last executing test programs: 18.6993769s ago: executing program 0 (id=2609): recvfrom$rose(0xffffffffffffffff, &(0x7f0000000000)=""/165, 0xa5, 0x10000, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @default}, 0x1c) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x1412, 0x200, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x10000) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x822, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) connect$rose(r1, &(0x7f0000000380)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x40) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r1) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r3, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7fffffff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4005) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x80010, r0, 0xc010a000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000000a00)={&(0x7f0000000540), 0xc, &(0x7f00000009c0)={&(0x7f00000005c0)={0x3d4, 0x0, 0x101, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TIMEOUT={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PEER_MEASUREMENTS={0xc4, 0x111, 0x0, 0x1, {0xc0, 0x5, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x58, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1108}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99595ec137b06c2f}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PEER_MEASUREMENTS={0x2d4, 0x111, 0x0, 0x1, {0x2d0, 0x5, 0x0, 0x1, [{0x274, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x140, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xea}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x25}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x130, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x30, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x20044001}, 0x20000080) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r1) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r6, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x40, r6, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffff3e3, 0x7c}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x3d2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) epoll_create(0x3) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000d80)={&(0x7f0000000c80), 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r7, 0x100, 0x70bd28, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000dc0)={0x2, 'geneve1\x00', {0x1}, 0x6}) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000e00)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f0000000e40)={0x6, 'macvlan1\x00', {0xffffffff}}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ec0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x2c, r8, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000}, 0x4044010) r9 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x30, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x15}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc0d0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, r7, 0x300, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c010) sendmsg$nl_generic(r9, &(0x7f0000001580)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001540)={&(0x7f0000001200)={0x33c, 0x31, 0x200, 0x70bd26, 0x25dfdbfd, {0x1a}, [@typed={0xe4, 0x7e, 0x0, 0x0, @binary="bc53c89e94f0394494fc7d9a41d628ef867edff6315001dc2c2b6f5778a98805c6da1bb79b0d16340a917a64baaf57ac91273a5b57c479118ef8a088a80725e5046e20e3275f2c60db71ba991c7040f41412192d1a2a62d2989726fbc7bc46f84fa953743dd5e34998f4fc5f1864f3bea981e9e658ab7bc84d1e71b8cab46293eafd149ab5d90120b6986bee5d8b9a6b49c05fe7596d61df6a1d8c6e26ef375f337803aca1ac32e49e650f21974a85b907010605211a0fed300ddf81c1fa6d77eed763cec0332f45b9d31530aae5058a79d75a776b8f3f40621a10e87c5cb52b"}, @typed={0x8, 0xee, 0x0, 0x0, @ipv4=@remote}, @nested={0x23a, 0x45, 0x0, 0x1, [@nested={0x4, 0x44}, @typed={0x6, 0xba, 0x0, 0x0, @str='!\x00'}, @generic="54b6bf1bafe851fb2017b550ab816eb54d7791c0756b5b26e46fd1a11a856ff9c0f74bc687e9b45127971bf2e7cf6f34cc166d023f4c7ff0919ec5613e025c69cf44877841042442bf6924903116c8d8adca711a679dc964484cbd3b0de85e45a065878d5d5184e824c9e8591b3cd820bbee2afe9fd71c3d8d86c0ad2141852b058b626166be3bf08f2517729580e20761dfaf025c16b58897c281d436b8c26c3d0fc9d8164ad58cc7255d2a57e78718b760ab1231a4facf2824a74fbc99cceab5d8d5be33d0363b0d846550e1d3494ed1b91e38db22fce81dcbc5fd", @nested={0x4, 0x1f}, @generic="80f553f92065770a2ac68cc78fbdd30dc2f450d62ba853550dde7cb0231f346d50348a3562499739ad24f203d5c7de78fa35d919f4c0a7c677503da195fedbd02b7dcefe8df1fb8acbfe70267e7d159380494dd298e41e744a60a0c0352c3c445a3c59517846f1664cdec94e6af3aac19f6056e132f2f4031d21eac3f0a2903f63045848241d68d71ac9413cb5fd160f5f24401d954e66185c77d205c5bc20acad69e80c4ea1609cbf247ed1a6b25002a852329df7527b9e87da76bea30f0531ea36bfaa1a015a61", @typed={0x4, 0xc7}, @generic="c79438e4cc3cbf5c28bdba838321c6334ace3c7ffb6c6cbfbd43b3b46c5e27442712812f61207766aa8e6d7ce940621456cd52f9d4ce86166e080e9685eaac87863506abab7190b484067061276a3e8861b6ad980bc7c79f1974a3abb14996a14eb90120b391007fc7e9c20f13788056b31dd3a32eb9", @typed={0x8, 0x48, 0x0, 0x0, @ipv4=@remote}]}]}, 0x33c}, 0x1, 0x0, 0x0, 0x4000851}, 0x20000000) 18.485659226s ago: executing program 0 (id=2613): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) socket(0x40000000015, 0x5, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x3a) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3e77ab9c73a6a7d2463480166154bc141cc3a3064766003cb69b14cdfd2afe8a8b1adf0eac14dc661302a721121ce87a9722d42774e2754415a59e67040e5b71c33487bf500f833e0370d9e36ea58eca7aa2216278a8d1e27858152106a576a55ac18bba436edd4e06901a04df1dc8a21f39c52773280c173fc4b9eb89de6d33791f5f2ce03f", @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf060200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x44804) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x1000}, 0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e00), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x3, 0x30000, 0x5, 0x9, 0x2, 0x2}, 0x1c) close(r8) 18.435458436s ago: executing program 1 (id=2614): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 18.174872199s ago: executing program 3 (id=2619): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x63, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x24}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x63, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x24}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newqdisc={0x80, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1ff, 0x4, 0x0, 0x8, 0xfffffffd, 0x8}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x8}]}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x3, 0xd6b9, 0x3, 0x2, 0x10, 0x7, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x80}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newqdisc={0x80, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1ff, 0x4, 0x0, 0x8, 0xfffffffd, 0x8}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x8}]}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x3, 0xd6b9, 0x3, 0x2, 0x10, 0x7, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x80}}, 0x0) sendto$packet(r0, &(0x7f00000006c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x835, &(0x7f0000000440)={0x11, 0xf4, r2, 0x1, 0x1, 0x6, @multicast}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000013c0)={0x24, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}}, 0x0) 18.11860671s ago: executing program 1 (id=2620): r0 = socket(0x10, 0x803, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0x6}}]}}]}, 0x84}}, 0x24040084) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7f}]}, &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) 18.097995382s ago: executing program 0 (id=2621): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=0x0], 0x1c}}, 0x4081) 17.982589341s ago: executing program 3 (id=2623): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0x90}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0x90}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb001480"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) listen(r3, 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r7) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r6, @ANYRES16=r8, @ANYRES64=r10, @ANYBLOB="0500290001000000"], 0x34}, 0x1, 0x0, 0x0, 0x640c0}, 0x4004c885) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r11, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendto$netrom(r11, 0x0, 0x0, 0x0, &(0x7f0000000240)={{0x6, @rose}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) connect(r1, &(0x7f0000000100)=@qipcrtr={0x2a, 0x1, 0x2}, 0x80) (async) connect(r1, &(0x7f0000000100)=@qipcrtr={0x2a, 0x1, 0x2}, 0x80) 17.911117366s ago: executing program 0 (id=2624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x90}}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000000c0), &(0x7f0000000180)=0x8) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000050000000000000000711251000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg$unix(r13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r16, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r15, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) socket$nl_xfrm(0x10, 0x3, 0x6) 17.827173629s ago: executing program 1 (id=2625): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2c}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000000340), 0x12) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x7f}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x60, 0x1411, 0x1, 0x0, 0x3, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x3}]}, 0x60}}, 0x0) 17.53869599s ago: executing program 3 (id=2629): r0 = socket(0xa, 0x2400000001, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="354c0587970c23440000000000000000000020000000000000000000fa605196a4cf28d181c61bd33194c1d8a196ff901e24f2ffa65ba4842de402b206c7a48fc6aa468d88c1150d5eb93b06df941d85cba052ec6992a81563602a6004fc1071c8c9bd95c406b8b61c24f29fd550de6bb50369b2aca151"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x4e22, 0x0, @mcast1, 0x1000003}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0x5, {{0xa, 0x0, 0x0, @mcast1, 0x1000000}}}, 0x88) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae00"/24, 0x18) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x2, &(0x7f0000000100)=@netrom={'nr', 0x0}, 0x59) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x4, 0x26, 0x4, 0xfffff969, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7800, 0x8000, 0x6, 0x4}}) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r8, 0x114, 0x6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="300000001c00c9242bbd7000fbdbdf2507000000", @ANYRES64=r7, @ANYBLOB="80001e0a0a000200aaaaaaaaaa1b000008000f"], 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000003c0)={0x0, @remote}, &(0x7f0000000400)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r5, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000a40)={0x120, r6, 0x8, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x24000010}, 0x4001) r13 = socket$rds(0x15, 0x5, 0x0) bind$rds(r13, &(0x7f0000000080)={0x2, 0x1, @loopback}, 0x10) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x10, 0x3, 0x1, 0x7fff, 0x4, 0x5, 0xffffffff, 0x3}, &(0x7f0000000140)=0x20) 17.349497005s ago: executing program 3 (id=2631): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x1c, 0x52, 0x1, 0x2, 0xfffffffd, {0x2, 0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @binary="edcaf499"}]}, 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r4, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x1, 0x0, 0x1, 0x7}, 0x14) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r7, 0x107, 0x19, &(0x7f00000003c0)=0x9, 0x4) bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r8 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[], 0x78}}, 0x20008040) recvmsg$can_raw(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x4}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "21c8798a7e"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0x74, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "6148ae916d13bfa68101a6a7a9"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b590fc0ca0"}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_SEQ={0xc, 0x4, "16095706f61a90e9"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "ecc3d138e0"}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2c261f821c"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000010) r9 = socket$inet(0x2, 0x2, 0xfffffff7) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r9, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x15, 0x1b}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91100b000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710439000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r10}, 0x94) 17.202685404s ago: executing program 3 (id=2633): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) read(r0, &(0x7f0000000500)=""/4096, 0x1000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x6a, 0x4, 0x20000000, 0x2) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x36d3361447445b39}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x400, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000001c40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000400000000000007000000000000000061"], 0x0, 0x2a}, 0x20) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xb3, &(0x7f000000cf3d)=""/179, 0x0, 0x0, '\x00', 0x0, @fallback=0x7c, 0xffffffffffffffff, 0x6}, 0x94) 16.93881358s ago: executing program 1 (id=2638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="013d", 0x2}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f00000001c0)={0x0, 0xa5f}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES16=r0, @ANYBLOB="019a040000000000280012800800010073697408001900000000000a0036a4129034824d84176c35adcefd000000"], 0x58}, 0x1, 0x0, 0x0, 0x4004081}, 0x44011) 16.883185985s ago: executing program 4 (id=2639): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = socket$unix(0x1, 0x2, 0x0) getsockopt(r3, 0x1, 0x7, &(0x7f0000000040)=""/177, &(0x7f0000000100)=0xb1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'fo\x00', 0x30, 0x4, 0x66}, 0x2c) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x3d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x0, 0xc24, 0x9, 0xfffffffb}}, 0x44) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000000)={@ipv4={""/10, ""/2, @local}, 0x0}, &(0x7f0000000040)=0x14) mmap(&(0x7f000087d000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f000087cf79)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x0, 0x0, "0000000000000099010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000be4f28860000000000000000ffe300"}, 0xd8) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newchain={0x148c, 0x64, 0x400, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xc, 0x3}, {0xb, 0x9}, {0xfff1, 0x10}}, [@filter_kind_options=@f_route={{0xa}, {0x141c, 0x2, [@TCA_ROUTE4_ACT={0x1108, 0x6, [@m_xt={0xb0, 0x11, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x75, 0x6, "6f8121c2a4b5964e60146c281563eef18842e988d9df17787f536883a50726ecf5a22bb0d08e94b371943c77a610fb4f2db88baa5f565858255899ecae67cdd1961c369ba79169c30f7c91badfecf8406cc179d051f5f50590ee424c45d914fa5aa6b527ad61d68329fee8b085c4792633"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0x1054, 0x3, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xe34, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1580}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1465, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x2d}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0x1}}, @TCA_ROUTE4_ACT={0x2f0, 0x6, [@m_skbmod={0x174, 0x19, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0xd5, 0x1, 0x1, 0x1}, 0x10}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa}]}, {0xf7, 0x6, "0c49e6eee8267f174e4b488379eb2c6a99615321471e1a6eb632faf751f446105c4d30fd1bf5de7b6f547d031eb706378fdc73762f77d048d75e47d8c47ee0e12e4d89b0f67a697c46409c230ba76de9ac115b5632cd42e707d4ccb78af8231f9f2ecc16430dce4391cc830ae4045592dc6c4cb1233838b7dcdda7f53963bc158a5a23223fb979458c30eea41b8b3a85b35c79af728ae91fa32837cd619446b1de08ce3639ad67025c576ac52fa2a7a4be6ab39e01bb6c5ff42ef46d5794910d4220f9f31c382c31e13f7fcdcd998f95963078d3cba3b634be79cc3c4a0e393bf73a392724adda7998e23f82baa7cfc1b99ea9"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x178, 0x10, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x63a, 0x2, 0x1, 0x9}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x7f, 0x7, 0x98, 0x5}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x6da, 0x0, 0x0, 0x7}, 0xfff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x8, 0x8001, 0x9}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2341e237, 0x1, 0x1, 0x8, 0xff}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x0, 0xd893, 0x4}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffff, 0x8, 0xffffffffffffffff, 0xfffffffa, 0x7}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x2, 0x7, 0x800, 0x5}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xb, 0x5, 0x6, 0x101}, 0x2}}]}, {0x4b, 0x6, "6318321906cb629a9a55a2de726793242c62b839c93ce4af048ad027c555ebb3e92f038e42c49184d8dfa758851f3325777f7ddcb5e847b9a3617710000d9e521ba59b99e9912c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xe6}, @TCA_ROUTE4_IIF={0x8, 0x4, r4}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x6}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x9, 0x3}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x6}}, @TCA_RATE={0x6, 0x5, {0x7f, 0xc}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x148c}}, 0xc0) 16.85244945s ago: executing program 0 (id=2641): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 16.837624625s ago: executing program 4 (id=2642): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x18, 0x3, 0x200) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) socketpair(0x3, 0x5, 0x4, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$bt_hci(r3, &(0x7f0000000200)=ANY=[@ANYRES16=r5, @ANYRES64=r2], 0x39) sendmsg$can_bcm(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x1, 0x803, 0x6, {0x0, 0x2710}, {0x0, 0x2710}, {0x1}, 0x1, @can={{0x0, 0x0, 0x1}, 0x8, 0x5, 0x0, 0x0, "80fbc4e1d8303255"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xf}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 16.703490353s ago: executing program 0 (id=2643): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c0005006c000000000000000c0002000000000000000000040007800c0008000000000000000000080001000000000044000780080001"], 0x90}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x54, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10c}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), 0x0, 0x0) 16.703076579s ago: executing program 1 (id=2644): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x21, {{0x29, 0x0, 0x2000000, @private2}}}, 0x88) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0xfffffffc, 0xaf7cec4b4873cc35}, 0xc) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000080)={@loopback, 0x0}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@getlink={0x3c, 0x12, 0x800, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0xe0, 0x300}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x7}, @IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x3c}}, 0x0) 16.698755705s ago: executing program 2 (id=2645): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000001f40)={0xffffffffffffffff}) ppoll(&(0x7f0000002000)=[{r1, 0x400}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2010000000000400142003006772653000"/28], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="21002dbd7000ffdbdf250100000018000180140002006970766c616e31000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 16.630805126s ago: executing program 4 (id=2646): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3ffffffffffffe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xffffffffffdfffff, 0x0, 0x10, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xffa0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000190001002caa3b00000000000a000000ff000000003f000008001e0001000000"], 0x24}, 0x1, 0x0, 0x0, 0xd8e5}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4000000010000006600000000000000730135000000000095000000000000004bb5eea0a6ec9fcd4b0a008a8443f22702000000e63bde9e4a0587536a966992ae7011d6e6c03175717e9912e0dd1a59541f7cbb1548ee5bd627f5b0b8ec77bd6d5f7b543f9aafaabe53339b12fbbe7decc4aa61b8aad0759083bdd61543fbeee8d560bb4b5925fae801f4c91e31674b124a1b38000000bc4da4a9b3d5cc9e0000f6a7a729009973ff07000000000000ac79e5d84abbec7d96629490727375b853f6308a980fba61fbe0131f3c7a026d8f000008000000000000000b20d7ac2df89d7989bf53bec908213d396edf24e9fc3cc004a1097fddc65c1b1b328277ff85ed56b9261eb7bcee28ec2d3616689ab3f31f849eebce6f21e6302003c0467844e000000000db0700bd694a09b253a1c6c7c138b3ec6ee9b83edcc55d3403acd5c50e27401aa306a7ab7069790da79b7ab45184caffff00009bab066bf7a4ab148d44c7e2e4d219cdd7ebeb51511d9df85a648b1b85f93cb6cd21f93d5ea3da2b31657c065d052d9b9ee00320def97ebac25b929b3c15e33be6e7d54e622b427ee8d181d2f18d772fb5c58a936620ba1f5fbb48703ab220f442697edc165b449db2e3c221fbf270a6db414516949b97c200000096a1cbe81a38a23f03bd741a3e60c2e294f828e06f1b2cb70328f151f949e369efed52a28b87aae9d7d2800c8efe7f93c05adc9086d3f143a7b87d06838c6525cafdc01820a8912a131ff1f6acb9439f2d95a746291641b38333ce1c33edc9da00c8a2b42e8adfeff69fce7a35f79748e3e5b235269310988a05bf7c4e4cef3d1aa550c83d6328eb000000044a6458c31431d58973c93f5e9452258a7098bc3d014afe638a40948498faa261213bc20845526e054d6b3ba5ca8f357df67c41acc28edacb31d38994544c3511ea1e8a448e66039425cfb03efb5d5eb81a306746adb8809ef9691863c00085e2dc401325327e54cbfceb400c2663466cd4a79c94b62c9882626499a8a29c564464f2a7aee6a929f831c93d23005787d272b5eaf0c6e11a7f0f1f39f68df44f6bf2ebe448cbe850efd24bf7b96ad33abbd3a8b5814b5e7f85d1a47ee604ccef20bda53c9ce06910568fc200eee12fc6ef2734a6e9af5132f0c507e277fd97f9b48c840697289d38e454467f4d2f94b2f76d06edd083dafefd76deb251b5818de9c27d0df6e7b8862fe42f6c453f551f35b6d76395a1d205f276ae628fbdb8081905a1d7c2805532d3387b88f2997e8ce41c5dca83659cfb7f3a1c7b2bec8a7575dc4241dde6c680ee9a27b197739f4ad86f3bad3e42d4954bef864586ad02c27858d63efc495bcfb6e30f30fedf536d63769a196fc3b472195d0a1a13ecf803136d751cefb0edb5794cab8681214b39f86d88f3aebea4d465ef05f975b09f264d6c8d8e3bb6ea7d21c6602bcc8f76f2546cccc074f55c22aa8b502968040000000000000047c8a50036dd268a1aeff951f5090492b5e941feb1d3785aafe1655876e5a36c40fb5afcfd1eb28952662782097836a4d1aa3de0c06bb7dc27cf1a546b6aa6ce9932f3c6a013bc3791da4d8a33680ba8f1334d75a43e991ebd4582d786ec05cdd3152d52ab15fc7595cbd339f730d2ec8e37e6c500c4c30280a6af986f62a22d9c5c275e7798c165545abfcd304243274db15924a136a0896d56576ed5de90b1bda90f4024b9a0b3b33f688db8e38f784ae3942aba874f95d10c47e2405ceb0438cc272133fac718a6553710e4ca97df646b21d03652c54eade2e99344e11a2671cf274d397650fba8fcfb7e51a926e37b3980a1732111175dd99b9d979042b3ea411a7b4f9081ae9b82974d5eb6fd4e4bcd95e4f897dfba4e44777e6d02a896b650a66d9139696b9c6c36a33eb3adc092bf4586bfab34002f802bbfe6a7679cec20cc25e01f129bbe92a65961fac7bffa3d8feda2ac927743d2bce57ee39b671948576337535180aa754e035421cf1709bc1b5e46c35515fb1fcda637a6405e9b216d2ca09795c5d2f27665da5b17bcf0f387e6dd58202a3a1148e46e55ac7ea027eb3022eee4a000ca543ab566921e5db4f741a71dc202c851d99851bc7a62ea705f942855a9fa30b912045f78ab1e3fdeada84bc8ac36cc1223901e56f6ecbabbc3263098c9c47a1f505a8299b5715a455e834ddddc430f387cafa07bf915522f9a42e34eea51692c90320e892d27924045bcf56135684ca96ada82749371d5766c0d0cae8772f140eef001ca39dc28743f77b8724487a9b37ca66d20aef8a5236393fce29b0531cbd3265c209761ed41a2e473fbd84ca9b67e3ceb58a4b774ee127628faba8702c0a73f8311d269429aaadf74c439404fc9f864e69807dfe2bae2bd4c498a10d4e17dddb1f7539bfeb392e22e7b93d0ecf66cd253a4062bbc8a4307f0e4360651dc7f8924ee7a89ab73dd7c11be13707482c369f02d7b6f242599f95dbfcb55bea158665231f8fe04ed2a8c407fed1a8702e2486386f2ae6347231128be789186ff5651208c8b781f85d3fb51bd28b939a8bc88a471c36fa17fd04c3fbdbd3f7bf144b1466014a77c582aa0380e612cd101d557dd1e5b7bae3da3ea2659f66a3641eaa3b008b978e0a5f69671f52401892dba8a63c8f7eb280880dbdcee5d8e8aae9de9d28cbe0de2f4642c4fe69db3b7432b2eb7ca282fbfe030ad6c33a73feef1cd517cedc2c0059e5636ae0fb3969ce7f64c6f4cffcc40ac1331f6b50d4f95c490edd75e8cdba278a602c8a200000000000000000000000091b39eb79b22cc68dde3760f3bd7377b35f4d41a46959070cddc4a9c340455f97ff0ea8c6adbff47a39269b2e90dffa1ec22d41f9da01ec44847a88334e106ff455f9ca2a0b2900591ceac1f0e823eaa7ed5b359eed1a39a6f75e7556ab52ac0c2c46b28f3791edf8f25cc2e6cab30841d3fac1e16443be84d4e9a903df3901f89e13cee8589df43652fbe05a789881dcae97ffdc52363bc61c334480afac09e04f9e5ce0bcd12c997545053b64bb2ba920a1071d2ca692c72965bdc0022f7f147943001a55ed8c7b3181fbfabd2069ac7bd4f9b459463edb8a05d1fde9a0000000000f4304ef01fb54b38377b030f2a0fb38bf286249b0cd112d9d8a3b3d97834e3a1a43008cb3abe4ecf4edb6b46ae11ce456dd5af00b5bfa294de78bd1b52856d6831286f32af84a659e67ae7cf2f4a669770944f50ae3d7a5718adb492cef3221fbd8af33c0d5dd034a5f066c15cf9"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x9}, 0x10}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x3) socket$caif_stream(0x25, 0x1, 0x3) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x38, 0x2, 0x2, 0x5, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @broadcast}}}]}]}, 0x38}}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r7 = socket(0x14, 0x2, 0x4) accept4$unix(r7, 0x0, 0x0, 0x80000) read$alg(r4, &(0x7f0000000040)=""/136, 0x88) getsockname$l2tp(r2, &(0x7f0000000180)={0x2, 0x0, @local}, &(0x7f0000000200)=0x10) 16.559336889s ago: executing program 1 (id=2647): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000019580)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c40)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689e5dd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x10000000, 0x400, 0x4, 0x5, {0x9, 0x0, 0x1, 0x2, 0x8, 0x3}, {0x7, 0x2, 0x10, 0x0, 0x1, 0xfffffffe}, 0x80, 0x0, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) 16.265029571s ago: executing program 4 (id=2648): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], &(0x7f0000000100)=""/141, 0x19, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c0001800600060008060000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'ip6gretap0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)="67aebf6492afa04495678a716cc3c2f683278ccd4583a2fc77f9ea0bd4c9613b96248c34f55ffe75f252ea9d070b6588b6a530401164bd5ef34d45ef0f835893f9ceaeb9f828f4486441632ac62eb528e018d2335fe1de58daf31c1c9af376fc23516613ad3f41303b63a8bdad0dc411576e5e1e00b0b81ff323dc22adb87c389d2c7b97cf88899c1e2e2515331ddeaa35b12f8fbe827f878bfa7105981cbd334546f5cef94906cc569b0165a4214985c41cd23a36d1f177da921b57dd749c75624f8343e9af1dae30cf190fa9e1e4d0dbe3b310a8ae31ea53215bcc1891da5c7df3d9d8efdb49f202aa7e48584f3a155d6906a8c9bc09dc14", 0xf9}, {&(0x7f0000000340)="39580536c83df608e0b56f1f58830c77d922f571ddf3a0aef416ff1692a8008154efc0a8a3e7ab27efe243ce2a31a3f9cb68033cb49757bb2eb04058a167ce257cfc83e00292de78442d62888d2aa88d0a1e74050ee2299d00b04a72dfbcde5f00a9275ea939d7c7458045c732aa25e53f906e70059c2cd993487456f60523b3ea66e39017cd6349ec8ae1b0ae5f1427aa9819366904143d273adf31159b70f3c54f75ec2729ed111e210c3a99cc755716e125e659e634a6fb0be3c72590d345ecb5ffc7b595", 0xc6}], 0x2, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffb}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0x58, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x69, [@loopback, @broadcast, @multicast1, @private=0xa010100]}, @timestamp_addr={0x44, 0x34, 0x1a, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@empty, 0xfffffab1}, {@private=0xa010101, 0x9}, {@empty, 0x800}, {@local, 0x9}, {@private=0xa010100, 0x8000}]}, @end]}}}], 0xb8}, 0x8011) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 16.140876541s ago: executing program 3 (id=2649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206050000000000000000000000000005000400320000000900020073797a32000000000c00078008000640000000000500d57777a40000050001000600000011000300686173683a6e65742c6e657400000000", @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES64=r0], 0x58}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="192c2cbd7000ffdb06251500050000000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@initr0, @alu={0x7, 0x1, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x90) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="017917000000000020020c00000008000400000000bb"], 0x1c}}, 0x0) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x54, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfffffffc}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xbc7}, @NFULA_CFG_MODE={0xa, 0x2, {0x3}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x4001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0xb}]}}]}, 0x44}}, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket(0x2000000015, 0x80005, 0x0) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'batadv0\x00', 0x5766}) r10 = socket$inet6(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x3, 0x2, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x7800, 0x80, 0x101, 0x8}}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r9, 0x65, 0x4, &(0x7f0000000000), 0x4) 16.064093577s ago: executing program 4 (id=2650): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/542], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_init_net_socket$ax25(0x3, 0x5, 0x6) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596cf"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='ip6tnl0\x00'}) 16.030717699s ago: executing program 4 (id=2651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000007d2700000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async, rerun: 64) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r8, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x54, r9, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x86d}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2404c0c0}, 0x4040050) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (rerun: 64) nanosleep(&(0x7f00000000c0)={0x77359400}, 0x0) (async) close(r6) (async) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x5c, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0xb, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048890}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 15.808528585s ago: executing program 2 (id=2652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f00000000c0)=0x8) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB="a8d64041bab9ee94736657b576327a0000"]) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a0000000000007b118800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 15.679386517s ago: executing program 2 (id=2653): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000013c00)={0x0, 0x0, &(0x7f0000013bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001b140100000000000d000000080004"], 0x28}, 0x1, 0x0, 0x0, 0x4855}, 0x0) syz_emit_ethernet(0x76, &(0x7f00000001c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x40, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a300", 0x0, 0x33, 0x0, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, [@dstopts={0x4}], "0b0b79279cea4588"}}}}}}}, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00130016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000001300)='GPL\x00'}, 0x90) 15.674755942s ago: executing program 2 (id=2654): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='/proc/4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000034000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61141800000000001d430000000000007a0a00fe00581c1f6114750000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)=r0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f00000012c0)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x1, 0x3, {{0x1b, 0x4, 0x1, 0x3, 0x6c, 0x67, 0x0, 0x82, 0x29, 0x0, @private=0xa010100, @broadcast, {[@noop, @timestamp_addr={0x44, 0x14, 0xd4, 0x1, 0x0, [{@local, 0x1527}, {@multicast1, 0x3c21fbf6}]}, @timestamp_addr={0x44, 0x1c, 0x86, 0x1, 0xd, [{@dev={0xac, 0x14, 0x14, 0x44}, 0x7}, {@empty, 0x6}, {@remote, 0x40}]}, @timestamp={0x44, 0x24, 0x4a, 0x0, 0x0, [0x8, 0x3, 0x6, 0x5, 0xfffffff8, 0xffffff81, 0x4, 0x42d]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x15, 0xffffffa8, 0x2, 0x6, 0x0, r1, 0x8, '\x00', r2, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x50) 15.630878033s ago: executing program 2 (id=2655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x18, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x1}, [@typed={0x4, 0x14e, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x4, 0xd6, 0x5, 0x47, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0xb}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES8=r0, @ANYRES16, @ANYRES32=r1, @ANYRES16=r1, @ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x20000800) 15.539506619s ago: executing program 2 (id=2656): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c0001800600060086dd"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) socket$packet(0x11, 0x2, 0x300) (async) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r5, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000200000020000000200000005003d00f700000008006900040000007b4924175fc6f72dc2389609c90e36a5db9534a5e67a7dae0b6f0e8fcefc6a74af5c9f28479142bb7f49accfafc924e2f04db5a77fccc47681960793359582fdee038fe5b775c175cd7f0f9b8d07370060e6007b1ce9f3c2312880fca89a146b4c34782195b398c3314af6fe34af01e38bc557a820c0bc0a53dd58c82077ee06e82e49aee258d0c885800dbdc45cd7"], 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) (async) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000200000020000000200000005003d00f700000008006900040000007b4924175fc6f72dc2389609c90e36a5db9534a5e67a7dae0b6f0e8fcefc6a74af5c9f28479142bb7f49accfafc924e2f04db5a77fccc47681960793359582fdee038fe5b775c175cd7f0f9b8d07370060e6007b1ce9f3c2312880fca89a146b4c34782195b398c3314af6fe34af01e38bc557a820c0bc0a53dd58c82077ee06e82e49aee258d0c885800dbdc45cd7"], 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x6c00}, 0x20000004) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r2, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x1}, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 1.179805722s ago: executing program 32 (id=2643): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c0005006c000000000000000c0002000000000000000000040007800c0008000000000000000000080001000000000044000780080001"], 0x90}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x54, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x10c}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x18) syz_80211_inject_frame(&(0x7f0000000580), 0x0, 0x0) 1.142326615s ago: executing program 33 (id=2647): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000019580)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c40)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689e5dd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x10000000, 0x400, 0x4, 0x5, {0x9, 0x0, 0x1, 0x2, 0x8, 0x3}, {0x7, 0x2, 0x10, 0x0, 0x1, 0xfffffffe}, 0x80, 0x0, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) 111.69052ms ago: executing program 34 (id=2656): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c0001800600060086dd"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) socket$packet(0x11, 0x2, 0x300) (async) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mem_disconnect\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f00000002c0)="ae24a21f9a824666f9acf0e0163f", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r5, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000200000020000000200000005003d00f700000008006900040000007b4924175fc6f72dc2389609c90e36a5db9534a5e67a7dae0b6f0e8fcefc6a74af5c9f28479142bb7f49accfafc924e2f04db5a77fccc47681960793359582fdee038fe5b775c175cd7f0f9b8d07370060e6007b1ce9f3c2312880fca89a146b4c34782195b398c3314af6fe34af01e38bc557a820c0bc0a53dd58c82077ee06e82e49aee258d0c885800dbdc45cd7"], 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) (async) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200000200000020000000200000005003d00f700000008006900040000007b4924175fc6f72dc2389609c90e36a5db9534a5e67a7dae0b6f0e8fcefc6a74af5c9f28479142bb7f49accfafc924e2f04db5a77fccc47681960793359582fdee038fe5b775c175cd7f0f9b8d07370060e6007b1ce9f3c2312880fca89a146b4c34782195b398c3314af6fe34af01e38bc557a820c0bc0a53dd58c82077ee06e82e49aee258d0c885800dbdc45cd7"], 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x6c00}, 0x20000004) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r2, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x1}, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 57.458203ms ago: executing program 35 (id=2649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206050000000000000000000000000005000400320000000900020073797a32000000000c00078008000640000000000500d57777a40000050001000600000011000300686173683a6e65742c6e657400000000", @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES64=r0], 0x58}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="192c2cbd7000ffdb06251500050000000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@initr0, @alu={0x7, 0x1, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x90) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="017917000000000020020c00000008000400000000bb"], 0x1c}}, 0x0) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x54, 0x1, 0x4, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfffffffc}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xbc7}, @NFULA_CFG_MODE={0xa, 0x2, {0x3}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x4001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0xb}]}}]}, 0x44}}, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket(0x2000000015, 0x80005, 0x0) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'batadv0\x00', 0x5766}) r10 = socket$inet6(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x3, 0x2, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x7800, 0x80, 0x101, 0x8}}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r9, 0x65, 0x4, &(0x7f0000000000), 0x4) 0s ago: executing program 36 (id=2651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000007d2700000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async, rerun: 64) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r8, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0x54, r9, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x86d}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2404c0c0}, 0x4040050) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (rerun: 64) nanosleep(&(0x7f00000000c0)={0x77359400}, 0x0) (async) close(r6) (async) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x5c, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0xb, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048890}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): f bearer rejected, already enabled [ 184.855255][ T9967] __nla_validate_parse: 4 callbacks suppressed [ 184.855274][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1096'. [ 184.916298][ T9967] netlink: 'syz.4.1096': attribute type 5 has an invalid length. [ 184.952540][ T9967] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1096'. [ 184.986984][ T9967] geneve4: entered promiscuous mode [ 185.017656][ T9967] geneve4: entered allmulticast mode [ 185.045469][ T7583] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 185.085159][ T7583] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 185.095086][ T7583] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 185.149857][ T7583] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 185.458747][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1102'. [ 185.482878][ T9996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.552114][T10004] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 185.835792][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1105'. [ 185.918810][T10024] tipc: Started in network mode [ 185.937591][T10024] tipc: Node identity c6b491eb13a1, cluster identity 4711 [ 185.958167][T10024] tipc: Enabled bearer , priority 0 [ 185.990589][T10024] syzkaller0: entered promiscuous mode [ 186.005023][T10024] syzkaller0: entered allmulticast mode [ 186.119239][T10024] tipc: Resetting bearer [ 186.146873][T10020] tipc: Resetting bearer [ 186.180075][T10020] tipc: Disabling bearer [ 186.207609][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1112'. [ 186.275410][T10050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1113'. [ 186.486076][T10067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1114'. [ 186.549781][T10067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1114'. [ 186.659046][T10072] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1118'. [ 187.161066][T10088] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 187.201545][T10090] ip6gre0: Master is either lo or non-ether device [ 187.532151][T10110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1130'. [ 189.221280][ T5861] Bluetooth: hci0: command tx timeout [ 189.272284][T10202] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 189.991227][T10245] __nla_validate_parse: 8 callbacks suppressed [ 189.991247][T10245] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1166'. [ 190.176171][T10249] validate_nla: 6 callbacks suppressed [ 190.176190][T10249] netlink: 'syz.1.1167': attribute type 3 has an invalid length. [ 190.203558][T10249] netlink: 'syz.1.1167': attribute type 3 has an invalid length. [ 190.219187][T10249] netlink: 'syz.1.1167': attribute type 3 has an invalid length. [ 190.237020][T10249] netlink: 'syz.1.1167': attribute type 3 has an invalid length. [ 190.249877][T10249] netlink: 'syz.1.1167': attribute type 3 has an invalid length. [ 190.272249][T10249] netlink: 'syz.1.1167': attribute type 3 has an invalid length. [ 190.288347][T10249] netlink: 'syz.1.1167': attribute type 3 has an invalid length. [ 190.341180][T10249] netlink: 'syz.1.1167': attribute type 3 has an invalid length. [ 190.353631][T10249] netlink: 'syz.1.1167': attribute type 3 has an invalid length. [ 190.377339][T10249] netlink: 'syz.1.1167': attribute type 3 has an invalid length. [ 190.507172][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'. [ 190.554280][T10262] tipc: Enabled bearer , priority 0 [ 190.676758][T10271] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 190.712797][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1169'. [ 190.748865][T10271] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 190.759038][T10271] gretap1: entered promiscuous mode [ 190.796840][T10271] gretap1: entered allmulticast mode [ 190.868588][T10266] syzkaller0: entered promiscuous mode [ 190.913337][T10266] syzkaller0: entered allmulticast mode [ 191.044355][T10251] tipc: Resetting bearer [ 191.110138][T10292] openvswitch: netlink: nsh attribute has 8 unknown bytes. [ 191.132845][T10251] tipc: Disabling bearer [ 191.475281][T10309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1181'. [ 191.746733][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1185'. [ 192.085129][T10329] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1186'. [ 192.120907][T10343] tipc: Enabled bearer , priority 0 [ 192.836340][T10336] tipc: Disabling bearer [ 192.937681][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1195'. [ 193.016535][T10371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1195'. [ 193.096190][T10376] syzkaller0 speed is unknown, defaulting to 1000 [ 193.120233][T10371] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1195'. [ 193.326948][T10386] : renamed from hsr0 [ 193.624431][T10406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1202'. [ 194.506416][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.558618][T10451] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20003 [ 196.557267][T10455] vlan2: entered allmulticast mode [ 196.562489][T10455] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 196.588782][T10464] tipc: Started in network mode [ 196.604357][T10464] tipc: Node identity ca726adbbbba, cluster identity 4711 [ 196.625860][T10464] tipc: Enabled bearer , priority 0 [ 196.667927][T10465] syzkaller0: entered promiscuous mode [ 196.701425][T10465] syzkaller0: entered allmulticast mode [ 196.755979][T10486] __nla_validate_parse: 5 callbacks suppressed [ 196.755998][T10486] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1223'. [ 196.758763][T10477] pim6reg: entered allmulticast mode [ 196.770034][T10486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1223'. [ 196.803351][T10478] pim6reg: left allmulticast mode [ 196.888775][T10469] tipc: Resetting bearer [ 196.993066][T10469] tipc: Disabling bearer [ 201.546272][ T96] block nbd0: Possible stuck request ffff888024d97000: control (read@0,4096B). Runtime 60 seconds [ 203.108803][ T5232] udevd[5232]: worker [5911] /devices/virtual/block/nbd0 is taking a long time [ 210.507045][ T55] block nbd1: Possible stuck request ffff888024dce000: control (read@0,1024B). Runtime 60 seconds [ 210.517870][ T55] block nbd1: Possible stuck request ffff888024dce1c0: control (read@1024,1024B). Runtime 60 seconds [ 210.529340][ T55] block nbd1: Possible stuck request ffff888024dce380: control (read@2048,1024B). Runtime 60 seconds [ 210.540341][ T55] block nbd1: Possible stuck request ffff888024dce540: control (read@3072,1024B). Runtime 60 seconds [ 211.941353][ T5861] Bluetooth: hci3: command 0x0406 tx timeout [ 211.941503][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 211.948263][ T5864] Bluetooth: hci2: command 0x0406 tx timeout [ 214.975482][ T5232] udevd[5232]: worker [5910] /devices/virtual/block/nbd1 is taking a long time [ 217.635579][T10577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1231'. [ 217.721972][T10577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1231'. [ 217.758123][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1234'. [ 218.142046][T10604] geneve4: entered promiscuous mode [ 218.147329][T10604] geneve4: entered allmulticast mode [ 218.231858][T10610] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1241'. [ 218.287465][T10610] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 218.360178][ T36] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0 [ 218.401863][ T36] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 218.410743][ T36] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 218.483491][ T36] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 218.554816][T10631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1245'. [ 218.764490][T10635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1247'. [ 218.957790][T10642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1249'. [ 219.477009][T10671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1252'. [ 219.517594][T10670] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.528804][T10670] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 219.537523][T10674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1252'. [ 219.569807][T10670] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 219.601323][T10670] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 219.694839][T10671] validate_nla: 43 callbacks suppressed [ 219.694859][T10671] netlink: 'syz.1.1252': attribute type 1 has an invalid length. [ 219.736961][T10670] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.751268][T10670] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 219.764594][T10670] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 219.787589][T10670] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 219.884154][T10685] netlink: 'syz.1.1252': attribute type 11 has an invalid length. [ 219.892499][T10685] netlink: 'syz.1.1252': attribute type 11 has an invalid length. [ 219.905047][T10685] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1252'. [ 219.949829][T10671] bond2: entered promiscuous mode [ 219.956253][T10671] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.998638][T10674] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.008353][T10674] bond2: (slave bond3): making interface the new active one [ 220.015045][T10699] netlink: 'syz.2.1263': attribute type 21 has an invalid length. [ 220.016458][T10674] bond3: entered promiscuous mode [ 220.038692][T10674] bond2: (slave bond3): Enslaving as an active interface with an up link [ 220.064438][T10670] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.094395][T10670] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 220.157750][T10670] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 220.176821][T10670] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 220.392214][T10694] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.405915][T10694] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.417275][T10694] bond0 (unregistering): Released all slaves [ 220.459762][T10670] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.475543][T10670] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 220.491191][T10670] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 220.527295][T10670] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 220.648592][T10718] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.735423][ T7583] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.766062][ T7583] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 220.789949][ T7583] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 220.813851][ T7583] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 220.870662][ T1321] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.899513][ T1321] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 220.918355][T10726] netlink: 'syz.4.1269': attribute type 1 has an invalid length. [ 220.921264][ T1321] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 220.979697][ T1321] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 221.009129][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.023201][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 221.043417][ T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 221.056718][ T13] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 221.087337][ T1321] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.133485][ T1321] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 221.163660][ T1321] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 221.201278][ T1321] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 221.287478][T10737] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 221.828744][T10772] netlink: 'syz.0.1283': attribute type 21 has an invalid length. [ 221.844152][T10772] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 221.944124][T10766] syzkaller0 speed is unknown, defaulting to 1000 [ 222.063586][T10765] syzkaller0 speed is unknown, defaulting to 1000 [ 222.089020][T10779] sctp: [Deprecated]: syz.1.1286 (pid 10779) Use of int in maxseg socket option. [ 222.089020][T10779] Use struct sctp_assoc_value instead [ 222.523762][T10785] delete_channel: no stack [ 222.744684][T10798] __nla_validate_parse: 8 callbacks suppressed [ 222.744705][T10798] netlink: 23700 bytes leftover after parsing attributes in process `syz.2.1289'. [ 222.773225][T10793] netlink: 'syz.2.1289': attribute type 1 has an invalid length. [ 222.801326][T10793] netlink: 'syz.2.1289': attribute type 3 has an invalid length. [ 222.849951][T10793] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1289'. [ 222.893967][T10793] NCSI netlink: No device for ifindex 131080 [ 223.143834][T10817] openvswitch: netlink: Flow actions attr not present in new flow. [ 223.380572][T10824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1298'. [ 223.757833][T10837] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1301'. [ 223.772327][T10838] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1301'. [ 223.992363][T10849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1303'. [ 224.069151][T10849] IPv6: sit2: Disabled Multicast RS [ 224.075851][T10849] sit2: entered allmulticast mode [ 224.165298][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1305'. [ 224.186702][T10854] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1305'. [ 224.350498][T10857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.362222][T10857] team0: Failed to send options change via netlink (err -105) [ 224.369903][T10857] team0: Port device bond0 added [ 224.577910][T10868] dvmrp1: entered allmulticast mode [ 224.602133][T10873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.953421][T10891] tipc: Enabled bearer , priority 0 [ 224.960951][T10891] syzkaller0: entered promiscuous mode [ 224.969859][T10891] syzkaller0: entered allmulticast mode [ 224.979498][T10891] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 224.999020][T10891] tipc: Resetting bearer [ 225.006391][T10890] tipc: Resetting bearer [ 225.021826][T10890] tipc: Disabling bearer [ 225.865026][T10920] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1326'. [ 225.893421][T10924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.929331][T10924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.006927][T10924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.071807][T10924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.140098][T10924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.162380][T10924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.178604][T10924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.253850][T10924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.305247][T10924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.420921][T10924] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.520067][T10949] Bluetooth: MGMT ver 1.23 [ 226.709233][T10960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1339'. [ 226.963600][T10965] syzkaller1: entered promiscuous mode [ 226.979417][T10965] syzkaller1: entered allmulticast mode [ 227.007736][T10965] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 227.325493][T10981] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20003 [ 227.336198][T10986] bond6: entered promiscuous mode [ 227.341754][T10986] bond6: entered allmulticast mode [ 227.349296][T10986] 8021q: adding VLAN 0 to HW filter on device bond6 [ 227.776140][T10986] bond6 (unregistering): Released all slaves [ 227.898304][T11015] __nla_validate_parse: 5 callbacks suppressed [ 227.898326][T11015] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1355'. [ 228.059657][T11026] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1358'. [ 228.072805][T11026] gretap0: entered promiscuous mode [ 228.090951][T11029] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1358'. [ 228.096316][T11026] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1358'. [ 228.110354][T11026] 0ªî{X¹¦: renamed from gretap0 [ 228.119604][T11026] 0ªî{X¹¦: left promiscuous mode [ 228.125343][T11026] 0ªî{X¹¦: entered allmulticast mode [ 228.133543][T11029] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 228.216140][T11033] netlink: 71 bytes leftover after parsing attributes in process `syz.4.1359'. [ 228.253812][T11028] tipc: Enabled bearer , priority 24 [ 228.375911][T11035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1360'. [ 228.569336][T11050] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1363'. [ 228.879975][T11070] netlink: 'syz.4.1371': attribute type 5 has an invalid length. [ 229.071647][T11084] netlink: 'syz.1.1374': attribute type 4 has an invalid length. [ 229.099923][T11084] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1374'. [ 229.156330][T11084] netlink: 'syz.1.1374': attribute type 4 has an invalid length. [ 229.189176][T11088] veth1_to_bond: entered allmulticast mode [ 229.208372][T11088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1376'. [ 229.242386][T11085] netlink: 'syz.2.1375': attribute type 1 has an invalid length. [ 229.352075][T11088] bond0: (slave bond_slave_1): Releasing backup interface [ 229.481889][T11088] veth1_to_bond (unregistering): left allmulticast mode [ 229.504683][T11084] netlink: 'syz.1.1374': attribute type 5 has an invalid length. [ 229.627933][T11105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1379'. [ 230.189489][T11133] netlink: 'syz.1.1387': attribute type 9 has an invalid length. [ 230.544848][T11149] syz_tun (unregistering): left allmulticast mode [ 230.556294][T11149] syz_tun (unregistering): left promiscuous mode [ 230.565959][T11149] bridge0: port 3(syz_tun) entered disabled state [ 230.734225][T11161] netlink: 'syz.3.1396': attribute type 1 has an invalid length. [ 230.854238][T11173] netlink: 'syz.0.1399': attribute type 3 has an invalid length. [ 230.886044][T11173] netlink: 'syz.0.1399': attribute type 3 has an invalid length. [ 230.915995][T11173] netlink: 'syz.0.1399': attribute type 3 has an invalid length. [ 231.622713][T10533] block nbd0: Possible stuck request ffff888024d97000: control (read@0,4096B). Runtime 90 seconds [ 232.799800][T11254] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 232.872041][T11254] input: failed to attach handler evdev to device input5, error: -4 [ 233.343340][T11289] __nla_validate_parse: 19 callbacks suppressed [ 233.343361][T11289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1432'. [ 233.490454][T11294] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1433'. [ 233.793211][T11301] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1436'. [ 233.838329][T11301] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1436'. [ 233.905539][T11311] validate_nla: 48 callbacks suppressed [ 233.905559][T11311] netlink: 'syz.0.1437': attribute type 4 has an invalid length. [ 233.963977][T11311] netlink: 'syz.0.1437': attribute type 4 has an invalid length. [ 234.085681][T11309] syzkaller0 speed is unknown, defaulting to 1000 [ 234.182859][T11326] netlink: 'syz.2.1440': attribute type 4 has an invalid length. [ 234.592893][T11342] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 234.707018][T11352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1448'. [ 234.711518][T11351] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20001 [ 234.744571][T11352] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1448'. [ 234.766777][T11355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1450'. [ 234.776891][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1448'. [ 234.799687][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1448'. [ 234.809516][T11357] net_ratelimit: 25 callbacks suppressed [ 234.809533][T11357] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 234.832075][T11358] netlink: 'syz.1.1451': attribute type 1 has an invalid length. [ 234.846556][T11357] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.908221][T11362] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1453'. [ 235.007629][T11358] 8021q: adding VLAN 0 to HW filter on device bond4 [ 235.040404][T11371] netlink: 'syz.2.1452': attribute type 10 has an invalid length. [ 235.269937][T11377] netlink: 'syz.3.1457': attribute type 3 has an invalid length. [ 235.369772][T11383] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 235.672930][T11402] netlink: 'syz.0.1466': attribute type 4 has an invalid length. [ 236.106644][T11422] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.297020][T11435] dvmrp1: left allmulticast mode [ 236.373504][T11439] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 236.414706][T11439] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 236.929815][T11469] veth5: entered promiscuous mode [ 237.022871][T11476] hsr_slave_0: left promiscuous mode [ 237.033922][T11476] hsr_slave_1: left promiscuous mode [ 237.381399][ T5871] Bluetooth: hci0: command tx timeout [ 237.540699][T11505] IPVS: length: 4096 != 8 [ 237.564988][T11504] IPVS: length: 4096 != 8 [ 237.579596][T11507] netlink: 'syz.0.1499': attribute type 5 has an invalid length. [ 237.812054][T11516] : entered promiscuous mode [ 237.949540][T11524] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 238.342887][T11540] sctp: [Deprecated]: syz.0.1509 (pid 11540) Use of int in max_burst socket option. [ 238.342887][T11540] Use struct sctp_assoc_value instead [ 238.359466][T11542] sctp: [Deprecated]: syz.0.1509 (pid 11542) Use of int in max_burst socket option. [ 238.359466][T11542] Use struct sctp_assoc_value instead [ 238.924950][T11575] __nla_validate_parse: 14 callbacks suppressed [ 238.924973][T11575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1518'. [ 238.949648][T11564] netlink: 'syz.3.1517': attribute type 12 has an invalid length. [ 238.960530][T11580] batadv0: mtu less than device minimum [ 239.790685][T11625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1528'. [ 239.813181][T11622] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1529'. [ 239.857756][T11615] netlink: 'syz.3.1527': attribute type 15 has an invalid length. [ 239.887302][T11615] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1527'. [ 240.097673][T11640] netlink: 'syz.0.1532': attribute type 1 has an invalid length. [ 240.288273][T11645] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 240.301696][T11645] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 240.320830][T11647] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1533'. [ 240.330786][T11649] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1534'. [ 240.337212][T11651] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1535'. [ 240.384541][T11646] gretap0: entered promiscuous mode [ 240.416963][T11646] bond3: (slave gretap0): making interface the new active one [ 240.450087][T11646] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 240.593839][ T55] block nbd1: Possible stuck request ffff888024dce000: control (read@0,1024B). Runtime 90 seconds [ 240.604980][ T55] block nbd1: Possible stuck request ffff888024dce1c0: control (read@1024,1024B). Runtime 90 seconds [ 240.616353][ T55] block nbd1: Possible stuck request ffff888024dce380: control (read@2048,1024B). Runtime 90 seconds [ 240.628590][ T55] block nbd1: Possible stuck request ffff888024dce540: control (read@3072,1024B). Runtime 90 seconds [ 240.806478][T11673] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1540'. [ 241.117444][T11688] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1542'. [ 241.299216][T11700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1545'. [ 241.687138][T11720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 241.714886][T11720] team0: Failed to send options change via netlink (err -105) [ 241.722683][T11720] team0: Port device bond1 added [ 241.894050][T11731] tipc: Enabled bearer , priority 0 [ 241.927319][T11731] syzkaller0: entered promiscuous mode [ 241.957716][T11731] syzkaller0: entered allmulticast mode [ 242.070876][ T13] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 242.087695][T11731] tipc: Resetting bearer [ 242.141200][T11730] tipc: Resetting bearer [ 242.213960][T11730] tipc: Disabling bearer [ 242.606786][T11780] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.636091][T11780] netlink: 'syz.4.1567': attribute type 10 has an invalid length. [ 243.948029][T11843] __nla_validate_parse: 6 callbacks suppressed [ 243.948049][T11843] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1581'. [ 244.116534][T11855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1585'. [ 244.202953][ T5871] block nbd2: Receive control failed (result -32) [ 244.287360][T11867] netlink: 'syz.2.1587': attribute type 1 has an invalid length. [ 244.303964][T11867] netlink: 'syz.2.1587': attribute type 39 has an invalid length. [ 244.318459][T11863] syzkaller0: entered promiscuous mode [ 244.358295][T11863] syzkaller0: entered allmulticast mode [ 244.804666][T11888] atomic_op ffff88807fadd998 conn xmit_atomic 0000000000000000 [ 245.106617][T11901] netlink: 'syz.1.1596': attribute type 1 has an invalid length. [ 245.235700][T11901] 8021q: adding VLAN 0 to HW filter on device bond5 [ 245.398571][T11904] 8021q: adding VLAN 0 to HW filter on device bond5 [ 245.451916][T11904] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 245.490066][T11904] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 245.879490][T11901] veth5: entered promiscuous mode [ 245.934773][T11901] bond5: (slave veth5): Enslaving as an active interface with a down link [ 245.996807][T11929] vlan3: entered allmulticast mode [ 246.006205][T11929] bond5: entered allmulticast mode [ 246.035137][T11949] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1604'. [ 246.226851][ T5871] Bluetooth: hci4: link tx timeout [ 246.232284][ T5871] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 246.588287][T11978] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1614'. [ 246.767066][T11987] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1616'. [ 246.890040][T11992] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.1617'. [ 246.928199][T11992] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.1617'. [ 247.067561][T12003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.089598][T12004] team0: Device gtp0 is of different type [ 247.146964][T12007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1623'. [ 247.326106][T12018] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1628'. [ 247.369884][T12018] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1628'. [ 247.426552][T12025] netlink: 'syz.1.1630': attribute type 1 has an invalid length. [ 247.449202][T12025] team_slave_0: entered promiscuous mode [ 247.455253][T12025] team_slave_1: entered promiscuous mode [ 247.641827][T12036] netlink: 'syz.3.1631': attribute type 1 has an invalid length. [ 247.687455][T12035] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 248.253564][T12066] netlink: 'syz.4.1641': attribute type 1 has an invalid length. [ 248.272317][ T5867] Bluetooth: hci4: command 0x0406 tx timeout [ 248.603283][T12066] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.080462][T12112] __nla_validate_parse: 8 callbacks suppressed [ 249.080482][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1652'. [ 249.472401][T12130] netlink: 'syz.2.1658': attribute type 4 has an invalid length. [ 249.575432][T12136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1657'. [ 249.829362][T12150] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 249.947277][T12149] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 250.504689][T12149] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -512 0 [ 250.637383][T12161] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1663'. [ 251.596503][T12147] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 251.801693][T12172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.113062][T12190] tipc: Enabled bearer , priority 0 [ 252.438440][T12190] syzkaller0: entered promiscuous mode [ 252.472333][T12190] syzkaller0: entered allmulticast mode [ 252.572285][T12190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1670'. [ 252.600305][T12212] tipc: Resetting bearer [ 252.885852][T12189] tipc: Resetting bearer [ 252.998010][T12189] tipc: Disabling bearer [ 253.076723][T12234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1678'. [ 253.108918][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1678'. [ 253.839181][T12271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1688'. [ 253.946203][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1689'. [ 253.991089][T12278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1689'. [ 254.209222][T12294] !: renamed from dummy0 (while UP) [ 254.407597][T12307] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1695'. [ 254.472829][T12309] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1696'. [ 254.505760][T12309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1696'. [ 254.543195][T12309] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1696'. [ 254.596314][T12309] netlink: 'syz.0.1696': attribute type 2 has an invalid length. [ 254.654031][T12309] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1696'. [ 254.782189][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1702'. [ 254.895570][T12327] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1704'. [ 254.986487][T12321] syzkaller0 speed is unknown, defaulting to 1000 [ 255.257213][T12344] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1706'. [ 255.412119][T12352] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 255.765269][T12373] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1712'. [ 255.870724][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1713'. [ 255.947791][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.093963][T12385] veth0: entered promiscuous mode [ 256.149756][T12384] veth0: left promiscuous mode [ 256.702991][T12410] netlink: 'syz.1.1723': attribute type 1 has an invalid length. [ 257.892686][ T7581] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 257.903661][ T7581] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 257.914550][ T7581] netdevsim netdevsim2 netdevsim0: unset [1, 2] type 2 family 0 port 19999 - 0 [ 257.975283][ T7581] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 257.987515][ T7581] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 257.996810][ T7581] netdevsim netdevsim2 netdevsim1: unset [1, 2] type 2 family 0 port 19999 - 0 [ 258.023698][ T7581] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 258.067469][ T7581] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 258.115227][ T7581] netdevsim netdevsim2 netdevsim2: unset [1, 2] type 2 family 0 port 19999 - 0 [ 258.156223][ T7581] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 258.194240][ T7581] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 258.230628][ T7581] netdevsim netdevsim2 netdevsim3: unset [1, 2] type 2 family 0 port 19999 - 0 [ 258.492958][T12493] syzkaller0: entered promiscuous mode [ 258.524618][T12493] syzkaller0: entered allmulticast mode [ 258.888950][T12512] macvtap1: entered promiscuous mode [ 258.894633][T12512] vlan0: entered promiscuous mode [ 258.899970][T12512] macvtap1: entered allmulticast mode [ 258.905620][T12512] vlan0: entered allmulticast mode [ 258.910791][T12512] veth0_vlan: entered allmulticast mode [ 259.614317][T12539] __nla_validate_parse: 8 callbacks suppressed [ 259.614338][T12539] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1755'. [ 259.641733][T12536] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 259.900393][T12556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1757'. [ 260.543647][T12592] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 260.877429][T12613] sctp: [Deprecated]: syz.4.1767 (pid 12613) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.877429][T12613] Use struct sctp_sack_info instead [ 261.541083][ T5871] Bluetooth: hci2: command 0x0406 tx timeout [ 261.702747][T10533] block nbd0: Possible stuck request ffff888024d97000: control (read@0,4096B). Runtime 120 seconds [ 261.857737][T12666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1779'. [ 262.353637][T12667] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 263.105805][T12712] Unsupported ieee802154 address type: 0 [ 263.146096][T12715] netlink: 'syz.3.1789': attribute type 30 has an invalid length. [ 263.223474][T12718] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1791'. [ 263.320368][T12716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1791'. [ 263.345100][T12718] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1791'. [ 263.357976][T12716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1791'. [ 265.810883][T12739] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1796'. [ 266.039493][T12765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1802'. [ 266.216350][T12777] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1805'. [ 266.432859][T12785] tipc: Enabling of bearer rejected, failed to enable media [ 266.921949][T12816] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1814'. [ 266.951704][T12816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1814'. [ 267.202786][T12835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1820'. [ 267.585125][T12853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1824'. [ 267.838397][T12861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1826'. [ 267.905464][T12872] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1828'. [ 267.925611][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1830'. [ 268.319168][T12896] netlink: 'syz.0.1835': attribute type 10 has an invalid length. [ 268.343981][T12896] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.351258][T12896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.359005][T12896] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.366236][T12896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.409672][T12896] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 268.879516][T12929] netlink: 'syz.0.1846': attribute type 8 has an invalid length. [ 269.255663][T12951] batadv_slave_0: entered allmulticast mode [ 269.389829][T12948] batadv_slave_0: left allmulticast mode [ 270.197820][T13020] netlink: 'syz.0.1875': attribute type 2 has an invalid length. [ 270.429650][T13030] nbd: must specify a device to reconfigure [ 270.710741][ T55] block nbd1: Possible stuck request ffff888024dce000: control (read@0,1024B). Runtime 120 seconds [ 270.722530][ T55] block nbd1: Possible stuck request ffff888024dce1c0: control (read@1024,1024B). Runtime 120 seconds [ 270.733793][ T55] block nbd1: Possible stuck request ffff888024dce380: control (read@2048,1024B). Runtime 120 seconds [ 270.746007][ T55] block nbd1: Possible stuck request ffff888024dce540: control (read@3072,1024B). Runtime 120 seconds [ 270.847622][T13053] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 270.941685][T13059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.948965][T13059] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 271.026486][T13059] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 271.063326][T13067] __nla_validate_parse: 8 callbacks suppressed [ 271.063347][T13067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1887'. [ 271.123971][T13062] netlink: 'syz.2.1887': attribute type 1 has an invalid length. [ 271.208547][T13062] 8021q: adding VLAN 0 to HW filter on device bond6 [ 271.320817][T13067] 8021q: adding VLAN 0 to HW filter on device bond6 [ 271.331846][T13067] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 271.403029][T13067] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 271.503656][T13087] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1892'. [ 271.591367][T13062] veth9: entered promiscuous mode [ 271.617039][T13090] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1894'. [ 271.810065][T13100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1895'. [ 272.102744][T13122] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 272.135061][T13122] netlink: 'syz.2.1902': attribute type 11 has an invalid length. [ 272.147542][T13107] ieee802154 phy0 wpan0: encryption failed: -22 [ 272.158933][T13122] netlink: 'syz.2.1902': attribute type 11 has an invalid length. [ 272.180577][T13122] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1902'. [ 272.224049][T13126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.312342][T13122] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1902'. [ 272.711363][T13145] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1908'. [ 273.033842][T13165] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1912'. [ 273.103600][T13167] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1914'. [ 273.164529][T13174] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1914'. [ 273.428374][T13185] tc_dump_action: action bad kind [ 273.444295][T13188] netlink: 'syz.1.1917': attribute type 39 has an invalid length. [ 273.537001][T13189] 8021q: adding VLAN 0 to HW filter on device bond6 [ 273.793890][T13189] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 274.805514][T13258] team0: No ports can be present during mode change [ 275.002689][T13265] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 275.035626][T13268] ipvlan0: entered promiscuous mode [ 275.050449][T13268] bridge0: port 2(ipvlan0) entered blocking state [ 275.058251][T13265] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 275.076550][T13268] bridge0: port 2(ipvlan0) entered disabled state [ 275.083735][T13268] ipvlan0: entered allmulticast mode [ 275.089782][T13268] bridge0: entered allmulticast mode [ 275.118447][T13268] ipvlan0: left allmulticast mode [ 275.124357][T13268] bridge0: left allmulticast mode [ 275.317290][T13281] raw_sendmsg: syz.2.1940 forgot to set AF_INET. Fix it! [ 275.320223][T13273] syzkaller0: entered promiscuous mode [ 275.340322][T13273] syzkaller0: entered allmulticast mode [ 275.578307][T13298] sctp: [Deprecated]: syz.1.1941 (pid 13298) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.578307][T13298] Use struct sctp_sack_info instead [ 275.750857][T13305] netlink: 'syz.0.1946': attribute type 12 has an invalid length. [ 276.872072][T13305] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 276.984903][T13310] __nla_validate_parse: 7 callbacks suppressed [ 276.984922][T13310] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1947'. [ 277.128329][T13315] tipc: Enabled bearer , priority 0 [ 277.154128][T13315] syzkaller0: entered promiscuous mode [ 277.154469][T13319] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1953'. [ 277.159675][T13315] syzkaller0: entered allmulticast mode [ 277.209813][T13315] tipc: Resetting bearer [ 277.234502][T13319] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1953'. [ 277.246912][T13315] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1950'. [ 277.263951][T13319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1953'. [ 277.335478][T13327] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1955'. [ 277.346299][T13314] tipc: Resetting bearer [ 277.380160][T13314] tipc: Disabling bearer [ 277.638793][T13342] sctp: [Deprecated]: syz.3.1962 (pid 13342) Use of int in max_burst socket option. [ 277.638793][T13342] Use struct sctp_assoc_value instead [ 277.639837][T13343] pimreg3: entered allmulticast mode [ 277.915601][T13348] syz.1.1964 (13348) used greatest stack depth: 17896 bytes left [ 278.098305][T13369] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 278.105781][T13369] IPv6: NLM_F_CREATE should be set when creating new route [ 278.113199][T13369] IPv6: NLM_F_CREATE should be set when creating new route [ 278.161236][T13369] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 278.278580][T13381] netlink: 'syz.1.1975': attribute type 1 has an invalid length. [ 278.310031][T13381] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1975'. [ 278.325364][T13381] netlink: 'syz.1.1975': attribute type 1 has an invalid length. [ 278.334804][T13381] netlink: 'syz.1.1975': attribute type 2 has an invalid length. [ 278.335073][T13385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1977'. [ 278.443116][T13385] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1977'. [ 278.884151][T13417] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1988'. [ 279.875045][T13479] syzkaller1: entered promiscuous mode [ 279.893310][T13479] syzkaller1: entered allmulticast mode [ 279.934930][T13485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.964711][T13485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.577928][T13519] netlink: 'syz.3.2011': attribute type 1 has an invalid length. [ 280.621814][T13519] netlink: 'syz.3.2011': attribute type 1 has an invalid length. [ 281.438455][T13565] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.508175][T13583] netlink: 'syz.3.2023': attribute type 9 has an invalid length. [ 281.858181][T13599] veth0: entered promiscuous mode [ 281.943952][T13595] veth0: left promiscuous mode [ 282.286910][T13620] __nla_validate_parse: 7 callbacks suppressed [ 282.286930][T13620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2035'. [ 282.341866][T13627] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 282.361966][T13627] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 282.390916][T13627] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 282.421459][T13635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2040'. [ 282.452605][T13635] nbd: must specify at least one socket [ 282.467663][T13636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2041'. [ 282.485852][T13636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2041'. [ 283.759543][T13698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2052'. [ 283.771862][T13698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2052'. [ 283.820725][T13702] netlink: 'syz.2.2053': attribute type 10 has an invalid length. [ 283.842134][T13700] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.945575][T13707] netlink: 'syz.1.2055': attribute type 1 has an invalid length. [ 283.955728][T13707] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2055'. [ 283.956633][T13714] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 283.978820][T13714] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 284.329766][T13740] netlink: 'syz.3.2060': attribute type 1 has an invalid length. [ 284.339769][T13740] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2060'. [ 284.388085][T13740] netlink: 'syz.3.2060': attribute type 1 has an invalid length. [ 284.399110][T13740] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2060'. [ 284.477037][T13746] erspan0: mtu less than device minimum [ 284.658116][T13761] bond4: entered promiscuous mode [ 284.670371][T13761] bond4: entered allmulticast mode [ 284.681397][T13761] 8021q: adding VLAN 0 to HW filter on device bond4 [ 285.049985][T13761] bond4 (unregistering): Released all slaves [ 285.193397][T13785] netlink: 'syz.4.2068': attribute type 11 has an invalid length. [ 285.245173][T13785] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2068'. [ 285.749672][T13814] netlink: 'syz.3.2073': attribute type 1 has an invalid length. [ 285.883338][T13820] bond7: (slave gretap0): making interface the new active one [ 285.929986][T13820] bond7: (slave gretap0): Enslaving as an active interface with an up link [ 286.747069][T13884] netlink: 'syz.0.2089': attribute type 39 has an invalid length. [ 287.314742][T13914] __nla_validate_parse: 7 callbacks suppressed [ 287.314760][T13914] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2098'. [ 287.340419][T13912] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2098'. [ 287.369907][T13912] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2098'. [ 287.400197][T13914] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2098'. [ 287.445486][T13912] 0ªî{X¹¦: entered promiscuous mode [ 287.520906][T13912] 0ªî{X¹¦: left promiscuous mode [ 287.639310][T13914] 0ªî{X¹¦: entered promiscuous mode [ 287.719423][T13914] 0ªî{X¹¦: left promiscuous mode [ 287.901654][T13944] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2104'. [ 288.169738][T13956] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 288.177090][T13956] IPv6: NLM_F_CREATE should be set when creating new route [ 288.184373][T13956] IPv6: NLM_F_CREATE should be set when creating new route [ 288.205926][T13956] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 288.246392][T13959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2111'. [ 288.286033][T13952] macvtap1: entered promiscuous mode [ 288.291562][T13952] vlan0: entered promiscuous mode [ 288.296615][T13952] geneve1: entered promiscuous mode [ 288.302266][T13952] macvtap1: entered allmulticast mode [ 288.307674][T13952] vlan0: entered allmulticast mode [ 288.313700][T13952] geneve1: entered allmulticast mode [ 288.325488][T13960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2110'. [ 288.335195][T13960] erspan0: entered promiscuous mode [ 288.340761][T13957] netlink: 'syz.0.2110': attribute type 25 has an invalid length. [ 288.528665][T13972] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2113'. [ 288.583437][T13972] vlan3: entered allmulticast mode [ 288.588623][T13972] gretap0: entered allmulticast mode [ 288.935753][T13992] netlink: 'syz.0.2123': attribute type 4 has an invalid length. [ 289.016536][T14000] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2125'. [ 289.042023][T14000] gretap0: entered promiscuous mode [ 289.113024][T14003] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2124'. [ 289.345420][T14007] 0ªî{X¹¦: renamed from gretap0 [ 289.367837][T14007] 0ªî{X¹¦: left promiscuous mode [ 289.374554][T14007] 0ªî{X¹¦: entered allmulticast mode [ 289.393567][T14007] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 289.463920][T14019] netem: change failed [ 289.524807][T14023] netlink: 'syz.0.2132': attribute type 12 has an invalid length. [ 289.539146][T14023] netlink: 'syz.0.2132': attribute type 12 has an invalid length. [ 289.604067][T13984] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 289.650809][T14028] sctp: [Deprecated]: syz.2.2134 (pid 14028) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.650809][T14028] Use struct sctp_sack_info instead [ 289.732205][T14035] netlink: 'syz.1.2137': attribute type 1 has an invalid length. [ 289.750316][T14035] netlink: 'syz.1.2137': attribute type 4 has an invalid length. [ 289.966955][T14047] netlink: 'syz.4.2139': attribute type 14 has an invalid length. [ 290.016465][T14047] netlink: 'syz.4.2139': attribute type 13 has an invalid length. [ 290.070645][T14054] veth0: entered promiscuous mode [ 290.104378][T14054] veth0 (unregistering): left promiscuous mode [ 290.359058][T14071] sctp: [Deprecated]: syz.0.2146 (pid 14071) Use of int in maxseg socket option. [ 290.359058][T14071] Use struct sctp_assoc_value instead [ 290.496960][T14077] tipc: Enabled bearer , priority 0 [ 290.602125][T14077] tipc: Disabling bearer [ 290.774631][T14098] 0ªî{X¹¦: entered promiscuous mode [ 290.782374][T14098] 0ªî{X¹¦: left allmulticast mode [ 290.807946][T14100] nbd: nbd0 already in use [ 290.847639][T14099] ieee802154 phy0 wpan0: encryption failed: -126 [ 290.854822][T14098] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 290.883063][T14098] 1ªî{X¹¦: left promiscuous mode [ 290.907166][ T5871] Bluetooth: hci4: command 0x0406 tx timeout [ 290.918284][T14098] 1ªî{X¹¦: entered allmulticast mode [ 290.961236][T14098] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 291.161995][T14112] IPVS: set_ctl: invalid protocol: 43 172.30.0.4:20000 [ 291.345160][T14112] ip_vti0: entered promiscuous mode [ 291.350442][T14112] ip_vti0: entered allmulticast mode [ 291.366128][T14110] syzkaller0 speed is unknown, defaulting to 1000 [ 291.801020][T10533] block nbd0: Possible stuck request ffff888024d97000: control (read@0,4096B). Runtime 150 seconds [ 292.362728][T14161] netlink: 'syz.0.2170': attribute type 11 has an invalid length. [ 292.648591][T14172] sctp: [Deprecated]: syz.3.2175 (pid 14172) Use of int in maxseg socket option. [ 292.648591][T14172] Use struct sctp_assoc_value instead [ 293.340712][T14203] IPVS: set_ctl: invalid protocol: 43 172.30.0.2:20000 [ 293.395110][T14208] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 293.431865][T14201] syzkaller0 speed is unknown, defaulting to 1000 [ 293.470690][T14209] __nla_validate_parse: 31 callbacks suppressed [ 293.470713][T14209] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2185'. [ 293.516102][T14213] netlink: 'syz.4.2186': attribute type 1 has an invalid length. [ 293.531588][T14213] netlink: 'syz.4.2186': attribute type 1 has an invalid length. [ 293.567964][T14214] netlink: 'syz.4.2186': attribute type 1 has an invalid length. [ 293.608699][T14214] netlink: 'syz.4.2186': attribute type 1 has an invalid length. [ 293.735630][T14222] netlink: 146780 bytes leftover after parsing attributes in process `syz.2.2188'. [ 293.909485][T14233] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2194'. [ 293.940682][T14235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2193'. [ 293.947232][T14239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2196'. [ 293.972344][T14239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2196'. [ 294.190646][T14255] tipc: Enabled bearer , priority 0 [ 294.202986][T14255] syzkaller0: entered promiscuous mode [ 294.208694][T14255] syzkaller0: entered allmulticast mode [ 294.222984][T14255] tipc: Resetting bearer [ 294.232096][T14254] tipc: Resetting bearer [ 294.260436][T14254] tipc: Disabling bearer [ 294.363613][T14263] syzkaller1: entered promiscuous mode [ 294.369199][T14263] syzkaller1: entered allmulticast mode [ 294.515669][T14271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.723948][T14284] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2211'. [ 294.757893][T14287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2208'. [ 294.786840][T14290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2211'. [ 294.852793][T14292] !€ÿ: renamed from bond_slave_0 (while UP) [ 294.966601][T14300] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2213'. [ 295.312938][T14320] team_slave_0: entered promiscuous mode [ 295.318690][T14320] team_slave_1: entered promiscuous mode [ 295.334818][T14320] macsec1: entered promiscuous mode [ 295.340143][T14320] team0: entered promiscuous mode [ 295.346198][T14320] macsec1: entered allmulticast mode [ 295.352313][T14320] team0: entered allmulticast mode [ 295.357640][T14320] team_slave_1: entered allmulticast mode [ 295.369313][T14320] team0: Device macsec1 is already an upper device of the team interface [ 295.381401][T14320] team0: left allmulticast mode [ 295.388578][T14320] team_slave_1: left allmulticast mode [ 295.394371][T14320] team0: left promiscuous mode [ 295.400003][T14320] team_slave_0: left promiscuous mode [ 295.405569][T14320] team_slave_1: left promiscuous mode [ 295.694701][T14335] syzkaller0 speed is unknown, defaulting to 1000 [ 295.823612][T14349] netlink: 'syz.4.2227': attribute type 23 has an invalid length. [ 295.990236][T14357] netlink: 'syz.2.2229': attribute type 1 has an invalid length. [ 296.019899][T14359] IPv6: sit2: Disabled Multicast RS [ 296.029848][T14359] sit2: entered allmulticast mode [ 296.560038][T14402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.721380][T14407] syzkaller0 speed is unknown, defaulting to 1000 [ 297.518390][T14456] netlink: 'syz.0.2257': attribute type 5 has an invalid length. [ 297.742538][T14466] bond7: entered promiscuous mode [ 297.747765][T14466] bond7: entered allmulticast mode [ 297.754862][T14466] 8021q: adding VLAN 0 to HW filter on device bond7 [ 297.763065][T14473] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 297.896536][T14487] erspan0: entered allmulticast mode [ 298.223438][T14504] ieee802154 phy0 wpan0: encryption failed: -22 [ 298.526544][T14523] team0: Mode "loalbalance" not found [ 298.564739][T14531] __nla_validate_parse: 21 callbacks suppressed [ 298.564762][T14531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2280'. [ 298.624589][T14531] tipc: Enabled bearer , priority 0 [ 298.633045][T14531] syzkaller0: entered promiscuous mode [ 298.638658][T14531] syzkaller0: entered allmulticast mode [ 298.658616][T14531] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 298.706423][T14537] netlink: 'syz.0.2284': attribute type 1 has an invalid length. [ 298.741592][T14531] tipc: Resetting bearer [ 298.766325][T14537] syz_tun: entered promiscuous mode [ 298.781165][T14537] syz_tun: entered allmulticast mode [ 298.799418][T14526] tipc: Resetting bearer [ 298.925921][T14526] tipc: Disabling bearer [ 299.089950][T14553] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2289'. [ 299.165872][T14556] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2290'. [ 299.297400][T14560] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 299.312545][T14563] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2290'. [ 299.380315][T14560] netlink: 'syz.1.2291': attribute type 1 has an invalid length. [ 299.718669][T14584] tipc: Enabling of bearer rejected, already enabled [ 300.141254][T14607] 8021q: VLANs not supported on wg0 [ 300.722226][T14628] netlink: 'syz.1.2309': attribute type 17 has an invalid length. [ 300.740688][T14628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2309'. [ 300.751599][ T55] block nbd1: Possible stuck request ffff888024dce000: control (read@0,1024B). Runtime 150 seconds [ 300.762441][ T55] block nbd1: Possible stuck request ffff888024dce1c0: control (read@1024,1024B). Runtime 150 seconds [ 300.762473][T14628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2309'. [ 300.773862][ T55] block nbd1: Possible stuck request ffff888024dce380: control (read@2048,1024B). Runtime 150 seconds [ 300.794647][ T55] block nbd1: Possible stuck request ffff888024dce540: control (read@3072,1024B). Runtime 150 seconds [ 300.899732][T14636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2310'. [ 301.006426][T14636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2310'. [ 301.117677][T14647] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2313'. [ 301.255746][T14650] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2314'. [ 301.355196][T14657] ipvlan1: entered promiscuous mode [ 301.440556][T14658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.520807][T14665] vlan1: entered promiscuous mode [ 301.549564][T14665] gretap0: entered promiscuous mode [ 301.692748][T14667] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.716916][T14667] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.730833][T14667] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 302.094665][T14667] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.112662][T14667] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.172021][T14667] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 302.209207][T14684] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 302.288298][T14667] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.319810][T14667] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.330877][T14667] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 302.489869][T14667] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.514482][T14667] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.600725][T14667] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 302.632230][T14693] syzkaller0 speed is unknown, defaulting to 1000 [ 302.782986][T14718] lo: entered allmulticast mode [ 302.860789][T14718] lo: left allmulticast mode [ 302.889555][T14725] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 302.905433][T14718] IPVS: stopping master sync thread 14725 ... [ 302.912852][T14721] Bluetooth: MGMT ver 1.23 [ 302.947368][T14724] syz_tun: left promiscuous mode [ 302.952977][T14724] syz_tun: left allmulticast mode [ 302.987673][T12573] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.014127][T12573] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 303.029087][T12573] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 303.085095][T12573] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.099164][T12573] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 303.109090][T12573] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 303.146029][T12573] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.173747][T12573] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 303.192573][T12573] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 303.257244][T12571] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.265985][T12571] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 303.274614][T12571] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 303.366403][T14745] tipc: Enabled bearer , priority 0 [ 303.396174][T14750] syzkaller0: entered promiscuous mode [ 303.405174][T14750] syzkaller0: entered allmulticast mode [ 303.425145][T14745] tipc: Enabled bearer , priority 24 [ 303.442522][T14745] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 303.490013][T14745] tipc: Resetting bearer [ 303.513693][T14744] tipc: Resetting bearer [ 303.547982][T14744] tipc: Disabling bearer [ 303.630006][T14763] ieee802154 phy0 wpan0: encryption failed: -126 [ 303.804491][T14771] __nla_validate_parse: 11 callbacks suppressed [ 303.804513][T14771] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2348'. [ 303.849999][T14773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2349'. [ 303.860135][T14773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2349'. [ 303.876137][T14774] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2349'. [ 303.901954][T14776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2350'. [ 303.912463][T14776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2350'. [ 303.924186][T14776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2350'. [ 303.955019][T14779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2351'. [ 304.169241][T14795] veth0: entered promiscuous mode [ 304.462174][T14805] sctp: [Deprecated]: syz.4.2357 (pid 14805) Use of int in maxseg socket option. [ 304.462174][T14805] Use struct sctp_assoc_value instead [ 304.474548][T14806] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2356'. [ 304.542917][ T5918] tipc: Node number set to 1908959963 [ 304.647969][T14816] rdma_rxe: rxe_newlink: failed to add bond0 [ 304.656302][T14816] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2361'. [ 304.950359][T14825] tipc: Enabled bearer , priority 0 [ 304.994603][T14826] syzkaller0: entered promiscuous mode [ 305.007159][T14826] syzkaller0: entered allmulticast mode [ 305.084744][T14826] tipc: Resetting bearer [ 305.134174][T14826] tipc: Disabling bearer [ 305.396755][T14858] hsr0 speed is unknown, defaulting to 1000 [ 305.409566][T14858] hsr0 speed is unknown, defaulting to 1000 [ 305.423931][T14858] hsr0 speed is unknown, defaulting to 1000 [ 305.474498][T14858] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 305.526625][T14858] hsr0 speed is unknown, defaulting to 1000 [ 305.567014][T14858] hsr0 speed is unknown, defaulting to 1000 [ 305.602796][T14858] hsr0 speed is unknown, defaulting to 1000 [ 305.610803][T14858] hsr0 speed is unknown, defaulting to 1000 [ 305.677963][T14858] hsr0 speed is unknown, defaulting to 1000 [ 306.048277][T14888] netlink: 'syz.1.2380': attribute type 25 has an invalid length. [ 306.064490][T14885] tipc: Enabled bearer , priority 0 [ 306.081454][T14889] netlink: 'syz.2.2381': attribute type 1 has an invalid length. [ 306.137525][T14891] syzkaller1: entered promiscuous mode [ 306.143970][T14891] syzkaller1: entered allmulticast mode [ 306.157922][T14892] syzkaller0: entered promiscuous mode [ 306.171362][T14892] syzkaller0: entered allmulticast mode [ 306.203623][T14894] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20000 [ 306.257968][T14894] 8021q: VLANs not supported on ip6_vti0 [ 306.415772][ T7559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.426174][ T7559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.635178][T14926] bridge_slave_0: left allmulticast mode [ 306.640976][T14926] bridge_slave_0: left promiscuous mode [ 306.656706][T14926] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.690207][T14926] bond0: (slave bridge_slave_1): Releasing backup interface [ 306.729322][T14926] bond0: (slave 1!€ÿ): Releasing backup interface [ 306.757663][T14926] bond0: (slave bond_slave_1): Releasing backup interface [ 306.767821][T14934] ieee802154 phy0 wpan0: encryption failed: -22 [ 306.796628][T14926] team_slave_0: left promiscuous mode [ 306.820338][T14926] team0: Port device team_slave_0 removed [ 306.849784][T14926] team_slave_1: left promiscuous mode [ 306.875302][T14926] team0: Port device team_slave_1 removed [ 306.904197][T14926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.912556][T14926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.948069][T14926] bond2: (slave bond3): Releasing backup interface [ 306.957309][T14926] bond3: left promiscuous mode [ 306.975406][T14926] bond5: (slave veth5): Releasing active interface [ 307.029629][T14882] tipc: Resetting bearer [ 307.068962][T14882] tipc: Disabling bearer [ 307.073700][T14945] netlink: 'syz.1.2396': attribute type 29 has an invalid length. [ 307.087983][T14921] syzkaller0 speed is unknown, defaulting to 1000 [ 307.138802][T14921] hsr0 speed is unknown, defaulting to 1000 [ 307.730685][T14975] netlink: 'syz.2.2404': attribute type 9 has an invalid length. [ 307.944864][T14990] team0: Port device team_slave_0 removed [ 308.003757][T14990] team0: Port device team_slave_1 removed [ 308.017309][T14990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.029350][T14996] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 308.044654][T14996] netlink: 'syz.1.2409': attribute type 28 has an invalid length. [ 308.053367][T14996] netlink: 'syz.1.2409': attribute type 3 has an invalid length. [ 308.066445][T14990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.078133][T14990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.090219][T14990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.150915][T14990] team0: Port device bond1 removed [ 308.168698][T14990] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 308.242588][ T7580] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 308.252406][ T7580] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 308.272761][ T7068] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 308.498108][T15006] netlink: 'syz.1.2413': attribute type 1 has an invalid length. [ 308.552594][ T7068] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 308.802987][T15026] netlink: zone id is out of range [ 308.833675][T15026] netlink: zone id is out of range [ 308.879504][T15026] netlink: zone id is out of range [ 308.945814][T15026] netlink: zone id is out of range [ 308.983668][ T7068] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 309.011224][T15026] netlink: zone id is out of range [ 309.016534][T15026] netlink: zone id is out of range [ 309.055630][T15026] netlink: zone id is out of range [ 309.077980][T15026] netlink: zone id is out of range [ 309.313582][T15059] __nla_validate_parse: 9 callbacks suppressed [ 309.313602][T15059] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2428'. [ 309.419510][T15066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2432'. [ 309.460376][T15067] netlink: 'syz.4.2430': attribute type 10 has an invalid length. [ 309.575045][T15076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2433'. [ 309.860557][T15089] dvmrp0: entered allmulticast mode [ 309.913283][T15094] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2440'. [ 310.212850][T15116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2447'. [ 310.330682][T15123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2449'. [ 310.494290][T15136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2453'. [ 310.748424][T15151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2458'. [ 310.755800][T15153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2455'. [ 310.910042][T15159] delete_channel: no stack [ 311.024118][T15165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2462'. [ 311.760652][ T1149] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 311.889727][T15212] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 312.431267][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 312.516721][T15229] netlink: 'syz.2.2484': attribute type 1 has an invalid length. [ 313.176169][T15273] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 313.755008][T15307] sctp: [Deprecated]: syz.0.2506 (pid 15307) Use of int in max_burst socket option. [ 313.755008][T15307] Use struct sctp_assoc_value instead [ 314.002095][T15317] bridge0: port 1(batadv1) entered blocking state [ 314.043353][T15317] bridge0: port 1(batadv1) entered disabled state [ 314.075869][T15317] batadv1: entered allmulticast mode [ 314.112849][T15317] batadv1: entered promiscuous mode [ 314.423376][T15353] __nla_validate_parse: 14 callbacks suppressed [ 314.423399][T15353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2519'. [ 314.457660][T15359] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2522'. [ 314.464096][ T7581] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 314.476774][ T7581] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 314.703626][T15363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2523'. [ 314.722798][T15363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.831608][T15386] netlink: 'syz.3.2530': attribute type 1 has an invalid length. [ 314.842699][T15363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.882230][T15382] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2530'. [ 314.891450][T15381] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2530'. [ 314.926225][T15386] 8021q: adding VLAN 0 to HW filter on device bond8 [ 314.967438][T15384] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2531'. [ 315.103372][T15399] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2535'. [ 315.208809][T15401] tipc: Enabled bearer , priority 0 [ 315.217475][T15402] tipc: Enabling of bearer rejected, already enabled [ 315.227782][T15406] 8021q: VLANs not supported on tunl0 [ 315.234312][T15401] syzkaller0: entered promiscuous mode [ 315.235987][T15406] net_ratelimit: 6 callbacks suppressed [ 315.236010][T15406] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 315.243415][T15401] syzkaller0: entered allmulticast mode [ 315.268031][T15400] tipc: Resetting bearer [ 315.322466][T15400] tipc: Disabling bearer [ 315.415871][T15400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.503883][T15417] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2543'. [ 315.519472][T15417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2543'. [ 315.771970][T15439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2549'. [ 316.011718][T15449] netlink: 'syz.0.2551': attribute type 5 has an invalid length. [ 316.273834][T15466] netlink: 'syz.0.2558': attribute type 9 has an invalid length. [ 316.334408][ T44] IPVS: starting estimator thread 0... [ 316.346850][ T5871] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 316.455383][T15475] IPVS: using max 27 ests per chain, 64800 per kthread [ 316.594773][T15481] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 316.672742][T15490] netlink: 'syz.2.2564': attribute type 4 has an invalid length. [ 317.391305][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.440775][T15536] tipc: Enabled bearer , priority 10 [ 317.660161][T15544] netlink: 'syz.2.2579': attribute type 7 has an invalid length. [ 317.803326][T15558] tipc: Enabling of bearer rejected, already enabled [ 318.124098][T15573] vlan1: entered allmulticast mode [ 318.129757][T15573] bridge0: entered allmulticast mode [ 318.143732][T15573] bridge5: port 1(vlan1) entered blocking state [ 318.153975][T15573] bridge5: port 1(vlan1) entered disabled state [ 318.166531][T15573] vlan1: entered promiscuous mode [ 318.172475][T15573] bridge0: entered promiscuous mode [ 318.321129][T15588] syzkaller0: entered promiscuous mode [ 318.326673][T15588] syzkaller0: entered allmulticast mode [ 318.360738][T15587] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 318.551138][ T7066] tipc: Node number set to 1105614634 [ 318.898618][T15618] netlink: 'syz.1.2599': attribute type 1 has an invalid length. [ 319.467410][T15657] __nla_validate_parse: 9 callbacks suppressed [ 319.467431][T15657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2614'. [ 319.497015][T15651] netlink: 26 bytes leftover after parsing attributes in process `syz.0.2613'. [ 319.546258][T15657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2614'. [ 319.559204][T15663] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2613'. [ 319.626950][T15660] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2616'. [ 319.638748][T12571] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.666692][T12571] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.681456][T12571] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.698369][T12571] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.760460][T15667] netlink: 'syz.2.2618': attribute type 1 has an invalid length. [ 319.770328][T15667] netlink: 'syz.2.2618': attribute type 3 has an invalid length. [ 319.788650][T15667] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2618'. [ 319.916103][T15678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2622'. [ 319.940008][T15682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2623'. [ 319.980527][T15682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.417406][T15713] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2629'. [ 320.454136][T15709] netlink: 'syz.4.2628': attribute type 4 has an invalid length. [ 320.474191][T15709] netlink: 'syz.4.2628': attribute type 4 has an invalid length. [ 320.581168][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 321.018332][T15739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2641'. [ 321.076680][T15742] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 321.157734][T15747] nbd: nbd0 already in use [ 321.192475][T12574] batman_adv: batadv1: IGMP Querier appeared [ 321.198555][T12574] batman_adv: batadv1: MLD Querier appeared [ 321.607451][T15762] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 321.766375][T15766] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 321.777713][T15766] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 321.842486][T15770] syzkaller0: entered promiscuous mode [ 321.848170][T15770] syzkaller0: entered allmulticast mode [ 321.865231][T10533] block nbd0: Possible stuck request ffff888024d97000: control (read@0,4096B). Runtime 180 seconds [ 322.276668][T15783] openvswitch: netlink: Missing key (keys=40, expected=100) [ 330.821633][ T55] block nbd1: Possible stuck request ffff888024dce000: control (read@0,1024B). Runtime 180 seconds [ 330.832681][ T55] block nbd1: Possible stuck request ffff888024dce1c0: control (read@1024,1024B). Runtime 180 seconds [ 330.843699][ T55] block nbd1: Possible stuck request ffff888024dce380: control (read@2048,1024B). Runtime 180 seconds [ 330.854733][ T55] block nbd1: Possible stuck request ffff888024dce540: control (read@3072,1024B). Runtime 180 seconds [ 335.941291][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 337.030603][ T5867] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 337.039727][ T5867] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 337.047905][ T5867] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.057411][ T5867] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.067935][ T5867] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.068309][ T5861] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 337.089267][ T5871] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 337.098743][ T5871] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 337.107082][ T5871] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 337.118130][ T5871] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.130640][T15790] syzkaller0 speed is unknown, defaulting to 1000 [ 337.139653][T15790] hsr0 speed is unknown, defaulting to 1000 [ 337.215431][T15792] syzkaller0 speed is unknown, defaulting to 1000 [ 337.230562][T15792] hsr0 speed is unknown, defaulting to 1000 [ 337.367386][T15790] chnl_net:caif_netlink_parms(): no params data found [ 337.530317][T15790] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.537636][T15790] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.545174][T15790] bridge_slave_0: entered allmulticast mode [ 337.553640][T15790] bridge_slave_0: entered promiscuous mode [ 337.567173][T15790] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.574515][T15790] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.581820][T15790] bridge_slave_1: entered allmulticast mode [ 337.589115][T15790] bridge_slave_1: entered promiscuous mode [ 337.596095][T15792] chnl_net:caif_netlink_parms(): no params data found [ 337.648793][T15790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.661982][T15790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.773125][T15790] team0: Port device team_slave_0 added [ 337.820280][T15790] team0: Port device team_slave_1 added [ 338.093842][T15790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.111002][T15790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.171724][T15790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.198167][T15792] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.217658][T15792] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.237846][T15792] bridge_slave_0: entered allmulticast mode [ 338.259404][T15792] bridge_slave_0: entered promiscuous mode [ 338.282482][T15790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.289467][T15790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.351008][T15790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.373418][T15792] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.380600][T15792] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.390654][T15792] bridge_slave_1: entered allmulticast mode [ 338.405842][T15792] bridge_slave_1: entered promiscuous mode [ 338.406592][ T5871] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 338.427160][ T5871] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 338.435713][ T5871] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 338.446303][ T5871] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 338.454312][ T5871] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 338.543622][ T5871] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 338.552564][ T5871] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 338.566761][ T5871] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 338.577266][ T5871] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 338.586492][ T5871] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 338.622155][ T5867] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 338.632663][ T5867] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 338.646260][ T5867] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 338.654414][ T5867] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 338.664453][ T5867] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 338.673951][T15792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.712874][T15790] hsr_slave_0: entered promiscuous mode [ 338.719312][T15790] hsr_slave_1: entered promiscuous mode [ 338.725589][T15790] debugfs: 'hsr0' already exists in 'hsr' [ 338.732730][T15790] Cannot create hsr debugfs directory [ 338.740776][T15792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.806999][T15792] team0: Port device team_slave_0 added [ 338.848755][T15792] team0: Port device team_slave_1 added [ 338.867633][T15809] syzkaller0 speed is unknown, defaulting to 1000 [ 338.909588][T15809] hsr0 speed is unknown, defaulting to 1000 [ 338.909612][T15813] syzkaller0 speed is unknown, defaulting to 1000 [ 338.960981][T15811] syzkaller0 speed is unknown, defaulting to 1000 [ 338.968518][T15813] hsr0 speed is unknown, defaulting to 1000 [ 338.980064][T15792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.987528][T15792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.013594][T15792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.026768][T15792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.033967][T15792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.060268][T15792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.078652][T15811] hsr0 speed is unknown, defaulting to 1000 [ 339.142247][ T5867] Bluetooth: hci6: command tx timeout [ 339.142260][ T5871] Bluetooth: hci5: command tx timeout [ 339.321690][T15792] hsr_slave_0: entered promiscuous mode [ 339.328395][T15792] hsr_slave_1: entered promiscuous mode [ 339.335409][T15792] debugfs: 'hsr0' already exists in 'hsr' [ 339.341327][T15792] Cannot create hsr debugfs directory [ 339.588474][T15809] chnl_net:caif_netlink_parms(): no params data found [ 339.878487][T15809] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.886485][T15809] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.893925][T15809] bridge_slave_0: entered allmulticast mode [ 339.901424][T15809] bridge_slave_0: entered promiscuous mode [ 339.947827][T15809] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.963556][T15809] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.970885][T15809] bridge_slave_1: entered allmulticast mode [ 339.984574][T15809] bridge_slave_1: entered promiscuous mode [ 340.009664][T15813] chnl_net:caif_netlink_parms(): no params data found [ 340.066490][T15809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.093753][T15811] chnl_net:caif_netlink_parms(): no params data found [ 340.124277][T15809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.223545][T15809] team0: Port device team_slave_0 added [ 340.258007][T15809] team0: Port device team_slave_1 added [ 340.351631][T15809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.358619][T15809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.386604][T15809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.397851][T15813] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.405435][T15813] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.413468][T15813] bridge_slave_0: entered allmulticast mode [ 340.420901][T15813] bridge_slave_0: entered promiscuous mode [ 340.446665][T15809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.453869][T15809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.481905][T15809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.500273][T15813] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.508233][T15813] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.515516][ T5867] Bluetooth: hci7: command tx timeout [ 340.522133][T15813] bridge_slave_1: entered allmulticast mode [ 340.529973][T15813] bridge_slave_1: entered promiscuous mode [ 340.554673][T15811] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.562297][T15811] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.569853][T15811] bridge_slave_0: entered allmulticast mode [ 340.578480][T15811] bridge_slave_0: entered promiscuous mode [ 340.588358][T15811] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.596316][T15811] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.603769][T15811] bridge_slave_1: entered allmulticast mode [ 340.611650][T15811] bridge_slave_1: entered promiscuous mode [ 340.661519][ T5867] Bluetooth: hci8: command tx timeout [ 340.707866][T15813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.721305][T15813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.741148][ T5867] Bluetooth: hci9: command tx timeout [ 340.753350][T15811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.786915][T15809] hsr_slave_0: entered promiscuous mode [ 340.794043][T15809] hsr_slave_1: entered promiscuous mode [ 340.800398][T15809] debugfs: 'hsr0' already exists in 'hsr' [ 340.806424][T15809] Cannot create hsr debugfs directory [ 340.817149][T15811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.893606][T15813] team0: Port device team_slave_0 added [ 340.902025][T15811] team0: Port device team_slave_0 added [ 340.918624][T15811] team0: Port device team_slave_1 added [ 340.942676][T15813] team0: Port device team_slave_1 added [ 340.979660][T15811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.987279][T15811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.013614][T15811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.047902][T15811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.055460][T15811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.083445][T15811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.136205][T15813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.143986][T15813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.170149][T15813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.184302][T15813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.192601][T15813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.219229][T15813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.230088][ T5867] Bluetooth: hci5: command tx timeout [ 341.237606][ T5182] Bluetooth: hci6: command tx timeout [ 341.362207][T15811] hsr_slave_0: entered promiscuous mode [ 341.368641][T15811] hsr_slave_1: entered promiscuous mode [ 341.375848][T15811] debugfs: 'hsr0' already exists in 'hsr' [ 341.381771][T15811] Cannot create hsr debugfs directory [ 341.396273][T15813] hsr_slave_0: entered promiscuous mode [ 341.403740][T15813] hsr_slave_1: entered promiscuous mode [ 341.410236][T15813] debugfs: 'hsr0' already exists in 'hsr' [ 341.416090][T15813] Cannot create hsr debugfs directory [ 342.581767][ T5867] Bluetooth: hci7: command tx timeout [ 342.742058][ T5867] Bluetooth: hci8: command tx timeout [ 342.821604][ T5867] Bluetooth: hci9: command tx timeout [ 343.301697][ T5182] Bluetooth: hci6: command tx timeout [ 343.307218][ T5867] Bluetooth: hci5: command tx timeout [ 344.661443][ T5867] Bluetooth: hci7: command tx timeout [ 344.821202][ T5867] Bluetooth: hci8: command tx timeout [ 344.901527][ T5867] Bluetooth: hci9: command tx timeout [ 345.381366][ T5182] Bluetooth: hci6: command tx timeout [ 345.386840][ T5867] Bluetooth: hci5: command tx timeout [ 346.752948][ T5867] Bluetooth: hci7: command tx timeout [ 346.901140][ T5867] Bluetooth: hci8: command tx timeout [ 346.981257][ T5867] Bluetooth: hci9: command tx timeout [ 351.948482][T10533] block nbd0: Possible stuck request ffff888024d97000: control (read@0,4096B). Runtime 210 seconds [ 360.910406][ T55] block nbd1: Possible stuck request ffff888024dce000: control (read@0,1024B). Runtime 210 seconds [ 360.921575][ T55] block nbd1: Possible stuck request ffff888024dce1c0: control (read@1024,1024B). Runtime 210 seconds [ 360.932748][ T55] block nbd1: Possible stuck request ffff888024dce380: control (read@2048,1024B). Runtime 210 seconds [ 360.943786][ T55] block nbd1: Possible stuck request ffff888024dce540: control (read@3072,1024B). Runtime 210 seconds [ 367.941252][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 378.825128][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.023022][T10533] block nbd0: Possible stuck request ffff888024d97000: control (read@0,4096B). Runtime 240 seconds [ 390.987694][ T55] block nbd1: Possible stuck request ffff888024dce000: control (read@0,1024B). Runtime 240 seconds [ 390.998537][ T55] block nbd1: Possible stuck request ffff888024dce1c0: control (read@1024,1024B). Runtime 240 seconds [ 391.009997][ T55] block nbd1: Possible stuck request ffff888024dce380: control (read@2048,1024B). Runtime 240 seconds [ 391.026325][ T55] block nbd1: Possible stuck request ffff888024dce540: control (read@3072,1024B). Runtime 240 seconds [ 397.108942][ T5182] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 397.119491][ T5182] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 397.127898][ T5182] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 397.143114][ T5182] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 397.151816][ T5182] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 397.161850][ T5867] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 397.171861][ T5867] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 397.188092][ T5182] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 397.198023][ T5182] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 397.212296][ T5182] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 397.217922][T15844] syzkaller0 speed is unknown, defaulting to 1000 [ 397.230248][T15844] hsr0 speed is unknown, defaulting to 1000 [ 397.297581][T15846] syzkaller0 speed is unknown, defaulting to 1000 [ 397.307637][T15846] hsr0 speed is unknown, defaulting to 1000 [ 397.562737][T15844] chnl_net:caif_netlink_parms(): no params data found [ 397.684311][T15844] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.691694][T15844] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.698939][T15844] bridge_slave_0: entered allmulticast mode [ 397.707622][T15844] bridge_slave_0: entered promiscuous mode [ 397.720501][T15844] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.727793][T15844] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.736450][T15844] bridge_slave_1: entered allmulticast mode [ 397.744780][T15844] bridge_slave_1: entered promiscuous mode [ 397.752108][T15846] chnl_net:caif_netlink_parms(): no params data found [ 397.849339][T15844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.900526][T15844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.063965][T15844] team0: Port device team_slave_0 added [ 398.089429][T15844] team0: Port device team_slave_1 added [ 398.145311][ T5182] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 398.156167][ T5182] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 398.165289][ T5182] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 398.173707][ T5182] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 398.183809][ T5182] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 398.220256][T15844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.227823][T15844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.254725][T15844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.268033][T15844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.275175][T15844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.301223][T15844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.312642][T15846] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.319876][T15846] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.327616][T15846] bridge_slave_0: entered allmulticast mode [ 398.335268][T15846] bridge_slave_0: entered promiscuous mode [ 398.352075][T15846] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.359269][T15846] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.366746][T15846] bridge_slave_1: entered allmulticast mode [ 398.376085][T15846] bridge_slave_1: entered promiscuous mode [ 398.422662][T15846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.459740][T15846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.514897][T15844] hsr_slave_0: entered promiscuous mode [ 398.522065][T15844] hsr_slave_1: entered promiscuous mode [ 398.528364][T15844] debugfs: 'hsr0' already exists in 'hsr' [ 398.536401][T15844] Cannot create hsr debugfs directory [ 398.559082][T15862] syzkaller0 speed is unknown, defaulting to 1000 [ 398.561605][T15846] team0: Port device team_slave_0 added [ 398.587402][T15846] team0: Port device team_slave_1 added [ 398.609732][T15862] hsr0 speed is unknown, defaulting to 1000 [ 398.655449][T15846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.663994][T15846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.690520][T15846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.715242][T15846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.722310][T15846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.754797][T15846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.960774][T15846] hsr_slave_0: entered promiscuous mode [ 398.979659][T15846] hsr_slave_1: entered promiscuous mode [ 398.989803][T15846] debugfs: 'hsr0' already exists in 'hsr' [ 399.006119][T15846] Cannot create hsr debugfs directory [ 399.221844][ T5182] Bluetooth: hci10: command tx timeout [ 399.301796][ T5182] Bluetooth: hci11: command tx timeout [ 399.386013][ T5871] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 399.395885][ T5871] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 399.404609][ T5871] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 399.412928][ T5871] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 399.421240][ T5871] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 399.517195][ T5182] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 399.536057][ T5182] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 399.545523][ T5182] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 399.554591][ T5182] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 399.564354][ T5182] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 399.616136][T15867] syzkaller0 speed is unknown, defaulting to 1000 [ 399.666866][T15867] hsr0 speed is unknown, defaulting to 1000 [ 399.811433][T15869] syzkaller0 speed is unknown, defaulting to 1000 [ 399.830848][T15869] hsr0 speed is unknown, defaulting to 1000 [ 399.851714][T15862] chnl_net:caif_netlink_parms(): no params data found [ 400.079737][T15862] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.087771][T15862] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.095513][T15862] bridge_slave_0: entered allmulticast mode [ 400.104457][T15862] bridge_slave_0: entered promiscuous mode [ 400.134935][T15862] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.142614][T15862] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.150124][T15862] bridge_slave_1: entered allmulticast mode [ 400.159264][T15862] bridge_slave_1: entered promiscuous mode [ 400.226315][T15862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.261150][ T5182] Bluetooth: hci12: command tx timeout [ 400.273409][T15862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.413172][T15862] team0: Port device team_slave_0 added [ 400.460706][T15867] chnl_net:caif_netlink_parms(): no params data found [ 400.477153][T15862] team0: Port device team_slave_1 added [ 400.560543][T15862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.569358][T15862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.597452][T15862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.677745][T15862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.686262][T15862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.713101][T15862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.807737][T15869] chnl_net:caif_netlink_parms(): no params data found [ 400.872314][T15867] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.879563][T15867] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.887245][T15867] bridge_slave_0: entered allmulticast mode [ 400.896304][T15867] bridge_slave_0: entered promiscuous mode [ 400.942806][T15862] hsr_slave_0: entered promiscuous mode [ 400.949652][T15862] hsr_slave_1: entered promiscuous mode [ 400.956297][T15862] debugfs: 'hsr0' already exists in 'hsr' [ 400.962235][T15862] Cannot create hsr debugfs directory [ 400.984472][T15867] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.992836][T15867] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.000125][T15867] bridge_slave_1: entered allmulticast mode [ 401.008897][T15867] bridge_slave_1: entered promiscuous mode [ 401.124807][T15867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.189336][T15867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.296962][T15869] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.304257][ T5182] Bluetooth: hci10: command tx timeout [ 401.311576][T15869] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.318892][T15869] bridge_slave_0: entered allmulticast mode [ 401.327251][T15869] bridge_slave_0: entered promiscuous mode [ 401.338772][T15867] team0: Port device team_slave_0 added [ 401.348540][T15867] team0: Port device team_slave_1 added [ 401.364167][T15869] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.371609][T15869] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.379017][T15869] bridge_slave_1: entered allmulticast mode [ 401.385191][ T5182] Bluetooth: hci11: command tx timeout [ 401.393714][T15869] bridge_slave_1: entered promiscuous mode [ 401.461478][ T5182] Bluetooth: hci13: command tx timeout [ 401.484241][T15867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.491656][T15867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.518060][T15867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.549680][T15869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.560431][T15867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.568588][T15867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.595175][T15867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.621743][ T5182] Bluetooth: hci14: command tx timeout [ 401.633326][T15869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.725589][T15869] team0: Port device team_slave_0 added [ 401.735442][T15869] team0: Port device team_slave_1 added [ 401.810293][T15867] hsr_slave_0: entered promiscuous mode [ 401.818044][T15867] hsr_slave_1: entered promiscuous mode [ 401.825426][T15867] debugfs: 'hsr0' already exists in 'hsr' [ 401.832358][T15867] Cannot create hsr debugfs directory [ 401.851908][T15869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.858898][T15869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.886298][T15869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.900758][T15869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.907977][T15869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.935426][T15869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.074543][T15869] hsr_slave_0: entered promiscuous mode [ 402.084881][T15869] hsr_slave_1: entered promiscuous mode [ 402.091990][T15869] debugfs: 'hsr0' already exists in 'hsr' [ 402.097755][T15869] Cannot create hsr debugfs directory [ 402.351234][ T5182] Bluetooth: hci12: command tx timeout [ 403.381378][ T5182] Bluetooth: hci10: command tx timeout [ 403.461643][ T5182] Bluetooth: hci11: command tx timeout [ 403.541290][ T5182] Bluetooth: hci13: command tx timeout [ 403.701621][ T5182] Bluetooth: hci14: command tx timeout [ 404.422913][ T5182] Bluetooth: hci12: command tx timeout [ 405.461261][ T5182] Bluetooth: hci10: command tx timeout [ 405.541140][ T5182] Bluetooth: hci11: command tx timeout [ 405.621601][ T5182] Bluetooth: hci13: command tx timeout [ 405.781257][ T5182] Bluetooth: hci14: command tx timeout [ 406.501164][ T5182] Bluetooth: hci12: command tx timeout [ 407.701470][ T5182] Bluetooth: hci13: command tx timeout [ 407.861131][ T5182] Bluetooth: hci14: command tx timeout [ 412.111619][T10533] block nbd0: Possible stuck request ffff888024d97000: control (read@0,4096B). Runtime 270 seconds [ 421.061790][ T55] block nbd1: Possible stuck request ffff888024dce000: control (read@0,1024B). Runtime 270 seconds [ 421.080972][ T55] block nbd1: Possible stuck request ffff888024dce1c0: control (read@1024,1024B). Runtime 270 seconds [ 421.092534][ T55] block nbd1: Possible stuck request ffff888024dce380: control (read@2048,1024B). Runtime 270 seconds [ 421.103755][ T55] block nbd1: Possible stuck request ffff888024dce540: control (read@3072,1024B). Runtime 270 seconds [ 435.141263][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 440.265002][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.191594][T10533] block nbd0: Possible stuck request ffff888024d97000: control (read@0,4096B). Runtime 300 seconds [ 451.141576][ T55] block nbd1: Possible stuck request ffff888024dce000: control (read@0,1024B). Runtime 300 seconds [ 451.152526][ T55] block nbd1: Possible stuck request ffff888024dce1c0: control (read@1024,1024B). Runtime 300 seconds [ 451.163763][ T55] block nbd1: Possible stuck request ffff888024dce380: control (read@2048,1024B). Runtime 300 seconds [ 451.175118][ T55] block nbd1: Possible stuck request ffff888024dce540: control (read@3072,1024B). Runtime 300 seconds [ 457.429253][ T5871] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 457.438457][ T5871] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 457.447442][ T5871] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 457.455754][ T5871] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 457.464563][ T5871] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 457.514905][T15899] syzkaller0 speed is unknown, defaulting to 1000 [ 457.527242][T15899] hsr0 speed is unknown, defaulting to 1000 [ 457.530693][ T5182] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 457.543628][ T5182] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 457.552009][ T5182] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 457.560561][ T5182] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 457.568546][ T5182] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 457.644915][T15901] syzkaller0 speed is unknown, defaulting to 1000 [ 457.656593][T15901] hsr0 speed is unknown, defaulting to 1000 [ 457.829007][T15899] chnl_net:caif_netlink_parms(): no params data found [ 458.016939][T15899] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.029687][T15899] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.046787][T15899] bridge_slave_0: entered allmulticast mode [ 458.059064][T15899] bridge_slave_0: entered promiscuous mode [ 458.075551][T15901] chnl_net:caif_netlink_parms(): no params data found [ 458.090692][T15899] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.111247][T15899] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.118632][T15899] bridge_slave_1: entered allmulticast mode [ 458.128628][T15899] bridge_slave_1: entered promiscuous mode [ 458.245960][T15899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.276911][T15899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.463783][T15901] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.481395][T15901] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.488808][T15901] bridge_slave_0: entered allmulticast mode [ 458.498861][ T5182] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 458.510636][T15901] bridge_slave_0: entered promiscuous mode [ 458.516761][ T5182] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 458.521642][T15899] team0: Port device team_slave_0 added [ 458.529942][ T5182] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 458.532640][T15901] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.545807][T15901] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.553536][T15901] bridge_slave_1: entered allmulticast mode [ 458.553717][ T5182] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 458.562152][T15901] bridge_slave_1: entered promiscuous mode [ 458.573521][ T5182] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 458.577035][T15899] team0: Port device team_slave_1 added [ 458.676031][T15899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.683569][T15899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.709936][T15899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.726449][T15901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.752047][T15901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.763660][T15899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.770642][T15899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.797301][T15899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.868422][T15901] team0: Port device team_slave_0 added [ 458.878759][T15901] team0: Port device team_slave_1 added [ 458.888730][T15916] syzkaller0 speed is unknown, defaulting to 1000 [ 458.924144][T15916] hsr0 speed is unknown, defaulting to 1000 [ 458.968531][T15901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.975993][T15901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.003186][T15901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.023981][T15899] hsr_slave_0: entered promiscuous mode [ 459.030613][T15899] hsr_slave_1: entered promiscuous mode [ 459.037398][T15899] debugfs: 'hsr0' already exists in 'hsr' [ 459.043260][T15899] Cannot create hsr debugfs directory [ 459.063924][T15901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.071257][T15901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.098025][T15901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.411803][T15901] hsr_slave_0: entered promiscuous mode [ 459.422013][T15901] hsr_slave_1: entered promiscuous mode [ 459.441188][T15901] debugfs: 'hsr0' already exists in 'hsr' [ 459.446986][T15901] Cannot create hsr debugfs directory [ 459.541939][ T5871] Bluetooth: hci15: command tx timeout [ 459.621196][ T5871] Bluetooth: hci16: command tx timeout [ 459.684170][ T5182] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 459.706082][ T5182] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 459.714987][ T5182] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 459.724655][ T5182] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 459.747453][ T5182] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 459.878624][ T5871] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 459.891611][ T5871] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 459.899921][ T5871] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 459.909480][ T5871] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 459.921549][ T5871] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 460.066909][T15921] syzkaller0 speed is unknown, defaulting to 1000 [ 460.107240][T15916] chnl_net:caif_netlink_parms(): no params data found [ 460.139524][T15921] hsr0 speed is unknown, defaulting to 1000 [ 460.285146][T15924] syzkaller0 speed is unknown, defaulting to 1000 [ 460.316328][T15924] hsr0 speed is unknown, defaulting to 1000 [ 460.316579][T15916] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.330861][T15916] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.338729][T15916] bridge_slave_0: entered allmulticast mode [ 460.347044][T15916] bridge_slave_0: entered promiscuous mode [ 460.386812][T15916] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.394294][T15916] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.404653][T15916] bridge_slave_1: entered allmulticast mode [ 460.415155][T15916] bridge_slave_1: entered promiscuous mode [ 460.495656][T15916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.530260][T15916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.647731][T15916] team0: Port device team_slave_0 added [ 460.662177][ T5182] Bluetooth: hci17: command tx timeout [ 460.675555][T15916] team0: Port device team_slave_1 added [ 460.814550][T15916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.822653][T15916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.849175][T15916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.869081][T15916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.876549][T15916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.903665][T15916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.974875][T15921] chnl_net:caif_netlink_parms(): no params data found [ 461.128245][T15916] hsr_slave_0: entered promiscuous mode [ 461.135772][T15916] hsr_slave_1: entered promiscuous mode [ 461.143326][T15916] debugfs: 'hsr0' already exists in 'hsr' [ 461.149100][T15916] Cannot create hsr debugfs directory [ 461.439510][T15924] chnl_net:caif_netlink_parms(): no params data found [ 461.455071][T15921] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.468121][T15921] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.475888][T15921] bridge_slave_0: entered allmulticast mode [ 461.484651][T15921] bridge_slave_0: entered promiscuous mode [ 461.517286][T15921] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.525894][T15921] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.533555][T15921] bridge_slave_1: entered allmulticast mode [ 461.541890][T15921] bridge_slave_1: entered promiscuous mode [ 461.621261][ T51] Bluetooth: hci15: command tx timeout [ 461.673263][T15921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.701542][ T51] Bluetooth: hci16: command tx timeout [ 461.735250][T15921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.781313][ T51] Bluetooth: hci18: command tx timeout [ 461.814706][T15924] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.822866][T15924] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.830253][T15924] bridge_slave_0: entered allmulticast mode [ 461.838940][T15924] bridge_slave_0: entered promiscuous mode [ 461.879454][T15921] team0: Port device team_slave_0 added [ 461.886515][T15924] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.894219][T15924] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.902486][T15924] bridge_slave_1: entered allmulticast mode [ 461.910027][T15924] bridge_slave_1: entered promiscuous mode [ 461.941291][ T51] Bluetooth: hci19: command tx timeout [ 461.955363][T15921] team0: Port device team_slave_1 added [ 462.039635][T15924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.069230][T15921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.076348][T15921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.103118][T15921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.118213][T15924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.140441][T15921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.148762][T15921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.180561][T15921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.259241][T15924] team0: Port device team_slave_0 added [ 462.269590][T15924] team0: Port device team_slave_1 added [ 462.370055][T15921] hsr_slave_0: entered promiscuous mode [ 462.377623][T15921] hsr_slave_1: entered promiscuous mode [ 462.385085][T15921] debugfs: 'hsr0' already exists in 'hsr' [ 462.390849][T15921] Cannot create hsr debugfs directory [ 462.457148][T15924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.464768][T15924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.492282][T15924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.505714][T15924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.512892][T15924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.539877][T15924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.693651][T15924] hsr_slave_0: entered promiscuous mode [ 462.700617][T15924] hsr_slave_1: entered promiscuous mode [ 462.708688][T15924] debugfs: 'hsr0' already exists in 'hsr' [ 462.715075][T15924] Cannot create hsr debugfs directory [ 462.741132][ T51] Bluetooth: hci17: command tx timeout [ 462.824526][ T51] Bluetooth: hci9: command 0x0406 tx timeout [ 462.830679][ T51] Bluetooth: hci8: command 0x0406 tx timeout [ 462.833316][T15933] Bluetooth: hci6: command 0x0406 tx timeout [ 462.841022][ T51] Bluetooth: hci7: command 0x0406 tx timeout [ 462.844458][T15933] Bluetooth: hci5: command 0x0406 tx timeout [ 463.701248][ T5182] Bluetooth: hci15: command tx timeout [ 463.791979][ T5182] Bluetooth: hci16: command tx timeout [ 463.861536][ T5182] Bluetooth: hci18: command tx timeout [ 464.021292][ T5182] Bluetooth: hci19: command tx timeout [ 464.831172][ T5182] Bluetooth: hci17: command tx timeout [ 465.781330][ T5182] Bluetooth: hci15: command tx timeout [ 465.861937][ T5182] Bluetooth: hci16: command tx timeout [ 465.941247][ T5182] Bluetooth: hci18: command tx timeout [ 466.101960][ T5182] Bluetooth: hci19: command tx timeout [ 466.901143][ T5182] Bluetooth: hci17: command tx timeout [ 468.021099][ T5182] Bluetooth: hci18: command tx timeout [ 468.181466][ T5182] Bluetooth: hci19: command tx timeout [ 471.621691][ T31] INFO: task syz.0.2643:15747 blocked for more than 143 seconds. [ 471.629482][ T31] Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 [ 471.636972][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.646666][ T31] task:syz.0.2643 state:D stack:25992 pid:15747 tgid:15746 ppid:5859 task_flags:0x480140 flags:0x00004004 [ 471.660773][ T31] Call Trace: [ 471.664421][ T31] [ 471.667504][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 471.672458][ T31] ? __lock_acquire+0xab9/0xd20 [ 471.680958][ T31] ? __lock_acquire+0xab9/0xd20 [ 471.685919][ T31] ? __pfx___schedule+0x10/0x10 [ 471.691044][ T31] ? schedule+0x91/0x360 [ 471.695338][ T31] schedule+0x165/0x360 [ 471.699538][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 471.731417][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 471.737593][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 471.766077][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 471.772310][ T31] queue_limits_commit_update_frozen+0x5e/0x360 [ 471.778603][ T31] ? nbd_set_size+0x2ab/0x6a0 [ 471.800972][ T31] nbd_set_size+0x47e/0x6a0 [ 471.805575][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 471.810670][ T31] ? nla_memcpy+0x5b/0xc0 [ 471.815640][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 471.820653][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 471.830984][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 471.837051][ T31] ? bpf_lsm_capable+0x9/0x20 [ 471.842148][ T31] ? security_capable+0x7e/0x2e0 [ 471.847134][ T31] ? radix_tree_lookup+0x240/0x290 [ 471.853734][ T31] nbd_genl_reconfigure+0x409/0x1870 [ 471.859103][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 471.865314][ T31] ? __nla_parse+0x40/0x60 [ 471.869793][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 471.876346][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 471.883008][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 471.889166][ T31] ? stack_trace_save+0x9c/0xe0 [ 471.894159][ T31] genl_rcv_msg+0x60e/0x790 [ 471.898719][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.903835][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 471.909583][ T31] netlink_rcv_skb+0x205/0x470 [ 471.914561][ T31] ? __lock_acquire+0xab9/0xd20 [ 471.919455][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.924584][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 471.929934][ T31] ? down_read+0x1ad/0x2e0 [ 471.934784][ T31] genl_rcv+0x28/0x40 [ 471.938827][ T31] netlink_unicast+0x82c/0x9e0 [ 471.943857][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 471.949263][ T31] ? netlink_sendmsg+0x642/0xb30 [ 471.954610][ T31] netlink_sendmsg+0x805/0xb30 [ 471.959444][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.964839][ T31] ? __lock_acquire+0xab9/0xd20 [ 471.969723][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 471.974829][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 471.980147][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.985526][ T31] __sock_sendmsg+0x21c/0x270 [ 471.990253][ T31] ____sys_sendmsg+0x505/0x830 [ 471.995224][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 472.000557][ T31] ? import_iovec+0x74/0xa0 [ 472.005182][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 472.009916][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 472.015268][ T31] ? __fget_files+0x2a/0x420 [ 472.019969][ T31] ? __fget_files+0x3a0/0x420 [ 472.024893][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 472.029888][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 472.035532][ T31] ? rcu_is_watching+0x15/0xb0 [ 472.040337][ T31] ? do_syscall_64+0xbe/0x3b0 [ 472.045252][ T31] do_syscall_64+0xfa/0x3b0 [ 472.049793][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.055322][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.061577][ T31] ? clear_bhb_loop+0x60/0xb0 [ 472.066294][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.072344][ T31] RIP: 0033:0x7f4ea738ebe9 [ 472.076792][ T31] RSP: 002b:00007f4ea826d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 472.085378][ T31] RAX: ffffffffffffffda RBX: 00007f4ea75b5fa0 RCX: 00007f4ea738ebe9 [ 472.093459][ T31] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 472.101828][ T31] RBP: 00007f4ea7411e19 R08: 0000000000000000 R09: 0000000000000000 [ 472.109837][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.118372][ T31] R13: 00007f4ea75b6038 R14: 00007f4ea75b5fa0 R15: 00007ffffc735428 [ 472.126480][ T31] [ 472.129544][ T31] INFO: task syz.0.2643:15752 blocked for more than 143 seconds. [ 472.137557][ T31] Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 [ 472.144997][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.153911][ T31] task:syz.0.2643 state:D stack:25896 pid:15752 tgid:15746 ppid:5859 task_flags:0x400140 flags:0x00004004 [ 472.166234][ T31] Call Trace: [ 472.169543][ T31] [ 472.172612][ T31] __schedule+0x1798/0x4cc0 [ 472.177174][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.183668][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.188580][ T31] ? __pfx___schedule+0x10/0x10 [ 472.193560][ T31] ? schedule+0x91/0x360 [ 472.197846][ T31] schedule+0x165/0x360 [ 472.202313][ T31] schedule_preempt_disabled+0x13/0x30 [ 472.207815][ T31] __mutex_lock+0x7e6/0x1360 [ 472.212578][ T31] ? __mutex_lock+0x5b6/0x1360 [ 472.217402][ T31] ? genl_rcv_msg+0x10d/0x790 [ 472.222200][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 472.227257][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 472.232492][ T31] ? radix_tree_lookup+0x240/0x290 [ 472.237638][ T31] genl_rcv_msg+0x10d/0x790 [ 472.242231][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 472.247287][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 472.252477][ T31] ? __asan_memcpy+0x40/0x70 [ 472.257100][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 472.263011][ T31] netlink_rcv_skb+0x205/0x470 [ 472.267836][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.272900][T10533] block nbd0: Possible stuck request ffff888024d97000: control (read@0,4096B). Runtime 330 seconds [ 472.272914][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 472.272946][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 472.294152][ T31] ? down_read+0x1ad/0x2e0 [ 472.298657][ T31] genl_rcv+0x28/0x40 [ 472.302767][ T31] netlink_unicast+0x82c/0x9e0 [ 472.307596][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 472.313046][ T31] ? netlink_sendmsg+0x642/0xb30 [ 472.318031][ T31] ? skb_put+0x11b/0x210 [ 472.322372][ T31] netlink_sendmsg+0x805/0xb30 [ 472.327173][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.332669][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 472.337653][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 472.343340][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.348669][ T31] __sock_sendmsg+0x21c/0x270 [ 472.353564][ T31] __sys_sendto+0x3bd/0x520 [ 472.358135][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 472.363415][ T31] ? fd_install+0x97/0x540 [ 472.367962][ T31] ? fd_install+0x30d/0x540 [ 472.372720][ T31] __x64_sys_sendto+0xde/0x100 [ 472.377529][ T31] do_syscall_64+0xfa/0x3b0 [ 472.382239][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.387482][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.393735][ T31] ? clear_bhb_loop+0x60/0xb0 [ 472.398449][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.404442][ T31] RIP: 0033:0x7f4ea7390a7c [ 472.408884][ T31] RSP: 002b:00007f4ea824ae90 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 472.417418][ T31] RAX: ffffffffffffffda RBX: 00007f4ea824afa0 RCX: 00007f4ea7390a7c [ 472.425806][ T31] RDX: 0000000000000028 RSI: 00007f4ea824aff0 RDI: 0000000000000008 [ 472.433859][ T31] RBP: 0000000000000000 R08: 00007f4ea824aee4 R09: 000000000000000c [ 472.442025][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 472.450022][ T31] R13: 00007f4ea824af38 R14: 00007f4ea824aff0 R15: 0000000000000000 [ 472.458202][ T31] [ 472.461332][ T31] INFO: task syz.1.2647:15758 blocked for more than 144 seconds. [ 472.469072][ T31] Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 [ 472.476616][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.485491][ T31] task:syz.1.2647 state:D stack:26920 pid:15758 tgid:15756 ppid:5872 task_flags:0x400140 flags:0x00004004 [ 472.497711][ T31] Call Trace: [ 472.501932][ T31] [ 472.504917][ T31] __schedule+0x1798/0x4cc0 [ 472.509576][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.514702][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.519593][ T31] ? __pfx___schedule+0x10/0x10 [ 472.524593][ T31] ? schedule+0x91/0x360 [ 472.528851][ T31] schedule+0x165/0x360 [ 472.533170][ T31] schedule_preempt_disabled+0x13/0x30 [ 472.538663][ T31] __mutex_lock+0x7e6/0x1360 [ 472.543424][ T31] ? __mutex_lock+0x5b6/0x1360 [ 472.548330][ T31] ? genl_rcv_msg+0x10d/0x790 [ 472.553112][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 472.558173][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 472.563461][ T31] ? radix_tree_lookup+0x240/0x290 [ 472.568649][ T31] genl_rcv_msg+0x10d/0x790 [ 472.573407][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 472.578468][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 472.583813][ T31] ? __asan_memcpy+0x40/0x70 [ 472.588456][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 472.594032][ T31] netlink_rcv_skb+0x205/0x470 [ 472.598832][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.603872][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 472.608939][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 472.614371][ T31] ? down_read+0x1ad/0x2e0 [ 472.618815][ T31] genl_rcv+0x28/0x40 [ 472.622950][ T31] netlink_unicast+0x82c/0x9e0 [ 472.627746][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 472.633268][ T31] ? netlink_sendmsg+0x642/0xb30 [ 472.638243][ T31] ? skb_put+0x11b/0x210 [ 472.642589][ T31] netlink_sendmsg+0x805/0xb30 [ 472.647388][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.652813][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 472.657783][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 472.669168][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.674566][ T31] __sock_sendmsg+0x21c/0x270 [ 472.679280][ T31] __sys_sendto+0x3bd/0x520 [ 472.683894][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 472.688960][ T31] ? count_memcg_event_mm+0x21/0x260 [ 472.694434][ T31] ? exc_page_fault+0x76/0xf0 [ 472.699164][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 472.704694][ T31] __x64_sys_sendto+0xde/0x100 [ 472.709507][ T31] do_syscall_64+0xfa/0x3b0 [ 472.714163][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.719396][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.725593][ T31] ? clear_bhb_loop+0x60/0xb0 [ 472.730295][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.736272][ T31] RIP: 0033:0x7f3614990a7c [ 472.740801][ T31] RSP: 002b:00007f3615710ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 472.749364][ T31] RAX: ffffffffffffffda RBX: 00007f3615710fc0 RCX: 00007f3614990a7c [ 472.757583][ T31] RDX: 0000000000000020 RSI: 00007f3615711010 RDI: 0000000000000004 [ 472.768441][ T31] RBP: 0000000000000000 R08: 00007f3615710f14 R09: 000000000000000c [ 472.779335][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 472.787649][ T31] R13: 00007f3615710f68 R14: 00007f3615711010 R15: 0000000000000000 [ 472.796325][ T31] [ 472.799486][ T31] INFO: task syz.3.2649:15764 blocked for more than 144 seconds. [ 472.807989][ T31] Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 [ 472.815553][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.824905][ T31] task:syz.3.2649 state:D stack:25928 pid:15764 tgid:15763 ppid:5866 task_flags:0x400140 flags:0x00004004 [ 472.837474][ T31] Call Trace: [ 472.840790][ T31] [ 472.844222][ T31] __schedule+0x1798/0x4cc0 [ 472.849166][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.854284][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.859265][ T31] ? __pfx___schedule+0x10/0x10 [ 472.864718][ T31] ? schedule+0x91/0x360 [ 472.869012][ T31] schedule+0x165/0x360 [ 472.873411][ T31] schedule_preempt_disabled+0x13/0x30 [ 472.879898][ T31] __mutex_lock+0x7e6/0x1360 [ 472.884655][ T31] ? __mutex_lock+0x5b6/0x1360 [ 472.889466][ T31] ? genl_rcv_msg+0x10d/0x790 [ 472.894841][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 472.899925][ T31] ? stack_trace_save+0x9c/0xe0 [ 472.905489][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 472.911303][ T31] ? radix_tree_lookup+0x240/0x290 [ 472.916457][ T31] genl_rcv_msg+0x10d/0x790 [ 472.921421][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.926332][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 472.931626][ T31] netlink_rcv_skb+0x205/0x470 [ 472.936427][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.941437][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 472.946497][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 472.952427][ T31] ? down_read+0x1ad/0x2e0 [ 472.956973][ T31] genl_rcv+0x28/0x40 [ 472.961093][ T31] netlink_unicast+0x82c/0x9e0 [ 472.965909][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 472.971481][ T31] ? netlink_sendmsg+0x642/0xb30 [ 472.976462][ T31] ? skb_put+0x11b/0x210 [ 472.982128][ T31] netlink_sendmsg+0x805/0xb30 [ 472.986966][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 472.992684][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 472.997686][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 473.003326][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.008660][ T31] __sock_sendmsg+0x21c/0x270 [ 473.013463][ T31] __sys_sendto+0x3bd/0x520 [ 473.018029][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 473.023254][ T31] ? count_memcg_event_mm+0x21/0x260 [ 473.028594][ T31] ? exc_page_fault+0x76/0xf0 [ 473.033487][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 473.038830][ T31] __x64_sys_sendto+0xde/0x100 [ 473.043790][ T31] do_syscall_64+0xfa/0x3b0 [ 473.048347][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.054645][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.060761][ T31] ? clear_bhb_loop+0x60/0xb0 [ 473.065813][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.071913][ T31] RIP: 0033:0x7f30a7190a7c [ 473.076361][ T31] RSP: 002b:00007f30a8045ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 473.086035][ T31] RAX: ffffffffffffffda RBX: 00007f30a8045fc0 RCX: 00007f30a7190a7c [ 473.094373][ T31] RDX: 000000000000001c RSI: 00007f30a8046010 RDI: 0000000000000005 [ 473.102543][ T31] RBP: 0000000000000000 R08: 00007f30a8045f14 R09: 000000000000000c [ 473.110554][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 473.119113][ T31] R13: 00007f30a8045f68 R14: 00007f30a8046010 R15: 0000000000000000 [ 473.127311][ T31] [ 473.130421][ T31] INFO: task syz.3.2649:15767 blocked for more than 144 seconds. [ 473.138634][ T31] Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 [ 473.147078][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.156048][ T31] task:syz.3.2649 state:D stack:26920 pid:15767 tgid:15763 ppid:5866 task_flags:0x400040 flags:0x00004004 [ 473.168123][ T31] Call Trace: [ 473.172009][ T31] [ 473.174987][ T31] __schedule+0x1798/0x4cc0 [ 473.179540][ T31] ? __lock_acquire+0xab9/0xd20 [ 473.185516][ T31] ? __lock_acquire+0xab9/0xd20 [ 473.190421][ T31] ? __pfx___schedule+0x10/0x10 [ 473.195555][ T31] ? schedule+0x91/0x360 [ 473.199842][ T31] schedule+0x165/0x360 [ 473.204518][ T31] schedule_preempt_disabled+0x13/0x30 [ 473.210014][ T31] __mutex_lock+0x7e6/0x1360 [ 473.214906][ T31] ? __mutex_lock+0x5b6/0x1360 [ 473.219734][ T31] ? genl_rcv_msg+0x10d/0x790 [ 473.224934][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 473.230009][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 473.235733][ T31] ? radix_tree_lookup+0x240/0x290 [ 473.241237][ T31] genl_rcv_msg+0x10d/0x790 [ 473.245788][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 473.250836][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 473.255966][ T31] ? __asan_memcpy+0x40/0x70 [ 473.260597][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 473.266648][ T31] netlink_rcv_skb+0x205/0x470 [ 473.271568][ T31] ? __lock_acquire+0xab9/0xd20 [ 473.276462][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 473.281725][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 473.288095][ T31] ? down_read+0x1ad/0x2e0 [ 473.293132][ T31] genl_rcv+0x28/0x40 [ 473.297342][ T31] netlink_unicast+0x82c/0x9e0 [ 473.302557][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 473.307891][ T31] ? netlink_sendmsg+0x642/0xb30 [ 473.313023][ T31] ? skb_put+0x11b/0x210 [ 473.317316][ T31] netlink_sendmsg+0x805/0xb30 [ 473.322707][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.328044][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 473.333206][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 473.338534][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.344059][ T31] __sock_sendmsg+0x21c/0x270 [ 473.348807][ T31] __sys_sendto+0x3bd/0x520 [ 473.354186][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 473.359324][ T31] ? rcu_is_watching+0x15/0xb0 [ 473.364352][ T31] __x64_sys_sendto+0xde/0x100 [ 473.369175][ T31] do_syscall_64+0xfa/0x3b0 [ 473.374011][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.379254][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.386024][ T31] ? clear_bhb_loop+0x60/0xb0 [ 473.392001][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.397943][ T31] RIP: 0033:0x7f30a7190a7c [ 473.402630][ T31] RSP: 002b:00007f30a8024ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 473.411508][ T31] RAX: ffffffffffffffda RBX: 00007f30a8024fc0 RCX: 00007f30a7190a7c [ 473.419501][ T31] RDX: 0000000000000020 RSI: 00007f30a8025010 RDI: 0000000000000006 [ 473.427714][ T31] RBP: 0000000000000000 R08: 00007f30a8024f14 R09: 000000000000000c [ 473.435845][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 473.444355][ T31] R13: 00007f30a8024f68 R14: 00007f30a8025010 R15: 0000000000000000 [ 473.452510][ T31] [ 473.455618][ T31] INFO: task syz.4.2651:15769 blocked for more than 145 seconds. [ 473.464264][ T31] Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 [ 473.472060][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.480777][ T31] task:syz.4.2651 state:D stack:27080 pid:15769 tgid:15768 ppid:5878 task_flags:0x400140 flags:0x00004004 [ 473.493809][ T31] Call Trace: [ 473.497134][ T31] [ 473.500114][ T31] __schedule+0x1798/0x4cc0 [ 473.505202][ T31] ? __lock_acquire+0xab9/0xd20 [ 473.510107][ T31] ? __lock_acquire+0xab9/0xd20 [ 473.515209][ T31] ? __pfx___schedule+0x10/0x10 [ 473.520117][ T31] ? schedule+0x91/0x360 [ 473.524482][ T31] schedule+0x165/0x360 [ 473.528676][ T31] schedule_preempt_disabled+0x13/0x30 [ 473.534740][ T31] __mutex_lock+0x7e6/0x1360 [ 473.539380][ T31] ? __mutex_lock+0x5b6/0x1360 [ 473.544615][ T31] ? genl_rcv_msg+0x10d/0x790 [ 473.549355][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 473.554627][ T31] ? __dev_queue_xmit+0x27b/0x3b50 [ 473.559784][ T31] ? radix_tree_lookup+0x240/0x290 [ 473.565344][ T31] genl_rcv_msg+0x10d/0x790 [ 473.569905][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 473.575421][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 473.580519][ T31] ? __asan_memcpy+0x40/0x70 [ 473.585292][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 473.590715][ T31] netlink_rcv_skb+0x205/0x470 [ 473.596972][ T31] ? __lock_acquire+0xab9/0xd20 [ 473.601939][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 473.606995][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 473.612596][ T31] ? down_read+0x1ad/0x2e0 [ 473.617062][ T31] genl_rcv+0x28/0x40 [ 473.622992][ T31] netlink_unicast+0x82c/0x9e0 [ 473.627823][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 473.633362][ T31] ? netlink_sendmsg+0x642/0xb30 [ 473.638330][ T31] ? skb_put+0x11b/0x210 [ 473.642797][ T31] netlink_sendmsg+0x805/0xb30 [ 473.647611][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.653474][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 473.658468][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 473.664124][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.669454][ T31] __sock_sendmsg+0x21c/0x270 [ 473.674234][ T31] __sys_sendto+0x3bd/0x520 [ 473.678771][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 473.683940][ T31] ? count_memcg_event_mm+0x21/0x260 [ 473.689306][ T31] ? exc_page_fault+0x76/0xf0 [ 473.694262][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 473.700105][ T31] __x64_sys_sendto+0xde/0x100 [ 473.708824][ T31] do_syscall_64+0xfa/0x3b0 [ 473.714535][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.719778][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.726409][ T31] ? clear_bhb_loop+0x60/0xb0 [ 473.731311][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.737314][ T31] RIP: 0033:0x7f724e990a7c [ 473.742272][ T31] RSP: 002b:00007f724f8cdec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 473.750804][ T31] RAX: ffffffffffffffda RBX: 00007f724f8cdfc0 RCX: 00007f724e990a7c [ 473.758962][ T31] RDX: 0000000000000020 RSI: 00007f724f8ce010 RDI: 0000000000000004 [ 473.767162][ T31] RBP: 0000000000000000 R08: 00007f724f8cdf14 R09: 000000000000000c [ 473.775665][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 473.783976][ T31] R13: 00007f724f8cdf68 R14: 00007f724f8ce010 R15: 0000000000000000 [ 473.792420][ T31] [ 473.795524][ T31] INFO: task syz.2.2656:15783 blocked for more than 145 seconds. [ 473.804870][ T31] Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 [ 473.812656][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 473.822186][ T31] task:syz.2.2656 state:D stack:25288 pid:15783 tgid:15782 ppid:5863 task_flags:0x400040 flags:0x00004004 [ 473.835035][ T31] Call Trace: [ 473.838347][ T31] [ 473.841427][ T31] __schedule+0x1798/0x4cc0 [ 473.845986][ T31] ? __lock_acquire+0xab9/0xd20 [ 473.851082][ T31] ? __lock_acquire+0xab9/0xd20 [ 473.855987][ T31] ? __pfx___schedule+0x10/0x10 [ 473.861400][ T31] ? schedule+0x91/0x360 [ 473.865753][ T31] schedule+0x165/0x360 [ 473.869938][ T31] schedule_preempt_disabled+0x13/0x30 [ 473.875582][ T31] __mutex_lock+0x7e6/0x1360 [ 473.880243][ T31] ? __mutex_lock+0x5b6/0x1360 [ 473.885172][ T31] ? genl_rcv_msg+0x10d/0x790 [ 473.889883][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 473.895481][ T31] ? stack_trace_save+0x9c/0xe0 [ 473.901454][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 473.906873][ T31] ? radix_tree_lookup+0x240/0x290 [ 473.912298][ T31] genl_rcv_msg+0x10d/0x790 [ 473.916932][ T31] ? __lock_acquire+0xab9/0xd20 [ 473.922313][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 473.927396][ T31] netlink_rcv_skb+0x205/0x470 [ 473.932383][ T31] ? __lock_acquire+0xab9/0xd20 [ 473.937275][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 473.942612][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 473.947958][ T31] ? down_read+0x1ad/0x2e0 [ 473.952906][ T31] genl_rcv+0x28/0x40 [ 473.956931][ T31] netlink_unicast+0x82c/0x9e0 [ 473.961866][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 473.967211][ T31] ? netlink_sendmsg+0x642/0xb30 [ 473.972424][ T31] ? skb_put+0x11b/0x210 [ 473.976721][ T31] netlink_sendmsg+0x805/0xb30 [ 473.982772][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.988211][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 473.993580][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 473.998901][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.004430][ T31] __sock_sendmsg+0x21c/0x270 [ 474.009146][ T31] __sys_sendto+0x3bd/0x520 [ 474.013752][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 474.018816][ T31] ? count_memcg_event_mm+0x21/0x260 [ 474.024561][ T31] ? exc_page_fault+0x76/0xf0 [ 474.029289][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 474.034689][ T31] __x64_sys_sendto+0xde/0x100 [ 474.039470][ T31] do_syscall_64+0xfa/0x3b0 [ 474.044129][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.049357][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.055994][ T31] ? clear_bhb_loop+0x60/0xb0 [ 474.060826][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.067426][ T31] RIP: 0033:0x7f6d2ef90a7c [ 474.072352][ T31] RSP: 002b:00007f6d2fec1ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 474.080794][ T31] RAX: ffffffffffffffda RBX: 00007f6d2fec1fc0 RCX: 00007f6d2ef90a7c [ 474.088958][ T31] RDX: 0000000000000020 RSI: 00007f6d2fec2010 RDI: 0000000000000006 [ 474.097113][ T31] RBP: 0000000000000000 R08: 00007f6d2fec1f14 R09: 000000000000000c [ 474.106638][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 474.114795][ T31] R13: 00007f6d2fec1f68 R14: 00007f6d2fec2010 R15: 0000000000000000 [ 474.123241][ T31] [ 474.126341][ T31] INFO: task syz.2.2656:15784 blocked for more than 145 seconds. [ 474.134650][ T31] Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 [ 474.142313][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 474.151168][ T31] task:syz.2.2656 state:D stack:27880 pid:15784 tgid:15782 ppid:5863 task_flags:0x400040 flags:0x00004004 [ 474.164012][ T31] Call Trace: [ 474.167336][ T31] [ 474.170294][ T31] __schedule+0x1798/0x4cc0 [ 474.174988][ T31] ? __lock_acquire+0xab9/0xd20 [ 474.179886][ T31] ? __lock_acquire+0xab9/0xd20 [ 474.185281][ T31] ? __pfx___schedule+0x10/0x10 [ 474.190215][ T31] ? schedule+0x91/0x360 [ 474.194967][ T31] schedule+0x165/0x360 [ 474.199171][ T31] schedule_preempt_disabled+0x13/0x30 [ 474.204818][ T31] __mutex_lock+0x7e6/0x1360 [ 474.210073][ T31] ? __mutex_lock+0x5b6/0x1360 [ 474.215037][ T31] ? genl_rcv_msg+0x10d/0x790 [ 474.219768][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 474.225498][ T31] ? stack_trace_save+0x9c/0xe0 [ 474.230399][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 474.236176][ T31] ? radix_tree_lookup+0x240/0x290 [ 474.241471][ T31] genl_rcv_msg+0x10d/0x790 [ 474.246098][ T31] ? __lock_acquire+0xab9/0xd20 [ 474.251487][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 474.256569][ T31] netlink_rcv_skb+0x205/0x470 [ 474.261605][ T31] ? __lock_acquire+0xab9/0xd20 [ 474.266511][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 474.271670][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 474.277019][ T31] ? down_read+0x1ad/0x2e0 [ 474.281947][ T31] genl_rcv+0x28/0x40 [ 474.285975][ T31] netlink_unicast+0x82c/0x9e0 [ 474.290808][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 474.296258][ T31] ? netlink_sendmsg+0x642/0xb30 [ 474.301411][ T31] ? skb_put+0x11b/0x210 [ 474.305787][ T31] netlink_sendmsg+0x805/0xb30 [ 474.311252][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.316604][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 474.322147][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 474.327561][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.333017][ T31] __sock_sendmsg+0x21c/0x270 [ 474.337735][ T31] __sys_sendto+0x3bd/0x520 [ 474.342811][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 474.347888][ T31] ? count_memcg_event_mm+0x21/0x260 [ 474.353697][ T31] ? exc_page_fault+0x76/0xf0 [ 474.358417][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 474.363912][ T31] __x64_sys_sendto+0xde/0x100 [ 474.368712][ T31] do_syscall_64+0xfa/0x3b0 [ 474.373440][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.378685][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.385308][ T31] ? clear_bhb_loop+0x60/0xb0 [ 474.390022][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.396078][ T31] RIP: 0033:0x7f6d2ef90a7c [ 474.400539][ T31] RSP: 002b:00007f6d2fea0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 474.409140][ T31] RAX: ffffffffffffffda RBX: 00007f6d2fea0fc0 RCX: 00007f6d2ef90a7c [ 474.418115][ T31] RDX: 0000000000000020 RSI: 00007f6d2fea1010 RDI: 0000000000000007 [ 474.426339][ T31] RBP: 0000000000000000 R08: 00007f6d2fea0f14 R09: 000000000000000c [ 474.434477][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 474.443034][ T31] R13: 00007f6d2fea0f68 R14: 00007f6d2fea1010 R15: 0000000000000000 [ 474.451425][ T31] [ 474.454570][ T31] [ 474.454570][ T31] Showing all locks held in the system: [ 474.462493][ T31] 1 lock held by khungtaskd/31: [ 474.467382][ T31] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 474.477735][ T31] 2 locks held by getty/5622: [ 474.482629][ T31] #0: ffff88814e4260a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 474.492507][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 474.503538][ T31] 1 lock held by udevd/5910: [ 474.508207][ T31] #0: ffff88802465f358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 474.518396][ T31] 1 lock held by udevd/5911: [ 474.523178][ T31] #0: ffff888143f7a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 474.532868][ T31] 2 locks held by kworker/u8:30/12573: [ 474.538359][ T31] 6 locks held by syz.0.2643/15747: [ 474.543759][ T31] #0: ffffffff8f599f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 474.552161][ T31] #1: ffffffff8f599d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 474.561914][ T31] #2: ffff888143f80a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870 [ 474.572391][ T31] #3: ffff888024c15f58 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x292/0x6a0 [ 474.582228][ T31] #4: ffff888024c158f8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360 [ 474.594894][ T31] #5: ffff888024c15930 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360 [ 474.607231][ T31] 2 locks held by syz.0.2643/15752: [ 474.612580][ T31] #0: ffffffff8f599f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 474.621712][ T31] #1: ffffffff8f599d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 474.630748][ T31] 2 locks held by syz.1.2647/15758: [ 474.636593][ T31] #0: ffffffff8f599f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 474.644910][ T31] #1: ffffffff8f599d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 474.654116][ T31] 2 locks held by syz.3.2649/15764: [ 474.659345][ T31] #0: ffffffff8f599f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 474.668182][ T31] #1: ffffffff8f599d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 474.677669][ T31] 2 locks held by syz.3.2649/15767: [ 474.682971][ T31] #0: ffffffff8f599f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 474.691722][ T31] #1: ffffffff8f599d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 474.700747][ T31] 2 locks held by syz.4.2651/15769: [ 474.706083][ T31] #0: ffffffff8f599f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 474.714565][ T31] #1: ffffffff8f599d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 474.724902][ T31] 2 locks held by syz.2.2656/15783: [ 474.730124][ T31] #0: ffffffff8f599f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 474.738555][ T31] #1: ffffffff8f599d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 474.747943][ T31] 2 locks held by syz.2.2656/15784: [ 474.753740][ T31] #0: ffffffff8f599f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 474.762067][ T31] #1: ffffffff8f599d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 474.771260][ T31] 2 locks held by syz-executor/15790: [ 474.776703][ T31] #0: ffffffff8f599f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 474.785655][ T31] #1: ffffffff8f599d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 474.794932][ T31] 2 locks held by syz-executor/15792: [ 474.800327][ T31] #0: ffffffff8f599f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 474.808646][ T31] #1: ffffffff8f599d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 474.818287][ T31] 2 locks held by syz-executor/15809: [ 474.824874][ T31] #0: ffffffff8f599f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 474.834008][ T31] #1: ffffffff8f599d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 474.843146][ T31] 2 locks held by syz-executor/15811: [ 474.848535][ T31] #0: ffffffff8f599f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 474.857014][ T31] #1: ffffffff8f599d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 474.867121][ T31] 2 locks held by syz-executor/15813: [ 474.873429][ T31] #0: ffffffff8f599f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 474.881781][ T31] #1: ffffffff8f599d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 474.890808][ T31] 2 locks held by syz-executor/15844: [ 474.896619][ T31] #0: ffffffff8f599f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 474.905410][ T31] #1: ffffffff8f599d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 474.914753][ T31] 2 locks held by syz-executor/15846: [ 474.920153][ T31] #0: ffffffff8f599f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 474.929201][ T31] #1: ffffffff8f599d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 474.939277][ T31] 2 locks held by syz-executor/15862: [ 474.944885][ T31] #0: ffffffff8f599f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 474.953335][ T31] #1: ffffffff8f599d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 474.962805][ T31] 2 locks held by syz-executor/15867: [ 474.968199][ T31] #0: ffffffff8f599f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 474.984383][ T31] #1: ffffffff8f599d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 474.994052][ T31] 2 locks held by syz-executor/15869: [ 474.999453][ T31] #0: ffffffff8f599f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 475.008038][ T31] #1: ffffffff8f599d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 475.017249][ T31] 2 locks held by syz-executor/15899: [ 475.023111][ T31] #0: ffffffff8f599f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 475.032751][ T31] #1: ffffffff8f599d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 475.042446][ T31] 2 locks held by syz-executor/15901: [ 475.047854][ T31] #0: ffffffff8f599f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 475.056300][ T31] #1: ffffffff8f599d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 475.065598][ T31] 2 locks held by syz-executor/15916: [ 475.071093][ T31] #0: ffffffff8f599f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 475.079357][ T31] #1: ffffffff8f599d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 475.088498][ T31] 2 locks held by syz-executor/15921: [ 475.094090][ T31] #0: ffffffff8f599f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 475.102457][ T31] #1: ffffffff8f599d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 475.111614][ T31] 2 locks held by syz-executor/15924: [ 475.117008][ T31] #0: ffffffff8f599f70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 475.125489][ T31] #1: ffffffff8f599d88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 475.136268][ T31] 2 locks held by dhcpcd/15946: [ 475.142122][ T31] #0: ffff888052a32258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 475.152913][ T31] #1: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 475.164133][ T31] [ 475.166520][ T31] ============================================= [ 475.166520][ T31] [ 475.175040][ T31] NMI backtrace for cpu 1 [ 475.175068][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 PREEMPT(full) [ 475.175093][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 475.175105][ T31] Call Trace: [ 475.175114][ T31] [ 475.175123][ T31] dump_stack_lvl+0x189/0x250 [ 475.175157][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.175184][ T31] ? __pfx__printk+0x10/0x10 [ 475.175234][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 475.175260][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 475.175285][ T31] ? __pfx__printk+0x10/0x10 [ 475.175320][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 475.175356][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 475.175381][ T31] watchdog+0xf93/0xfe0 [ 475.175417][ T31] ? watchdog+0x1de/0xfe0 [ 475.175452][ T31] kthread+0x70e/0x8a0 [ 475.175483][ T31] ? __pfx_watchdog+0x10/0x10 [ 475.175510][ T31] ? __pfx_kthread+0x10/0x10 [ 475.175539][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 475.175562][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.175585][ T31] ? __pfx_kthread+0x10/0x10 [ 475.175612][ T31] ret_from_fork+0x3fc/0x770 [ 475.175638][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 475.175666][ T31] ? __switch_to_asm+0x39/0x70 [ 475.175693][ T31] ? __switch_to_asm+0x33/0x70 [ 475.175718][ T31] ? __pfx_kthread+0x10/0x10 [ 475.175746][ T31] ret_from_fork_asm+0x1a/0x30 [ 475.175792][ T31] [ 475.175800][ T31] Sending NMI from CPU 1 to CPUs 0: [ 475.328859][ C0] NMI backtrace for cpu 0 [ 475.328877][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 PREEMPT(full) [ 475.328899][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 475.328910][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 475.328936][ C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 67 0f 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 475.328952][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 475.328968][ C0] RAX: c9c682b74147b300 RBX: ffffffff81968308 RCX: c9c682b74147b300 [ 475.328982][ C0] RDX: 0000000000000001 RSI: ffffffff8d9b4924 RDI: ffffffff8be32680 [ 475.329000][ C0] RBP: ffffffff8de07eb8 R08: ffff8880b8632f9b R09: 1ffff110170c65f3 [ 475.329013][ C0] R10: dffffc0000000000 R11: ffffed10170c65f4 R12: ffffffff8fa34730 [ 475.329026][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20 [ 475.329037][ C0] FS: 0000000000000000(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 475.329051][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 475.329063][ C0] CR2: 000055e04e0cc168 CR3: 000000000df36000 CR4: 00000000003526f0 [ 475.329078][ C0] Call Trace: [ 475.329085][ C0] [ 475.329092][ C0] default_idle+0x13/0x20 [ 475.329117][ C0] default_idle_call+0x74/0xb0 [ 475.329142][ C0] do_idle+0x1e8/0x510 [ 475.329163][ C0] ? __pfx_do_idle+0x10/0x10 [ 475.329190][ C0] cpu_startup_entry+0x44/0x60 [ 475.329207][ C0] rest_init+0x2de/0x300 [ 475.329234][ C0] start_kernel+0x3a9/0x410 [ 475.329258][ C0] x86_64_start_reservations+0x24/0x30 [ 475.329284][ C0] x86_64_start_kernel+0x143/0x1c0 [ 475.329309][ C0] common_startup_64+0x13e/0x147 [ 475.329344][ C0] [ 475.330372][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 475.514020][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12126-g4faff70959d5 #0 PREEMPT(full) [ 475.525483][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 475.535549][ T31] Call Trace: [ 475.538834][ T31] [ 475.541777][ T31] dump_stack_lvl+0x99/0x250 [ 475.546387][ T31] ? __asan_memcpy+0x40/0x70 [ 475.550989][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.556198][ T31] ? __pfx__printk+0x10/0x10 [ 475.560820][ T31] vpanic+0x281/0x750 [ 475.564815][ T31] ? __pfx_vpanic+0x10/0x10 [ 475.569327][ T31] ? preempt_schedule+0xae/0xc0 [ 475.574203][ T31] ? preempt_schedule_common+0x83/0xd0 [ 475.579681][ T31] panic+0xb9/0xc0 [ 475.583413][ T31] ? __pfx_panic+0x10/0x10 [ 475.587844][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 475.593248][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 475.599414][ T31] watchdog+0xfd2/0xfe0 [ 475.603601][ T31] ? watchdog+0x1de/0xfe0 [ 475.607949][ T31] kthread+0x70e/0x8a0 [ 475.612042][ T31] ? __pfx_watchdog+0x10/0x10 [ 475.616736][ T31] ? __pfx_kthread+0x10/0x10 [ 475.621350][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 475.626571][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 475.631781][ T31] ? __pfx_kthread+0x10/0x10 [ 475.636390][ T31] ret_from_fork+0x3fc/0x770 [ 475.640995][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 475.646120][ T31] ? __switch_to_asm+0x39/0x70 [ 475.650900][ T31] ? __switch_to_asm+0x33/0x70 [ 475.655714][ T31] ? __pfx_kthread+0x10/0x10 [ 475.660313][ T31] ret_from_fork_asm+0x1a/0x30 [ 475.665106][ T31] [ 475.668466][ T31] Kernel Offset: disabled [ 475.672795][ T31] Rebooting in 86400 seconds..