0x2, [0x8, 0x200, 0x9, 0x3, 0x9, 0x8]}, {0x5913, @usage=0x4, 0x0, 0x0, 0xc4, 0x0, 0x101, 0x8000, 0x54, @struct={0xa, 0x80000001}, 0x390000, 0x1000, [0x0, 0x6, 0x10000, 0x9, 0x6, 0xc89]}, {0x0, 0x6, 0x6}}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f00000008c0)={r4, 0xf, 0x9}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x9, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8864}]}}]}, 0x3c}}, 0x24004001) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200028bd7000fddbdf250a0000000800030006000000080004000500000008000400b80100004c00068014000400fe8000000000000000000000000000aa08000300e00000011400040000000000000000000000000000000000050002003a00000008000300ac1414aa08000700", @ANYRES32=r1, @ANYBLOB="f3ac54b32d5ed63d907d025ccc2fb18091c942ea075a4156a2d0a14867783cef7a4c476aa23b48c22b5a88a5dc1254a68367a5fe034d40f2c90573487cffbf2425976a1f005ee0faf67541b15f17803692606b301439726bd41865d6b86f6b7e972521"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.115532216s ago: executing program 3 (id=657): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xefb}]}}}]}, 0x3c}}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) 15.733500874s ago: executing program 0 (id=658): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) (async) r1 = socket$igmp(0x2, 0x3, 0x2) (async) r2 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) (async) sendmsg$inet(r1, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0x4) (async) r3 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000800)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) (async) r7 = socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x20400) (async) vmsplice(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="d651", 0x2}], 0x1, 0x1) (async) getsockopt$inet6_udp_int(r6, 0x11, 0x64, 0x0, &(0x7f0000000600)) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x200, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r8, {}, {0x7, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x3, 0x0, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8084}, 0x800) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e23, @private=0xa010101}], 0x20) 15.672692533s ago: executing program 0 (id=659): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa9001800300000008c1ee"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="001c00f4e866b10000001200050928bd70e934b911cc2bcfe90d59b900ffdbdf2521090b1413db81080ad0d3bca10a00002309000000010400000600000000000000", @ANYRES32=0x0, @ANYBLOB="0000010005200000060000000400000019000100071514000238"], 0x68}}, 0x20000000) 15.395993746s ago: executing program 3 (id=660): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x40, 0x40, 0x8, 0x4, {{0x1b, 0x4, 0x1, 0x31, 0x6c, 0x67, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local, {[@noop, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0x3, 'Y'}, @cipso={0x86, 0x34, 0xffffffffffffffff, [{0x3, 0xf, "30f3f09d3361f84f3b972f4bc2"}, {0x0, 0x2}, {0x1, 0x4, "9864"}, {0x1, 0x8, "273f362fa1cf"}, {0x1, 0x11, "f4a781230400f895b6d69328e9e097"}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0x9f, [@multicast2, @multicast1, @multicast1, @broadcast, @multicast1]}]}}}}}) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xcd748ffdc970c25d}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r1, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x801) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@getnexthop={0x28, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}]}, 0x28}}, 0x0) 1.510227993s ago: executing program 32 (id=651): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x8, r5}, 0x10) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x60) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x30) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180095", @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRES32=r4, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r8, 0x8b2b, &(0x7f0000000040)) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r9) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000400000014000500fc0100000000000000000000ad000001080002000500000014000600ff020000000000a30885621a982b3c0106000b0002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) 1.469485196s ago: executing program 33 (id=652): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x16, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x941, 0x0, 0x0, 0x0, 0x1}, @tail_call, @map_idx={0x18, 0x4, 0x5, 0x0, 0xc}]}, &(0x7f00000004c0)='syzkaller\x00', 0x1, 0xd1, &(0x7f0000000500)=""/209, 0x41000, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x1, 0x8000, 0x10}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000006c0)=[{0x2, 0x2, 0x7, 0x5}, {0x3, 0x3, 0x6, 0x7}, {0x0, 0x3, 0x2, 0xb}], 0x10, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000003c0)='rpcgss_createauth\x00', r3, 0x0, 0x7}, 0x18) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r4, @ANYBLOB="2f0429bd7000fbdbdf25030000000c0002000700000000000000080001000000000005000a00ff000000400007800c000180"], 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB=' '], 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000000040)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(r6, &(0x7f0000000980)="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", 0x1000, 0x8000, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000200), 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c0002800800074000000000080003400000001608000140000000120800024000000000080004400000000020000180080001006e61740014000280080003400000000008000540000000000900010073797a30"], 0x150}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000ffffff7f00000000fdffffff7123f4590000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x88, &(0x7f0000000140)=""/136, 0x0, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004a40)={0x28, 0x2b, 0xb, 0x0, 0x0, {0x7}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x30004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x10, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4881}, 0x2000c010) 488.78774ms ago: executing program 34 (id=659): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa9001800300000008c1ee"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="001c00f4e866b10000001200050928bd70e934b911cc2bcfe90d59b900ffdbdf2521090b1413db81080ad0d3bca10a00002309000000010400000600000000000000", @ANYRES32=0x0, @ANYBLOB="0000010005200000060000000400000019000100071514000238"], 0x68}}, 0x20000000) 393.942811ms ago: executing program 35 (id=654): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x100c3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}]}}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6(0xa, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000040)={r7, 0x80000000, 0x7fffffff, 0x6, 0x1, 0x2, 0x8, 0x5, {0x0, @in6={{0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, 0x400, 0xfff, 0xa, 0x0, 0x1}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000004c0)={r7, 0xe0, "f4820ed5eb05858627627d4596ffb2e95e15bd4d0ad39c3e91d99fce495df89dfc17d22e86741c145f3dfd80b19a36d3f5a241369e957ad385d462b75f3d8689ac7f53ddee51110ecd3b9a6f40d0db147cc294f9b22554ff5665e7279a765549433dd6af705e2078e9f69cf083c4323bf58a97d520571b9f0377f7e8a16d7031fae82dca2bfd7350e74049a58e0785eee165cd8432ec9107efb5befa2323dad02b57db0277366ca14f674460b1cded3c37c197b6beed1a018d835b7d9839a9e485cf4e6995ef4288e4663fcd597be6b097710d7dc12987d0f28ca322048cc096"}, &(0x7f0000000240)=0xe8) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r2, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)={0x2c, r11, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x3, 0x8, 0x18, @mcast1, @empty, 0x8000, 0x80, 0x8000, 0x4a91fb1}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e86c0d85ff9783763a0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 0s ago: executing program 36 (id=660): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x40, 0x40, 0x8, 0x4, {{0x1b, 0x4, 0x1, 0x31, 0x6c, 0x67, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local, {[@noop, @ra={0x94, 0x4, 0x1}, @generic={0x88, 0x3, 'Y'}, @cipso={0x86, 0x34, 0xffffffffffffffff, [{0x3, 0xf, "30f3f09d3361f84f3b972f4bc2"}, {0x0, 0x2}, {0x1, 0x4, "9864"}, {0x1, 0x8, "273f362fa1cf"}, {0x1, 0x11, "f4a781230400f895b6d69328e9e097"}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0x9f, [@multicast2, @multicast1, @multicast1, @broadcast, @multicast1]}]}}}}}) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xcd748ffdc970c25d}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r1, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_LINK={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x801) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@getnexthop={0x28, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x2}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.192' (ED25519) to the list of known hosts. [ 77.798901][ T5853] cgroup: Unknown subsys name 'net' [ 77.955367][ T5853] cgroup: Unknown subsys name 'cpuset' [ 77.964288][ T5853] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.547209][ T5853] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.806583][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.816537][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.831947][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.852290][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.866583][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.906870][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.914943][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.932455][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.942323][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.950226][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.979826][ T5866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.992013][ T5866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.999618][ T5866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.008076][ T5866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.015754][ T5866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.064599][ T5866] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.084662][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.092565][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.100707][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.109639][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.118514][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.126350][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.185463][ T5879] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.193720][ T5879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.201582][ T5879] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.508278][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 82.638445][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 82.773545][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 82.888758][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.895995][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.903772][ T5867] bridge_slave_0: entered allmulticast mode [ 82.910894][ T5867] bridge_slave_0: entered promiscuous mode [ 82.971099][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 82.996521][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.004365][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.011485][ T5867] bridge_slave_1: entered allmulticast mode [ 83.018699][ T5867] bridge_slave_1: entered promiscuous mode [ 83.037228][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.044506][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.055489][ T5863] bridge_slave_0: entered allmulticast mode [ 83.063547][ T5863] bridge_slave_0: entered promiscuous mode [ 83.079736][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.087015][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.094499][ T5863] bridge_slave_1: entered allmulticast mode [ 83.101609][ T5863] bridge_slave_1: entered promiscuous mode [ 83.155095][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 83.214367][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.226847][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.244002][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.274462][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.281636][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.288845][ T5871] bridge_slave_0: entered allmulticast mode [ 83.296355][ T5871] bridge_slave_0: entered promiscuous mode [ 83.342403][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.364370][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.371500][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.379470][ T5871] bridge_slave_1: entered allmulticast mode [ 83.386654][ T5871] bridge_slave_1: entered promiscuous mode [ 83.394699][ T5863] team0: Port device team_slave_0 added [ 83.457792][ T5863] team0: Port device team_slave_1 added [ 83.475519][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.485243][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.492694][ T5874] bridge_slave_0: entered allmulticast mode [ 83.499769][ T5874] bridge_slave_0: entered promiscuous mode [ 83.508057][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.515303][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.522485][ T5874] bridge_slave_1: entered allmulticast mode [ 83.529905][ T5874] bridge_slave_1: entered promiscuous mode [ 83.538716][ T5867] team0: Port device team_slave_0 added [ 83.591110][ T5867] team0: Port device team_slave_1 added [ 83.606735][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.628175][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.635236][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.661559][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.674434][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.681391][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.707361][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.749868][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.781013][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.814437][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.822209][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.829358][ T5875] bridge_slave_0: entered allmulticast mode [ 83.836672][ T5875] bridge_slave_0: entered promiscuous mode [ 83.848801][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.858470][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.866073][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.892160][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.904902][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.912055][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.938009][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.952550][ T5879] Bluetooth: hci0: command tx timeout [ 83.967381][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.974939][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.982286][ T5875] bridge_slave_1: entered allmulticast mode [ 83.989340][ T5875] bridge_slave_1: entered promiscuous mode [ 84.032072][ T5879] Bluetooth: hci1: command tx timeout [ 84.042371][ T5871] team0: Port device team_slave_0 added [ 84.073749][ T5874] team0: Port device team_slave_0 added [ 84.082733][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.095133][ T5871] team0: Port device team_slave_1 added [ 84.112816][ T5879] Bluetooth: hci2: command tx timeout [ 84.120966][ T5874] team0: Port device team_slave_1 added [ 84.129621][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.166158][ T5863] hsr_slave_0: entered promiscuous mode [ 84.173759][ T5863] hsr_slave_1: entered promiscuous mode [ 84.193092][ T5879] Bluetooth: hci3: command tx timeout [ 84.236153][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.243609][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.269541][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.285789][ T5879] Bluetooth: hci4: command tx timeout [ 84.310196][ T5867] hsr_slave_0: entered promiscuous mode [ 84.317545][ T5867] hsr_slave_1: entered promiscuous mode [ 84.323817][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 84.329587][ T5867] Cannot create hsr debugfs directory [ 84.348513][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.355875][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.382441][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.400210][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.407234][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.433414][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.446145][ T5875] team0: Port device team_slave_0 added [ 84.455845][ T5875] team0: Port device team_slave_1 added [ 84.505695][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.512741][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.539190][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.605758][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.613632][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.640726][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.653882][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.660845][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.686969][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.798907][ T5871] hsr_slave_0: entered promiscuous mode [ 84.805388][ T5871] hsr_slave_1: entered promiscuous mode [ 84.811446][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 84.817765][ T5871] Cannot create hsr debugfs directory [ 84.872591][ T5874] hsr_slave_0: entered promiscuous mode [ 84.878854][ T5874] hsr_slave_1: entered promiscuous mode [ 84.885854][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 84.891587][ T5874] Cannot create hsr debugfs directory [ 84.901600][ T5875] hsr_slave_0: entered promiscuous mode [ 84.907892][ T5875] hsr_slave_1: entered promiscuous mode [ 84.914748][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 84.920480][ T5875] Cannot create hsr debugfs directory [ 85.246759][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.258781][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.311645][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.350871][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.438125][ T5867] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.459174][ T5867] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.469357][ T5867] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.482549][ T5867] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.573762][ T5874] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.588544][ T5874] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.600131][ T5874] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.613549][ T5874] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.739350][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.786841][ T5875] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.799295][ T5875] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.827998][ T5875] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.868236][ T5875] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.911062][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.925543][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.936127][ T5871] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.947502][ T5871] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.959665][ T5871] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.971443][ T5871] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.003751][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.027182][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.034408][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.042435][ T5866] Bluetooth: hci0: command tx timeout [ 86.070009][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.077149][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.106227][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.113367][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.120784][ T5879] Bluetooth: hci1: command tx timeout [ 86.128834][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.136032][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.154030][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.193092][ T5879] Bluetooth: hci2: command tx timeout [ 86.214016][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.265470][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.272633][ T5130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.280164][ T5879] Bluetooth: hci3: command tx timeout [ 86.323730][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.330832][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.352469][ T5879] Bluetooth: hci4: command tx timeout [ 86.439809][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.550640][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.561579][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.596545][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.623020][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.630189][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.645762][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.652926][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.720687][ T3000] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.727893][ T3000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.809655][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.816827][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.007908][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.065792][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.269384][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.306397][ T5867] veth0_vlan: entered promiscuous mode [ 87.403067][ T5863] veth0_vlan: entered promiscuous mode [ 87.426808][ T5867] veth1_vlan: entered promiscuous mode [ 87.467289][ T5863] veth1_vlan: entered promiscuous mode [ 87.510718][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.549347][ T5874] veth0_vlan: entered promiscuous mode [ 87.578738][ T5874] veth1_vlan: entered promiscuous mode [ 87.595133][ T5867] veth0_macvtap: entered promiscuous mode [ 87.616667][ T5867] veth1_macvtap: entered promiscuous mode [ 87.648627][ T5863] veth0_macvtap: entered promiscuous mode [ 87.666269][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.685220][ T5863] veth1_macvtap: entered promiscuous mode [ 87.730527][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.760144][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.776954][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.802719][ T5874] veth0_macvtap: entered promiscuous mode [ 87.813948][ T5875] veth0_vlan: entered promiscuous mode [ 87.827391][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.841385][ T3000] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.851684][ T3000] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.893630][ T3000] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.906270][ T5875] veth1_vlan: entered promiscuous mode [ 87.918210][ T5874] veth1_macvtap: entered promiscuous mode [ 87.933702][ T3000] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.972657][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.029435][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.050193][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.065323][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.098650][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.109226][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.123618][ T5879] Bluetooth: hci0: command tx timeout [ 88.160487][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.174937][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.193273][ T5879] Bluetooth: hci1: command tx timeout [ 88.199712][ T3000] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.208780][ T3000] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.228195][ T3000] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.247486][ T5875] veth0_macvtap: entered promiscuous mode [ 88.273588][ T5879] Bluetooth: hci2: command tx timeout [ 88.274699][ T3000] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.321511][ T5875] veth1_macvtap: entered promiscuous mode [ 88.331551][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.345496][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.353346][ T5879] Bluetooth: hci3: command tx timeout [ 88.366720][ T5871] veth0_vlan: entered promiscuous mode [ 88.421491][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.432311][ T5879] Bluetooth: hci4: command tx timeout [ 88.441667][ T5867] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.448727][ T5871] veth1_vlan: entered promiscuous mode [ 88.462361][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.481389][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.527417][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.540742][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.556148][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.612791][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.624336][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.637245][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.650475][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.687568][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.771078][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.800847][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.820391][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.829105][ T5871] veth0_macvtap: entered promiscuous mode [ 88.900581][ T5871] veth1_macvtap: entered promiscuous mode [ 89.048995][ T3000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.075181][ T3000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.129961][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.203306][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.250071][ T5130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.273318][ T3000] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.287638][ T5130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.295392][ T3000] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.346508][ T3000] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.375706][ T3000] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.399945][ T5990] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.701104][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.735606][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.972823][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.999391][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.027499][ T6010] !: renamed from dummy0 (while UP) [ 90.193160][ T5879] Bluetooth: hci0: command tx timeout [ 90.238104][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 90.247062][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12'. [ 90.273366][ T5879] Bluetooth: hci1: command tx timeout [ 90.352926][ T5879] Bluetooth: hci2: command tx timeout [ 90.421515][ T6017] syzkaller1: entered promiscuous mode [ 90.427446][ T6017] syzkaller1: entered allmulticast mode [ 90.433441][ T5879] Bluetooth: hci3: command tx timeout [ 90.514377][ T5879] Bluetooth: hci4: command tx timeout [ 90.764646][ T6033] syz.1.13 uses obsolete (PF_INET,SOCK_PACKET) [ 91.310956][ T6035] lo speed is unknown, defaulting to 1000 [ 91.333334][ T6035] lo speed is unknown, defaulting to 1000 [ 91.412999][ T6035] lo speed is unknown, defaulting to 1000 [ 91.443889][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'. [ 91.477498][ T6035] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 91.567366][ T6035] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 91.761224][ T6035] lo speed is unknown, defaulting to 1000 [ 91.783104][ T6035] lo speed is unknown, defaulting to 1000 [ 91.805621][ T6035] lo speed is unknown, defaulting to 1000 [ 91.812737][ T43] cfg80211: failed to load regulatory.db [ 91.844332][ T6035] lo speed is unknown, defaulting to 1000 [ 91.877012][ T6035] lo speed is unknown, defaulting to 1000 [ 91.907746][ T6035] lo speed is unknown, defaulting to 1000 [ 91.946549][ T6035] lo speed is unknown, defaulting to 1000 [ 92.066720][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 92.843754][ T6063] netlink: 'syz.3.20': attribute type 13 has an invalid length. [ 92.858163][ T6063] netlink: 'syz.3.20': attribute type 17 has an invalid length. [ 93.101570][ T6063] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.151520][ T958] lo speed is unknown, defaulting to 1000 [ 93.277018][ T6065] lo speed is unknown, defaulting to 1000 [ 93.605247][ T6060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.778754][ T6079] tipc: Started in network mode [ 93.785822][ T6079] tipc: Node identity 8ed9ed2dd8de, cluster identity 4711 [ 93.797368][ T6079] tipc: Enabled bearer , priority 0 [ 93.814541][ T6079] syzkaller0: entered promiscuous mode [ 93.828432][ T6079] syzkaller0: entered allmulticast mode [ 93.877856][ T6079] tipc: Resetting bearer [ 93.901522][ T6083] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.919777][ T6078] tipc: Resetting bearer [ 93.942149][ T6078] tipc: Disabling bearer [ 93.968118][ T6083] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.110624][ T6083] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.312514][ T6090] vlan2: entered allmulticast mode [ 94.359568][ T6083] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.403679][ T6099] netlink: 20 bytes leftover after parsing attributes in process `syz.4.28'. [ 94.566850][ T5130] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.597761][ T3529] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.657449][ T5130] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.678292][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.107489][ T6109] bridge1: entered allmulticast mode [ 95.197294][ T6111] pimreg: entered allmulticast mode [ 95.713391][ T6127] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 96.509225][ T6140] !: renamed from dummy0 (while UP) [ 96.600073][ T6146] lo speed is unknown, defaulting to 1000 [ 97.316054][ T6151] lo speed is unknown, defaulting to 1000 [ 97.387889][ T6166] netlink: 'syz.2.40': attribute type 2 has an invalid length. [ 97.454589][ T6166] k›*·: entered promiscuous mode [ 97.649507][ T6166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.777887][ T6214] syzkaller1: entered promiscuous mode [ 98.808927][ T6214] syzkaller1: entered allmulticast mode [ 98.861330][ T6218] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 99.318344][ T6235] trusted_key: syz.0.49 sent an empty control message without MSG_MORE. [ 99.686942][ T6244] lo speed is unknown, defaulting to 1000 [ 99.720450][ T6242] Zero length message leads to an empty skb [ 100.526563][ T6278] netlink: 'syz.3.60': attribute type 1 has an invalid length. [ 100.534800][ T6278] netlink: 'syz.3.60': attribute type 1 has an invalid length. [ 100.561487][ T6278] netlink: 'syz.3.60': attribute type 1 has an invalid length. [ 100.922331][ T6298] nbd0: detected capacity change from 0 to 549764202496 [ 101.025675][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.244632][ T6316] netlink: 100 bytes leftover after parsing attributes in process `syz.1.67'. [ 101.362922][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'. [ 101.390330][ T5879] block nbd0: Receive control failed (result -104) [ 101.437142][ T6321] veth3: entered promiscuous mode [ 101.442500][ T6316] openvswitch: netlink: nsh attr 20 is out of range max 3 [ 101.501754][ T6316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.595795][ T6366] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.066521][ T6376] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.400681][ T6376] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.767768][ T6376] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.845534][ T6388] lo speed is unknown, defaulting to 1000 [ 104.237446][ T6441] netlink: 'syz.4.88': attribute type 1 has an invalid length. [ 104.324214][ T6376] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.375798][ T6441] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 104.591021][ T6451] netlink: 40 bytes leftover after parsing attributes in process `syz.0.91'. [ 104.611616][ T6451] netlink: 40 bytes leftover after parsing attributes in process `syz.0.91'. [ 104.736441][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.786070][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.93'. [ 104.798026][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.830749][ T1014] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.902838][ T6457] lo speed is unknown, defaulting to 1000 [ 104.904636][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.170058][ T6465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.275612][ T6457] netlink: 'syz.0.94': attribute type 13 has an invalid length. [ 105.302046][ T6457] netlink: 'syz.0.94': attribute type 17 has an invalid length. [ 105.427249][ T6473] netlink: 44 bytes leftover after parsing attributes in process `syz.1.98'. [ 105.465505][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 105.598858][ T6481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.102'. [ 105.608127][ T6483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.102'. [ 105.678718][ T6475] netlink: 168 bytes leftover after parsing attributes in process `syz.2.100'. [ 105.986536][ T6430] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.000298][ T6480] netlink: 'syz.4.99': attribute type 1 has an invalid length. [ 106.002751][ T6430] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.016960][ T6480] netlink: 'syz.4.99': attribute type 2 has an invalid length. [ 106.070808][ T6430] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.096509][ T6430] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.352482][ T6517] !: renamed from dummy0 (while UP) [ 106.388625][ T6520] __nla_validate_parse: 4 callbacks suppressed [ 106.388642][ T6520] netlink: 44 bytes leftover after parsing attributes in process `syz.2.111'. [ 106.577405][ T6530] netlink: 'syz.2.111': attribute type 1 has an invalid length. [ 106.585743][ T6530] netlink: 'syz.2.111': attribute type 11 has an invalid length. [ 106.594077][ T6530] netlink: 220 bytes leftover after parsing attributes in process `syz.2.111'. [ 106.604655][ T6530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.812467][ T6526] netlink: 96 bytes leftover after parsing attributes in process `syz.2.111'. [ 106.900730][ T6521] lo speed is unknown, defaulting to 1000 [ 107.260417][ T6559] tipc: Started in network mode [ 107.265422][ T6559] tipc: Node identity c28c8f8873bc, cluster identity 4711 [ 107.272824][ T6559] tipc: Enabled bearer , priority 0 [ 107.281840][ T6559] syzkaller0: entered promiscuous mode [ 107.290557][ T6559] syzkaller0: entered allmulticast mode [ 107.323546][ T6559] tipc: Resetting bearer [ 107.542164][ T6558] tipc: Resetting bearer [ 107.628153][ T6558] tipc: Disabling bearer [ 107.947714][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 108.258561][ T6612] netlink: 248 bytes leftover after parsing attributes in process `syz.2.132'. [ 108.270644][ T6613] netlink: 248 bytes leftover after parsing attributes in process `syz.2.132'. [ 108.357168][ T6612] tipc: Enabled bearer , priority 0 [ 108.367473][ T6613] tipc: Enabling of bearer rejected, already enabled [ 108.388407][ T6611] tipc: Resetting bearer [ 109.132071][ T6641] openvswitch: netlink: Flow actions attr not present in new flow. [ 109.372560][ T5924] tipc: Node number set to 2972749704 [ 110.027515][ T6611] tipc: Disabling bearer [ 110.036631][ T6619] !: renamed from dummy0 (while UP) [ 110.045380][ T6625] tipc: Started in network mode [ 110.053564][ T6625] tipc: Node identity , cluster identity 4711 [ 110.059738][ T6625] tipc: Failed to obtain node identity [ 110.066259][ T6625] tipc: Enabling of bearer rejected, failed to enable media [ 110.076195][ T6629] syzkaller0: entered promiscuous mode [ 110.082559][ T6629] syzkaller0: entered allmulticast mode [ 110.190995][ T6654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.131'. [ 110.586587][ T6673] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.688918][ T6693] Bluetooth: MGMT ver 1.23 [ 110.723644][ T6699] netlink: 'syz.3.142': attribute type 10 has an invalid length. [ 110.756161][ T6673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.769952][ T6673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.894968][ T6693] geneve0: entered promiscuous mode [ 110.935452][ T6699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.980118][ T6699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.005700][ T6699] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 111.016040][ T1014] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.099830][ T6707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.144'. [ 111.118023][ T6696] lo speed is unknown, defaulting to 1000 [ 111.118609][ T1014] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.186605][ T1014] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.230362][ T1014] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.280413][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.144'. [ 111.318591][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'. [ 111.526403][ T6715] tipc: Enabled bearer , priority 0 [ 111.537075][ T6712] syzkaller0: entered promiscuous mode [ 111.542741][ T6712] syzkaller0: entered allmulticast mode [ 111.605581][ T6711] tipc: Resetting bearer [ 111.694396][ T6711] tipc: Disabling bearer [ 112.877537][ T6744] wireguard0: entered promiscuous mode [ 112.905986][ T6753] openvswitch: netlink: Tunnel attr 5123 out of range max 16 [ 112.936635][ T6744] wireguard0: entered allmulticast mode [ 112.959085][ T6751] __nla_validate_parse: 2 callbacks suppressed [ 112.959099][ T6751] netlink: 180 bytes leftover after parsing attributes in process `syz.2.152'. [ 112.976209][ T6751] netlink: 180 bytes leftover after parsing attributes in process `syz.2.152'. [ 112.996231][ T6751] netlink: 14 bytes leftover after parsing attributes in process `syz.2.152'. [ 113.416757][ T6771] netlink: 'syz.3.159': attribute type 1 has an invalid length. [ 113.508086][ T6771] netlink: 132 bytes leftover after parsing attributes in process `syz.3.159'. [ 113.621318][ T6789] Bluetooth: MGMT ver 1.23 [ 113.633588][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'. [ 113.855193][ T6796] netlink: 104 bytes leftover after parsing attributes in process `syz.2.166'. [ 113.907388][ T6786] lo speed is unknown, defaulting to 1000 [ 113.913842][ T6799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.166'. [ 115.081092][ T6822] Driver unsupported XDP return value 0 on prog (id 78) dev N/A, expect packet loss! [ 115.101284][ T6824] syzkaller1: entered promiscuous mode [ 115.107642][ T6824] syzkaller1: entered allmulticast mode [ 115.360181][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'. [ 115.369081][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'. [ 115.379099][ T6836] netlink: 'syz.1.177': attribute type 12 has an invalid length. [ 115.382845][ T6837] tipc: Enabled bearer , priority 0 [ 115.395539][ T6837] syzkaller0: entered promiscuous mode [ 115.401018][ T6837] syzkaller0: entered allmulticast mode [ 115.612622][ T6837] tipc: Resetting bearer [ 115.686130][ T6835] tipc: Resetting bearer [ 115.818954][ T6835] tipc: Disabling bearer [ 116.068059][ T6861] netlink: 165 bytes leftover after parsing attributes in process `syz.4.182'. [ 116.570450][ T6881] sctp: [Deprecated]: syz.1.188 (pid 6881) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.570450][ T6881] Use struct sctp_sack_info instead [ 116.579327][ T6883] bridge2: entered promiscuous mode [ 116.602623][ T6883] bridge2: entered allmulticast mode [ 116.610622][ T6883] team0: Port device bridge2 added [ 117.637655][ T6917] macvtap0: entered promiscuous mode [ 117.643248][ T6917] macvtap0: entered allmulticast mode [ 117.648639][ T6917] veth0_macvtap: entered allmulticast mode [ 117.766064][ T6922] netlink: 'syz.1.202': attribute type 32 has an invalid length. [ 118.012119][ T6931] __nla_validate_parse: 7 callbacks suppressed [ 118.012138][ T6931] netlink: 16 bytes leftover after parsing attributes in process `syz.3.203'. [ 118.103661][ T6935] netlink: 24 bytes leftover after parsing attributes in process `syz.0.204'. [ 118.166975][ T6931] ªªªªªª: renamed from wg2 (while UP) [ 118.195834][ T6937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.205'. [ 118.304406][ T6939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.206'. [ 118.318049][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 118.485805][ T6917] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 118.554694][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 118.674383][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 118.684549][ T6959] netlink: 68 bytes leftover after parsing attributes in process `syz.4.208'. [ 118.815573][ T6954] syzkaller0: entered promiscuous mode [ 118.821166][ T6954] syzkaller0: entered allmulticast mode [ 118.832653][ T5879] Bluetooth: hci4: command 0x0405 tx timeout [ 118.874681][ T6970] lo speed is unknown, defaulting to 1000 [ 118.937670][ T6966] syzkaller0: entered promiscuous mode [ 118.943744][ T6966] syzkaller0: entered allmulticast mode [ 118.955710][ T6966] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 119.722001][ T5866] Bluetooth: hci0: command 0x0401 tx timeout [ 120.266095][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.223'. [ 120.279227][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'. [ 120.285572][ T6998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.223'. [ 120.365961][ T6999] bridge_slave_1: left allmulticast mode [ 120.371653][ T6999] bridge_slave_1: left promiscuous mode [ 120.373982][ T7005] netlink: 'syz.4.220': attribute type 1 has an invalid length. [ 120.398085][ T6999] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.418727][ T6998] netlink: 'syz.3.223': attribute type 15 has an invalid length. [ 120.438983][ T6999] bridge_slave_0: left allmulticast mode [ 120.445504][ T6999] bridge_slave_0: left promiscuous mode [ 120.470149][ T6999] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.819244][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.830704][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.892580][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.901420][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.911990][ T5866] Bluetooth: hci4: command 0x0405 tx timeout [ 121.054479][ T5924] IPVS: starting estimator thread 0... [ 121.162004][ T7038] IPVS: using max 31 ests per chain, 74400 per kthread [ 121.808558][ T7070] lo speed is unknown, defaulting to 1000 [ 123.233675][ T7130] __nla_validate_parse: 19 callbacks suppressed [ 123.233695][ T7130] netlink: 56 bytes leftover after parsing attributes in process `syz.2.247'. [ 123.274044][ T7130] tipc: Enabled bearer , priority 0 [ 123.287597][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.248'. [ 123.288710][ T7130] syzkaller0: entered promiscuous mode [ 123.316045][ T7130] syzkaller0: entered allmulticast mode [ 123.462882][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.251'. [ 123.483733][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.251'. [ 123.510101][ T7130] tipc: Resetting bearer [ 123.592163][ T7128] tipc: Resetting bearer [ 123.604961][ T7143] netlink: 16 bytes leftover after parsing attributes in process `syz.3.249'. [ 123.629953][ T7128] tipc: Disabling bearer [ 123.685171][ T7149] lo speed is unknown, defaulting to 1000 [ 123.850216][ T7156] vlan2: entered promiscuous mode [ 123.873573][ T7156] syz_tun: entered promiscuous mode [ 124.151127][ T7172] batadv_slave_1: entered promiscuous mode [ 124.252068][ T7163] batadv_slave_1: left promiscuous mode [ 124.336852][ T7149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.252'. [ 124.343683][ T7177] lo speed is unknown, defaulting to 1000 [ 125.151641][ T7199] netlink: 'syz.1.261': attribute type 13 has an invalid length. [ 125.498572][ T7217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 126.334960][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.269'. [ 127.239714][ T7256] lo speed is unknown, defaulting to 1000 [ 127.588221][ T7256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.277'. [ 127.654136][ T7262] netlink: 20 bytes leftover after parsing attributes in process `syz.4.274'. [ 127.789138][ T7262] netlink: 'syz.4.274': attribute type 21 has an invalid length. [ 128.606294][ T7290] __nla_validate_parse: 2 callbacks suppressed [ 128.606310][ T7290] netlink: 188 bytes leftover after parsing attributes in process `syz.4.285'. [ 128.715848][ T7293] netlink: 96 bytes leftover after parsing attributes in process `syz.2.286'. [ 128.816613][ T7284] netlink: 'syz.3.282': attribute type 1 has an invalid length. [ 128.846019][ T7284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.898897][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.288'. [ 128.921557][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.288'. [ 129.427492][ T7324] lo speed is unknown, defaulting to 1000 [ 129.671969][ T7330] tun0: tun_chr_ioctl cmd 2147767521 [ 129.800600][ T7313] lo speed is unknown, defaulting to 1000 [ 130.905695][ T7359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.305'. [ 130.960261][ T7359] sctp: [Deprecated]: syz.2.305 (pid 7359) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.960261][ T7359] Use struct sctp_sack_info instead [ 131.026489][ T7363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.421040][ T7365] lo speed is unknown, defaulting to 1000 [ 131.464717][ T7377] netlink: 80 bytes leftover after parsing attributes in process `syz.1.311'. [ 131.474915][ T55] block nbd0: Possible stuck request ffff888024f27000: control (read@0,4096B). Runtime 30 seconds [ 131.606229][ T5866] Bluetooth: hci4: link tx timeout [ 131.612600][ T5866] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.621796][ T5879] Bluetooth: hci4: link tx timeout [ 131.627277][ T5879] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.635201][ T5879] Bluetooth: hci4: link tx timeout [ 131.640431][ T5879] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.745483][ T7388] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 131.968086][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'. [ 131.998269][ T7401] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.318'. [ 132.017944][ T7401] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 132.075677][ T7401] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 132.076470][ T7406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.319'. [ 132.654308][ T7432] tipc: Enabled bearer , priority 0 [ 132.668993][ T7432] syzkaller0: entered promiscuous mode [ 132.675100][ T7432] syzkaller0: entered allmulticast mode [ 132.738718][ T7432] tipc: Resetting bearer [ 132.764878][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.773663][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.806511][ T7431] tipc: Resetting bearer [ 132.839649][ T7431] tipc: Disabling bearer [ 132.986272][ T7451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.333'. [ 133.095558][ T7450] tipc: Started in network mode [ 133.121315][ T7450] tipc: Node identity 5e437e314922, cluster identity 4711 [ 133.139050][ T7450] tipc: Enabled bearer , priority 0 [ 133.312199][ T7442] syzkaller0: entered promiscuous mode [ 133.344330][ T7442] syzkaller0: entered allmulticast mode [ 133.488220][ T7470] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 133.519547][ T7442] tipc: Resetting bearer [ 133.553378][ T7441] tipc: Resetting bearer [ 133.597862][ T7441] tipc: Disabling bearer [ 133.631893][ T5879] Bluetooth: hci4: command 0x0405 tx timeout [ 133.996393][ T7499] __nla_validate_parse: 2 callbacks suppressed [ 133.996410][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'. [ 134.070380][ T7499] netlink: 'syz.0.342': attribute type 12 has an invalid length. [ 134.082170][ T7499] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.342'. [ 134.294297][ T6432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.302403][ T6432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.774559][ T7522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.787232][ T7524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.354'. [ 134.800895][ T7528] netlink: 'syz.3.353': attribute type 19 has an invalid length. [ 135.094718][ T7536] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 135.100864][ T7536] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 135.516543][ T7536] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 135.525044][ T7536] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 135.556932][ T7536] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 135.563598][ T7536] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 135.625403][ T7549] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 136.625366][ T7536] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.631313][ T7536] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 136.715638][ T7536] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 136.723507][ T7536] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 137.186239][ T7577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.366'. [ 137.261549][ T7584] netlink: 32 bytes leftover after parsing attributes in process `syz.4.368'. [ 137.354090][ T5924] IPVS: starting estimator thread 0... [ 137.493104][ T7589] IPVS: using max 32 ests per chain, 76800 per kthread [ 137.834875][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.372'. [ 137.959496][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 138.371388][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 138.392549][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 138.449569][ T7631] netlink: 28 bytes leftover after parsing attributes in process `syz.0.380'. [ 138.463922][ T7631] team0: entered promiscuous mode [ 138.468960][ T7631] team_slave_0: entered promiscuous mode [ 138.475278][ T7631] team_slave_1: entered promiscuous mode [ 138.482903][ T7631] bond0: entered promiscuous mode [ 138.488018][ T7631] bond_slave_0: entered promiscuous mode [ 138.495664][ T7631] bond_slave_1: entered promiscuous mode [ 138.504132][ T7631] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 139.174857][ T7668] netlink: 'syz.1.390': attribute type 6 has an invalid length. [ 139.223560][ T7668] netlink: 'syz.1.390': attribute type 12 has an invalid length. [ 139.238530][ T7668] __nla_validate_parse: 5 callbacks suppressed [ 139.238546][ T7668] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.390'. [ 139.520448][ T7683] netlink: 28 bytes leftover after parsing attributes in process `syz.4.395'. [ 140.059068][ T7706] tap0: tun_chr_ioctl cmd 1074025676 [ 140.068218][ T7706] tap0: owner set to 0 [ 140.618313][ T7719] geneve2: entered promiscuous mode [ 140.626028][ T7719] geneve2: entered allmulticast mode [ 140.635662][ T5130] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 39009 - 0 [ 140.644324][ T5130] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 36854 - 0 [ 140.682748][ T5130] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 39009 - 0 [ 140.692142][ T5130] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 36854 - 0 [ 140.700904][ T5130] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 39009 - 0 [ 140.710276][ T5130] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 36854 - 0 [ 140.719201][ T5130] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 39009 - 0 [ 140.727622][ T5130] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 36854 - 0 [ 140.840577][ T7730] netlink: 'syz.1.407': attribute type 1 has an invalid length. [ 140.853073][ T7730] netlink: 144 bytes leftover after parsing attributes in process `syz.1.407'. [ 140.865251][ T7730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.407'. [ 140.951153][ T7736] netlink: 6 bytes leftover after parsing attributes in process `syz.1.407'. [ 140.967151][ T7736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.017623][ T7734] netlink: 48 bytes leftover after parsing attributes in process `syz.0.408'. [ 141.074612][ T7740] netlink: 'syz.1.410': attribute type 13 has an invalid length. [ 141.082811][ T7740] netlink: 'syz.1.410': attribute type 17 has an invalid length. [ 141.129683][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.410'. [ 141.292321][ T7747] netlink: 'syz.3.412': attribute type 10 has an invalid length. [ 141.300245][ T7740] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.344840][ T7747] netlink: 'syz.3.412': attribute type 7 has an invalid length. [ 141.353008][ T7747] netlink: 'syz.3.412': attribute type 8 has an invalid length. [ 141.360734][ T7747] netlink: 'syz.3.412': attribute type 13 has an invalid length. [ 141.389977][ T7747] netlink: 'syz.3.412': attribute type 1 has an invalid length. [ 141.421621][ T7747] netlink: 228 bytes leftover after parsing attributes in process `syz.3.412'. [ 141.595660][ T7761] Bluetooth: MGMT ver 1.23 [ 141.638474][ T7763] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.416'. [ 141.652508][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.416'. [ 141.773484][ T7761] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.789417][ T7761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.271099][ T7796] !: entered promiscuous mode [ 142.284097][ T7796] vlan2: entered promiscuous mode [ 142.373914][ T7801] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 142.467142][ T7801] pim6reg: entered allmulticast mode [ 142.535632][ T7810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 142.543090][ T7810] IPv6: NLM_F_CREATE should be set when creating new route [ 142.553918][ T7810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 142.561187][ T7810] IPv6: NLM_F_CREATE should be set when creating new route [ 142.984308][ T7828] bond1: (slave gretap1): making interface the new active one [ 142.994169][ T7828] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 143.037441][ T7832] vlan3: entered allmulticast mode [ 143.046967][ T7832] bond1: entered allmulticast mode [ 143.052460][ T7832] gretap1: entered allmulticast mode [ 143.059174][ T7832] bond1: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 143.111669][ T7840] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 143.355600][ T7840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.368901][ T7840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.388309][ T7840] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 143.417526][ T7840] bond0 (unregistering): Released all slaves [ 143.664197][ T5963] IPVS: starting estimator thread 0... [ 143.771912][ T7870] IPVS: using max 31 ests per chain, 74400 per kthread [ 143.784110][ T7873] lo speed is unknown, defaulting to 1000 [ 143.850525][ T7867] tipc: Started in network mode [ 143.855976][ T7867] tipc: Node identity dee205c2d56e, cluster identity 4711 [ 143.864037][ T7867] tipc: Enabled bearer , priority 0 [ 143.877331][ T7867] syzkaller0: entered promiscuous mode [ 143.883049][ T7867] syzkaller0: entered allmulticast mode [ 143.927023][ T7866] tipc: Resetting bearer [ 143.942610][ T7866] tipc: Disabling bearer [ 144.523588][ T7890] __nla_validate_parse: 10 callbacks suppressed [ 144.523605][ T7890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.449'. [ 144.958988][ T7898] : entered promiscuous mode [ 145.146449][ T7915] validate_nla: 5 callbacks suppressed [ 145.146466][ T7915] netlink: 'syz.3.454': attribute type 10 has an invalid length. [ 145.169502][ T7915] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.177275][ T7915] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.467725][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.457'. [ 145.588567][ T7926] lo speed is unknown, defaulting to 1000 [ 145.677610][ T7932] netlink: 'syz.0.460': attribute type 1 has an invalid length. [ 145.807118][ T7928] lo speed is unknown, defaulting to 1000 [ 145.826565][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.460'. [ 146.082523][ T7947] tipc: Enabling of bearer rejected, failed to enable media [ 146.439874][ T7963] netlink: 'syz.0.466': attribute type 10 has an invalid length. [ 146.451381][ T7963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.466'. [ 146.460772][ T7963] !: entered promiscuous mode [ 146.467990][ T7963] bridge0: port 3(0!) entered blocking state [ 146.474766][ T7963] bridge0: port 3(0!) entered disabled state [ 146.481313][ T7963] !: entered allmulticast mode [ 146.486749][ T7965] netlink: 'syz.2.468': attribute type 32 has an invalid length. [ 146.497665][ T7963] bridge0: port 3(0!) entered blocking state [ 146.504035][ T7963] bridge0: port 3(0!) entered forwarding state [ 146.588975][ T7970] netlink: 'syz.2.468': attribute type 8 has an invalid length. [ 146.682964][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.468'. [ 146.746000][ T7975] netlink: 'syz.1.469': attribute type 15 has an invalid length. [ 146.787574][ T7969] warning: `syz.1.469' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 147.076876][ T7986] netlink: 19 bytes leftover after parsing attributes in process `syz.0.472'. [ 147.605443][ T8006] lo speed is unknown, defaulting to 1000 [ 147.686777][ T8011] tipc: Enabled bearer , priority 0 [ 147.739766][ T8011] tipc: Disabling bearer [ 148.074749][ T8019] tipc: Enabled bearer , priority 0 [ 148.096116][ T8019] syzkaller0: entered promiscuous mode [ 148.101622][ T8019] syzkaller0: entered allmulticast mode [ 148.634348][ T8022] tipc: Resetting bearer [ 148.847055][ T8022] tipc: Disabling bearer [ 148.921449][ T8026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.482'. [ 149.009386][ T8026] batadv0: entered promiscuous mode [ 149.040921][ T8026] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 149.066967][ T8026] batadv0: left promiscuous mode [ 149.107170][ T8027] tipc: Enabling of bearer rejected, failed to enable media [ 149.248041][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.484'. [ 149.322279][ T8041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.332354][ T8041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.348630][ T8041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.362685][ T8041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.667644][ T8052] netlink: 32 bytes leftover after parsing attributes in process `syz.1.489'. [ 149.765666][ T8054] netlink: 104 bytes leftover after parsing attributes in process `syz.0.487'. [ 149.775385][ T8057] netlink: 44 bytes leftover after parsing attributes in process `syz.4.488'. [ 149.883689][ T8045] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 150.050227][ T8055] veth3: entered promiscuous mode [ 150.369188][ T8067] netlink: 'syz.4.493': attribute type 13 has an invalid length. [ 151.157799][ T8091] netlink: 20 bytes leftover after parsing attributes in process `syz.0.498'. [ 151.380490][ T8098] veth0_to_bridge: entered promiscuous mode [ 151.387308][ T8097] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 151.403060][ T8098] veth0_to_bridge: left promiscuous mode [ 151.439350][ T8079] infiniband syz0: set active [ 151.448964][ T8079] infiniband syz0: added veth1_to_hsr [ 151.495734][ T8097] netlink: 236 bytes leftover after parsing attributes in process `syz.4.500'. [ 151.504855][ T8097] netlink: 1 bytes leftover after parsing attributes in process `syz.4.500'. [ 151.555606][ T8079] RDS/IB: syz0: added [ 151.560984][ T8079] smc: adding ib device syz0 with port count 1 [ 151.585378][ T8079] smc: ib device syz0 port 1 has no pnetid [ 151.953221][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 153.295795][ T8155] netlink: 20 bytes leftover after parsing attributes in process `syz.2.517'. [ 153.308556][ T8155] netlink: 36 bytes leftover after parsing attributes in process `syz.2.517'. [ 154.850987][ T8163] lo speed is unknown, defaulting to 1000 [ 155.074195][ T8183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.526'. [ 155.097281][ T8181] lo speed is unknown, defaulting to 1000 [ 155.397033][ T8193] netlink: 'syz.4.529': attribute type 1 has an invalid length. [ 155.417074][ T8193] netlink: 17 bytes leftover after parsing attributes in process `syz.4.529'. [ 155.487910][ T8197] lo speed is unknown, defaulting to 1000 [ 155.515766][ T8199] !: renamed from dummy0 (while UP) [ 155.786639][ T8203] lo speed is unknown, defaulting to 1000 [ 157.123485][ T30] audit: type=1107 audit(1757600893.409:2): pid=8229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='€' [ 157.453470][ T8232] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.593132][ T8232] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.727244][ T8232] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.886890][ T8232] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.125849][ T78] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.158728][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.201559][ T6432] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.282863][ T78] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.302144][ T8240] lo speed is unknown, defaulting to 1000 [ 158.983786][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'. [ 159.059516][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 159.274085][ T8272] sctp: [Deprecated]: syz.2.544 (pid 8272) Use of int in max_burst socket option deprecated. [ 159.274085][ T8272] Use struct sctp_assoc_value instead [ 159.783017][ T8298] netlink: 84 bytes leftover after parsing attributes in process `syz.2.550'. [ 159.957790][ T8305] Bluetooth: MGMT ver 1.23 [ 160.255284][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.555'. [ 160.265616][ T8323] FAULT_INJECTION: forcing a failure. [ 160.265616][ T8323] name failslab, interval 1, probability 0, space 0, times 1 [ 160.322309][ T8323] CPU: 0 UID: 0 PID: 8323 Comm: syz.1.556 Not tainted syzkaller #0 PREEMPT(full) [ 160.322346][ T8323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 160.322363][ T8323] Call Trace: [ 160.322370][ T8323] [ 160.322378][ T8323] dump_stack_lvl+0x189/0x250 [ 160.322413][ T8323] ? __pfx____ratelimit+0x10/0x10 [ 160.322432][ T8323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.322453][ T8323] ? __pfx__printk+0x10/0x10 [ 160.322484][ T8323] ? __pfx___might_resched+0x10/0x10 [ 160.322505][ T8323] should_fail_ex+0x414/0x560 [ 160.322533][ T8323] ? traverse+0xd9/0x570 [ 160.322552][ T8323] should_failslab+0xa8/0x100 [ 160.322579][ T8323] __kvmalloc_node_noprof+0x161/0x5f0 [ 160.322604][ T8323] ? traverse+0xd9/0x570 [ 160.322629][ T8323] traverse+0xd9/0x570 [ 160.322663][ T8323] seq_read_iter+0xcfe/0xe10 [ 160.322694][ T8323] ? kernfs_fop_read_iter+0x13f/0x640 [ 160.322727][ T8323] do_iter_readv_writev+0x619/0x8b0 [ 160.322759][ T8323] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 160.322793][ T8323] ? rw_verify_area+0x2a6/0x4d0 [ 160.322819][ T8323] vfs_readv+0x253/0x850 [ 160.322842][ T8323] ? __pfx_vfs_readv+0x10/0x10 [ 160.322873][ T8323] ? __fget_files+0x2a/0x420 [ 160.322893][ T8323] ? __fget_files+0x3a0/0x420 [ 160.322907][ T8323] ? __fget_files+0x2a/0x420 [ 160.322931][ T8323] do_readv+0x14d/0x2d0 [ 160.322950][ T8323] ? __pfx_do_readv+0x10/0x10 [ 160.322964][ T8323] ? rcu_is_watching+0x15/0xb0 [ 160.322987][ T8323] ? do_syscall_64+0xbe/0x3b0 [ 160.323011][ T8323] do_syscall_64+0xfa/0x3b0 [ 160.323029][ T8323] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.323047][ T8323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.323064][ T8323] ? clear_bhb_loop+0x60/0xb0 [ 160.323085][ T8323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.323102][ T8323] RIP: 0033:0x7f93d0d8eba9 [ 160.323124][ T8323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.323137][ T8323] RSP: 002b:00007f93d1c2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 160.323159][ T8323] RAX: ffffffffffffffda RBX: 00007f93d0fd5fa0 RCX: 00007f93d0d8eba9 [ 160.323171][ T8323] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 000000000000000b [ 160.323181][ T8323] RBP: 00007f93d1c2e090 R08: 0000000000000000 R09: 0000000000000000 [ 160.323191][ T8323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.323200][ T8323] R13: 00007f93d0fd6038 R14: 00007f93d0fd5fa0 R15: 00007ffd946a6938 [ 160.323227][ T8323] [ 160.583313][ T8313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.555'. [ 160.664114][ T8329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.557'. [ 161.347947][ T8367] lo speed is unknown, defaulting to 1000 [ 161.552521][ T55] block nbd0: Possible stuck request ffff888024f27000: control (read@0,4096B). Runtime 60 seconds [ 161.754092][ T8382] FAULT_INJECTION: forcing a failure. [ 161.754092][ T8382] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 161.767588][ T8382] CPU: 1 UID: 0 PID: 8382 Comm: syz.3.570 Not tainted syzkaller #0 PREEMPT(full) [ 161.767611][ T8382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 161.767621][ T8382] Call Trace: [ 161.767628][ T8382] [ 161.767636][ T8382] dump_stack_lvl+0x189/0x250 [ 161.767662][ T8382] ? __pfx____ratelimit+0x10/0x10 [ 161.767683][ T8382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.767703][ T8382] ? __pfx__printk+0x10/0x10 [ 161.767740][ T8382] should_fail_ex+0x414/0x560 [ 161.767769][ T8382] _copy_to_user+0x31/0xb0 [ 161.767793][ T8382] simple_read_from_buffer+0xe1/0x170 [ 161.767823][ T8382] proc_fail_nth_read+0x1b3/0x220 [ 161.767846][ T8382] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.767869][ T8382] ? rw_verify_area+0x2a6/0x4d0 [ 161.767890][ T8382] ? __lock_acquire+0xab9/0xd20 [ 161.767914][ T8382] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.767935][ T8382] vfs_read+0x200/0xa30 [ 161.767956][ T8382] ? fdget_pos+0x247/0x320 [ 161.767993][ T8382] ? __pfx___mutex_lock+0x10/0x10 [ 161.768034][ T8382] ? __pfx_vfs_read+0x10/0x10 [ 161.768060][ T8382] ? __fget_files+0x2a/0x420 [ 161.768080][ T8382] ? __fget_files+0x3a0/0x420 [ 161.768095][ T8382] ? __fget_files+0x2a/0x420 [ 161.768121][ T8382] ksys_read+0x145/0x250 [ 161.768148][ T8382] ? __pfx_ksys_read+0x10/0x10 [ 161.768170][ T8382] ? rcu_is_watching+0x15/0xb0 [ 161.768194][ T8382] ? do_syscall_64+0xbe/0x3b0 [ 161.768219][ T8382] do_syscall_64+0xfa/0x3b0 [ 161.768238][ T8382] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.768258][ T8382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.768277][ T8382] ? clear_bhb_loop+0x60/0xb0 [ 161.768299][ T8382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.768317][ T8382] RIP: 0033:0x7f06c078d5bc [ 161.768333][ T8382] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 161.768347][ T8382] RSP: 002b:00007f06c1631030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 161.768367][ T8382] RAX: ffffffffffffffda RBX: 00007f06c09d5fa0 RCX: 00007f06c078d5bc [ 161.768380][ T8382] RDX: 000000000000000f RSI: 00007f06c16310a0 RDI: 000000000000000c [ 161.768391][ T8382] RBP: 00007f06c1631090 R08: 0000000000000000 R09: 0000000000000000 [ 161.768402][ T8382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.768411][ T8382] R13: 00007f06c09d6038 R14: 00007f06c09d5fa0 R15: 00007ffe01164788 [ 161.768443][ T8382] [ 162.077089][ T8362] lo speed is unknown, defaulting to 1000 [ 162.437747][ T8403] : entered promiscuous mode [ 164.033322][ T8454] netlink: 'syz.4.586': attribute type 12 has an invalid length. [ 164.073245][ T8442] lo speed is unknown, defaulting to 1000 [ 164.086241][ T8455] netlink: 'syz.3.587': attribute type 1 has an invalid length. [ 164.111222][ T8455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.119008][ T8470] lo speed is unknown, defaulting to 1000 [ 165.279343][ T8483] veth0_to_bridge: entered promiscuous mode [ 165.311283][ T8483] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 165.381023][ T8483] netlink: 'syz.4.593': attribute type 3 has an invalid length. [ 165.398359][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.593'. [ 165.514023][ T8483] netlink: 'syz.4.593': attribute type 3 has an invalid length. [ 165.525047][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.593'. [ 165.787745][ T8494] lo speed is unknown, defaulting to 1000 [ 166.636728][ T8519] lo speed is unknown, defaulting to 1000 [ 166.754697][ T8530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.601'. [ 166.777292][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.601'. [ 167.374073][ T8545] netlink: 220 bytes leftover after parsing attributes in process `syz.4.607'. [ 167.385911][ T8545] netlink: 220 bytes leftover after parsing attributes in process `syz.4.607'. [ 167.485936][ T8545] netlink: 32 bytes leftover after parsing attributes in process `syz.4.607'. [ 167.575519][ T8556] syzkaller0: entered promiscuous mode [ 167.581220][ T8556] syzkaller0: entered allmulticast mode [ 167.594230][ T8556] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 167.778700][ T8553] lo speed is unknown, defaulting to 1000 [ 167.993269][ T8565] netlink: 36 bytes leftover after parsing attributes in process `syz.2.611'. [ 168.360583][ T8577] lo speed is unknown, defaulting to 1000 [ 168.809635][ T8597] netlink: 5 bytes leftover after parsing attributes in process `syz.4.615'. [ 168.959461][ T8606] netlink: 48 bytes leftover after parsing attributes in process `syz.4.617'. [ 169.000659][ T8606] netlink: 'syz.4.617': attribute type 10 has an invalid length. [ 169.017210][ T8606] bond0: (slave wlan1): Opening slave failed [ 169.279416][ T8602] lo speed is unknown, defaulting to 1000 [ 170.600562][ T8625] netlink: 56 bytes leftover after parsing attributes in process `syz.3.622'. [ 170.908964][ T8618] syz.2.620 (8618) used greatest stack depth: 17864 bytes left [ 170.953349][ T8637] netlink: 'syz.3.626': attribute type 1 has an invalid length. [ 170.974442][ T8637] netlink: 'syz.3.626': attribute type 10 has an invalid length. [ 170.983228][ T8637] bridge0: port 3(macsec0) entered blocking state [ 170.989844][ T8637] bridge0: port 3(macsec0) entered disabled state [ 170.997148][ T8637] macsec0: entered allmulticast mode [ 171.002811][ T8637] veth1_macvtap: entered allmulticast mode [ 171.015928][ T8637] macsec0: entered promiscuous mode [ 171.029069][ T8640] netlink: 'syz.1.627': attribute type 4 has an invalid length. [ 171.162023][ T8642] netlink: 'syz.1.627': attribute type 4 has an invalid length. [ 171.237798][ T8645] netlink: 132 bytes leftover after parsing attributes in process `syz.3.628'. [ 171.316728][ T8651] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 171.528795][ T8659] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 171.737465][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.635'. [ 171.780942][ T8663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.059325][ T8663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.209426][ T8681] lo speed is unknown, defaulting to 1000 [ 172.988260][ T8705] lo speed is unknown, defaulting to 1000 [ 173.115012][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.640'. [ 173.269833][ T8718] bond2: entered promiscuous mode [ 173.276555][ T8718] bond2: entered allmulticast mode [ 173.284356][ T8718] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.294053][ T8720] macsec0: left allmulticast mode [ 173.299133][ T8720] veth1_macvtap: left allmulticast mode [ 173.309856][ T8720] macsec0: left promiscuous mode [ 173.364994][ T8720] bridge0: port 3(macsec0) entered disabled state [ 173.404663][ T8720] bridge_slave_1: left allmulticast mode [ 173.421304][ T8720] bridge_slave_1: left promiscuous mode [ 173.438944][ T8720] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.495023][ T8720] bridge_slave_0: left allmulticast mode [ 173.539534][ T8720] bridge_slave_0: left promiscuous mode [ 173.587668][ T8720] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.780720][ T8741] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 174.319614][ T8752] netlink: 'syz.2.651': attribute type 8 has an invalid length. [ 174.330800][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.651'. [ 174.411281][ T8755] netlink: 44 bytes leftover after parsing attributes in process `syz.4.652'. [ 174.594476][ T8764] netlink: 16 bytes leftover after parsing attributes in process `syz.1.653'. [ 174.603567][ T8765] netlink: 16 bytes leftover after parsing attributes in process `syz.1.653'. [ 174.758513][ T8768] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.766350][ T8768] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.957457][ T8768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.969669][ T8768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.098964][ T8769] geneve0: entered promiscuous mode [ 175.114848][ T8769] geneve0: entered allmulticast mode [ 175.127891][ T6428] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.141248][ T6428] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 175.150919][ T6428] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.170419][ T6428] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 175.179788][ T6428] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.194607][ T6428] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 175.204388][ T6428] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.213195][ T6428] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 175.474386][ T8788] syzkaller0: entered promiscuous mode [ 175.480981][ T8788] syzkaller0: entered allmulticast mode [ 178.599099][ T5233] udevd[5233]: worker [5873] /devices/virtual/block/nbd0 is taking a long time [ 189.763934][ T5866] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 189.773367][ T5866] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 189.781013][ T5866] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 189.789302][ T5866] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 189.797190][ T5866] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 189.814788][ T5879] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 189.822537][ T5879] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 189.830093][ T5879] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 189.840861][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 189.843838][ T5866] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 189.856923][ T5866] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 189.875444][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 189.887781][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 189.898933][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 189.908497][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 189.915861][ T8799] lo speed is unknown, defaulting to 1000 [ 189.961014][ T8801] lo speed is unknown, defaulting to 1000 [ 190.254733][ T8799] chnl_net:caif_netlink_parms(): no params data found [ 190.380015][ T8799] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.387325][ T8799] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.395360][ T8799] bridge_slave_0: entered allmulticast mode [ 190.402866][ T8799] bridge_slave_0: entered promiscuous mode [ 190.417459][ T8799] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.424830][ T8799] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.432589][ T8799] bridge_slave_1: entered allmulticast mode [ 190.440013][ T8799] bridge_slave_1: entered promiscuous mode [ 190.492091][ T8799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.504926][ T8799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.564178][ T8799] team0: Port device team_slave_0 added [ 190.598748][ T8799] team0: Port device team_slave_1 added [ 190.696863][ T8799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.711747][ T8799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.771967][ T8799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.838310][ T8799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.856527][ T8799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.925290][ T8799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.943158][ T5879] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 190.969950][ T5879] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 190.982682][ T5879] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 190.992644][ T5879] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 191.004670][ T5879] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 191.147400][ T5879] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 191.157925][ T5879] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 191.166270][ T5879] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 191.175064][ T5879] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 191.190204][ T8799] hsr_slave_0: entered promiscuous mode [ 191.196600][ T8799] hsr_slave_1: entered promiscuous mode [ 191.203512][ T5879] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 191.212948][ T8799] debugfs: 'hsr0' already exists in 'hsr' [ 191.219389][ T8799] Cannot create hsr debugfs directory [ 191.290060][ T8801] chnl_net:caif_netlink_parms(): no params data found [ 191.355005][ T8813] lo speed is unknown, defaulting to 1000 [ 191.437703][ T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 191.446674][ T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 191.456282][ T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 191.464344][ T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 191.482562][ T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 191.518689][ T8817] lo speed is unknown, defaulting to 1000 [ 191.632599][ T55] block nbd0: Possible stuck request ffff888024f27000: control (read@0,4096B). Runtime 90 seconds [ 191.699198][ T8801] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.710101][ T8801] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.717358][ T8801] bridge_slave_0: entered allmulticast mode [ 191.729987][ T8801] bridge_slave_0: entered promiscuous mode [ 191.738359][ T8801] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.749714][ T8801] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.757431][ T8801] bridge_slave_1: entered allmulticast mode [ 191.771589][ T8801] bridge_slave_1: entered promiscuous mode [ 191.784924][ T8819] lo speed is unknown, defaulting to 1000 [ 191.867163][ T8801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.918914][ T8801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.952127][ T51] Bluetooth: hci6: command tx timeout [ 191.952138][ T5879] Bluetooth: hci5: command tx timeout [ 192.010783][ T8801] team0: Port device team_slave_0 added [ 192.036270][ T8801] team0: Port device team_slave_1 added [ 192.086720][ T8801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.094409][ T8801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.120875][ T8801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.162144][ T8801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.169131][ T8801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.200610][ T8801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.388649][ T8801] hsr_slave_0: entered promiscuous mode [ 192.395366][ T8801] hsr_slave_1: entered promiscuous mode [ 192.401470][ T8801] debugfs: 'hsr0' already exists in 'hsr' [ 192.407820][ T8801] Cannot create hsr debugfs directory [ 192.478891][ T8813] chnl_net:caif_netlink_parms(): no params data found [ 192.662951][ T8817] chnl_net:caif_netlink_parms(): no params data found [ 192.793706][ T8813] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.800972][ T8813] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.808331][ T8813] bridge_slave_0: entered allmulticast mode [ 192.822553][ T8813] bridge_slave_0: entered promiscuous mode [ 192.849379][ T8813] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.860952][ T8813] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.868376][ T8813] bridge_slave_1: entered allmulticast mode [ 192.876660][ T8813] bridge_slave_1: entered promiscuous mode [ 192.937826][ T8813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.974061][ T8819] chnl_net:caif_netlink_parms(): no params data found [ 192.986939][ T8813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.024943][ T8817] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.032610][ T8817] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.039752][ T8817] bridge_slave_0: entered allmulticast mode [ 193.047396][ T8817] bridge_slave_0: entered promiscuous mode [ 193.071915][ T51] Bluetooth: hci7: command tx timeout [ 193.075765][ T8813] team0: Port device team_slave_0 added [ 193.086199][ T8813] team0: Port device team_slave_1 added [ 193.092707][ T8817] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.099834][ T8817] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.107310][ T8817] bridge_slave_1: entered allmulticast mode [ 193.114510][ T8817] bridge_slave_1: entered promiscuous mode [ 193.218060][ T8817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.231875][ T51] Bluetooth: hci8: command tx timeout [ 193.247633][ T8813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.254966][ T8813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.281499][ T8813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.294641][ T8813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.301598][ T8813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.327812][ T8813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.342170][ T8817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.449418][ T8817] team0: Port device team_slave_0 added [ 193.456130][ T8819] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.463512][ T8819] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.470655][ T8819] bridge_slave_0: entered allmulticast mode [ 193.478581][ T8819] bridge_slave_0: entered promiscuous mode [ 193.500096][ T8817] team0: Port device team_slave_1 added [ 193.519757][ T8819] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.527695][ T8819] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.535302][ T8819] bridge_slave_1: entered allmulticast mode [ 193.542981][ T8819] bridge_slave_1: entered promiscuous mode [ 193.552629][ T51] Bluetooth: hci9: command tx timeout [ 193.562823][ T8813] hsr_slave_0: entered promiscuous mode [ 193.569202][ T8813] hsr_slave_1: entered promiscuous mode [ 193.575665][ T8813] debugfs: 'hsr0' already exists in 'hsr' [ 193.581400][ T8813] Cannot create hsr debugfs directory [ 193.629222][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.637321][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.664757][ T8817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.693327][ T8819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.703256][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.710222][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.737223][ T8817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.770790][ T8819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.834064][ T8819] team0: Port device team_slave_0 added [ 193.861206][ T8819] team0: Port device team_slave_1 added [ 193.964744][ T8817] hsr_slave_0: entered promiscuous mode [ 193.971408][ T8817] hsr_slave_1: entered promiscuous mode [ 193.977980][ T8817] debugfs: 'hsr0' already exists in 'hsr' [ 193.983829][ T8817] Cannot create hsr debugfs directory [ 193.996103][ T8819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.003189][ T8819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.030038][ T8819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.041140][ T5879] Bluetooth: hci5: command tx timeout [ 194.046944][ T51] Bluetooth: hci6: command tx timeout [ 194.065657][ T8819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.072707][ T8819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.098963][ T8819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.199470][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.214980][ T8819] hsr_slave_0: entered promiscuous mode [ 194.221463][ T8819] hsr_slave_1: entered promiscuous mode [ 194.228210][ T8819] debugfs: 'hsr0' already exists in 'hsr' [ 194.234253][ T8819] Cannot create hsr debugfs directory [ 195.152160][ T51] Bluetooth: hci7: command tx timeout [ 195.312019][ T51] Bluetooth: hci8: command tx timeout [ 195.631828][ T51] Bluetooth: hci9: command tx timeout [ 196.112012][ T51] Bluetooth: hci6: command tx timeout [ 196.112021][ T5879] Bluetooth: hci5: command tx timeout [ 197.231927][ T51] Bluetooth: hci7: command tx timeout [ 197.392600][ T51] Bluetooth: hci8: command tx timeout [ 197.711866][ T51] Bluetooth: hci9: command tx timeout [ 198.192474][ T5879] Bluetooth: hci5: command tx timeout [ 198.197935][ T51] Bluetooth: hci6: command tx timeout [ 199.312565][ T51] Bluetooth: hci7: command tx timeout [ 199.471919][ T51] Bluetooth: hci8: command tx timeout [ 199.792084][ T51] Bluetooth: hci9: command tx timeout [ 219.797406][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 221.712497][ T55] block nbd0: Possible stuck request ffff888024f27000: control (read@0,4096B). Runtime 120 seconds [ 249.876417][ T5879] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 249.886939][ T5879] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 249.895295][ T5879] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 249.903488][ T5879] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 249.911198][ T5879] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 249.942600][ T5879] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 249.952552][ T5879] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 249.960871][ T5879] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 249.969939][ T5879] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 249.974222][ T8849] lo speed is unknown, defaulting to 1000 [ 249.978010][ T5879] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 250.031364][ T8851] lo speed is unknown, defaulting to 1000 [ 250.368426][ T8849] chnl_net:caif_netlink_parms(): no params data found [ 250.491865][ T8849] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.499086][ T8849] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.506875][ T8849] bridge_slave_0: entered allmulticast mode [ 250.515980][ T8849] bridge_slave_0: entered promiscuous mode [ 250.529191][ T8849] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.536549][ T8849] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.544006][ T8849] bridge_slave_1: entered allmulticast mode [ 250.551265][ T8849] bridge_slave_1: entered promiscuous mode [ 250.590364][ T8849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.603372][ T8849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.644369][ T8849] team0: Port device team_slave_0 added [ 250.663794][ T8849] team0: Port device team_slave_1 added [ 250.737388][ T8849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.744449][ T8849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.779816][ T8849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.797751][ T8849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.805458][ T8849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.833588][ T8849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.844848][ T8851] chnl_net:caif_netlink_parms(): no params data found [ 250.934973][ T8849] hsr_slave_0: entered promiscuous mode [ 250.941936][ T8849] hsr_slave_1: entered promiscuous mode [ 250.948309][ T8849] debugfs: 'hsr0' already exists in 'hsr' [ 250.954228][ T8849] Cannot create hsr debugfs directory [ 251.004801][ T8851] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.012192][ T8851] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.019373][ T8851] bridge_slave_0: entered allmulticast mode [ 251.026983][ T8851] bridge_slave_0: entered promiscuous mode [ 251.039985][ T8851] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.047202][ T8851] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.054636][ T8851] bridge_slave_1: entered allmulticast mode [ 251.070994][ T8851] bridge_slave_1: entered promiscuous mode [ 251.246763][ T8851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.314830][ T8851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.531076][ T8851] team0: Port device team_slave_0 added [ 251.620731][ T5879] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 251.629184][ T5879] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 251.637930][ T5879] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 251.646717][ T5879] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 251.654686][ T5879] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 251.684312][ T8851] team0: Port device team_slave_1 added [ 251.766693][ T5879] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 251.775546][ T5879] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 251.783673][ T5879] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 251.792920][ T55] block nbd0: Possible stuck request ffff888024f27000: control (read@0,4096B). Runtime 150 seconds [ 251.803929][ T5879] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 251.812229][ T5879] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 251.920393][ T5879] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 251.929485][ T5879] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 251.934525][ T8851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.937477][ T5879] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 251.953106][ T5879] Bluetooth: hci10: command tx timeout [ 251.959460][ T8851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.986197][ T5879] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 251.995406][ T5879] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 252.002844][ T8851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.021010][ T8851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.028305][ T8851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.054658][ T5879] Bluetooth: hci11: command tx timeout [ 252.055881][ T8851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.102957][ T8870] lo speed is unknown, defaulting to 1000 [ 252.132758][ T8868] lo speed is unknown, defaulting to 1000 [ 252.163025][ T8851] hsr_slave_0: entered promiscuous mode [ 252.169631][ T8851] hsr_slave_1: entered promiscuous mode [ 252.176893][ T8851] debugfs: 'hsr0' already exists in 'hsr' [ 252.182699][ T8851] Cannot create hsr debugfs directory [ 252.297851][ T8872] lo speed is unknown, defaulting to 1000 [ 252.819588][ T8870] chnl_net:caif_netlink_parms(): no params data found [ 253.078331][ T8870] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.085640][ T8870] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.093829][ T8870] bridge_slave_0: entered allmulticast mode [ 253.101308][ T8870] bridge_slave_0: entered promiscuous mode [ 253.149328][ T8870] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.158980][ T8870] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.167158][ T8870] bridge_slave_1: entered allmulticast mode [ 253.174393][ T8870] bridge_slave_1: entered promiscuous mode [ 253.267327][ T8870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.295572][ T8870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.347810][ T8870] team0: Port device team_slave_0 added [ 253.355784][ T8868] chnl_net:caif_netlink_parms(): no params data found [ 253.369450][ T8870] team0: Port device team_slave_1 added [ 253.462607][ T8870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.469573][ T8870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.496652][ T8870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.530639][ T8870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.537907][ T8870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.565182][ T8870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.696099][ T8870] hsr_slave_0: entered promiscuous mode [ 253.703486][ T8870] hsr_slave_1: entered promiscuous mode [ 253.709669][ T8870] debugfs: 'hsr0' already exists in 'hsr' [ 253.715799][ T8870] Cannot create hsr debugfs directory [ 253.736897][ T8868] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.747625][ T8868] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.757508][ T8868] bridge_slave_0: entered allmulticast mode [ 253.765428][ T8868] bridge_slave_0: entered promiscuous mode [ 253.774272][ T8868] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.781391][ T8868] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.788759][ T8868] bridge_slave_1: entered allmulticast mode [ 253.795512][ T5879] Bluetooth: hci12: command tx timeout [ 253.803946][ T8868] bridge_slave_1: entered promiscuous mode [ 253.861515][ T8872] chnl_net:caif_netlink_parms(): no params data found [ 253.882748][ T5879] Bluetooth: hci13: command tx timeout [ 253.889696][ T8868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.903424][ T8868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.003485][ T8868] team0: Port device team_slave_0 added [ 254.032881][ T5879] Bluetooth: hci14: command tx timeout [ 254.038908][ T5879] Bluetooth: hci10: command tx timeout [ 254.039649][ T8868] team0: Port device team_slave_1 added [ 254.122687][ T5879] Bluetooth: hci11: command tx timeout [ 254.136387][ T8868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.143913][ T8868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.170592][ T8868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.184883][ T8868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.192563][ T8868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.219785][ T8868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.232068][ T8872] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.239205][ T8872] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.246849][ T8872] bridge_slave_0: entered allmulticast mode [ 254.254582][ T8872] bridge_slave_0: entered promiscuous mode [ 254.262993][ T8872] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.270933][ T8872] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.278831][ T8872] bridge_slave_1: entered allmulticast mode [ 254.286535][ T8872] bridge_slave_1: entered promiscuous mode [ 254.365807][ T8872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.378766][ T8872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.460053][ T8872] team0: Port device team_slave_0 added [ 254.482649][ T8868] hsr_slave_0: entered promiscuous mode [ 254.489110][ T8868] hsr_slave_1: entered promiscuous mode [ 254.495740][ T8868] debugfs: 'hsr0' already exists in 'hsr' [ 254.501484][ T8868] Cannot create hsr debugfs directory [ 254.524829][ T8872] team0: Port device team_slave_1 added [ 254.606669][ T8872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.614247][ T8872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.640914][ T8872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.654075][ T8872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.661040][ T8872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.687382][ T8872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.813187][ T8872] hsr_slave_0: entered promiscuous mode [ 254.819788][ T8872] hsr_slave_1: entered promiscuous mode [ 254.826786][ T8872] debugfs: 'hsr0' already exists in 'hsr' [ 254.833537][ T8872] Cannot create hsr debugfs directory [ 255.634892][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.871886][ T5879] Bluetooth: hci12: command tx timeout [ 255.951919][ T5879] Bluetooth: hci13: command tx timeout [ 256.111866][ T51] Bluetooth: hci14: command tx timeout [ 256.112507][ T5879] Bluetooth: hci10: command tx timeout [ 256.191858][ T5879] Bluetooth: hci11: command tx timeout [ 257.952098][ T5879] Bluetooth: hci12: command tx timeout [ 258.031894][ T5879] Bluetooth: hci13: command tx timeout [ 258.191835][ T5879] Bluetooth: hci10: command tx timeout [ 258.192366][ T51] Bluetooth: hci14: command tx timeout [ 258.272169][ T51] Bluetooth: hci11: command tx timeout [ 260.031786][ T51] Bluetooth: hci12: command tx timeout [ 260.112100][ T51] Bluetooth: hci13: command tx timeout [ 260.271860][ T51] Bluetooth: hci14: command tx timeout [ 281.872509][ T55] block nbd0: Possible stuck request ffff888024f27000: control (read@0,4096B). Runtime 180 seconds [ 282.526727][ T5233] udevd[5233]: worker [5873] /devices/virtual/block/nbd0 timeout; kill it [ 282.536049][ T5233] udevd[5233]: seq 11623 '/devices/virtual/block/nbd0' killed [ 310.042415][ T5879] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 310.051206][ T5879] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 310.059109][ T5879] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 310.067662][ T5879] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 310.076093][ T5879] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 310.104638][ T5879] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 310.113889][ T5879] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 310.123551][ T5879] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 310.131545][ T5879] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 310.139482][ T5879] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 310.148638][ T8897] lo speed is unknown, defaulting to 1000 [ 310.185499][ T8899] lo speed is unknown, defaulting to 1000 [ 310.597522][ T8897] chnl_net:caif_netlink_parms(): no params data found [ 310.734249][ T8897] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.741430][ T8897] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.748999][ T8897] bridge_slave_0: entered allmulticast mode [ 310.757570][ T8897] bridge_slave_0: entered promiscuous mode [ 310.772568][ T8897] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.779827][ T8897] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.787561][ T8897] bridge_slave_1: entered allmulticast mode [ 310.797409][ T8897] bridge_slave_1: entered promiscuous mode [ 310.835682][ T8897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.851205][ T8897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.908260][ T8897] team0: Port device team_slave_0 added [ 310.935269][ T8897] team0: Port device team_slave_1 added [ 311.020041][ T8897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.028274][ T8897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.056447][ T8897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.075151][ T8899] chnl_net:caif_netlink_parms(): no params data found [ 311.093211][ T8897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.100180][ T8897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.127832][ T8897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.308798][ T8897] hsr_slave_0: entered promiscuous mode [ 311.342997][ T8897] hsr_slave_1: entered promiscuous mode [ 311.349351][ T8897] debugfs: 'hsr0' already exists in 'hsr' [ 311.381658][ T8897] Cannot create hsr debugfs directory [ 311.538279][ T5879] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 311.548766][ T8899] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.559748][ T8899] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.560670][ T5879] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 311.572669][ T8899] bridge_slave_0: entered allmulticast mode [ 311.580417][ T5879] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 311.589126][ T5879] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 311.592694][ T8899] bridge_slave_0: entered promiscuous mode [ 311.603126][ T5879] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 311.681403][ T8899] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.722562][ T8899] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.729890][ T8899] bridge_slave_1: entered allmulticast mode [ 311.754509][ T8899] bridge_slave_1: entered promiscuous mode [ 311.798475][ T5879] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 311.807233][ T5879] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 311.822742][ T5879] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 311.837670][ T8916] lo speed is unknown, defaulting to 1000 [ 311.847333][ T5879] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 311.855251][ T5879] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 311.897802][ T8899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.973162][ T55] block nbd0: Possible stuck request ffff888024f27000: control (read@0,4096B). Runtime 210 seconds [ 311.978708][ T8899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.112438][ T8922] Bluetooth: hci15: command tx timeout [ 312.190503][ T8921] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 312.200065][ T8921] Bluetooth: hci16: command tx timeout [ 312.206675][ T8921] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 312.217346][ T8921] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 312.226944][ T8921] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 312.227409][ T8919] lo speed is unknown, defaulting to 1000 [ 312.241378][ T8921] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 312.242999][ T8899] team0: Port device team_slave_0 added [ 312.288279][ T8899] team0: Port device team_slave_1 added [ 312.360853][ T8899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.375377][ T8899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.401716][ T8899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.443521][ T8899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.450491][ T8899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.478948][ T8899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.525185][ T8923] lo speed is unknown, defaulting to 1000 [ 312.617872][ T8899] hsr_slave_0: entered promiscuous mode [ 312.633006][ T8899] hsr_slave_1: entered promiscuous mode [ 312.639383][ T8899] debugfs: 'hsr0' already exists in 'hsr' [ 312.657840][ T8899] Cannot create hsr debugfs directory [ 313.241072][ T8916] chnl_net:caif_netlink_parms(): no params data found [ 313.421235][ T8919] chnl_net:caif_netlink_parms(): no params data found [ 313.513532][ T8916] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.520753][ T8916] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.528386][ T8916] bridge_slave_0: entered allmulticast mode [ 313.537873][ T8916] bridge_slave_0: entered promiscuous mode [ 313.547987][ T8916] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.555886][ T8916] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.566674][ T8916] bridge_slave_1: entered allmulticast mode [ 313.575570][ T8916] bridge_slave_1: entered promiscuous mode [ 313.632262][ T8922] Bluetooth: hci17: command tx timeout [ 313.695844][ T8916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.726768][ T8916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.808605][ T8916] team0: Port device team_slave_0 added [ 313.850074][ T8916] team0: Port device team_slave_1 added [ 313.870668][ T8923] chnl_net:caif_netlink_parms(): no params data found [ 313.885495][ T8919] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.893662][ T8919] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.900857][ T8919] bridge_slave_0: entered allmulticast mode [ 313.909447][ T8919] bridge_slave_0: entered promiscuous mode [ 313.918356][ T8919] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.926039][ T8919] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.933553][ T8919] bridge_slave_1: entered allmulticast mode [ 313.940911][ T8919] bridge_slave_1: entered promiscuous mode [ 313.952705][ T8922] Bluetooth: hci18: command tx timeout [ 314.008841][ T8916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.016378][ T8916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.045736][ T8916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.056724][ T8922] Bluetooth: hci5: command 0x0406 tx timeout [ 314.057120][ T8922] Bluetooth: hci6: command 0x0406 tx timeout [ 314.057173][ T8922] Bluetooth: hci7: command 0x0406 tx timeout [ 314.057206][ T8922] Bluetooth: hci9: command 0x0406 tx timeout [ 314.057239][ T8922] Bluetooth: hci8: command 0x0406 tx timeout [ 314.092326][ T8916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.099543][ T8916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.126771][ T8916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.167208][ T8919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.191957][ T51] Bluetooth: hci15: command tx timeout [ 314.214593][ T8919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.272434][ T51] Bluetooth: hci16: command tx timeout [ 314.289929][ T8919] team0: Port device team_slave_0 added [ 314.298459][ T8919] team0: Port device team_slave_1 added [ 314.351929][ T51] Bluetooth: hci19: command tx timeout [ 314.405047][ T8919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.412267][ T8919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.439714][ T8919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.452892][ T8923] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.460159][ T8923] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.468103][ T8923] bridge_slave_0: entered allmulticast mode [ 314.476563][ T8923] bridge_slave_0: entered promiscuous mode [ 314.485479][ T8923] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.493441][ T8923] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.500660][ T8923] bridge_slave_1: entered allmulticast mode [ 314.508954][ T8923] bridge_slave_1: entered promiscuous mode [ 314.523867][ T8916] hsr_slave_0: entered promiscuous mode [ 314.530725][ T8916] hsr_slave_1: entered promiscuous mode [ 314.537554][ T8916] debugfs: 'hsr0' already exists in 'hsr' [ 314.545109][ T8916] Cannot create hsr debugfs directory [ 314.551223][ T8919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.558877][ T8919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.585688][ T8919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.654616][ T8923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.688809][ T8923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.758223][ T8923] team0: Port device team_slave_0 added [ 314.770555][ T8919] hsr_slave_0: entered promiscuous mode [ 314.778503][ T8919] hsr_slave_1: entered promiscuous mode [ 314.786008][ T8919] debugfs: 'hsr0' already exists in 'hsr' [ 314.792040][ T8919] Cannot create hsr debugfs directory [ 314.805739][ T8923] team0: Port device team_slave_1 added [ 314.917404][ T8923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.925037][ T8923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.951423][ T8923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.965637][ T8923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.972804][ T8923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.000275][ T8923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.126953][ T8923] hsr_slave_0: entered promiscuous mode [ 315.134172][ T8923] hsr_slave_1: entered promiscuous mode [ 315.140381][ T8923] debugfs: 'hsr0' already exists in 'hsr' [ 315.146584][ T8923] Cannot create hsr debugfs directory [ 315.712841][ T51] Bluetooth: hci17: command tx timeout [ 316.032176][ T51] Bluetooth: hci18: command tx timeout [ 316.271938][ T51] Bluetooth: hci15: command tx timeout [ 316.351971][ T51] Bluetooth: hci16: command tx timeout [ 316.432149][ T51] Bluetooth: hci19: command tx timeout [ 317.079740][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.791855][ T51] Bluetooth: hci17: command tx timeout [ 318.112476][ T51] Bluetooth: hci18: command tx timeout [ 318.352761][ T51] Bluetooth: hci15: command tx timeout [ 318.431750][ T51] Bluetooth: hci16: command tx timeout [ 318.512176][ T51] Bluetooth: hci19: command tx timeout [ 319.872127][ T51] Bluetooth: hci17: command tx timeout [ 320.192237][ T51] Bluetooth: hci18: command tx timeout [ 320.592226][ T51] Bluetooth: hci19: command tx timeout [ 323.472080][ T31] INFO: task syz.2.651:8762 blocked for more than 143 seconds. [ 323.479687][ T31] Not tainted syzkaller #0 [ 323.486173][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 323.495512][ T31] task:syz.2.651 state:D stack:27752 pid:8762 tgid:8751 ppid:5874 task_flags:0x400140 flags:0x00004004 [ 323.507914][ T31] Call Trace: [ 323.511233][ T31] [ 323.514633][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 323.519161][ T31] ? rcu_is_watching+0x15/0xb0 [ 323.531989][ T31] ? __lock_acquire+0xab9/0xd20 [ 323.536921][ T31] ? __lock_acquire+0xab9/0xd20 [ 323.542402][ T31] ? __pfx___schedule+0x10/0x10 [ 323.547287][ T31] ? schedule+0x91/0x360 [ 323.552915][ T31] schedule+0x165/0x360 [ 323.557100][ T31] schedule_preempt_disabled+0x13/0x30 [ 323.592878][ T31] __mutex_lock+0x7e6/0x1350 [ 323.597540][ T31] ? __mutex_lock+0x5bb/0x1350 [ 323.620180][ T31] ? genl_rcv_msg+0x10d/0x790 [ 323.629304][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 323.635618][ T31] ? stack_trace_save+0x9c/0xe0 [ 323.640497][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 323.646562][ T31] ? radix_tree_lookup+0x240/0x290 [ 323.652232][ T31] genl_rcv_msg+0x10d/0x790 [ 323.656787][ T31] ? __lock_acquire+0xab9/0xd20 [ 323.662036][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 323.667197][ T31] netlink_rcv_skb+0x208/0x470 [ 323.672684][ T31] ? __lock_acquire+0xab9/0xd20 [ 323.677567][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 323.683019][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 323.688355][ T31] ? down_read+0x1ad/0x2e0 [ 323.693273][ T31] genl_rcv+0x28/0x40 [ 323.697275][ T31] netlink_unicast+0x82f/0x9e0 [ 323.703724][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 323.709038][ T31] ? netlink_sendmsg+0x642/0xb30 [ 323.714498][ T31] ? skb_put+0x11b/0x210 [ 323.718774][ T31] netlink_sendmsg+0x805/0xb30 [ 323.724137][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.729440][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 323.735103][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 323.740418][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.746110][ T31] __sock_sendmsg+0x21c/0x270 [ 323.750840][ T31] __sys_sendto+0x3bd/0x520 [ 323.755695][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 323.760740][ T31] ? count_memcg_event_mm+0x21/0x260 [ 323.766818][ T31] ? exc_page_fault+0x76/0xf0 [ 323.771515][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 323.777243][ T31] __x64_sys_sendto+0xde/0x100 [ 323.782306][ T31] do_syscall_64+0xfa/0x3b0 [ 323.786855][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.792843][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.798938][ T31] ? clear_bhb_loop+0x60/0xb0 [ 323.804178][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.810094][ T31] RIP: 0033:0x7fd492b90a3c [ 323.815122][ T31] RSP: 002b:00007fd49392eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 323.824103][ T31] RAX: ffffffffffffffda RBX: 00007fd49392efc0 RCX: 00007fd492b90a3c [ 323.832614][ T31] RDX: 0000000000000024 RSI: 00007fd49392f010 RDI: 000000000000000c [ 323.840615][ T31] RBP: 0000000000000000 R08: 00007fd49392ef14 R09: 000000000000000c [ 323.848770][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000c [ 323.858026][ T31] R13: 00007fd49392ef68 R14: 00007fd49392f010 R15: 0000000000000000 [ 323.866454][ T31] [ 323.869561][ T31] INFO: task syz.4.652:8755 blocked for more than 143 seconds. [ 323.880897][ T31] Not tainted syzkaller #0 [ 323.891125][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 323.900621][ T31] task:syz.4.652 state:D stack:26024 pid:8755 tgid:8754 ppid:5871 task_flags:0x480140 flags:0x00004004 [ 323.912925][ T31] Call Trace: [ 323.916254][ T31] [ 323.919221][ T31] __schedule+0x1798/0x4cc0 [ 323.924496][ T31] ? __lock_acquire+0xab9/0xd20 [ 323.929410][ T31] ? __lock_acquire+0xab9/0xd20 [ 323.934460][ T31] ? __pfx___schedule+0x10/0x10 [ 323.939369][ T31] ? schedule+0x91/0x360 [ 323.943994][ T31] schedule+0x165/0x360 [ 323.948179][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 323.954597][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 323.960700][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 323.967252][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 323.973495][ T31] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 323.979763][ T31] nbd_set_size+0x47e/0x6a0 [ 323.984930][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 323.989985][ T31] ? nla_memcpy+0x5b/0xc0 [ 323.994973][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 323.999994][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 324.005845][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 324.012488][ T31] ? bpf_lsm_capable+0x9/0x20 [ 324.017197][ T31] ? security_capable+0x7e/0x2e0 [ 324.022625][ T31] ? radix_tree_lookup+0x240/0x290 [ 324.027765][ T31] nbd_genl_reconfigure+0x409/0x1870 [ 324.034838][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 324.040614][ T31] ? __nla_parse+0x40/0x60 [ 324.045903][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 324.052702][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 324.058282][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 324.064713][ T31] ? stack_trace_save+0x9c/0xe0 [ 324.069606][ T31] genl_rcv_msg+0x60e/0x790 [ 324.074863][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 324.079923][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 324.086015][ T31] netlink_rcv_skb+0x208/0x470 [ 324.090791][ T31] ? __lock_acquire+0xab9/0xd20 [ 324.096079][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 324.101154][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 324.107280][ T31] ? down_read+0x1ad/0x2e0 [ 324.112599][ T31] genl_rcv+0x28/0x40 [ 324.116616][ T31] netlink_unicast+0x82f/0x9e0 [ 324.121421][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 324.127974][ T31] ? netlink_sendmsg+0x642/0xb30 [ 324.133522][ T31] ? skb_put+0x11b/0x210 [ 324.137793][ T31] netlink_sendmsg+0x805/0xb30 [ 324.142997][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.148387][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 324.153745][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 324.159062][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.165063][ T31] __sock_sendmsg+0x21c/0x270 [ 324.169772][ T31] ____sys_sendmsg+0x505/0x830 [ 324.175065][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 324.180404][ T31] ? import_iovec+0x74/0xa0 [ 324.185951][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 324.190653][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 324.196664][ T31] ? __fget_files+0x2a/0x420 [ 324.201274][ T31] ? __fget_files+0x3a0/0x420 [ 324.206382][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 324.211370][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 324.217431][ T31] ? rcu_is_watching+0x15/0xb0 [ 324.222757][ T31] ? do_syscall_64+0xbe/0x3b0 [ 324.227466][ T31] do_syscall_64+0xfa/0x3b0 [ 324.232528][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.237764][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.244191][ T31] ? clear_bhb_loop+0x60/0xb0 [ 324.248975][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.255704][ T31] RIP: 0033:0x7faa19d8eba9 [ 324.260135][ T31] RSP: 002b:00007faa1ac08038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.268646][ T31] RAX: ffffffffffffffda RBX: 00007faa19fd5fa0 RCX: 00007faa19d8eba9 [ 324.276835][ T31] RDX: 0000000020000800 RSI: 0000200000000200 RDI: 0000000000000006 [ 324.285183][ T31] RBP: 00007faa19e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 324.293301][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.301283][ T31] R13: 00007faa19fd6038 R14: 00007faa19fd5fa0 R15: 00007fff39d1acc8 [ 324.309338][ T31] [ 324.312790][ T31] INFO: task syz.4.652:8760 blocked for more than 144 seconds. [ 324.320337][ T31] Not tainted syzkaller #0 [ 324.329337][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 324.338258][ T31] task:syz.4.652 state:D stack:22792 pid:8760 tgid:8754 ppid:5871 task_flags:0x400140 flags:0x00004004 [ 324.350452][ T31] Call Trace: [ 324.353940][ T31] [ 324.356903][ T31] __schedule+0x1798/0x4cc0 [ 324.361448][ T31] ? __lock_acquire+0xab9/0xd20 [ 324.366559][ T31] ? __lock_acquire+0xab9/0xd20 [ 324.371442][ T31] ? __pfx___schedule+0x10/0x10 [ 324.376747][ T31] ? schedule+0x91/0x360 [ 324.381009][ T31] schedule+0x165/0x360 [ 324.385305][ T31] schedule_preempt_disabled+0x13/0x30 [ 324.390798][ T31] __mutex_lock+0x7e6/0x1350 [ 324.395500][ T31] ? __mutex_lock+0x5bb/0x1350 [ 324.400303][ T31] ? genl_rcv_msg+0x10d/0x790 [ 324.405375][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 324.410416][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 324.415676][ T31] ? radix_tree_lookup+0x240/0x290 [ 324.420832][ T31] genl_rcv_msg+0x10d/0x790 [ 324.425438][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 324.430495][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 324.436211][ T31] ? __asan_memcpy+0x40/0x70 [ 324.440838][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 324.446329][ T31] netlink_rcv_skb+0x208/0x470 [ 324.451105][ T31] ? __lock_acquire+0xab9/0xd20 [ 324.456082][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 324.461124][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 324.466788][ T31] ? down_read+0x1ad/0x2e0 [ 324.471237][ T31] genl_rcv+0x28/0x40 [ 324.475496][ T31] netlink_unicast+0x82f/0x9e0 [ 324.480288][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 324.485702][ T31] ? netlink_sendmsg+0x642/0xb30 [ 324.490661][ T31] ? skb_put+0x11b/0x210 [ 324.495348][ T31] netlink_sendmsg+0x805/0xb30 [ 324.500132][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.505483][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 324.510437][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 324.515933][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.521259][ T31] __sock_sendmsg+0x21c/0x270 [ 324.526326][ T31] ____sys_sendmsg+0x505/0x830 [ 324.531116][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 324.536551][ T31] ? import_iovec+0x74/0xa0 [ 324.541072][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 324.545979][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 324.551267][ T31] ? __fget_files+0x2a/0x420 [ 324.556238][ T31] ? __fget_files+0x3a0/0x420 [ 324.560941][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 324.565987][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 324.571484][ T31] ? rcu_is_watching+0x15/0xb0 [ 324.576412][ T31] ? do_syscall_64+0xbe/0x3b0 [ 324.581107][ T31] do_syscall_64+0xfa/0x3b0 [ 324.586025][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.591271][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.597555][ T31] ? clear_bhb_loop+0x60/0xb0 [ 324.602425][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.608328][ T31] RIP: 0033:0x7faa19d8eba9 [ 324.613068][ T31] RSP: 002b:00007faa1abe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.621526][ T31] RAX: ffffffffffffffda RBX: 00007faa19fd6090 RCX: 00007faa19d8eba9 [ 324.629608][ T31] RDX: 000000002000c010 RSI: 0000200000000100 RDI: 0000000000000003 [ 324.637678][ T31] RBP: 00007faa19e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 324.645985][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.654269][ T31] R13: 00007faa19fd6128 R14: 00007faa19fd6090 R15: 00007fff39d1acc8 [ 324.662410][ T31] [ 324.665504][ T31] INFO: task syz.1.654:8773 blocked for more than 144 seconds. [ 324.673464][ T31] Not tainted syzkaller #0 [ 324.678428][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 324.687254][ T31] task:syz.1.654 state:D stack:25896 pid:8773 tgid:8767 ppid:5875 task_flags:0x400140 flags:0x00004004 [ 324.699477][ T31] Call Trace: [ 324.703110][ T31] [ 324.706060][ T31] __schedule+0x1798/0x4cc0 [ 324.710589][ T31] ? __lock_acquire+0xab9/0xd20 [ 324.715599][ T31] ? __lock_acquire+0xab9/0xd20 [ 324.720469][ T31] ? __pfx___schedule+0x10/0x10 [ 324.725439][ T31] ? schedule+0x91/0x360 [ 324.729698][ T31] schedule+0x165/0x360 [ 324.734244][ T31] schedule_preempt_disabled+0x13/0x30 [ 324.739725][ T31] __mutex_lock+0x7e6/0x1350 [ 324.744442][ T31] ? __mutex_lock+0x5bb/0x1350 [ 324.749262][ T31] ? genl_rcv_msg+0x10d/0x790 [ 324.754204][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 324.759269][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 324.764884][ T31] genl_rcv_msg+0x10d/0x790 [ 324.769421][ T31] ? __lock_acquire+0xab9/0xd20 [ 324.774358][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 324.779415][ T31] netlink_rcv_skb+0x208/0x470 [ 324.784273][ T31] ? __lock_acquire+0xab9/0xd20 [ 324.789142][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 324.794582][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 324.799942][ T31] ? down_read+0x1ad/0x2e0 [ 324.804632][ T31] genl_rcv+0x28/0x40 [ 324.808638][ T31] netlink_unicast+0x82f/0x9e0 [ 324.813477][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 324.818782][ T31] ? netlink_sendmsg+0x642/0xb30 [ 324.824140][ T31] ? skb_put+0x11b/0x210 [ 324.828424][ T31] netlink_sendmsg+0x805/0xb30 [ 324.833503][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.838835][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 324.843942][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 324.849333][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.855163][ T31] __sock_sendmsg+0x21c/0x270 [ 324.859864][ T31] __sys_sendto+0x3bd/0x520 [ 324.864492][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 324.869538][ T31] ? count_memcg_event_mm+0x21/0x260 [ 324.875149][ T31] ? exc_page_fault+0x76/0xf0 [ 324.879847][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 324.885527][ T31] __x64_sys_sendto+0xde/0x100 [ 324.890311][ T31] do_syscall_64+0xfa/0x3b0 [ 324.894898][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.900125][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.906300][ T31] ? clear_bhb_loop+0x60/0xb0 [ 324.910997][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.917520][ T31] RIP: 0033:0x7f93d0d90a3c [ 324.922061][ T31] RSP: 002b:00007f93d1bc9ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 324.930501][ T31] RAX: ffffffffffffffda RBX: 00007f93d1bc9fc0 RCX: 00007f93d0d90a3c [ 324.938793][ T31] RDX: 0000000000000024 RSI: 00007f93d1bca010 RDI: 000000000000000e [ 324.947383][ T31] RBP: 0000000000000000 R08: 00007f93d1bc9f14 R09: 000000000000000c [ 324.955671][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000e [ 324.963971][ T31] R13: 00007f93d1bc9f68 R14: 00007f93d1bca010 R15: 0000000000000000 [ 324.972498][ T31] [ 324.975591][ T31] INFO: task syz.0.659:8787 blocked for more than 144 seconds. [ 324.983532][ T31] Not tainted syzkaller #0 [ 324.988485][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 324.997609][ T31] task:syz.0.659 state:D stack:24520 pid:8787 tgid:8786 ppid:5863 task_flags:0x400140 flags:0x00004004 [ 325.009882][ T31] Call Trace: [ 325.013239][ T31] [ 325.016183][ T31] __schedule+0x1798/0x4cc0 [ 325.020705][ T31] ? __lock_acquire+0xab9/0xd20 [ 325.025806][ T31] ? __lock_acquire+0xab9/0xd20 [ 325.030715][ T31] ? __pfx___schedule+0x10/0x10 [ 325.036047][ T31] ? schedule+0x91/0x360 [ 325.040348][ T31] schedule+0x165/0x360 [ 325.045243][ T31] schedule_preempt_disabled+0x13/0x30 [ 325.050736][ T31] __mutex_lock+0x7e6/0x1350 [ 325.055810][ T31] ? __mutex_lock+0x5bb/0x1350 [ 325.060637][ T31] ? genl_rcv_msg+0x10d/0x790 [ 325.066373][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 325.071436][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 325.077426][ T31] ? radix_tree_lookup+0x240/0x290 [ 325.082690][ T31] genl_rcv_msg+0x10d/0x790 [ 325.087234][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 325.092563][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 325.097625][ T31] ? __asan_memcpy+0x40/0x70 [ 325.102620][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 325.108040][ T31] netlink_rcv_skb+0x208/0x470 [ 325.112925][ T31] ? __lock_acquire+0xab9/0xd20 [ 325.117812][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 325.123025][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 325.128355][ T31] ? down_read+0x1ad/0x2e0 [ 325.133995][ T31] genl_rcv+0x28/0x40 [ 325.138027][ T31] netlink_unicast+0x82f/0x9e0 [ 325.143411][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 325.148738][ T31] ? netlink_sendmsg+0x642/0xb30 [ 325.154268][ T31] ? skb_put+0x11b/0x210 [ 325.158555][ T31] netlink_sendmsg+0x805/0xb30 [ 325.164386][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.169694][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 325.174991][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 325.180299][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.185830][ T31] __sock_sendmsg+0x21c/0x270 [ 325.190542][ T31] __sys_sendto+0x3bd/0x520 [ 325.195564][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 325.200609][ T31] ? count_memcg_event_mm+0x21/0x260 [ 325.206286][ T31] ? exc_page_fault+0x76/0xf0 [ 325.210976][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 325.216608][ T31] __x64_sys_sendto+0xde/0x100 [ 325.221400][ T31] do_syscall_64+0xfa/0x3b0 [ 325.226469][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.232362][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.238457][ T31] ? clear_bhb_loop+0x60/0xb0 [ 325.243438][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.249351][ T31] RIP: 0033:0x7f14aa790a3c [ 325.254390][ T31] RSP: 002b:00007f14ab56dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 325.263020][ T31] RAX: ffffffffffffffda RBX: 00007f14ab56dfc0 RCX: 00007f14aa790a3c [ 325.271000][ T31] RDX: 0000000000000020 RSI: 00007f14ab56e010 RDI: 0000000000000007 [ 325.279267][ T31] RBP: 0000000000000000 R08: 00007f14ab56df14 R09: 000000000000000c [ 325.287723][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 325.295894][ T31] R13: 00007f14ab56df68 R14: 00007f14ab56e010 R15: 0000000000000000 [ 325.304076][ T31] [ 325.307149][ T31] INFO: task syz.3.660:8791 blocked for more than 145 seconds. [ 325.316180][ T31] Not tainted syzkaller #0 [ 325.321128][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 325.329923][ T31] task:syz.3.660 state:D stack:26920 pid:8791 tgid:8790 ppid:5867 task_flags:0x400040 flags:0x00004004 [ 325.342311][ T31] Call Trace: [ 325.345609][ T31] [ 325.348553][ T31] __schedule+0x1798/0x4cc0 [ 325.353282][ T31] ? __lock_acquire+0xab9/0xd20 [ 325.358185][ T31] ? __lock_acquire+0xab9/0xd20 [ 325.363149][ T31] ? __pfx___schedule+0x10/0x10 [ 325.368047][ T31] ? schedule+0x91/0x360 [ 325.372644][ T31] schedule+0x165/0x360 [ 325.376821][ T31] schedule_preempt_disabled+0x13/0x30 [ 325.382451][ T31] __mutex_lock+0x7e6/0x1350 [ 325.387064][ T31] ? __mutex_lock+0x5bb/0x1350 [ 325.392459][ T31] ? genl_rcv_msg+0x10d/0x790 [ 325.397271][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 325.402812][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 325.407970][ T31] ? radix_tree_lookup+0x240/0x290 [ 325.413398][ T31] genl_rcv_msg+0x10d/0x790 [ 325.417937][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 325.423403][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 325.428452][ T31] ? __asan_memcpy+0x40/0x70 [ 325.433560][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 325.438960][ T31] netlink_rcv_skb+0x208/0x470 [ 325.444014][ T31] ? __lock_acquire+0xab9/0xd20 [ 325.448888][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 325.454199][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 325.459517][ T31] ? down_read+0x1ad/0x2e0 [ 325.464555][ T31] genl_rcv+0x28/0x40 [ 325.468561][ T31] netlink_unicast+0x82f/0x9e0 [ 325.473659][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 325.479026][ T31] ? netlink_sendmsg+0x642/0xb30 [ 325.484210][ T31] ? skb_put+0x11b/0x210 [ 325.488475][ T31] netlink_sendmsg+0x805/0xb30 [ 325.493804][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.499121][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 325.504417][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 325.509727][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.515416][ T31] __sock_sendmsg+0x21c/0x270 [ 325.520113][ T31] __sys_sendto+0x3bd/0x520 [ 325.525251][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 325.530297][ T31] ? count_memcg_event_mm+0x21/0x260 [ 325.536120][ T31] ? exc_page_fault+0x76/0xf0 [ 325.540830][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 325.546535][ T31] __x64_sys_sendto+0xde/0x100 [ 325.551324][ T31] do_syscall_64+0xfa/0x3b0 [ 325.556600][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.562151][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.568244][ T31] ? clear_bhb_loop+0x60/0xb0 [ 325.573394][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.579299][ T31] RIP: 0033:0x7f06c0790a3c [ 325.584342][ T31] RSP: 002b:00007f06c162fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 325.593042][ T31] RAX: ffffffffffffffda RBX: 00007f06c162ffc0 RCX: 00007f06c0790a3c [ 325.601025][ T31] RDX: 000000000000001c RSI: 00007f06c1630010 RDI: 0000000000000004 [ 325.609470][ T31] RBP: 0000000000000000 R08: 00007f06c162ff14 R09: 000000000000000c [ 325.617757][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 325.625863][ T31] R13: 00007f06c162ff68 R14: 00007f06c1630010 R15: 0000000000000000 [ 325.634086][ T31] [ 325.637180][ T31] [ 325.637180][ T31] Showing all locks held in the system: [ 325.645354][ T31] 1 lock held by khungtaskd/31: [ 325.650218][ T31] #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 325.660271][ T31] 1 lock held by syslogd/5215: [ 325.665122][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 325.675473][ T31] 2 locks held by getty/5627: [ 325.680165][ T31] #0: ffff88802fbf20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 325.690106][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 325.700275][ T31] 1 lock held by udevd/5873: [ 325.705158][ T31] #0: ffff8881437a9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 325.714664][ T31] 2 locks held by syz.2.651/8762: [ 325.719710][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 325.727997][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 325.737226][ T31] 6 locks held by syz.4.652/8755: [ 325.742338][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 325.750588][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 325.759852][ T31] #2: ffff888024dc3230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870 [ 325.770624][ T31] #3: ffff888143766928 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 325.780389][ T31] #4: ffff8881437662c8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 325.793927][ T31] #5: ffff888143766300 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 325.806506][ T31] 2 locks held by syz.4.652/8760: [ 325.811544][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 325.820196][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 325.829464][ T31] 2 locks held by syz.1.654/8773: [ 325.835636][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 325.844255][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 325.853819][ T31] 2 locks held by syz.0.659/8787: [ 325.858856][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 325.867274][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 325.876400][ T31] 2 locks held by syz.3.660/8791: [ 325.881434][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 325.890021][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 325.899056][ T31] 2 locks held by syz-executor/8799: [ 325.904507][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 325.913174][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 325.922238][ T31] 2 locks held by syz-executor/8801: [ 325.927537][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 325.935892][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 325.945351][ T31] 2 locks held by syz-executor/8813: [ 325.950659][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 325.959282][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 325.968367][ T31] 2 locks held by syz-executor/8817: [ 325.974258][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 325.982583][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 325.991575][ T31] 2 locks held by syz-executor/8819: [ 325.996927][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 326.005500][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 326.014609][ T31] 2 locks held by syz-executor/8849: [ 326.019905][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 326.028277][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 326.038090][ T31] 2 locks held by syz-executor/8851: [ 326.043467][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 326.051820][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 326.060838][ T31] 2 locks held by syz-executor/8868: [ 326.066440][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 326.074795][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 326.084082][ T31] 2 locks held by syz-executor/8870: [ 326.089376][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 326.097886][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 326.106954][ T31] 2 locks held by syz-executor/8872: [ 326.112551][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 326.120768][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 326.130090][ T31] 2 locks held by syz-executor/8897: [ 326.135568][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 326.143857][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 326.153203][ T31] 2 locks held by syz-executor/8899: [ 326.158498][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 326.166822][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 326.175872][ T31] 2 locks held by syz-executor/8916: [ 326.181155][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 326.189650][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 326.198993][ T31] 2 locks held by syz-executor/8919: [ 326.204454][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 326.212969][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 326.222072][ T31] 2 locks held by syz-executor/8923: [ 326.227370][ T31] #0: ffffffff8f59ed50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 326.235712][ T31] #1: ffffffff8f59eb68 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 326.245206][ T31] [ 326.247555][ T31] ============================================= [ 326.247555][ T31] [ 326.256079][ T31] NMI backtrace for cpu 0 [ 326.256093][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 326.256111][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 326.256121][ T31] Call Trace: [ 326.256128][ T31] [ 326.256135][ T31] dump_stack_lvl+0x189/0x250 [ 326.256162][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.256184][ T31] ? __pfx__printk+0x10/0x10 [ 326.256220][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 326.256249][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 326.256277][ T31] ? __pfx__printk+0x10/0x10 [ 326.256306][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 326.256336][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 326.256364][ T31] watchdog+0xf93/0xfe0 [ 326.256395][ T31] ? watchdog+0x1de/0xfe0 [ 326.256425][ T31] kthread+0x70e/0x8a0 [ 326.256451][ T31] ? __pfx_watchdog+0x10/0x10 [ 326.256475][ T31] ? __pfx_kthread+0x10/0x10 [ 326.256498][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 326.256515][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.256532][ T31] ? __pfx_kthread+0x10/0x10 [ 326.256555][ T31] ret_from_fork+0x3fc/0x770 [ 326.256576][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 326.256599][ T31] ? __switch_to_asm+0x39/0x70 [ 326.256620][ T31] ? __switch_to_asm+0x33/0x70 [ 326.256641][ T31] ? __pfx_kthread+0x10/0x10 [ 326.256663][ T31] ret_from_fork_asm+0x1a/0x30 [ 326.256700][ T31] [ 326.256706][ T31] Sending NMI from CPU 0 to CPUs 1: [ 326.403675][ C1] NMI backtrace for cpu 1 [ 326.403690][ C1] CPU: 1 UID: 0 PID: 1014 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 326.403706][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 326.403716][ C1] Workqueue: bat_events batadv_nc_worker [ 326.403752][ C1] RIP: 0010:__lock_acquire+0x50c/0xd20 [ 326.403776][ C1] Code: 49 83 c7 28 41 89 c4 48 39 cb 0f 8d d6 00 00 00 48 83 fb 31 0f 83 92 00 00 00 41 8b 07 25 ff 1f 00 00 48 0f a3 05 64 1d 0b 12 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 10 83 49 93 eb 40 83 3d cb ac [ 326.403789][ C1] RSP: 0018:ffffc90003b378f0 EFLAGS: 00000003 [ 326.403801][ C1] RAX: 0000000000000770 RBX: 0000000000000000 RCX: 00000000ffffffff [ 326.403811][ C1] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff888025ba0000 [ 326.403820][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8b481f02 [ 326.403829][ C1] R10: dffffc0000000000 R11: ffffffff8b481e30 R12: ffffffffffffff05 [ 326.403840][ C1] R13: 0000000000000001 R14: ffff888025ba0b40 R15: ffff888025ba0b10 [ 326.403851][ C1] FS: 0000000000000000(0000) GS:ffff888125d14000(0000) knlGS:0000000000000000 [ 326.403863][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 326.403873][ C1] CR2: 000055fb179af000 CR3: 000000000df36000 CR4: 00000000003526f0 [ 326.403885][ C1] Call Trace: [ 326.403891][ C1] [ 326.403901][ C1] ? batadv_nc_worker+0xd2/0x610 [ 326.403922][ C1] lock_acquire+0x120/0x360 [ 326.403942][ C1] ? batadv_nc_worker+0xd2/0x610 [ 326.403966][ C1] ? batadv_nc_worker+0xd2/0x610 [ 326.403987][ C1] ? batadv_nc_worker+0xd2/0x610 [ 326.404009][ C1] batadv_nc_worker+0xef/0x610 [ 326.404030][ C1] ? batadv_nc_worker+0xd2/0x610 [ 326.404052][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 326.404067][ C1] process_scheduled_works+0xae1/0x17b0 [ 326.404092][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 326.404112][ C1] worker_thread+0x8a0/0xda0 [ 326.404136][ C1] kthread+0x70e/0x8a0 [ 326.404155][ C1] ? __pfx_worker_thread+0x10/0x10 [ 326.404169][ C1] ? __pfx_kthread+0x10/0x10 [ 326.404187][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 326.404201][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.404215][ C1] ? __pfx_kthread+0x10/0x10 [ 326.404233][ C1] ret_from_fork+0x3fc/0x770 [ 326.404248][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 326.404264][ C1] ? __switch_to_asm+0x39/0x70 [ 326.404283][ C1] ? __switch_to_asm+0x33/0x70 [ 326.404301][ C1] ? __pfx_kthread+0x10/0x10 [ 326.404319][ C1] ret_from_fork_asm+0x1a/0x30 [ 326.404344][ C1] [ 326.405037][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 326.657382][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 326.666488][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 326.676549][ T31] Call Trace: [ 326.679837][ T31] [ 326.682778][ T31] dump_stack_lvl+0x99/0x250 [ 326.687375][ T31] ? __asan_memcpy+0x40/0x70 [ 326.691968][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.697178][ T31] ? __pfx__printk+0x10/0x10 [ 326.701800][ T31] vpanic+0x281/0x750 [ 326.705803][ T31] ? __pfx_vpanic+0x10/0x10 [ 326.710312][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 326.715862][ T31] ? preempt_schedule+0xae/0xc0 [ 326.720716][ T31] ? preempt_schedule_common+0x83/0xd0 [ 326.726175][ T31] panic+0xb9/0xc0 [ 326.729899][ T31] ? __pfx_panic+0x10/0x10 [ 326.734322][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 326.739698][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 326.745870][ T31] watchdog+0xfd2/0xfe0 [ 326.750029][ T31] ? watchdog+0x1de/0xfe0 [ 326.754370][ T31] kthread+0x70e/0x8a0 [ 326.758446][ T31] ? __pfx_watchdog+0x10/0x10 [ 326.763123][ T31] ? __pfx_kthread+0x10/0x10 [ 326.767714][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 326.772904][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.778094][ T31] ? __pfx_kthread+0x10/0x10 [ 326.782686][ T31] ret_from_fork+0x3fc/0x770 [ 326.787282][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 326.792391][ T31] ? __switch_to_asm+0x39/0x70 [ 326.797153][ T31] ? __switch_to_asm+0x33/0x70 [ 326.801921][ T31] ? __pfx_kthread+0x10/0x10 [ 326.806862][ T31] ret_from_fork_asm+0x1a/0x30 [ 326.811656][ T31] [ 326.815062][ T31] Kernel Offset: disabled [ 326.819390][ T31] Rebooting in 86400 seconds..