last executing test programs: 18.242992317s ago: executing program 0 (id=4395): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) poll(&(0x7f0000000040)=[{}], 0x1, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000300)="a0", 0x1, 0x0, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x2}, 0x10) listen(r2, 0x21) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000240)=0x8) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000240)=0x8) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=ANY=[], 0x104}}, 0x4000816) 18.229197781s ago: executing program 4 (id=4397): r0 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x10, 0x9}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x800, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x3114}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}]}, 0x40}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="8750a754ac0000007c0012800b000100697036746e6c00106c000280140002000000000000000000000000000000000114000200fe8000000000000000000000000000aa14000300fe8000000000000000000000000000bb08bc550973263549", @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 18.081982609s ago: executing program 4 (id=4400): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000a00)=0x4, 0x4) (async) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000300)=@can, 0x80, 0x0}, 0x20040000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000380000007000000030000ca75ffffff00000000000000002e"], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x28) (async) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x9}, 0x1c) (async) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000040), 0x4) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 17.950743496s ago: executing program 4 (id=4402): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) sendto$unix(r0, &(0x7f0000000640)="00a8", 0x2, 0xd1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f00000003c0)={'ah\x00'}, &(0x7f0000000400)=0x1e) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f00000003c0)={'ah\x00'}, &(0x7f0000000400)=0x1e) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1cc, 0x1cc, 0x7, [@enum={0xd, 0x4, 0x0, 0x6, 0x4, [{0x7, 0x6}, {0x2, 0x101}, {0xe, 0x5}, {0x4, 0xa7dc}]}, @func={0x4, 0x0, 0x0, 0xc, 0x3}, @datasec={0x7, 0x9, 0x0, 0xf, 0x1, [{0x5, 0x0, 0x401}, {0x3, 0x9, 0x80}, {0x2, 0x1, 0x401}, {0x3, 0x81, 0x7f}, {0x5, 0x8, 0xb100}, {0x4, 0x9}, {0x1, 0x3}, {0x1, 0x8, 0x1}, {0x3, 0x9, 0x8}], "b5"}, @var={0x6, 0x0, 0x0, 0xe, 0x3, 0x2}, @struct={0xa, 0x1, 0x0, 0x4, 0x0, 0x3c, [{0xe, 0x0, 0xfffff390}]}, @restrict={0xd, 0x0, 0x0, 0xb, 0x5}, @union={0xb, 0x6, 0x0, 0x5, 0x0, 0x200, [{0xa, 0x0, 0xa}, {0xc, 0x5, 0x8}, {0x8, 0x0, 0x81}, {0xd, 0x3, 0xbe}, {0x3, 0x3, 0x5}, {0x6, 0x4, 0xf1b2}]}, @ptr={0x2, 0x0, 0x0, 0x2, 0x3}, @datasec={0x2, 0xa, 0x0, 0xf, 0x3, [{0x4, 0x100}, {0x5, 0x7, 0x2}, {0x3, 0xd}, {0x4, 0x5}, {0x1, 0x9, 0x7}, {0x5, 0x5, 0xffff}, {0x2, 0x20, 0x529ba9eb}, {0x4, 0x7, 0x200}, {0x3, 0x89ce, 0x9}, {0x1, 0x7, 0x4}], "800b25"}]}, {0x0, [0x2e, 0x30, 0x0, 0x0, 0x30]}}, &(0x7f00000002c0)=""/186, 0x1eb, 0xba, 0x1, 0x1}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r3, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], 0x0, 0x50, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x9c, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x900, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r7}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x20, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000200)='GPL\x00', 0x18, 0x2e, &(0x7f0000000240)=""/46, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x16, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x5, &(0x7f0000000940)=[r7, 0x1, 0x1], &(0x7f0000000980)=[{0x1, 0x1, 0x8, 0xc}, {0x1, 0x4, 0x4, 0x1}, {0x0, 0x1, 0xd, 0x9}, {0x5, 0x3, 0x1, 0x7}, {0x1, 0x5, 0xe, 0x5}], 0x10, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x20, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000200)='GPL\x00', 0x18, 0x2e, &(0x7f0000000240)=""/46, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x16, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x5, &(0x7f0000000940)=[r7, 0x1, 0x1], &(0x7f0000000980)=[{0x1, 0x1, 0x8, 0xc}, {0x1, 0x4, 0x4, 0x1}, {0x0, 0x1, 0xd, 0x9}, {0x5, 0x3, 0x1, 0x7}, {0x1, 0x5, 0xe, 0x5}], 0x10, 0x8}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2300, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, r8, 0xb97534d5fe9704cf, 0x70bd2c, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40084}, 0x2009c058) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r8, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x10) recvfrom$unix(r1, 0x0, 0x0, 0x10102, 0x0, 0x0) 17.358502043s ago: executing program 0 (id=4411): r0 = socket$xdp(0x2c, 0x3, 0x0) unshare(0x22020400) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000280), 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x7ff, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4}, 0x50) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x16, 0x17, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x7, 0x0, 0xd, 0x2, 0x5, 0x20, 0xfffffffffffffff7}, @call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_idx_val={0x18, 0xc, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, r5}, 0x94) 17.184555322s ago: executing program 0 (id=4415): r0 = socket(0x10, 0x803, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) 17.039606088s ago: executing program 4 (id=4417): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) openat$tun(0xffffffffffffff9c, 0x0, 0x100200, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r4, 0x89e1, 0x0) bind$rose(r4, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @bcast}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004000000", 0x28}, {&(0x7f0000000600)="9689ce1fff0f0297b07eef86b521b75595", 0x11}], 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x0) 16.873490887s ago: executing program 1 (id=4421): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x555b9eb7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) accept$ax25(r0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x555b9eb7}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) accept$ax25(r0, 0x0, 0x0) (async) 16.774298584s ago: executing program 3 (id=4423): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f00000001c0)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a40)={'vlan0\x00', &(0x7f0000000a80)=@ethtool_cmd={0x17}}) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x7fff, 0x4, 0x8, 0x6, 0x0, 0x0, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000040)={0x1, [0x0]}) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req3={0xffff, 0x7fff, 0x0, 0x81, 0x8, 0xd40}, 0x1c) mmap(&(0x7f00001c2000/0x8000)=nil, 0x8000, 0x1000004, 0x13, r1, 0xc252d000) 16.748540446s ago: executing program 0 (id=4424): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x80002, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x19, 0x4, 0x8, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040)=0x5ff0, 0x4) writev(r0, &(0x7f0000000280)=[{&(0x7f0000002040)="18a418e4181d8f36b2d931688c", 0xd}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 16.722832785s ago: executing program 1 (id=4425): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000400)=0x140, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x18400, 0x0) 16.618398273s ago: executing program 1 (id=4427): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 16.608604939s ago: executing program 0 (id=4428): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@deltaction={0xac, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_INDEX}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x56, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0xac}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000072009fb300000000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="050001"], 0x20}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x184, 0x30, 0xb, 0x0, 0x25dfdbfc, {}, [{0x170, 0x1, [@m_connmark={0x16c, 0x13, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x101, 0x8, 0x6, 0xd6a, 0x2}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x6, 0x51dc, 0x9}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x401, 0x1, 0xbe72, 0x2}, 0x9}}]}, {0xe6, 0x6, "d07a6740aefb428d0195c7dc7415d2e9cd70bbbbbd2197456ad8ada1d9509567082307d807b8d9c11ef8e996b1cb90b948a578fda40d31c782a37e878df49d7c3240fe189d09574cbd42b035bdd39a6ccc94b703dfd794a95c735ba345a0ed4e9ffa833c8ba4937703000000552e3ab3003ac25847e5659601b4b0b463717893e3e553f300900bd41c147118bee842e82c6b129106eb9634720bc0919818695a6c69ce073cbe71337ce73ea92a84142cfa974ea2b9cfec7370306d17f821f52b57a6c1892cd64ff4b0f6af3406e9be460eea30c07ec5bd22d53038d4d938b5e345c0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x184}}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffefa, &(0x7f0000001240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="84010000190001004d00108025ad7e35619bf20cb7f2934efacde0a223b473fe77f3e5ba76fb70fa1f414813a2a20005006f88d6e1db9b2b0000000000000000000000001e010080dd000000fe88000000000000000000000000000137c14f9a8ead341bf43ea3970236c74b2e318966b7420623d7f5c9fde55324d4c519e80f9f4d6b22b3f1b672c61240c38914eb560eb9ca62fa5800"/164], 0x184}}, 0x0) 16.555619898s ago: executing program 3 (id=4429): syz_emit_ethernet(0x11e, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)='%pI4 \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f00000001c0)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) 16.55343652s ago: executing program 4 (id=4430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x2005, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x20, 0x1, 0x3, 0x801, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x40, 0x107, 0x70bd28, 0x0, {0x1e, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002500)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="c000b2000a0002000000000000000000060005002e5f"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=@getsadinfo={0x44, 0x23, 0x8, 0x70bd27, 0x25dfdbff, 0x0, [@policy_type={0xa}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e23, 0x4e22, @in6=@private0}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x4000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000001010102000000040000000000000000"], 0x14}}, 0x0) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000fdffffff3b00000008000300", @ANYRES32=r11, @ANYBLOB="2e003300201008000802110000000802110000005050505050501aff200002000802110000000006010101010101000001002600a4150000"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x1000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20008084) sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010011}, 0x880) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048000}, 0x40c4) 16.473115339s ago: executing program 1 (id=4432): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0xb, &(0x7f0000000000)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @exit], &(0x7f0000000080)='syzkaller\x00', 0x611, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x7, 0x6, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000280)=[{0x2, 0x2, 0xc, 0x8}, {0x3, 0x1, 0x3, 0x1}], 0x10, 0xfff}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map, 0xb, 0x0, 0x74, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @remote, @dev}, &(0x7f0000000580)=0xc) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x0, @val=@tracing={0xffffffffffffffff, 0xffffffffffffffc0}}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@ifindex=r3, r1, 0xd, 0x2000, 0x0, @value=r4, @void, @void, @void, r2}, 0x20) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x1832b, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0xfffffffffffffffc) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711233000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6(0xa, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0xb, &(0x7f0000000000)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @exit], &(0x7f0000000080)='syzkaller\x00', 0x611, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x7, 0x6, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000280)=[{0x2, 0x2, 0xc, 0x8}, {0x3, 0x1, 0x3, 0x1}], 0x10, 0xfff}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map, 0xb, 0x0, 0x74, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @remote, @dev}, &(0x7f0000000580)=0xc) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x0, @val=@tracing={0xffffffffffffffff, 0xffffffffffffffc0}}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@ifindex=r3, r1, 0xd, 0x2000, 0x0, @value=r4, @void, @void, @void, r2}, 0x20) (async) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x1832b, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendto$inet6(r5, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0xfffffffffffffffc) (async) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711233000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 16.299093826s ago: executing program 3 (id=4433): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000340)=0x7e, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x1010, r0, 0x0) socket(0x40000000015, 0x5, 0x0) 16.28227663s ago: executing program 0 (id=4435): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r3], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r6, 0x325, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10014}, 0x4008008) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x64}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r6, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x8044) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={r0, 0x5, 0x1, 0x8000000000000000}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={r0, 0x5, 0x1, 0x8000000000000000}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x52cc, 0x9, 0x1, 0x24110, 0xffffffffffffffff, 0x0, '\x00', r7, r8, 0x2, 0x0, 0x2, 0x9}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x52cc, 0x9, 0x1, 0x24110, 0xffffffffffffffff, 0x0, '\x00', r7, r8, 0x2, 0x0, 0x2, 0x9}, 0x50) 16.253141859s ago: executing program 1 (id=4436): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) recvfrom$unix(r2, 0x0, 0x0, 0x2002, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="dc4a490c4dd47611b86f00f79d66773f00000000000000280012800b0001006272696467650000180002800c002e0003000000030000000500070008000000"], 0x48}}, 0x0) 16.158440148s ago: executing program 4 (id=4438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 16.149629268s ago: executing program 1 (id=4439): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffa}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x350}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40045) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000140)={0x796, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x1412, 0x104, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) (async) r1 = accept4$ax25(r0, &(0x7f0000000380)={{0x3, @null}, [@netrom, @default, @remote, @netrom, @netrom, @null, @null, @default]}, &(0x7f0000000400)=0x48, 0x800) r2 = socket$netlink(0x10, 0x3, 0xb) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000480)={'gretap0\x00', r3, 0x8, 0x7881, 0x5, 0x2, {{0x14, 0x4, 0x1, 0x1, 0x50, 0x68, 0x0, 0xff, 0x2f, 0x0, @multicast2, @broadcast, {[@timestamp_addr={0x44, 0x3c, 0x93, 0x1, 0x7, [{@local, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x152df67c}, {@multicast2, 0xfb01}, {@empty}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@private=0xa010100, 0x10}, {@multicast1}]}]}}}}}) (async) getpeername$inet(r0, &(0x7f0000000540), &(0x7f0000000580)=0x10) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@deltaction={0x78, 0x31, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x1) (async, rerun: 32) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000700)={'syz_tun\x00'}) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000780)={'caif0\x00', @ifru_data=&(0x7f0000000740)="32e9d849865aa38fecf59308f2419365e02963517cb6e588c0dbde14bbd6c4bc"}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000007c0)={0x7, 'ipvlan0\x00', {0x7fffffff}, 0xfc00}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000900)={'erspan0\x00', &(0x7f0000000800)={'ip_vti0\x00', r4, 0x700, 0x8, 0x5, 0xfe4, {{0x35, 0x4, 0x2, 0x16, 0xd4, 0x66, 0x0, 0x3a, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@end, @ssrr={0x89, 0x2b, 0x10, [@local, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2, @local, @private=0xa010100]}, @timestamp_addr={0x44, 0x2c, 0x71, 0x1, 0x9, [{@local, 0x9}, {@loopback, 0x5}, {@multicast2, 0x5}, {@remote, 0x7}, {@remote, 0x80}]}, @generic={0x86, 0x3, 'J'}, @noop, @timestamp_prespec={0x44, 0x34, 0xef, 0x3, 0x2, [{@private=0xa010101, 0x1}, {@private=0xa010102, 0x5}, {@empty, 0x9}, {@rand_addr=0x64010100, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x9}, {@rand_addr=0x64010101, 0x3}]}, @noop, @generic={0x83, 0x6, "5dfcc3b8"}, @lsrr={0x83, 0x23, 0xfd, [@empty, @dev={0xac, 0x14, 0x14, 0x27}, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @broadcast, @remote, @multicast2, @broadcast]}, @ra={0x94, 0x4}]}}}}}) (rerun: 32) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000940), &(0x7f0000000980)=0x30) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) (rerun: 32) sendmsg$NL80211_CMD_LEAVE_MESH(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r8, 0xf651540f55ddad3b, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL80211_CMD_SET_MCAST_RATE(r9, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x28102100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, r8, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40008d1) ioctl$sock_netdev_private(r1, 0x89fd, &(0x7f0000000c00)="1ac304b7032fb845c61d6529cc352a90998aaf12d107c12c02b99d237ff2ecc70368db63da9e71dc38b03a60cc961321b57ddcc583a2cc3cd3c245250efa87032f3728a146e6a16f83b048baac4aa381c1a370d0184d78c813b05a507edcfb05c38291330e6b521882cd62fa82cc84aaed03161ee6d8b48187681646314ae4d2fe10da711904e99bf9385a5a0bcb8a08833484b4f53dcc4603ce204b7deed7") (async) sendmsg$nl_route(r2, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)=@ipv6_getmulticast={0x14, 0x3a, 0x20, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40801}, 0x8000) (async) ioctl$sock_netdev_private(r9, 0x89f1, &(0x7f0000000dc0)="eea4397c14fcf882962cc9866e06038bb78a1a20a7c1676d89baa5223561ad410062191d3f292572cf34561799e638b67fdeb22713f5ff400130f6dea26fe55dcc0e29bfcbc1145a4eb4f1fed7cb996100580c646bd69072e58b051fbdb169fb50399906b94d44fcdbc15410077dec1a0af3308f0a7bbde90a87ea2a9ddefd306a6052719b75be2b3090c10460684b6ede1ea75f1207763d060b7e2e0e958257ac4d80ecb182197c90f363a6bfaf17aa4eccb9d79f4d975524c741cc59addad73257918439a94ddd2132773ef57da4dab6beb4b06efb4b9deb06cff682") (async) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r10, &(0x7f0000000ec0)="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", 0xfb, 0x40014, &(0x7f0000000fc0)={0x23, 0x58, 0x6, 0xe}, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, r12, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4809}, 0xc8d1) 16.136712521s ago: executing program 3 (id=4440): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x3ffff, 0x0, 0xffffffffffffffff, 0x1f, '\x00', r1, 0xffffffffffffffff, 0xfffffffd, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc89000000000000b5090100000000009500000000000000b509000002000000639af0ff000000008709000000000000c39af0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000000000000b70000050000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.037453604s ago: executing program 3 (id=4442): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2ccf3766}, 0x48) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xd7, '\x00', @remote}}}}}}, 0x0) 15.999115224s ago: executing program 3 (id=4444): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f0000000000)="c8bed3a9e75cf5185ddfb2db63ff709f3a0903b0bcc47352f4cba079a0aebf098cbf3cb5b1a03334237ada688886c05430cd2bda3b5f8b21fb73d5adfc7a71439e2d0b7ad7e084387a0f94b2de539aec2b85afb86daa31b5a81399ee5cbe6a1802dd7af2391bc3aee25a1b219bfe82964928604eb3f6e65ea894ac8bac835989cbd9e2a4c62da0a2c586dabfae7097de432187838574713a00325fab6fafa56b2dd48b4985e47bf13d4365ff308d244ad0690b2cace7fdec71ac0d1e387280f074") ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)=@buf={0xac, &(0x7f0000000100)="25234c3ffff376ee96a707098a13f8ef82e6e23a51438ef219c23ed90bddf6141f64d071aaf5e243cd831ee4552c745a6adfea5978c8c91c741f369fe2d29f8a47fd2f0aa5ba3cb5041a88399c1da90a4f6c6a9142eff7a41ff44e43cd2145585aec8002800fcfa7709442a0a3a54b2d2a10ee36ed451e6416a4e74ac56986e2ffec57e5d327ffe38bddffbbbc8e4193c17b6a4cc41bf9a7816e022c3e7618c2357d2326d9d84917560d33f3"}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffff192, '\x00', 0x0, r0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x80, 0x20, 0x1, 0x3ff, {{0x8, 0x4, 0x1, 0x2, 0x20, 0x66, 0x0, 0x4, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xb, 0x47, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000300)={r0, 0x4, 0x5, 0x200}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x32, 0x81, 0xf, 0x120c0, r1, 0x9, '\x00', r2, r3, 0x0, 0x4, 0x2, 0x6}, 0x50) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x101100, 0x4) sendmsg$AUDIT_TTY_SET(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x3f9, 0x100, 0x70bd28, 0x25dfdbfc, {0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x8}, 0x200400c0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000005c0)={@rc={0x1f, @any, 0x6}, {&(0x7f0000000540)=""/30, 0x1e}, &(0x7f0000000580), 0x30}, 0xa0) sendmsg$NFT_BATCH(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_DELFLOWTABLE={0xa0, 0x18, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x74, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}]}]}], {0x14}}, 0xe8}, 0x1, 0x0, 0x0, 0x40011}, 0x48848) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000840)={@multicast2, @loopback}, &(0x7f0000000880)=0xc) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000008c0), &(0x7f0000000900)=0x8) syz_emit_ethernet(0x1a0, &(0x7f0000000940)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x3c, 0x4, 0x0, 0x12, 0x192, 0x64, 0x0, 0x7d, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x34, 0xdb, 0x3, 0x6, [{@rand_addr=0x64010102, 0xfffffffe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@empty, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x2}]}, @cipso={0x86, 0x3a, 0x3, [{0x7, 0x10, "68913ed6e2aad8b5cf629a8aa1f0"}, {0x1, 0x11, "8c3617742896e629ca337d8dd857b3"}, {0x5, 0xe, "1036719d044933d40ab0da5f"}, {0x1, 0x5, "a67100"}]}, @timestamp_addr={0x44, 0x54, 0x81, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x7c5c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff0}, {@rand_addr=0x64010100, 0x4}, {@loopback, 0xc0}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x5}, {@broadcast, 0x5}, {@broadcast}, {@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@private=0xa010102}]}, @timestamp={0x44, 0x18, 0xb9, 0x0, 0x5, [0x9, 0x6, 0x8, 0x8, 0x5]}, @noop]}}, "6cb01e307f4176972fdd5eadfa4222d01ce67bebb1c3a33993b1be28b77764a8f07fb3b6d42826cb5dad6be5acdc8f481f86b0df9d785ebe535b925e668969809d2d0b26e5eeff02e6d749c377e4a609d5d26a6cd909b08fe78a1ef51d89995eb6119235f2e2d7524c63f649138cc07178ae1f9254dcb4570c339caf442815c8ba57297764f46005e366891b5a19c55862acfa111fcab6b89f9f870975fb06930317"}}}}, &(0x7f0000000b00)={0x1, 0x1, [0xdfb, 0x57d, 0x7c3, 0x421]}) recvmmsg(r0, &(0x7f0000001000)=[{{&(0x7f0000000b40)=@qipcrtr, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000bc0)=""/54, 0x36}, {&(0x7f0000000c00)=""/166, 0xa6}, {&(0x7f0000000cc0)=""/226, 0xe2}, {&(0x7f0000000dc0)=""/189, 0xbd}, {&(0x7f0000000e80)=""/7, 0x7}], 0x5, &(0x7f0000000f40)=""/180, 0xb4}, 0x3}], 0x1, 0x2041, &(0x7f0000001040)={0x0, 0x3938700}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001080)={'batadv0\x00', 0x0}) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f00000010c0)=0x1, 0x4) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000001100)=0x6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r3) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000001180)=[{{0x0, 0x1, 0x0, 0x1}, {0x2, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x2, 0x1}}, {{0x4, 0x1, 0x1}, {0x4, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x2, 0x0, 0x1}}], 0x28) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000011c0)) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001300)=@filter={'filter\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, &(0x7f00000012c0), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x6, 0x0, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x1, 0x10, 0xb, 0xfffa, @dev={0xfe, 0x80, '\x00', 0x3b}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0x807fffff, 0x0, 0xff, 0xff], [0x7fffff00, 0xff7fff00, 0xffffffff, 0xffffffff], 0x1000, 0x3974}}, @common=@dst={{0x48}, {0x9, 0x3, 0x0, [0xa, 0x4, 0xfd, 0x6, 0x0, 0x5, 0x7, 0x3, 0x8, 0x3ff, 0x3, 0x1, 0x8001, 0x7ff, 0x7, 0x4], 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x12}, @ipv4={'\x00', '\xff\xff', @multicast2}, [0x0, 0xffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 'tunl0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0xff, 0x0, 0x3, 0x48}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001800), r3) getsockname$packet(r3, &(0x7f0000001840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001880)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000001980)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x4c, r7, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x4c}}, 0x14) sendmmsg$sock(r5, &(0x7f0000001e00)=[{{&(0x7f00000019c0)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e22, 0x1}}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001a40)="7e09724b8b8ed1138743854c580d56f03b01bc9798af8b63b2d3165f56f77d9588eaac90e9c4380819a590ac960593109f62d7eb36c9e500da2981d08bdb266b087423e06a64da44359af775e7a8eb16e81eadb86a5990ca", 0x58}, {&(0x7f0000001ac0)="a20a8bb6c71007417012b0db7f40a43cc5cfa5032d9e2dab87493c981149b0ffec81ac123dfedcb84bc7f2b3080d6084badb555013b890436c890366c4266f3915513abd7393b092e8da7c5d0dbbe501e98d580d7c5eba1c5be52caed083a80ca3743f10059eeb06d8dff80a7af4a01ef224be7a5de7ee206a091d5ccaa9c31e9523e2140c8de2707ea7", 0x8a}, {&(0x7f0000001b80)="e80c7461cfb1e4155e2fc4ca984bcefcd688b96f2d997a03ef1b137c7b8d383864613299404dbfbb801e41ca1659413524aecc79609996744a02e6f4e87306fb4e5a70f5897a2442664d87421b0fd01fa6c24c47568e1616cc589377f14c685f21a89ae3fd40e787f98a062c2aafb9f1853422bd0e67640ceead3dfa119cd3b83311312c61b4850c5a8a667a98e43b1676c20c0b5ca0cec74355bf11482cd7b6bedc56d6ee6bf13d4e3545dc43f4eafd23f1245c2f0a69f383fd99643586", 0xbe}, {&(0x7f0000001c40)="510c3979490a3cafdff4aa41b83db2e92ccccb51027feb1f65d774c6c307d7a430163cc393e4cf213200b48935b7c363ad1cea19ff6405773101eb004a3414175681b2de6daab88bc5c7a260dc0804ca99a801812a67e03107ea8cb23e1bf05f5cbd6a4eb83e468f78bda9739a722324229a7ce9ebc92e79dfaeaacd76ace09d314217c62dcb13a9633af64b145fbe8e9c4d91", 0x93}], 0x4, &(0x7f0000001d40)=[@mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x90}}], 0x1, 0x8000) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0xabab19d5e4f8fccb, &(0x7f0000001e40)=""/133, &(0x7f0000001f00)=0x85) 15.690537495s ago: executing program 2 (id=4446): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in=@remote}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x17}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0) 15.621775434s ago: executing program 2 (id=4447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000080)=0x1) 15.501152351s ago: executing program 2 (id=4448): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f00000001c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) socket$inet_mptcp(0x2, 0x1, 0x106) (async) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f00000001c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) (async) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async) 15.427552363s ago: executing program 2 (id=4449): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) close(r5) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r3, 0x0, 0x1100000000f336, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x750, 0x450, 0x450, 0x0, 0x290, 0x360, 0x680, 0x680, 0x680, 0x680, 0x680, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x300}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) (async) pipe(&(0x7f0000000600)) (async) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) pipe(&(0x7f0000000500)) (async) splice(r4, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) (async) close(r5) (async) close(r3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) splice(r1, 0x0, r3, 0x0, 0x1100000000f336, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x750, 0x450, 0x450, 0x0, 0x290, 0x360, 0x680, 0x680, 0x680, 0x680, 0x680, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x300}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b0) (async) 15.249312089s ago: executing program 2 (id=4450): ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond0\x00'}) 15.21736281s ago: executing program 2 (id=4451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:11 0', 0x1b) close(r1) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}, 0x0, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x5, 0x9}, &(0x7f0000000040)=0x8) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet_icmp(0x2, 0x2, 0x1) close(r7) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x12, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x3}}}, 0x30}}, 0x0) 1.188111445s ago: executing program 32 (id=4435): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="2da52abd7000fbdbdf2503000000080001000000000008000100000000003400", @ANYRES32=r3], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) sendmsg$IEEE802154_LLSEC_LIST_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r6, 0x325, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10014}, 0x4008008) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x64}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r6, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x8044) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={r0, 0x5, 0x1, 0x8000000000000000}) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={r0, 0x5, 0x1, 0x8000000000000000}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x52cc, 0x9, 0x1, 0x24110, 0xffffffffffffffff, 0x0, '\x00', r7, r8, 0x2, 0x0, 0x2, 0x9}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x52cc, 0x9, 0x1, 0x24110, 0xffffffffffffffff, 0x0, '\x00', r7, r8, 0x2, 0x0, 0x2, 0x9}, 0x50) 161.736265ms ago: executing program 33 (id=4439): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffa}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x350}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40045) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000140)={0x796, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x1412, 0x104, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) (async) r1 = accept4$ax25(r0, &(0x7f0000000380)={{0x3, @null}, [@netrom, @default, @remote, @netrom, @netrom, @null, @null, @default]}, &(0x7f0000000400)=0x48, 0x800) r2 = socket$netlink(0x10, 0x3, 0xb) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000440)={'vxcan1\x00', 0x0}) (rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000480)={'gretap0\x00', r3, 0x8, 0x7881, 0x5, 0x2, {{0x14, 0x4, 0x1, 0x1, 0x50, 0x68, 0x0, 0xff, 0x2f, 0x0, @multicast2, @broadcast, {[@timestamp_addr={0x44, 0x3c, 0x93, 0x1, 0x7, [{@local, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x152df67c}, {@multicast2, 0xfb01}, {@empty}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@private=0xa010100, 0x10}, {@multicast1}]}]}}}}}) (async) getpeername$inet(r0, &(0x7f0000000540), &(0x7f0000000580)=0x10) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@deltaction={0x78, 0x31, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x64, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x1) (async, rerun: 32) ioctl$sock_qrtr_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000700)={'syz_tun\x00'}) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000780)={'caif0\x00', @ifru_data=&(0x7f0000000740)="32e9d849865aa38fecf59308f2419365e02963517cb6e588c0dbde14bbd6c4bc"}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000007c0)={0x7, 'ipvlan0\x00', {0x7fffffff}, 0xfc00}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000900)={'erspan0\x00', &(0x7f0000000800)={'ip_vti0\x00', r4, 0x700, 0x8, 0x5, 0xfe4, {{0x35, 0x4, 0x2, 0x16, 0xd4, 0x66, 0x0, 0x3a, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@end, @ssrr={0x89, 0x2b, 0x10, [@local, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2, @local, @private=0xa010100]}, @timestamp_addr={0x44, 0x2c, 0x71, 0x1, 0x9, [{@local, 0x9}, {@loopback, 0x5}, {@multicast2, 0x5}, {@remote, 0x7}, {@remote, 0x80}]}, @generic={0x86, 0x3, 'J'}, @noop, @timestamp_prespec={0x44, 0x34, 0xef, 0x3, 0x2, [{@private=0xa010101, 0x1}, {@private=0xa010102, 0x5}, {@empty, 0x9}, {@rand_addr=0x64010100, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x9}, {@rand_addr=0x64010101, 0x3}]}, @noop, @generic={0x83, 0x6, "5dfcc3b8"}, @lsrr={0x83, 0x23, 0xfd, [@empty, @dev={0xac, 0x14, 0x14, 0x27}, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @broadcast, @remote, @multicast2, @broadcast]}, @ra={0x94, 0x4}]}}}}}) (rerun: 32) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r6, 0x0, 0x487, &(0x7f0000000940), &(0x7f0000000980)=0x30) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) (rerun: 32) sendmsg$NL80211_CMD_LEAVE_MESH(r7, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r8, 0xf651540f55ddad3b, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL80211_CMD_SET_MCAST_RATE(r9, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x28102100}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x2c, r8, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40008d1) ioctl$sock_netdev_private(r1, 0x89fd, &(0x7f0000000c00)="1ac304b7032fb845c61d6529cc352a90998aaf12d107c12c02b99d237ff2ecc70368db63da9e71dc38b03a60cc961321b57ddcc583a2cc3cd3c245250efa87032f3728a146e6a16f83b048baac4aa381c1a370d0184d78c813b05a507edcfb05c38291330e6b521882cd62fa82cc84aaed03161ee6d8b48187681646314ae4d2fe10da711904e99bf9385a5a0bcb8a08833484b4f53dcc4603ce204b7deed7") (async) sendmsg$nl_route(r2, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)=@ipv6_getmulticast={0x14, 0x3a, 0x20, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40801}, 0x8000) (async) ioctl$sock_netdev_private(r9, 0x89f1, &(0x7f0000000dc0)="eea4397c14fcf882962cc9866e06038bb78a1a20a7c1676d89baa5223561ad410062191d3f292572cf34561799e638b67fdeb22713f5ff400130f6dea26fe55dcc0e29bfcbc1145a4eb4f1fed7cb996100580c646bd69072e58b051fbdb169fb50399906b94d44fcdbc15410077dec1a0af3308f0a7bbde90a87ea2a9ddefd306a6052719b75be2b3090c10460684b6ede1ea75f1207763d060b7e2e0e958257ac4d80ecb182197c90f363a6bfaf17aa4eccb9d79f4d975524c741cc59addad73257918439a94ddd2132773ef57da4dab6beb4b06efb4b9deb06cff682") (async) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r10, &(0x7f0000000ec0)="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", 0xfb, 0x40014, &(0x7f0000000fc0)={0x23, 0x58, 0x6, 0xe}, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, r12, 0x4, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4809}, 0xc8d1) 105.119147ms ago: executing program 34 (id=4451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:11 0', 0x1b) close(r1) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}, 0x0, 0x1}, 0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x5, 0x9}, &(0x7f0000000040)=0x8) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet_icmp(0x2, 0x2, 0x1) close(r7) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={0x0, 0x12, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x3}}}, 0x30}}, 0x0) 63.260126ms ago: executing program 35 (id=4444): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f0000000000)="c8bed3a9e75cf5185ddfb2db63ff709f3a0903b0bcc47352f4cba079a0aebf098cbf3cb5b1a03334237ada688886c05430cd2bda3b5f8b21fb73d5adfc7a71439e2d0b7ad7e084387a0f94b2de539aec2b85afb86daa31b5a81399ee5cbe6a1802dd7af2391bc3aee25a1b219bfe82964928604eb3f6e65ea894ac8bac835989cbd9e2a4c62da0a2c586dabfae7097de432187838574713a00325fab6fafa56b2dd48b4985e47bf13d4365ff308d244ad0690b2cace7fdec71ac0d1e387280f074") ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000001c0)=@buf={0xac, &(0x7f0000000100)="25234c3ffff376ee96a707098a13f8ef82e6e23a51438ef219c23ed90bddf6141f64d071aaf5e243cd831ee4552c745a6adfea5978c8c91c741f369fe2d29f8a47fd2f0aa5ba3cb5041a88399c1da90a4f6c6a9142eff7a41ff44e43cd2145585aec8002800fcfa7709442a0a3a54b2d2a10ee36ed451e6416a4e74ac56986e2ffec57e5d327ffe38bddffbbbc8e4193c17b6a4cc41bf9a7816e022c3e7618c2357d2326d9d84917560d33f3"}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffff192, '\x00', 0x0, r0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x80, 0x20, 0x1, 0x3ff, {{0x8, 0x4, 0x1, 0x2, 0x20, 0x66, 0x0, 0x4, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xb, 0x47, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000300)={r0, 0x4, 0x5, 0x200}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x32, 0x81, 0xf, 0x120c0, r1, 0x9, '\x00', r2, r3, 0x0, 0x4, 0x2, 0x6}, 0x50) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x101100, 0x4) sendmsg$AUDIT_TTY_SET(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x3f9, 0x100, 0x70bd28, 0x25dfdbfc, {0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x8}, 0x200400c0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000005c0)={@rc={0x1f, @any, 0x6}, {&(0x7f0000000540)=""/30, 0x1e}, &(0x7f0000000580), 0x30}, 0xa0) sendmsg$NFT_BATCH(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_DELFLOWTABLE={0xa0, 0x18, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x74, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}]}]}], {0x14}}, 0xe8}, 0x1, 0x0, 0x0, 0x40011}, 0x48848) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000840)={@multicast2, @loopback}, &(0x7f0000000880)=0xc) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000008c0), &(0x7f0000000900)=0x8) syz_emit_ethernet(0x1a0, &(0x7f0000000940)={@local, @link_local, @void, {@ipv4={0x800, @generic={{0x3c, 0x4, 0x0, 0x12, 0x192, 0x64, 0x0, 0x7d, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x34, 0xdb, 0x3, 0x6, [{@rand_addr=0x64010102, 0xfffffffe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@empty, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x101}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x2}]}, @cipso={0x86, 0x3a, 0x3, [{0x7, 0x10, "68913ed6e2aad8b5cf629a8aa1f0"}, {0x1, 0x11, "8c3617742896e629ca337d8dd857b3"}, {0x5, 0xe, "1036719d044933d40ab0da5f"}, {0x1, 0x5, "a67100"}]}, @timestamp_addr={0x44, 0x54, 0x81, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x7c5c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1ff0}, {@rand_addr=0x64010100, 0x4}, {@loopback, 0xc0}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x5}, {@broadcast, 0x5}, {@broadcast}, {@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@private=0xa010102}]}, @timestamp={0x44, 0x18, 0xb9, 0x0, 0x5, [0x9, 0x6, 0x8, 0x8, 0x5]}, @noop]}}, "6cb01e307f4176972fdd5eadfa4222d01ce67bebb1c3a33993b1be28b77764a8f07fb3b6d42826cb5dad6be5acdc8f481f86b0df9d785ebe535b925e668969809d2d0b26e5eeff02e6d749c377e4a609d5d26a6cd909b08fe78a1ef51d89995eb6119235f2e2d7524c63f649138cc07178ae1f9254dcb4570c339caf442815c8ba57297764f46005e366891b5a19c55862acfa111fcab6b89f9f870975fb06930317"}}}}, &(0x7f0000000b00)={0x1, 0x1, [0xdfb, 0x57d, 0x7c3, 0x421]}) recvmmsg(r0, &(0x7f0000001000)=[{{&(0x7f0000000b40)=@qipcrtr, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000bc0)=""/54, 0x36}, {&(0x7f0000000c00)=""/166, 0xa6}, {&(0x7f0000000cc0)=""/226, 0xe2}, {&(0x7f0000000dc0)=""/189, 0xbd}, {&(0x7f0000000e80)=""/7, 0x7}], 0x5, &(0x7f0000000f40)=""/180, 0xb4}, 0x3}], 0x1, 0x2041, &(0x7f0000001040)={0x0, 0x3938700}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001080)={'batadv0\x00', 0x0}) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f00000010c0)=0x1, 0x4) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000001100)=0x6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r3) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000001180)=[{{0x0, 0x1, 0x0, 0x1}, {0x2, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x2, 0x1}}, {{0x4, 0x1, 0x1}, {0x4, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x2, 0x0, 0x1}}], 0x28) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f00000011c0)) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001300)=@filter={'filter\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, &(0x7f00000012c0), {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x6, 0x0, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x1, 0x10, 0xb, 0xfffa, @dev={0xfe, 0x80, '\x00', 0x3b}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0x807fffff, 0x0, 0xff, 0xff], [0x7fffff00, 0xff7fff00, 0xffffffff, 0xffffffff], 0x1000, 0x3974}}, @common=@dst={{0x48}, {0x9, 0x3, 0x0, [0xa, 0x4, 0xfd, 0x6, 0x0, 0x5, 0x7, 0x3, 0x8, 0x3ff, 0x3, 0x1, 0x8001, 0x7ff, 0x7, 0x4], 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x12}, @ipv4={'\x00', '\xff\xff', @multicast2}, [0x0, 0xffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 'tunl0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0xff, 0x0, 0x3, 0x48}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001800), r3) getsockname$packet(r3, &(0x7f0000001840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001880)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000001980)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x4c, r7, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x4c}}, 0x14) sendmmsg$sock(r5, &(0x7f0000001e00)=[{{&(0x7f00000019c0)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e22, 0x1}}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001a40)="7e09724b8b8ed1138743854c580d56f03b01bc9798af8b63b2d3165f56f77d9588eaac90e9c4380819a590ac960593109f62d7eb36c9e500da2981d08bdb266b087423e06a64da44359af775e7a8eb16e81eadb86a5990ca", 0x58}, {&(0x7f0000001ac0)="a20a8bb6c71007417012b0db7f40a43cc5cfa5032d9e2dab87493c981149b0ffec81ac123dfedcb84bc7f2b3080d6084badb555013b890436c890366c4266f3915513abd7393b092e8da7c5d0dbbe501e98d580d7c5eba1c5be52caed083a80ca3743f10059eeb06d8dff80a7af4a01ef224be7a5de7ee206a091d5ccaa9c31e9523e2140c8de2707ea7", 0x8a}, {&(0x7f0000001b80)="e80c7461cfb1e4155e2fc4ca984bcefcd688b96f2d997a03ef1b137c7b8d383864613299404dbfbb801e41ca1659413524aecc79609996744a02e6f4e87306fb4e5a70f5897a2442664d87421b0fd01fa6c24c47568e1616cc589377f14c685f21a89ae3fd40e787f98a062c2aafb9f1853422bd0e67640ceead3dfa119cd3b83311312c61b4850c5a8a667a98e43b1676c20c0b5ca0cec74355bf11482cd7b6bedc56d6ee6bf13d4e3545dc43f4eafd23f1245c2f0a69f383fd99643586", 0xbe}, {&(0x7f0000001c40)="510c3979490a3cafdff4aa41b83db2e92ccccb51027feb1f65d774c6c307d7a430163cc393e4cf213200b48935b7c363ad1cea19ff6405773101eb004a3414175681b2de6daab88bc5c7a260dc0804ca99a801812a67e03107ea8cb23e1bf05f5cbd6a4eb83e468f78bda9739a722324229a7ce9ebc92e79dfaeaacd76ace09d314217c62dcb13a9633af64b145fbe8e9c4d91", 0x93}], 0x4, &(0x7f0000001d40)=[@mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x90}}], 0x1, 0x8000) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0xabab19d5e4f8fccb, &(0x7f0000001e40)=""/133, &(0x7f0000001f00)=0x85) 0s ago: executing program 36 (id=4438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) kernel console output (not intermixed with test programs): ntered forwarding state [ 313.190765][T13231] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.197892][T13231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.250443][T17205] wlan0 speed is unknown, defaulting to 1000 [ 313.473100][T17223] netlink: 'syz.4.3249': attribute type 15 has an invalid length. [ 313.492816][T17229] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 313.901962][T17249] bridge5: entered promiscuous mode [ 313.918262][T17249] bridge5: entered allmulticast mode [ 313.966075][T16786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.993157][T17260] netlink: 'syz.0.3258': attribute type 1 has an invalid length. [ 314.133396][T16786] veth0_vlan: entered promiscuous mode [ 314.174538][T16786] veth1_vlan: entered promiscuous mode [ 314.227047][T16786] veth0_macvtap: entered promiscuous mode [ 314.254607][T17270] block nbd0: server does not support multiple connections per device. [ 314.276459][T17270] block nbd0: shutting down sockets [ 314.320229][T17272] netlink: 'syz.1.3259': attribute type 1 has an invalid length. [ 314.336083][T17272] netlink: 'syz.1.3259': attribute type 1 has an invalid length. [ 314.368005][T16786] veth1_macvtap: entered promiscuous mode [ 314.381019][T17277] C: renamed from lo [ 314.397375][T17277] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 314.541590][T16786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.577880][T16786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.614225][T13247] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.660593][T13247] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.677066][T13247] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.687066][T13247] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.770475][T17300] unsupported nla_type 33542 [ 314.829503][T17303] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 314.909667][T13247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.917511][T13247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.010427][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.018723][T17315] sctp: [Deprecated]: syz.4.3275 (pid 17315) Use of int in maxseg socket option. [ 315.018723][T17315] Use struct sctp_assoc_value instead [ 315.072907][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.233862][T17321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 315.253069][T17326] syzkaller0: create flow: hash 3060252117 index 1 [ 315.347157][T17330] netlink: zone id is out of range [ 315.363440][T17330] netlink: zone id is out of range [ 315.383634][T17330] netlink: zone id is out of range [ 315.397047][T17330] netlink: get zone limit has 4 unknown bytes [ 315.602545][T17337] syzkaller0: delete flow: hash 3060252117 index 1 [ 315.619115][T17339] nbd3: detected capacity change from 0 to 63 [ 315.628739][T17338] block nbd3: NBD_DISCONNECT [ 315.646245][T17338] block nbd3: Disconnected due to user request. [ 315.668977][T17338] block nbd3: shutting down sockets [ 315.686867][ C0] blk_print_req_error: 138 callbacks suppressed [ 315.686885][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.702279][ C0] buffer_io_error: 138 callbacks suppressed [ 315.702295][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 315.716900][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.726094][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 315.733945][ C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.743063][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 315.750914][ C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.760003][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 315.790581][T13050] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.838944][T13050] Buffer I/O error on dev nbd3, logical block 0, async page read [ 315.856702][T13050] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.905041][T13050] Buffer I/O error on dev nbd3, logical block 1, async page read [ 315.940037][T13050] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.961427][T13050] Buffer I/O error on dev nbd3, logical block 2, async page read [ 315.978369][T13050] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.998930][T13050] Buffer I/O error on dev nbd3, logical block 3, async page read [ 316.026104][T13050] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 316.045782][T13050] Buffer I/O error on dev nbd3, logical block 0, async page read [ 316.063275][T13050] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 316.084524][T13050] Buffer I/O error on dev nbd3, logical block 1, async page read [ 316.109824][T13050] ldm_validate_partition_table(): Disk read failed. [ 316.126856][T13050] Dev nbd3: unable to read RDB block 0 [ 316.137894][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 316.143196][T13050] nbd3: unable to read partition table [ 316.160024][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 316.170231][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 316.175618][T13050] ldm_validate_partition_table(): Disk read failed. [ 316.187819][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 316.187886][T13050] Dev nbd3: unable to read RDB block 0 [ 316.196907][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 316.240522][T13050] nbd3: unable to read partition table [ 317.224495][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.685316][T17355] wlan0 speed is unknown, defaulting to 1000 [ 317.887540][T17377] __nla_validate_parse: 8 callbacks suppressed [ 317.887559][T17377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3291'. [ 318.249989][ T5849] Bluetooth: hci0: command tx timeout [ 318.294424][T17355] chnl_net:caif_netlink_parms(): no params data found [ 318.312232][T17401] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 318.465946][T17413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3301'. [ 318.476964][T17413] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 318.511550][T17355] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.524237][T17355] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.537256][T17355] bridge_slave_0: entered allmulticast mode [ 318.547343][T17355] bridge_slave_0: entered promiscuous mode [ 318.555967][T17413] netlink: 288 bytes leftover after parsing attributes in process `syz.0.3301'. [ 318.565909][T17355] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.588957][T17355] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.596232][T17355] bridge_slave_1: entered allmulticast mode [ 318.604432][T17355] bridge_slave_1: entered promiscuous mode [ 318.757331][T17355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.770029][T17420] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3304'. [ 318.794116][T17355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.955689][T17355] team0: Port device team_slave_0 added [ 318.964480][T17423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.977947][T17412] wlan0 speed is unknown, defaulting to 1000 [ 318.981272][T17355] team0: Port device team_slave_1 added [ 319.006417][T17430] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 319.164710][T17355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.208212][T17355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.236354][T17355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.279155][T17455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3312'. [ 319.289876][T17355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.296946][T17355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.323559][T17355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.543031][T17355] hsr_slave_0: entered promiscuous mode [ 319.566646][T17355] hsr_slave_1: entered promiscuous mode [ 319.573559][T17355] debugfs: 'hsr0' already exists in 'hsr' [ 319.579558][T17355] Cannot create hsr debugfs directory [ 319.748736][T17475] netlink: 'syz.1.3320': attribute type 12 has an invalid length. [ 320.001521][T17355] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.021811][T17355] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 320.038880][T17355] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 320.147671][T17355] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.158170][T17355] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 320.168900][T17355] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 320.210558][T17493] openvswitch: netlink: IP tunnel dst address not specified [ 320.272590][T17497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3327'. [ 320.296160][T17355] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.319360][T17355] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 320.330412][ T5849] Bluetooth: hci0: command tx timeout [ 320.343970][T17355] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 320.413659][T17503] netlink: 'syz.1.3330': attribute type 10 has an invalid length. [ 320.461004][T17355] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.471921][T17355] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 320.482520][T17355] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 320.512827][T17503] batman_adv: batadv0: Adding interface: netdevsim0 [ 320.520755][T17511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3332'. [ 320.529861][T17503] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 320.529908][T17503] batman_adv: batadv0: Interface activated: netdevsim0 [ 320.759528][T17355] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 320.792272][T17355] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 320.825293][T17355] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 320.857177][T17355] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 320.880490][T17523] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3336'. [ 320.937756][T17523] netlink: 'syz.0.3336': attribute type 1 has an invalid length. [ 321.066918][T17536] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3338'. [ 321.111685][T17355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.240149][T17355] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.266645][ T6139] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.273880][ T6139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.353415][T17547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3341'. [ 321.373350][T13231] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.380562][T13231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.614253][T17562] netlink: 'syz.3.3345': attribute type 15 has an invalid length. [ 321.629046][T17561] netlink: 'syz.3.3345': attribute type 15 has an invalid length. [ 321.720516][T17572] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 321.880626][T17577] sctp: [Deprecated]: syz.3.3350 (pid 17577) Use of int in maxseg socket option. [ 321.880626][T17577] Use struct sctp_assoc_value instead [ 322.001497][T17355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.246929][T17605] netlink: 'syz.1.3357': attribute type 1 has an invalid length. [ 322.391771][T17618] sctp: [Deprecated]: syz.0.3360 (pid 17618) Use of int in max_burst socket option deprecated. [ 322.391771][T17618] Use struct sctp_assoc_value instead [ 322.409203][ T5849] Bluetooth: hci0: command tx timeout [ 322.459743][T17622] netlink: 'syz.0.3360': attribute type 1 has an invalid length. [ 322.664644][T17355] veth0_vlan: entered promiscuous mode [ 322.709524][T17355] veth1_vlan: entered promiscuous mode [ 322.764419][T17355] veth0_macvtap: entered promiscuous mode [ 322.775683][T17355] veth1_macvtap: entered promiscuous mode [ 322.834374][T17355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.854830][T17355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.886055][T17637] syzkaller1: entered promiscuous mode [ 322.896469][T17637] syzkaller1: entered allmulticast mode [ 322.903992][T13231] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.917119][T13231] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.934371][T13231] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.956317][T17637] __nla_validate_parse: 9 callbacks suppressed [ 322.956335][T17637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3366'. [ 322.977603][T13231] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.003652][T17637] veth0_macvtap: left promiscuous mode [ 323.011336][T17647] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3368'. [ 323.330542][T17655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3370'. [ 323.507578][T13237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.530473][T17665] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3372'. [ 323.545624][T13237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.615781][ T4902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.632104][ T4902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.852173][T17688] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3280'. [ 323.901747][T17688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3280'. [ 323.930551][T17688] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3280'. [ 323.989472][T17696] netlink: 'syz.0.3379': attribute type 15 has an invalid length. [ 324.016506][T17698] netlink: 'syz.0.3379': attribute type 15 has an invalid length. [ 324.128525][T17701] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3381'. [ 324.183759][T17705] netlink: 'syz.3.3382': attribute type 1 has an invalid length. [ 324.385844][T17713] batadv1: entered allmulticast mode [ 324.452122][T11728] udevd[11728]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 324.488582][ T5849] Bluetooth: hci0: command tx timeout [ 324.535611][T13050] udevd[13050]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 324.551724][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 324.563072][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 324.572168][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 324.583772][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 324.597373][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 324.707134][T17725] wlan0 speed is unknown, defaulting to 1000 [ 324.875406][T17733] syzkaller0: entered promiscuous mode [ 324.893232][T17733] syzkaller0: entered allmulticast mode [ 325.131730][T17746] validate_nla: 1 callbacks suppressed [ 325.131749][T17746] netlink: 'syz.4.3393': attribute type 62 has an invalid length. [ 325.260015][T17725] chnl_net:caif_netlink_parms(): no params data found [ 325.394421][T17772] sctp: [Deprecated]: syz.0.3397 (pid 17772) Use of int in maxseg socket option. [ 325.394421][T17772] Use struct sctp_assoc_value instead [ 325.452248][T17762] wlan0 speed is unknown, defaulting to 1000 [ 325.700605][T17785] syzkaller0: entered promiscuous mode [ 325.706113][T17785] syzkaller0: entered allmulticast mode [ 325.754172][T17725] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.788766][T17725] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.814281][T17725] bridge_slave_0: entered allmulticast mode [ 325.822742][T17725] bridge_slave_0: entered promiscuous mode [ 325.833759][T17725] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.841272][T17725] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.848728][T17725] bridge_slave_1: entered allmulticast mode [ 325.856452][T17725] bridge_slave_1: entered promiscuous mode [ 326.495317][T17725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.582391][T17725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.653576][ T5849] Bluetooth: hci1: command tx timeout [ 326.675771][T17827] tipc: Started in network mode [ 326.681295][T17827] tipc: Node identity de99fb6cbbc7, cluster identity 4711 [ 326.689556][T17827] tipc: Enabled bearer , priority 0 [ 326.697705][T17827] +: renamed from syzkaller0 [ 326.715174][T17827] tipc: Disabling bearer [ 326.726065][T17835] block nbd0: not configured, cannot reconfigure [ 326.776473][T17835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3408'. [ 326.795275][T17725] team0: Port device team_slave_0 added [ 326.844564][T17725] team0: Port device team_slave_1 added [ 326.949099][T17725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.960245][T17725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.022793][T17725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.035550][T17853] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.3414'. [ 327.041153][T17725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.054492][T17725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.103411][T17725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.270311][T17725] hsr_slave_0: entered promiscuous mode [ 327.277765][T17725] hsr_slave_1: entered promiscuous mode [ 327.294363][T17725] debugfs: 'hsr0' already exists in 'hsr' [ 327.309131][T17725] Cannot create hsr debugfs directory [ 328.139273][T17909] bond1 (unregistering): Released all slaves [ 328.295462][T17923] netlink: 'syz.1.3433': attribute type 4 has an invalid length. [ 328.347196][T17925] __nla_validate_parse: 1 callbacks suppressed [ 328.347214][T17925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3434'. [ 328.351080][T17725] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.354870][T17925] openvswitch: netlink: Flow actions attr not present in new flow. [ 328.366891][T17725] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 328.396498][T17725] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 328.460453][T17725] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.470293][T17725] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 328.482837][T17725] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 328.522129][T17930] xt_l2tp: wrong L2TP version: 0 [ 328.549208][T17935] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.3435'. [ 328.567979][T17725] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.580332][T17725] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 328.590303][T17725] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 328.647518][T17725] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.661050][T17725] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 328.673223][T17725] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 328.700757][T17943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3439'. [ 328.710182][T17942] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3439'. [ 328.737033][ T5849] Bluetooth: hci1: command tx timeout [ 328.893072][T17725] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 328.906885][T17725] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 328.917898][T17725] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 328.936043][T17725] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 329.056296][T17725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.087322][T17725] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.106894][T13237] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.114111][T13237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.136749][ T6139] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.144026][ T6139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.440519][T17978] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 4, id = 0 [ 329.477859][T17725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.513776][T17980] Bluetooth: MGMT ver 1.23 [ 329.547884][T17725] veth0_vlan: entered promiscuous mode [ 329.581383][T17725] veth1_vlan: entered promiscuous mode [ 329.651733][T17725] veth0_macvtap: entered promiscuous mode [ 329.676797][T17725] veth1_macvtap: entered promiscuous mode [ 329.735917][T17725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.751753][T17725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.772631][T13247] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.793484][T17995] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3452'. [ 329.794819][T13247] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.838236][T17997] netem: incorrect gi model size [ 329.845115][T17997] netem: change failed [ 329.851942][T13247] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.882645][T13247] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.908932][T17995] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3452'. [ 330.011513][T18002] nft_compat: unsupported protocol 0 [ 330.035415][T18005] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20003 [ 330.043692][T18004] IPVS: set_ctl: invalid protocol: 12 224.0.0.2:20003 [ 330.051215][T13237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.065888][T13237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.127796][T13249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.136773][T13249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.170113][T18008] x_tables: duplicate underflow at hook 1 [ 330.170118][T18010] x_tables: duplicate underflow at hook 1 [ 330.263995][T18016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3380'. [ 330.346735][T18016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3380'. [ 330.359676][T18016] IPVS: set_ctl: invalid protocol: 26415 100.1.1.2:20001 [ 330.394304][T18022] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 330.402574][T18023] openvswitch: netlink: EtherType 50a is less than min 600 [ 330.535038][T18031] tipc: Started in network mode [ 330.540247][T18031] tipc: Node identity 76106dcf647d, cluster identity 4711 [ 330.547623][T18031] tipc: Enabled bearer , priority 0 [ 330.557244][T18031] syzkaller0: entered promiscuous mode [ 330.566019][T18031] syzkaller0: entered allmulticast mode [ 330.665512][T18040] tipc: Resetting bearer [ 330.681915][T18042] Cannot find add_set index 2 as target [ 330.747687][T18030] tipc: Resetting bearer [ 330.780027][T18048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3471'. [ 330.801208][T18048] openvswitch: netlink: Missing key (keys=40, expected=80) [ 330.810434][ T5849] Bluetooth: hci1: command tx timeout [ 330.838256][T18030] tipc: Disabling bearer [ 331.041292][T18064] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 331.499665][T18075] syzkaller0: entered promiscuous mode [ 331.505243][T18075] syzkaller0: entered allmulticast mode [ 331.545044][T18101] netlink: 'syz.4.3485': attribute type 24 has an invalid length. [ 331.633823][T18105] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3485'. [ 332.891435][ T5849] Bluetooth: hci1: command tx timeout [ 333.275030][T18105] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 333.483490][T18140] __nla_validate_parse: 6 callbacks suppressed [ 333.483509][T18140] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3495'. [ 333.545027][T18149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3498'. [ 333.574824][T18149] bridge_slave_1: left allmulticast mode [ 333.588899][T18149] bridge_slave_1: left promiscuous mode [ 333.597843][T18149] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.639649][T18149] bridge_slave_0: left allmulticast mode [ 333.655715][T18149] bridge_slave_0: left promiscuous mode [ 333.665050][T18159] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3500'. [ 333.682643][T18149] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.690900][T18160] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3500'. [ 334.258980][T18198] netlink: 'syz.1.3510': attribute type 1 has an invalid length. [ 334.270919][T18198] netlink: 'syz.1.3510': attribute type 1 has an invalid length. [ 334.368214][T18207] x_tables: duplicate underflow at hook 1 [ 334.498843][ T11] block nbd1: Possible stuck request ffff888024e65080: control (read@0,1024B). Runtime 150 seconds [ 334.509889][ T11] block nbd1: Possible stuck request ffff888024e65240: control (read@1024,1024B). Runtime 150 seconds [ 334.522797][ T11] block nbd1: Possible stuck request ffff888024e65400: control (read@2048,1024B). Runtime 150 seconds [ 334.530128][T18215] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3514'. [ 334.533905][ T11] block nbd1: Possible stuck request ffff888024e655c0: control (read@3072,1024B). Runtime 150 seconds [ 334.711459][T18227] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 334.760372][T18227] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 334.805793][T18232] netlink: 'syz.1.3520': attribute type 4 has an invalid length. [ 334.847421][T18239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3521'. [ 335.006836][T18249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3524'. [ 335.087593][T18260] netlink: ct family unspecified [ 335.093433][T18260] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.222813][T18268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3531'. [ 335.254007][T18268] netlink: 'syz.3.3531': attribute type 5 has an invalid length. [ 335.276740][T18268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3531'. [ 335.808079][ T2992] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 336.104691][T18327] : renamed from hsr0 (while UP) [ 336.199796][T18330] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3550'. [ 336.327233][T18302] mpoa:mpoad_close: () going down [ 336.441719][T18334] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 336.488138][T18334] bond5 (unregistering): Released all slaves [ 336.567939][T18336] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 336.593752][T18336] bond5 (unregistering): Released all slaves [ 336.635322][T18351] netlink: 'syz.3.3556': attribute type 1 has an invalid length. [ 336.797326][T18360] SET target dimension over the limit! [ 336.856473][T18367] syzkaller1: entered promiscuous mode [ 336.883141][T18367] syzkaller1: entered allmulticast mode [ 337.103347][T18383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.147332][T18387] netlink: 'syz.0.3569': attribute type 11 has an invalid length. [ 337.233778][T18392] syz_tun: entered allmulticast mode [ 337.315986][T18396] netlink: 'syz.0.3573': attribute type 1 has an invalid length. [ 337.433776][T18402] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 337.445842][T18402] bond1 (unregistering): Released all slaves [ 337.724522][T18423] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 337.734947][T18423] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 337.817716][T18429] netlink: 'syz.4.3581': attribute type 9 has an invalid length. [ 338.174733][T18469] mac80211_hwsim hwsim29 : renamed from wlan1 (while UP) [ 338.363893][T18472] syzkaller0: entered promiscuous mode [ 338.381332][T18472] syzkaller0: entered allmulticast mode [ 338.457868][T18487] !: renamed from dummy0 (while UP) [ 338.623352][T18493] __nla_validate_parse: 7 callbacks suppressed [ 338.623370][T18493] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3601'. [ 338.640313][T18493] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3601'. [ 338.650209][T18491] tipc: Enabled bearer , priority 0 [ 338.692743][T18491] syzkaller0: entered promiscuous mode [ 338.710223][T18491] syzkaller0: entered allmulticast mode [ 338.788142][T18503] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3604'. [ 338.801502][T18503] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3604'. [ 338.841069][T18491] tipc: Resetting bearer [ 338.873189][T18490] tipc: Resetting bearer [ 338.934523][T18490] tipc: Disabling bearer [ 339.190305][T18537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3609'. [ 339.206138][T18539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3611'. [ 339.213228][T18537] erspan0: entered promiscuous mode [ 339.240119][T18537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3609'. [ 339.284493][T18541] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 339.294335][T18541] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 339.385381][T18546] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3613'. [ 339.464463][T18552] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3615'. [ 339.519832][T18561] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3616'. [ 339.529333][T18554] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.639643][T18566] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 339.767916][T18568] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.954537][T18568] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.073602][T18592] x_tables: duplicate underflow at hook 1 [ 340.105484][T18568] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.200558][T18568] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.227729][T18603] lo: entered allmulticast mode [ 340.237854][T18603] lo: left allmulticast mode [ 340.286407][T18608] netlink: 'syz.1.3631': attribute type 32 has an invalid length. [ 340.389733][ T2992] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.417564][ T2992] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.449099][ T2992] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.518025][ T2992] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.822863][T18636] netlink: 'syz.1.3637': attribute type 26 has an invalid length. [ 340.868946][T18637] bond1: option miimon: invalid value (18446744073709551585) [ 340.876580][T18637] bond1: option miimon: allowed values 0 - 2147483647 [ 340.920650][T18637] bond1 (unregistering): Released all slaves [ 340.965404][T18639] ip6gre1: entered allmulticast mode [ 341.230879][T18663] netlink: 'syz.2.3644': attribute type 6 has an invalid length. [ 341.250596][T18663] block nbd0: not configured, cannot reconfigure [ 341.373808][T18672] xt_TPROXY: Can be used only with -p tcp or -p udp [ 341.474134][T18677] xt_TPROXY: Can be used only with -p tcp or -p udp [ 341.564175][T18687] netlink: 'syz.4.3652': attribute type 4 has an invalid length. [ 341.655572][T18691] netlink: 'syz.3.3654': attribute type 2 has an invalid length. [ 341.669417][T18689] C: renamed from team_slave_0 (while UP) [ 341.680461][T18689] netlink: 'syz.2.3653': attribute type 1 has an invalid length. [ 341.694534][T18689] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 341.802662][T18702] ip6tnl1: entered promiscuous mode [ 341.830180][ T5901] IPVS: starting estimator thread 0... [ 341.876356][T18706] bond1: entered allmulticast mode [ 341.930861][T18708] IPVS: using max 38 ests per chain, 91200 per kthread [ 341.951894][T18705] ip6gretap1: entered allmulticast mode [ 341.974191][T18705] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 341.993746][T18720] netlink: 'syz.2.3659': attribute type 1 has an invalid length. [ 342.534778][T18758] openvswitch: netlink: Flow key attr not present in new flow. [ 342.569094][T18763] syzkaller0: entered promiscuous mode [ 342.597549][T18763] syzkaller0: entered allmulticast mode [ 342.734093][T18768] netlink: 'syz.4.3674': attribute type 12 has an invalid length. [ 342.752499][T18768] netlink: 'syz.4.3674': attribute type 29 has an invalid length. [ 342.767849][T18768] netlink: 'syz.4.3674': attribute type 1 has an invalid length. [ 342.776215][T18768] netlink: 'syz.4.3674': attribute type 2 has an invalid length. [ 343.035587][T18791] bridge0: entered promiscuous mode [ 343.042432][T18791] bridge0: entered allmulticast mode [ 343.113685][T18795] netlink: 'syz.4.3682': attribute type 1 has an invalid length. [ 343.185215][T18805] netlink: 'syz.3.3680': attribute type 1 has an invalid length. [ 343.307433][T18812] netlink: 'syz.4.3687': attribute type 83 has an invalid length. [ 343.395586][T18820] sctp: [Deprecated]: syz.4.3691 (pid 18820) Use of int in maxseg socket option. [ 343.395586][T18820] Use struct sctp_assoc_value instead [ 343.578911][T18827] bond2 (unregistering): Released all slaves [ 343.600912][T18831] x_tables: duplicate underflow at hook 1 [ 343.744064][T18844] __nla_validate_parse: 23 callbacks suppressed [ 343.744082][T18844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3699'. [ 343.952363][T18861] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3704'. [ 344.019657][T18865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3706'. [ 344.031487][T18863] xt_bpf: check failed: parse error [ 344.060874][T18867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.572583][T18884] x_tables: duplicate underflow at hook 3 [ 344.828492][T18888] batadv_slave_0: mtu less than device minimum [ 344.842194][T18893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3716'. [ 344.862590][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3717'. [ 344.885464][T18893] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3716'. [ 344.918776][T18892] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3717'. [ 345.017586][T18892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3717'. [ 345.067639][T18892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3717'. [ 345.321545][T18914] team0 (unregistering): Port device team_slave_0 removed [ 345.342043][T18914] team0 (unregistering): Port device team_slave_1 removed [ 345.444412][T18932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3724'. [ 345.566648][T18929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 345.903414][T18945] set match dimension is over the limit! [ 346.103233][T18968] xt_nat: multiple ranges no longer supported [ 346.719595][T19015] validate_nla: 8 callbacks suppressed [ 346.719614][T19015] netlink: 'syz.3.3750': attribute type 1 has an invalid length. [ 346.843419][T19015] bond1: entered promiscuous mode [ 346.857581][T19015] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.431888][T19071] netlink: 'syz.4.3768': attribute type 11 has an invalid length. [ 347.490092][T19071] netlink: 'syz.4.3768': attribute type 11 has an invalid length. [ 347.492722][ T1139] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.527214][ T1139] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.551164][ T1139] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.564049][T19077] netlink: 'syz.1.3770': attribute type 1 has an invalid length. [ 347.574740][ T1139] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.617850][T19083] netlink: 'syz.0.3772': attribute type 13 has an invalid length. [ 347.642349][T19083] netlink: 'syz.0.3772': attribute type 5 has an invalid length. [ 347.650562][T19084] bond2: (slave ip6gretap2): making interface the new active one [ 347.662280][T19084] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 347.677414][T19084] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 347.686108][T19084] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 347.753899][T19080] netlink: 'syz.3.3771': attribute type 12 has an invalid length. [ 347.763037][T19080] netlink: 'syz.3.3771': attribute type 29 has an invalid length. [ 348.249270][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.301867][T19120] syzkaller0: entered promiscuous mode [ 348.307548][T19120] syzkaller0: entered allmulticast mode [ 348.469882][T19124] xt_cgroup: invalid path, errno=-2 [ 348.884571][T19158] __nla_validate_parse: 21 callbacks suppressed [ 348.884591][T19158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3795'. [ 349.011829][T19167] netlink: 'syz.4.3800': attribute type 3 has an invalid length. [ 349.116232][T19178] syzkaller1: entered promiscuous mode [ 349.123258][T19178] syzkaller1: entered allmulticast mode [ 349.210312][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.219988][ T9710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.264040][T19186] syzkaller0: entered promiscuous mode [ 349.270235][T19186] syzkaller0: entered allmulticast mode [ 349.344563][T19179] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.3799'. [ 349.585918][T19210] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 349.615602][T19214] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 349.635619][T19213] netlink: 'syz.2.3812': attribute type 2 has an invalid length. [ 349.788865][T19225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3814'. [ 349.858745][ T8288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.882343][T19233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3818'. [ 350.019534][T19240] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3821'. [ 350.048974][T19241] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3821'. [ 350.083420][T19245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3821'. [ 350.148722][T19252] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3824'. [ 350.222564][T19252] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.231130][T19252] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.269072][T19252] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3824'. [ 350.569440][T19285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3829'. [ 351.595525][T19355] bridge_slave_1: left allmulticast mode [ 351.603128][T19355] bridge_slave_1: left promiscuous mode [ 351.623004][T19355] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.651406][T19355] bridge_slave_0: left allmulticast mode [ 351.657102][T19355] bridge_slave_0: left promiscuous mode [ 351.691229][T19355] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.826151][T19359] : entered promiscuous mode [ 352.077554][T19386] syzkaller0: entered promiscuous mode [ 352.086252][T19386] syzkaller0: entered allmulticast mode [ 352.117002][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.155240][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.181019][T19387] validate_nla: 3 callbacks suppressed [ 352.181036][T19387] netlink: 'syz.3.3867': attribute type 1 has an invalid length. [ 352.261146][ T9710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.417484][ T985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.535279][T13231] wlan1: Creating new IBSS network, BSSID b2:83:1d:59:d9:77 [ 352.618236][T19415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.627409][T19415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.636650][T19415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.646311][T19415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.685418][T19415] xt_nat: multiple ranges no longer supported [ 352.698741][T19412] netlink: 'syz.1.3876': attribute type 1 has an invalid length. [ 352.906337][T19425] netlink: 'syz.1.3882': attribute type 22 has an invalid length. [ 353.104826][T19445] netlink: 'syz.1.3887': attribute type 7 has an invalid length. [ 353.112968][T19445] netlink: 'syz.1.3887': attribute type 8 has an invalid length. [ 353.874116][T19485] syzkaller0: entered promiscuous mode [ 353.907766][T19485] syzkaller0: entered allmulticast mode [ 353.928106][T19498] net_ratelimit: 3 callbacks suppressed [ 353.928123][T19498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.942243][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.967141][T19497] __nla_validate_parse: 12 callbacks suppressed [ 353.967158][T19497] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3906'. [ 354.052335][T19474] infiniband !yz!: set active [ 354.079057][T19474] infiniband !yz!: added team_slave_0 [ 354.197477][T19474] RDS/IB: !yz!: added [ 354.227205][T19474] smc: adding ib device !yz! with port count 1 [ 354.252614][T19474] smc: ib device !yz! port 1 has no pnetid [ 354.304806][T19516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3908'. [ 354.626313][T19529] netlink: 'syz.0.3910': attribute type 1 has an invalid length. [ 354.741593][T19531] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3910'. [ 355.450526][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.826855][T19529] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 356.049899][T19544] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3914'. [ 356.085720][T19544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.101284][T19544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.112759][T19544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.125235][T19549] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3916'. [ 356.136356][T19549] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3916'. [ 356.146829][T19547] ipt_REJECT: TCP_RESET invalid for non-tcp [ 356.155111][T19547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3915'. [ 356.165411][T19549] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3916'. [ 356.182627][T19547] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3915'. [ 356.192323][T19547] block nbd0: not configured, cannot reconfigure [ 356.250371][ T5901] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.343898][T19559] netlink: 'syz.4.3919': attribute type 1 has an invalid length. [ 356.440961][T19563] tipc: Started in network mode [ 356.447897][T19563] tipc: Node identity ac14140f, cluster identity 4711 [ 356.459837][T19563] tipc: New replicast peer: 255.255.255.255 [ 356.466256][T19563] tipc: Enabled bearer , priority 10 [ 356.477756][T19563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3922'. [ 356.732175][T19577] netlink: 'syz.0.3927': attribute type 3 has an invalid length. [ 356.743101][T19575] syzkaller1: entered promiscuous mode [ 356.748783][T19575] syzkaller1: entered allmulticast mode [ 356.761814][T19577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.892024][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.161272][T19596] syzkaller1: entered promiscuous mode [ 357.187002][T19596] syzkaller1: entered allmulticast mode [ 357.515921][T19620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.578632][ T10] tipc: Node number set to 2886997007 [ 358.160847][T19643] IPVS: ip_vs_add_dest(): server weight less than zero [ 358.472657][T19659] netlink: 'syz.2.3952': attribute type 1 has an invalid length. [ 358.482418][T19659] netlink: 'syz.2.3952': attribute type 2 has an invalid length. [ 358.522646][T19664] batman_adv: batadv0: Adding interface: dummy0 [ 358.554280][T19664] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.618974][T19659] netlink: 'syz.2.3952': attribute type 13 has an invalid length. [ 358.638731][T19664] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 358.915264][T19666] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.050215][T19666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.067384][T19666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.258037][T19685] __nla_validate_parse: 5 callbacks suppressed [ 359.258113][T19685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3956'. [ 359.296802][T19683] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 359.317068][T13247] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.326645][T13247] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.422405][T13247] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.439867][T13247] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.500133][T19699] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3960'. [ 359.509563][T19699] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3960'. [ 359.658938][T19708] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3963'. [ 359.671148][T19708] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3963'. [ 359.701338][T19711] ip6gre2: entered promiscuous mode [ 359.833412][T19718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.904367][T19722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3968'. [ 360.058840][T19730] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3971'. [ 360.069592][T19730] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3971'. [ 360.093528][T19730] syzkaller0: entered promiscuous mode [ 360.099444][T19730] syzkaller0: entered allmulticast mode [ 360.544196][T19757] netlink: 'syz.3.3976': attribute type 1 has an invalid length. [ 360.554786][T19757] netlink: 'syz.3.3976': attribute type 2 has an invalid length. [ 360.564610][T19757] netlink: 'syz.3.3976': attribute type 1 has an invalid length. [ 360.591824][T19757] netlink: 'syz.3.3976': attribute type 2 has an invalid length. [ 360.865270][T19769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3981'. [ 360.902711][T19773] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3983'. [ 361.013887][T19769] netlink: 'syz.3.3981': attribute type 1 has an invalid length. [ 361.048593][ T5849] Bluetooth: hci1: command 0x0405 tx timeout [ 361.122828][T19779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.197548][T19790] netlink: 'syz.1.3990': attribute type 1 has an invalid length. [ 361.211209][T19792] netlink: 'syz.1.3990': attribute type 1 has an invalid length. [ 361.784059][T19831] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 361.793646][T19831] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 361.994908][T19842] veth0_virt_wifi: entered allmulticast mode [ 362.031166][T19842] team0: Port device veth0_virt_wifi added [ 362.647569][T19876] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 362.660366][T19876] syzkaller0: entered promiscuous mode [ 362.665873][T19876] syzkaller0: entered allmulticast mode [ 362.750924][T19864] tipc: Enabled bearer , priority 0 [ 362.778776][T19888] xt_hashlimit: max too large, truncated to 1048576 [ 362.843962][T19861] tipc: Resetting bearer [ 362.881215][T19861] tipc: Disabling bearer [ 363.138702][ T5849] Bluetooth: hci1: command 0x0405 tx timeout [ 363.376732][T19921] veth0: entered promiscuous mode [ 363.390967][T19921] veth0: left promiscuous mode [ 363.455635][T19927] 8021q: adding VLAN 0 to HW filter on device bond3 [ 363.467532][T19928] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 363.480494][T19928] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 363.684607][T19944] nbd: must specify an index to disconnect [ 363.722614][T19947] geneve2: entered promiscuous mode [ 364.039506][T19951] validate_nla: 6 callbacks suppressed [ 364.039525][T19951] netlink: 'syz.3.4046': attribute type 16 has an invalid length. [ 364.057870][T19951] netlink: 'syz.3.4046': attribute type 17 has an invalid length. [ 364.095369][T19951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.362088][T19983] Unsupported ieee802154 address type: 0 [ 364.412356][T19980] nbd0: detected capacity change from 0 to 127 [ 364.460141][T19994] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 364.539744][T20006] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 364.556039][T19998] !: renamed from dummy0 [ 364.573885][ T11] block nbd1: Connection timed out, retrying (0/1 alive) [ 364.583912][ T11] block nbd1: Connection timed out, retrying (0/1 alive) [ 364.592331][ T11] block nbd1: Connection timed out, retrying (0/1 alive) [ 364.604454][T20011] block nbd1: Dead connection, failed to find a fallback [ 364.616455][ T11] block nbd1: Connection timed out, retrying (0/1 alive) [ 365.224101][ T5849] block nbd0: Receive control failed (result -104) [ 365.367300][T20040] netlink: 'syz.4.4064': attribute type 1 has an invalid length. [ 365.379693][T20041] __nla_validate_parse: 13 callbacks suppressed [ 365.379711][T20041] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4063'. [ 365.388377][T20040] netlink: 'syz.4.4064': attribute type 1 has an invalid length. [ 365.409719][T20041] openvswitch: netlink: Flow key attr not present in new flow. [ 365.525441][T20049] block nbd3: Unsupported socket: should be TCP or UNIX. [ 365.614364][T20054] netlink: 'syz.4.4068': attribute type 1 has an invalid length. [ 365.626910][T20054] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4068'. [ 365.647999][T20056] xt_ecn: cannot match TCP bits for non-tcp packets [ 365.913136][T20077] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4074'. [ 365.931049][T20074] netlink: 'syz.3.4076': attribute type 1 has an invalid length. [ 365.934482][T20077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4074'. [ 366.083073][T20088] netlink: 'syz.2.4079': attribute type 12 has an invalid length. [ 366.107556][T20088] netlink: 'syz.2.4079': attribute type 1 has an invalid length. [ 366.113440][T20090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4080'. [ 366.237470][T20096] vlan2: entered allmulticast mode [ 366.288651][T20096] veth1: entered allmulticast mode [ 366.599190][ T4902] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.629008][ T4902] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.651776][ T4902] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.682537][ T4902] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.884303][T20141] tipc: Enabled bearer , priority 0 [ 366.928795][T20141] syzkaller0: entered promiscuous mode [ 366.973721][T20141] syzkaller0: entered allmulticast mode [ 367.015953][T20154] netlink: 'syz.1.4097': attribute type 11 has an invalid length. [ 367.033999][T20154] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4097'. [ 367.083327][T20150] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 367.092900][T20150] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 367.120847][T20141] tipc: Resetting bearer [ 367.151070][T20141] tipc: Disabling bearer [ 367.173856][T20162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4101'. [ 367.235799][T20160] tipc: Enabled bearer , priority 0 [ 367.258068][T20160] syzkaller0: entered promiscuous mode [ 367.273592][T20160] syzkaller0: entered allmulticast mode [ 367.283281][T20159] tipc: Enabling of bearer rejected, already enabled [ 367.307204][T20170] netlink: 'syz.4.4102': attribute type 1 has an invalid length. [ 367.316661][T20181] netlink: 'syz.4.4102': attribute type 1 has an invalid length. [ 367.363359][T20170] bond1: entered promiscuous mode [ 367.371672][T20170] 8021q: adding VLAN 0 to HW filter on device bond1 [ 367.398799][T20160] tipc: Resetting bearer [ 367.407756][T20158] tipc: Resetting bearer [ 367.412969][T20188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4103'. [ 367.438708][T20158] tipc: Disabling bearer [ 367.456049][T20192] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 367.473319][T20188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4103'. [ 367.543931][T20196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.553861][T20196] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.562081][T20196] batman_adv: batadv0: Interface activated: 0! [ 367.570864][T20196] batadv0: mtu less than device minimum [ 367.579562][T20196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 367.591666][T20196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 367.602836][T20196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 367.614018][T20196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 367.625207][T20196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 367.636380][T20196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 367.647629][T20196] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 368.408816][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 368.559204][T20226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4111'. [ 368.593265][T20212] tunl0: Caught tx_queue_len zero misconfig [ 368.679944][T20238] bridge0: entered promiscuous mode [ 368.706484][T20238] bridge0: entered allmulticast mode [ 369.046725][T20265] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 369.366326][T20278] lo speed is unknown, defaulting to 1000 [ 369.408697][T20278] lo speed is unknown, defaulting to 1000 [ 369.430784][T20278] lo speed is unknown, defaulting to 1000 [ 369.892632][T20278] infiniband sz1: set active [ 369.897420][T20278] infiniband sz1: added lo [ 369.902400][ T10] lo speed is unknown, defaulting to 1000 [ 369.964550][T20278] RDS/IB: sz1: added [ 369.971065][T20278] smc: adding ib device sz1 with port count 1 [ 369.981641][T20278] smc: ib device sz1 port 1 has no pnetid [ 369.987917][ T985] lo speed is unknown, defaulting to 1000 [ 369.996169][T20278] lo speed is unknown, defaulting to 1000 [ 370.155660][T20278] lo speed is unknown, defaulting to 1000 [ 370.295378][T20278] lo speed is unknown, defaulting to 1000 [ 370.447575][T20278] lo speed is unknown, defaulting to 1000 [ 370.671026][T20334] __nla_validate_parse: 9 callbacks suppressed [ 370.671074][T20334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4142'. [ 370.793689][T20340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4144'. [ 370.885075][T20334] team0: Port device veth0_virt_wifi removed [ 370.910720][T20340] bond4: Invalid ad_actor_system MAC address. [ 370.916812][T20340] bond4: option ad_actor_system: invalid value (1) [ 370.925861][T20340] bond4 (unregistering): Released all slaves [ 370.963383][T20278] lo speed is unknown, defaulting to 1000 [ 371.056107][T20352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4148'. [ 371.125964][T20352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4148'. [ 371.227813][T20357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4150'. [ 371.415101][T20278] lo speed is unknown, defaulting to 1000 [ 371.434834][T20375] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4156'. [ 371.491830][T20375] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4156'. [ 371.554680][T20388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4159'. [ 371.847171][T20407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4165'. [ 371.875456][T20278] lo speed is unknown, defaulting to 1000 [ 371.916224][T20407] bond0: Error: Cannot enslave bond to itself. [ 371.990042][T20411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.997600][T20411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.020890][T20413] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4169'. [ 372.031367][T20411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.037854][T20415] xt_addrtype: ipv6 does not support BROADCAST matching [ 372.051444][T20411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.063474][T20417] ip6t_srh: unknown srh match flags 4000 [ 372.111642][T20421] validate_nla: 1 callbacks suppressed [ 372.111659][T20421] netlink: 'syz.4.4170': attribute type 23 has an invalid length. [ 372.118484][T20422] netlink: 'syz.0.4171': attribute type 4 has an invalid length. [ 372.167671][T20417] gre0: entered promiscuous mode [ 372.177745][T20417] gre0: entered allmulticast mode [ 372.185165][T13247] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.207524][T13247] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.220826][T13247] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.231756][T13247] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.314564][T20278] lo speed is unknown, defaulting to 1000 [ 372.883615][T20278] lo speed is unknown, defaulting to 1000 [ 373.560487][T20508] netlink: 'syz.3.4195': attribute type 20 has an invalid length. [ 373.581526][T20510] netlink: 'syz.0.4197': attribute type 1 has an invalid length. [ 373.589676][T20510] netlink: 'syz.0.4197': attribute type 2 has an invalid length. [ 373.621427][ T4902] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.638968][ T4902] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.647720][ T4902] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.657548][T20508] netlink: 'syz.3.4195': attribute type 20 has an invalid length. [ 373.666169][ T4902] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.724975][T20522] sock: sock_timestamping_bind_phc: sock not bind to device [ 373.910136][T20531] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 373.963340][T20546] netlink: 'syz.1.4207': attribute type 23 has an invalid length. [ 373.972421][T20531] bond3 (unregistering): Released all slaves [ 374.015013][T20549] net_ratelimit: 13 callbacks suppressed [ 374.015025][T20549] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 374.018445][ T5901] IPVS: starting estimator thread 0... [ 374.035108][T20544] netlink: 'syz.1.4207': attribute type 23 has an invalid length. [ 374.043416][T20547] veth0_to_team: entered promiscuous mode [ 374.082597][T20544] netlink: 'syz.1.4207': attribute type 23 has an invalid length. [ 374.113863][T20544] netlink: 'syz.1.4207': attribute type 23 has an invalid length. [ 374.128709][T20551] IPVS: using max 31 ests per chain, 74400 per kthread [ 374.809713][T20011] block nbd1: shutting down sockets [ 374.815245][T20011] blk_print_req_error: 138 callbacks suppressed [ 374.815261][T20011] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.832296][T20011] buffer_io_error: 138 callbacks suppressed [ 374.832314][T20011] Buffer I/O error on dev nbd1, logical block 1, async page read [ 374.846695][T20011] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.856038][T20011] Buffer I/O error on dev nbd1, logical block 0, async page read [ 374.865967][T20011] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.875279][T20011] Buffer I/O error on dev nbd1, logical block 3, async page read [ 374.883201][T20011] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.892733][T20011] Buffer I/O error on dev nbd1, logical block 2, async page read [ 374.902343][ T9657] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.912593][ T9657] Buffer I/O error on dev nbd1, logical block 0, async page read [ 374.920874][ T9657] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.933029][ T9657] Buffer I/O error on dev nbd1, logical block 1, async page read [ 374.940966][ T9657] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.950542][ T9657] Buffer I/O error on dev nbd1, logical block 2, async page read [ 374.958497][ T9657] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.967615][ T9657] Buffer I/O error on dev nbd1, logical block 3, async page read [ 374.976108][ T9657] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 374.985527][ T9657] Buffer I/O error on dev nbd1, logical block 0, async page read [ 374.993549][ T9657] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 375.002704][ T9657] Buffer I/O error on dev nbd1, logical block 1, async page read [ 375.013706][ T9657] ldm_validate_partition_table(): Disk read failed. [ 375.022634][ T9657] Dev nbd1: unable to read RDB block 0 [ 375.031272][ T9657] nbd1: unable to read partition table [ 375.045568][ T9657] ldm_validate_partition_table(): Disk read failed. [ 375.057867][ T9657] Dev nbd1: unable to read RDB block 0 [ 375.083427][ T9657] nbd1: unable to read partition table [ 375.575459][T20601] batman_adv: batadv0: Interface deactivated: 0! [ 375.639369][T20601] batman_adv: batadv0: Removing interface: 0! [ 375.682971][T20603] __nla_validate_parse: 18 callbacks suppressed [ 375.683000][T20603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4223'. [ 375.783218][T20611] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4224'. [ 375.812181][T20615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4227'. [ 375.819867][T20611] workqueue: Failed to create a rescuer kthread for wq "phy4-mac-cmds": -EINTR [ 375.827391][T20615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4227'. [ 376.003909][T20624] 9: entered promiscuous mode [ 376.653453][T20668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4241'. [ 376.774342][T20677] Bluetooth: MGMT ver 1.23 [ 376.797890][T20681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4244'. [ 376.813368][T20679] netlink: 'syz.1.4245': attribute type 11 has an invalid length. [ 376.821838][T20679] netlink: 'syz.1.4245': attribute type 11 has an invalid length. [ 376.831261][T20679] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4245'. [ 377.044455][T20697] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4250'. [ 377.069974][T20697] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4250'. [ 377.090963][T20702] IPVS: ip_vs_edit_dest(): server weight less than zero [ 377.260560][T20712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.284784][T20710] validate_nla: 56 callbacks suppressed [ 377.284802][T20710] netlink: 'syz.3.4255': attribute type 1 has an invalid length. [ 377.411618][T20726] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4262'. [ 377.543772][T20724] wlan0 speed is unknown, defaulting to 1000 [ 378.030212][T20724] lo speed is unknown, defaulting to 1000 [ 378.579245][T20781] block nbd3: Unsupported socket: should be TCP or UNIX. [ 378.656577][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.690722][T20785] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 379.138671][T20806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.150483][T20808] nbd: must specify a size in bytes for the device [ 379.531875][T20825] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 379.739375][T20830] netlink: 'syz.4.4293': attribute type 1 has an invalid length. [ 379.834262][T20830] 8021q: adding VLAN 0 to HW filter on device bond2 [ 379.957215][T20835] bond2: (slave ip6gretap1): making interface the new active one [ 379.978409][T20844] netlink: 'syz.2.4297': attribute type 1 has an invalid length. [ 379.985165][T20835] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 380.141667][T20851] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.153319][T20862] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 380.572798][T20893] 8021q: VLANs not supported on gre0 [ 380.587848][ T5947] IPVS: starting estimator thread 0... [ 380.645446][T20900] IPVS: sh: FWM 3 0x00000003 - no destination available [ 380.678965][T20894] IPVS: using max 31 ests per chain, 74400 per kthread [ 380.854573][T20917] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 380.886567][T20917] dvmrp0: entered allmulticast mode [ 380.905293][T20917] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 381.218542][T20955] netlink: 'syz.0.4325': attribute type 9 has an invalid length. [ 381.554031][T20970] xt_hashlimit: invalid rate [ 381.865283][T20969] netlink: 'syz.4.4329': attribute type 11 has an invalid length. [ 381.901983][T20969] __nla_validate_parse: 15 callbacks suppressed [ 381.902003][T20969] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4329'. [ 382.131306][T20993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4335'. [ 382.147865][T20996] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4337'. [ 382.152610][T20998] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4336'. [ 382.166901][T20998] netlink: 35 bytes leftover after parsing attributes in process `syz.0.4336'. [ 382.173338][T20975] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.177856][T20998] netlink: 'syz.0.4336': attribute type 5 has an invalid length. [ 382.189962][T20975] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.196467][T20998] netlink: 'syz.0.4336': attribute type 6 has an invalid length. [ 382.225246][T20998] netlink: 35 bytes leftover after parsing attributes in process `syz.0.4336'. [ 382.372755][T20975] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.383641][T20975] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.418900][T21000] syzkaller1: entered allmulticast mode [ 382.483540][T20975] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.494819][T20975] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.617487][T20975] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 382.650681][T20975] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.666713][T20975] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.684230][T21026] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4342'. [ 382.762387][T21026] delete_channel: no stack [ 382.785584][T21036] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4345'. [ 382.800511][T21033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4346'. [ 382.947077][ T50] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.956492][ T50] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.975419][T21044] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4348'. [ 382.985527][T13242] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.999103][T13242] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.036814][T13242] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.048697][T13242] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.094584][T13242] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 383.108746][T13242] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.212754][T21054] ip6tnl0: Caught tx_queue_len zero misconfig [ 383.429933][T21070] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 383.858011][T21113] netlink: 'syz.2.4364': attribute type 8 has an invalid length. [ 384.278846][T21135] netlink: 'syz.2.4372': attribute type 3 has an invalid length. [ 384.379555][T21141] netlink: 'syz.3.4375': attribute type 1 has an invalid length. [ 384.912678][T21178] netlink: 'syz.2.4388': attribute type 1 has an invalid length. [ 384.960257][T21179] netlink: 'syz.4.4387': attribute type 32 has an invalid length. [ 385.018086][T21179] bond3: option coupled_control: invalid value (52) [ 385.031280][T21179] bond3 (unregistering): Released all slaves [ 385.111706][T21188] tipc: Enabled bearer , priority 0 [ 385.163535][T21193] syzkaller0: entered promiscuous mode [ 385.219668][T21193] syzkaller0: entered allmulticast mode [ 385.236598][T21188] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 385.301627][T21188] tipc: Resetting bearer [ 385.512766][T21186] tipc: Resetting bearer [ 385.554738][T21186] tipc: Disabling bearer [ 386.224584][T21261] syzkaller0: entered promiscuous mode [ 386.251312][T21261] syzkaller0: entered allmulticast mode [ 386.421966][T21277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.447526][T21277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.600051][T21290] xt_ecn: cannot match TCP bits for non-tcp packets [ 386.632766][T21285] netlink: 'syz.4.4417': attribute type 4 has an invalid length. [ 386.750859][T21301] 8021q: VLANs not supported on wg0 [ 386.999443][T21315] __nla_validate_parse: 26 callbacks suppressed [ 386.999461][T21315] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4428'. [ 387.048011][T21315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4428'. [ 387.070156][T21315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4428'. [ 387.080600][T21319] netlink: 'syz.0.4428': attribute type 1 has an invalid length. [ 387.146302][T21324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4430'. [ 387.311821][T21335] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4436'. [ 387.347528][T21336] netlink: 'syz.0.4435': attribute type 3 has an invalid length. [ 387.355742][T21336] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4435'. [ 394.649557][T20011] block nbd0: Possible stuck request ffff888064b25e80: control (read@0,1024B). Runtime 30 seconds [ 394.660280][T20011] block nbd0: Possible stuck request ffff888064b26040: control (read@1024,1024B). Runtime 30 seconds [ 394.671580][T20011] block nbd0: Possible stuck request ffff888064b26200: control (read@2048,1024B). Runtime 30 seconds [ 394.682551][T20011] block nbd0: Possible stuck request ffff888064b263c0: control (read@3072,1024B). Runtime 30 seconds [ 402.510438][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 402.519348][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 402.527430][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 402.537540][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 402.547478][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 402.577617][T21385] wlan0 speed is unknown, defaulting to 1000 [ 402.687550][T21385] lo speed is unknown, defaulting to 1000 [ 402.895326][T21385] chnl_net:caif_netlink_parms(): no params data found [ 402.961970][T21385] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.969711][T21385] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.976964][T21385] bridge_slave_0: entered allmulticast mode [ 402.984364][T21385] bridge_slave_0: entered promiscuous mode [ 402.992327][T21385] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.999701][T21385] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.006912][T21385] bridge_slave_1: entered allmulticast mode [ 403.014117][T21385] bridge_slave_1: entered promiscuous mode [ 403.042951][T21385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.055370][T21385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.086428][T21385] team0: Port device team_slave_0 added [ 403.094944][T21385] team0: Port device team_slave_1 added [ 403.120439][T21385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.127389][T21385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.153803][T21385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.165812][T21385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.173630][T21385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.200507][T21385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.243855][T21385] hsr_slave_0: entered promiscuous mode [ 403.250319][T21385] hsr_slave_1: entered promiscuous mode [ 403.256425][T21385] debugfs: 'hsr0' already exists in 'hsr' [ 403.263892][T21385] Cannot create hsr debugfs directory [ 403.939877][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 403.961018][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 403.969463][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 403.980533][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 403.988623][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 404.048132][ T5834] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 404.059239][ T5834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 404.067714][ T5834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 404.077994][ T5834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 404.086370][ T5834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 404.128467][ T5834] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 404.135366][T21397] wlan0 speed is unknown, defaulting to 1000 [ 404.143740][ T5834] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 404.154830][ T5834] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 404.160130][ T5155] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 404.164524][T21399] wlan0 speed is unknown, defaulting to 1000 [ 404.176339][ T5155] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 404.184145][ T5155] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 404.215168][ T5155] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 404.226341][ T5155] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 404.234573][ T5155] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 404.243000][ T5155] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 404.326553][T21403] wlan0 speed is unknown, defaulting to 1000 [ 404.335161][T21401] wlan0 speed is unknown, defaulting to 1000 [ 404.373374][T21397] lo speed is unknown, defaulting to 1000 [ 404.568510][ T5155] Bluetooth: hci3: command tx timeout [ 404.587878][T21399] lo speed is unknown, defaulting to 1000 [ 404.871113][T21397] chnl_net:caif_netlink_parms(): no params data found [ 404.957154][T21403] lo speed is unknown, defaulting to 1000 [ 405.129672][T21397] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.136810][T21397] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.163576][T21397] bridge_slave_0: entered allmulticast mode [ 405.171720][T21397] bridge_slave_0: entered promiscuous mode [ 405.197027][T21397] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.204970][T21397] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.214931][T21397] bridge_slave_1: entered allmulticast mode [ 405.223277][T21397] bridge_slave_1: entered promiscuous mode [ 405.254606][T21401] lo speed is unknown, defaulting to 1000 [ 405.361863][T21397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.381145][T21397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.497715][T21397] team0: Port device team_slave_0 added [ 405.515625][T21397] team0: Port device team_slave_1 added [ 405.539223][T21399] chnl_net:caif_netlink_parms(): no params data found [ 405.629497][T21397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.636453][T21397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.662694][T21397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.691543][T21397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.698714][T21397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.725449][T21397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.839011][T21397] hsr_slave_0: entered promiscuous mode [ 405.845395][T21397] hsr_slave_1: entered promiscuous mode [ 405.852435][T21397] debugfs: 'hsr0' already exists in 'hsr' [ 405.858168][T21397] Cannot create hsr debugfs directory [ 405.869958][T21399] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.877141][T21399] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.884688][T21399] bridge_slave_0: entered allmulticast mode [ 405.891794][T21399] bridge_slave_0: entered promiscuous mode [ 405.916552][T21399] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.923816][T21399] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.931676][T21399] bridge_slave_1: entered allmulticast mode [ 405.939165][T21399] bridge_slave_1: entered promiscuous mode [ 406.039038][T21399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.085754][T21399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.094914][ T5155] Bluetooth: hci6: command tx timeout [ 406.106718][T21403] chnl_net:caif_netlink_parms(): no params data found [ 406.169114][ T5155] Bluetooth: hci7: command tx timeout [ 406.206387][T21399] team0: Port device team_slave_0 added [ 406.238876][T21399] team0: Port device team_slave_1 added [ 406.249057][ T5155] Bluetooth: hci8: command tx timeout [ 406.258017][T21401] chnl_net:caif_netlink_parms(): no params data found [ 406.330324][ T5155] Bluetooth: hci9: command tx timeout [ 406.354066][T21399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.361263][T21399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.387666][T21399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.427257][T21399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.434444][T21399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.460803][T21399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.519487][T21403] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.526771][T21403] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.534140][T21403] bridge_slave_0: entered allmulticast mode [ 406.541693][T21403] bridge_slave_0: entered promiscuous mode [ 406.550070][T21403] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.557181][T21403] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.564605][T21403] bridge_slave_1: entered allmulticast mode [ 406.571819][T21403] bridge_slave_1: entered promiscuous mode [ 406.625740][T21403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.648912][ T5155] Bluetooth: hci3: command tx timeout [ 406.662477][T21403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.699473][T21399] hsr_slave_0: entered promiscuous mode [ 406.705899][T21399] hsr_slave_1: entered promiscuous mode [ 406.712218][T21399] debugfs: 'hsr0' already exists in 'hsr' [ 406.717938][T21399] Cannot create hsr debugfs directory [ 406.736998][T21401] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.744664][T21401] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.752436][T21401] bridge_slave_0: entered allmulticast mode [ 406.760185][T21401] bridge_slave_0: entered promiscuous mode [ 406.768147][T21401] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.775655][T21401] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.783199][T21401] bridge_slave_1: entered allmulticast mode [ 406.790501][T21401] bridge_slave_1: entered promiscuous mode [ 406.854763][T21403] team0: Port device team_slave_0 added [ 406.883905][T21403] team0: Port device team_slave_1 added [ 406.907747][T21401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.943408][T21401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.995637][T21403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.002928][T21403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.029809][T21403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.049108][T21401] team0: Port device team_slave_0 added [ 407.055645][T21403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.062831][T21403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.089265][T21403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.116769][T21401] team0: Port device team_slave_1 added [ 407.165959][T21401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.173438][T21401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.199904][T21401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.234426][T21401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.241798][T21401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.268205][T21401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.317153][T21403] hsr_slave_0: entered promiscuous mode [ 407.323946][T21403] hsr_slave_1: entered promiscuous mode [ 407.330351][T21403] debugfs: 'hsr0' already exists in 'hsr' [ 407.336074][T21403] Cannot create hsr debugfs directory [ 407.426043][T21401] hsr_slave_0: entered promiscuous mode [ 407.432936][T21401] hsr_slave_1: entered promiscuous mode [ 407.439671][T21401] debugfs: 'hsr0' already exists in 'hsr' [ 407.445396][T21401] Cannot create hsr debugfs directory [ 408.168863][ T5155] Bluetooth: hci6: command tx timeout [ 408.248791][ T5155] Bluetooth: hci7: command tx timeout [ 408.328593][ T5155] Bluetooth: hci8: command tx timeout [ 408.409341][ T5155] Bluetooth: hci9: command tx timeout [ 408.728617][ T5155] Bluetooth: hci3: command tx timeout [ 410.248660][ T52] Bluetooth: hci6: command tx timeout [ 410.328848][ T52] Bluetooth: hci7: command tx timeout [ 410.408669][ T52] Bluetooth: hci8: command tx timeout [ 410.488834][ T52] Bluetooth: hci9: command tx timeout [ 410.808789][ T52] Bluetooth: hci3: command tx timeout [ 411.451069][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 412.328712][ T5155] Bluetooth: hci6: command tx timeout [ 412.409816][ T5155] Bluetooth: hci7: command tx timeout [ 412.488943][ T5155] Bluetooth: hci8: command tx timeout [ 412.568668][ T52] Bluetooth: hci9: command tx timeout [ 416.568817][ T5155] Bluetooth: hci5: command 0x0406 tx timeout [ 424.730432][T20011] block nbd0: Possible stuck request ffff888064b25e80: control (read@0,1024B). Runtime 60 seconds [ 424.741378][T20011] block nbd0: Possible stuck request ffff888064b26040: control (read@1024,1024B). Runtime 60 seconds [ 424.752563][T20011] block nbd0: Possible stuck request ffff888064b26200: control (read@2048,1024B). Runtime 60 seconds [ 424.763624][T20011] block nbd0: Possible stuck request ffff888064b263c0: control (read@3072,1024B). Runtime 60 seconds [ 425.589909][ T5205] udevd[5205]: worker [13050] /devices/virtual/block/nbd0 is taking a long time [ 437.049597][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 440.095537][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.168753][ T5155] Bluetooth: hci0: command 0x0406 tx timeout [ 454.808868][T20011] block nbd0: Possible stuck request ffff888064b25e80: control (read@0,1024B). Runtime 90 seconds [ 454.819965][T20011] block nbd0: Possible stuck request ffff888064b26040: control (read@1024,1024B). Runtime 90 seconds [ 454.831042][T20011] block nbd0: Possible stuck request ffff888064b26200: control (read@2048,1024B). Runtime 90 seconds [ 454.842033][T20011] block nbd0: Possible stuck request ffff888064b263c0: control (read@3072,1024B). Runtime 90 seconds [ 462.767286][ T5155] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 462.776032][ T5155] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 462.784558][ T5155] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 462.792742][ T5155] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 462.800490][ T5155] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 462.833219][T21430] wlan0 speed is unknown, defaulting to 1000 [ 462.942204][T21430] lo speed is unknown, defaulting to 1000 [ 463.158908][T21430] chnl_net:caif_netlink_parms(): no params data found [ 463.225590][T21430] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.232977][T21430] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.240366][T21430] bridge_slave_0: entered allmulticast mode [ 463.247432][T21430] bridge_slave_0: entered promiscuous mode [ 463.255435][T21430] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.262677][T21430] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.270445][T21430] bridge_slave_1: entered allmulticast mode [ 463.277505][T21430] bridge_slave_1: entered promiscuous mode [ 463.307880][T21430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.320233][T21430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.350457][T21430] team0: Port device team_slave_0 added [ 463.359254][T21430] team0: Port device team_slave_1 added [ 463.386683][T21430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.394019][T21430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.420401][T21430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.433804][T21430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.441228][T21430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.468091][T21430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.508210][T21430] hsr_slave_0: entered promiscuous mode [ 463.515463][T21430] hsr_slave_1: entered promiscuous mode [ 463.522023][T21430] debugfs: 'hsr0' already exists in 'hsr' [ 463.527773][T21430] Cannot create hsr debugfs directory [ 464.143842][ T5155] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 464.154851][ T5155] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 464.163838][ T5155] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 464.173384][ T5155] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 464.190426][ T5155] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 464.284237][ T52] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 464.299022][ T52] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 464.307458][ T52] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 464.316583][ T52] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 464.325428][ T52] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 464.345017][ T5834] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 464.355294][ T5834] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 464.363972][ T5834] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 464.372021][ T5834] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 464.379793][ T5834] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 464.408961][T21442] wlan0 speed is unknown, defaulting to 1000 [ 464.482661][T21444] wlan0 speed is unknown, defaulting to 1000 [ 464.507960][ T52] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 464.516975][T21446] wlan0 speed is unknown, defaulting to 1000 [ 464.518211][ T52] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 464.531799][ T52] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 464.540202][ T52] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 464.547913][ T52] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 464.597724][T21448] wlan0 speed is unknown, defaulting to 1000 [ 464.660284][T21442] lo speed is unknown, defaulting to 1000 [ 464.884862][T21444] lo speed is unknown, defaulting to 1000 [ 464.890866][ T52] Bluetooth: hci10: command tx timeout [ 465.080281][T21442] chnl_net:caif_netlink_parms(): no params data found [ 465.248479][T21446] lo speed is unknown, defaulting to 1000 [ 465.320917][T21442] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.328150][T21442] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.335690][T21442] bridge_slave_0: entered allmulticast mode [ 465.344630][T21442] bridge_slave_0: entered promiscuous mode [ 465.371955][T21442] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.388820][T21442] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.396160][T21442] bridge_slave_1: entered allmulticast mode [ 465.422490][T21442] bridge_slave_1: entered promiscuous mode [ 465.540819][T21442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.576043][T21442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.585351][T21448] lo speed is unknown, defaulting to 1000 [ 465.657952][T21442] team0: Port device team_slave_0 added [ 465.676561][T21442] team0: Port device team_slave_1 added [ 465.726136][T13242] team0: left allmulticast mode [ 465.732034][T13242] geneve0: left allmulticast mode [ 465.737132][T13242] team0: left promiscuous mode [ 465.742665][T13242] geneve0: left promiscuous mode [ 465.749742][T13242] bridge0: port 1(team0) entered disabled state [ 466.007894][T13242] bond10 (unregistering): (slave gretap3): Releasing active interface [ 466.095970][T13242] bond3 (unregistering): (slave geneve2): Releasing active interface [ 466.127622][T13242] team0: Port device geneve0 removed [ 466.248780][ T52] Bluetooth: hci11: command tx timeout [ 466.268513][T13242] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 466.408726][ T52] Bluetooth: hci12: command tx timeout [ 466.488902][ T52] Bluetooth: hci13: command tx timeout [ 466.568791][ T52] Bluetooth: hci14: command tx timeout [ 466.722435][T13242] bond0 (unregistering): Released all slaves [ 466.823890][T13242] bond1 (unregistering): Released all slaves [ 466.927717][T13242] bond2 (unregistering): Released all slaves [ 466.979184][ T52] Bluetooth: hci10: command tx timeout [ 467.035575][T13242] bond3 (unregistering): Released all slaves [ 467.047596][T13242] bond4 (unregistering): Released all slaves [ 467.061215][T13242] bond5 (unregistering): Released all slaves [ 467.073753][T13242] bond6 (unregistering): Released all slaves [ 467.085910][T13242] bond7 (unregistering): Released all slaves [ 467.098254][T13242] bond8 (unregistering): Released all slaves [ 467.206433][T13242] bond9 (unregistering): (slave veth3): Releasing active interface [ 467.219753][T13242] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 467.229814][T13242] bond9 (unregistering): (slave veth5): Releasing active interface [ 467.239276][T13242] bond9 (unregistering): Released all slaves [ 467.251994][T13242] bond10 (unregistering): Released all slaves [ 467.354267][T13242] bond11 (unregistering): Released all slaves [ 467.451488][T13242] bond12 (unregistering): Released all slaves [ 467.552859][T13242] bond13 (unregistering): Released all slaves [ 467.566221][T13242] bond14 (unregistering): Released all slaves [ 467.673021][T13242] bond15 (unregistering): Released all slaves [ 467.685215][T13242] bond16 (unregistering): Released all slaves [ 467.755507][T21442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.762861][T21442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.790300][T21442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.823436][T21442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.831254][T21442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.857795][T21442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.033609][T21442] hsr_slave_0: entered promiscuous mode [ 468.042152][T21442] hsr_slave_1: entered promiscuous mode [ 468.048257][T21442] debugfs: 'hsr0' already exists in 'hsr' [ 468.054671][T21442] Cannot create hsr debugfs directory [ 468.103090][T21444] chnl_net:caif_netlink_parms(): no params data found [ 468.232476][T21446] chnl_net:caif_netlink_parms(): no params data found [ 468.328961][ T52] Bluetooth: hci11: command tx timeout [ 468.364489][T21444] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.371875][T21444] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.379744][T21444] bridge_slave_0: entered allmulticast mode [ 468.386837][T21444] bridge_slave_0: entered promiscuous mode [ 468.422740][T21444] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.435867][T21444] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.443650][T21444] bridge_slave_1: entered allmulticast mode [ 468.451235][T21444] bridge_slave_1: entered promiscuous mode [ 468.488678][ T52] Bluetooth: hci12: command tx timeout [ 468.531425][T21448] chnl_net:caif_netlink_parms(): no params data found [ 468.560294][T21444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.570945][ T52] Bluetooth: hci13: command tx timeout [ 468.587395][T21446] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.595992][T21446] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.603496][T21446] bridge_slave_0: entered allmulticast mode [ 468.610855][T21446] bridge_slave_0: entered promiscuous mode [ 468.620712][T21444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.640264][T21446] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.647449][T21446] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.654955][T21446] bridge_slave_1: entered allmulticast mode [ 468.658792][ T52] Bluetooth: hci14: command tx timeout [ 468.662906][T21446] bridge_slave_1: entered promiscuous mode [ 468.752143][T21444] team0: Port device team_slave_0 added [ 468.760927][T21446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.782143][T21444] team0: Port device team_slave_1 added [ 468.791200][T21446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.879757][T21444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.886727][T21444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.914716][T21444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.935375][T21446] team0: Port device team_slave_0 added [ 468.941297][T21448] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.948839][T21448] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.956082][T21448] bridge_slave_0: entered allmulticast mode [ 468.963583][T21448] bridge_slave_0: entered promiscuous mode [ 468.971880][T21444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.981798][T21444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.008206][T21444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.022050][T21446] team0: Port device team_slave_1 added [ 469.035976][T21448] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.043431][T21448] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.051092][T21448] bridge_slave_1: entered allmulticast mode [ 469.058152][T21448] bridge_slave_1: entered promiscuous mode [ 469.058703][ T52] Bluetooth: hci10: command tx timeout [ 469.101967][T21446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.109717][T21446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.136141][T21446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.170285][T21448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.182747][T21446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.189885][T21446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.216186][T21446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.241448][T21448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.297857][T21448] team0: Port device team_slave_0 added [ 469.320451][T21444] hsr_slave_0: entered promiscuous mode [ 469.327021][T21444] hsr_slave_1: entered promiscuous mode [ 469.334189][T21444] debugfs: 'hsr0' already exists in 'hsr' [ 469.340281][T21444] Cannot create hsr debugfs directory [ 469.357350][T21448] team0: Port device team_slave_1 added [ 469.442891][T21448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.450184][T21448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.476316][T21448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.492739][T21446] hsr_slave_0: entered promiscuous mode [ 469.499336][T21446] hsr_slave_1: entered promiscuous mode [ 469.505541][T21446] debugfs: 'hsr0' already exists in 'hsr' [ 469.511495][T21446] Cannot create hsr debugfs directory [ 469.532924][T21448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.540155][T21448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.566334][T21448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.577771][T13242] 9: left promiscuous mode [ 469.665857][T13242] : left promiscuous mode [ 469.737612][T21448] hsr_slave_0: entered promiscuous mode [ 469.744801][T21448] hsr_slave_1: entered promiscuous mode [ 469.751104][T21448] debugfs: 'hsr0' already exists in 'hsr' [ 469.756946][T21448] Cannot create hsr debugfs directory [ 469.768176][T13242] tipc: Disabling bearer [ 469.779499][T13242] tipc: Left network mode [ 469.809400][T13242] IPVS: stopping backup sync thread 10336 ... [ 470.401678][T13242] hsr_slave_0: left promiscuous mode [ 470.407544][T13242] hsr_slave_1: left promiscuous mode [ 470.419359][ T52] Bluetooth: hci11: command tx timeout [ 470.571060][ T52] Bluetooth: hci12: command tx timeout [ 470.648956][ T52] Bluetooth: hci13: command tx timeout [ 470.740118][ T52] Bluetooth: hci14: command tx timeout [ 471.130951][ T52] Bluetooth: hci10: command tx timeout [ 471.519591][T13242] IPVS: stop unused estimator thread 0... [ 472.488714][ T52] Bluetooth: hci11: command tx timeout [ 472.648943][ T52] Bluetooth: hci12: command tx timeout [ 472.731858][ T52] Bluetooth: hci13: command tx timeout [ 472.808920][ T52] Bluetooth: hci14: command tx timeout [ 484.890408][T20011] block nbd0: Possible stuck request ffff888064b25e80: control (read@0,1024B). Runtime 120 seconds [ 484.901307][T20011] block nbd0: Possible stuck request ffff888064b26040: control (read@1024,1024B). Runtime 120 seconds [ 484.912507][T20011] block nbd0: Possible stuck request ffff888064b26200: control (read@2048,1024B). Runtime 120 seconds [ 484.923660][T20011] block nbd0: Possible stuck request ffff888064b263c0: control (read@3072,1024B). Runtime 120 seconds [ 493.368729][ T52] Bluetooth: hci1: command 0x0405 tx timeout [ 501.531067][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.648586][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 514.970009][T20011] block nbd0: Possible stuck request ffff888064b25e80: control (read@0,1024B). Runtime 150 seconds [ 514.980979][T20011] block nbd0: Possible stuck request ffff888064b26040: control (read@1024,1024B). Runtime 150 seconds [ 514.992135][T20011] block nbd0: Possible stuck request ffff888064b26200: control (read@2048,1024B). Runtime 150 seconds [ 515.003176][T20011] block nbd0: Possible stuck request ffff888064b263c0: control (read@3072,1024B). Runtime 150 seconds [ 523.482309][ T5834] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 523.492979][ T5834] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 523.501193][ T5834] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 523.509524][ T5834] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 523.517176][ T5834] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 523.650529][T21475] lo speed is unknown, defaulting to 1000 [ 523.863512][T21475] chnl_net:caif_netlink_parms(): no params data found [ 523.927711][T21475] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.935178][T21475] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.942572][T21475] bridge_slave_0: entered allmulticast mode [ 523.950451][T21475] bridge_slave_0: entered promiscuous mode [ 523.958088][T21475] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.965647][T21475] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.972924][T21475] bridge_slave_1: entered allmulticast mode [ 523.980182][T21475] bridge_slave_1: entered promiscuous mode [ 524.010211][T21475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.022080][T21475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.053259][T21475] team0: Port device team_slave_0 added [ 524.061153][T21475] team0: Port device team_slave_1 added [ 524.087351][T21475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.094376][T21475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.120852][T21475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.134804][T21475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.141858][T21475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.167932][T21475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.208195][T21475] hsr_slave_0: entered promiscuous mode [ 524.214866][T21475] hsr_slave_1: entered promiscuous mode [ 524.221250][T21475] debugfs: 'hsr0' already exists in 'hsr' [ 524.226964][T21475] Cannot create hsr debugfs directory [ 524.939290][ T5834] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 524.951294][ T5834] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 524.959522][ T5834] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 524.967510][ T5834] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 524.977217][ T5834] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 525.025881][ T5834] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 525.036263][ T5834] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 525.044668][ T5834] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 525.057641][ T5834] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 525.067076][ T5834] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 525.096916][ T52] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 525.109851][ T52] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 525.126503][ T52] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 525.138254][ T52] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 525.149540][ T52] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 525.166675][ T5155] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 525.185410][ T5155] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 525.194675][ T5155] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 525.210582][ T5155] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 525.229154][ T5155] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 525.344072][T21487] lo speed is unknown, defaulting to 1000 [ 525.571169][T21489] lo speed is unknown, defaulting to 1000 [ 525.608813][ T5155] Bluetooth: hci15: command tx timeout [ 525.885709][T21491] lo speed is unknown, defaulting to 1000 [ 525.926912][T21487] chnl_net:caif_netlink_parms(): no params data found [ 526.180708][T21493] lo speed is unknown, defaulting to 1000 [ 526.237092][T21487] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.244932][T21487] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.253208][T21487] bridge_slave_0: entered allmulticast mode [ 526.261759][T21487] bridge_slave_0: entered promiscuous mode [ 526.301400][T21487] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.309320][T21487] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.316654][T21487] bridge_slave_1: entered allmulticast mode [ 526.325278][T21487] bridge_slave_1: entered promiscuous mode [ 526.442931][T21487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.470106][T21487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.527449][T21487] team0: Port device team_slave_0 added [ 526.539504][T21489] chnl_net:caif_netlink_parms(): no params data found [ 526.576019][T21487] team0: Port device team_slave_1 added [ 526.637705][T21487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.644956][T21487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.671776][T21487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.695568][T21487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.703400][T21487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.730703][T21487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.804453][T21489] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.812613][T21489] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.820380][T21489] bridge_slave_0: entered allmulticast mode [ 526.827497][T21489] bridge_slave_0: entered promiscuous mode [ 526.869446][T21489] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.878424][T21489] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.886032][T21489] bridge_slave_1: entered allmulticast mode [ 526.894942][T21489] bridge_slave_1: entered promiscuous mode [ 526.941677][T21487] hsr_slave_0: entered promiscuous mode [ 526.949762][T21487] hsr_slave_1: entered promiscuous mode [ 526.955893][T21487] debugfs: 'hsr0' already exists in 'hsr' [ 526.962006][T21487] Cannot create hsr debugfs directory [ 527.006866][T21491] chnl_net:caif_netlink_parms(): no params data found [ 527.032010][T21489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.048729][ T5155] Bluetooth: hci16: command tx timeout [ 527.065549][T21489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.133075][T21495] Bluetooth: hci17: command tx timeout [ 527.187547][T21489] team0: Port device team_slave_0 added [ 527.200191][T21493] chnl_net:caif_netlink_parms(): no params data found [ 527.209519][ T5834] Bluetooth: hci18: command tx timeout [ 527.232034][T21489] team0: Port device team_slave_1 added [ 527.289006][ T5834] Bluetooth: hci19: command tx timeout [ 527.339785][T21491] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.346973][T21491] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.354607][T21491] bridge_slave_0: entered allmulticast mode [ 527.362468][T21491] bridge_slave_0: entered promiscuous mode [ 527.372407][T21489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.379543][T21489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.405847][T21489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.426367][T21491] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.434062][T21491] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.441611][T21491] bridge_slave_1: entered allmulticast mode [ 527.448876][T21491] bridge_slave_1: entered promiscuous mode [ 527.456471][T21489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.463826][T21489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.490309][T21489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.579586][T21491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.595336][T21493] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.602951][T21493] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.610750][T21493] bridge_slave_0: entered allmulticast mode [ 527.617829][T21493] bridge_slave_0: entered promiscuous mode [ 527.626459][T21493] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.633791][T21493] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.641412][T21493] bridge_slave_1: entered allmulticast mode [ 527.649769][T21493] bridge_slave_1: entered promiscuous mode [ 527.659046][T21491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.688659][ T5834] Bluetooth: hci15: command tx timeout [ 527.759897][T21491] team0: Port device team_slave_0 added [ 527.772780][T21489] hsr_slave_0: entered promiscuous mode [ 527.779629][T21489] hsr_slave_1: entered promiscuous mode [ 527.785735][T21489] debugfs: 'hsr0' already exists in 'hsr' [ 527.791779][T21489] Cannot create hsr debugfs directory [ 527.801186][T21493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.824690][T21491] team0: Port device team_slave_1 added [ 527.833436][T21493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.903781][T21491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.911517][T21491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.937914][T21491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.963596][T21493] team0: Port device team_slave_0 added [ 527.970388][T21491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.977345][T21491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.003716][T21491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.036755][T21493] team0: Port device team_slave_1 added [ 528.112895][T21493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.120104][T21493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.146613][T21493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.174959][T21493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.182444][T21493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.209023][T21493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.236277][T21491] hsr_slave_0: entered promiscuous mode [ 528.242940][T21491] hsr_slave_1: entered promiscuous mode [ 528.249922][T21491] debugfs: 'hsr0' already exists in 'hsr' [ 528.255638][T21491] Cannot create hsr debugfs directory [ 528.358749][T21493] hsr_slave_0: entered promiscuous mode [ 528.365239][T21493] hsr_slave_1: entered promiscuous mode [ 528.371969][T21493] debugfs: 'hsr0' already exists in 'hsr' [ 528.377681][T21493] Cannot create hsr debugfs directory [ 529.128790][ T5834] Bluetooth: hci16: command tx timeout [ 529.212120][ T5834] Bluetooth: hci6: command 0x0406 tx timeout [ 529.218191][ T5834] Bluetooth: hci8: command 0x0406 tx timeout [ 529.225378][ T5834] Bluetooth: hci7: command 0x0406 tx timeout [ 529.225819][T21515] Bluetooth: hci9: command 0x0406 tx timeout [ 529.232317][ T5834] Bluetooth: hci17: command tx timeout [ 529.232405][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 529.300987][ T52] Bluetooth: hci18: command tx timeout [ 529.368817][ T52] Bluetooth: hci19: command tx timeout [ 529.768817][ T52] Bluetooth: hci15: command tx timeout [ 531.208529][ T52] Bluetooth: hci16: command tx timeout [ 531.288545][ T52] Bluetooth: hci17: command tx timeout [ 531.369296][ T52] Bluetooth: hci18: command tx timeout [ 531.448860][ T52] Bluetooth: hci19: command tx timeout [ 531.848812][ T52] Bluetooth: hci15: command tx timeout [ 532.527746][ T1139] bond4 (unregistering): (slave geneve2): Releasing active interface [ 533.079283][ T1139] bond12 (unregistering): (slave bridge12): Releasing backup interface [ 533.087560][ T1139] bridge12 (unregistering): left promiscuous mode [ 533.094029][ T1139] bridge12 (unregistering): left allmulticast mode [ 533.296239][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.298755][ T52] Bluetooth: hci16: command tx timeout [ 533.310765][ T1139] bond_slave_0: left allmulticast mode [ 533.319748][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.329155][ T1139] bond_slave_1: left allmulticast mode [ 533.336272][ T1139] bond0 (unregistering): (slave team0): Releasing backup interface [ 533.345049][ T1139] team0: left allmulticast mode [ 533.350099][ T1139] C: left allmulticast mode [ 533.354582][ T1139] team_slave_1: left allmulticast mode [ 533.360166][ T1139] dummy0: left allmulticast mode [ 533.365453][ T1139] bond0 (unregistering): Released all slaves [ 533.378495][ T52] Bluetooth: hci17: command tx timeout [ 533.458754][ T52] Bluetooth: hci18: command tx timeout [ 533.473526][ T1139] bond1 (unregistering): Released all slaves [ 533.485767][ T1139] bond2 (unregistering): Released all slaves [ 533.539039][ T52] Bluetooth: hci19: command tx timeout [ 533.593129][ T1139] bond3 (unregistering): Released all slaves [ 533.690144][ T1139] bond4 (unregistering): Released all slaves [ 533.705467][ T1139] bond5 (unregistering): Released all slaves [ 533.718904][ T1139] bond6 (unregistering): Released all slaves [ 533.734375][ T1139] bond7 (unregistering): Released all slaves [ 533.746518][ T1139] bond8 (unregistering): Released all slaves [ 533.852730][ T1139] bond9 (unregistering): Released all slaves [ 533.864853][ T1139] bond10 (unregistering): Released all slaves [ 533.965708][ T1139] bond11 (unregistering): Released all slaves [ 534.064104][ T1139] bond12 (unregistering): Released all slaves [ 534.076621][ T1139] bond13 (unregistering): Released all slaves [ 534.228379][ T1139] : left promiscuous mode [ 534.280290][ T1139] tipc: Disabling bearer [ 534.286493][ T1139] tipc: Disabling bearer [ 534.294438][ T1139] tipc: Disabling bearer [ 534.301312][ T1139] tipc: Left network mode [ 534.696493][ T1139] hsr_slave_0: left promiscuous mode [ 534.703168][ T1139] hsr_slave_1: left promiscuous mode [ 534.709161][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.716574][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.728006][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.735690][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.749700][ T1139] veth1_macvtap: left promiscuous mode [ 534.847774][ T1139] pimreg3 (unregistering): left allmulticast mode [ 534.914052][ T1139] team0 (unregistering): Port device veth0_virt_wifi removed [ 535.074133][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 535.114371][ T1139] team0 (unregistering): Port device C removed [ 535.348031][ T1139] team0 (unregistering): Port device dummy0 removed [ 535.452529][ T1139] lo (unregistering): left allmulticast mode [ 535.717929][ T1139] IPVS: stop unused estimator thread 0... [ 543.128830][ T31] INFO: task syz.0.4435:21334 blocked for more than 143 seconds. [ 543.136634][ T31] Not tainted syzkaller #0 [ 543.141627][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 543.150375][ T31] task:syz.0.4435 state:D stack:28152 pid:21334 tgid:21332 ppid:16051 task_flags:0x400140 flags:0x00080002 [ 543.162413][ T31] Call Trace: [ 543.165722][ T31] [ 543.168759][ T31] __schedule+0x14bc/0x5000 [ 543.173294][ T31] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 543.178148][ T31] ? schedule+0x91/0x360 [ 543.182748][ T31] schedule+0x165/0x360 [ 543.186932][ T31] schedule_preempt_disabled+0x13/0x30 [ 543.192751][ T31] __mutex_lock+0x7e6/0x1350 [ 543.197370][ T31] ? __mutex_lock+0x5bb/0x1350 [ 543.202284][ T31] ? genl_rcv_msg+0x10d/0x790 [ 543.208725][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 543.214046][ T31] ? stack_trace_save+0x9c/0xe0 [ 543.245710][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 543.267166][ T31] ? radix_tree_lookup+0x240/0x290 [ 543.276289][ T31] genl_rcv_msg+0x10d/0x790 [ 543.280935][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 543.285973][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 543.291155][ T31] netlink_rcv_skb+0x208/0x470 [ 543.295912][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 543.300970][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 543.306256][ T31] ? down_read+0x274/0x2e0 [ 543.310739][ T31] ? genl_rcv+0xd/0x40 [ 543.314814][ T31] genl_rcv+0x28/0x40 [ 543.318821][ T31] netlink_unicast+0x82f/0x9e0 [ 543.323579][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 543.328907][ T31] ? netlink_sendmsg+0x642/0xb30 [ 543.333850][ T31] ? skb_put+0x11b/0x210 [ 543.338164][ T31] netlink_sendmsg+0x805/0xb30 [ 543.343004][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 543.348377][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 543.353325][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 543.358695][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 543.364004][ T31] __sock_sendmsg+0x21c/0x270 [ 543.368990][ T31] __sys_sendto+0x3bd/0x520 [ 543.373520][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 543.378610][ T31] ? count_memcg_event_mm+0x21/0x260 [ 543.383897][ T31] ? exc_page_fault+0x82/0x100 [ 543.388737][ T31] __x64_sys_sendto+0xde/0x100 [ 543.393497][ T31] do_syscall_64+0xfa/0xf80 [ 543.397981][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.404214][ T31] ? clear_bhb_loop+0x60/0xb0 [ 543.409003][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.414899][ T31] RIP: 0033:0x7f75edd915dc [ 543.419345][ T31] RSP: 002b:00007f75eebc1ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 543.427744][ T31] RAX: ffffffffffffffda RBX: 00007f75eebc1fc0 RCX: 00007f75edd915dc [ 543.435786][ T31] RDX: 0000000000000028 RSI: 00007f75eebc2010 RDI: 0000000000000009 [ 543.443798][ T31] RBP: 0000000000000000 R08: 00007f75eebc1f14 R09: 000000000000000c [ 543.452314][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 543.460354][ T31] R13: 00007f75eebc1f68 R14: 00007f75eebc2010 R15: 0000000000000000 [ 543.468374][ T31] [ 543.471409][ T31] INFO: task syz.0.4435:21336 blocked for more than 143 seconds. [ 543.479201][ T31] Not tainted syzkaller #0 [ 543.484218][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 543.492946][ T31] task:syz.0.4435 state:D stack:25848 pid:21336 tgid:21332 ppid:16051 task_flags:0x480140 flags:0x00080002 [ 543.504917][ T31] Call Trace: [ 543.508186][ T31] [ 543.511286][ T31] __schedule+0x14bc/0x5000 [ 543.515794][ T31] ? __pfx___schedule+0x10/0x10 [ 543.520700][ T31] ? schedule+0x91/0x360 [ 543.524946][ T31] schedule+0x165/0x360 [ 543.529279][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 543.534754][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 543.540898][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 543.546971][ T31] ? percpu_ref_kill_and_confirm+0x8a/0x120 [ 543.552899][ T31] ? __blk_freeze_queue_start+0x263/0x380 [ 543.558699][ T31] queue_limits_commit_update_frozen+0x5d/0x3e0 [ 543.564950][ T31] nbd_set_size+0x47e/0x6a0 [ 543.569506][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 543.574536][ T31] ? nla_memcpy+0x5b/0xc0 [ 543.578963][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 543.583904][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 543.589418][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 543.595403][ T31] ? bpf_lsm_capable+0x9/0x20 [ 543.600108][ T31] ? security_capable+0x7e/0x2e0 [ 543.605036][ T31] ? radix_tree_lookup+0x240/0x290 [ 543.611170][ T31] nbd_genl_reconfigure+0x414/0x1a50 [ 543.616493][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 543.622404][ T31] ? rcu_is_watching+0x15/0xb0 [ 543.627175][ T31] ? __nla_parse+0x40/0x60 [ 543.631616][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 543.637936][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 543.643522][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 543.649617][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 543.654538][ T31] genl_rcv_msg+0x60e/0x790 [ 543.659273][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 543.664288][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 543.670033][ T31] netlink_rcv_skb+0x208/0x470 [ 543.674784][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 543.679840][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 543.685115][ T31] ? down_read+0x274/0x2e0 [ 543.689587][ T31] ? genl_rcv+0xd/0x40 [ 543.693658][ T31] genl_rcv+0x28/0x40 [ 543.697622][ T31] netlink_unicast+0x82f/0x9e0 [ 543.702436][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 543.707710][ T31] ? netlink_sendmsg+0x642/0xb30 [ 543.712710][ T31] ? skb_put+0x11b/0x210 [ 543.716944][ T31] netlink_sendmsg+0x805/0xb30 [ 543.721737][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 543.727007][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 543.732122][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 543.737395][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 543.742707][ T31] __sock_sendmsg+0x21c/0x270 [ 543.747392][ T31] ____sys_sendmsg+0x505/0x820 [ 543.752270][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 543.757547][ T31] ? import_iovec+0x74/0xa0 [ 543.762075][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 543.766739][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 543.772254][ T31] ? futex_wake+0x4b2/0x560 [ 543.776796][ T31] ? __fget_files+0x2a/0x420 [ 543.781426][ T31] ? __fget_files+0x3a0/0x420 [ 543.786091][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 543.791066][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 543.796517][ T31] ? do_syscall_64+0xbe/0xf80 [ 543.801215][ T31] do_syscall_64+0xfa/0xf80 [ 543.805703][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.811789][ T31] ? clear_bhb_loop+0x60/0xb0 [ 543.816467][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.822406][ T31] RIP: 0033:0x7f75edd8f749 [ 543.826822][ T31] RSP: 002b:00007f75eeba2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.835267][ T31] RAX: ffffffffffffffda RBX: 00007f75edfe6090 RCX: 00007f75edd8f749 [ 543.843402][ T31] RDX: 0000000000004000 RSI: 0000200000000200 RDI: 0000000000000004 [ 543.851764][ T31] RBP: 00007f75ede13f91 R08: 0000000000000000 R09: 0000000000000000 [ 543.859898][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.867887][ T31] R13: 00007f75edfe6128 R14: 00007f75edfe6090 R15: 00007ffec6c81118 [ 543.875907][ T31] [ 543.878965][ T31] INFO: task syz.0.4435:21337 blocked for more than 144 seconds. [ 543.886670][ T31] Not tainted syzkaller #0 [ 543.891671][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 543.900393][ T31] task:syz.0.4435 state:D stack:26744 pid:21337 tgid:21332 ppid:16051 task_flags:0x400040 flags:0x00080002 [ 543.912333][ T31] Call Trace: [ 543.915595][ T31] [ 543.918570][ T31] __schedule+0x14bc/0x5000 [ 543.923090][ T31] ? __pfx___schedule+0x10/0x10 [ 543.927929][ T31] ? schedule+0x91/0x360 [ 543.932414][ T31] schedule+0x165/0x360 [ 543.936608][ T31] schedule_preempt_disabled+0x13/0x30 [ 543.942309][ T31] __mutex_lock+0x7e6/0x1350 [ 543.946914][ T31] ? __mutex_lock+0x5bb/0x1350 [ 543.951949][ T31] ? genl_rcv_msg+0x10d/0x790 [ 543.956634][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 543.961693][ T31] ? stack_trace_save+0x9c/0xe0 [ 543.966533][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 543.971484][ T31] ? radix_tree_lookup+0x240/0x290 [ 543.976578][ T31] genl_rcv_msg+0x10d/0x790 [ 543.981114][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 543.986125][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 543.991121][ T31] netlink_rcv_skb+0x208/0x470 [ 543.995888][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 544.000982][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 544.006265][ T31] ? down_read+0x274/0x2e0 [ 544.011039][ T31] ? genl_rcv+0xd/0x40 [ 544.015128][ T31] genl_rcv+0x28/0x40 [ 544.019158][ T31] netlink_unicast+0x82f/0x9e0 [ 544.023917][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 544.029238][ T31] ? netlink_sendmsg+0x642/0xb30 [ 544.034155][ T31] ? skb_put+0x11b/0x210 [ 544.038467][ T31] netlink_sendmsg+0x805/0xb30 [ 544.043238][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.048571][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 544.053491][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 544.059047][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.064344][ T31] __sock_sendmsg+0x21c/0x270 [ 544.069058][ T31] __sys_sendto+0x3bd/0x520 [ 544.073568][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 544.078646][ T31] ? do_futex+0x333/0x420 [ 544.083032][ T31] __x64_sys_sendto+0xde/0x100 [ 544.087818][ T31] do_syscall_64+0xfa/0xf80 [ 544.092552][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.098697][ T31] ? clear_bhb_loop+0x60/0xb0 [ 544.103382][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.109318][ T31] RIP: 0033:0x7f75edd915dc [ 544.113719][ T31] RSP: 002b:00007f75eeb7fec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 544.122160][ T31] RAX: ffffffffffffffda RBX: 00007f75eeb7ffc0 RCX: 00007f75edd915dc [ 544.130156][ T31] RDX: 0000000000000028 RSI: 00007f75eeb80010 RDI: 0000000000000009 [ 544.138113][ T31] RBP: 0000000000000000 R08: 00007f75eeb7ff14 R09: 000000000000000c [ 544.146119][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 544.154156][ T31] R13: 00007f75eeb7ff68 R14: 00007f75eeb80010 R15: 0000000000000000 [ 544.162197][ T31] [ 544.165222][ T31] INFO: task syz.4.4438:21341 blocked for more than 144 seconds. [ 544.177410][ T31] Not tainted syzkaller #0 [ 544.182412][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 544.191257][ T31] task:syz.4.4438 state:D stack:28040 pid:21341 tgid:21340 ppid:17355 task_flags:0x400040 flags:0x00080002 [ 544.203221][ T31] Call Trace: [ 544.206501][ T31] [ 544.209517][ T31] __schedule+0x14bc/0x5000 [ 544.214041][ T31] ? __pfx___schedule+0x10/0x10 [ 544.218926][ T31] ? schedule+0x91/0x360 [ 544.223153][ T31] schedule+0x165/0x360 [ 544.227309][ T31] schedule_preempt_disabled+0x13/0x30 [ 544.232829][ T31] __mutex_lock+0x7e6/0x1350 [ 544.237420][ T31] ? __mutex_lock+0x5bb/0x1350 [ 544.242216][ T31] ? genl_rcv_msg+0x10d/0x790 [ 544.246885][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 544.252132][ T31] ? radix_tree_lookup+0x240/0x290 [ 544.257260][ T31] genl_rcv_msg+0x10d/0x790 [ 544.261835][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 544.266850][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 544.271831][ T31] netlink_rcv_skb+0x208/0x470 [ 544.276583][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 544.281782][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 544.287066][ T31] ? down_read+0x274/0x2e0 [ 544.291523][ T31] ? genl_rcv+0xd/0x40 [ 544.295580][ T31] genl_rcv+0x28/0x40 [ 544.299589][ T31] netlink_unicast+0x82f/0x9e0 [ 544.304345][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 544.309646][ T31] ? netlink_sendmsg+0x642/0xb30 [ 544.314563][ T31] ? skb_put+0x11b/0x210 [ 544.318846][ T31] netlink_sendmsg+0x805/0xb30 [ 544.323603][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.329061][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 544.334001][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 544.339373][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.344668][ T31] __sock_sendmsg+0x21c/0x270 [ 544.349408][ T31] __sys_sendto+0x3bd/0x520 [ 544.353903][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 544.358958][ T31] ? count_memcg_event_mm+0x21/0x260 [ 544.364245][ T31] ? exc_page_fault+0x82/0x100 [ 544.369034][ T31] __x64_sys_sendto+0xde/0x100 [ 544.373800][ T31] do_syscall_64+0xfa/0xf80 [ 544.378375][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.384440][ T31] ? clear_bhb_loop+0x60/0xb0 [ 544.389312][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.395197][ T31] RIP: 0033:0x7f6417f915dc [ 544.399691][ T31] RSP: 002b:00007f6418da8ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 544.408123][ T31] RAX: ffffffffffffffda RBX: 00007f6418da8fc0 RCX: 00007f6417f915dc [ 544.416344][ T31] RDX: 0000000000000020 RSI: 00007f6418da9010 RDI: 0000000000000005 [ 544.424391][ T31] RBP: 0000000000000000 R08: 00007f6418da8f14 R09: 000000000000000c [ 544.432395][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 544.440404][ T31] R13: 00007f6418da8f68 R14: 00007f6418da9010 R15: 0000000000000000 [ 544.448441][ T31] [ 544.451474][ T31] INFO: task syz.1.4439:21344 blocked for more than 144 seconds. [ 544.459258][ T31] Not tainted syzkaller #0 [ 544.464182][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 544.472919][ T31] task:syz.1.4439 state:D stack:28280 pid:21344 tgid:21343 ppid:16369 task_flags:0x400140 flags:0x00080002 [ 544.484869][ T31] Call Trace: [ 544.488134][ T31] [ 544.491161][ T31] __schedule+0x14bc/0x5000 [ 544.495667][ T31] ? __pfx___schedule+0x10/0x10 [ 544.500782][ T31] ? schedule+0x91/0x360 [ 544.505034][ T31] schedule+0x165/0x360 [ 544.509240][ T31] schedule_preempt_disabled+0x13/0x30 [ 544.514702][ T31] __mutex_lock+0x7e6/0x1350 [ 544.519371][ T31] ? __mutex_lock+0x5bb/0x1350 [ 544.524144][ T31] ? genl_rcv_msg+0x10d/0x790 [ 544.528856][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 544.533874][ T31] ? radix_tree_lookup+0x240/0x290 [ 544.539014][ T31] genl_rcv_msg+0x10d/0x790 [ 544.543508][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 544.548560][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 544.553509][ T31] netlink_rcv_skb+0x208/0x470 [ 544.558254][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 544.563350][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 544.568904][ T31] ? down_read+0x274/0x2e0 [ 544.573310][ T31] ? genl_rcv+0xd/0x40 [ 544.577358][ T31] genl_rcv+0x28/0x40 [ 544.581405][ T31] netlink_unicast+0x82f/0x9e0 [ 544.586183][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 544.591502][ T31] ? netlink_sendmsg+0x642/0xb30 [ 544.596423][ T31] ? skb_put+0x11b/0x210 [ 544.600720][ T31] netlink_sendmsg+0x805/0xb30 [ 544.605474][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.610924][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 544.615847][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 544.621195][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.626482][ T31] __sock_sendmsg+0x21c/0x270 [ 544.631235][ T31] __sys_sendto+0x3bd/0x520 [ 544.635757][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 544.640820][ T31] ? count_memcg_event_mm+0x21/0x260 [ 544.646105][ T31] ? exc_page_fault+0x82/0x100 [ 544.651539][ T31] __x64_sys_sendto+0xde/0x100 [ 544.656323][ T31] do_syscall_64+0xfa/0xf80 [ 544.660865][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.666914][ T31] ? clear_bhb_loop+0x60/0xb0 [ 544.671612][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.677502][ T31] RIP: 0033:0x7fb96df915dc [ 544.681935][ T31] RSP: 002b:00007fb96ee1aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 544.690403][ T31] RAX: ffffffffffffffda RBX: 00007fb96ee1afc0 RCX: 00007fb96df915dc [ 544.698432][ T31] RDX: 0000000000000020 RSI: 00007fb96ee1b010 RDI: 000000000000002b [ 544.706409][ T31] RBP: 0000000000000000 R08: 00007fb96ee1af14 R09: 000000000000000c [ 544.714424][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000002b [ 544.722583][ T31] R13: 00007fb96ee1af68 R14: 00007fb96ee1b010 R15: 0000000000000000 [ 544.730618][ T31] [ 544.733647][ T31] INFO: task syz.3.4444:21358 blocked for more than 144 seconds. [ 544.741471][ T31] Not tainted syzkaller #0 [ 544.745065][ T5205] udevd[5205]: worker [13050] /devices/virtual/block/nbd0 timeout; kill it [ 544.746414][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 544.763772][ T31] task:syz.3.4444 state:D stack:28192 pid:21358 tgid:21357 ppid:16786 task_flags:0x400040 flags:0x00080002 [ 544.764797][ T5205] udevd[5205]: seq 24408 '/devices/virtual/block/nbd0' killed [ 544.776000][ T31] Call Trace: [ 544.776011][ T31] [ 544.776024][ T31] __schedule+0x14bc/0x5000 [ 544.794626][ T31] ? __pfx___schedule+0x10/0x10 [ 544.799539][ T31] ? schedule+0x91/0x360 [ 544.803768][ T31] schedule+0x165/0x360 [ 544.807907][ T31] schedule_preempt_disabled+0x13/0x30 [ 544.813624][ T31] __mutex_lock+0x7e6/0x1350 [ 544.818215][ T31] ? __mutex_lock+0x5bb/0x1350 [ 544.823004][ T31] ? genl_rcv_msg+0x10d/0x790 [ 544.827668][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 544.832878][ T31] ? radix_tree_lookup+0x240/0x290 [ 544.837977][ T31] genl_rcv_msg+0x10d/0x790 [ 544.842550][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 544.847566][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 544.852524][ T31] netlink_rcv_skb+0x208/0x470 [ 544.857270][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 544.862315][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 544.867588][ T31] ? down_read+0x274/0x2e0 [ 544.872054][ T31] ? genl_rcv+0xd/0x40 [ 544.876108][ T31] genl_rcv+0x28/0x40 [ 544.880105][ T31] netlink_unicast+0x82f/0x9e0 [ 544.884861][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 544.890309][ T31] ? netlink_sendmsg+0x642/0xb30 [ 544.895233][ T31] ? skb_put+0x11b/0x210 [ 544.899545][ T31] netlink_sendmsg+0x805/0xb30 [ 544.904328][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.909692][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 544.914639][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 544.919995][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 544.925278][ T31] __sock_sendmsg+0x21c/0x270 [ 544.930017][ T31] __sys_sendto+0x3bd/0x520 [ 544.934508][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 544.939699][ T31] ? count_memcg_event_mm+0x21/0x260 [ 544.944981][ T31] ? exc_page_fault+0x82/0x100 [ 544.950005][ T31] __x64_sys_sendto+0xde/0x100 [ 544.954855][ T31] do_syscall_64+0xfa/0xf80 [ 544.959395][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.965455][ T31] ? clear_bhb_loop+0x60/0xb0 [ 544.970318][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.976200][ T31] RIP: 0033:0x7f1bd3f915dc [ 544.980690][ T31] RSP: 002b:00007f1bd4d68ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 544.989200][ T31] RAX: ffffffffffffffda RBX: 00007f1bd4d68fc0 RCX: 00007f1bd3f915dc [ 544.997172][ T31] RDX: 0000000000000020 RSI: 00007f1bd4d69010 RDI: 0000000000000004 [ 545.005155][ T31] RBP: 0000000000000000 R08: 00007f1bd4d68f14 R09: 000000000000000c [ 545.013178][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 545.021184][ T31] R13: 00007f1bd4d68f68 R14: 00007f1bd4d69010 R15: 0000000000000000 [ 545.029223][ T31] [ 545.032243][ T31] INFO: task syz.3.4444:21360 blocked for more than 145 seconds. [ 545.040110][ T31] Not tainted syzkaller #0 [ 545.045037][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 545.058357][ T31] task:syz.3.4444 state:D stack:28280 pid:21360 tgid:21357 ppid:16786 task_flags:0x400040 flags:0x00080002 [ 545.070412][T20011] block nbd0: Possible stuck request ffff888064b25e80: control (read@0,1024B). Runtime 180 seconds [ 545.081147][T20011] block nbd0: Possible stuck request ffff888064b26040: control (read@1024,1024B). Runtime 180 seconds [ 545.089682][ T31] Call Trace: [ 545.092168][T20011] block nbd0: Possible stuck request ffff888064b26200: control (read@2048,1024B). Runtime 180 seconds [ 545.095340][ T31] [ 545.106346][T20011] block nbd0: Possible stuck request ffff888064b263c0: control (read@3072,1024B). Runtime 180 seconds [ 545.120964][ T31] __schedule+0x14bc/0x5000 [ 545.125483][ T31] ? __pfx___schedule+0x10/0x10 [ 545.130889][ T31] ? schedule+0x91/0x360 [ 545.135140][ T31] schedule+0x165/0x360 [ 545.139327][ T31] schedule_preempt_disabled+0x13/0x30 [ 545.144774][ T31] __mutex_lock+0x7e6/0x1350 [ 545.149439][ T31] ? __mutex_lock+0x5bb/0x1350 [ 545.154205][ T31] ? genl_rcv_msg+0x10d/0x790 [ 545.159066][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 545.164114][ T31] ? radix_tree_lookup+0x240/0x290 [ 545.169420][ T31] genl_rcv_msg+0x10d/0x790 [ 545.173923][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 545.178982][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 545.183908][ T31] netlink_rcv_skb+0x208/0x470 [ 545.189032][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 545.194068][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 545.199413][ T31] ? down_read+0x274/0x2e0 [ 545.203834][ T31] ? genl_rcv+0xd/0x40 [ 545.207898][ T31] genl_rcv+0x28/0x40 [ 545.214826][ T31] netlink_unicast+0x82f/0x9e0 [ 545.219874][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 545.225178][ T31] ? netlink_sendmsg+0x642/0xb30 [ 545.230258][ T31] ? skb_put+0x11b/0x210 [ 545.234517][ T31] netlink_sendmsg+0x805/0xb30 [ 545.239353][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.244696][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 545.249782][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 545.255050][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.260359][ T31] __sock_sendmsg+0x21c/0x270 [ 545.265045][ T31] __sys_sendto+0x3bd/0x520 [ 545.269568][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 545.274598][ T31] ? fd_install+0x95/0x3d0 [ 545.279294][ T31] ? fd_install+0x307/0x3d0 [ 545.283792][ T31] __x64_sys_sendto+0xde/0x100 [ 545.288713][ T31] do_syscall_64+0xfa/0xf80 [ 545.293222][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.299334][ T31] ? clear_bhb_loop+0x60/0xb0 [ 545.303995][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.310079][ T31] RIP: 0033:0x7f1bd3f915dc [ 545.314479][ T31] RSP: 002b:00007f1bd4d47ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 545.322999][ T31] RAX: ffffffffffffffda RBX: 00007f1bd4d47fc0 RCX: 00007f1bd3f915dc [ 545.331022][ T31] RDX: 0000000000000020 RSI: 00007f1bd4d48010 RDI: 0000000000000007 [ 545.339179][ T31] RBP: 0000000000000000 R08: 00007f1bd4d47f14 R09: 000000000000000c [ 545.347139][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 545.355123][ T31] R13: 00007f1bd4d47f68 R14: 00007f1bd4d48010 R15: 0000000000000000 [ 545.363129][ T31] [ 545.366145][ T31] INFO: task syz.2.4451:21382 blocked for more than 145 seconds. [ 545.374569][ T31] Not tainted syzkaller #0 [ 545.379595][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 545.388240][ T31] task:syz.2.4451 state:D stack:27216 pid:21382 tgid:21381 ppid:17725 task_flags:0x400040 flags:0x00080002 [ 545.400444][ T31] Call Trace: [ 545.403710][ T31] [ 545.406622][ T31] __schedule+0x14bc/0x5000 [ 545.411195][ T31] ? __pfx___schedule+0x10/0x10 [ 545.416035][ T31] ? schedule+0x91/0x360 [ 545.420450][ T31] schedule+0x165/0x360 [ 545.424620][ T31] schedule_preempt_disabled+0x13/0x30 [ 545.430775][ T31] __mutex_lock+0x7e6/0x1350 [ 545.435386][ T31] ? __mutex_lock+0x5bb/0x1350 [ 545.440244][ T31] ? genl_rcv_msg+0x10d/0x790 [ 545.444917][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 545.450149][ T31] ? radix_tree_lookup+0x240/0x290 [ 545.455252][ T31] genl_rcv_msg+0x10d/0x790 [ 545.459993][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 545.465027][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 545.470194][ T31] netlink_rcv_skb+0x208/0x470 [ 545.474962][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 545.480117][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 545.485397][ T31] ? down_read+0x274/0x2e0 [ 545.489900][ T31] ? genl_rcv+0xd/0x40 [ 545.493975][ T31] genl_rcv+0x28/0x40 [ 545.497937][ T31] netlink_unicast+0x82f/0x9e0 [ 545.502806][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 545.508093][ T31] ? netlink_sendmsg+0x642/0xb30 [ 545.513156][ T31] ? skb_put+0x11b/0x210 [ 545.517406][ T31] netlink_sendmsg+0x805/0xb30 [ 545.522300][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.527588][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 545.533247][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 545.539061][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.544357][ T31] __sock_sendmsg+0x21c/0x270 [ 545.549159][ T31] __sys_sendto+0x3bd/0x520 [ 545.553671][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 545.558897][ T31] ? count_memcg_event_mm+0x21/0x260 [ 545.564179][ T31] ? exc_page_fault+0x82/0x100 [ 545.569072][ T31] __x64_sys_sendto+0xde/0x100 [ 545.573827][ T31] do_syscall_64+0xfa/0xf80 [ 545.578353][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.584410][ T31] ? clear_bhb_loop+0x60/0xb0 [ 545.589247][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.595133][ T31] RIP: 0033:0x7f8d9dd915dc [ 545.599580][ T31] RSP: 002b:00007f8d9eccfec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 545.607972][ T31] RAX: ffffffffffffffda RBX: 00007f8d9eccffc0 RCX: 00007f8d9dd915dc [ 545.617234][ T31] RDX: 0000000000000020 RSI: 00007f8d9ecd0010 RDI: 0000000000000007 [ 545.625375][ T31] RBP: 0000000000000000 R08: 00007f8d9eccff14 R09: 000000000000000c [ 545.633504][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 545.641526][ T31] R13: 00007f8d9eccff68 R14: 00007f8d9ecd0010 R15: 0000000000000000 [ 545.649690][ T31] [ 545.652774][ T31] [ 545.652774][ T31] Showing all locks held in the system: [ 545.660538][ T31] 1 lock held by khungtaskd/31: [ 545.665385][ T31] #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 545.675308][ T31] 2 locks held by kworker/u8:3/50: [ 545.680570][ T31] #0: ffff88801a069148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 545.692568][ T31] #1: ffffc90000bb7b80 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 545.705417][ T31] 2 locks held by getty/5595: [ 545.710258][ T31] #0: ffff88814d8aa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 545.720034][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 545.730150][ T31] 1 lock held by udevd/13050: [ 545.734799][ T31] #0: ffff88807a512358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 545.744288][ T31] 2 locks held by syz.0.4435/21334: [ 545.749509][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 545.757675][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 545.766668][ T31] 6 locks held by syz.0.4435/21336: [ 545.772476][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 545.780775][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 545.789777][ T31] #2: ffff8880202a2278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x375/0x1a50 [ 545.800350][ T31] #3: ffff888028088708 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 545.809777][ T31] #4: ffff8880280880a8 (&q->q_usage_counter(io)#70){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 545.821984][ T31] #5: ffff8880280880e0 (&q->q_usage_counter(queue)#52){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5d/0x3e0 [ 545.834583][ T31] 2 locks held by syz.0.4435/21337: [ 545.839801][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 545.847980][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 545.857195][ T31] 2 locks held by syz.4.4438/21341: [ 545.862565][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 545.870775][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 545.879770][ T31] 2 locks held by syz.1.4439/21344: [ 545.884948][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 545.893337][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 545.902328][ T31] 2 locks held by syz.3.4444/21358: [ 545.907504][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 545.915701][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 545.924806][ T31] 2 locks held by syz.3.4444/21360: [ 545.930211][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 545.938486][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 545.947482][ T31] 2 locks held by syz.2.4451/21382: [ 545.952908][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 545.961211][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 545.970204][ T31] 2 locks held by syz-executor/21385: [ 545.975572][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 545.983931][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 545.992965][ T31] 2 locks held by syz-executor/21397: [ 545.998470][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.006640][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 546.016170][ T31] 2 locks held by syz-executor/21399: [ 546.021600][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.029781][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 546.038886][ T31] 2 locks held by syz-executor/21401: [ 546.044238][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.052542][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 546.061548][ T31] 2 locks held by syz-executor/21403: [ 546.066897][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.075385][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 546.084473][ T31] 2 locks held by syz-executor/21430: [ 546.090157][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.098663][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 546.107660][ T31] 2 locks held by syz-executor/21442: [ 546.113110][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.121314][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 546.130431][ T31] 2 locks held by syz-executor/21444: [ 546.135790][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.144026][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 546.153019][ T31] 2 locks held by syz-executor/21446: [ 546.158574][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.166739][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 546.175731][ T31] 2 locks held by syz-executor/21448: [ 546.181274][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.189640][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 546.198660][ T31] 2 locks held by syz-executor/21475: [ 546.204025][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.212285][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 546.221479][ T31] 2 locks held by syz-executor/21487: [ 546.226838][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.235145][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 546.244154][ T31] 2 locks held by syz-executor/21489: [ 546.252622][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.260845][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 546.269815][ T31] 2 locks held by syz-executor/21491: [ 546.275163][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.283486][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 546.292549][ T31] 2 locks held by syz-executor/21493: [ 546.297898][ T31] #0: ffffffff8f35d1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 546.306098][ T31] #1: ffffffff8f35cfc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 546.315222][ T31] [ 546.317542][ T31] ============================================= [ 546.317542][ T31] [ 546.325992][ T31] NMI backtrace for cpu 1 [ 546.326007][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 546.326019][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 546.326026][ T31] Call Trace: [ 546.326031][ T31] [ 546.326035][ T31] dump_stack_lvl+0x189/0x250 [ 546.326051][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 546.326061][ T31] ? __pfx__printk+0x10/0x10 [ 546.326081][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 546.326093][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 546.326103][ T31] ? __pfx__printk+0x10/0x10 [ 546.326117][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 546.326133][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 546.326143][ T31] watchdog+0xf3c/0xf80 [ 546.326159][ T31] ? watchdog+0x1e2/0xf80 [ 546.326173][ T31] kthread+0x711/0x8a0 [ 546.326186][ T31] ? __pfx_watchdog+0x10/0x10 [ 546.326196][ T31] ? __pfx_kthread+0x10/0x10 [ 546.326208][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 546.326219][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 546.326230][ T31] ? __pfx_kthread+0x10/0x10 [ 546.326242][ T31] ret_from_fork+0x599/0xb30 [ 546.326257][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 546.326275][ T31] ? __switch_to_asm+0x39/0x70 [ 546.326286][ T31] ? __switch_to_asm+0x33/0x70 [ 546.326296][ T31] ? __pfx_kthread+0x10/0x10 [ 546.326307][ T31] ret_from_fork_asm+0x1a/0x30 [ 546.326326][ T31] [ 546.326329][ T31] Sending NMI from CPU 1 to CPUs 0: [ 546.471608][ C0] NMI backtrace for cpu 0 [ 546.471624][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 546.471642][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 546.471652][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 546.471677][ C0] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 546.471697][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 546.471712][ C0] RAX: 2d4cc62fc5a3c100 RBX: ffffffff8197438a RCX: 2d4cc62fc5a3c100 [ 546.471725][ C0] RDX: 0000000000000001 RSI: ffffffff8d76bd90 RDI: ffffffff8bbfc660 [ 546.471736][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b883359b R09: 1ffff110171066b3 [ 546.471749][ C0] R10: dffffc0000000000 R11: ffffed10171066b4 R12: ffffffff8f805a70 [ 546.471767][ C0] R13: 1ffffffff1b92a50 R14: 0000000000000000 R15: 0000000000000000 [ 546.471778][ C0] FS: 0000000000000000(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 546.471791][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.471802][ C0] CR2: 0000564d02d28000 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 546.471816][ C0] Call Trace: [ 546.471822][ C0] [ 546.471829][ C0] default_idle+0x13/0x20 [ 546.471850][ C0] default_idle_call+0x73/0xb0 [ 546.471872][ C0] do_idle+0x1ea/0x520 [ 546.471888][ C0] ? irqentry_exit+0x5ba/0x660 [ 546.471909][ C0] ? __pfx_do_idle+0x10/0x10 [ 546.471933][ C0] cpu_startup_entry+0x44/0x60 [ 546.471949][ C0] rest_init+0x2de/0x300 [ 546.471965][ C0] start_kernel+0x3ae/0x410 [ 546.471981][ C0] x86_64_start_reservations+0x24/0x30 [ 546.472015][ C0] x86_64_start_kernel+0x143/0x1c0 [ 546.472035][ C0] common_startup_64+0x13e/0x147 [ 546.472061][ C0]